Edit tour

Windows Analysis Report
https://retif.eu/

Overview

General Information

Sample URL:	https://retif.eu/
Analysis ID:	1541918
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Connects to several IPs in different countries

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4288 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6320 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://retif.eu/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /1/NRJS-1d0ba6a553f566f3ebc?a=1022254446&v=1.269.0&to=ZAEDYkNTChdZBhFZXV1LIFVFWwsKFwYIQx1aCgVTSR0NClwAHQ%3D%3D&rst=23958&ck=0&s=0a22e9c0f88c2259&ref=https://www.retif.eu/&ptid=3fb2640d8e3c92e8&af=err,spa,xhr,stn,ins&ap=1462&be=2835&fe=19418&dc=2506&at=SEYAFAtJGRk%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1729844176934,%22n%22:0,%22f%22:1166,%22dn%22:1170,%22dne%22:1212,%22c%22:1212,%22s%22:1212,%22ce%22:1940,%22rq%22:1941,%22rp%22:2835,%22rpe%22:3652,%22di%22:5213,%22ds%22:5331,%22de%22:5341,%22dc%22:22243,%22l%22:22243,%22le%22:22253%7D,%22navigation%22:%7B%7D%7D&fp=4615&fcp=4615 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://www.retif.euSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.retif.eu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeDate: Fri, 25 Oct 2024 08:16:47 GMTReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-originTrace-Id: e97f61d55bb65f98Vary: Origin,Accept-EncodingX-Content-Type-Options: nosniffX-Frame-Options: DENYX-Permitted-Cross-Domain-Policies: master-onlyX-Xss-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 9672a97668a5842cedcfaee3e743019e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: Klp8PD19nVp8ZJOMgmtdG4bygwT-366gzVcbpQQBgJ-GvhUL2eMfOg==
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closeDate: Fri, 25 Oct 2024 08:17:25 GMTReferrer-Policy: origin-when-cross-origin, strict-origin-when-cross-originTrace-Id: 8c94f4464fd09d95Vary: Origin,Accept-EncodingX-Content-Type-Options: nosniffX-Frame-Options: DENYX-Permitted-Cross-Domain-Policies: master-onlyX-Xss-Protection: 1; mode=blockX-Cache: Error from cloudfrontVia: 1.1 85310f8b6878a9cfaa0218e021ae364e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA56-P7X-Amz-Cf-Id: uroiYbr3FLYvi8O0eweWUcU246JugiGqa9g8rqXNkWYWd_91YTohKA==

Source: chromecache_335.2.dr, chromecache_235.2.dr	String found in binary or memory: http://nickpiscitelli.github.io/Glider.js
Source: chromecache_403.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_400.2.dr	String found in binary or memory: https://ads.eu.criteo.com/ad?fd=CLa3dRDTsBs&width=$
Source: chromecache_449.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/automation/bots/
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/conversations/
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/conversations/routing/
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/engagement
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/engagement/targeted-visitors/
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/internal-graphql
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://api.iadvize.com/social
Source: chromecache_234.2.dr, chromecache_301.2.dr, chromecache_220.2.dr, chromecache_449.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_313.2.dr, chromecache_293.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_close.svg
Source: chromecache_313.2.dr, chromecache_293.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_external_link.svg
Source: chromecache_313.2.dr, chromecache_293.2.dr	String found in binary or memory: https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_445.2.dr, chromecache_452.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_445.2.dr, chromecache_452.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_400.2.dr	String found in binary or memory: https://dsp-paapi-sandbox.bsw-ig.criteo.com/paapi/trade/dsp/api/interest_group_join/bsw-sb-ig-test-1
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://dynamic.criteo.com/js/ld/ld.js?
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/criteo.wasm
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/getvalues
Source: chromecache_363.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/abt/$
Source: chromecache_363.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/abt/worklet
Source: chromecache_363.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/error?pid=0
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/error?pid=9456
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/update?key=RXhkfnxTN2drWW1aQm9oaU01MHArTk5BeTNkNW13Nmk1Z
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/interest-group/update?key=gxHEGnxNRXJSQ3d5Rjd0QUhta3hlenVLWEVvSUpIVTZjM
Source: chromecache_400.2.dr	String found in binary or memory: https://fledge.eu.criteo.com/simplebid?platform=eu
Source: chromecache_369.2.dr, chromecache_438.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_220.2.dr	String found in binary or memory: https://google.com
Source: chromecache_220.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_253.2.dr	String found in binary or memory: https://halc.iadvize.com/
Source: chromecache_335.2.dr, chromecache_235.2.dr	String found in binary or memory: https://nickpiscitelli.com
Source: chromecache_400.2.dr	String found in binary or memory: https://paa-proxy-dsp.bsw-sb.criteo.com/paapi/paa-proxy/dsp/api/interest_group_join/bsw-sb-ig-paa-pr
Source: chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_234.2.dr, chromecache_301.2.dr, chromecache_220.2.dr, chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_458.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_220.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_458.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://static.iadvize.com/
Source: chromecache_301.2.dr, chromecache_449.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_458.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_417.2.dr, chromecache_199.2.dr, chromecache_242.2.dr	String found in binary or memory: https://swiperjs.com
Source: chromecache_313.2.dr, chromecache_293.2.dr	String found in binary or memory: https://tcf.cookiepedia.co.uk
Source: chromecache_234.2.dr, chromecache_301.2.dr, chromecache_220.2.dr, chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_449.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_414.2.dr, chromecache_471.2.dr, chromecache_458.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_220.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_449.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.
Source: chromecache_414.2.dr, chromecache_312.2.dr, chromecache_471.2.dr, chromecache_411.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Source: chromecache_301.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_313.2.dr, chromecache_293.2.dr	String found in binary or memory: https://www.onetrust.com/products/cookie-consent/
Source: chromecache_377.2.dr, chromecache_253.2.dr	String found in binary or memory: https://www.retif.eu/
Source: chromecache_293.2.dr	String found in binary or memory: https://www.retif.eu/politique-cookies/
Source: chromecache_301.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50318
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50320
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 50318 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50078 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@26/456@208/69

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://retif.eu/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4288 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4288 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://swiperjs.com	0%	URL Reputation	safe
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/googleData.json	0%	URL Reputation	safe
https://cdn.cookielaw.org/vendorlist/iab2Data.json	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false	unknown
prod.magentocloud.map.fastly.net	151.101.1.124	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
measurement-api.nl3.vip.prod.criteo.com	178.250.1.24	true	false	unknown
r.casalemedia.com	172.64.151.101	true	false	unknown
rtb-csync-euw1.smartadserver.com	89.149.193.89	true	false	unknown
api.iadvize.com	3.126.238.44	true	false	unknown
cm.g.doubleclick.net	142.250.185.226	true	false	unknown
privacyportal-eu.onetrust.com	104.18.32.137	true	false	unknown
idaas-ext.cph.liveintent.com	3.86.122.147	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	99.81.126.203	true	false	unknown
www.google.com	142.250.185.164	true	false	unknown
static-cdn.hotjar.com	18.66.102.53	true	false	unknown
star-mini.c10r.facebook.com	157.240.247.35	true	false	unknown
match.prod.bidr.io	52.208.46.191	true	false	unknown
nydc1.outbrain.org	70.42.32.255	true	false	unknown
retif.eu	151.101.1.124	true	false	unknown
trends.revcontent.com	52.215.27.238	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
euw-ice.360yield.com	52.214.168.252	true	false	unknown
d2eoz69k2i8ht6.cloudfront.net	108.138.26.88	true	false	unknown
googleads.g.doubleclick.net	142.250.181.226	true	false	unknown
in-ftd-109.nl3.vip.prod.criteo.com	178.250.1.8	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	23.22.188.59	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false	unknown
s.salecycle.com	52.222.249.7	true	false	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
sourcetrap.net	82.202.163.23	true	false	unknown
adgcp.tpmn.co.kr	34.102.166.132	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
t.retif.eu	216.239.32.21	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
contextual.media.net	88.221.168.23	true	false	unknown
scontent.xx.fbcdn.net	157.240.27.27	true	false	unknown
script.hotjar.com	13.33.187.92	true	false	unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false	unknown
fledge.nl3.vip.prod.criteo.com	178.250.1.20	true	false	unknown
tapestry.tapad.com	34.111.113.62	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.213.88.80	true	false	unknown
thrtle.com	44.218.161.108	true	false	unknown
am-vip001.taboola.com	141.226.228.48	true	false	unknown
rtb-csync-euw2.smartadserver.com	5.196.111.73	true	false	unknown
ax-0001.ax-dc-msedge.net	150.171.29.10	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
exchange.mediavine.com	52.29.5.69	true	false	unknown
gum.nl3.vip.prod.criteo.com	178.250.1.11	true	false	unknown
s.ad.smaato.net	13.32.27.65	true	false	unknown
track.effiliation.com	34.102.211.201	true	false	unknown
ib.anycast.adnxs.com	185.89.210.212	true	false	unknown
visitor-fra02.omnitagjs.com	185.255.84.153	true	false	unknown
load-euw1.exelator.com	54.78.254.47	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com	52.31.55.243	true	false	unknown
ads.stickyadstv.com	unknown	unknown	false	unknown
dynamic.criteo.com	unknown	unknown	false	unknown
ad.tpmn.co.kr	unknown	unknown	false	unknown
jadserve.postrelease.com	unknown	unknown	false	unknown
sslwidget.criteo.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
dis.criteo.com	unknown	unknown	false	unknown
widget.us.criteo.com	unknown	unknown	false	unknown
static.criteo.net	unknown	unknown	false	unknown
fledge.eu.criteo.com	unknown	unknown	false	unknown
measurement-api.criteo.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
bam.nr-data.net	unknown	unknown	false	unknown
1f2e7.v.fwmrm.net	unknown	unknown	false	unknown
simage2.pubmatic.com	unknown	unknown	false	unknown
www.retif.eu	unknown	unknown	false	unknown
halc.iadvize.com	unknown	unknown	false	unknown
criteo-partners.tremorhub.com	unknown	unknown	false	unknown
criteo-sync.teads.tv	unknown	unknown	false	unknown
gum.criteo.com	unknown	unknown	false	unknown
rtb-csync.smartadserver.com	unknown	unknown	false	unknown
ad.360yield.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
sync.outbrain.com	unknown	unknown	false	unknown
visitor.omnitagjs.com	unknown	unknown	false	unknown
pr-bh.ybp.yahoo.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
i.liadm.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
sync-t1.taboola.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
partner.mediawallahscript.com	unknown	unknown	false	unknown
ade.clmbtech.com	unknown	unknown	false	unknown
eb2.3lift.com	unknown	unknown	false	unknown
loadm.exelator.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.retif.eu/media/catalog/product/5/2/52705_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://www.retif.eu/media/catalog/product/1/4/14816_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfOAcQZAAAAAO8xDNPXBz0GNaTc8ajqxcy2n2mO&co=aHR0cHM6Ly93d3cucmV0aWYuZXU6NDQz&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=normal&cb=87cf2nelesox	false		unknown
https://www.retif.eu/media/wysiwyg/home/agencemnent-magasin.png	false		unknown
https://cm.g.doubleclick.net/pixel?google_nid=cjp&google_sc&google_ula=913071&CriteoUserId=k--b-oa2inzjvINIfCWPvjpcHWrNF8y3RMGT36BA&google_cm&google_hm=ay0tYi1vYTJpbnpqdklOSWZDV1B2anBjSFdyTkY4eTNSTUdUMzZCQQ	false		unknown
https://www.retif.eu/media/catalog/product/6/0/603977_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://ib.adnxs.com/getuid?https://dis.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=$UID	false		unknown
https://www.facebook.com/tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190871&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&eid=780258551.page_view&tm=1&rqm=GET	false		unknown
https://www.retif.eu/media/catalog/product/1/6/16186_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR	false		unknown
https://www.retif.eu/media/catalog/product/6/0/602511_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://tapestry.tapad.com/tapestry/1?ta_partner_id=2052&ta_partner_did=k-ILSPcminzjvINIfCWPvjpcHWrNFd8l64069bPA&ta_format=png	false		unknown
https://visitor.omnitagjs.com/visitor/sync?uid=732efe97317e6352de4c1caf24b5064b&name=CRITEO&visitor=k-4I8-62inzjvINIfCWPvjpcHWrNFXylWMWOCPNQ	false		unknown
https://www.facebook.com/tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190869&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&rqm=GET	false		unknown
https://www.retif.eu/media/catalog/product/V/A/VAR-008645_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/dataPipeline.chunk.js	false		unknown
https://www.retif.eu/media/wysiwyg/home/Etiquetage.png	false		unknown
https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/alpine3.min.js	false		unknown
https://cdn.cookielaw.org/consent/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944.json	false		unknown
https://www.retif.eu/media/catalog/product/5/0/502760_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://dynamic.criteo.com/js/ld/ld.js?a=9456&fpid=GA1.1.965705703.1729844187	false		unknown
https://www.retif.eu/media/catalog/product/6/0/602128_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://partner.mediawallahscript.com/?account_id=1043&partner_id=1048&uid=k--b-oa2inzjvINIfCWPvjpcHWrNF8y3RMGT36BA&custom=&tag_format=img&tag_action=sync&custom=&cb=66933cb1-7df3-49f4-bea3-58b26202bb82	false		unknown
https://sourcetrap.net/tu//?page=all	false		unknown
https://criteo-partners.tremorhub.com/sync?UICR=k-peDTl2inzjvINIfCWPvjpcHWrNEyW8k3w0426w	false		unknown
https://static.hotjar.com/c/hotjar-741456.js?sv=7	false		unknown
https://www.retif.eu/media/wysiwyg/campaign/Slider/bonnes-affaires-noel.jpg	false		unknown
https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/orchestrator.js	false		unknown
https://dpm.demdex.net/ibs:dpid=28645&dpuuid=raYOj51cwOMy3vlq0yfl67Omn-CpMrot	false		unknown
https://www.retif.eu/media/catalog/product/2/7/27583_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/targeting.chunk.js	false		unknown
https://www.retif.eu/media/wysiwyg/home/emballage-transport-gris.png	false		unknown
https://www.retif.eu/media/wysiwyg/bg-cadeau-bievenue-3.jpg	false		unknown
https://cdn.cookielaw.org/scripttemplates/202401.1.0/assets/v2/otPcCenter.json	false		unknown
https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/notificationOrchestratorEmitter.chunk.js	false		unknown
https://privacyportal-eu.onetrust.com/request/v1/consentreceipts	false		unknown
https://exchange.mediavine.com/usersync/push?partner=criteo&partnerId=k-UQtigminzjvINIfCWPvjpcHWrNG-T0hmEEo3Ow	false		unknown
https://www.retif.eu/media/wysiwyg/emballage-noel-24-push-sombre.jpg	false		unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fdis.criteo.com%2Fdis%2Frtb%2Fappnexus%2Fcookiematch.aspx%3Fappnxsid%3D%24UID	false		unknown
https://www.retif.eu/elasticsuite/tracker/hit/image/h.png?page[store_id]=2&page[cms][identifier]=home&page[cms][title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[type][identifier]=cms_index_index&page[type][label]=Page%20d%26%23039%3Baccueil%20CMS&page[locale]=fr_FR&session[uid]=a8d192db-5991-52a6-41a9-76e4bd77e9b0&session[vid]=24d84efb-95be-2629-9e94-c7ebe5f23039&page[site]=www.retif.eu&page[url]=%2F&page[title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[referrer][domain]=www.retif.eu&page[referrer][page]=%2F&page[resolution][x]=1280&page[resolution][y]=984	false		unknown
https://cdn.cookielaw.org/scripttemplates/202401.1.0/assets/otCommonStyles.css	false		unknown
https://cdn.cookielaw.org/consent/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944/87b5ab3f-683b-4ba6-ba61-e882a417e7ec/fr.json	false		unknown
https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/handleClickedUrl.chunk.js	false		unknown
https://bam.nr-data.net/events/1/NRJS-1d0ba6a553f566f3ebc?a=1022254446&v=1.269.0&to=ZAEDYkNTChdZBhFZXV1LIFVFWwsKFwYIQx1aCgVTSR0NClwAHQ%3D%3D&rst=54604&ck=0&s=0a22e9c0f88c2259&ref=https://www.retif.eu/&ptid=3fb2640d8e3c92e8	false		unknown
https://www.retif.eu/recoproduct/ajax/loadRecommender	false		unknown
https://halc.iadvize.com/iadvize.js?sid=7738	false		unknown
https://cdn.cookielaw.org/scripttemplates/202401.1.0/otBannerSdk.js	false		unknown
https://www.retif.eu/media/wysiwyg/roue-concours_2.jpg	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://script.hotjar.com/modules.67d7d905831ab88336d0.js	false		unknown
https://www.google.com/js/bg/Cyqba_K0pUDdT5_AhrcTxS5-b1C3jUsFpG6edXmCObU.js	false		unknown
https://www.retif.eu/media/catalog/product/6/0/601788_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://www.retif.eu/media/catalog/product/4/5/45171_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://retif.eu/	false		unknown
https://www.retif.eu/media/catalog/product/V/A/VAR-000447_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-Bh3PsWinzjvINIfCWPvjpcHWrNFL-huUDSo9Og	false		unknown
https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-JDqcOWinzjvINIfCWPvjpcHWrNGsLQAsjYgIjg	false		unknown
https://halc.iadvize.com/api/website/7738/visitor-context	false		unknown
https://www.retif.eu/media/wysiwyg/home/emballage-cadeau-gris.png	false		unknown
https://www.facebook.com/tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=https%3A%2F%2Fwww.retif.eu%2F&if=false&ts=1729844234610&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844233101&coo=false&eid=988929207.page_view&tm=1&rqm=GET	false		unknown
https://trends.revcontent.com/cm/pixel_sync?bidder=151&bidder_uid=k-rUpmtWinzjvINIfCWPvjpcHWrNFafejFnb73WQ	false		unknown
https://www.retif.eu/elasticsuite/tracker/hit/image/h.png?page[store_id]=2&page[cms][identifier]=home&page[cms][title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[type][identifier]=cms_index_index&page[type][label]=Page%20d%26%23039%3Baccueil%20CMS&page[locale]=fr_FR&session[uid]=a8d192db-5991-52a6-41a9-76e4bd77e9b0&session[vid]=24d84efb-95be-2629-9e94-c7ebe5f23039&page[site]=www.retif.eu&page[url]=%2F&page[title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[resolution][x]=1280&page[resolution][y]=984	false		unknown
https://sslwidget.criteo.com/event?a=9456&v=5.29.0&otl=1&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvh%26tms%3DCriteo%2520GTM%2520Enhanced%2520(Retail)%2520(GA4)%2520-%2520v12&p2=e%3Ddis&fpid=GA1.1.965705703.1729844187&adce=1&sc=%7B%22fbp%22%3A%22fb.1.1729844190867.97636512878267%22%7D&tld=retif.eu&dy=1&fu=https%253A%252F%252Fwww.retif.eu%252F&pu=https%253A%252F%252Fwww.retif.eu%252F&ceid=0769a757-fe78-4c24-9c87-506407257bb2	false		unknown
https://i.liadm.com/s/28292?bidder_id=71340&bidder_uuid=k-HvWWKGinzjvINIfCWPvjpcHWrNEryA-woKub_A	false		unknown
https://www.retif.eu/media/wysiwyg/paiement.jpg	false		unknown
https://www.retif.eu/media/catalog/product/5/0/502809_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://www.retif.eu/media//wysiwyg/footer/CharteQ.jpg	false		unknown
https://www.retif.eu/media/catalog/product/5/6/56888_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200	false		unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:k-UEvqfminzjvINIfCWPvjpcHWrNFIlqRNfhV35Q	false		unknown
https://www.retif.eu/media//wysiwyg/footer/Trophe_e-Prix-Meilleure-Satisfaction-Client-small-1.png	false		unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=https%3A%2F%2Fwww.retif.eu%2F&if=false&ts=1729844234495&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844233101&coo=false&rqm=FGET	false		unknown
https://api.iadvize.com/collector/ha/live/events	false		unknown
https://www.retif.eu/media/wysiwyg/perso-push-services.jpg	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_301.2.dr, chromecache_449.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://nickpiscitelli.com	chromecache_335.2.dr, chromecache_235.2.dr	false		unknown
https://swiperjs.com	chromecache_417.2.dr, chromecache_199.2.dr, chromecache_242.2.dr	false	URL Reputation: safe	unknown
https://px.ads.linkedin.com/collect?	chromecache_220.2.dr	false	URL Reputation: safe	unknown
http://nickpiscitelli.github.io/Glider.js	chromecache_335.2.dr, chromecache_235.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://halc.iadvize.com/	chromecache_253.2.dr	false		unknown
https://dynamic.criteo.com/js/ld/ld.js?	chromecache_234.2.dr, chromecache_220.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://ads.eu.criteo.com/ad?fd=CLa3dRDTsBs&width=$	chromecache_400.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_445.2.dr, chromecache_452.2.dr	false	URL Reputation: safe	unknown
https://api.iadvize.com/engagement	chromecache_377.2.dr, chromecache_253.2.dr	false		unknown
https://fledge.eu.criteo.com/getvalues	chromecache_400.2.dr	false		unknown
https://fledge.eu.criteo.com/simplebid?platform=eu	chromecache_400.2.dr	false		unknown
https://static.iadvize.com/	chromecache_377.2.dr, chromecache_253.2.dr	false		unknown
https://api.iadvize.com/internal-graphql	chromecache_377.2.dr, chromecache_253.2.dr	false		unknown
https://www.retif.eu/politique-cookies/	chromecache_293.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_369.2.dr, chromecache_438.2.dr	false	URL Reputation: safe	unknown
https://fledge.eu.criteo.com/interest-group/error?pid=9456	chromecache_400.2.dr	false		unknown
https://tcf.cookiepedia.co.uk	chromecache_313.2.dr, chromecache_293.2.dr	false		unknown
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_369.2.dr, chromecache_438.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_414.2.dr, chromecache_471.2.dr, chromecache_458.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_315.2.dr, chromecache_467.2.dr, chromecache_458.2.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_220.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.53	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
70.42.32.255	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
44.218.161.108	thrtle.com	United States	14618	AMAZON-AESUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
142.250.185.226	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
178.250.1.24	measurement-api.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
104.18.32.137	privacyportal-eu.onetrust.com	United States	13335	CLOUDFLARENETUS	false
178.250.1.20	fledge.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
108.138.26.65	unknown	United States	16509	AMAZON-02US	false
18.245.253.79	unknown	United States	16509	AMAZON-02US	false
64.202.112.95	unknown	United States	22075	AS-OUTBRAINUS	false
34.246.111.217	unknown	United States	16509	AMAZON-02US	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
151.101.1.124	prod.magentocloud.map.fastly.net	United States	54113	FASTLYUS	false
3.126.238.44	api.iadvize.com	United States	16509	AMAZON-02US	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
34.243.99.253	unknown	United States	16509	AMAZON-02US	false
13.33.187.92	script.hotjar.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
150.171.29.10	ax-0001.ax-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
178.250.1.11	gum.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
23.22.188.59	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.215.27.238	trends.revcontent.com	United States	16509	AMAZON-02US	false
52.208.46.191	match.prod.bidr.io	United States	16509	AMAZON-02US	false
157.240.201.35	unknown	United States	32934	FACEBOOKUS	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
3.74.62.171	unknown	United States	16509	AMAZON-02US	false
157.240.247.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
185.89.210.212	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
82.202.163.23	sourcetrap.net	Russian Federation	29182	THEFIRST-ASRU	false
185.255.84.153	visitor-fra02.omnitagjs.com	France	200271	IGUANE-FR	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
172.64.151.101	r.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
3.86.122.147	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
52.214.168.252	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
52.31.55.243	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com	United States	16509	AMAZON-02US	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
34.102.166.132	adgcp.tpmn.co.kr	United States	15169	GOOGLEUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
89.149.193.89	rtb-csync-euw1.smartadserver.com	Netherlands	60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
108.138.26.88	d2eoz69k2i8ht6.cloudfront.net	United States	16509	AMAZON-02US	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
88.221.168.23	contextual.media.net	European Union	16625	AKAMAI-ASUS	false
52.213.88.80	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
163.70.128.23	unknown	France	17816	CHINA169-GZChinaUnicomIPnetworkChina169Guangdongprovi	false
178.250.1.8	in-ftd-109.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
52.31.86.79	unknown	United States	16509	AMAZON-02US	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
74.119.117.16	widget.us5.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
13.32.27.65	s.ad.smaato.net	United States	7018	ATT-INTERNET4US	false
178.250.1.3	static.nl3.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
216.239.32.21	t.retif.eu	United States	15169	GOOGLEUS	false
34.111.113.62	tapestry.tapad.com	United States	15169	GOOGLEUS	false
142.250.181.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
99.81.126.203	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
52.29.5.69	exchange.mediavine.com	United States	16509	AMAZON-02US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
34.102.211.201	track.effiliation.com	United States	15169	GOOGLEUS	false
157.240.27.27	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
104.18.86.42	unknown	United States	13335	CLOUDFLARENETUS	false
5.196.111.73	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
52.222.249.7	s.salecycle.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541918
Start date and time:	2024-10-25 10:15:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://retif.eu/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/456@208/69
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 216.58.206.78, 74.125.206.84, 34.104.35.123, 142.250.185.104, 172.217.18.106, 142.250.186.170, 172.217.23.106, 142.250.74.202, 172.217.16.202, 142.250.185.138, 142.250.186.138, 142.250.186.106, 142.250.185.170, 216.58.206.74, 216.58.212.138, 142.250.184.202, 142.250.184.234, 142.250.185.106, 172.217.18.10, 142.250.185.74, 4.175.87.197, 93.184.221.240, 20.242.39.171, 192.229.221.95, 142.250.184.195, 216.58.206.35, 142.250.74.195, 142.250.186.163, 13.85.23.206, 88.221.110.227, 88.221.110.136, 13.107.42.14, 104.18.41.41, 172.64.146.215, 172.217.16.131, 172.217.16.200, 154.54.250.80, 154.57.158.116, 54.70.112.59, 52.32.141.36, 54.186.203.89, 34.212.244.198, 44.241.217.91, 54.203.198.105, 204.79.197.237, 13.107.21.237, 154.54.250.81, 154.57.158.115, 23.32.185.35, 69.173.144.138, 69.173.144.165, 69.173.144.139, 23.38.98.201, 23.38.98.214, 3.69.181.162, 3.69.181.184, 3.69.181.163, 3.69.181.173, 3.69.181.183, 3.69.181.181, 3.69.181.161, 3.69.181.171, 3.69.181.
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, ads.stickyadstv.com.edgesuite.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, e9957.e4.akamaiedge.net, fs.microsoft.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, e63851.dscj.akamaiedge.net, od.linkedin.edgesuite.net, cidr1.ads.stickyadstv.com.akadns.net, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, c.bing.com, g11v.fwgtm.akadns.net, clients.l.google.com, a1916.dscg2.akamai.net, pixel.rubiconproject.net.akadns.net, otelrules.afd.azureedge.net, wu.azureedge.net, www.googletagmanager.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, bat.bing.com, jadserve.postrelease.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://retif.eu/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3616
Entropy (8bit):	7.940538345534045
Encrypted:	false
SSDEEP:	96:ujbzX3NWhgGEPZgsxY2N6U0QNkZvzraJApmJZ1l:0bRWhXs51jlZ
MD5:	E37C2AEF531612B0D60C573D95966EF9
SHA1:	3A3CB1CC7801C2816FF4D118E82361CDA6C57B0F
SHA-256:	6850A8DD7B1BCAF61C1372238329A0C6340760CF83D1A16FD99FD57493FD6665
SHA-512:	0C786C15609DD42D67253CB25FE9EB6A84EB3A5A1FD09700855F5E6686EDF8C7DA10B674D24FAB5BCDB6F65C2FADD8B88687CDF40A3E4F3A7BFE56E6E9DAD597
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/603908_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....G.......>m..F."..+.....i/\|$..2.3.\.oGM"!M.~....O......'q.....G.../....B..g....QQ..8.XAd.W.[7.....9.J..=..BGb.._.U...o........R.......\|....#...m.MN.w.Lt-.ojF.K...=...cv........l=...>q..61^..../2$t"..e..A...!....%).j.#.u.V..z......v.M.a.u..llz..T..$e.-a.M..?.....$l96..3qrf".....w..Go."o..YQ.S..U...^^.X.E...0YX..`...............,.}..Q.vC...81.......9.tT^..D.F~...Z[s`3Z^^).s.b....[..;.IK...%...H!.JiJ@...m.}.mWF.V.q.%...F....%...I14q.......!...$"m.\|.#....+.[....d.(!.\.w......~.1...e ./J.B...`,B.Z\_..A......I7.e..k...v..h@.S...^...E.XAd.W..........?+.....3.D&?.`.......Zc.8.+~X....l.....{.......Fe....k..S....`....sF.m-.[..V.O.M,.c.f._.I.,&....<..G].j.f.!..?...J.[s .....gjKpt..{..N..xu..UK\.L..r..HQ....VQ.Y..\|Z..W/......v..o....fK..\.0....f-k.)\|Q.9...NY..o..s.*./..........a....r%]....N..fw.%..z..._;.+%.4....E..A.0CP..Rbj.&....H.Y.12..U.c.....:..T...4.R..s.;5.'?]S..w.!a.F..z.....Q>...a.}..l...D.. .%j..8..$E....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.743343864540668
Encrypted:	false
SSDEEP:	3:H+0RxVEkxC3SCGUpYk1GdVSk:e0RIk+sn
MD5:	BADB7A5C9325CBFB5F1D8D2BD1148031
SHA1:	2FDA2705F5E91722FC9966F0943B635AFC1E562E
SHA-256:	CCFCFCF9F419FBFCEAC3F5977ED113CFC4D6EBB7D77642DAB5A775A8A872A131
SHA-512:	5596A478D3F8062C7CE41EADDADB5972CD5E824CD9F1213A15ED5CE78B530486259CAF4EA34AFE28CD3A35B71CC1B39AEA2EB57586CB8E27078BC5007392093C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKs3pq4RpazxIFDXoqIIkSFwkd6U4_QoOxgxIFDYOoWz0SBQ1TWkfFEhcJvoSS6vE_-_8SBQ2UkJL6EgUNU1pHxQ==?alt=proto
Preview:	CgkKBw16KiCJGgAKEgoHDYOoWz0aAAoHDVNaR8UaAAoSCgcNlJCS+hoACgcNU1pHxRoA

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.534089803769315
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbttcvfiUIbsAEtvxL0Hac4NGb:hxuJzhqIzcdyEdx434Qb
MD5:	9F0A1914018D6D90F6AD73C27B629F41
SHA1:	3CE3931AA572210821575419409E90BABB186226
SHA-256:	8E27955B18C7588921A17967113D3FB4F83B90C1AF88D1EB1B8673CF89D0618B
SHA-512:	2BF9A9BD1C465431350ABADAC33F91FB2B7CB8162B67820EE0A5BDE3FB868BE12A900FDE5AF0AF75AB0DB5AF71A60BDB3B23E8F71A051693A21D6B593EC17455
Malicious:	false
Reputation:	low
URL:	https://fledge.eu.criteo.com/interest-group/abt/7
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <title>Empty iframe</title>.</head>.<body>.</body>.</html>

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=9239&tfd=24801&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (10982), with no line terminators
Category:	downloaded
Size (bytes):	10985
Entropy (8bit):	5.701658879675176
Encrypted:	false
SSDEEP:	192:qAshXMRyW6V2XHUE/nBIVCuTCKdcFPTi2OKOkumrw7APhHTVBhyiuPfXRQ:dshXMRyW13UynBgcKm8HnkuSw8/Bhylq
MD5:	84B3421096800BE3711692E10D6BD7DC
SHA1:	B5C447A93EDA315BB9A7A1AD931F089E60D3A2EE
SHA-256:	EC597324C239D79B75CB9296598E4E93335D967EB50E62CAFBB266E20D1F9447
SHA-512:	C2014CDAB8B40CE97018B832E6EB4036B9DCC0FAB995463D0958A8C62D3E5CC6BA4309068D5703CD089F4A43F396345328B817F768A26FC831B19F306305A9A9
Malicious:	false
Reputation:	low
URL:	https://sslwidget.criteo.com/event?a=9456&v=5.29.0&otl=1&p0=e%3Dexd%26site_type%3Dd&p1=e%3Dvh%26tms%3DCriteo%2520GTM%2520Enhanced%2520(Retail)%2520(GA4)%2520-%2520v12&p2=e%3Ddis&fpid=GA1.1.965705703.1729844187&adce=1&sc=%7B%22fbp%22%3A%22fb.1.1729844190867.97636512878267%22%7D&tld=retif.eu&dy=1&fu=https%253A%252F%252Fwww.retif.eu%252F&pu=https%253A%252F%252Fwww.retif.eu%252F&ceid=0769a757-fe78-4c24-9c87-506407257bb2
Preview:	./* /try { eval('(function() {var qss="&cb="+Math.floor(99999999999Math.random());try{qss+="&ref="+encodeURIComponent(document.referrer)}catch(e){}try{qss+="&sc_r="+encodeURIComponent(screen.width+"x"+screen.height)}catch(e){}try{qss+="&sc_d="+encodeURIComponent(screen.colorDepth.toString())}catch(e){}var callDis=function(e,t,n,o){function c(){callDisInternal(e,t,n,o)}"complete"===document.readyState?setTimeout(c):window.addEventListener?window.addEventListener("load",c,!1):window.attachEvent("onload",c)},disCalled=!1,callDisInternal=function(e,t,n,o){disCalled\|\|(disCalled=!0,n=(n?"https:":"")+"//"+t+"/dis/dis.aspx",(t=document.createElement("iframe")).width=t.height="0",t.style.display="none",t.setAttribute("sandbox","allow-same-origin allow-scripts"),t.setAttribute("aria-hidden","true"),t.title="Criteo DIS iframe",void 0!==o&&""!==o&&(document.body.appendChild(t),null!=t.contentDocument)?(t.contentDocument.open(),t.contentDocument.write(o),t.contentDocument.close()):(t.src=(n+

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 266x260, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6678
Entropy (8bit):	7.96912039990017
Encrypted:	false
SSDEEP:	192:QDilf79HPqeovrHpuq2Gv158VrGMadHHitNa+xaBr:Rf0eU2eP8VrGZ0vEBr
MD5:	B2A3B76B8B8DD57D3431AB7440699EE7
SHA1:	79C6A6E1E69E11A7B50E62F9371BF816FADA2876
SHA-256:	0E0A2D5F63C7C3B8BFC683D8BA6E09103543915EEB62C34D3FBAD1470A175EE0
SHA-512:	91EDBFDC7282F46C0DC391DAC7F4683C4905F0518ACF1F3A85C9B72DDB30036AF22AA14CEA24E316E54E04949EB0A3523A4F69DE75DC1737EAF40792FA1B6947
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media//wysiwyg/footer/CharteQ.jpg
Preview:	RIFF....WEBPVP8 .....k.......>m4.G.#".(.I....M....^.x.......3....W.W./d]..7..~....w......~..B~.\|...~.......S..w..]7......i.....T..?....G...}..`....2....e?.w....o...7.........[......._..).;.'....X....}TH)..x.......3..H..uw.I.......B.{...F.p.a..y..L......R7........l..h.[......)P.....e.F\|y Q.O}.z.{g......e3...l.Y.. s.^....-...WX.v../P.Y!....J!8....S.W.9..PH.?w...i%e..6H(F.....a?..h(....Q....`.%Cm.Y.G...................[.....W..N..\m.}-n.....<.K.}.0.1I....!=Jm..^/...lL...&.?d.rn./.Z....x......t....yL/....C..bJ..N..........b.~'..C).2..LY@R.`.......h..e\|[t.j.....Q.....N.."..k.........\|x..j..&DW..Q=i.].+5/..E....O...+....o..../#<..Sc........M.A..M.j...,.y..T...C...8.h`.....6.....$..O..F.~...X=D?V..E....\.+.... .x....%...1h.-._....M......m.QKB4...'`jZ@-._...(..X..T~..P!.0.by/..".\...x...c.j,*..'"B.=.kC...k."..jt..i...zh)..#.....l.g$~.<.W#t..S...w.=......Y..2.s..l....4v..a...!..@..m.M.;&..T..e.....Y8.Y:g..v..D7.Xa....o.......4..x..).?......m..!.......4#

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	8944
Entropy (8bit):	7.853159275695581
Encrypted:	false
SSDEEP:	192:SFiLcRqJmyHpjPqEKbMGeDw5cY5Zm4Z9OMAb64k/dD1eviEEr5/Bj/4ScRjUC:SFiLcRqJJ7KAGCrY5U4Z9OntkB6iEKx8
MD5:	01DF3A9045B4205CB2F20D264ABCF3F1
SHA1:	6826F0C64CA63CBF22BFE395803F2778B938F6DC
SHA-256:	7B32F2AC8001888FC6958278018B9740B310AAAE74DADA86D80491CF478120D2
SHA-512:	1BFAC0CCFE35AA14B1E467656D6A245C35C6032237F247E329E806EC81FB79B028830FF8A80147BA372E4F86D7B0C76B37CF87CE38EF4C21AB8741A85A603259
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................C........................!..1A.Q"aq.....#2....BRbr..$Cs.5Sc..%3...................................8........................!1AQa..."2q..3Rr#B...C..$4Sb..............?....(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(.."..ss..M,..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4872
Entropy (8bit):	7.664107943502303
Encrypted:	false
SSDEEP:	96:/6FBmbAK904XCumNlruaiC+MBiwknTtx6gax/gs9wx8:SF03XXCu+rlITtx6JxJGx8
MD5:	E99467692FCB87E248CEBEB63A2BEC15
SHA1:	C23A49DC6C0B7E6B69688DFBB27F2E20BDA52D82
SHA-256:	C3D9F770508CCBF4AC2D3E8EC7E6AE0C4591022F2447E1F118D06CF4EDF2EB9C
SHA-512:	795B158A097E749B695B92D54DD2FD672EECB1F2CD95FCDCD98D5926FE7FF23A347039947BC695C3405E0FBAF950F5AE67CF212B90ED0D9FF7F3B99E06FF9370
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".......................................@........................!.1AQaq..."2r...#R..3bcs...$%4BCDSd..........................................................!1Qq2Aa.."3..#Cb..4.............?...hH.i.$..M...J...$...I..%....&.....4R..4"...iZ.B...Ba:@ ..N..4.H.;E'H...R@E4...I.....@EI$ .i!

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47540)
Category:	dropped
Size (bytes):	47573
Entropy (8bit):	5.3289084404620475
Encrypted:	false
SSDEEP:	768:AmawpENTC1alYSAPjP+5T86qTP8V/3AAdGxDwrJ46GTufnSD1Ml+y1eTw+bnkGx4:7aqigalu7fX8V/3APxDwVjzfniMl9e0d
MD5:	8467B5CC149C2E4F981F5DEE1B329238
SHA1:	44AB5ECB08FAB5F342276BE8550FCFA3ED7E918E
SHA-256:	A6738EF63D0077E15C9F520D469E0BB682BFE297D46E9E3DF58143ED4CF7EE8F
SHA-512:	4EB6E03570441A88677B1098D10693334B4FF2A80D99D7129ED74825C1E3EA93DC101E8D6E70AD1035702F840F9BC593FCFA096419CF211E5492CE9F0EF73A82
Malicious:	false
Reputation:	low
Preview:	(()=>{var e,t,n,r,o={63747:(e,t,n)=>{"use strict";n.d(t,{X:()=>o,f:()=>i});var r,o=(r=function(e,t){var n="function"==typeof Symbol&&e[Symbol.iterator];if(!n)return e;var r,o,i=n.call(e),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=i.next()).done;)a.push(r.value)}catch(e){o={error:e}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(o)throw o.error}}return a}((0,n(23064).Z)(null),2))[0],i=r[1]},64785:(e,t,n)=>{"use strict";n.d(t,{V:()=>o,X:()=>i});var r=n(86866),o=function(){var e=(0,r.e)();if(!e)return"halc";var t=e.indexOf("//")+2,n=e.indexOf(".iadvize.com");return e.slice(t,n)},i=function(){var e=o();return e.includes("livechat-")?e.replace("livechat-",""):"lc"===e?"sd":"ha"}},86866:(e,t,n)=>{"use strict";n.d(t,{X:()=>o,e:()=>r});var r=function(e){var t;if(void 0===e&&(e=document.getElementsByTagName("script")),e&&!(e.length<1))for(var n=0;n<e.length;n+=1){var r=document.createElement("a");if(r.href=e[n].src,t=r.hostname,/(iadvize\.com\|onlinecontact\.uwv\.nl)\/?$/.test(t)&&/(iad

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3288
Entropy (8bit):	7.086229152564339
Encrypted:	false
SSDEEP:	96:/6FTtlhr1Qh+uduY7lRbK9/dYuXsuvQa97VF:SFRlhe+VOQ/dYcr95F
MD5:	B46740D65467F994A543248FBA3FDC75
SHA1:	53C2F2F9D201FE18B42CAF49AE380E8DBBD654AC
SHA-256:	559B7C08336FAA27810D44C1724C269D32FBA308FE5FBCB33CC2E6563CD16D1E
SHA-512:	8AB5DFEF8BB00ACA820E9A6A3499EBCD121872C81728259518A9793696D78146C59F7D6A13860756979F996D1A03AA00FF75ED65FC4BA884C175BD39051F27BA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................G............................!1Q...5Aqt"7u.....#%2Rars......$3Sbd.CE.................................................Q.!1............?.. ....................................\s....8....o.o..._.{P.\...;..!..(...I.on.R...I,.....>.I...}...3.:...9*.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	439288
Entropy (8bit):	5.35491787953904
Encrypted:	false
SSDEEP:	6144:KjybDxkTAxsE7q92qfI2KaVi60k8s/XgZno1cEhqlaEpoVjCzC:IsxkTAKE7qas/7UyB
MD5:	02A08C2F7643E29BA3DACEA97BE5EBC8
SHA1:	4656AB6BF5F4EAA66932685A2B441CFAE8A74C14
SHA-256:	98084C6A53C7EB50E3987DF113AA1DFADB338F56277946A825EA5B153462E3C6
SHA-512:	99561DD7051F64009165DB51CDE2D37C1F63788F3BDF2286493375C8B8343D4E7EB7761109AFD3BF17A3538915C2AB5EDF24C0F881DC463EB1B2793293EE8F1E
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(function(e){e(t)})).then(n,r)}i((l=l.apply(e,s\|\|[])).next())})}function M(n,r){var i,s,a

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	"https://widget.us.criteo.com/dis/rtb/google/cookiematch.aspx?id=&CriteoUserId=k--b-oa2inzjvINIfCWPvjpcHWrNF8y3RMGT36BA&google_gid=CAESECAOr4fxfJqLXVfm3rF4X5M&google_cver=1&google_ula=913071,0"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1162x553, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	97798
Entropy (8bit):	7.997675252336106
Encrypted:	true
SSDEEP:	1536:ZC63TJbNI1mFEe1lmWdRU+ErMy5Hfc1N3fU7AeBuP3HxEQ8fm0/36vBrZ2r82qJ+:ZlDweTtbErMy5/A3EBOHxx8fz6vBdiQO
MD5:	130262B1B417378D68AC2C69CFC98527
SHA1:	865B38D300E2366567269464CD0128880A1C14EC
SHA-256:	46325425E54940A62F3329874C237E1730F7658D603F6810E898CB0E04A1DADB
SHA-512:	948C10702D81A21189C10CAF7E5191E7FEDA7692DE6AB6465604DB2B85B1535571B8D99F9CC6551C8AA9303E363A686C09BE7F6A462A7B18ACAED568A27876C5
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/cache/wysiwyg/home/x932/p/r/projet-1.jpg
Preview:	RIFF.}..WEBPVP8 .}.........).>m0.G.".3..<:p..eA.....nc.Q.O....W.O...W9.^..$\.............{=..?.b/\|.G..@>m..7.......y.....u?.{............O...x..~........).......L.[....=..o.m.....Q...y.........K...O........._./.G.?..9........3./.....M............../................._..4?........-.........>.}w..........N..._............/._...................K..........?......{.........?...............?9?.?..D.....%.U...:.X.2........xk.D./..yjz../r3..:.?..:".2.@...x.X..b.?.......m.jF.=eQc..#.J.....^..&U.5....~...:.....L..h2.f.._.7mb?.8.2e.........aS..K..."..m2Go...Sk.~../..B..O..Kal..2....w....d^.I.N..v.....O.\|..7.6....$.3...V.J..a....."_.&..I%.....A..{..QG.l.u".,.y b.-1.J@.@b.K....R...x........FM.uhg...h....7JX.=@.O.}7xlH./V....D..S...CP..........\.7..s.i...A..z7..a..W...\.}p.7......`#.g.D.C....l..........{...C.W..il...7.g"..~xm....,~j0/7.n.......y.gk....G..!...K..e.D&.:g..!....~z..0.{_...(.g;.d?.>.....a.}.Q..Q43..'..Y:...o.E...1._...~....}+..<.>'...M.../h....h..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	155283
Entropy (8bit):	7.994473521284238
Encrypted:	true
SSDEEP:	3072:2DX9ONh3SCJblZOnVKbFBNfVc+kMsZUAtlK/99i7sxACOfeif:2DX9AJblxbFBpeusZc1A3/fLf
MD5:	23FACDBC6DA69F048D02C2A8DEC539F0
SHA1:	0ECFBA0D584623AEC92C4E25131D80180CC5DC06
SHA-256:	DA273F7394638DEEF6796CCD82401AE40A5FE636B63126BEA72D2C87555D59F8
SHA-512:	733986873E6CEB9A74027522EEEE9C95754921CEBD5E3F706C99F83D54224D547636AEC4A4347693EB066FD5583CCE33BB2C210C0A2E039E0EB29F4933927425
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y.%.]..9Kf.{..^..z...B...d. .......`....`<f"f<..a...vL..c.= $$.....VwKj..R....[u..z.]3.2...y.z...T..F..{..r.d......4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A......=.......B...f...2....?.....+.....-...`+...y.......5`%.......A.....=....@.._.2...f......a.....6..dC...............k.w...p4.H...............d.g..._..?.....jp..Z.@..ip-.f......!....Z..6.d.(...y...:........!.oZh.^.......:.k...g.O..._ X0.....H...\|S.........;..<z......\_.................;............_..&.J.p....H.......~.........9...'....Ww8.....H....,p..... .....N.m.......N^..4.Z..H....d.H ....BC./.x........tu....@jh..%.....G..E(.k..E..).;. ....i..!....yI`?..O.....p.@$..M..FC 54.r.B....4.=.{..?,!....\M..5..@jh...<.3....4...)....d...ADC 54.r..&.... .o4

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3231)
Category:	downloaded
Size (bytes):	3280
Entropy (8bit):	5.31641160846564
Encrypted:	false
SSDEEP:	96:wJ7wKfFdF5ocKsr6a0gr3ocKseEBqaXgEoV:wwKt75P+adzPeraa
MD5:	E5524E52E8A13815CF87B10742E2D059
SHA1:	B6235DD5961F3519FE78EAB1C614EB7DEB039AEF
SHA-256:	71D28D93D788AC79B986E0C12008969547FDCC883F8003E36A4739B260E84A7D
SHA-512:	B1C47DFA1215AB0D9888ECA79EA2C0691E667CEA0F85B1D7EC4B398FA1DAE9550886FA8B351398985879A7FE57820D2EF0025BE55D4BAD4FAFCE5CF434BC2231
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/GDPRMiddleware.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["GDPRMiddleware"],{48049:(e,t,n)=>{n.r(t),n.d(t,{CONSENTED:()=>o,CONSENT_NOT_AVAILABLE:()=>i,DID_NOT_CONSENT:()=>a});var o="CONSENTED",a="DID_NOT_CONSENT",i="CONSENT_NOT_AVAILABLE"},12869:(e,t,n)=>{n.r(t),n.d(t,{default:()=>l});var o=n(36167),a=n(48049),i=n(62095);var c=n(90869),r=n(14294),d=n(32711);const l={register:function(){var e=(0,o.getIdz)(),t=(0,o.getWebsiteId)(),n=(0,o.getEventManager)(),l=(0,o.getPlatform)(),s=e.engagement.gdprConsent.enabled,u=e.preferences.recording_enabled,g=function(e,t,n){return{getConsentForVuid:function(i){return(0,o.getIdz)().require("visitorIdentityService").getJwtIdentity().then((function(o){var c=o?{Authorization:"Bearer ".concat(o.jwt)}:void 0;return fetch("".concat(e,"/visitor-consents/ONSITE/").concat(t,"/").concat(i,"?actionId=00000000-0000-0000-0000-000000000000&platform=").concat(n),{headers:c}).then((function(e){if(!e.ok)throw n

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	78901
Entropy (8bit):	7.990222371438463
Encrypted:	true
SSDEEP:	1536:LTHUur2V73bhiA/lkuQMPZjV3JmWc/0AO7KnT4XS6O9FmAl:LTHUuyV73bnlkuQM9V3JmWc/0KnUXy9v
MD5:	A1330D03665F7C0A329AB125E927DE24
SHA1:	D70EEEF25BC86D8FC919BBCC531B6D4C6DA28C94
SHA-256:	C0274BC3412A4844DB07A8DD1C5E0156EA707FD5FA7EA22789848315CF8D47C3
SHA-512:	FE982265C712E8B84F88C5857BC0098D4DF1849E1AC5E9AE8C3C1096F4227013D2D556877F98AD1F30C40D48FB4DC71397C19FD027D3D664D753218C4664FFE4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..w..G~....,..h...p..........8.N...V.odnN..[..#.I.4....!9$... a...!aHxKx....?"2....S.F\|.kT..+.......b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X.......hk...,..r`......7.W..s.4....C.@.....v c~o4.).)...d~..Sy.X....B..._...z%...F.#.m-0.....+.....n....q.s,....Q }..X.9...\/..&.....&z."............B...3.)....KOd40...LG.E...\{Z.b....l...tD..c...V@nX<`.p.......z>..f.-`#..... X......I....6.....i.....V.]_..#.\U..t..H.....x.....e.z..^.^E...r.2..t..H.c.........;.......x.8]..X..V@.a..W0.x.x...w.;.K7...x.x.8Y..X.,V@.a...Z4..n.....6.?.^...;.....H7..\W8."......,./Y`..?.AxY..X>.+ ..r]0..w...+.-...h!...xI...H7...X\.>.....-......Ct6..3.AX.....G%..o..Xn\N............`...0..].[....%......t..K.....+ .g:.].q.....Ht*._..X.1=E@l..v..{...V<,...^h...t......+ 7...k...6#.....gh..........L..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3512)
Category:	dropped
Size (bytes):	3560
Entropy (8bit):	5.345104003067578
Encrypted:	false
SSDEEP:	48:iKeL0baF3x5s/hu5F5HfTdTDVGbg+uUuS/+qqCzs5HiBjlnoVGmyjFoAq1wuigHY:3ab5HbS2qqrCBjWcmKlq174j1xV
MD5:	BFDF69FF20EFB35155FF8D49A5A5B71A
SHA1:	12962BA266551DDDB4B00887FEAC05CDD7A72A68
SHA-256:	C6A17D737FD67D2B58A99037A7E5DC95F47DBBE0668FB7B4338295931DFB4D1B
SHA-512:	E75861CB14FCBBC56060B8FEFBF66F66EE552FF2B5142207FB9E1C8C083CCE9BFEBEDE58DD38A2ACE9951F1F4651D16B0DEC2E3D0F1D9203A915A72EE4AEC813
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["debugLauncher"],{24982:(e,n,t)=>{t.r(n),t.d(n,{default:()=>o});var r=function(e,n){var t="function"==typeof Symbol&&e[Symbol.iterator];if(!t)return e;var r,i,o=t.call(e),a=[];try{for(;(void 0===n\|\|n-- >0)&&!(r=o.next()).done;)a.push(r.value)}catch(e){i={error:e}}finally{try{r&&!r.done&&(t=o.return)&&t.call(o)}finally{if(i)throw i.error}}return a},i=function(e,n,t){if(t\|\|2===arguments.length)for(var r,i=0,o=n.length;i<o;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return e.concat(r\|\|Array.prototype.slice.call(n))};const o=function(e){return function(){for(var n=[],t=0;t<arguments.length;t++)n[t]=arguments[t];return setTimeout((function(){return e.apply(void 0,i([],r(n),!1))}),0)}}},77219:(e,n,t)=>{t.r(n),t.d(n,{default:()=>s});var r,i,o=t(43663),a=t(64785),c=t(21268),u=t(84474),l=t(62345),d=t(18677),f=t(96751),g=function(e,n,t,r){return new(t\|\|(t=Pro

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	2633
Entropy (8bit):	6.965968382597191
Encrypted:	false
SSDEEP:	48:/llXiFvaABrd2wBLzPH/7G8zqDdxd7SFkzyQQcW2:/6FvRBrd2whTTG8zOxhSqz73
MD5:	F4943386E32EDA3FBC5A5EE03E7C962E
SHA1:	39C4C953999C8A2B14731515DE753AAAF35345FB
SHA-256:	8BE296B5B748892ACE10F734768E7CF32FD676771DDD2272497A2F924017F032
SHA-512:	3E73ABCE79ED0E1D4F65E6B312CA6A71A70E606314BEA081021817C0AF5511FD0F5AE74E897CB3681C62C7EEB280660F88479D30AE3B5403323085AF0D7950F8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................;...........................!1.Qaq."2ARb...#$3Br...d.%D.....................................................21.!Q............?......................................\|.......b.....CzS..........)G'..Vw.......z{.......H....YV......x.......=...%k..

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 700x400, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	16896
Entropy (8bit):	7.989626921190156
Encrypted:	false
SSDEEP:	384:8Pqzt6bA6scGzBudJqCnp3t0jLjYvFQ8lxxYTs:8cYjSYTajLYQJg
MD5:	3E8F703A8EEAEAAD89F4553AA2E88C13
SHA1:	19D1E516D5E3628A2611127C5A8B0F7FFF2CA4C3
SHA-256:	A064100E228EBCE533F2239C3A40F8E7C20588F19ED277B515BD2E889FC429CA
SHA-512:	9E5371353689039B194CA9FE618163B10D35B488652AE120CF2011ACA0285ED9FDE021C6372EAC238E4A0D151233967FA09B12DC62837D1C4AE5AE8A469959F3
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/campaign/Slider/noel-24-imbattables-mobile.jpg
Preview:	RIFF.A..WEBPVP8 .A...........>m6.H.".$#..P...en.O@6..)\.T3..x......zO...z..1.9..O..q..~..........[.'.o....G.S.C.y.....3....................S..._..p........$.}...-..............c.F...o..)........l?..VX....~......?.......W.~....-.1...\.[.../......._.......z..;.7.......t...y.?........~.........?...>......+....N....?y....~......./.z..u.O..?..L......\|w...M.D.g..S....<4]...z=..s.......z..........R@\|...C..@.......Q....w..?K^A...g..e^8=...).....=9..L.$.!.r...H.b....{k.3....>Cd:.b..N.C.Q...tR&....+......K.-..Ly)2{!CR.et...:.2:.....9.....8N....;..N.8..TI.\.[:n.Z.\|.Z...`kh))_Lm...J6...f.....u...O..C..8....2O...........l.N....wU..e[..>..o. ^.E........[..?.I.y...I....{...uQ.,VEp.j..c;...u..W./D4.5.-.n....?..I..\|...@...+/.\|.i..yE....U..A.0....,F.U.Z....S)R.x.b\zM....F..Ox.8%H...x.......T.%..W.....7..L.">(....... ....GTHR...5\|.6.0e..7.x.p....f..`..o.q...+U..Z.<...e...O...J.ys$+...B.9v....R..,.....W.;.p.o.X8R$&...z!d..9..I~.r.`...+}...c..nL....].8R}.....7.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	4.673067471053211
Encrypted:	false
SSDEEP:	6:yqCQpkA4MBEiMNRMQd3CgG0tewVgmM7i7WDaqZFHzA/NqjjQpf:xVtmNddb5MGjOFHsc0f
MD5:	9E42B3DE1E4C6C1947C01C314B3C49B5
SHA1:	84ADF333EB727BDA74FAC59AD3E1FDDACC891544
SHA-256:	6A9430E3EC739720485C215B9D3FE75BA4072666DB65508F89E82B5A38D16492
SHA-512:	AC27B3553054588EA8B60CF61CC91ABD9E48F194CA7516F0F6015771FAA7EEFBFE8C07DE3E327CA194B8FA8AE4051C6B0D1CB167E3F7BC40BBB9D9B3BCA7B16A
Malicious:	false
Reputation:	low
URL:	https://fledge.eu.criteo.com/interest-group/abt/worklet
Preview:	class SelectAbtURL {. async run(urls, data) {. // Read the ABT population. const popId = await sharedStorage.get('chrome_abt_pop');.. // Return the corresponding URL index. return urls.findIndex(url => url.endsWith(popId)). }.}..register('select-abt-url', SelectAbtURL);

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4758
Entropy (8bit):	7.510830290414654
Encrypted:	false
SSDEEP:	48:/llXiFNYK9VhinmqRVsyxtgaDaObhsIAT3O4iFiCwG9jWBQM4X5GKC9yA2fm:/6FNZiHVxxtgaDaOk36H7wA5HcEfm
MD5:	DC3AD31FBB43F20DABAE632129B34943
SHA1:	65EE8A3892FD5FA506064F9E8873528472233789
SHA-256:	06E1801F81AD72824E734781B6AFFEDE0029A139882E6EB20272BBD5803A216A
SHA-512:	520C5AE79E07620E147A9E2EFA142A308CAEA9F27885C889FE82712E74A981FAE7AE12C8B13F3930E8F92C741D37109C4F7B5996BE40CF067BA73CF609E3EE21
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".......................................................................................................g''U..b.E.<...sd..O.]..P`.......KR..R.&#...9....qr....l.5..L.q..`l..J.b........t...TyF.....v.1.........I..Yb8.X.k.j..KK..>..c..g..N..)s..VRk...v.R&..1F..T..............k

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3470
Entropy (8bit):	7.249558107665359
Encrypted:	false
SSDEEP:	48:/llXiFtyGGT4E1iKeXqPeUMTPCiuTHupQQruhzqJdHT0SiW7DqZCd:/6FSTnbwYeUUC7OpQQrHjIHpCd
MD5:	DDE835E0FA9FA1D2370623BFD4B76933
SHA1:	8BBB89A2FB50276F375C6D070AAEBB9C6E0EF92C
SHA-256:	70BBD03EE396B2DCE96A079FE23561F723D7BB5A4B79A274F382BDC18F9725F9
SHA-512:	ED1DA0529298C40B3EF920BD41ACFD435A6BD4D49D634A8D964DE07F503E0C87C7C686461A0DEB334CF9C088AFEC47FD5B86F6A937239DF43C5016F63083A80D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................6..........................!1AQaq.."2r....B..#3CR.................................(.......................1.!AB."Qa2q................?.................................................................................................................

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	50230
Entropy (8bit):	7.996012818922114
Encrypted:	true
SSDEEP:	768:UJlwoGNQhAqXu0jSJf2ksoHS2a8TAFHtXkBGH6F03nJJyac3ud7AHIJBNAP9PIzm:Ql/GNQJXtSJ+ksES0eTm27AHKvCIzJk
MD5:	47CF1F4E13B9803EC358AC411E848521
SHA1:	5592084D805596398F80A61F942D81275E22920E
SHA-256:	80606936C17AA1427DA2A0387CED0E1C9042BF20FC90EAE0EA9D613B1F796DEA
SHA-512:	887C4B313985C4DF8E0E9AC0B5D13E3E4237DC4AF8AB44D14491DC7AD6C075E973FF05645E24D60503653EFD9E284F75ACAD3F48C2035A4E16D8D49C6D4C9FCD
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/fond-commerce.jpg
Preview:	RIFF....WEBPVP8 "....d.......>m..F."..+.l....Mi4...$...(.dqW.......h}8._.1.......Z....7...._........x..?....\.........._...v..?......1...3.+..._\.W..~._.?..............g.....`....?.:9.3.G.~.x[......................W.W.......o...\|..G.O.o............g...............[........z.9.9.1.....z........_..............?n...............?....{........."...................O.o..;..SS....x.q}....]....^O.Q.u.......,.9A.V........$..7.k.....5....8ay.Z.T...H...[..1.x...o^2i\].....<.).=..U.....bc._W.p..A...`r.'.RR.o..lE...........V.cY...=..z...^."j...=.A.9..hXB.)..;k.y.79d.H;..".q.:.w..1....]..=......0.......d0.0]M..@...z.OU5.u..P..%.,.xUK.Q.cX..%..2.@..gH....5.b.y...-.2R..i.eST...7..Edg._.L..KY^K.u.=.......@...F.8^......0.k`u.v.OY..W.-_CU...1^k...#...W..?...>..;#..B.... ..j...n.........,.S..`7.....4.d..)...Sj..U.G..M)yk._....h.SS...@!....S.....c..H.SCOs.......\C......LCrK.Np}...%3.Ey.:..B.c...U..s...ztTPc.b.......,{g..v.WvX.R.C"....Ka.[ZX..E...>DaZ99.....

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	4.682413811217405
Encrypted:	false
SSDEEP:	12:2C0mMuZ07DQih+c+2P7DIeFp/SwpQkp+FpHMn:2C0Q0TEN87np6X66pHM
MD5:	E230DE3C9EE63B650AE6159911B780EE
SHA1:	9FFC06C702523CC122726E57AFFA1E24DD2370B5
SHA-256:	2E99928CD62BC51D3296F5B52556F3F92D3A55F0715E124F537502FCA9371254
SHA-512:	5326A68F7F02E59B7490502CB7BAEE4EF42B1825FAF423BDB36361405A1DC582344FF915B7633FA07BA5A29B3941BB477A1D43D08A1BA151DCFD61E52CA3D9D4
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/optChaining.min.js
Preview:	(function() {. // V.rifier si l'op.rateur de cha.nage optionnel est pris en charge nativement. if (!('?.') in Object.prototype) {. // Polyfill de l'op.rateur de cha.nage optionnel (?.). if (!Object.prototype.hasOwnProperty.call(Object.prototype, '__opt_chaining_patched__')) {. Object.defineProperty(Object.prototype, '__opt_chaining_patched__', {. value: true,. enumerable: false,. configurable: true,. });. Object.defineProperty(Object.prototype, '?.', {. value: function (prop) {. return this == null ? undefined : this[prop];. },. writable: true,. configurable: true,. });. }.}.})();

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 48x48, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	2.4354860813141124
Encrypted:	false
SSDEEP:	96:jzuDyMp3I/l6SJ91056Ubp2T/S20l84jG/pC:jI26k3Ut205
MD5:	D93917B33B3ED767BAD867E6188E9E9A
SHA1:	ECFE3287217A3223AC991280A5CCA85A76937C10
SHA-256:	209813F5B1BB4C8BE8ECD08E829900E386D490789DD805701D89A625F3E3536E
SHA-512:	1B466D2903A3F7CC5A25E097EF76F737051BBC3FA6B7E4C23D3264B83F5B0FBE14EBCFD73A085685169BE0C6A467C6B91B92A9DD91FECADE14FA7AF1EE0C03B4
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6...00.... ......%..00.... .h....6..(...0...`..... .....(........................................................................................................................................(...'...'...'...'...'...'...'...'...'...'......................................................................................................................................................'..'...'...'...'...'...'...'...'...(. ...............................................................................................................................................U...'.c.'...'...'...'...'...'...'...'...'...$.#.................................................................................................................................................(.-.'...'...'...'...'...'...'...'...'...(.S................................................................................................................................................!,...&...'...'...'...'...'...'...'

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x500, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4650
Entropy (8bit):	7.954740798494025
Encrypted:	false
SSDEEP:	96:M6a48FlGtH49z4IPxZVx6IOirAiypw8OUnSPG1Y7j4DUUs:M6ilGqlpXHUnSMqse
MD5:	F6F68018ED261E1123EF3239B5AE1A34
SHA1:	3AFDE0FEF12F0A0E12D9B595B9169D9C8766890E
SHA-256:	E2AB2F5CD03AB8A8D0F93A352E9C96FB1DC5F5D0A7264B625FF5F3F443818B74
SHA-512:	F4FA0842F91868B5980747810D5EB2188D79690B540C0611704BE7E6C696469CF9088F9D4F04C174D02510413DDC9C85589AD653EBC3CCC5EA577A56C298A8D0
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/bg-cadeau-bievenue-3.jpg
Preview:	RIFF"...WEBPVP8 .............>m6.I.".. .....in.wN+......o..;......G~.cu._....?.i..c....NC.l....V.k...{...'..S...9.M..GW~...NDw....{...'!......9..+fpG.P3.......k.v..-..}......g.f\|......v.].U."..S./.=..l..=...9.YC.l.......bB.v+...."E#.....,.....".X.A@.G..0.H.(.k.8/....`#.71..:.K...i..x.B...x..2.m...n...K.^:.*f.Z.._<QuL..6h.%.....%.T0..$3.v...H.w..V...<.O.......&J..]7....Ax.\|pdv......P...{.j.o..LH..........Y.[...S..[..X"~..0%.8.6..i...^.{./){.......g>..[z..S...GX....]...W.T.BN...yJh.......x.F..}.JI..O..NJN...._`V....^...?y.T.i...O`#"........cG9......L....[!.?.m....'!.J..0M.vK......5.S.r~k.....-8t...m0....@Df..L...:.....o..'#....8...T.. .9....4...g...y......Y....z...}.T.DWhTz..U..%.L....@>.X-...H3.........p.r.D=N.L'W.9.-.faB..'6.....M.....~.~z...c..[fG...p.YP.k.....P,...z.w...t...........!@.v.D.)~.P..#.....x.z....!.N...U....b.p.F...B..;V.Qq....{C..0n=.s.#0.?..D..{.....l,.B..?S.J.G.O...{...$$..7o......B..........B<?Z.N...y9.}.e....5......n...PT

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16213)
Category:	downloaded
Size (bytes):	16470
Entropy (8bit):	5.21392770961026
Encrypted:	false
SSDEEP:	192:IbWmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IHUbeTMbHZ+Vnh2AVfHfA4XYz
MD5:	FE4BCFBF64BD974C68C70C65013C3382
SHA1:	9274052CF85DEEA4C54BC8A0006A848B8E46D548
SHA-256:	82EF200ECE01E84B0387A394DD784B93E1A677F8B2EFED9D6B79F61D3084121A
SHA-512:	A2490B701244F94D7D0E977441D1C0D709F8618EAB5B70B06B178B253DC99A3F5970D49B967FD5630F1476A5D12302D7EC9F0F9AD1ECD08FC53C0868CC5BD72A
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Retif_AtomicDesign/vendor/swiper/swiper-bundle.min.css
Preview:	/*. Swiper 8.4.5. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2022 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 21, 2022. */..@font-face{font-family:swiper-icons;src:url('data:application/font-woff;charset=utf-8;base64, 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

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22462), with no line terminators
Category:	dropped
Size (bytes):	22462
Entropy (8bit):	5.3079403194964465
Encrypted:	false
SSDEEP:	384:n83CmwWtdvD5ABwXCQ+3rpheTJ8eMAB6LxbnmcY2Jo7pR:ndmw0D5ABwXGdheTJHexzeR
MD5:	F8BDCCA15F32E7C14FBAFDEAEF1B8270
SHA1:	6C123320D5E7F6581DCAD1BB52EE0306DD4C8111
SHA-256:	CD5612F8050D557090D7D97477428EE22E8A5B546F3943F700C38898D8A72A2D
SHA-512:	1D717FBA0548F9A8B96ACD884628B2FDBF9B369C6075D87620B349372D24A1BB567F4A245180663C456D5DE96291154CE574443C7CE0E00AC04EA7B2909706D4
Malicious:	false
Reputation:	low
Preview:	var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}};(g=v=v\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=i=i

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2090
Entropy (8bit):	7.918680074263331
Encrypted:	false
SSDEEP:	48:TunHDzfYCiPaHWluXG/a+SCC8odEKrZBAHiwt:SHnYCiPa2lxSOoiomiwt
MD5:	51B1254904A57F720F10FA0B7B0F7560
SHA1:	1BEA0ECE4D30D147437908AB309DFAD27C1EAC1F
SHA-256:	E843A0CFDA0C819123C8388406552D706231B8B07F9B1B1CC3FF273C4BA3CFA2
SHA-512:	3191FF362850E3DBD809ABB5E9B4AD4C5A71E1AC3A5B965A21DF297A34DBEDFF8ECCE931007C53A986DE3040CA7DE197CBD2CB8F35BA57DCB97B29288C056C55
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/601788_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF"...WEBPVP8 ............>m6.I$#"!".. ...en.\|.........b.S{l\|.~...zU.c.........C._V.....7..,p.Ed.\|-........}..,.oF......N..,...g...].2..H+1&j.C/..$}...Ln...\.[.C8._.k.!8:t..?.....Ku~Z....}..<..1z..n........`...-.M....ko......"T]K.(...'.p....I2C.....a].u.Gk../.j$.3.u..r.....&He.w..T..K..t.......m.yc.L..V...K....P>.....A..#..<..r....r..&He.{.f@....u5..&...w.S.A.+...D.P..N....H...:Y.........L..F....<..-....%..\|._^?of..2.%;_.CJ..Z..<...A.L.n...=qP.h...B......=.....}.k...LI<.%[..!iT2..\.. .t.......6...\|..1....[d..'Y...z. ..Oa.......w./..3.^t.....!\.H...J..N..../..`^[.....G.Q.ii.K.l.F].6..x..0...3x.._.....s....6..\|..6.. ]...\|..P.4.........v.?._=..=e.U.......5...0....~...l..`^.Uzj....w..P...J.)&O...Z.V.e.......z.0bg... X....C....3xX.!..P......O.N.4Y.?....k.}.Sv.\vT:N..U.k)Z.`.0=.c..7..E..6....h......\|.W.....Z...m`$.9$.....1Ij.+....F,....-...~;..x..0.t<../W....2'k.].#m/...zj........N..I A>..}.v.`...OR..#..OQ.e..N>a....!..4....c..3._j<AX{

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.retif.eu
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2254
Entropy (8bit):	7.9030503866381405
Encrypted:	false
SSDEEP:	48:MLkWZ/kcTmqwyNMwYESHt6eDW2lWvq6HpaG4ymqTs8:MLkWZfTXwUMRW2yqGp2ymiH
MD5:	ACC87FC3AA1136B698A61207AD163FE4
SHA1:	310B9090F6E1D80C6ACFAC4083A8CCE28A07642C
SHA-256:	3B2A0A6407338148C719D30ED0934F5F8F87B243D236742AD98A7483865490BE
SHA-512:	D6AB739DBF216224B5CFEC7A3DDD11341F7DD93E40DCF67498958D7684A1839A34DF243D983CC3177632EC6CE230678EAE2626D6498AAAC44420AD26CD1612EA
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/1/4/14816_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....0.......>m6.H$#"!%.H...en.\|.7..=....?9.3.. .t.)~r...K.O.o.>.......z....k.......WT..S~..(.U.K...~d.y.d....G{..O.C..2~.?...J.ZW......9.Mo.....B..nzR....o....[.s...Q4.D.d.B..z.+..P..N..CH`5....o..._y,..oO..V.N...........V}.f....n...%($.~u...R./.!/l.t]....l..../3Mc..3..p.S.s..!.i...Qh....;......^L..\4.4S....V.=..I....VK.m..mzP..h.O..!^U..i..}T..N...V..=a%.T@D~K3!.A&.../..J......A%..Fx...;..`[..A.la.....K....M..&......w6..X.p....X.wg. ..=......3.......d..\|.).2#..1........H...'ei&L...A....(...x...+.S.Wg<..{m]ij?.n..\|Y..R@..n^f....^.A...&......YF....nC..L.M....'...;........M].'.n....F...\...;.wH,...~b,W.a8RF.......^d.....7...V+....h...r....{....$R..?.SA..q..qfb_jB....v...U..@..B..t.].W.\|)..S.2.5..qA..=..@...=..y..W..>o..../_3.$_.P..[..$.pB.\:..&.b$l....\|..d".{...=<......7..n.:]...+..e....E.n1v:n.Bw.....Hq..g...h6........!A\|W...~S.../;y.0.@5..T;../W...M!f.t..*..0..7.9W.,}..u.wk6Mc...w...k.....T<c.{.9)...:.%.......M....>

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5476
Entropy (8bit):	7.964228709914779
Encrypted:	false
SSDEEP:	96:fHjMjWvYpyYQY1BIMMOQTg3qUl+yHdWINY3HA9ph3FWCPm4itT6xF/K1bxZmVldy:fHQMYeMF6jU8lwY3uhVTW6jC1gkR
MD5:	2C9A551FE638F52BFE10BB92DCB82BA4
SHA1:	96BA6A019AE4E61DEE87C4F0603998B73D7EFB5D
SHA-256:	F45D8634B732F23322732BA59FA0A504D51E44CADAF6B5458F105FDEDF88E256
SHA-512:	738650C73B8120450EF4BF4EDE0A65AFD9CA9BFD7B9534AED0A66AE77D842FBB7EF8FA20E05D1294296AF0C71BFCDC616BFA389D88D3042C36F8E6689C90A026
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502760_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF\...WEBPVP8 P....W.......>m4.G.#"#.......c..!...]....>....^...s....?.O.W..@...Z.W_@......1.$z.......f..K........../...v..;..y...Z].s.....g..A.d{.t..Z..b...y..:z>U..../.=.]..S.W@..5...P${j.'.....s]L.. .......-..v......tcT..+.te+h..:!(I.....f......q..Y.<.}=^.h.k.C[....D..I...dY..iy..z.l...\;..F.......D.`....+.t..L..xD]OZ.Fg=.\|.2.y$..Z..c...[eV..b.2.ew%.....+.D..[...o.y..2.d...).mz.N.zB....43..\|..LL..<aGk;.'....G....Aa..:EV3..BL..^...G..I.<S_.. }FU.-0..Y..r."..K.w.~.`....s.l2.e.b.]...r.....s=...l..c.?.h..#...+.>5.X.v..~,...b.:......f.....R6......n.HC..U6'!....^.7E..7....\|...\.q.'...$....w.;.....{.QW1.....Q.!'z2.........(.\...v7..n<.h...UL.C....)...Y..6.....=.X....=.s....H.4\.qC.......D/.E..4@...>.........%1'FT.K.{A!S....[Qi.H.`..H.p.X.e.X.L]h..bg.....<.o...2UEy.\|..g.`...{jT.t7Ng...[w.[L.2..../...Sw...p....~....9A.u].eG..v....j.@19.j*q.u...,Y.dA.x..%Zs..w.'.....by....._....(Te...N&.8......85LA.9i..i$W...i..UG...q.t..K.n....wj]

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	55558
Entropy (8bit):	7.983864967493321
Encrypted:	false
SSDEEP:	1536:iHpMg6hgknofE7aCPF5XJd3pJfDX20oPS/:qpMdaYDd3u0V
MD5:	B510B0911EFA6044A05059B9C8D3BCE6
SHA1:	66A879129439800D543F883C8EBA100CEDF7D8A6
SHA-256:	6CD471090C9BA749C651099C1043F6AA5556A0F822B46B02F0D27C1DD5416A48
SHA-512:	1E6852C0F64D86F05FBD762C68258E8A3752FCAD48719675D60759FC5DEF968F59C13D4EF7B06B34258FF53C381D6730183CFBE0CEAF96AA3E9DFA0F20F6F930
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/sacs-1-gris.png
Preview:	RIFF....WEBPVP8L..../..c.M.m+...=..\.....t.G.....t..#..8.p......z....I..8.B.I\|u.<.U....A...e.9............q..".C.....""..1.x.k..[W....Qn.....x..k.4d.a![60.]eM...K..........X:.$.2`.....f.l..B3.u........n.p`C...#....-.h`.....'t.0....`......6..}E.....G.gX~p!1^......;b. .........=.b ....#..2\``....@x.x.5zV...\6.~\..=1......-bp..\|. .....t.@o..X.wD...<...o...L.<....]....x...DfJ..o"23_..}.....$...ID......Go..{..]..$....$...B.)]R<..=W..}}O...n.f.._.[.'....?....y..s.........P..(3.........(..=...\|.6AMJ........dd8h}(.U...*Z?...=h..l..u~....f.Ze....^.pd.>@k...\|+?...k;#.w2..>..ek...t..".8t.R.._....^.@Q...i0..d5.9..)..X....!R4.(nn.. .&.Zf: ..n....B.B."#mY..X......5..X.b...x..ah..#.".V.....U........0.! ..%R..B.. ..C....W(..................".`..`@AD.....EQ ..a!.GB..@..4.%..!2.O.....fYBXB@...!..K...KX...2...%.P.X....LF.i....a...%`.t.1,.X.b...K..G..MG`@....@@...`!:..B.2,....zF.XRB.....PRP .!,@...`E...M.......E ...8`(..............a(."2.E14..b.rs...2..h.ah.&,C.\|....x..

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562841
Encrypted:	false
SSDEEP:	3:mSgOv9inuSoICkuLaY:mSb99SckuLaY
MD5:	D96F53FC5804A46D0CED337FD9B7999C
SHA1:	8671782E7AB2BEBD1BE85DCCF1210F421C4B801C
SHA-256:	409C91AAC4F449179B7CCC3280CBEDC4FB79988294F57C78BB48181F0FA81132
SHA-512:	543B64A5EBE56ED3BBB2D1AEEABEDA90E0DAA80A6A40CF3D6B6D1ED919700A59E98E04D7421CCAB76306685B1850A724612B0E463FDFC8DD444EE6612E0A01E4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgnfuAYDkZ1koRIFDZSQkvoSBQ1TWkfFEgUNpZM2JA==?alt=proto
Preview:	ChsKBw2UkJL6GgAKBw1TWkfFGgAKBw2lkzYkGgA=

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21756), with no line terminators
Category:	dropped
Size (bytes):	21756
Entropy (8bit):	4.769122522678095
Encrypted:	false
SSDEEP:	384:ud8C4hGojhmCy7qGAVsq1nwGfg4xqsQMPNE:/6J
MD5:	C925A552257F078897064317827D0BC7
SHA1:	091963D2C8C8D7301932F1BFB38BED997108AD18
SHA-256:	29733CA80FAD429EB7E4BB7F028CD176D9EE5A5427D09CAEC143E5030CB1005F
SHA-512:	8E26FC9B12F420E40E3D1D6F422AAD760F9E7C39DE7031987BB36294427E0513DC10A0E40D82187157E664DE875F8224AF94F24FA895F85D2D2889201723868D
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:700;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:700}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-foot

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2476
Entropy (8bit):	7.923160757151121
Encrypted:	false
SSDEEP:	48:xoi2h+BeuU4sy6yuiD1yTA/c75MNF8aj7kutsbi6Vi:Ci2hruU44ijoGKSAutsbD
MD5:	7B1DA7EB557B58BF96CCBCAFB3B7A2E3
SHA1:	3CCC4908CEF218E6B7DDBFA065D6509EB2EDB5E3
SHA-256:	7B2B33793B8178ECF29548D646F4405A0B5DD77A711FF45188ACA31934B6F863
SHA-512:	F826E95A20F389D0A62BA6FAE7C628A136D54B1868C9C3ED9C1A534F786FD68303ECD192D59AE7EC4B649CD72A0F4855C16AA5FEBCD14CC19F610D509A9D61A4
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-000447_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....5.......>m4.H."..#q.`...e8..9R%j....?.....~a...+....G..Il^.&[L.t!.[G....."...6..x.]=..`.N.H.G.)..VTw&...-X..M....C...E..Z0.^1q}..mN<<..J...`....-/...#...6....q..#7]...w..i............./.].@..n.(.r.T%..Q.]C...oZ.Y..d..L.3...Q..r..."...7..."...~P...L...'..=.;Le....s/.N..'.p.M..&]...rV.].}.<.{.@.....\A..+.g..$Md!..u.!`W..:.vk..b. C..^..9.....k.....#d.a.....E2.. "..........9@....ix..r......p....6U...Lr'.1..........?...rX..5..#.@..E.D...J.Y.--.p.Y8..wl2.....k.^U..^..w}.R.../{#.p..5......@.....k.....K.?+..:<b...,.h..Z..!.W...vnx...,z;.........w.B..0'.2.e....&UD.xSpx2...x.o..t...".N.Z.....e...Q.^.U....\|R.n...eLxe1....hk.......9..9.e.<...;......7.rP.g.,...LF.'.=.7.d.}U........z.i....}.".:......R......%4.Ig...6bFq....y.....I....O.M..H.=..5k.eD.f... .I..'L7...d..rT..".+.E...........04^..R..`...Q.../...q....g0.<2V..pY..k9....P..}..~8....U.m.e.'J.;fOj(6.Y..U`..`.'..?.o5..(....x.......34.4..we.1..........2......1j.^._....h

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	54818
Entropy (8bit):	7.958764785897656
Encrypted:	false
SSDEEP:	1536:SFUyHWBsRYtfKnzYMg5oZZJDn3qnajRj/imXXyMkM4+h:Vy2BsRYtfeY/OZZZn3/x/ByM0C
MD5:	F8BA9D130D40ADEC28CAB3A445B87B61
SHA1:	69025148328691A6A862A4642481C6508776E220
SHA-256:	39F3E047292B91A8DDA29B8CD50E8122B67091A83185E7957FD272EBE8108C8A
SHA-512:	DDE2B4ADD7082813FB4213CDE6245B4638C5DE3B4D73B556402050049153C7B4F59BC4A1DCCA591BBACC7839511BC25980679FD2CAD32942C00F3F5FAEE03779
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................R.........................!1A.."Qaq..2...#B...Rr...$%34bs...CSct...DET....5d...&................................6.......................!1AQ.."aq2.....#BRr.S3b...$..............?........8PN2}.&{x.a...Y#q.F.R> ..T...(.8].....B.Y.>.a.1.-.l`.2.W...

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5503034&time=1729844217554&url=https%3A%2F%2Fwww.retif.eu%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11881)
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	5.394401622099639
Encrypted:	false
SSDEEP:	192:vbnMC5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRwPWERcxzPuiv3NbP:vbnMhjURHjXo2BtcCuQcxz/v3NbP
MD5:	C3CF161C1D6CFAA89EC003CC958742C8
SHA1:	F0145499E1BA83625D741E24D2E6393F16182D1A
SHA-256:	8B635B6EB80B6C2D3E5A96F063F3548102E922E3EA2D492715BCCA9A7EB649F4
SHA-512:	8528EEB85A008D6059F7C5B152D3CC856F91A7A910C56D0059A4B1BCDE219159906CE9893A2548B5BA3DFD764637FD057F1291808EB41509DB8F64322EB3A467
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":741456,"rec_value":1.2799999993262645e-7,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":true,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","error_reporting","feedback.embeddable_widget","feedback.widgetV2","f

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	66
Entropy (8bit):	3.9721077567347134
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HVjROE9HSxmQqyRHfHyY:YGKed2pHDKcElSDPyY
MD5:	A20F61BBF661147FA65EC1ABF4093AED
SHA1:	C7306A9A3F8224E2E564FD170242E4B26BBA7047
SHA-256:	EFA3DA3BC784514C792213E4B3C842CF4DA752C0EC3EF14F4592A6A849DBEFCA
SHA-512:	1BD4A45DC90A18265C78720955D80FCAC6A3656C23BBC0C480078D9407ACF205399FBDD22942242642D20EC73759DF5613620BFC27084C71AF448CC2F36D55F6
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"TX","stateName":"Texas","continent":"NA"}

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.261301029168016
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HVjROE9HSxmQqyRHfHyI:x2pHDKcElSDPyI
MD5:	806699ED4BB65178112F5BAD2242C52D
SHA1:	F44771599DB97A9EA255845DC886AE69EC293024
SHA-256:	6595E4AA67EA4D50268F53193CBE84B2201B3130DC15F690165007BDB829E068
SHA-512:	01FD5927CB4F6A6C1EA7B91F9ADD3F39AB3CC936FC06D806BF0A7A656E008F4281A96B7F8A850D8D470E8DF832B95A539836D734DC19D33B9946C31C948839FA
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"TX","stateName":"Texas","continent":"NA"});

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49819)
Category:	dropped
Size (bytes):	477040
Entropy (8bit):	5.543135707637245
Encrypted:	false
SSDEEP:	6144:FkD8r2o5yNjtOIWAbBUgMD2ZRo3P4ISMvvi3Xjs3qXk9nK922Y:sOIWAb42Z2P3PvKHC
MD5:	F59D7929EBA63B796A5FEF68E7E8A1FB
SHA1:	BFB0DE5B0910801F5C24C0AC98D3871398FC00F2
SHA-256:	C9C556CAC9D0B45D11908F6205612471D4F7518380AB39D8FF862C3E613218EE
SHA-512:	5B617C91F6ADA39369C182AD8ED031CC6D50DE11EE1BBB07D7989C22D0D24E5A10A71A236A99442D4F15A20F76F2C4D0B44DC92D60DA6B91960B0C88F344E222
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"99",. . "macros":[{"function":"__e"},{"function":"__cvt_101093033_7","vtp_select":"black","vtp_query":true,"vtp_targetQueries":["list",["map","query","fbclid"],["map","query","li_fat_id"],["map","query","srsltid"],["map","query","twclid"],["map","query","msclkid"],["map","query","gtm_debug"]],"vtp_targetURL":"pageURL","vtp_hash":false},{"function":"__u","vtp_stripWww":true,"vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",2],"vtp_map":["list",["map","key","retif.eu","value","https:\/\/t.retif.eu"],["map","key","mcprod.retif.eu","value","https:\/\/t.retif.eu"],["map","key","retif.lu","value","https:\/\/t.retif.lu"],["map","key","mcprod.retif.lu","value","https:\/\

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	68840
Entropy (8bit):	5.322782061980959
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicx/:RIT7Vs9ZVKBYj8wKcHx/
MD5:	A2AC7E9992DDD767FBD310FA848D2202
SHA1:	745F000056E3133698DC061CB6D693A48E5D3B37
SHA-256:	01499A51A03C2C0D415BF1E53865511AC172E13A83331B667EDAED1557D6A896
SHA-512:	4BFAEFEDE1B75398859127A8EAFE6C96CCA42E9ABB696AFB7055A7D365A2ACD8FA227AEF85C0A2DCD8927C8319810DA2B2A74BC0F777CC4F2826E8137D006B11
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/671587811394625?v=2.9.174&r=stable&domain=www.retif.eu&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35893)
Category:	dropped
Size (bytes):	35934
Entropy (8bit):	5.554757107758269
Encrypted:	false
SSDEEP:	768:dFbdKiiE3yKRsCtFQzCkmK92VNiF+RHWBwXEYd0k:PbdKiiE3yK3tFndHe1BWEYd0k
MD5:	D93D2CFE91F2C6997770D0DB83F438F9
SHA1:	6A39EB4542BDCE4D3A44EC19206E3DB60A11AB19
SHA-256:	1A6EBCDD575A9481A6BE18E1B64F46504239B764099E73CBDF838B2A20152FDA
SHA-512:	3602947BC993E90F984B6662528481923EE17B1B0A3AF2ADC6F1561D73DFF92FEE53982D5AABC7DE6B95F8D31A56FCEEAFEB214C67F77AA680C47A7CCB7D9194
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e,t,n,o,i,r,a={24982:(e,t,n)=>{n.d(t,{default:()=>r});var o=function(e,t){var n="function"==typeof Symbol&&e[Symbol.iterator];if(!n)return e;var o,i,r=n.call(e),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(o=r.next()).done;)a.push(o.value)}catch(e){i={error:e}}finally{try{o&&!o.done&&(n=r.return)&&n.call(r)}finally{if(i)throw i.error}}return a},i=function(e,t,n){if(n\|\|2===arguments.length)for(var o,i=0,r=t.length;i<r;i++)!o&&i in t\|\|(o\|\|(o=Array.prototype.slice.call(t,0,i)),o[i]=t[i]);return e.concat(o\|\|Array.prototype.slice.call(t))};const r=function(e){return function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return setTimeout((function(){return e.apply(void 0,i([],o(t),!1))}),0)}}},79138:(e,t,n)=>{n.d(t,{BB:()=>l,BQ:()=>N,Dd:()=>b,FD:()=>d,FO:()=>_,IP:()=>v,JM:()=>I,JR:()=>c,LV:()=>S,OH:()=>p,OY:()=>h,Rp:()=>s,S1:()=>g,XQ:()=>T,_6:()=>a,hu:()=>C,l8:()=>E,mV:()=>A,qY:()=>f,su:()=>o,vB:()=>u,xh:()=>O});var o,i=n(72023),r=function(){return r=Object.ass

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	40300
Entropy (8bit):	7.9871938175751085
Encrypted:	false
SSDEEP:	768:lqfgNLhHiVWWe+NRfH2V+aC9uY9zpYPTSNgReA/K4ju5xmGNpb:lnQw+bH+69uYhpYEgRVK4jLcb
MD5:	329110D883936F94A66D97BD69DFE401
SHA1:	72781CE7CC1D3D363222C32352303E47FE1C78E7
SHA-256:	65B60FD22FF5FF69CBCD2A54FA0575C4461F716B8CB3D358C030CFC7335A352B
SHA-512:	78EFD8E02301B7116CDE19C01B9C90A465A369EEAB250FD405937FFBE6947A225427B41051E1CA9CE2FE6EE36193D7692B2255EBF2F031D25CE9CEEF1D10E688
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/restauration-gris.png
Preview:	RIFFd...WEBPVP8LX.../..c.MHr#.$.{....?."+k.cD.'........W.E......Q../c......U+.....x....6...<.OW.J.j...x<.Vy.U9..Ye[. g....VJ...l.U.5!...(K.F.......v..S........n.....;.j!Mi...[.7.r.zjq..I[.(..,....SZ.=......S.s..............A._...~..}J[.t...........n[.Uoh.H...a.-..S...=..TU:.....Kz.x.P...K...n$$.x.\|QMI$:...$y.......[P5 O7;Q>_.>.#./..........c.oi!7.$G..p...t'...j.#.k....`&....^.[D(.+...6......{...L.'......A.i..3..fp..7.o..bd....B.."....F.p..<.Z.'.A \|D...h..P..51...7.?.......Nz]..C.@.qY.n"A\|"".....R..>..\......<\..=...c.'..I.k..@...... ...cDd..C = ...$.S..p`.....1n.q1".p.E.sL.{".-...S.....X.?.......k...8..Inn.........A........5....,......D...}....,...b..`...m3..........&I..G..Vc.H0.........Mc......w{.10..\..N.D........,...c .@.C....d.....L........H#..sR..QN.... 0.... 0%....... R........ )...c..;.Cr.6.$...O.T...3"&@....#..:.'m+.@.I.l.t.h.... I..........-....)O....(..I......V...6i4W...mi.m.&..........D..@!IH.+6.-.!.x...'..`.e>.t...`'..I[KI....Y..\|.'

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26302)
Category:	dropped
Size (bytes):	26437
Entropy (8bit):	5.352730697881063
Encrypted:	false
SSDEEP:	192:PCzi/5OOSHTNzraEo/G09CeQw8rCJZnm4znsfnbMMJ8n7dcinFk66aO20CTts6H0:Gy0OKzrahJ4noM/O6ajTtswMsY2p2T
MD5:	54BDB05298B5FA7348131698675182AF
SHA1:	3147E6262CE5A6C566D1A01C99A6C7A9A647DA2E
SHA-256:	F0E3D47EB65A62D11613A8378BC2CEB802C027A6957B1ACA36AD384DC5D79115
SHA-512:	9153091686ADD8CF999EB7A235F12EB97FF6A29E979479618BBA5E023DF008B2574DFF732308349245BB442868D3142F12FF8E6EF11879164332CAEB849B6058
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["node_modules_bowser_es5_js-node_modules_babel_runtime_helpers_defineProperty_js-node_modules_-7e5f6c"],{51206:function(e){e.exports=function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?functio

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=21&tfd=11068&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 494x444, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13544
Entropy (8bit):	7.985226991860041
Encrypted:	false
SSDEEP:	192:CpvR6WMfN8WM47Q/432ENRWQ/u1KEj5/9QrBFoGfTPns7KPJTEx5c5z5eyiloqX1:EK37k4JRx/uoYFQrLLTfs7UA8ezBkMx5
MD5:	C8A6EB25AA9CA79B0B23FD63E28DC8CE
SHA1:	7D5CF2690EA63C4B95B5FFCE62DFF4E4F1A2C890
SHA-256:	F192CA52193EB4CDB5BF04BF5BBE247F1E06BB12D5FB8EFAA5CA64602D7D2666
SHA-512:	58A4E7742F26AD06520FEB788674DA9C0DD3E09EC8F6AEC6E75909BBD931F30B160A096395A7AEE2D37043B625581C1C65F370397DC1C7DBD6AA7EC708C1128F
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/emballage-gros_1.jpg
Preview:	RIFF.4..WEBPVP8 .4...........>m6.H.".$#..x...gn.....B.....\|N.Do9k.%........%.w.....X..@?.zaz.z&y.z..x...........~\~..?A...C...}.jS............~].....o..m.w...G./...........7.i...w..A....~.>^?..Y........?..s.....c...g..<.N.V.\yz...P.L{E....cJ+`..r....Z.-_.MUk.s..P..4b....@..}.g..m.TIe...KH......uz.I..B.SW.1.).j..<.Sa....m..+.D......rW....# .u.%...90.A...2.F+...Q.Q....!.F/.i..tuT...+p"ZP......N.....\|...VA..i.+V....P......!R...r..RA5..d'a.....M.I.h...:D.^..WVbj....>RJ<.-7'.V..P......D._.q......I.w.;.o.U.2..,.vE.e..V......GG....Q.-..../.E...O.z6.2......~.....dT.j.yWyio..!..z?.fS....eK...c.u.D"....m..._.@....>...+7B^...\....a..B6v.\|7Z.....M....7S.+F........q..Y...x..q,).........g..K1.MT.H.e.5J. D$.P..S7.nT...`7?P..uB....K....-..14...\.eX.....! .t...:..(..,y..h.QR..7]wa....A.+I+XK.5H..v.q0t":n...Q:A:.uA..0...E....v...*....<....ZM.x.....5.{.<..;.......g.b...0.....Pc..E........f[.......%.$.W..D.1d`U....J.aW...J.`;y..U".R.Q>..wI...

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	39982
Entropy (8bit):	7.987760416002742
Encrypted:	false
SSDEEP:	768:CJ3k2c8D+h3IrCHdeiLv4FaMKHiAMVX15BeyNzCo6ieY3Jp4D1NDwRO0:C1c8C6CHTCPVX15BewNMIJeDL0R9
MD5:	4DC94DA2A80BEF93AB6E3A6E2F072DDB
SHA1:	2F0007EA04E018341FA28DF7D7E8F05016175916
SHA-256:	94FA6D346910ABACD6CED294B9041458F8B4BF560F63AAE6789BFF0EE895413E
SHA-512:	36CDBFDDF8364CE5F8FB22263D27C3363FDB379B4BD4B7A7B473579709289C2AC8FF7A496AD9579A21A1D6E86AE3779E89EA598D9E0E9D3F6A4CD9F084AE78F0
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/vitrines-gris.png
Preview:	RIFF&...WEBPVP8L..../..c.M.m;n..{...s5....)U......z...l....~.M"~.....mP...(o.c,X..w...hT.o....-.....6i.f..%s>1...1Z....%.W......AE....\|.}.b/2..8ja...c..T..G.d..6ibb.....j...O..6..'.#..K.;W..\c..6.~...k.....(...(..g.......E.>..m...gr..e[..'$11M..I........r...I...-..F..r.....A.#[...j...u/s..n$...;...$.e<.97z.....he.;.sB.5..~....d....e} s.[....d.9......c7........Z..OH.[E.v..q..l]..t].v.6C...qA,...y.......K...Ir$....KC...#.......O......].........'.1.x!....F........D..8.@#.l...l...b#n.&50n%.hi1.b1....Gf0.....G.R...X\K........{#...cDq8\|.K.?&1X.f/F,.`.G..H,tq....s..!.....cb...TD.{3. ..O.'1..D %.G..,m..........}40..."G...i:h..."q.F.X...(..".. o...x...........O1.C....8....8\|.vbn.,@.#.@D O.F.+.2..5OE@..i......L5.Pk........P...5......'....$&..m...x>....x........+@..i..%...."(....`....U.....k(./.4P...J..\.1....."......&..c.....\....#. ...!...`./o..1"..3.~......Gk.r.9.uH..I..p.A)\................a..M..9 .....G[.w.8..... 0...nno...67X@.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 494x444, components 3
Category:	dropped
Size (bytes):	48287
Entropy (8bit):	7.965652236562607
Encrypted:	false
SSDEEP:	768:SF3M9+PXfnLvoUyp++HTkbTnoDoCD73KlA6vwME4qRkUdCBFLnTjeYdYpLjdi/wc:SF3M9S/Lvqp+qTkbrIoW7al3zNqRcNnF
MD5:	A9555CE231223FE95D2D408E8B3C045F
SHA1:	28216617998448FC0A93BB7F0EDC5C034BE66FA4
SHA-256:	929015C3B55537590695DBE410A4D3032D3E783028807D506CA0DA94DDDFA41C
SHA-512:	0672680F91EB791CC87C3EF17CA4CBCCE8744540BDEEFDDD9D65ECE3110DFBEC83EDC7F97F68D2EC601B4EB483ED40D4D6C87FB6CE77F32F64E4D0B9B81B1D21
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................E........................!.1AQ."aq2....B..#Rbr...3..$CS.....%4T.c.................................:......................!1.AQaq."...2...B..R...#br.3S.................?.h.(.T...9..(Y.........!`.A8lg.. `....mi.L\NU.T.Y.....9U.MG@.".,.U..L.f...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:H+Dn:eD
MD5:	4D5CD9F127EBFC59D63D5AC91880EDBA
SHA1:	4892F2C3940CE893E73FBB992E7D3C46F6808AC4
SHA-256:	F785DEBC688551E86D3C01C38E95E09902D57E114C5CE1BCA4DCB1969DE1CD07
SHA-512:	78BCEE4451E1ABE6CE46DBE40D7158FD804AB4978DF6F5735684E87C98991FD2B394BFF4A0A18A3E4A3CF00508C422B3FC5A28AC156061947E0EE078361E6658
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKs3pq4RpazxIFDXoqIIk=?alt=proto
Preview:	CgkKBw16KiCJGgA=

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	76872
Entropy (8bit):	5.311051992039752
Encrypted:	false
SSDEEP:	1536:GhAYVLLhbINyuFsXp09RB/6729QO56q43ny2ic5a4ywRV2OhXqtqM4WIBCneRurU:w3kwpVhDWIBCih
MD5:	10C7E04EE6593AFE088DC055FF7C597D
SHA1:	D5C895064A944D810812B8E06E36F2B8C41FC89B
SHA-256:	DD77FA93CD2360A98B84CF9259E91D1F302E307F34DBED437826A8C46179A21C
SHA-512:	B8C25A2927DD6D6FA1F2C684D4AC0CE17D67F5C4853ED2C9B997E0B360D035A4BC361B5D402793DE99B183AF64DC819F7A9D616B49E3A0A88C2259A0B3A52524
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/full-mode.chunk.js
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["full-mode"],{74657:t=>{t.exports={translationsPaths:{ar:"https://static.iadvize.com/translations/livechat/0.1.663/ar.json",bg:"https://static.iadvize.com/translations/livechat/0.1.663/bg.json",ca:"https://static.iadvize.com/translations/livechat/0.1.663/ca.json",cn:"https://static.iadvize.com/translations/livechat/0.1.663/cn.json",cz:"https://static.iadvize.com/translations/livechat/0.1.663/cz.json",de:"https://static.iadvize.com/translations/livechat/0.1.663/de.json",dk:"https://static.iadvize.com/translations/livechat/0.1.663/dk.json",el:"https://static.iadvize.com/translations/livechat/0.1.663/el.json",en:"https://static.iadvize.com/translations/livechat/0.1.663/en.json",es:"https://static.iadvize.com/translations/livechat/0.1.663/es.json",eu:"https://static.iadvize.com/translations/livechat/0.1.663/eu.json",fi:"https://static.iadvize.com/translations/livechat/0.1.663/fi.json",fr:"h

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1732
Entropy (8bit):	7.885315825502059
Encrypted:	false
SSDEEP:	48:cyoQUdQoCQuhlvecExJomZP0Qpk8KDibNaZk:5oNdQoCQuhl8JZcQC9+bNa6
MD5:	21CEA44B95A6FAA3C69382397C0C9C55
SHA1:	AF3A7030D8AB0FEC31659AE721EBC3FDE51078DD
SHA-256:	228D3AFCEDEF38A00226F5B50C4CBA61F50484164225D32D51E94AC94AA2910A
SHA-512:	0E437C0401B39282A4363BAFA3F89BDBAF83AF0265014D9FC26BC2B5F631026B51E4DFA65CEEA616512E79612322D948946E6F92730FA46D6B408A52213E1CB4
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/4/9/49963_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 ....0+.......>m2.H$".!(....in.s..a.o5.&....^......j...,..... .&s.g.m...S.$-.c..........g...T.du.#=....u',T..-~l.LD......I.m..x.%Yi.n..w.+1.&...@p.#X.....'4.@sC.{././d..7R. ..3z..p.r.....t...r.0.^...z.-vN.J.Q.OK.S....)r..j\e.Oc_.W....q.....K.....~......KU.q...A.v.6.4....y..D.E.w..OR........"{..Yj....7t.xs.=.~...IX.Ve....Y....5Y.O%.0;.......G...&..h.-.\|.Y...58...H.h..qW.........TT......w.).C.....L.@...B._#.j=y(.'...y..\..qGB}@......0....$....).....E".HN....0.4.9...h!.a.(;....(O..U...z..wS.z..w.I.U........s\|..9...;..IA<..i......>.e/.=.CVr....%..Up>..J.......X.&..{.../.)-......d....;0.[...^^.......r.4=lkT3.`:.l..?...a.R>Y.D...h.,.....).Y..Q.7k.^.P5.>.=...d9\|.t...7..F.RQ R...o.W..T.......@..k.._.[..{..F.c...U....0......[..3._.5qE...S..~...E..$......./.X..P.$0....L.p..Z_......F_7[....m-...\.L..J..D9.k2...QX.k..@8......>.......m......$......L..^S..o3.%.S]B...r.!.}......D...\...<..."....UQC:..'..Tc.6.NG.\.S.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49819)
Category:	downloaded
Size (bytes):	477023
Entropy (8bit):	5.543071435116847
Encrypted:	false
SSDEEP:	6144:FkD8r2o5yNjtOIWAbBUgMD2ZRo3P4NIMvvi3Xjs3qXk9nK922h:sOIWAb42Z2Pw5vKHz
MD5:	7621C02FB38F13102316BE60C93F20F5
SHA1:	3498B96720FB4C5C0D6F34BCE50DDFF7C344428D
SHA-256:	C9C56D63204C9F64B85CD9C656A182992A967ABB38114358512D6BB1A317D68F
SHA-512:	2F30623549A6FDB7BCC391664FF6B05250105DFF5CC3F570242AF8D7013E1AFCE8E4EA7666ADF3679ED58A5CB824E412010E2A6D8F1FE9A9981ACE9A910E3D8C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-WQF3C2V
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"99",. . "macros":[{"function":"__e"},{"function":"__cvt_101093033_7","vtp_select":"black","vtp_query":true,"vtp_targetQueries":["list",["map","query","fbclid"],["map","query","li_fat_id"],["map","query","srsltid"],["map","query","twclid"],["map","query","msclkid"],["map","query","gtm_debug"]],"vtp_targetURL":"pageURL","vtp_hash":false},{"function":"__u","vtp_stripWww":true,"vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__smm","vtp_setDefaultValue":false,"vtp_input":["macro",2],"vtp_map":["list",["map","key","retif.eu","value","https:\/\/t.retif.eu"],["map","key","mcprod.retif.eu","value","https:\/\/t.retif.eu"],["map","key","retif.lu","value","https:\/\/t.retif.lu"],["map","key","mcprod.retif.lu","value","https:\/\

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7893)
Category:	dropped
Size (bytes):	8327
Entropy (8bit):	5.126481278608494
Encrypted:	false
SSDEEP:	192:zc7AahwL7rXPlOrxJ4ORPF3wDD2X5A2TUfRfvV5Y7JtpxF6:zc7A1L7rt6xJPtF3wDSX7TSTgy
MD5:	2C756298E1DFA18116652EA7DE0E2036
SHA1:	3EFD5B6E63F45A77AF576BB180CF83DDCACD2354
SHA-256:	2E988C1A34FAC2C90119753FEC5F5141E8FB028019C652B2D1D30107DD5D3B12
SHA-512:	726FE8C7A3B3FDA6B6D8284831036509E49A1A6849A1EC8104C663F30F22FC79FD202E6B02DF8A9E4899544912317FF63F1821CF5F653B4D363C6C9FA7C4C590
Malicious:	false
Reputation:	low
Preview:	/* @preserve. _____ __ _ __ _. / ___// /(_)___/ /___ ____ (_)___. / (_ // // // _ // -_)/ __/_ / /(_-<. \___//_//_/ \_,_/ \__//_/ (_)__/ //___/. \|___/.. Version: 1.7.4. Author: Nick Piscitelli (pickykneee). Website: https://nickpiscitelli.com. Documentation: http://nickpiscitelli.github.io/Glider.js. License: MIT License. Release Date: October 25th, 2018../.!function(e){"function"==typeof define&&define.amd?define(e):"object"==typeof exports?module.exports=e():e()}(function(){var a="undefined"!=typeof window?window:this,e=a.Glider=function(e,t){var i=this;if(e._glider)return e._glider;if(i.ele=e,i.ele.classList.add("glider"),(i.ele._glider=i).opt=Object.assign({},{slidesToScroll:1,slidesToShow:1,resizeLock:!0,duration:.5,easing:function(e,t,i,o,r){return o(t/=r)*t+i}},t),i.animate_id=i.page=i.slide=0,i.arrows={},i._opt=i.opt,i.opt.skipTrack)i.track=i.ele.children[0];else for(i.track=document.createElement("div"),

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	226667
Entropy (8bit):	5.379258093221862
Encrypted:	false
SSDEEP:	1536:nwmvhwvwVyhMwe+0Xf1VHv9ixmXeTX0b7DDDbGw5wyP+zhEK9yr2IG+UNsnVB0iz:xhwvwVaMww1TixsnpIhEY6VUStvYScYt
MD5:	3D3BE78AC94E6B7EA2B5CDD79524A226
SHA1:	DF59266E5126570EB07E4572DB2E288D66DEB582
SHA-256:	E8D7CC2B6E93524746E8E404110E2522AF2E36914863A25C68CF059C12E71C77
SHA-512:	A87D578F8E1285A5C2325E8D20EACE959F57F17A27DCF34A6B46CEF734806729AC830D297D7C94B2C00034360F8812D101E233A967AF533404B24A8A3B2AC9D4
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.67d7d905831ab88336d0.js
Preview:	/! For license information please see modules.67d7d905831ab88336d0.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	54
Entropy (8bit):	4.22286794747457
Encrypted:	false
SSDEEP:	3:YAv+e9BAzzjj9exy:YAme2X9exy
MD5:	9DA2F36777CCD9EA5DE370D39C137F04
SHA1:	D2CF445BECA2C2C4D17CB977CA2999AF42E6A4AB
SHA-256:	EEB7D87C8E1C301569AA70B94556C46274C1A61F97AB5488CC914109FD63983B
SHA-512:	3E7A686AF8599B97ADB8FF59E6DE368E1C4D7FB1A0B937DECA73AEE5FF5313F1D64B277B4D6FF2CFDF12E5D86FBA0915CBB62E780A0783C98B24052ADBBA8E4C
Malicious:	false
Reputation:	low
Preview:	{"errors":[{"code":404,"title":"Resource not found"}]}

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2226
Entropy (8bit):	7.91416260107858
Encrypted:	false
SSDEEP:	48:4hBgmxQ9Vc9WAkEWfIUYVZeu6vn9ofvZ00YctPQH3Dfr9fssWUjYn:IVGf+nkPfD8Z96v9ofRBYcS3ts
MD5:	932E23B9B2F1A807BDD99EDE9FF149DE
SHA1:	8DFDDB3EE8A13694AEB05E4E5C9FD4C1E9208FAB
SHA-256:	238F7E6DA9FC7C1EDFB5F2408DC0567829784DD4CDB088B2A270DFFFCC3777F3
SHA-512:	8F0E878CE11F1FCC51DAC115E4B1EEF30E0268474764A163A076E69BEA125CAFF371F78309AE1152A6072D4AB7CBF7236C37530694997B602A1F97CB7B8D1731
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-000429_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 ....p6.......>m4.G.#"!)..@...gn..N$.<.....h>.._\......y.!3..0.ar..%...tNxAa.z....v.w....5.4..`.\|..\|..C.^F...D.......D/..8.Q.h....H`W:'..-.p.....a.....&P..&........=:y...BL.qR.3....r...^FX?Y...._..v.......H.z..._C7sz.>.6.\|.........k_..f.$XJ..8....w..%zsO..:M.e.....x.a....Z.d.>!R.6St...7.....?..5.R.Tb.].?...h+m4..h.$..Q._....x..g..%......#.)..~....S..7....V.........k.m,.E2.l....g.............U.NVJ.)..Z..$Y....L.....Ji.O...v...g..}E..6q1].3...E.].....$..&..W...;.i.$......J./#`R.N`F\L..~.d...R@Ojs.q....}K.^...Q.4...&.....R%M....d]..y.m.JH.......;.+....g.... ..R*.(.{.[...(8.c..:0......N./.n.&u...9$.(c..h.!.t....u..s.....B........v_.^.Z.Y.7...8.....;..\|/..a;.C..f..qX.h.].....Z..J.O....+.g.s{..E..=..ZE....e.....@.e...vH...U....l..2G....Z......v...=0.)...)....3.>....H)...k.g...{......x...V..wF2....4.".....D.+....d9...dx..........,..SR.....o.D..+.....W..z5.\|..n.L..k.g.!:..&.....\|..[.....r.^g.PV).k\|W.6~/.y.)tJ...`..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 266 x 95, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1085
Entropy (8bit):	7.575010232259123
Encrypted:	false
SSDEEP:	24:K0zcvfCnvk3na+BAbhszcfC4YY0ttIupe4mW:Nsfakq+mOIXCfFAc
MD5:	19484751D5E852868B4E7363EEECB136
SHA1:	E42518D4293A6A879D6EFB1F4DE02CACACFB8D72
SHA-256:	6D61A6B7B9244130A00C8D2778AE6EDB3976ED0BE433F9CA4299A3404A879085
SHA-512:	3B3AA51F4C30FECA360D909326FC06B52A68AEACC3FB4476FEA9297E880A7F3BB2DADF03FD649C19C5767D041125217193A7A811328472D0BE5040F9A4F1119D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._.....'!y.....sRGB........6PLTE..............................................................tRNS.0p..P...`.... @..N......IDATx... ..=..8.....T.............."LQ.PY.M........i...c..DU9..G....v..C....ux4'.N..n>s..B...r..b...B ...1.RP...X.B.....yfeeeee}K..a+.....r.0}..x....x/t]eA.^..aEP0..S.-..W5.a.\...\|.1WN....o...........(.).....[.h..8...b.2.].....A.<2.S.{.pL.....Q:P0..o...U.8.tL.s...p..`.........mP..Zk..b....0.E.=.>..K..(V.h\|..CQ(.X..0.>...7.z.(.b.....H..np,QE.(...G........b.,d.P..j.Qd..02Q..bo..D.. ..B&.}.y..D.0J.6.T..&o\|_B..(CPL....A...P....-..j.n..).9....`.......%...z..I.p..h.`],<..(....(../..$"_..$..D.&..wv.....P../..y..w.2..(:.'..T5-....u.=...EK..BA[...f.......8P0,?......G...c....so.s....J.?.\|`..4.......kP0.Y!....-d/.9L.RX...D..-Q.o..:..+>..&....~(.i...do.\|C.Q.....qC..4....A..a...y....Q.Q..Y....Q%..n...+8^....{Ar.P..+A..2u.....+A..r......^....._%..w-.5BP.q.\.Aa.0.r!...\.AA..9(.r...;..1..P.....\|i...$.D..../..P..B...\.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4398
Entropy (8bit):	7.960154251552218
Encrypted:	false
SSDEEP:	96:zdJxgg4zyBTBL990DmE3K4rUQ9K26bEBpdAZ8BSRJdfCblC4X1X9cuXJqV:zdcg4zQTBL9ImE3jrUaQYpd0eSLdfRkg
MD5:	5D2E6D14A343AD0353F8D96DB282D40F
SHA1:	28CEC6F4992620D4FBEE66BF6604FCA7D5D5C445
SHA-256:	13BBE83D42D8FE6C02482837245DD2C80FC4617865F066B1CD41C28584E0E1C3
SHA-512:	E127F096C3A85E7E641E82F286F82B8D7ABE7E70744B3F2E2D91CE9E3D512EBB5EAA7767C4E6C1E7FA2E7E2DA02874BFCBABB8D0EB76070AC5A05F2AD4D2C5ED
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/602128_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF&...WEBPVP8 .....G.......>m0.G.".!'9....M..&..G..+.>.....L............8/.......^..j.....%./.<..$.}...3.........d....7....[...._K..Y...(#K..I..'......YU.M......t...`.....D..Z,..u...'.=....X..._..x.s.${..P.`.P.R..\6."...W..;6q?...O;.u..%-.-....fO...hK0.-.Q%.4.;]..^...P...7..J~..w..j_..i.2..5...0".0..@...^.].m3..37q."..)....aH...He.JN@..`..\.....X.P..:..p.b.~.T5..,HT;fO.U.C..b.<T.1+.....)G".v....G.,.En.....2....2^....v..3..$.w.Mo.....V.J..Zq@.k.@.WfG>...q.....6....wu....vM.1W{&..&...9..BL....F..B.I.m...:..."nZ...S.L.D...[..............M...;..R..~........]...yNz......<).0....zw...-....%.:....25w-.OWI.^.lf.{...r..y..8!.k!..B..#H.V.0..uaM..Q.1$9;.......j.....X..S.............+n....R......_.PkF..R..X...%t$l..SF^...9fp..]..n.....B...... .".....#G7-.cf....X...bS<.X.6.c).\|.....R.w.@4uW......`.....a;... jA.....JC.W`......{...X.......j.......g....J.M...1..+...Ug.\|.6......e..0.Z.q.H....^#z(a.,Z/...u....k..~..y...N.W#.........z,a......c..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65279)
Category:	downloaded
Size (bytes):	143707
Entropy (8bit):	5.24918499382695
Encrypted:	false
SSDEEP:	3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:tJLC4dkEUYnafpl9v8cIWybV4y+oGMMC
MD5:	8BD8F48B3E09E7E11B31F44C54A3767B
SHA1:	B79B15912F8E31BCDD1EB4D91A84EC1225EA34CE
SHA-256:	B08CC9BD79F873CBF3A9468010074BD1C2EDE4524D993A1F42EDB1778FA3657A
SHA-512:	C1D50CD01C4CC8C0BF61E9B54560E22225C0EACB17328C72A62855130C4373E7EDCE719E46EE2CF459B197C3ED869C4E879090D1EAA3AB0D50F12720340D66A1
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Retif_AtomicDesign/vendor/swiper/swiper-bundle.min.js
Preview:	/*. Swiper 8.4.5. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2022 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 21, 2022. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],s

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	54072
Entropy (8bit):	7.995751683678747
Encrypted:	true
SSDEEP:	1536:0GHw9gEYt7ZINvKYmPHwUn6/2g2RJOfw6kCJgeAKn4O:vAWINvePB6/2gvfwE2Kh
MD5:	4C7C9D19E1D1388BB64FF00B6B1C8051
SHA1:	4652F8567E035D7B45F18F212095A62C68298112
SHA-256:	969308F80F05E8FF43C77E2DD7BF0296F4539EDCB7085A4540E386825810063E
SHA-512:	705E8FC99D528CAE6D2C217F250DD1F710F3F82C1E65CD4AE1B228CF1CF2E88478E243EC77DD7216A63F7C7B4C48C26817CA1E50B751E362794771C4188421BF
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/campaign/Slider/noel-24-2.jpg
Preview:	RIFF0...WEBPVP8 $....#.......>m6.I$".....P..gn..c.Zi.....V.\|.y.~o.....9.{......v..S............7...x...=m........._.~.........#..............\|...../......J..>.....!.<.....%..........m...]z....?.<O....u.,.f._.............G...?...x..O........G........+...;....................?.?..................9..........._...zW.....?.O...d;X.....h....".Q;Z/...2:.,(..,.O..w.'.C.sf\|h....W....D.,.H.b.D....#m..U...u.6f>1..8!y.m...)]..A.......p...mq<Q..o...D;@>M....ha.........Z..1......gRV~t...?.J?.W.\|.\|4../......AE.KH.$Z.t.</.."...]........B<T_.....n.F..w7....E.O..K~..NK+...EJ....B....!.#..A:.'.V.^..A....k...a.L..r..D.i{K;.._.....i.. .....a.....e!.....]..[.U....~.)...i.W.hZ...K9l.n.3..E..R.1.e~.<.HF....O .u..BNS....j..$&.,..Q.+%Oz\.........6<..>n\4d.......u.^...b.........ep..=C...2.AM..E.u.B#.%.E...#....i(....]=......L...I.....T..2ui....98...p....-V)i;x.$$#^d%. ....j..^.k..(...w}..Pk......{=.j.....).1.....V..7k...h..S.M....@.jz...U({.....1..S5KJ.."....O(=2..Os2...8

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	7.873157762797638
Encrypted:	false
SSDEEP:	24:onfbQLsIf8/cL9lvH4K0yptgJwtjo5EMHvmVtytz2qYYYqFuyy/1b5uvrBl8f+SE:gosIk/cTvH/ptvcmVCHMF7uzBl8fHd49
MD5:	BC54B53B340BD3F4783EECE6A3B536A5
SHA1:	7C98ED23E5C460D4B2409E1DFD22FC347E2EA256
SHA-256:	06FD9CAEBCB62C633116BDC22E8814CA45453449C645FBB470C6DA309D401627
SHA-512:	7B1102EF86006BC4BAE89638CE59A4BEB60044737E069BE1B2557A79A82FFA58D37760160B86155DEC115B858246B3DFDC53BAF01D4C3C1C02E3F1884D73DC3D
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/2/52705_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....(.......>m6.H$#%!%.YP...gn.np.\\|.W=P..._n.<.\|..2.....s.,4 .O..4ZAg.0_N.l.W.h...$`...U2...../.5..b.l..6'......Q....$6=....7....gB.~^...o...B{.oku>..e..?.......;..u...o\|Z..z..5...pc..z....E....(.......Xoc..9...J2.x&CPSj....3&z..S...sy..............+..<.[....\|....k............k.Nq.1y.S~.`#.q.....]. .}.pFb....u%.}:.....E..q#.............O..\......T..{.[$.P..oV.<Q.z....8 .....0K....P.a.....,..\lE\.....gK..'07U.4Pb.4O.l.Uf.....-.o.Q....P..1.D..v.+.m....D.Zn....s...E.....V%...Z....b.....r9......yy.dh.<k..S.].9......D1.[f..d.(...).^.cEFh......hv?..G..s}2...W..#y$.&.....v....\k..........?.....P..j].P5.P...%....K.2.D,e....;.2..[..Z...X.~.Y.a.........p.<.M......_.._..(*....s.&.)........,H..O..p........`.........p.%.&.S...?.....Oy..B.....+Tl:........TF./.0..".`..7T..+y....~..E+b..q.....r.W../...C^..%+.h7^.A.1.3]g.T.O.B.]..w.P\u..l3...o..-...;.}..Z.(...v..z;...m."..{..b.........DP.y'...`IJm.`..^.u3.^.....o_.7...?..@....fE..L..{.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	67360
Entropy (8bit):	7.964876971966663
Encrypted:	false
SSDEEP:	1536:a7fPyiHxPwb7AO+YRTHrjNNkvyertoNgaevgsWcizLmrtEe:sfPyyxWUe9DUt6gZv1wfm5T
MD5:	DCE0E1F1CECA3B13EB963D2CC5AA96D1
SHA1:	5893BF4339F2BAD0D8EC06EC0C12C5EB8DC492CA
SHA-256:	B5FB60CDFE0C57F92571AE7EDCEF22B662FBA5A82EDF2DBF7C249AE5D991D502
SHA-512:	8F15D3CCE6AF34F6B7CD1217A7BBFCB63C6183AF6257233FADED5CD5DFCAEB046BCF62D3CE79523A7565578B8B9E65C0F362A4969998F77627D772C7A82C31BF
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/black-friday.png
Preview:	RIFF....WEBPVP8L..../..c.M.m.n......z...)...;...`...'.........@...;.[.x....<.....d....d...<.A&..$..&.pw........^.}..yK`d.H.F.\|9+.$$.eB....7..Rg.0.R...2Q..1...".5...L..:..0I.f....E...'.K.z..b......6.2_-)AR.J'lBb.....~I..v..I.Y......z.......%'.[..O@.Y....L.........].%..+R..^^..UU..?.[.r.6^E.y.....33.h}..H..U@.63....;.s...0.....J.;.1....\|.7K..d.03=.....h.....G..L...'&=...?.xp....\>..g...?b.../..?..8a-..E.0.s~."....YD.........^@r.........D".k.SUk.p.I..4.`.a.Lp.......GF..A.m.,...".Gj.3..zO...W. .....2V%u..PP6...$h..z....F..L..P.L...2...:.1......l...x.1.......L0.........'.0EQ..<N....c.cD..j.*c.....,.....u..c.I .....;&1..\..f..6..t...f}u...u:...1f.0...<.;..#....t..1..0X...+......3..(:.c.....e....r......OZw.X........0..b...g..wc.";..1.....P......dc.@.+.4.....F.$g.3..CJjRYo.g[T0.X...&.t.F.Y.&....^..T.].hH........-...<..XP.!....9..4`.f......c..u...#.D.Y.L...._.Q....F.D.GqX(..=.4pt. ..N...=..wq'..X.F..].SP...:$.F...#<I@...ot'.HU....B......R

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	101507
Entropy (8bit):	7.991275684446541
Encrypted:	true
SSDEEP:	3072:UJo1HCYL0eXL8wKEirCN/t7wY9E1Vip2PbX:UvY3tirCn7wY4iSbX
MD5:	7F77EB8718A90BEE7B0B1CBD7F6CA2EB
SHA1:	E7EA8C7AD7BC82865B90E52381B1B8D5F5DE4943
SHA-256:	5B6E5FC0EF2AE19C8247161D57435AFCE32962B43969F0B59F545B4246A8BA53
SHA-512:	7AD4D487B1FA4FB316572F12B1DC3E1F816E0FA554F5CD71F4CEC578A1D8D448D35E32508D0F1A2512577C5CDA8C31662CB9F12C273484FE7F3841C91F4881BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y...U..Y{....wz.....Hb.. ..`.....c....+IAb..q.J..I.....C.'.8.<a......0.c..H.IB.&..7.{.9...V.X..;........~..u..w.s.oZ.w}..................................................................................................................................................................................................................................\@.............).I.#.K.G.......yY.7..OX.+ ...{..X..U?..W>n.O..........0..g.^....hh....>.x-....U.+..cN.@...W>.<...X...+_?....>..nhx..2....^.\|f.....Sy..A..u............j..q?d .4.x-..o.>.s...Z....3.............@s .@s ....;./.._.<\|.......4.c.O....`.. 4.r.4..@...W.7.'.].....O.?.. F}.AW..9.{.9..$......x+..jx..8...?.J{.^.h...h.........}....a...b.h..........Bs .@s .k...:..bEpw..4\|...............As .@s .;......_Ds...(.S....>..a...9.{.9..........5.5<.......V./.]N.G..@..@.k............9.o..K.k4.r.4.r..._..{...nx.#cJ...Ss.>........7...q.O`cD..\...V..<.Z.......98^.......o44L...&....]

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4558
Entropy (8bit):	7.666356379589772
Encrypted:	false
SSDEEP:	96:/6FdmOMLf8TxSoDY0DtedUVHzd6CAU3T//mSQyELf+BnZR:SFdFW9oDY07V565U7/mSQyELfMZR
MD5:	712A2FDDE79A52F9AD21B52E186DB4DA
SHA1:	8A9216220DFD2C8F64490AFA316AC65D4917BC02
SHA-256:	AAB8963EA008305E99DBC485C28371CAE80690B7D373E9EE350B3AD5DA3C4B70
SHA-512:	6AD73ACFFFAE2E37CE4B2377D200D6F3916666876158FD71C6A620F99E63D021B7402945AA17C3BEF4ED18F83CE8CD5ADF80B4FBCEEC6C8DAD87F1DB397F531A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................<.........................!1.AQ.."aq..R..#2B..3..Cbr..%DS..............................$......................!1A.Qa.q."..............?..Q..7TQD...A..7B.]..t..D..]....t. (.....(.... .Q....Q.. ..t.Q.J.R.].P%... ....AD....(...2)n..2)Q@. ......"...

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14972
Entropy (8bit):	7.988733567468848
Encrypted:	false
SSDEEP:	192:+1rfz4CcrK9fAIT8KU77xMv7rRMxlWlBTYTFd+NChfHER0mpk7upeDASbGjx0tql:8Jc2JAIJU77q8loTmdD6kRMcY00l
MD5:	ED3DBF57B21634141EDE2119547CD2B5
SHA1:	15F034171E17D85C60D2074F2965755A083050E5
SHA-256:	6E2501742BB987B64016FED60F2425EBBB9DF33326E0C1431AA09D670AE9B590
SHA-512:	D6A66489A1E3AEF197272854737A82ACE7E1581378C5A676AF66D8461EAB689C417D25DBB6CCD544D5B60B979B2D4E66E1EDC489F40C6EEF01DDD71A36E3A35D
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/paiement.jpg
Preview:	RIFFt:..WEBPVP8 h:...........>m2.H$".......gns..q....`........k..........HN...........K};.]............6i{.......~]a1>!.p.....,C.,gFw...bj".fk..U..... .]P..f....J........P..f...\.4j.`...t..J....zQ....?6....2....KX.(7.m..e......e6....b.].-Cr.t.......'?..c.B.F./k.9..h.>....8.."....y.<....;.....C.dI.;..$Kq.!E.o....?..^....F..\|.fK.....F.C.n..Sf.G...._.5.q.........M.C....K....^n...W&2.....17..[.............b^...h5c....\59..f,..c......1.w..g....^.!..S..2..q..A.OX..K...(";.X0.$...<......z.....O...R..@m^....2..s..^d=z.b.bMN...Fs/..>..F..."%.?.4{.......o.G.pg....'..2!x....i.A]63....n......g...X..5..s....7N9...E...a.....T....t....'....zW#......v...l.A@`.......`2.3.!..O.B/I\|..O....W.fk..J....`B@......-.`.o.'>@..].TF'I.#3&.........G.PYvW...M...,...]....J...ty/..8...^.#yP./ve.....k.4... `m..5e.\|..1..9.r.u.U.Q+..q...@..U..uR..*.<.h....l.U.a.x.F]G!v....^..5..w...U.b.Cw.....[.o2.4'W.....c.=..J.&.F.j@.......6...d..Z .Z.............+l.w:sB%..G.y

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4567
Entropy (8bit):	4.852498443321261
Encrypted:	false
SSDEEP:	96:dm1c+irG1COUyHXSGatNUO1T8j5we2UIQg0sdSXdQFslK5I+cwTI:dm1c+imocprlV
MD5:	358251A15117B68C69AFC72E57C9D614
SHA1:	3C6A85D428BBBFF6E2BC9952810DFEA960FEF985
SHA-256:	910DB69170F18EADBD72C687EBCC8BFCDA388B954CEB940227D9B97C9B6CC917
SHA-512:	59338A2E2888D1AACB3B696FD4D604A824AD3CECAEFDEDA6A16E1D85EBA614B39B084D690CC0E231485EF465255BDD1AA293D00B917084702EDB6AE2BE9828F7
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/rpc/live.1.php?sid=7738&lang=en
Preview:	{"config":{"overridenTranslations":[],"version":"e6eea7ff3a87d5aa0f604190aadd63e6e50714e6","curlang":"en","chaturl":"https://halc.iadvize.com/","secure_url":"https://halc.iadvize.com/","static_url":"https://static.iadvize.com/","mirrorHost":"cobrowsing-ha.iadvize.com","platform":"ha","ws_url":"wss://xmpp-ha-alb.iadvize.com/websocket","website_id":"7738","website_url":"https://www.retif.eu/","website_label":"RETIF","website_dateadded":"2021-09-21","firstPartyCookieEnabled":true,"isDeviceIdEnabled":true,"template":"cooktoys2","xmpp_host":"xmpp1.iadvize.com","lock":false,"routing":{"url":"https://api.iadvize.com/conversations/routing/"},"ibbu":{"enabled":false},"targetedVisitors":{"url":"https://api.iadvize.com/engagement/targeted-visitors/"},"visio":{"enabled":true},"social":{"url":"https://api.iadvize.com/social","facebook":{"messenger":{"appId":"622842001212926"}}},"engagement":{"url":"https://api.iadvize.com/engagement","gdprConsent":{"enabled":false},"prefetchBot":{"timeout":3000}},"

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3390
Entropy (8bit):	7.934158407113924
Encrypted:	false
SSDEEP:	96:/yduWpOg+WsUI7Qtk8iEY3zRm0qGFtoUiU:/ywWpOKYBDzRVqGF+UJ
MD5:	6BA935EF26C535711345321040ABCC9A
SHA1:	9584C18C85146B9C1006A13FA4B767CD48D9019B
SHA-256:	CD72386D0859C27AEF8AC1BF99A78623EEFE335138C0D760EA126AF03D2B0A2A
SHA-512:	910A5A041469AC8661DCBE2EB28E5DC151EF2AE0031289B97E9E2CC3C4EBD59F7B5C38822EC5464B0C617A4872BBF7BA15E47C530B1E3BF2E2E95D77EDC53AA7
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/603977_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF6...WEBPVP8 ....B.......>m2.H$".!$......gn._"C....n..=.......q.......'..L.}..>.......~N...w.a.k...?.........{.~....^2...b}.D..N..F.....n....i<.2..n....V+.j0..@HT..%.c....0../..i......6..9.3...A.....u...8.vy>o.3..-,...i.......9..X...-x.t.`.>....u..U.N.o>.;.g.i...~....d.....`..D..$..4... .V.S.T.;....e`.....H........f..Aj..G.....l....CHA.hG.ba.>.\0c.Oa4..#..M..:.u.Q.a.t.FCL.t....Op..4.G.r.f..8...X7k.1.Ta..G+..U...G ...c.\|...z.8....d$N..c7..,.D..D.....3...^.N8......Z.j.}....A..._...<_p.MZ)y$.W.....U24UX....Y....z.J.Qc."k..Jp<.......lo?....4.}T.SK..b%,....]..P<......da...s............)....#O.....}p.'.....nje..^....i!.s......X...I..v........E ..7&..LU..)...i.cs.....>...H...u.>.Zf[;.:..Z......)....k...}..e......\|3..L.r.....4V..S8.(.#=.\|..~...>.8..3M.W...8.n.....tK...e.5.D...#.AW.vl.u4.f.......'.:p.[v ........nk.yj.^.l..F."0..f...5...729.Q..(..j..Qn`..g.O..Js4.Sd..t9...).:....Z...C.!<..C..j#.@*..R.W..R.F.j......TA=]{.TSGjWh.../..y.'D.H...=

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28865)
Category:	dropped
Size (bytes):	28919
Entropy (8bit):	5.42179654948996
Encrypted:	false
SSDEEP:	768:kPL6VDBn1+Lc09VM9Q+NIGojicEJgUyZ3ZV9Hq7ZglDX7DUOZd:klfVuQ+6GoVmgUyZ3ZV9Hq7y7D7Zd
MD5:	258BBB5F32EEAC528420EC75A2F99092
SHA1:	84085C0464D38AE0286004A772A17C11DAEF9498
SHA-256:	BA5EE878EC8BCFA5A2B0EACFEE28F50D365391770F3ADC4271B6A33DD9A3E917
SHA-512:	ACB1DF6F9C5DBFDE757A9A0B6B56A0FA42B20AA691F9D08960C1762EFBD72B788AA08888455DB29DFD2812DF7686DB539E5DFCB50453DFBD62C847F8A89C20FF
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["orchestratorLoader"],{43663:(e,t,n)=>{n.d(t,{vQ:()=>u,S2:()=>l,Ql:()=>d,K9:()=>v,MS:()=>f});var o=n(62345),i=n(2574),a={DRAG_START:"idz-iframe-drag-start",DRAG_MOVE:"idz-iframe-drag-move",DRAG_END:"idz-iframe-drag-end",RESIZE:"idz-iframe-resize"};var r=n(24982),s={},c=function(e,t,n){void 0===n&&(n=!1);var o=e.createElement("script");return o.setAttribute("charset","utf-8"),o.setAttribute("type","text/javascript"),o.src=t,o.defer=n,e.head.appendChild(o),e},d=function(e,t,n,a,r,d,u,l,f){void 0===d&&(d={}),void 0===u&&(u=[]),void 0===l&&(l=[]),void 0===f&&(f="");var v=function(e,t){void 0===t&&(t="");var n=document.createElement("iframe");return n.setAttribute("id",e),n.setAttribute("allowfullscreen",""),n.setAttribute("seamless",""),n.setAttribute("frameborder","0"),n.setAttribute("scrolling","no"),n.setAttribute("title",t),n}(n,f),p=function(e){return null!==e},h=function(

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x500, components 3
Category:	dropped
Size (bytes):	9982
Entropy (8bit):	6.010686555320686
Encrypted:	false
SSDEEP:	192:SFxS0OAu+zOq87F4xP2/3n7uiLkMOrcdOAMunh12:SFUfAPS+xP2qi4M0qOAMuf2
MD5:	55BA05B75C2570626C03FC3E0FC9D087
SHA1:	3CBCE1BF52E4955BB25AE62626B61FEF8E309727
SHA-256:	7B43BCF25ADC50CA76FB2601058B59F4358629ACC450B417D50E8E95711946EC
SHA-512:	770A28AEBD50D7CE746EDA9B3FCB0688CE1D141CE612BED82ACF7C20D0CDCB2F6D74F64EB3EB76EEA42593CCEF678E009D5A3B0A36BF2716E7996057BA1F154A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"...........................................................!A.Q...................................................A!............?......'Q@.A......(.(.,@...H.%AQj..".P..P..U...@...ET.....eAQE....P....AAQ@.QqS...P...AQ..@........P.TPPP...\.QDE.....`"...AD1.DT.."("... .,@.......(.QEAEVT

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	95306
Entropy (8bit):	7.963494740136244
Encrypted:	false
SSDEEP:	1536:bljUScu8yG1ZWlrN+jo4IibXOEhN3eg5lDlamTT9i/A22Ql9gmr//bQGOTOik48b:+Tz6lrmrbe+5jQm9UA78bQ16CY9X
MD5:	ABB609916B0543D40B4689BC3FD37CD4
SHA1:	AD751AA255A69151B90F3691D9AB80E997E0003A
SHA-256:	A08FD0E8B43C720172D6B73621AAEA4B338243D445618CBCFCD9E7982DC4B47F
SHA-512:	236EB35754E52AA2D7968B1D36DECEC3FF6944E322C52AEB57636957B550F23F27577CAD7F575AFD06210DDA319E41A665E91CC019FE76CDF1964BEC106E533C
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/emballage-alimentaire-gris.png
Preview:	RIFFBt..WEBPVP8L6t../..c.MPr#I.$A.L].....`.X.f9G.....\|.f..P-.!).o...r).?.KU.......".......Z.K.$2.U.F....~.80.'.2.T.T...][....l..}...$.q<d.. .l-.iJ..F...x.....91....s.......htf.sN.5Q......WM..v..B`Fl.,6c_....l..DDT._.[...~.".......&vco...%....K"..j.5G..zG.F.5.....sY.O$O..eN.K..e....'..<L..b7)I..\...`tS".$.3.#3=.N.&Y!.....2.I..,P....H..=..!HV}.n.......%q..Z[... l....}.`...=...A6...7.9'.`.X.@?(.mWmG..7...`n.4?..n.....xs.....7..1l.3.w....@.%..z...FK.K......mK.Y....L....I.:....3s...L.'.L....L[......7.L.-....L.Sc}.d.H{{8c........u]?.....?zw........9..C.$AQ..hkX[ka.k.c....z7iT...S.S....l{.Iz0...i.....=.K.9.bB!.S..#...u......j.C...2.nH...?..#..........W.pZ.YLV..%7.I.A.e...Y8o.E.J..A..X.?vV..N.6......s...t.+.....:Ut]\.%........e8.>.w.....F.T,XQ..bR.j.X..5...I...tlk.k^..........[.m..5qn,X...?.xV...........7.GY"...s..S....h.c...n.+.......+.,.J;......N...da.II......./.9.s.s..:..v`..x.....#V,....:......J.'b...(..%g.lNkQ]...s....1K9.22i.3...2

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	21668
Entropy (8bit):	7.990663376357581
Encrypted:	true
SSDEEP:	384:GikTugTm1YTyhF7kDop+o8eLByagUCoNCG1poGUsOLs0/GH4ng:XkC8xc+o80ybVo5yTFsTYng
MD5:	6EF660CF7D54C003FECF93E0B41BD0B1
SHA1:	9643FB1D5F56538E5A8F86F085B3C7A71F2298C2
SHA-256:	36BA948D51ECAB1D1D2D242065FC3FF5CFC7785C7280FB2FB969C1964AEC4277
SHA-512:	374933165FD03C8C36F78389BB6DDD0E92145D80E9454CCB9A441C36B99DCEF8AB772D2FE68C23F1F95616696ABD90A5E73049663A03B4A4EC43B607228FBD3B
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/decoration-halloween_2.jpg
Preview:	RIFF.T..WEBPVP8 .T...6.......>m0.F.#&.+S.....cm7.+v.\......O.OY.s.\|.....}...{..o5]....2..y....8....w......_{V..C9......u3..J....L\|2.T.}.=.o.-%...........>....Fj...=..H.:.?.<....1...V........\|..=0<..\|z...?~..A..UAZ;.....%......r..B........IoJ...g.....'.qC...rp2...I..s.O5.s&.X...q..W)...#..\|....?.._s..._...xV.$K...K...R/3.^.TW.AGf,.1....k+B3..@.FM.Ee0./t]ERrP\|h").....[f..AB\h .oX{I...+y./I0m.3.b1..~....~. C.a..:...<X..."..F......?..u.;I.".........c 7f.O..fa..xJ...E.E.O}.o;.m.J...q.\.;m-.qBa.#.....s...Y........)R..Y....7K.....8....7g.^L\A.7h!9;.t...=.$8pTb..:..r[..c...S..#.?q....t...$.).+..{...H..(..^z....+z......Jd...FS...Rc.....\|..RN.L"/2S...&.`...=....X........$,]......+....`\|8.h.z..y.....6uR..O.U{...Q...>.......x.w.b{...{T.\...J.....A..L...t..[ ...1.b...h..N..Q.w.Y...p..M...PX.\|Z.....\......t......\|.bW2...ZI..N..{...?.A#[...Q!)M....[.....$..}...f..t.....>...-.4...!..$'........O/...8....$<.8.3.5.(..[...;.k..%A~A.!.+N....2..\q..;.c.2...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	25297
Entropy (8bit):	7.941375558888903
Encrypted:	false
SSDEEP:	768:SFjt1cTtpsVTbK15bBFkzmqqftdQBR89btYDo17Vo:SFjofaTyOU2R89aDV
MD5:	F0CCD2A34FF8B7FD3D4B73B4F299CA73
SHA1:	A8FF8476207C181072EFFE94BE7F106885D167D0
SHA-256:	50B98409B1EB67B54A71CE6744C46E07F102C38844B1A78EEE76CBE2E2963EEE
SHA-512:	A1A7B0CDE488D80E9B075D0932E1CF3A2EE9C371B6AF28636133EF218264116851947E077A0E538DD6D60A2C98D722B8F80CB9BFD872F91659CD625B09173281
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................G......................!..1A.Qa.."q..2....R..#3Br...b....$CS.%Ts&4c..................................7.......................!1.2AQaq."..#R.3Bbr.....4.$C..............?.. &.S.+...... z.l.t..Sa.L...uN.t@.e.O@.....D.~..J....t.Q%.$$....'y.P5.RD....n

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28865)
Category:	downloaded
Size (bytes):	28919
Entropy (8bit):	5.42179654948996
Encrypted:	false
SSDEEP:	768:kPL6VDBn1+Lc09VM9Q+NIGojicEJgUyZ3ZV9Hq7ZglDX7DUOZd:klfVuQ+6GoVmgUyZ3ZV9Hq7y7D7Zd
MD5:	258BBB5F32EEAC528420EC75A2F99092
SHA1:	84085C0464D38AE0286004A772A17C11DAEF9498
SHA-256:	BA5EE878EC8BCFA5A2B0EACFEE28F50D365391770F3ADC4271B6A33DD9A3E917
SHA-512:	ACB1DF6F9C5DBFDE757A9A0B6B56A0FA42B20AA691F9D08960C1762EFBD72B788AA08888455DB29DFD2812DF7686DB539E5DFCB50453DFBD62C847F8A89C20FF
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/orchestratorLoader.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["orchestratorLoader"],{43663:(e,t,n)=>{n.d(t,{vQ:()=>u,S2:()=>l,Ql:()=>d,K9:()=>v,MS:()=>f});var o=n(62345),i=n(2574),a={DRAG_START:"idz-iframe-drag-start",DRAG_MOVE:"idz-iframe-drag-move",DRAG_END:"idz-iframe-drag-end",RESIZE:"idz-iframe-resize"};var r=n(24982),s={},c=function(e,t,n){void 0===n&&(n=!1);var o=e.createElement("script");return o.setAttribute("charset","utf-8"),o.setAttribute("type","text/javascript"),o.src=t,o.defer=n,e.head.appendChild(o),e},d=function(e,t,n,a,r,d,u,l,f){void 0===d&&(d={}),void 0===u&&(u=[]),void 0===l&&(l=[]),void 0===f&&(f="");var v=function(e,t){void 0===t&&(t="");var n=document.createElement("iframe");return n.setAttribute("id",e),n.setAttribute("allowfullscreen",""),n.setAttribute("seamless",""),n.setAttribute("frameborder","0"),n.setAttribute("scrolling","no"),n.setAttribute("title",t),n}(n,f),p=function(e){return null!==e},h=function(

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 63, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	533
Entropy (8bit):	7.446996537314888
Encrypted:	false
SSDEEP:	12:6v/7/OEh+aw9P5Cu1kLm3H8A2oQ4MIZfpEN5W/axIf901:uOEh+pHke8kpfpELBSf92
MD5:	A7E110D66C73ACCE1E486060F12A5D34
SHA1:	0835228EC8F240AC73C9070F938B729BE4E97D4D
SHA-256:	1525A1122811CDDBE69471FBF7A8ECB9C950F227ADEE0AD2324A6EF9D78A5589
SHA-512:	E56F2D46EFF1333A8810F55618596B9E36D52E7876E36BDBEA0922346654000E9AD003532A5670DC54D3BD14BBA8AAEF69F510C7F46B6A4BE49BEE11EEE32061
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.....~d.....3PLTE.0&.......PH.0&.0&.0&.0&.5+.0&.............pi.........tRNS....d....J.......IDATh.... ..`.=\....vu.u...l....../..."..jC.m+.b.%..i....P.Y..[......M..D..@.....m...E.A.b...]..s:.8....%....2(@..."Z:D.:.Ph....".g..U..6....}...c...q}S5...qwS...O.!0...m.o..[........>..3..[+bm....G.'<.DxhOp.K........xIRwq..e.l......<B.......FS....=^X..i.....R...e}.t.*.\......e.........._.=:.....ko)kV.nC.,o...........??_...wF....<Y.....I.u.A..a......=...m-.t.m.4...#..i&......IEND.B`.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	17836
Entropy (8bit):	7.990000720284719
Encrypted:	true
SSDEEP:	384:FZUNJ15lPZ9ZpjWbh2EYDQWUy4ay4X5KuI4jr4YK7cU/:rIz59IMQWcaF5V4YAcy
MD5:	21676254B550282EAB4633C06040F898
SHA1:	3E228436588C1ED30033F23D6F17E6E09DCF0952
SHA-256:	E373AA32E1694DBABD434FA35C6AD827E0F0974E44242C44A47C3789F5469C75
SHA-512:	E669D5EC85097F4CBCFDAA276EFA053A6D585E7E0AB42DCFEDEC07F8B48E256C7AB9E2EE5DDB1A6C13949D10CB742295067424215B32479FD521F7CA21EE6CDF
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/semaine-dvlpt-durable_1.jpg
Preview:	RIFF.E..WEBPVP8 .E..0S.......>m4.H.".$#.....gn..V.O#....&R......n....'....R.`<.}+.Dz..;.....3...o....0..w..}..'.......{4..._....w.w.G.:.....W.g.O.'..?.....~O...G..>........?..L.C..{].O..Q..i$.$.mb......L.)...H.[..P7....j.L,9...'6....q..q.,.....#........:k.g....>..}0.l..T..%r.....H$..~?...P..~x.C..A..vs.+..`.RYi.hWfa.j......d..7@.....-....'0.M7..a.S...&...G.........g..f\.Ip.9.@ws..%=_..XP.o...8.uo..SEI&...#v....b..%-.XC.).....=..LKNw4=Hu..+.<.o.k<op..=b..RH...8.H.74.h,.Vx..qyi..S.n....L@t..;..mn.`..E.R~...3...WQnN....6..."..<,..g....w...TF..t..st..w.A..]...w{..-f...LB1AO......1..9.7.<2......}.`.}.&.}.....L...i..F...... f..q."(..dyA.n.~q....&..i/......,.P..F.X....%...K."O;.Dx.!f..k. .U.Ydu..0D"b..o..$....^^.....K.E.Jt....}.....R.s...a..w.'U$vT...Ml...e..}....L.....k...W..}....\|.X-$9.iS..~9$.O.3.Y.#.,...!..oy..NUN.".Z..K..v.G...5....'.T.R..<....t.....4....E..<.$...5..4Ud....U9`.<..B.....5....6..J.....2^.J......s3.x.o...0w.D\...L..6.I....rzE

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26302)
Category:	downloaded
Size (bytes):	26437
Entropy (8bit):	5.352730697881063
Encrypted:	false
SSDEEP:	192:PCzi/5OOSHTNzraEo/G09CeQw8rCJZnm4znsfnbMMJ8n7dcinFk66aO20CTts6H0:Gy0OKzrahJ4noM/O6ajTtswMsY2p2T
MD5:	54BDB05298B5FA7348131698675182AF
SHA1:	3147E6262CE5A6C566D1A01C99A6C7A9A647DA2E
SHA-256:	F0E3D47EB65A62D11613A8378BC2CEB802C027A6957B1ACA36AD384DC5D79115
SHA-512:	9153091686ADD8CF999EB7A235F12EB97FF6A29E979479618BBA5E023DF008B2574DFF732308349245BB442868D3142F12FF8E6EF11879164332CAEB849B6058
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/node_modules_bowser_es5_js-node_modules_babel_runtime_helpers_defineProperty_js-node_modules_-7e5f6c.chunk.js
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["node_modules_bowser_es5_js-node_modules_babel_runtime_helpers_defineProperty_js-node_modules_-7e5f6c"],{51206:function(e){e.exports=function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?functio

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	32464
Entropy (8bit):	7.961021077990574
Encrypted:	false
SSDEEP:	768:SFQy0oeAlG6bdjiiAdPUCr5Kzz2stmjj6FalbUjhEw+9U:SFQqvR2iqrayssjjchU9U
MD5:	6A0EDE4E3D82434E221B35A04CC9EBCB
SHA1:	E5CE819BBAB8969ED46D352A0668572F8A2FA7B6
SHA-256:	91AC5155CA93D937CE852D36DFF9379B0FD9F17491B655024D1E5CD1B4DA12A6
SHA-512:	F99012E20D304567B64E186027BC96685A7C83FA3F219F2C6933B48B4FF0DB5AB461A8A654CDE7490192A1C68504729BC0675F8BA975594A1B559BF2415A30FB
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................N.........................!1.AQa."q.2...#BR...br..3C...$...&45Ss.%D.67cdtu..................................2.......................!1.AQ"aq.2....#Rb.3Br................?...Q.............P.ejL....NxQ..2...;.....e.'ea.U....gEd.PN&...IM=<SN@..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	4.5969897580127865
Encrypted:	false
SSDEEP:	6:2LGaUImyCp0GlYM1wBJPyQK5DrIt6xfeGYqX3ofWLGJw47Jsr4z+LAltEJJsVsVo:2ffmyCkMwykgIaoO4nsrqHdyyv
MD5:	9C2160161305054AF467EA797A7C408F
SHA1:	8B427BC141874CC164E2BE3DB02079FCC99AF9ED
SHA-256:	7F47F02C93D5DE5DE03DB0EBFFA39FE1060767437B086996E295C9818A05B2F2
SHA-512:	FCCC6474CC18139B34DC40F6009C358753658E34CC2DF5B7D2C4E253BFE9647957A2FD23F30C86EC2087C2B250BCB0C570BB9EEF54B10DF6C4A3A6659F56F228
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/25016623.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	104873
Entropy (8bit):	7.988385858458158
Encrypted:	false
SSDEEP:	3072:dRNmOXYCFnuxeT+bUBtDSwTMmVZMMrXkUPYW:dRNmOX9dkW4iM2kbW
MD5:	EF37239A5A9B70BF26C3DED295CA24E7
SHA1:	408AB420EEADA235B38B73C48172633F19A53DFA
SHA-256:	E4E5C64DF920201CABEA33A6D2D247F314FC9DD7A42EA07C5BC82FA6F756F6ED
SHA-512:	F8E5B875DF775A5DEE8160CAD13E66B557037E63CBD59FA6DC57C9F734AA576E123E4E738812A557CDB5E9A4A788948CF062E8FBDB1CE42015698E7B76E50082
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..{.-.w...c.....{.o.#.@~.C.....h....y..(....%VI..E.S.Z. .....".U*I.AA.Z$......w_..}..s....{...>.{..<..>k.zu..^k~....................................................................................................................................................................................................................................r.....{....:^...\|!.....O..o..G.q....{..8..p7.......x..o.........x..G...x_8=..........E...R.3..../....E8)<.d.l8z\|/.<.....~.n...........xQ.}.......?..g.T......?../...6...\|.y.@:.t<........'.......].L...g.....[.Q....C...C.~(...............4..p....A'.....+.......Z................[.Q...N .A'.....?..D.............I...^2t.y.:..4.4.S...\|=0..p^YL......-.7ow8....@..N /4.....O.Ep...t\.........\|.v...^...!.....8i.l......o.~/......p:...@..N /.......?.O..xq1.....q....p:..N .A'.....~>.Mx.w....D.......@..N ....._.......G.#..#<...<G....t.yn...../..t.....o....[.K..@..N ../................F.nW.-

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	25490
Entropy (8bit):	7.98969756914959
Encrypted:	false
SSDEEP:	768:qZyWdAzV8A46DU6T18ZpIRA1Ev7fo71mrGQYN:UAzVrBUQ8YAivGGBi
MD5:	18DCAD3A3991FD5EC4144CB54B0BE44B
SHA1:	39C358854B2425944981B11336CD093F4764EAFB
SHA-256:	A0123379CE4F5AFDB1991725929940FDF7D5A156BBC01CCA3AB1A8BAFFBD92FD
SHA-512:	05688D460AD330D83DE1B35B0867A933EE7DB79A41A715834F3F1155860A110BA9DC7C0894B0AC52589E775564ADD3C48F6F6047E00EB9C7CEAFBC02248C6254
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media//wysiwyg/footer/Trophe_e-Prix-Meilleure-Satisfaction-Client-small-1.png
Preview:	RIFF.c..WEBPVP8L}c../+.Z.U.#.m$I....+q...[DL..HU....PJ....z.b6...^.3.S.B..[.;Xu{....0....f.A2A..D...~...$.............ff.b.:u..S..9uN153...9.\|..<.9...,.....F...d...+SK1.Hf..Lk.iE....f.....5....0.6u....cf.p..b....q%.=.u8m)fO.Z.s..L#.E...f.r.ig5.i.R81.R.EG.R.`.q..S]..cv.%f.0sbf.p......+.a6L.N...K..h..^C;<.g..'.1..3..f.d.....4...p.m>.z/f..3.bhG13..5{ajKu.....t...........4&....,x.+A..0...=.q.......m..h..<...w..c.m.$...Q1.=i.m.GmF.c........:..4..&.S.....F..eH...........1.....N.x...y.$...U\...I....?g.hh..........H.f.\.....=-.5z4....u.......N.Cdi.....e.\....pf-.i..-.#[..]...#E.C.G.D.@...n.9x.....`Yw...R...S.......HC..E........Q.LQ.>([...W...+.3k!...h.....Z...B..h..a1..a\Z.."K.f r....."K.E.....r.(r.r` m.t..^...).r... I..&..m7....z...A.[..^.[....z...n?..O.\....W.#\|S+<.<.........-U.~.Z.R3{H...$R.......U..........Y..3j<.?.I....>..>.$7...U.8.....\.k}.:.;Q.)...i.!."@B.&%..P .j.&.w..I.e.k}..{e.....T{rhH.....K....I..5`......:..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22462), with no line terminators
Category:	downloaded
Size (bytes):	22462
Entropy (8bit):	5.3079403194964465
Encrypted:	false
SSDEEP:	384:n83CmwWtdvD5ABwXCQ+3rpheTJ8eMAB6LxbnmcY2Jo7pR:ndmw0D5ABwXGdheTJHexzeR
MD5:	F8BDCCA15F32E7C14FBAFDEAEF1B8270
SHA1:	6C123320D5E7F6581DCAD1BB52EE0306DD4C8111
SHA-256:	CD5612F8050D557090D7D97477428EE22E8A5B546F3943F700C38898D8A72A2D
SHA-512:	1D717FBA0548F9A8B96ACD884628B2FDBF9B369C6075D87620B349372D24A1BB567F4A245180663C456D5DE96291154CE574443C7CE0E00AC04EA7B2909706D4
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPurify.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:"",stateName:""}};(g=v=v\|\|{})[g.Days=1]="Days",g[g.Weeks=7]="Weeks",g[g.Months=30]="Months",g[g.Years=365]="Years",(g=i=i

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8474
Entropy (8bit):	7.979591461709275
Encrypted:	false
SSDEEP:	192:trKdTTTvAJaJuIC8NBN39wbeXnOaTMjDX9jNIzYwF:WHoow8NBT2E5EX9jNu7
MD5:	BC38DA091BC726C8D181422DFFBC5151
SHA1:	E373FBF726B7F3D016D170ECFE08CA72F9706C01
SHA-256:	78025720C7F1A29AAA337D4F278D07C7DC3FEA117929C9CFB1BDF92BCDB07D94
SHA-512:	829E930A3428F71DC89E67AAD250DF0090FBD60211D43A82AC92EFBD66B6E356A8608D622A7E7F0418CA7F1EAABC51A872451D8CC3452CB77BFE549BBF64C29E
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502885_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF.!..WEBPVP8 .!...i.......>m..F$"..-.9...en._.]...~..w......O.....}3.z.....M...../.....~..w....Q.F.....O...z..c.....>w.....?...?A...Ca.....'./.?P.....?......r..........Q..x.}........~......a.........\|..<.....W...........!%.V[}yHa~........1.....i.....r.S.{...j....Vv.s^\2..`q.......nF........J.r..&....O.x..vg\.....sE......8.+.-..<....`.!S.......{)..kE.{XW....35...O$...+Sq...u..FfE.20b.>.AW.g.-o...i..?..6..c..D#.yW@+9I.38tt.;..C^"..[H(.>8..".5....R...).K....z\|...<O..&.U.[.39~........S->......uBX.."V.OB23/.7...^G.............4...........4.K.!.........!..iw..,...."m..4u..h..n.>b.mJ..._..XFNm..A..6......H..I.u9....?...v(.K.:..39.j...R..g....L.Z.,.j"%.I.e;..1.4[;...}..q{2.....\|.....A..(...y.D..q..c..YA...gP.).^...0..{.s.g..Wm.(.:5..u....@=..W..._.]...mH.lq4@..r..r.......P.Xv>U...\X.4...I1.....Vr$.C.!5T8>.....Yxj....<gE.E. ...9.....~B.......v.wHA.%.M..cn7!G..+.[....Sv..e...G.B.,tDJ.0..$..~=......s....R..>.lN..%..\qeL......#...7.?.%T.3.4;..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 180 x 63, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	7.446996537314888
Encrypted:	false
SSDEEP:	12:6v/7/OEh+aw9P5Cu1kLm3H8A2oQ4MIZfpEN5W/axIf901:uOEh+pHke8kpfpELBSf92
MD5:	A7E110D66C73ACCE1E486060F12A5D34
SHA1:	0835228EC8F240AC73C9070F938B729BE4E97D4D
SHA-256:	1525A1122811CDDBE69471FBF7A8ECB9C950F227ADEE0AD2324A6EF9D78A5589
SHA-512:	E56F2D46EFF1333A8810F55618596B9E36D52E7876E36BDBEA0922346654000E9AD003532A5670DC54D3BD14BBA8AAEF69F510C7F46B6A4BE49BEE11EEE32061
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/6875e354-5d35-47d8-981d-64db134c8039/31f05542-93b0-47fe-ba23-03a4bc23aeae/419374ac-2675-49ed-9145-b7ce9589a418/retif-logo.png
Preview:	.PNG........IHDR.......?.....~d.....3PLTE.0&.......PH.0&.0&.0&.0&.5+.0&.............pi.........tRNS....d....J.......IDATh.... ..`.=\....vu.u...l....../..."..jC.m+.b.%..i....P.Y..[......M..D..@.....m...E.A.b...]..s:.8....%....2(@..."Z:D.:.Ph....".g..U..6....}...c...q}S5...qwS...O.!0...m.o..[........>..3..[+bm....G.'<.DxhOp.K........xIRwq..e.l......<B.......FS....=^X..i.....R...e}.t.*.\......e.........._.=:.....ko)kV.nC.,o...........??_...wF....<Y.....I.u.A..a......=...m-.t.m.4...#..i&......IEND.B`.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2486
Entropy (8bit):	7.923173585159392
Encrypted:	false
SSDEEP:	48:VVuw6U3Mz5hhLxRw4s35H9d4Rla29Q9U45IUo33l5nAVX0dFyaunRUB:VVuwAFvo4cHd4Rfi9UM3o33l5nuX0dU6
MD5:	99F9A4DF71CA05329DBEA994D751970D
SHA1:	4067D220FDC737747CD9610C71DF5B6E2DE6D8B0
SHA-256:	DE54972F12D876362EBEF1C82C25BC31302B5BA17333A4E896BA1BD2BFDE9F17
SHA-512:	834075CAAECED2C5AB934BDB7D50B07557888D5B57BEEF637095789439D2677E578602DAA02D2DF9C58EC9C34367A15DBD12759BA27E8D2E93E500FB7F181A8F
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502429_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....9.......>m6.H.#"&".Jp...in.F......@.....7@.\.........pNr..~..\T..\|......x\|Z.P........]=..x.!M/........R\+Y..D.uPG.V#.k.b-...%T. ...R....,....'HYM.g.......<{....@5P...L......].9l.....-.....b.1.:.3.t...........P..i...5.a4<....M.E..1.9.lx..\|?..BlU.X9=p.6.4kC.ooQV\....'..D]..(......i..j..Q...0.B,Y..>.........m.....&..5.o..u..'.]x}U....z+.Y2.S.."+..+.w.>D.L.......7L...\._#.Q.1".C.>..:l.C.S.$':.`....9>....".. ._.t.Z.4..<.)..q.Z..._.7...t. .w............5k5.4.!......tF..J.z&.w.d.?i..l"..Wx...O....W.E}.~!sY......C..V..6._,.....K'1.O\.MH.g0H...kuWN..-.@1....(.#....7..O........cT..........?.~q_.]...{ W.z..4...f./.....Fg...G......$....c.n.J.....O.....o.R....PA.B.a,.....q....GYH....G...B......e.J.......a.............C....~M.=..z.t.8.W.....a.h.......Xp^......u1Z;.&>...t.....Y.!/8..8..<\|V..i........{V......l.k."B..y..e..K.:G..,..1..ZBk.G.r\....dj.H..Q8"k.k.A.E!...05....F.)F...m..Z.......]....s.4.:.[....Jm.]....k)...g9.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18272)
Category:	downloaded
Size (bytes):	18892
Entropy (8bit):	5.6711741148525014
Encrypted:	false
SSDEEP:	384:w3Li+9JTFdvXI+5CygRjnx2RWxahLMyMyOupEh+bNhnaeSmxMJpLuAw:SLielmHRjx2+elu4zaeOuAw
MD5:	51577CA8402B9A0AC5D7BA6D0C802355
SHA1:	7B7690BC3F57AF01AF9DF7632DE3D444CB585B9B
SHA-256:	0B2A9B6BF2B4A540DD4F9FC086B713C52E7E6F50B78D4B05A46E9E75798239B5
SHA-512:	4D45BCCEA7701CFEAB2835DA849C5C4272F8CE1D8C7DD6F02573DD9FD814E2D1A5C9E71BB5F68C7A62C106D16CDA9216F003D29224615E8F39C097030C7A909A
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/Cyqba_K0pUDdT5_AhrcTxS5-b1C3jUsFpG6edXmCObU.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var O=this\|\|self,M=function(Y){return Y},f=function(Y,h){if((h=(Y=null,O).trustedTypes,!h)\|\|!h.createPolicy)return Y;try{Y=h.createPolicy("bg",{createHTML:M,createScript:M,createScriptURL:M})}catch(Q){O.console&&O.console.error(Q.message)}return Y};(0,eval)(function(Y,h){return(h=f())&&Y.eval(h.createScript("1"))===1?function(Q){return h.createScript(Q)}:function(Q){return""+Q}}(O)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Yi=function(h,Y,O,M,E){C((((E=G(h,(M=p((E=(Y&=(O=Y&4,3),p(h)),h)),E)),O)&&(E=jJ(""+E)),Y)&&C(h,M,y(2,E.length)),h),M,E)},r=function(h,Y,O,M,E,z,c,D,S,Q,f,I,X,N){if(X=G(h,268),X>=h.F)throw[Z,31];for(S=(N=(D=(f=X,0),O),h.Av.length);N>0;)I=f%8,M=f>>3,Q=8-(I\|0),c=h.J[M],Q=Q<N?Q:N,Y&&(z=h,z.S!=f>>6&&(z.S=f>>6,E=G(z,266),z.vs=oR(z.S,[0,0,E[1],E[2]],z.s)),c^=h.vs[M&S]),D\|=(c>>8-(

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	30638
Entropy (8bit):	7.985945417199948
Encrypted:	false
SSDEEP:	768:ycFb0QU4mJywIsdvj1N5AMjz3ff24+58VdtZ1B+uKYE+b828K:yc2RRpj75R3nl+alB+vYEm8K
MD5:	C452E056E83C48C1EB9C4C184F097234
SHA1:	E5DC299D39E5FEE585A53F8121A6D63AC0E7E848
SHA-256:	114CF6137D0763D45B6DEB323B77EA6533F78111CFB7669369975EB7966C3D01
SHA-512:	C170640CCAF5F2CE46B6BC0D3F837E0DF2194E846993D259DAB770D43BBA241B68B7FF1758850F9D3D2B6F4A1A2B05A845F2BA16AFBD59DFD4D94ED1F7A4C041
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/campaign/Slider/bonnes-affaires-noel.jpg
Preview:	RIFF.w..WEBPVP8 .w..P........>m6.I$"....h....gn.....t.b^.e...3....g...._.?....n.}8..?Vx......o.o_...'....n.w.c.+.o._....>................._Y....?........S.....g.....}..p.....i...O.?...'.7......x?n.........#......................_.0=.....v........6.-...........+.......[./...o.n.....G.?`.z>..o........k.......?....i..........~..y...I..........Y..R.... )H.R.... )H.R.... )...Q.A...A..5..wU!....s%...up .J..gM..}h.....X=8....1.....l6...9.k...sA.S..-E....v~t......v..5.... ........s~./o..X.`...I.<..Q.l...)......DO..7'.."A..g$....w....}..EH........-.T.....y.l."X..-.g.~...)L._""...8."?.{x.xR....).J@R......).1.~g..#....&B$.l=\|..:..]>To...e..`...iEi.r4...D't.........-.f...1.?Q_......K.n...d...U=.n4.b.4.rK$/....!..AeMDnW.R7%..6EK...Dm.K..!...g.\|...uW.3iL./.o..q.....`..v.K.=a.....*S.\|'w=...^V..@..0T...i/...x&;..)....W.).J@R....).J@R.H.<...)H.R...eE].%)I.r]9b.O.Z....tVISu.._3GM.2....:uv.....@:.. ........3$.^...(.h..8..e...2U.....K..e.\.A]..:.>.-...}....K..vu......a8N.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	25610
Entropy (8bit):	7.943179820374317
Encrypted:	false
SSDEEP:	384:SFzFGLkIpYdouBzIeDJS3yEdTmDOg87sSuf0SKRIdV1POl9lUhnUQ8GXcvL:SFpqkIpYbEeWyvOj7Cb9POkURCcT
MD5:	32F90876E32F277D582CD4A7B8DEA6A8
SHA1:	ADB2554D1BC0FD43268233BF259D3897AE714023
SHA-256:	E23B7EC1C6669EA59C2D99DFF8110157D8149D2BE54CFB185D761481318D7D68
SHA-512:	F91DCD8A32487BFC96E2F0D5F222E99D57A8B2D584A3BD68F398046CC16E5E624086D8F44E4B944B3E02B545948B3E993AD3339BAE595439F7B06A039CA49966
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................@.........................!1.A."Qa.Bq..2R.#..3b....Cr..$S..%4c................................/......................!.1.AQ."a2q...B.R.#Cr..............?..>..-...IO..9^...'..>.A....U..m^...H..x.Vy{.V........k.C.M..g.,....OY.7Q5..a!...d....r.g

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	7.752759365366823
Encrypted:	false
SSDEEP:	24:E4lUohIETBipbQKrUojLWjmVD2zbDS4fC:EOeETB/zojTFu3S4a
MD5:	210BE32AB12D1B00CA537F45182F1A0C
SHA1:	8D1027ABB2E0A70BEE03BE1D70840FE4091CD6B4
SHA-256:	D06401E8692E5E818D049164EF9A929E3385CEAA7025D98AC91B91B746029AE7
SHA-512:	EC1DCA7BCB19B39AE2C1E62ED4ACE7D175BE439FEB983FA1EC8462333A31274739411AB391A2914A699AC83A0DC10D7801A30B359605684C98D3FC4593B3DF87
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502350_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 x...P-.......>m6.H.,&#.i...int_."......9/.....L.(v.$.0. .OsEV.Ub.......,.9}.......n:..N.Q...:OQ....T.M:..!%6k@..q.&....r...mj..n.4.n..IRg..P.%.'qq...[....F....ta-I..3:D..tp...4.,.l%.&\|#.....c...."..!...~......g....c........HV...;..OKc2]..7S...rX............U...&.;r.Z.....u..<.Ch.R\.:cq.b:N..X_E..J....P._....d...KJ..dy..Vj...g.k.....]....6%K.Zlo......n........>4..Y.@.&.}j.U+.....H...F.......A..<..{;.v.Ck...D@.L...Q....D.kv7..@Q....c.........G...z..\|.h.inWxV....o..L...t.T.#..i.2.......~.gh.B _OcA...........r..Od.....H.-.hU.?.j3.u.V{.5...h........#..O..C.FBj..Y.Z:.f6.i......6".=....$...iA........A.e..x.X.2s.T......p^>n...a....A...M.]..rFZ...EGU..3F..W{.M.S....d..T.+k.,h.d.y.2..1"......a_.0_.A<D.p.....&....@!.>.F.`...j.'.7N9?...dP(....)....<..k_...\|.xb.r..3\|..'x....fxF5)...A.....A.#NR.z.*.3m....uq.P.I..Q}...Od.....4.G{.....Z.j.....%x.4....b,...

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14394)
Category:	downloaded
Size (bytes):	14706
Entropy (8bit):	5.4205091835205925
Encrypted:	false
SSDEEP:	384:ys9X0SCg8UoDthaNyvhCV/KJKWrKFKiL2LKIQNvdNFKlRCLJTsK54:tdCDLDthDQL2IwR8TC
MD5:	D4B1B65CB91E146E8AD42571060AFDAC
SHA1:	08BA322F600D9B6927A25EF9E9E426D946CDB624
SHA-256:	45F8135B8AEEDEFF283C4057E5056C6839A30B380F13E3D663A1A0AF7FB7C7D8
SHA-512:	B025AD62FD0F8686038A9DC73703CAC0964D492ED075B755770AA2935DEBA36EE051B9EBB357EA664AFE3EC08EF678E2C692360A53CE73EA1C62779A4EB432A0
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/syncframe?topUrl=www.retif.eu&origin=onetag
Preview:	<!DOCTYPE html>.<html>.<head>. <script type="text/javascript">. window.CONFIG_CSM_DOMAIN_NAME = "csm.nl3.eu.criteo.net";. window.CONFIG_CSM_RATIO = 100;. window.GUM_DOMAIN = "gum.criteo.com";. </script>. <script type="text/javascript">. !function(){"use strict";var i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)};function t(t,e){function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var e=function(){return(e=Object.assign\|\|function(t){for(var e,n=1,i=arguments.length;n<i;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]);return t}).apply(this,arguments)};function n(r,s,a,l){return new(a=a\|\|Promise)(function(t,e){function n(t){try{o(l.next(t))}catch(t){e(t)}}function i(t){try{o(l.throw(t))}catch(t){e(t)}}function o(e){e.done?t(e.valu

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	439288
Entropy (8bit):	5.35491787953904
Encrypted:	false
SSDEEP:	6144:KjybDxkTAxsE7q92qfI2KaVi60k8s/XgZno1cEhqlaEpoVjCzC:IsxkTAKE7qas/7UyB
MD5:	02A08C2F7643E29BA3DACEA97BE5EBC8
SHA1:	4656AB6BF5F4EAA66932685A2B441CFAE8A74C14
SHA-256:	98084C6A53C7EB50E3987DF113AA1DFADB338F56277946A825EA5B153462E3C6
SHA-512:	99561DD7051F64009165DB51CDE2D37C1F63788F3BDF2286493375C8B8343D4E7EB7761109AFD3BF17A3538915C2AB5EDF24C0F881DC463EB1B2793293EE8F1E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.1.0/otBannerSdk.js
Preview:	!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,F=function(){return(F=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function R(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(function(e){e(t)})).then(n,r)}i((l=l.apply(e,s\|\|[])).next())})}function M(n,r){var i,s,a

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3231)
Category:	dropped
Size (bytes):	3280
Entropy (8bit):	5.31641160846564
Encrypted:	false
SSDEEP:	96:wJ7wKfFdF5ocKsr6a0gr3ocKseEBqaXgEoV:wwKt75P+adzPeraa
MD5:	E5524E52E8A13815CF87B10742E2D059
SHA1:	B6235DD5961F3519FE78EAB1C614EB7DEB039AEF
SHA-256:	71D28D93D788AC79B986E0C12008969547FDCC883F8003E36A4739B260E84A7D
SHA-512:	B1C47DFA1215AB0D9888ECA79EA2C0691E667CEA0F85B1D7EC4B398FA1DAE9550886FA8B351398985879A7FE57820D2EF0025BE55D4BAD4FAFCE5CF434BC2231
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["GDPRMiddleware"],{48049:(e,t,n)=>{n.r(t),n.d(t,{CONSENTED:()=>o,CONSENT_NOT_AVAILABLE:()=>i,DID_NOT_CONSENT:()=>a});var o="CONSENTED",a="DID_NOT_CONSENT",i="CONSENT_NOT_AVAILABLE"},12869:(e,t,n)=>{n.r(t),n.d(t,{default:()=>l});var o=n(36167),a=n(48049),i=n(62095);var c=n(90869),r=n(14294),d=n(32711);const l={register:function(){var e=(0,o.getIdz)(),t=(0,o.getWebsiteId)(),n=(0,o.getEventManager)(),l=(0,o.getPlatform)(),s=e.engagement.gdprConsent.enabled,u=e.preferences.recording_enabled,g=function(e,t,n){return{getConsentForVuid:function(i){return(0,o.getIdz)().require("visitorIdentityService").getJwtIdentity().then((function(o){var c=o?{Authorization:"Bearer ".concat(o.jwt)}:void 0;return fetch("".concat(e,"/visitor-consents/ONSITE/").concat(t,"/").concat(i,"?actionId=00000000-0000-0000-0000-000000000000&platform=").concat(n),{headers:c}).then((function(e){if(!e.ok)throw n

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	20345
Entropy (8bit):	7.846548073129422
Encrypted:	false
SSDEEP:	384:SFWsztEzMGzjXoDLW76UX3EWcacpNc+mZRcO:SF/0iW7BWaSMRJ
MD5:	35851BF55DBACC96B7C041A52F81EA87
SHA1:	867205873AEC047BA3DED723841DA25768B1DBA4
SHA-256:	C85A80BEA58CF56012385292E9FC6ECCAC7958991D0D6BFDB0ED1D458ED8F7DF
SHA-512:	F995EB51C8B80D4EE8D3365203B253A56BA7FF2354EA2802DED365577691B64C1DD7F4DA464FDC02804C8BB0AC24D531B1B8728C07CBA49300AC892AE9AFBE11
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................^.........................!..1.AQa."q...#2R..3Br......$Sbs..&456Fdt...%CDVcefv.........ETU..................................4........................!1AQ.."2aq.BRbr...45...C.3............?....f.DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D@DD.D

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13388
Entropy (8bit):	7.9816167626247685
Encrypted:	false
SSDEEP:	192:cA6MQfJuoe8SoyVJR02eOPCRpS/TBpGxqqaOShAjvigvXZMo86zHdc5:CuoeqyVJG1K/90xqseoSL
MD5:	CB73D76D37C5342109B76242B0FCD707
SHA1:	5CDD2B47EB980CD9F07F2209ED123EC36719ACC9
SHA-256:	08016E40B32EE97490B82EF032D567BF0202F2800821806EC331FA7D41039566
SHA-512:	C9059D477CB5600235536540F748364272E04D854CF26103CA6B469C1DEA9CEA4182985E2FE70B1FD4671CF2352E92A9D14809EFBA637A94DDC8C622C78A2E18
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/black-friday-2.jpg
Preview:	RIFFD4..WEBPVP8 84.......*....>m4.H.".&#u....gn.\|....e..]........M..n.S........k.?,./.......S........1....^...=\z.~.z....l.I.....k........1..L?7...... ..y.......6.q...?............~k...o.G..!~!.w.../...?...\|.{.-./..[.9.'.w.....?1.3.#..........Y.U.........).......w.o.?...............\|..3.../.7......~..w?........}ha..#L=..i..p.0.......4..F.{w...n..a..#L=..i..p.0.......4..F.{w...n..a..#L=..i..p.0.......4..F.{w...n..a..#L<@uyQ..R,.>.c.r......0..-f.f.!..f...z.D.....Y..-V\2....J...z.'...n..aw.d...J.......P..m5v!.gA...2(i.s\.bf.p......... .....w...%w."wG.k......`..M.j..5.,..`......v,).b..A.&.P-.&..}.~Ua.c.(.K.....V..@`.%u...Q......rq..6l......l......{[.c.........Sd.&..:>..N....hA.......%..9..?..Q+..d..._z.....c.......94.,.b..7..\|v_9.{.\.......;@...XOL.'.Luad.....n./m.g.f.. ..i..V.. .V..m.....-..K.-.$.......e......>..,...M....h...1...2....k..2....1{E.".;`.7lj..._6'....&./.b...j..@..>....n.dS.Ai..P.qtk!...'..a......e..G.....qf..6..!./.kg.}...

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8433)
Category:	dropped
Size (bytes):	8547
Entropy (8bit):	5.2257419357487604
Encrypted:	false
SSDEEP:	192:l+A7WOtwcsEiueDdUCJOwZ+lBsFgOEEzuWuypaLhFa/U7bD7Hk:BWOOueDdUebgR8uWh4Mn
MD5:	43D5E299135FCBCBAF5095AA276CBF9B
SHA1:	413549E4B0C1404DED3290FCA2C2727F1F3684E4
SHA-256:	B70F80571A9AD3A2301F6FF930DC51C77C97D0BA9C42D234EFC901F90E4EE8E1
SHA-512:	BDEE197F40A57FF3895FF873414C959DC84C9EB985D6A7BD7DA92096DE92CA5F82B7A3131FCF10CAC80A55D71863000FC7E68213B1F8A113D8AB075299D998DE
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["www_js_lib_IframeManager_index_ts-www_js_modules_shared_draggable_draggable_ts"],{43663:(t,e,n)=>{n.d(e,{vQ:()=>c,S2:()=>d,Ql:()=>u,K9:()=>v,MS:()=>f});var o=n(62345),i=n(2574),r={DRAG_START:"idz-iframe-drag-start",DRAG_MOVE:"idz-iframe-drag-move",DRAG_END:"idz-iframe-drag-end",RESIZE:"idz-iframe-resize"};var a=n(24982),s={},l=function(t,e,n){void 0===n&&(n=!1);var o=t.createElement("script");return o.setAttribute("charset","utf-8"),o.setAttribute("type","text/javascript"),o.src=e,o.defer=n,t.head.appendChild(o),t},u=function(t,e,n,r,a,u,c,d,f){void 0===u&&(u={}),void 0===c&&(c=[]),void 0===d&&(d=[]),void 0===f&&(f="");var v=function(t,e){void 0===e&&(e="");var n=document.createElement("iframe");return n.setAttribute("id",t),n.setAttribute("allowfullscreen",""),n.setAttribute("seamless",""),n.setAttribute("frameborder","0"),n.setAttribute("scrolling","no"),n.setAttribute("

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	614
Entropy (8bit):	7.605544489919557
Encrypted:	false
SSDEEP:	12:OCBF735Rkd2DdoLipQUMC57/04pPH69hEdp5lVOSX3cZvCP:9iAoLipQUMcbZpPH69hY5lVOSm6P
MD5:	776AA784790D79E79FA80EF8056CAC4D
SHA1:	4C625431A0AE76B6BD50F62019A5368736E632F1
SHA-256:	447889093DADF1654BD364154185D0A7B952D460D53A1A97B8E63D61D6782591
SHA-512:	3226C1E06754E54DA0088F2CB7E50020C2E5CA0D00232A830EFFC9A47E42FEE5440A3A034292E07134BAA88E85267401D67B773676C3E75081A9E955BC3C8618
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/footer/In-White.png
Preview:	RIFF^...WEBPVP8LQ.../s...UH.m7n....7.@'@......mS..~.m.VS....'.m;.m\|.}..FR$.1.......t;.9..^...naisz..M......=.a.#}....=..=.>?..w5.!...4~..O!.X..A,..D_d\..N./s.kP.A.....%..E.N..:..T..wu.Q.95...q...T.C....C.9...5.~.........ir.j..S....,..s.bp.uU.%V....wr~.-..%.9..`38t$...`...Er...A.Y..r0...h/..jE..$.Q.....,6.F...y.K..d.-.h.>>Y..d%a..hD`R..Gc.SRV&.B2@''..F\.XNrbz.Xr..s......V..C.`g..g.&...VyW.[+d\..#.!....m..../j<..8..........a3.Y...^...T._.B2[..F.6...'"^...(.[....9..C....9.W.....gA7G.Zg.#.~!.q.....m...UVz ...Q..>P..f..r....Z5.UN.O.]s;....&.N...5~5k.K.l~%......-V...

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1852
Entropy (8bit):	7.8952910268514085
Encrypted:	false
SSDEEP:	48:w8o4X1cQ4n2qt4pTEUx0c6w/nRHkkHFD5UAW+elm+dn:zdX1enNaTEs0Hw5fslm4
MD5:	F505E629B0AE8228194332263057B9BF
SHA1:	7F13689BFDBC40C3689AFE535A22B38A7C4EC354
SHA-256:	510D642230305611D53B511F170047DC8DB2BCD75F91EBB60F34B2532E1E8E25
SHA-512:	9B56EFC716887C7C6EE8864295D4D6A03A479C695CD395B337324771C2ABAFCF89779162390317409989044354E8BD79E27DEFC31A54396365A054EE63AF3E77
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/2/7/27583_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF4...WEBPVP8 (....2.......>m4.H$"..&.....i.,.%....J.%6.s.>.....tEo.....%...+.A]!.py..-..j$>.....Ds.n.#....$C.$..kx[`.R.....[8^f.i7....L..j....$...}.....A....HN]\|tK.m...z.^1......a.~R...e.....Z3.8...Q...g1.....r.p+.X2&p..A.xt..).k...rf?i..+^:.)...fQd.} ...S..A.._.9..&X..?.Rp...P..;....^n.01.?.u!.z.l.Wq.).Le........Bv.&.... ....Q...4H`yl.K;hC.Z......]SG...DtK_\|z.........h.lY.S..d.F...._..\.t.s..~.\|.-.,....-....#,@....k...<.4..y.&...........C..}@........[..v4.57.d.9ZG[...,..7..xc......}....^1f.u..Y..zWj..A..........T.#.b...6.2.]_U....h.#.?r.3o.z/R...k.Q....)....R..R..G^....n.......&O...I...S;.V..bd....g5W._@.C........C6...r..S"=...z./.U.....5c,(.......]d..U1k.]....Q.#fu../-..W..uQ`....3,.9^.a.+..@km.G...B}@......k.......0.........O...iC.}5..}~..i..;!.1/X..."...\>'%.....7`.Ef.)~.a{....YDw...........#...rMy..u.0.....is......O..;...XxC...<...mE....={}d...2.......e&wOO...d.l..J...q{...O....C?=A>.7>9BP..........<./.....0.].j........Ay

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	67808
Entropy (8bit):	7.977838466099282
Encrypted:	false
SSDEEP:	1536:08QK5ic8UBHL2hqFNUShElhGiZ1LbQm95GHnmK4Ya555p:05FUtL2hqFNRa8IZqHnPa555p
MD5:	E9A1D383EC135CD47F6C2A9A1F4B052C
SHA1:	9C93CF0AFA46AD32F9A4FC99740F50195A74420A
SHA-256:	D03D0309C36170C480A0111EA6CBC66542396C56A17C96F2D599CD1437516470
SHA-512:	36F00C9FE0FF8626C4866D7FDA436BED62F24F3827C2B82F5AD53F1BDCCEB3A9FBBBBD2D8C5C878341E0E419ABA5489EDBB7EDAB2DBB8C9F7EDEBA191230C678
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/agencement-magasin-gris.png
Preview:	RIFF....WEBPVP8L..../..c.M8r.F...=...?....#.?..Oo.v_{....."O.G.....Eoe._iC.j2N.i....T.6.L.\hK.... IU7`.R.oh..t...[B..M....\|..#.t....\|.$A2nI..$......Q^1.&.yH....w......G......Y_U...3o...\......vD.....{.v.....\|..d.8...@b.v.... ....G....l.f.n...dl.<.Avxme>.$.`'.. ..G\HRm;..C..........0....)G.S.$9.-gH....g(....x..\|..=Zk....Hr$.......P}\Qh...TEeEg....W.......H.........5\|..Y~.........8.N.?.K.K.......4........@.>.v..\|.gl...kw.\|^.....U....V.l.....!.{#.,wQ...iR....>..5....c.P<..H......5<n<.....!<GQ.^.R.....5.e.......~.&..}.<......@.}9....E..b..M... .. S._..R...N...AJ).Yc`.....P.^M.6S..V....f.g...k.H....v.n6...%<..X^.."M...#..8.co.I.FD.... ..Z.$t.v8. .%..)..m.N..DS...FDdt.p.....T.a.`.d.4.9l....%..P.6x...L.P. rq14,..@..............b^._.9]:.....d..rX..K.Al&.....Riy.{x.(.r$.....4.X...m...8.n......U......i.[DD.ADd..F.DF5.4lv.R.X..[.t.F....6..D..4.xX...).\. ,VIq!.......l.$......$..v7..CW%$.....)...e.`;.s..;.a..<.$FJM..:k9.....cMJPb:q.0.0im..K.B(.*b......A...q..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	2568
Entropy (8bit):	7.165194814808111
Encrypted:	false
SSDEEP:	48:/llXiF3ba+QdYzi88zDYBf+ZpTwz3LbjixkGZh9X7CGHubKWvii113M:/6F3Uezn8zDQf+ZpTwz3LixkGv9TwKfF
MD5:	CA5C7B8884E2D79772D8206123E6ED07
SHA1:	E31C93AC56DCC4D66ACFB6EF72FA4BEFC4C42FDD
SHA-256:	847AAAC1674994E9CB6DCD1CE51FD7F0CC38073CA96648E3250CBBE8AD0BAC8E
SHA-512:	5154D5F018AB6767220CBCAF7E24793D18FD1DB74B4C6DB2C7A0BD98E86527C91DDB588472AD419D3D06CB543BAB29464A89990F908EA9410EC5ACDD8273015E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".......................................)......................!1AQ.a.."2q.................................................................?....w,. ..:*..h:...!....E..EQt...cc\|...!.....j.).~..d.h....!.,.!..2..4$.....!I....$.-.z..J...(........-.@1.R..I....hK.....sZ.d.B.(.. .B..%.....\.C..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 58944, version 1.0
Category:	downloaded
Size (bytes):	58944
Entropy (8bit):	7.992544122086127
Encrypted:	true
SSDEEP:	1536:NN7mGJFI5r4uvl1TZxeeY9bXBTIS/uQzD7F5r7:ZJFOcSHT7eeY9TBT+u7H
MD5:	CF9F927332735EAE9D9BF587DFFBCD31
SHA1:	D10C17C369C88FD498DB8B83D4BB3AA0CD6BE6FD
SHA-256:	EFCBB07EE1EC0F43B6E54F7476008A492148DFE0B0D7DEF70D047E6CA0B401CB
SHA-512:	5263DF2A3107514CC7420CDD9D001C67DD8220595A87862BBB0ED7EE15B00F0755AFD36E5E94C7A5229CACDF45C122A0F7A067C9DA07CEB31C3D11B99B5835F1
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/fonts/dearjoe/dearJoe6.woff
Preview:	wOFF.......@................................FFTM............zy.UGDEF......"...$....GPOS.............Z..GSUB.......J...X.Y.OS/2... ...T...`X..ycmap..............`cvt .......\...\.-..fpgm...x.......eS./.gasp...............glyf..........l..4head.......5...6..odhhea....... ...$....hmtx...t...l.....I..loca...D...........maxp........... ...:name...........x...post.............@.prep...,.......24+.0webf...8.........9Z.x.c`d``.b...f...\|e..`...w.....;~.........r00.D.f......x.c`d`...k=..G.o...860.EP.S..0..x.c`d``x.p.........X..D...1..@.x.c`f.e......:....Q.B3_dHcb``.a.X.....@.._PYT..............5P..q2+....i..R``......x.e._H.Q.....CDl.=Xa3.$D.$D.&C...@d...A.`=..$B$L.H...+2B$.. ......B.H.....V.n..]..~.....s9.s.U.h.\|...c..BH.cts.\|z.w5#..G..`..4=C...5.?..k...({.$.>...zm.X.u.3i9.5..k.....4.....Op....o ]0......6..b...W.S^.[.B...D...r.P.[$.....3..O..L.nG.^......8}.r..Lr.)wu.....l.N.Mo..{%../._.C.jE3..Wj......<4...6....^..QU..&wF.1.[.&...(.U..r.mG!..L.qE...%\.....\..r.....R1.P

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	343939
Entropy (8bit):	5.1392002022999135
Encrypted:	false
SSDEEP:	6144:wq8kUafg/QjNX53di00X3AzZoSN1rKQnsSrh0EBMJMPgLdvOl6VNGr1/qa3jjE3+:rWvOwVNGkRsEB5aYm
MD5:	7EEA4C65A1E37915573C02FCD33E27A3
SHA1:	BD7F117B973B0855DCFD9AD04E6B6B394CEF0CEE
SHA-256:	405544162C1A8408A38133A7B553581EB6534765BB3064D3EAB03CCE5F07E886
SHA-512:	8DEA79D5A00A2C52D0FE40880719407E3F2E8ED21FF331AAD93C238E41F6A0A0EBF82244A9B0FFEC62141012078F14A7D40C9C6044E8D6065BB03AD8A56CF65B
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/css/styles.css
Preview:	@charset "UTF-8";@keyframes loading{0%{background-position:0 100%}to{background-position:100% 0}}@keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(360deg)}}@keyframes top{0%{top:0;transform:rotate(0)}50%{top:6px;transform:rotate(0)}to{top:6px;transform:rotate(45deg)}}@keyframes top-2{0%{top:6px;transform:rotate(45deg)}50%{top:6px;transform:rotate(0deg)}to{top:0;transform:rotate(0deg)}}@keyframes bottom{0%{bottom:0;transform:rotate(0)}50%{bottom:6px;transform:rotate(0)}to{bottom:6px;transform:rotate(135deg)}}@keyframes bottom-2{0%{bottom:6px;transform:rotate(135deg)}50%{bottom:6px;transform:rotate(0)}to{bottom:0;transform:rotate(0)}}@keyframes scaled{50%,to{transform:scale(0)}}@keyframes scaled-2{0%,50%{transform:scale(0)}to{transform:scale(1)}}@keyframes headerSliderTranslateX{to{transform:translateX(-10%)}}@keyframes shimmer{to{content:var(--tw-content);transform:translateX(100%)}}*,::after,::before{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e5

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x700, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	51330
Entropy (8bit):	7.99435375983556
Encrypted:	true
SSDEEP:	1536:W8rP0tOz52CFpugdnpXyKLhGfAf/DtA4w:WictOt7pZ7ZhZSH
MD5:	48EEE8F62F37EB9EE37FD2BBC6A1705C
SHA1:	B807A6438D52960FB4AD465E2827A3E0C0014411
SHA-256:	FCD21F910DB450F9A86BE2BA7A1056581343D7867AB2FB41928819086EA5DD5E
SHA-512:	940C3837CD783846051DDC4E8B17C59AB914460F5B63BD6B38C1AAABCFB29DC4B263568BC4CC552F044CC241368FF40DE708084C1242A546250B1FBCA0128C8B
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/campaign/Slider/noel-24-imbattables.jpg
Preview:	RIFFz...WEBPVP8 n....J.......>m6.I$"....(....gn..7.4.......r\.8...\|.....i...........c?.........1._...............?........J..........'......................?......U...k.g..k..>.?.?..........w.../..?....t....~.................?x/._.'....X=....'...o.............3.3.....\|i...w..._H.K...g.W..._...?........O...._.O.G..P.../.?........U._....?.?......../.......].......o...N.....Y............m..........=.?....!....................+_.$.....@H.. $.....@H....%.EUaZ...H......._.i.lD.a..ni.<..>...[;.%....D.J.m...H.-?p..b/...N.T...gJ..Y.ht....},...7..+_.$.....@H.. &hO...+.iG..kr.Z...r.`.!.vRa/.T.b.6FFt...O...1H..... S6d.dF.....A..P!p.yR?..%..QC.....@H.. $.....?)u...P...9.....e.U.D&Gj.....'...z....:j3..Pr.m.....W/.....'3'... ............h.14...4n.,...cw..d..v.."o.,.4...ZW.{.U.C}.......=aZ.. $........L<Pg..B...M..[...s.....4.Z.R..O..I.4.....U.[a\....-...gI.O..x.0.......%.l.Q..o.B......".K.Y..e\....A........p......!>O*..Rv."5..i.FM... $.....@H.....3....U.b.n>.0.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	6525
Entropy (8bit):	7.648681312366896
Encrypted:	false
SSDEEP:	96:/6FVc5XTZtoFApXk42Fdjy13fzToOMU9u7qAju9tS+RUmrnBS55RBJBTw:SFVctTZtV4G13oTqv9t97rnErRO
MD5:	A4B0E8F17EB286ED37C942C96A52047E
SHA1:	D5917387084A22C0A4FE55B8CAC0331E92141261
SHA-256:	4663F0B7B3154028BA44B4A780E92D634E4FEEF95F65D3FB7E8F7DE8A5923412
SHA-512:	E567FEFC3AB1169F606075E488CFB330CD4874E98A4ECD32BCFEA66F0BF30A36D16127211A9EF3690E05DF16F70AB372A91E78198C2486A5E975CD0E9A13F7C2
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................................................................#.#.#.#.#.#.#.#.#.#.#.#.#...M@........................ ....K5m............W....q.m.-.kR..+....EaNvD.....m.>.>.2.]..V......l..y...Y...M.v..GV0...]]....-u...]3.......}>z....&-.X.N.4.n=~.N4..v-...

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2542
Entropy (8bit):	7.925559932016954
Encrypted:	false
SSDEEP:	48:ZOzfYRQ8qacwV//oB/bIAUu6TVRXm7q9YbTulQJvvv6rgJ7xBndq4T5:kqjT//oBTIAUP/aqWnugvvCrgJbdD
MD5:	063D395C6F2968B748B19EC131D1318D
SHA1:	3D7438D5A5B988D2638C00DF8B2B2B0C10AF717A
SHA-256:	3214E3BA45EC8051E9EB7343A2D18B88D71445F72C84C2A5105CA385A51E51E0
SHA-512:	2D0847B67381FA177C3F8A8714EC6B241742B83E89D2A6CB23F153FA141BD9128A273141CC3D11C3F9A2CC9503CAC30159D1B118921CD04E887235E9DDC30D77
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/602991_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....3.......>m6.H."..".K....in.~.r..NE....:.L.....^ N...Se9.w..z.yp{5&..i`.C..z.Uk.y...L.VN.`m..O..aLt....v..Uo..F....q...%.+.9.!.<.Q...D5....V2.o;^1....@z.0s>.,....:<...5.V..U?kY...'d...P.2.....T.HC.....\|~X4...p-8....(.....Ymr.l.L.U...MMn.w..-@Sdw~VQ.........p.O..../p)...Q;q..w.?....csF.gv=Nm..96IaB...1.;...Q.C...S..../.]N..l..y.: 4.......z~........^.-.O...V..b.....h.....V..-...0.Yr..d.n[....^.Y.E.0..........Wh.....0_.U. .v.k].V.E..e.PC.gtR#...c9g.1b..^h......p.Xo......9.<.<...W. .-..}!...h..V\|....c.K.....n..z.{.;.e[..ssC^...82EV.9%o.ip\g...L.....D..../ImR...d...a}t.`$._.T..t.4.z....W.%..p.Z.H..4Q.m..&.w.l{..nA...84.M?."...r.5@..YON.3.D.;i.^....7..@[.&...mx.....\.+....d...%.ZH3C?J#G..ru..0....i.2>...:6..!.GJ)S....=......o.?..(.+s..^..Ks.l.Y[..-.P.\|.vO-.....I.2....=M:...y.\|....R.C...ee....N -]8bG..M5....EG....Lc.G..ZQ+6.. ...L.yo3......i.".........H.. .!^..MV.Y...P._..t...&...fN&p..oB....m;>.... ...e.[...4.v..).Z4.M...u..[.0{B!b.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49443
Entropy (8bit):	5.567497147259236
Encrypted:	false
SSDEEP:	1536:pJPJeRQ1ZHgMCCE5vzKSlfRLoZZcfK4xQk:fJ+Q1WCE5vzvf5oZUQk
MD5:	2C04B2B2CD24634F12392EB5C514DC3F
SHA1:	0CB29741012C9AFD506FB6DF017459769A5569E3
SHA-256:	52A86E648B39504C8BDED3357FA34FF6ACF1312D764E83913A239DF9D64C8926
SHA-512:	E5143D2D48D46263161BD0FAF8214202EF9CEEFFAB3DF2411183E23F89FE54127B0DEF9ED6F326258F6F35C84606B555BA4A6C4C6880F5283D631F8B2CB3DE76
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pclifeSpanYr":"an","pclifeSpanYrs":"ans","pclifeSpanSecs":"quelques secondes","pclifeSpanWk":"semaine","pclifeSpanWks":"semaines","pccontinueWithoutAcceptText":"Continuer sans accepter","pccloseButtonType":"Link","MainText":"Personnalisez les cookies autoris.s","MainInfoText":"Activez ou d.sactivez les cookies suivants afin de concilier confort de navigation et partage de donn.es.","AboutText":"Plus d.informations","AboutCookiesText":"Votre confidentialit.","ConfirmText":"Tout autoriser","AllowAllText":"Enregistrer les param.tres","CookiesUsedText":"Cookies utilis.s","CookiesDescText":"Description","AboutLink":"https://www.retif.eu/politique-cookies/","ActiveText":"Actif","AlwaysActiveText":"Toujours actif","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":" <h3></h3><p><br></p><p>Pour am.liorer votre exp.rience de navigation, nos partenaires et nous utilisons des cookies.</p>\n<br>\n<p><b>Qu'est ce qu'un cookie ?</b><

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	5853
Entropy (8bit):	7.735019890553268
Encrypted:	false
SSDEEP:	96:/6FqLvp/OVIeO2U6XPXrmX1f9y0SYwFi2ffNSJS9STE4eUbXU6TCL/ZbRJG0Ljb6:SF1Ie3UGXj0SYwFGeUb8byg0/
MD5:	9A7BC32AB3642646BCFF55CFD2B98D3D
SHA1:	229BDB4CFD828542E79D8E7037CA241C3A7E6128
SHA-256:	6A088B93E1068466DCB105FC6F5A3023F7387F5FDD3815014E45E99EE5B61B53
SHA-512:	CC8C331868FA1C970618CA8621DE52FFA7B4D7A1AFED566CB1AE685A92E57EBE16B12B2FED80C9C5AE0BBC260959359C3F8E969FA0308C65D3726FD12128CB88
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................F.........................!.1A."Qaq..#2Rbrs.....35B..Sc....$%T..4C...................................,......................!.1A..Q."q.2a..3R...............?..J" ...""...." ...""...." ..$dls.l..J.h..q.............y6%m.j...<d...R.....V.~k...R..

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311)
Category:	downloaded
Size (bytes):	362
Entropy (8bit):	5.267284793304081
Encrypted:	false
SSDEEP:	6:+hj6t3j6Vr+JAdilABNM9EGv0WkXbz2xKz1LV76VV:+d6tT6V+OdiSgE8aGEeVV
MD5:	9E290A403626E78EC1FD33F72031A21E
SHA1:	DE7651566D7960E6F8C0A41F4FB7D3012F24DB7B
SHA-256:	ECB9F22D28CF901DA027237961CE1A638008DB6955D86918C38BCFC82758BCC8
SHA-512:	F17AEB9980530F6D5DFD92F0EB8DEE78697A6D96038562A769577D417CD962FFE180B9EBC5BBEEA2A3653C96CE7A888D41D1521BBD15930B23CCF60B71FD50E0
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/handleClickedUrl.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["handleClickedUrl"],{89761:(e,i,n)=>{n.r(i),n.d(i,{default:()=>c,getIsClickedUrlHandled:()=>a});var t=function(){return!0},a=function(e){return"string"==typeof e&&!1===t(e)};function c(e){t=e}}}]);.//# sourceMappingURL=handleClickedUrl.chunk.js.map

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	78
Entropy (8bit):	4.932211513456675
Encrypted:	false
SSDEEP:	3:YMgpWR4blJQ3iWSr0ty7OAvyWy+Y:YMclJ9Yy7+
MD5:	92A62B3B72A3739CA43D5EFB7F172A87
SHA1:	863605CD31FCB4B3BE32E31E3C37DE5FB7A55B80
SHA-256:	E874E1917BD2EB7E11E408AEF7908BC5D43AE92877A4DD0AA3AADB93DC6FBC90
SHA-512:	00D01D7FF10997595CD2971A127B990D20997B78B4C2F2031B4EF98BEF35CF91BF695AD952DABE28C54402ACA6B8CC0B5D106C54F2DF098202896F68C74A857A
Malicious:	false
Reputation:	low
Preview:	{"id":"151","status":"OK","userid":"k-rUpmtWinzjvINIfCWPvjpcHWrNFafejFnb73WQ"}

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6124
Entropy (8bit):	7.9688608505103025
Encrypted:	false
SSDEEP:	96:HCw9FaU5YXBM8KyRoRnqTxz3k/6FbRgwIOIuW2+7yFxYX9xmT09/zlOt1IQetKUQ:Nz5YXu8doRqVz3k/6bRcut7YtxMO/5SS
MD5:	8724C1AE306930535FE8FD8D889CA81A
SHA1:	D95931295C6AE9A63C00E15DD98BCB93D8D13B4B
SHA-256:	1AA71827BC837B34B4A5033318D1CD32E064F75C37DD38CAE7B1D64858C6D815
SHA-512:	CAA960BF39CE89772D943CB325E42907A4CD389DB853E7D19AAD0B6CFC2B6FACDF4158EED8B074DD941230BD6FC4D8CD73BCDED1D7EA42E1AE158F202B6570F9
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-008645_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....^.......>m2.G$#"!(.Z....en...../..y.....w~...y...}...........?.?.....E_.w....,z_......q;N.....^!............R..?z...f...P.F.4..>^..s..~5..s..9../....c.s2..G.8...'.M./a5..`..,....9.FX.A..............D.].<...S7..R.~r$..It].9..z%.6.]S2.]g...........k..&..e....r.I..../....m..<.'...Ta..\g..!.Qd..1}.R..[q.B...K...UU1.K......EQ..b.1z.+ p.{..N.....S].X..B..K.....Ge......(...#'$..+\|L..Lr.S..v....QA...0gE.M{t.o.@...[.l.mf...xx...).,#+.x..W-b.....;V'...H...y....0d...z#.q.O..z....F01.q%....m..L.Yv.5...&X.J..l[w.a.lb....F.......q..>...>.z..e.A.S..W. .,.{~..\;.y\[...*R.....M.:]X8..[.u.......:":....n.O.c.#\|.Z....c..E?U/..#0exs)..!.....b....#...../..g.....11.....?....g..{.....h...dL}.lY.qm<..@]}w..`..R.x.....=F..w.m...#..C...`.Ms.P........<.....C..s2.?.....:5.x.O...\|.F.}:.K8&.m......O.t.Nu....,.'.s`.}c...fkp.p..........[.....7g.W.T.T)(G......}.1....xs.M[V>....]..<a.!..7.`.#.jc.]..........K...R.&...M......X.v../..>t..&.8d.x..9tD..Q.O.._

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	75684
Entropy (8bit):	7.986516208888282
Encrypted:	false
SSDEEP:	1536:n1PbiX60cRM1hR13K4dQbyHCisBj8GJoNfn4xVotb0pr21nJH605NeXvMyh2i:1Pbq60caTS4dQbACisaDN/2oKr29JL58
MD5:	617823C0882B9DDD3825C156722871BE
SHA1:	AB07B3896D0EDEBB7CA615376FDFFAFD507F673C
SHA-256:	8D93BF6C3F88422258A1525809491E97029D2AF694D4BE555236575C605F7CCD
SHA-512:	D6EDA47FAD70D0215FF048131232FF535D57AE5FC09EAF672460922E0C060C9F9832C1F2E7DD1F787CC3857951D8B5435D7930618E384F1ADF5C74CA6AA5222F
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/emballage-transport-gris.png
Preview:	RIFF.'..WEBPVP8L.'../..c.MPr.I.$A..e..n..pDVE...9........'.QJ..T%)....B.......z.\|.h,...u.O. R.z..k....Cc.gJRfJ......X.a.....0.wc...N.$.....'.`.[rl.....85.4?.[6...T7.y...9...g7twc.x....J...f..5eGl8..23.....:.{S..I.`..v...!.@u.^l....#..x.U...D.-.+I..n.=.X.N.JQ]`.7).W.y(J...c...(s.I.$..U.....#.b.......e3.T.....n.....3Ua...,....I.Rc......()m...MTEH..TGw...].QE.D.#:....$.&q..C.........$U..J..R.@..T....J..<..]..6..~...c.(3.iIU..........\............Pf.u...9'H.0>..../..e...s..K.o.9'..?........$..I:.........K.B.t.j3..H.#.r....dq.+..<..q...Y..$....u.a.+..0Sa 8#w...[....?..!..t..^.`kX.e..<mq1P.P.....=...MB......X..h6..@..f.2..n.H.x(p...G......+....O.....9%..l..g.$".:.>.oK.@.*......rr...I;.+....}..gF-..3.{.`.&. ".FP?..........`..B..Us......k.k.XaEc.'i.k.m'...eI..H..R5/.....Q-c.....J...t.@.......$....?.f{..>~.%. .<.......w..H......Vn.......2..........T./.~.........G.....L.`..q.~....@(c.....u.._............(..4M...Ss.Ae....BL{......2....z.%

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510za200zb9101093033&_p=1729844231789&gcs=G111&gcd=13t3t3t3t5l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=EEA&sst.rnd=831444307.1729844233&sst.tft=1729844231789&sst.sp=1&sst.em_event=1&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=1&dr=https%3A%2F%2Fwww.retif.eu%2F&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=scroll&ep.event_user_logged=0&epn.percent_scrolled=90&_et=89&tfd=3760&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7846
Entropy (8bit):	7.975024711951693
Encrypted:	false
SSDEEP:	192:K6LZ2rctwRVDhSzBzuez+etHSVlVg/c+RrthoEAb75uqq7ODeD4h:hFqR3Sdu2FyVlOvGEA8Q9
MD5:	FBBE3058B78D269E3E2E707C3CC439C8
SHA1:	7FA06A2188D789F1D72E9C4B8B0D9408A2CA6EF0
SHA-256:	51D0BF53A7D361DD185FD3BB0A1365C0FE9B0540A46DF266F80D1A643A75019F
SHA-512:	510379CC8C7F8752B0EDAD556E1E404061FAF4428412199F09EF05232131D8F685B100DD8249D5C17D5F531ADCBC7F253CB0BC38E195ABB683F7B64E3EC5F471
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502867_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....g.......>m,.G$"!..-...c.r..f...}./.......{.....>c?b.f.).i.................L.....K._..u......9:W..?l.9.../.o....+...../...5=.vA..._=....O..._.-...3......O......U.'....=....k...k..........~..o.G.........}...{........y..<T...i-....w...mR...-...2...RQ.X%Z89....h.6....O..nG4.Z..Lk@.^v...wx.Q?....z....U9VG.n.B.d....0....id{.....t~.K.y.....j..g.m..?..p.k..i....J...._.*A.....4.Y........z..`T....\|..\|...DO.Dj..ny..#..\|._.(p.H......%...]8.v.Q.tt.[ -.V-}V3l^.`..Vu8...\.p..oR:2.jR`..].oo.9h(S-a...?'.......X:...Z.7.p...v.1....'......Od...%?......(..P.....W.+..).......1..H.}$..;.eGRo...t.+1.<G...F....eq4.. GU+,.,{.0 CA..;..,...-.^.T,.ZTB.6..H...2....$JRr....@K....L ...b.Jr.S.^....0.H..9.M..>... ...&..P.....f.4.D.:.:.j.]s...U..Z.Yv..QN...R.z...&...e!.?.d\|.....k.=S....._.?..Y.::/d...q.CH..].z....1........{K......M..j.D..O..}..)\|...}C...."i.F....VU...R...C..S......g..A........H.../.\|.S.._-.M.!...="...>.........nw.F.`%..Y.I[...\.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	333495
Entropy (8bit):	5.61637443372764
Encrypted:	false
SSDEEP:	6144:b4ziRo3k4aSxeBvi8ECFqXk9nH+YFBBNy2UzZ:szi2krS4BKyWl
MD5:	F214737A85B7387018485C5C4D9A1E3E
SHA1:	02FE8950FE67DE90E2C875C89EFA1580F1F6BCCE
SHA-256:	77D7F4785BCDF576EFB1556BFF386CDD9CA7E365F0E284043B2290D30F41C017
SHA-512:	43C68AD564B228C3528D81B1FBDC4E5DC5D65F4FB36B713B4D2468A97DD78004C3BEBB1FAB16C0569BB5F24AD3C3CF0CD508432132F7D98295927D0021E1BB16
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6VQ11F71ZK&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"7",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","retif\\.eu","retif\\.es","retif\\.it","retif\\.be","retif\\.de","retif\\.nl"],"tag_id":108},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","secure\\.ogone","3dsecure","paypal","stripe","sogen","retif\\.be","retif\\.es","retif\\.eu","retif\\.nl","retif\\.de","retif\\.it"],"tag_id":106},{"function":"__ogt_dma","priority":14,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":109},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11881)
Category:	downloaded
Size (bytes):	13077
Entropy (8bit):	5.394401622099639
Encrypted:	false
SSDEEP:	192:vbnMC5tmjHCR/UeHjXWb2pTOnstdo5Cp0NRwPWERcxzPuiv3NbP:vbnMhjURHjXo2BtcCuQcxz/v3NbP
MD5:	C3CF161C1D6CFAA89EC003CC958742C8
SHA1:	F0145499E1BA83625D741E24D2E6393F16182D1A
SHA-256:	8B635B6EB80B6C2D3E5A96F063F3548102E922E3EA2D492715BCCA9A7EB649F4
SHA-512:	8528EEB85A008D6059F7C5B152D3CC856F91A7A910C56D0059A4B1BCDE219159906CE9893A2548B5BA3DFD764637FD057F1291808EB41509DB8F64322EB3A467
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-741456.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":741456,"rec_value":1.2799999993262645e-7,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":true,"anonymize_digits":false,"anonymize_emails":false,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":null,"suppress_location":false,"user_attributes_enabled":true,"legal_name":null,"privacy_policy_url":null,"deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","error_reporting","feedback.embeddable_widget","feedback.widgetV2","f

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	115589
Entropy (8bit):	5.261830337124287
Encrypted:	false
SSDEEP:	1536:kZAdJRIpdLC9WKj2sVAboxDqNQyQLXKML36QDmN4uO9CF3vdCe:kUJRwLKdq2fT13fDm3v7
MD5:	A5DA0D8701DF2C5C42900DD4D2EA33C9
SHA1:	DC27DA0133AD4985BF59EF80260C31E855691F44
SHA-256:	612D5A6B58F15D1F9FBA7FCC227B432FE9E5575998208FA13010C4B94C410C35
SHA-512:	0439D04AAB3AC3DDE364DB80DBEC9D8D2B4EEA26547020CCD86E4008D978D8F9D979B5EA4838DFCE9DB5AC49B2212FEE4B5326FCA84705FB4CA337DABA935315
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.269.0.min.js
Preview:	/! For license information please see nr-spa-1.269.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.269.0.PROD"]=self["webpackChunk:NRBA-1.269.0.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>r,N:()=>s});const s=64e3,r=1e6},2123:(e,t,i)=>{function s(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>s})},1140:(e,t,i)=>{i.d(t,{n:()=>u});var s=i(9422),r=i(4777),n=i(4624),a=i(3878),o=i(6154),c=i(2843);if(o.bv){o.gm.cleanupTasks=[];const e=o.gm.close;o.gm.close=()=>{for(let e of o.gm.cleanupTasks)e();e()}}var h=i(2614);class u extends r.J{constructor(e,t,i){var s;super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),s=this.unload.bind(this),o.RI?((0,c.u)(s,!0),(0,a.sp)("pagehide",s)):o.bv&&o.gm.cleanupTasks.push(s),this.sharedContext?.ee.on(h.tS.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({un

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9721
Entropy (8bit):	5.35902308660375
Encrypted:	false
SSDEEP:	192:6KyAQgtNBIWguxw68uCZItctpwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0Pp5b5ffv7:04rsCJ9cO51r
MD5:	17E5CF7E2FCAED7692184F43C4577219
SHA1:	F47F0887E191E30A49391514CEDDABFC26CC9BD7
SHA-256:	09B627933E01FAA4979DC5661F7E616C7DB1C12EA1984CA0549BDB253D24DA9B
SHA-512:	30ADC60FD2051044E070F467D1AB46AFE0071D3D4B410527C68684014BF9D9D0A1CE0371EF4E02F02C6017AF2D0D53B4EFAED72D0FB0644B5514FA26D1A521F9
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.1.0/assets/otCenterRounded.json
Preview:	. {. "name": "otCenterRounded",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90Q2VudGVyUm91bmRlZCI+PGRpdiBjbGFzcz0ib3Qtc2RrLWNvbnRhaW5lciIgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtZGVzY3JpYmVkYnk9Im9uZXRydXN0LXBvbGljeS10ZXh0Ij48ZGl2IGNsYXNzPSJvdC1zZGstcm93Ij48ZGl2IGlkPSJvbmV0cnVzdC1ncm91cC1jb250YWluZXIiIGNsYXNzPSJvdC1zZGstdHdlbHZlIG90LXNkay1jb2x1bW5zIj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3kiPjxkaXYgY2xhc3M9ImJhbm5lci1oZWFkZXIiPjxkaXYgY2xhc3M9ImJhbm5lcl9sb2dvIj48L2Rpdj48L2Rpdj48aDIgaWQ9Im9uZXRydXN0LXBvbGljeS10aXRsZSI+VGl0bGU8L2gyPjxkaXYgaWQ9Im9uZXRydXN0LXBvbGljeS10ZXh0Ij50ZXh0PGEgaHJlZj0iIyI+cG9saWN5PC9hPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRwZC1jb250YWluZXIiPjxoMyBjbGFzcz0ib3QtZHBkLXRpdGxlIj48L2gzPjxkaXYgY2xhc3M9Im90LWRwZC1jb250ZW50Ij48cCBjbGFzcz0ib3QtZHBkLWRlc2MiPjwvcD48L2Rpdj48L2Rpdj48L2Rpdj48ZGl2IGlkPSJiYW5uZXItb3B0aW9ucyI+PGRpdiBjbGFzcz0iYmFubmVyLW9wdGlvbiI+PGJ1dHRvbiBhcmlhLWV4cGFuZGVkPSJmYWxzZSIgY2xhc3M9ImJhbm5lci1vcHRpb24taW5wdXQiPjxzcGFuIGNsYXNzP

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3099
Entropy (8bit):	7.16816363142608
Encrypted:	false
SSDEEP:	48:/llXiFX2aQ8e3IlYXB2wYKp3sY2tT+wVKKPmjiTd+YmtD+prtg+:/6FXNe3SYDbp34tawgKPmGTd/0qDg+
MD5:	E208900649743E3A20008F2E796ECFFA
SHA1:	A91226953662B1C400A050C255BA04472E194ECC
SHA-256:	FB1F805647CBEB501E5148A5AFEEC82385558134A853905E9F1F6FCDBE0E2832
SHA-512:	7B71563BBA964BEAED17FA21C7CDB507AF295F9BA93491B55B4765110763849BC700AF9EBEB70623D50C12EF1EA88E75A494CAAA72D028C103A7758CB4938E83
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................>........................!1...."AQq.2a....#BR.$b...3cdrs...................................-........................#12q.!3Ar."Qa..BC..............?..H............................................................W...^..jS.^jsq..u.y..HYLf..U......y.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	69432
Entropy (8bit):	7.994453454632938
Encrypted:	true
SSDEEP:	1536:oJx5CVTopERy0jCTyZHitUm6o7VHgUCpQdCIlS3Oi8/aiCY:em1pRcuCO+edpQ8+iNiB
MD5:	2AC71E54ABDCBE2076A3E2CE2E30948C
SHA1:	9B681A76591513E5E54B7511A4FFC33AE4095BC6
SHA-256:	BF1D9FCEB21B8C518E754DE7097C43B6B06B1282472C6B85BC2FD745A03CAC33
SHA-512:	D8BAB1BB79F9D9FBEFAB5C09B7B6A1320F4D1CD08194EFC2098C64CCA0220D670A38101D2B71F6343E984E922FC5A63DD72CE5E8E1BC3192359529C474D21A99
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/emballage-cadeau-gris.png
Preview:	RIFF0...WEBPVP8L$.../..c.M..0n.=..A....L.^.Y>#.?..?...+.W.Q?T..Z?Q..Z.+_.{...{..N$..A.w.....`H...m.@..$..l.\.}..rH&M.$_.v.\|.!..q....o..Iz{.P.m'........BR....e..@...-..."Y.....d&V..k1.<...yJ)...o.w..&@..Bi.6Ni.0.i.$..a....B.a.G-... ..o.y'!..16;.G... ...l.........@r%-....#....Z.Z...7..E[.i.d_...LN....l....k-D..9A.OY.-)!.9B..u(.p.....h.k..-qN........e.]]An@....p.%Z.].p..n,7..j.&....1..{g...H.I..$......a.n....~&.......@.M}5..Zk.....q.Z.......nd.....\.ZO{k..h....2K..j.....s.e..A....v..\|....w.......v..._.f}.....r]k...@...A..l.....3.L9..b0....l-eE.....M..C0...o.........G4s...m.r.f/Q.\;..G...?....s.B.........m"..WbqO...$.w.._.7......VWJ.o;..qm.j....P......Ku.y......0..e\+S.z........@.!`W]C@(..E..h.6[p.E4M.........}..B..#4M...i....'.h.A..b./..M..HImA...*.........b..yRtF.4.f..d?S............n.JbV..\.....Ah....j1.2....\.hK&M....'Ox.jVs"...BQ....jrpt...i.....-......3..U........&4..3...........(..[.pr\.q..].@...Ox..tU.!.B..7........B. ..R.A.=.."......e.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1250
Entropy (8bit):	7.813134727053319
Encrypted:	false
SSDEEP:	24:6YP3gF05ts1yxC4sRS46NsZ0xgSVs/+uJqyA+VPhsov8w7+Ikv0kcQX:6gwyTqyxVMH6+Z0xLsLXCoV7gA+
MD5:	8A2EC0DF6B871F6693902119A074AECE
SHA1:	C95DE575E67B6634043F9D3896B7EC31B0D4A9BB
SHA-256:	E9932C88C1DA8B2B489861F0A12FA4B599A0C8C8E2A093CC056CE4A983FB3F9E
SHA-512:	F31C4B93D80AF20700F81CA0AD46D09C5DCF8CD326EFB6C2ADCEDC50953C23A95B47BC22D4C138C3B8D9CE4D75131CCA8154F8A7CB03FF37AB481A9E7D7DF917
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-000436_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....#...*....>m6.I$".........i......E.:..W.....=..>p((0Qx....8h<%M...R...c..{.L$.5/..A.z.)...Z..\.;........x`.(($S.J.Tq..e.J..i'...il_.b[.A..N..r.....ZnG....6$...=..04.lL.p.D....:s.....\|.<.>..`..`.x.vw.g#.S..],s..1.w.CN....Z.L5<V.....UY..?.g....1..w-8.0./..Fr=.]..J5...K...f..9.. .]h>............\|........`h../....A.]%.......h-;...>...}.g.:......N.Gv.y_.3s.l......R.L./...S.?.m.c......+.SO.&/.....0.(\3..A... uc9.....!.. ....J...Y.=.+.6$.k{...P.#....`....&...Z....O.:.....E3g..(.,. .T.hh.!m......jxA..l?...ql..!W.........o.d./.....C..t.>.s.SRb.g.=0.....).ZV.a..H.c.=..'..#x5kF.......,d..n......^.e.kO.\|`..1U../..oz..W/..!X.S.8....f......../.............sBi..tn..1n..n......>.RB~f.C......:..x.f.V.:f..j.o.....V......k..X...j..?..Hr.V7l......s.....A......D7..,......}.c...H........P....\|.[......\|.Hn.sB.....U..h.1\|.\2....W.P...[].k....6....l..0.L.-......^.:.....X.}...Cn.nw.};...l.X..=...t..q..,.H.V`~?..u6...y`.......-....W.C.g....

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 494x444, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	41860
Entropy (8bit):	7.994932415180759
Encrypted:	true
SSDEEP:	768:WA3G3BlnW+a1yPliRy80dTiUkKa5PFOYKzfU6zp4yESeYmAWmh5hokaozz:KTnla1AJ8MRra5PFO9zfFp4Ulmo5Kkao
MD5:	1F51DAE3BAA2F14EE73A18150C384881
SHA1:	CA7F6331F0CA267B1BD38E55C49CC9DC339E0D14
SHA-256:	27DE474440BBCA5F8AC6D92CD773470677756297157B065AD7A5E7A6A830DE4C
SHA-512:	9399786B7859FEBA0923418DC69AA041F87213D55C05DE32B4B2E1CC498E156AAFDB32F6DA5F00D815B9BB67CF71215407450379F1A448D2FFC031F49BE227FF
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/roue-concours_2.jpg
Preview:	RIFF\|...WEBPVP8 p...0J.......>m0.G$"..(5\....ce".\|.?l-E....b{M..'}_.>...^a.9.sufo~.......P.......z.zC.....+.;.....a...Z/.?..._..~.{c..........._.\|e...?........N....3...;.....?.x......}B.?....s?n=.=.........U..._.}.._..{-...s......................................2&..Q.?.O6C.c#.Zaw...&....[..Ec..e..A....k..mr....._..(.^...d...D....u.l.l.\."..,..}(j8. ....H.s.........(Jg..{f..I...Q.2...)....s....W...X..._ES%.E.a[......Nh...o..;.)0..Q....Sg8..@.6...=....F..._.~?...rj.J..I.....-.v..tG...\......]...C.B...s.wIx.UU..W:I9...].K...jX....?c.=...3...Kk.Q.."-1.......9'{A.&7.!a8.ng..,....O.P6Y".m.fA.....W2.;...b...3..Q.g"...g..1.0.8..U.T...d<iq....~qa(....b.a=1.`.(.7Ba...\.^9...)4O..r.V....".a]>.../..2....^-..y....c..........-.f.~.....0ui3)z.C..r..g..e.......V.n..o..!.#...k_k._q;I61,-r.J"N.)-...U..1&N.y4...qvX...I.q...Z2.V}#B.4..%I...VL}O..\T...P7.p....;S-\|.........I.{....\|s..1.u&Vk[..[...2..Kly.&M..Df...W...S......P8..C.n..v.cD6...g.L....,..4K.?...g.O

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3681
Entropy (8bit):	7.435499084035415
Encrypted:	false
SSDEEP:	96:/6F4rVsxxAz/WyU4XsTmvfqHVuuNSxm2oCLo:SFEVT/FU4cTQqHVL8kCLo
MD5:	BDB6915015F478050ECAF8219BCF779E
SHA1:	3254C0260569E05E7730B4148F69CE73A389C2D0
SHA-256:	43C87AACFFE500B2ED9390DA08117AC75E2522748F67E1F83DDD6EBE1B1C751E
SHA-512:	E81BAD1CE46178B57C07EEC86750CB13F6C69395D2EF6595011823D000295B5B381810BD3D5DED1DA483743701D084624CFC2E67F5EF091A8DF183C2EC1CC258
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................:..........................!1A..Qaq".....2r..#3BRb...4D.C................................................1.!Aa............?..a..@..A.....@0................@1........(C........c..........C.... ........C.......p..@..4.\....9....'...m..[.{W.6.SR..(.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	6033
Entropy (8bit):	7.744045834136366
Encrypted:	false
SSDEEP:	96:/6F6lk0RlgA1oTejF53YxdBSb+qblmeR8yKcNul5JCbTNL+FnQhBCZmdFYKnk:SFc7BCih53YZS6wmeRjH4P8NuQ/TY1
MD5:	5C54209963AFEF7B70B6634245CB4676
SHA1:	7490B46FD05C9C5A58081EBD7C2F238E303E749F
SHA-256:	54FA5821C7C090937E0E1DB5C3B55B0AF6E92ED4ABE519939D6E22F9B876F002
SHA-512:	BDD6D63C81C337F6BF75C1E6736CDB551E43C9AD63C94D2017214FDD8A7340028E7E386791385EFD6806C2A03AB9D75B7EE6F3030CB7CD9EFB15B8D6BA18E708
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................F.........................!.1A"2Qaq...#5BRrt...34.....Cbs.$D...%Tc.....................................................!1AaQ.............?..R.!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..!..Z....:B/m...1Z.l...@.^...0.@-}.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2704
Entropy (8bit):	7.92662735419625
Encrypted:	false
SSDEEP:	48:EB4plAT90at77EIhegvLzKjZToGIeTwdV1TZZsjk/WgcAEJ8:bba0at3/hegvuRlA1TZZsjkDcAEW
MD5:	73C8DB7B0BD07EEFE9F2FE06494B1948
SHA1:	CE8E89905068CB0143234BD2E60424AFCBDE2EDA
SHA-256:	28EA83C4DC9231B9ADA33B006C8ED723519D1EBB40DBED81CD597A6FA02770F0
SHA-512:	F02F78C718E81606C68FE60DE4C6A1F6ADDB108BDD6DA482E13E2DAA941B993D7692A2CA2A4C5AEC910550A41B32851167DF5B208DF46B887155C2A23342346C
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/603033_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 \|....8.......>m2.H.".!#S....in.....b..z..=.,.\|..>o.=.............o...:.....5...^...=S.V...'.....{0h..`.>....l..._...O....E9.-...\|..W.....\|G.....%rs@...\|..{.3yU.......'..[..J.m+.]..le.N[.r.3....e.@.$..;.~.)/..JYq...O..).=...v......&..cX...E.u.&.....&!`..[Dx...1.H.^....f...T~.E.RNFu^W..-j8. ..Q{y...f.ahz. '..S....7.....VZ \h.^T..\iQb.J.fN8u..d...X.S.....H.....S@.s..e\|GwkU`.^.,T......1..9.:SSS..%(..4QW.63.~......E...N.o.K..})...N..=.m.........)v...}.rxC.......d....VW...e..P.E..jZ..?\|..p.3x....t..8..rP.....Lz....F......;.-7lf.i.l...T.ti....PR.M..pD.]^9'....-^6...P......p.v.P\|K..}...".-"...na../...x...w.d5....5U....;...Nx#.....3.,.!.C6.EAn.$_q.V..U....=,...)...E..e.(....".R..14..f.Q....$.^......Q..M$.Z}.../....s@.'..4.....3.$.S.y.....<.._Q..........\\D"........#...U...=.}t.U...".%'.~...c.3... ...eQ.$T<u...i..H sp.~r...u....7._YD.#....].eaiH..-;=..1...y. ...R...n\|\|'.7.dEf.8R.oG;v.....R...V...#(.l.\|..n...;....=7....MH..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49443
Entropy (8bit):	5.567497147259236
Encrypted:	false
SSDEEP:	1536:pJPJeRQ1ZHgMCCE5vzKSlfRLoZZcfK4xQk:fJ+Q1WCE5vzvf5oZUQk
MD5:	2C04B2B2CD24634F12392EB5C514DC3F
SHA1:	0CB29741012C9AFD506FB6DF017459769A5569E3
SHA-256:	52A86E648B39504C8BDED3357FA34FF6ACF1312D764E83913A239DF9D64C8926
SHA-512:	E5143D2D48D46263161BD0FAF8214202EF9CEEFFAB3DF2411183E23F89FE54127B0DEF9ED6F326258F6F35C84606B555BA4A6C4C6880F5283D631F8B2CB3DE76
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944/87b5ab3f-683b-4ba6-ba61-e882a417e7ec/fr.json
Preview:	{"DomainData":{"pclifeSpanYr":"an","pclifeSpanYrs":"ans","pclifeSpanSecs":"quelques secondes","pclifeSpanWk":"semaine","pclifeSpanWks":"semaines","pccontinueWithoutAcceptText":"Continuer sans accepter","pccloseButtonType":"Link","MainText":"Personnalisez les cookies autoris.s","MainInfoText":"Activez ou d.sactivez les cookies suivants afin de concilier confort de navigation et partage de donn.es.","AboutText":"Plus d.informations","AboutCookiesText":"Votre confidentialit.","ConfirmText":"Tout autoriser","AllowAllText":"Enregistrer les param.tres","CookiesUsedText":"Cookies utilis.s","CookiesDescText":"Description","AboutLink":"https://www.retif.eu/politique-cookies/","ActiveText":"Actif","AlwaysActiveText":"Toujours actif","AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":" <h3></h3><p><br></p><p>Pour am.liorer votre exp.rience de navigation, nos partenaires et nous utilisons des cookies.</p>\n<br>\n<p><b>Qu'est ce qu'un cookie ?</b><

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16149)
Category:	downloaded
Size (bytes):	16215
Entropy (8bit):	5.487697503542321
Encrypted:	false
SSDEEP:	384:QWxEBgCIicugLtdDrD8p9pNe9b8VKtpXhXb3B8iKobGt:Q3moBgRdP0qt8spRL3B8iKam
MD5:	0AC88A44510F3CDDC652E079A7C45316
SHA1:	1EC06DD8074058625B157DB0FD196110F68665AC
SHA-256:	BF8C31D9106576243BFB2B35A7DEED63E1B1C35E715815267BA8C0821A4765FA
SHA-512:	BDB6F4AA63AD4DB9325A68839E0844BAA14B74EF129C406ED51CD7AAE3AE3205FE27433C384270AA40D35D5F782B69970BC298487F05F081C45AE26DEC75B0B9
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/notificationOrchestratorEmitter.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["notificationOrchestratorEmitter"],{22308:(t,e)=>{Object.defineProperty(e,"__esModule",{value:!0}),e.toHexString=e.isColor=e.Color=void 0;var o=function(){function t(t,e,o,n){this.red=t,this.green=e,this.blue=o,this.alpha=n}return t.prototype.toString=function(){return 1!==this.alpha?"rgba(".concat(this.red,", ").concat(this.green,", ").concat(this.blue,", ").concat(this.alpha,")"):"rgb(".concat(this.red,", ").concat(this.green,", ").concat(this.blue,")")},t}();e.Color=o;e.isColor=function(t){return t instanceof o};e.toHexString=function(t){var e=function(t){var e=t;return e<0&&(e=4294967295+e+1),e.toString(16).toUpperCase().padStart(2,"0")};return 1!==t.alpha?"#".concat(e(t.red)).concat(e(t.green)).concat(e(t.blue)).concat(e(Math.round(255*t.alpha))):"#".concat(e(t.red)).concat(e(t.green)).concat(e(t.blue))}},83545:(t,e)=>{Object.defineProperty(e,"__esModule",{value:!0}),e

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	dropped
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	648
Entropy (8bit):	7.625709521558656
Encrypted:	false
SSDEEP:	12:WPO799aJXXpYQvNSGVAwulLGv6U43kRbtWbcnSdszbu1t0P5:D0ZXpY0ylLG8k5Bz+O5
MD5:	67ACA9ADE1DFC7DA53AEEE43C7F39B8A
SHA1:	A6E0B495F60ED7D35694A05E9879201AAA14F974
SHA-256:	F1D4C7FDF4C59980EF0B1FC715210693226627A377EA269D9C357DF8A8A1F1F6
SHA-512:	838E5435E862ED8A8EEA5B525E5E46F483B78D0BE24B4DAE92237D7F422B591FE2955217C8C2EABAA0922FE8BBDCBF9B6D538F9BC840A012562DA730FF85B20A
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/logo/default/logo.png
Preview:	RIFF....WEBPVP8Ls.../.....@.mS..{>w...P...r...@?...?.h.......).....@...CD.'.>..........x?...v>...nK.J....@...`..xK..M...v..b..xO..Z.c^.B....w..../\..~.b.\........)....B../2n(.....e. o_.@................P.......m.....ay.............rT].F.(].&..Zu."...n7..)...>..[_2.I_....x..`;:...BW6.t.x..@?..v...>.].B8.....y....3.-b_..1.#.L.;...f........O..u.<.'.7.P.6"...(.....,...2N.6.>....q}..n#..S..}....6..-4l...v.n..0.^G.m2..4,.m..m...4...a.n...'.3>....Ha..5.R[D.d..@\Wh..B'...4...f.c...8..i6.o...9.QT.X.....)...D..((P.pt.,.U..p.5.......G...r\....U..yM.S.}m..(l8:.H...n8...GA...S.d9...#.....v......-.{..-_..g...Y,...K//..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	10242
Entropy (8bit):	7.858910783682443
Encrypted:	false
SSDEEP:	192:SFFWGcig/6DtRmWWTh89V2uwfL1f9GVzGCV1EqGVpqzS:SFRbHIh8WuwT1fY/fEtVIzS
MD5:	5BF10C0569CFF3F3E5B439E5C6B6EEC3
SHA1:	A018D05FF5317DFD26B7DB8E85F12A66F2E69AF7
SHA-256:	F6883F16A01E23030DA6F94657983E58909354C017877C48F452ED5461D998B4
SHA-512:	C0624605631E0014E116F523BA392E7D9A965A26687B931302B27877A26E710EBEA024505FD661973C7E46559DEC0ADFDE61388C81B76FB3618C4E1CA3812AE0
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................;.........................!.1A."Q.a.2Bq.#..3R..Cr..$4b.Us...............................*.....................!..1QAaq."2...................?..(..(.......D..(..ox..\.&.S..........k.\.s@K.W...TV..&..&..."..........%h...~.^.Q.C@I.Q.i...d....4

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 694x740, components 3
Category:	dropped
Size (bytes):	41406
Entropy (8bit):	7.792401351739696
Encrypted:	false
SSDEEP:	768:SFZ4lbw3wLtkGSX/UlY4VPWc41vGnej8VTbGJTLUBhmkWS/CXPa1yEVVvN+ve:SFHsSXZ4VPW/1v349adwBM72GPa1r0G
MD5:	2E39DB84B7E4FF1E945E79B89E13A106
SHA1:	3689192DD609F6EEACD6D3C49717227F087BFE54
SHA-256:	7D35DBA655FAD6891734798101DDFD599C8845734902BD38FE2CC847A66B8A23
SHA-512:	5FCC011B9F2163577FCE908525760F5C0186AC23FD2CD493EB0C37C2D4C40A3655BC772544F4EA5E86172D31192F37802047FB9708CCD03B87403DFCD89C76FF
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................P........................!.1A..Qa."2Bq...R...#3C..Sbr...$%cs...4D..5t...TU.....................................<.......................!1..AQq."2a..R.....3Br#b..$.Sc.................?....9.@.........................................................

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=4&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=1&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=5487&tfd=30292&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1480
Entropy (8bit):	7.874636873653275
Encrypted:	false
SSDEEP:	24:NyxtiEMgYV1+I32DizDHeY6NMe6XDpZ/kAiXf6QhHjVfIVRa8D2EPO4nnxBDRjl:UKEMB1+wXeRW//khXf6QJaVp2wxZ
MD5:	A7C9D956513BC593E74DF7B2AA7F6081
SHA1:	AD9E2CC8203681C5EE02E1C456750C478F4E4E6E
SHA-256:	2DDFAED4A23B65BDAED75C10BA362F01A97094126E3ED909AC852CB24B0418F8
SHA-512:	654BD8DFF94C327C0D4B68EE380268C6F265814635F57E42322C3E5E140A628A96F05113C19F695B71327DC664C06D73B35A7B9E4862A67BD9A532A7D1C6313C
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/4/9/49966_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....%.......>m6.I$#%! ..X...in.nq...c...t.x.A........z.!...?.c...>.G...O....`..v.X..r5..............n...H,.S.3.....)eo..r.M.%.y\V.B.&..N......CE.W..B3HV..GX.dZ...h$..!..j.:$....~-.r....X.C.e....j.../...J.=~..N.?\|..(.P.}.y..7F.0.[.....Xv}.).F.2V.I..WjS...._....B.. .#.....4.~.i{..9....[....- ............2I.($..e...m.{...3_H...Z.^BE../.3c.....o5..&=..T.......>.u;T.......Wa`+..C.J.{....dE...ha5..-fH.=aq....r..N#..5.[y..J...^.v0...b,.T.h.%...:u....-.%.......,..1.%V.B...3.....[*......>b.\...+...g&v......8w+ P...f,;..ut.eK.'..!........wwn..R..............G..@.................&.... ..,.~.x].kh?...$RS.A{R.jY]w.p.&...#..U.H.=...u.8D.W.w.!.y.....J..b..,Nad.m....-/..Nl.B..._..X?.s~}/{......g...A..I..neD....?..}..a.k\..=.....]..%.1#.....\....JU..d#k....+....3zk`)....4.J`..(..).....q.z..D> ..i...l..E....7As...W..t8...T..[!hD.-Ll>J.?.......8:..q.%Tf.+............6d....A.#D9Aq...`.....T...Vvc..lV.P<[..&VsUs......v.:64......V.Y.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4178
Entropy (8bit):	7.624281298420552
Encrypted:	false
SSDEEP:	96:/6FHiAV5CD/Y2u5O2aSNBLjV6mvN3wDEBBVDiv2KG:SFCAV5TB5BLhjvN3wqVev2KG
MD5:	86ACA3B36B6329CC2610293337E45941
SHA1:	746BE3CDEA11084A3ABB807448B9C2CA84394E87
SHA-256:	F5A8A778219998B5EA4793E4887119F0EF035B010344DB84E6FCB21CCD8229E1
SHA-512:	69F65DB1A942DF54FE6B4A69ACF9F40BE22474DE05E96A1EA7152FB274910916349DC2BD7C9DAE68C07D119DD591229ECFD69B922196C7D9E9FDDAA34767650D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................K...........................!1AQa."Sq......#2R....$3BTrs.....%&C....EUbc................................)........................!AQR..1a..Sq2..............?...iZ-st4.. v.I$.I+B.h..B........4ZI ...m..v..v.....-..h..E...$ ...;J...I+A$....E...h.....

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	9847
Entropy (8bit):	7.82027653414842
Encrypted:	false
SSDEEP:	192:SFNt7IAaH8sup885C8KE4hXeUJ6mSIr21BUbXonqjU8x:SFWcnp88aE4hXe86mSDlqjBx
MD5:	A7D374C63875FE72E62D2C94FD463527
SHA1:	0A46583B542624058BA8A77905179EDB0283B749
SHA-256:	FB4D6106AA97F2FB6075CADC3A82788C22BCB926FD6F812890D0695C068D7F60
SHA-512:	7DA8DE983FAAF4A1BDAE90C06389D317D48D2872E9330CD25D6F3EF9DE60A29C5C7BE50ABEF153808B7F584AAC24AA4868336B8B8437DD6A0AD6252F59BCD355
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"...............................................................................#*..Z.=%...}......W..36.W^...}G..3!X.v....V....Z}........<O.u.\|.}..=,....F....Mf.V..$.O:..a.7e.P.A..I_U..9o.W.....7.v5O....^t..%.%.W.N...i...Y.........k........b..j.s..\|...U...z.!..eF.."..N..w`.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8648
Entropy (8bit):	7.976627341598713
Encrypted:	false
SSDEEP:	192:5Rj8Za9ATfl7ict8NbntUsPpiLpqUQ/sMQs8rrz3DKuneZ3pr9SHjZ:/j8ZaCDlGzbnoYUQ/s3H3u7pRSHjZ
MD5:	F09FFD1CA446C07C81B876B5FC29ECAA
SHA1:	DC0D5E4ED3BCB9C8219C11D551C912D75055210A
SHA-256:	C9DDB5DFDEC3F65304CAAEE2AB1A4BE3E3F210CC53F1653C65AF062D1811CDB9
SHA-512:	031F4DF2D7352FC3E46D805CFBD2B015BF0C067F4A0B7DA94CD95EF069CC7835F6D69609CE2317B1AAE9DC0D693AC87C217B2506963979BCBF03D0E06716310B
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/602151_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF.!..WEBPVP8 .!...g.......>m.E."....4@...~=.j.p./......O..0.c........._0..~..o..;.e\|A...o.....>..._.9...7.;.5.......~..k....'....o...........K...../.zX.f.-&...pM"..W.u!s=y..V.d..Y4lw.. ..E.0...R....K..2e.,8...!;...MM.....&JJ$yK&3...FO.Ee.SA....D.5..f.<.X.q.Q..<2...I!..Kt....a...........+.r.E})..T@....i&V5S..;]....4....(<.w/..f.&\w..^..=#L.........n..L&......!$....M..@.._.j...].D...P:..6.._..w\|\|..moI\|c}...........vB.K.u&....N..F5.Kx.Z2<{..wsT.L.,kP..7...L.<..1..8....8..s..=..wyo.6........s.K.I1...bY..u=.t.....>3..~E1VR.^@.W].../.^...l7b9.y..n./.s.Zv...n.......^6.6..........1.iC..v...uD.7.%....o..>...`.=....F..0Y..'..qj.....uK7.....\.!%j.fC!.afd,.{.e}..e.....3h."M^..!.....zAU.....u..ZY.{...B5....g.dji.`2.C....c(Mjv...[.".5fUt>..&S.w..6....4.&.....f..]..`b.uFT).y.x.C.@9V...XJB.a.}ie.".............vp`..vr..o&..\....D...(-.Gk.lITffH5.JsX..R..<...."?A...F_.z.\|.B3jz..-&....osD.(/U4..8.3......X,..{.9.^%..+.L...../u.?..F..Rx...E..]..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	833183
Entropy (8bit):	7.9391732663627135
Encrypted:	false
SSDEEP:	12288:cj2aLZ7n9dRQQTecOv+HC6DohI0yQRXTc8FB6o51Zscy5r2xi6MR0WFSJt:PCZz9d2QT7S+HC6qdyWX9so51VzeR0h
MD5:	2A422CB6B89A9CB59CD547B6BFBB008F
SHA1:	6D1EBA53F360C1F4E7746006F375DC255620AD6A
SHA-256:	AE7986FD5640AD957B028B39B1B9131133CC0DB230B843127D8228C51A0079A3
SHA-512:	9DE44E644E25B57C06A2EED39543010429C096DC51BFBDC15E0ACBF8509876A26FE262F6F02161A0B3670B16B4C341A81EC3013335A2A253A7454DA9629D527B
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/VIDEO_MORPHING_LOGO_FRANCE_compressee-1.mp4:2f83df04dadbc4:1
Preview:	vr\|.L/u.B...8D..3....E...-C.E..A....`^..){KVD<...]K.l......&b..?.m..j?..W.#(...n...!....m..\|ul.R.C.......8..n.@3.A...y...F.m.A....6k..)....j.....$fr..S..D.y......X..'M.s+.....7.S........G.....s..\E<........cRWB..nh....g...'..r.vv3..n.?.............rCR:rP.#'...y....D.\|....\|.....w..h.=.................)....#..........B0_........SK...F.k.y......taN...E...vR.{..{b....Q7+7......{..>...P..?r.I.3n.O..9..r.).Qy..[f..NQ.?.t....!(F..yN.tT?....r......S........%T.ld.C).:....m.?.s..E...N.....W[.{....+.....P....S..<.?....66.....'.-......"...4eJ.NRo\w.M6...`G..RW.3@....@\|.UlY.}.! ..A....yOZ\X..v.K...E.5..%.d.W..ET.8F`.MJ=\|.....o.A..I.......z.W_=XO.E.......#.....r...`....U2.o..v..".KKd....6../.!..9A.+..XQi....t.<$..`u..bR3..g....$R .~P..E.C.<...a..R.l....H.s`:.;."....$p`..E...........=d........Z3.D...@......l6..8$.;-...0MY....:.Z.P@.\|41.=y.M.j...(.+4..ec......K.S.V..6p..Dj..8....Q..;P..7...p...LLn.^n..~S)....,b.R.s...^d.....i-2........7.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	106299
Entropy (8bit):	7.992338827361272
Encrypted:	true
SSDEEP:	3072:7OxBJmsUQzxR7M1NDhIO1i4GI7bNTh3hqQwq:6Yw7M1N71i43NTdhL
MD5:	B0339D8C985BEC4BD81DD7A44EAB9407
SHA1:	0D0B32EB0422986905C084939F14812403F1D369
SHA-256:	C098D657441CED0BA8599EDB4BDBBC24E32D416CD5954C6BD808A003210B6F66
SHA-512:	A681D00F1D7FC0DEB43F28BA8CE0EF4C45037BCF843DF52BCD7AD7AC417F25A928E6DBD4246329D2960EEDC5800350DC4B3758D13738E0950476CA91ADCC8EBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..{.e.y....j.s.......4..-...-....m......1.c.^....BB.....@...$.VHB.....,.l.06.l#....F#.C...}..wU}......w.>...7...{.{..v}..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4..F..h4...@6=..9...!4................u^~7..+s`...nyo.../.......2.Ty=V.~z....+f...M.....4................^....A...k__......'...0.........4..q............9JP.>......#.'79....$X M.4N"o.~............a.....~......q"h...4.r.../.~My})p.FGt..........i.i.E4.r....+.\|.}.....f.s...../...\_...5..&@n@. w$......x?...8>.......Pi...H. 7...;.W....:.@.............f..Y4.r.....y-......f....~.........p...&@n@. ...0..;...........?....p./.&@n@. ......[......./#.....y..i......M..h^.\|3.......#. ...x...............o,.7.\|....7.l.Vgr.h...4.rb8.\|....6"...O....K..K.....h.d.....7a...Fe..?.....jl.&@n@. .........j<?.K...6*..p..HK.l...u.,.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18272)
Category:	dropped
Size (bytes):	18892
Entropy (8bit):	5.6711741148525014
Encrypted:	false
SSDEEP:	384:w3Li+9JTFdvXI+5CygRjnx2RWxahLMyMyOupEh+bNhnaeSmxMJpLuAw:SLielmHRjx2+elu4zaeOuAw
MD5:	51577CA8402B9A0AC5D7BA6D0C802355
SHA1:	7B7690BC3F57AF01AF9DF7632DE3D444CB585B9B
SHA-256:	0B2A9B6BF2B4A540DD4F9FC086B713C52E7E6F50B78D4B05A46E9E75798239B5
SHA-512:	4D45BCCEA7701CFEAB2835DA849C5C4272F8CE1D8C7DD6F02573DD9FD814E2D1A5C9E71BB5F68C7A62C106D16CDA9216F003D29224615E8F39C097030C7A909A
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var O=this\|\|self,M=function(Y){return Y},f=function(Y,h){if((h=(Y=null,O).trustedTypes,!h)\|\|!h.createPolicy)return Y;try{Y=h.createPolicy("bg",{createHTML:M,createScript:M,createScriptURL:M})}catch(Q){O.console&&O.console.error(Q.message)}return Y};(0,eval)(function(Y,h){return(h=f())&&Y.eval(h.createScript("1"))===1?function(Q){return h.createScript(Q)}:function(Q){return""+Q}}(O)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Yi=function(h,Y,O,M,E){C((((E=G(h,(M=p((E=(Y&=(O=Y&4,3),p(h)),h)),E)),O)&&(E=jJ(""+E)),Y)&&C(h,M,y(2,E.length)),h),M,E)},r=function(h,Y,O,M,E,z,c,D,S,Q,f,I,X,N){if(X=G(h,268),X>=h.F)throw[Z,31];for(S=(N=(D=(f=X,0),O),h.Av.length);N>0;)I=f%8,M=f>>3,Q=8-(I\|0),c=h.J[M],Q=Q<N?Q:N,Y&&(z=h,z.S!=f>>6&&(z.S=f>>6,E=G(z,266),z.vs=oR(z.S,[0,0,E[1],E[2]],z.s)),c^=h.vs[M&S]),D\|=(c>>8-(

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6132
Entropy (8bit):	7.966621491493979
Encrypted:	false
SSDEEP:	96:D3VOFvdYHQe3qaV2S8ySD8A7OyQk8SsBjAu6hIPFPRuc9Njxj4o2Xtt8oYw313:pGpe3qaMS8ySIprcAxw22XT8nwF3
MD5:	5E4ACA4C73B90BE77D9EFEFF03C070CF
SHA1:	F1ED2131AE806AEBA5AEA0E0610BDC483CDC3F3B
SHA-256:	63CD9F4956A5EBEFF402F1E59C9F27867B0AABAF3D33FF241CF858A2AEFCC2BF
SHA-512:	46F423EFBABF8BF3B5798310B14343E4D0702F98FB7FF81206EE6C0E403D2E5541626ADB57E4C496582D811BC385CA1CED1FF8CF3631370CB7B476AEA012C7BD
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/602511_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....].......>m0.G$#"!(T.8...cn.].....!.`......~..4.p...?.z@uE.....h...w..).?...I..]F....._.....;D{.....o.....`.......b?....G..Mc..1.s.;.....7....pUv..)..A4ouX......0...f.$r..}..U [.g.BB.?..k.F...'.Q..{0C...g.:.PB..1.KDW=..b..[.$P...A.......U.b...n..f.._C...Z.^w.DD....uS..@L4A'..O.S`)...!.8..G..`3M.%}3..I.....f....c.Q.u.i..W.Far...r. #........+z.q.wih.K.J.k..[.R.m......Z.O....ix._...J.H..<<i2{}.(.O..(2.I.....v.,.su.1V>..........qW%a.PU\|^.T..3....U..O....`..C.e..$YK%..H.!...}$'..!..q.F._..`k.#......"..+..f.!..5..]t.#p.....b.m.P,1..E..$..2\|...74N.]..Uk`we.D...s.l"..<..<f.I...".<.!q.Py....on.FT~/...]...4...-T....AA.......o.+.S.:....%;......u.......qOgN%....2,9...]_Q.T.*\|[y..-..-...c.........l......O)..."?@2....L....R..2.k.........B..QI..K;.HM.5a..Wq.....<+..~.....^..D5Ja...J...'......`.@.....m9..`..:..+.u..N..= ...yW..-..+Q....OiNTv......U3?.p\.'R[p2..t.@9I4A..".... .k=/P.T.N.....S.. \|v.7Z.!D.....'x......E.>...E}.>.].......n.(..~

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 700x400, components 3
Category:	dropped
Size (bytes):	25517
Entropy (8bit):	7.943064938975425
Encrypted:	false
SSDEEP:	384:SFvwCUE9hFwO6e/gdFklGZxLFxJcCdPMxs4GQhSwTo1zXWbCiC/:SF7UgPSgGZhDJcaME1r9/
MD5:	F7B95A5E917E91BD70D78FF8CB3A8DAA
SHA1:	74FD199258867BB46B79906AA5C6C5F9C4E808F2
SHA-256:	7874BF008BA2AE24EF07EAD73353E1878F0DB3F2D4DF54CA3A4472AF11DB6E3B
SHA-512:	8D99A2190532081AA0A6DF65E25B42493BEF0ACA4A15F414008D7D65EA6CAA58F2CD7826D6BBCE52120D8A94B5EA0616E93B65745022DBF80A7FBC74EB58F548
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................M.........................!1.."AQa.q.2B....#R...$3Srs...4Cb..%6Dct.&57T....................................=.......................!.1AQ.."a.q..2R...#Br..34bs.S..$5...............?..+VP.../..Qf`..t.,H2.....".,.lzR.67`....`0.-.d..]F..p=W./..fx...

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1210
Entropy (8bit):	7.816450143861498
Encrypted:	false
SSDEEP:	24:AolAF9mtQCwY/l+eU6kUlUMtXXIi9hvaV/MstAzdgZxDX/Bt:AzF4tUQtUZUlUWX4MhvaV/MstACZxjBt
MD5:	E3BE870690C327CB7DA6807C792013B5
SHA1:	AD8C36F82CC11614B08B71523506A09CDB7787F4
SHA-256:	0EB264807083822BD1A16EECB0F6F143F44D7072AF6DF3EF278473EC94450866
SHA-512:	6F82ADD2685C901EFE6E9F7DDA5980F6F84927A7186C597E7018C65ED09787E85572AA281B695F974BF6D63FF2326E0E3F3AE2908D597C2B9CB5B94C67CFFBCA
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/501013_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....%.......>m6.H.#,.$.8q...in.k...nI...W.F"....gG.\.C5B..m....-...D..M..,..i.0.N..@e..2.z..3.+....}....q.....^....~m...MM....-....<i.3.....t.L..K.6...p...~...+.y=...hVmE~..D@<.....i..B..E/.&%A&.VAA..K.B..q.(y...._.....3^"...E..71.)\...g.......().~1.0<^..1.O.....p......af.~+...,M.N?:1...3.h7.^..@..........l.....B..........4 ...S..Y..i)....?.......\..H.Et...:......."...n....A.Re........D....P..h)...x.!{..g.\...Y;...V{\..W....04nW.....wR.a!k0..N.b.0.a.O..7L..e.$}.c..q.U.j.5.....&H..E....6O..@...P<FHE..9aJV..-......-.u,......xI]..J..@.......>'.~.4..6...."o..>.#..?.c...@$.....%.T..g...M...}D..T..;q..&.:.l........w....v.'.s..L.....9....<(.\.....5...T..u..'q..e.#[5.cc.. .._.h(;....d..6g.@.;...`o.C...L}.....2[.e...%....;-..eP....<..~Jvf3....~H5..{.SD.......u.z0(.........vb.:.B..[...?h......JLCU.0.q=..Q=..,?. S...-...Zz.#1.%K.:X.I....W.....W.p1......... i..sr.F..8.#_..i a...m.k.vX..s...r...k.t0.......)..q..V?.....N..h....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63090
Entropy (8bit):	5.40501972020531
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpomBYifvQpWWz1j18n6XrHoQqhF:s/0Rz1j18nMrSF
MD5:	304AB564B27B510FF3ED71DED9FCAA4F
SHA1:	6452B28808FCDA00EE96E18F642348263011769D
SHA-256:	777B4B4A083FE36AFCA14EDFA9DE06DB28DACFE106659598D9C88F576428E2D1
SHA-512:	F676B02BBAF7F117D40191430B30ACE4F3EE8446E4FBF2DF1B2FFFAAF6BAB0EDCA3F0A90D0D6D2D06D3CA6B2847582AC32D90E232AB95713AB43E2998DD69300
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4578
Entropy (8bit):	7.616966943379505
Encrypted:	false
SSDEEP:	96:/6FDeh+ZD3cJ3PLADCSxlgs5MLiQ+eJ5b:SFjDMZaC8l/MLiA5b
MD5:	A299CB4747E5BF6FD9BECEA725D65C67
SHA1:	66C5F6326D2073C649DBAE4ECEF8EC54B8E50521
SHA-256:	BE19CC98A1D550ABDFE3D66D03BF514A0D395175F779A4F50F17FBABEEABCA59
SHA-512:	7C29E1B85386E682559B2955138E8943149219D00F7820512ED12A90B520387F6708BDC29E48316DBBE504F7ABAC1FDCA6CBAE295BE12CD4F8B1A213264B26D5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".......................................?.......................!..1QAq.."a..2r.....#$34BCRb.%cs....................................3......................!1..A2Qqr."3Ba.......#CR...............?...D..:..$....I.I..I. I.I.. .......!..@.....@D... .......Q4y.@.D.&L..;"4.!..$...$0.;..J.Dh....

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	8218
Entropy (8bit):	7.765084888164157
Encrypted:	false
SSDEEP:	192:SFVORDDD2MArXctku/2V78DVzWi5S268UDpVOXrDdh:SF8df2MccquI7YVc2uAH
MD5:	7A907502942B54245F894368F8A83CCB
SHA1:	A60D04398DE1B4F1CC68C5541590A282131331C0
SHA-256:	B5E3FEF7A2CA611ED7E86B28BD205AFC7E4F8E8317E1864A82D84225F2B4D5D3
SHA-512:	88A98375855926160EA13E39562DDD9EB33E8AA164CE566A4C4A2ACF004666ECD190055CCEF83A90B83C2DD1AF40BB8CACA5CA4684BEDD31376E0FC2780BAA4F
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".................................................................................3.t.7.^...<.......j.M?35....6.[........9.)....E...<.i.M.t\../...E..~.Soy.-r.......9>..1t.c...kM$..Yp.UoK4}.....F&wl.s...P..........I.m..ik.*....Bw.Dq.n5...v.].#........N..Nct_x.uR..t...g\|)-L

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7893)
Category:	downloaded
Size (bytes):	8327
Entropy (8bit):	5.126481278608494
Encrypted:	false
SSDEEP:	192:zc7AahwL7rXPlOrxJ4ORPF3wDD2X5A2TUfRfvV5Y7JtpxF6:zc7A1L7rt6xJPtF3wDSX7TSTgy
MD5:	2C756298E1DFA18116652EA7DE0E2036
SHA1:	3EFD5B6E63F45A77AF576BB180CF83DDCACD2354
SHA-256:	2E988C1A34FAC2C90119753FEC5F5141E8FB028019C652B2D1D30107DD5D3B12
SHA-512:	726FE8C7A3B3FDA6B6D8284831036509E49A1A6849A1EC8104C663F30F22FC79FD202E6B02DF8A9E4899544912317FF63F1821CF5F653B4D363C6C9FA7C4C590
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Magento_PageBuilder/js/glider.min.js
Preview:	/* @preserve. _____ __ _ __ _. / ___// /(_)___/ /___ ____ (_)___. / (_ // // // _ // -_)/ __/_ / /(_-<. \___//_//_/ \_,_/ \__//_/ (_)__/ //___/. \|___/.. Version: 1.7.4. Author: Nick Piscitelli (pickykneee). Website: https://nickpiscitelli.com. Documentation: http://nickpiscitelli.github.io/Glider.js. License: MIT License. Release Date: October 25th, 2018../.!function(e){"function"==typeof define&&define.amd?define(e):"object"==typeof exports?module.exports=e():e()}(function(){var a="undefined"!=typeof window?window:this,e=a.Glider=function(e,t){var i=this;if(e._glider)return e._glider;if(i.ele=e,i.ele.classList.add("glider"),(i.ele._glider=i).opt=Object.assign({},{slidesToScroll:1,slidesToShow:1,resizeLock:!0,duration:.5,easing:function(e,t,i,o,r){return o(t/=r)*t+i}},t),i.animate_id=i.page=i.slide=0,i.arrows={},i._opt=i.opt,i.opt.skipTrack)i.track=i.ele.children[0];else for(i.track=document.createElement("div"),

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	64048
Entropy (8bit):	7.991960272650255
Encrypted:	true
SSDEEP:	1536:DZailkrkjy0pdPA62tJpx4YDjxgd6wYIDo+:DZai+wycdPA6m3Paxho+
MD5:	BE07779D1B3432C9A617A358B67D7223
SHA1:	252967AA47C331F04B0726E136DEBF189F4BF395
SHA-256:	C836BC432626125F20A1C7A100EFE0C2CF348341E3645E224DB90C1C8AF3FB80
SHA-512:	BF4FD723303D13D3B8B39EFB024AC2B95E00DEB229455655C569906A9B25734664D691D798E668E19B3E47A899D40411A0B2322E420964A54DA6D7DBAF75D703
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..{.e.U..]{.s......t...<..H.iF.4........$.!.'.&`081.W. 81...6.q...$$.L .#.....d....hF..<zfzf..u_g.?...{.VuUwuWU......:..}.9..Z{..[kA....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....4h.A....48 ..@..........i].....D..^8rd....sR........S...[o9.~.\|.._h?......[..._..7..h.H..W.O>u..i...`............V;./,../,.VW..'..8.].uVVV.WWWf.V.k.^6..UD.Y....z...p.97..(>...N.Y......z(......_...z%/\|.........}7/....?r....=r......=z....j...(....EQ.p8..W...Z...R..O...V.....Z.A?+."......r{ey..g....../-/..h..=.x.p8<4r......h0;..3_..Z.a..?.(t.......d...jc.../.@.e..m.6.n..L.<.i.Z ...,...r..!..663.9\|.n...>.Y.k}.......<..#<..y./...O.0....!.{.,....s.....<y........X..[n>..n.>..>...`O...........(.............w.......-u.C.:.....sOv2kN9..F.0...-..vVVW..^.=......#..Dl.{....ie.....2S...,G.c...<k.nw.v:.:ml+....UQ..Z-fgg.......M...,Yn..;3..3fff..1..<.igm...b...a.`

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	93838
Entropy (8bit):	5.2927442662610735
Encrypted:	false
SSDEEP:	1536:GiAcc0cvKbcD0cei0cS0ch7box1NVT1Tng+Gngydw8:S/0Js0jD0Z3NFQ
MD5:	46EE6A5DA9D15A6558C02D39DB23A70B
SHA1:	C539A5000246B36AE8434F8800EB52C3BB014AE5
SHA-256:	7840080EBDF7B1A5E9421DE4EA755B3921871CB366616A7A0DFF7FB4D10DB6AE
SHA-512:	2A684C3D55CD80E4F2E4C55C91E221C310E4E641ACF14F9A642ED8D775688018E6FBC1D0448DCDAA5C9F8B4DA98D4D487972C9D5CB2505AAC0DEA4013AADE0E4
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/rpc/live.2.php?sid=7738&dep=undefined&tpl=cooktoys2&lang=en&version=e6eea7ff3a87d5aa0f604190aadd63e6e50714e6&vuid=a3bde6e25e0245c68bf378f9cabc588901d962af2d9b4
Preview:	{"config":{"officeHours":null,"websiteTimezoneOffset":7200,"on_call":0,"chatbox_state":"REDUCED","flags":{"proactif_timeElapsed":"1729844206","chat_status":"1","operator_closed":"0","curlang":"en","chatbox_state":"REDUCED","va_page_type":"Hompage","va_Tag_horaire":"ON"},"preferences":{"mirroring_enabled":"1","anonymization_delay":"1080","param_satisfaction":"1","bankcard_number_hidden":"1","community_enabled":"0","c2c_callvisitorfirst":"0","call_offline_enabled":"0","call_meeting_enabled":"0","call_meeting_availability_mode":"1","call_instant_enabled":"1","custom_country_call":"0","gdpr_consent_enabled":"0","first_party_cookie_enabled":"0","recording_enabled":true,"plugins":[]},"customizeTranslate":[],"proactifData":{"qualificationRules":[{"id":478270,"newId":"a07961f4-c907-4e9f-8806-fa2e87944014","type":"qualification","label":"Lundi > Vendredi - 00h - 8h30 - Tag Horaire OFF","targetingConditions":[{"logicalOperator":"greaterOrEqualThan","value":1,"criteria":{"id":"targeting_condition

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x700, components 3
Category:	dropped
Size (bytes):	54823
Entropy (8bit):	7.365554063496186
Encrypted:	false
SSDEEP:	1536:SFU1M1orbZeR/wHk9kLBn12pCuxkt1+2C6XMX8dow0:rEUwR/wHkkBn12pCKs1+dmfaw0
MD5:	A93B4256258C7CA15C524E8C4091F092
SHA1:	FA54CC38526812912CCC7E7E8288CBB6845F748B
SHA-256:	66DB5066EB43C3833A2A857CDE44A538EB1A8FD135033DA188A548AEBE8AA075
SHA-512:	24DF9E484EEC288BC92E9789EE4A9EE56BE501BC9722DEED93DD70D442D22000AA66F1DBCC0BA1756BE53231E64607606D2FBFD6E3F6053F18B4A62B6E3ADCBF
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................S..........................!1.AQa.."q.#2BR......r..6TUbt....35s....$CSe....4.%.E..................................D........................!1.A.Qa."2q..R.....#B...5r.34Ss...$t.Tb...............?..D.jl..................................J.............

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2264
Entropy (8bit):	7.891235116353132
Encrypted:	false
SSDEEP:	48:MHHMYcfxgtJmx+q8p8nEuurrc0ThchCThqvM7MpDtFOcmUPX:wMjxgnmxBurrvGTvM7M/8y
MD5:	4E2D3F29A39B1381BCBF23A1A9FD6B04
SHA1:	41C7C7334509411B5753978952747248AD24E6E6
SHA-256:	29FC39AC419C6FC5517671BC4BB4D5ED032A7EFA6986808AA5BB9AA0061CD956
SHA-512:	91D4FD90DD3C42E8DB0132A1F52228A28B005C7D2421426FB516422B21BC6E911BB25D8ED48DECBFAF920B667892383A90D8E1D90946985CE2FD4CAAAC43D877
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-002464_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....5.......>m6.H$#"!'......gn.o..-.q.1>.r.......s.>..B.../.r\|.....H.Q....""""""""""""""""""!.&/......,:.K..N.qwFO#r..\o....e.H.886......\8d..rJ.G-\|:...;R..0YnU...=.S....x&..4.o.H%..Ln_}.~..../..Hx.....y.{}d4......g....:.B...d.(...f;..../u.....L......<."...\.....w.x....".DJ0_...?.F.j}.W.....i..p.........)...dA......1#.X......_.w....H..[..\.O...\|l.4.z..6M..V...0.&.[.2..=........\..1......I96.T...`...................h....,@...i..6xq}.d.Y.=...KS..@..d~..]B.....b..2$^FQ...\....p.4.]...........:#9...]J.0...$Q....V....@...T...F&.G=......v...r\k. .j.0-./.....NUmB.2.@......,8.q+.....E.>0.../..c.V.....o..h.y...g{.KCH.\|.R..T^..K.s.6...b.'.#........5..\........?....._..}.&.-......g..cc..h.\..a.4e...O....U..Y.S.K..u#.V.z....iX.Y9.......e..@.f........ ............^..p..........vP..epWY....u..?>..a...M7i............?F.Xp....C..D..t..8^m....7zJ.V.h....*......v.T2......q.gO}..;^.y...t.#..)....P..c.^Gj.#.7..FP=....]kj..F.=.-Ud..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34725)
Category:	dropped
Size (bytes):	39811
Entropy (8bit):	5.263201030205329
Encrypted:	false
SSDEEP:	768:FSDpkuGAhFA2OuQikxJdHkx58RuechWqLWZApt6mNdLzBcFp7qbhGW:GQmQHE5URe4W7LLuEgW
MD5:	E4F2DBEC68C40EE4EAB30A492D381CAB
SHA1:	E2011B7F156AB1D9AC560D1BEE7D7E748018B254
SHA-256:	53DB4090EF457848889230C3272670CAB76B1C827DB70A3CC610E341732F0025
SHA-512:	E737B126BC94E1F2B8A70891AF1A01B3D20578D8178DD0D2E7C36EC3484EA362E35007FB086A8054CD65D9CC70A9550DF563F01E7008021E8001156B5DAD4BB5
Malicious:	false
Reputation:	low
Preview:	(()=>{var We=!1,Ge=!1,B=[];function $t(e){an(e)}function an(e){B.includes(e)\|\|B.push(e),cn()}function he(e){let t=B.indexOf(e);t!==-1&&B.splice(t,1)}function cn(){!Ge&&!We&&(We=!0,queueMicrotask(ln))}function ln(){We=!1,Ge=!0;for(let e=0;e<B.length;e++)B[e]();B.length=0,Ge=!1}var A,K,Y,Ye,Je=!0;function Lt(e){Je=!1,e(),Je=!0}function jt(e){A=e.reactive,Y=e.release,K=t=>e.effect(t,{scheduler:r=>{Je?$t(r):r()}}),Ye=e.raw}function Ze(e){K=e}function Ft(e){let t=()=>{};return[n=>{let i=K(n);return e._x_effects\|\|(e._x_effects=new Set,e._x_runEffects=()=>{e._x_effects.forEach(o=>o())}),e._x_effects.add(i),t=()=>{i!==void 0&&(e._x_effects.delete(i),Y(i))},i},()=>{t()}]}var Bt=[],Kt=[],zt=[];function Vt(e){zt.push(e)}function _e(e,t){typeof t=="function"?(e._x_cleanups\|\|(e._x_cleanups=[]),e._x_cleanups.push(t)):(t=e,Kt.push(t))}function Ht(e){Bt.push(e)}function qt(e,t,r){e._x_attributeCleanups\|\|(e._x_attributeCleanups={}),e._x_attributeCleanups[t]\|\|(e._x_attributeCleanups[t]=[]),e._x_attribut

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4288
Entropy (8bit):	7.398004788459913
Encrypted:	false
SSDEEP:	96:/6Fjy98Qfsux3vBSolU56zYnAzeSSMP6QQf:SF+97kWJSx50dzOMP6QQf
MD5:	EA8635BC117FB6AE3FE8AD45B81F04BC
SHA1:	31059DBA35DEEB1DDDAE558D75378EE800D79CBD
SHA-256:	59C2258FB41FF7C48CE3E649171107C81A797B53E70AD80E583F738875CA05E1
SHA-512:	B78EBC868798A706B21BB57A9BFB0A16F98121A0E1B3F8EEDA83B4E3088189C967B10C0C43D75AF39209B38463AF8954468D521A2F5609344273D0C7659FC257
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................B...........................!.1AQq.."2a...Rb..#$3B.Tr....%4cs...................................3.........................!1Q.3Aq."#2Ra..4b..r.B..............?.................Z.(.....I/S.u..=k..R.......\..rK..5...$.......y..&..W...xW.31..a.k...

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.75957728811943
Encrypted:	false
SSDEEP:	3:YRM9WREaDMTxXVMWWAXxQAfB4xC2xiAen:YsWiAgRmWWUH6u3
MD5:	AFFFDA0AF0D1D6565CE3C97D0F18956F
SHA1:	2A864991BD84262202406A80DEAF3DE1141DCF74
SHA-256:	32717CAEE27AEAB349B7A2D14EE5FCA90DA8526F6F877F17F5E31CDDB2DC1E25
SHA-512:	C0EAA9C2620AB9EC036899A4A1C1B8423165EEC258EF433CA89D072811712F02EA424B6A458CF673167EFED0009EFFD605A8D8F7D5A10B287EECFC06CA64AB32
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1729844220315,"message":"Request method 'GET' is not supported"}

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	67422
Entropy (8bit):	7.993852408084243
Encrypted:	true
SSDEEP:	1536:lCe7BkjcA5NiiHrXSKAr7xOTbuduG7yByjDfU:lpWQQrXSKAmiIGWC8
MD5:	9698CAAB4481A09176BC307E56069266
SHA1:	7694EAEBA4BFF6D5DAFAEEED35680EDFDC657221
SHA-256:	B9A314E4941C9251E89DB213C53F7FBE2DC37E61845E7448083CB77608CEBD01
SHA-512:	212D7EC99376EFDA296D8059E863B4F6745DF147DD5C8D48336E9C4368F39EB6AD754CE5A121A28AF53237DBED962AA259328567882010FD29FA09B5FBB983EA
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/enciassement-securite-gris.png
Preview:	RIFFV...WEBPVP8LJ.../..c.MP.$.$..H`b<....C..#.?........."../!.."".....w.sN..x...B.iQ+"...l#.O..2...+}.'..D..>..>If..C.mf.?..U.\.M......YM.......A...u#...`@q........@?s.f.....h.(..L_Xk.Z.;@.....i,..........s.fj...,.0.....y....]!.r... .....4wf.`.&Y.....Y?..H.l....c.Q..>3.2.#I....2379...}mmfG..2s.....Zk... ./..Q.......@.oz........[.\|G...I..;..!.&y.AD..9F./.'.9.A.../ ".._...G}.k...7.W.....d...(..EeQ9..t.......k.)........[..t.m..._..s.C..9.m.J..2%.p............k. .+h.).'.YMP_..~U&Im......6.1....pp.@....P.....JA).]a.`.N.2,..1Z...a.lJJj...BV.d.........;..B''...Q..k\#..;P....+ ....\|...!....~..7...M.....,.....i5...a..1.......O.....H.+.!..\|n........%.....`1......&...pp....2.X,...u^^UQ.e.9ur2.f.P.+M...^).^..z.....n...1l..S!...-.:......f..iX.j......\|..nE....0DF..?.'...Y'jQ..<.......7..z..5.W.8....[..,.w7...!b,....fS.\|J'..xL.....^.\..`$@...a....1..qRM.....(..~^3.!.e..._I...9N.}x.1..PJ...$.PH.......B.........P.R.a......a`..0..E.@.i4D>......C...W.W..J(

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (50719)
Category:	dropped
Size (bytes):	51033
Entropy (8bit):	5.230580484642605
Encrypted:	false
SSDEEP:	768:UU/u1oWnkxzKhWdBY2rJxgCrMZ45dJ+KIAlj6cizBzzJpUVstotL:n/+3nsflM6IAV6yRtL
MD5:	B59EAFB7585844959BF1AB2FD2309B8C
SHA1:	E78D1BA9837F7D34F73A1650B734774E8C0FE8DF
SHA-256:	7777CAF3ABF606465FE426BDC9659A33CB3C72FF8708D42AE506AEFE5D38065D
SHA-512:	239B25440BB2F61B2C90C6337A66D0CF6FAD4D4425449E3A6EA931992C4CF2CA52F00DD8307DEA918EE04FC0A985ECE6579CE16F6A2248ACB346900044C9DDE0
Malicious:	false
Reputation:	low
Preview:	window.Criteo=window.Criteo\|\|{};window.Criteo.oneTagConfig={partnerId:9456,visitEventEnabled:true,fpIdentifier:"GA1.1.965705703.1729844187",dynamic:!0,gumDomain:"gum.criteo.com",privateModeDetectionEnabled:true,blockedSteps:[],addClientSideSupportForId5:false,shouldFillPageId:false,enableOffsiteProjection:true};.!function(){"use strict";function v(e,t){var n=null==(n=window.Criteo)?void 0:n.oneTagConfig;return null!=(n=n&&n[e])?n:t}var I,T="5.29.0",u=((P=I=I\|\|{})[P.None=0]="None",P[P.Cookie=1]="Cookie",P[P.LocalStorage=2]="LocalStorage",P[P.Library=3]="Library",o.checkLocalStorageIsWritable=function(){try{var e;return window.localStorage?(e="criteo_localstorage_check",window.localStorage.setItem(e,e),window.localStorage.removeItem(e),!0):!1}catch(e){return!1}},o.checkCookiesAreWritable=function(){var e=new o("criteo_write_test",1e4),t=(e.setValueWithNoDomain("1"),"1"===e.cookieValue);return e.removeWithNoDomain(),t},o.prototype.setCookieRead=function(){this.isCookieRead=!0},o.prototype

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36120
Entropy (8bit):	7.965026967199839
Encrypted:	false
SSDEEP:	768:TxaUAWoWdW/tThJSMHatbxjcPdiGS9MGJaN6hHb0GZ6gNdu:TswoWdAJhJSDtuVYMGJaN6x42M
MD5:	A060432C971C6151898F1DD75725ECD0
SHA1:	946D1F55DDA7CFB77F7AFF745D563D4CE2D243AE
SHA-256:	6B4E359ED5F20ECC9004EC60CF05CB8CB2BF9EFC6FDD209225915BCF3CAA6EF2
SHA-512:	489028A9A69EF29F509408BF0416A25339F528403A312DD09821BE1CF2A7DBC976C2AC913569E021A30A805474130E7FCD978A6A6A5753128EC21B238E299D49
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y.$.]...;.......g4-...f.....f.,iA.#.....`y.?..{Y@.0.-...<...F.1....k?.xW..Hz.,4=gOOw.]...G\.....{..QY}TwWdV.....23...~....D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H.;J...H.t..V..>.....[.8^...D..j.$[.......'I.........,..E..HF.^...n...^.0.UEI.y.q..P..I....A.0......z....9.R..%.#...I..Ap..n.. ....1.(B... .H.D.... ...............O".....H..q.'<... ...8DQ.0..$.8..p.._. ......=...S.EI$G.) .....N...A.L....E..@...xpq.R.PU...AQ..........g.B/P"9.E/@r4I.D.}.W.Lh.&.W.e.i..8F....P....Y$...4.g...>U.uI$G.) .Bp..=.....` .yH(vb........~.A. ..a....h........?..H..R@$........ ....Y .}....."!w.eZ...?.....x...F.....v.g........f...+..,.~./\Y.....4..a<.8.w.p...@.....R......}...$I.@.x.q,,.r_......&..}....H.3R@$...(.....P...}.@:......~....7-//.(.Z%....K..EQ.PUU.,....j&.7I.../.....q.EQ<P`..,....r..K.t:....X"9.H.DR....+.B...... @...}...<.C..Blx...\.}wQ...f..")...,.r].Jt^m...B........LX.%^....

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019706801697464
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOI3buhXwW4nxM:mGRFauOxLA/+IcTOZX/
MD5:	68DF4E65BB75C72BB2DE801EEBEEC9C9
SHA1:	76462F14972C57A6DDD6EB1FE624EF226A7DBC37
SHA-256:	AF772A1084C1E08E7A7B0A650DE797CB14337EA9BA8FEE556BD44DB8E0DBE1DE
SHA-512:	3482D7A1803045B83001BB180548E8E125D8F48386DE46804CB4BCE6B842C545282966A7E6F0F137C2661328C4D0D99A6301A302312591F03728135FADDE211C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	68840
Entropy (8bit):	5.322782061980959
Encrypted:	false
SSDEEP:	1536:RJeUwT7hpwPCHM9ZVK01QYTZ02LKVsdmpyKcicx/:RIT7Vs9ZVKBYj8wKcHx/
MD5:	A2AC7E9992DDD767FBD310FA848D2202
SHA1:	745F000056E3133698DC061CB6D693A48E5D3B37
SHA-256:	01499A51A03C2C0D415BF1E53865511AC172E13A83331B667EDAED1557D6A896
SHA-512:	4BFAEFEDE1B75398859127A8EAFE6C96CCA42E9ABB696AFB7055A7D365A2ACD8FA227AEF85C0A2DCD8927C8319810DA2B2A74BC0F777CC4F2826E8137D006B11
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21756), with no line terminators
Category:	downloaded
Size (bytes):	21756
Entropy (8bit):	4.769122522678095
Encrypted:	false
SSDEEP:	384:ud8C4hGojhmCy7qGAVsq1nwGfg4xqsQMPNE:/6J
MD5:	C925A552257F078897064317827D0BC7
SHA1:	091963D2C8C8D7301932F1BFB38BED997108AD18
SHA-256:	29733CA80FAD429EB7E4BB7F028CD176D9EE5A5427D09CAEC143E5030CB1005F
SHA-512:	8E26FC9B12F420E40E3D1D6F422AAD760F9E7C39DE7031987BB36294427E0513DC10A0E40D82187157E664DE875F8224AF94F24FA895F85D2D2889201723868D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202401.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:700;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:700}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-foot

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9721
Entropy (8bit):	5.35902308660375
Encrypted:	false
SSDEEP:	192:6KyAQgtNBIWguxw68uCZItctpwfTh3fYwuoOE5YBTi+Q+Qsf1POyj/0Pp5b5ffv7:04rsCJ9cO51r
MD5:	17E5CF7E2FCAED7692184F43C4577219
SHA1:	F47F0887E191E30A49391514CEDDABFC26CC9BD7
SHA-256:	09B627933E01FAA4979DC5661F7E616C7DB1C12EA1984CA0549BDB253D24DA9B
SHA-512:	30ADC60FD2051044E070F467D1AB46AFE0071D3D4B410527C68684014BF9D9D0A1CE0371EF4E02F02C6017AF2D0D53B4EFAED72D0FB0644B5514FA26D1A521F9
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otCenterRounded",. "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90Q2VudGVyUm91bmRlZCI+PGRpdiBjbGFzcz0ib3Qtc2RrLWNvbnRhaW5lciIgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtZGVzY3JpYmVkYnk9Im9uZXRydXN0LXBvbGljeS10ZXh0Ij48ZGl2IGNsYXNzPSJvdC1zZGstcm93Ij48ZGl2IGlkPSJvbmV0cnVzdC1ncm91cC1jb250YWluZXIiIGNsYXNzPSJvdC1zZGstdHdlbHZlIG90LXNkay1jb2x1bW5zIj48ZGl2IGlkPSJvbmV0cnVzdC1wb2xpY3kiPjxkaXYgY2xhc3M9ImJhbm5lci1oZWFkZXIiPjxkaXYgY2xhc3M9ImJhbm5lcl9sb2dvIj48L2Rpdj48L2Rpdj48aDIgaWQ9Im9uZXRydXN0LXBvbGljeS10aXRsZSI+VGl0bGU8L2gyPjxkaXYgaWQ9Im9uZXRydXN0LXBvbGljeS10ZXh0Ij50ZXh0PGEgaHJlZj0iIyI+cG9saWN5PC9hPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRwZC1jb250YWluZXIiPjxoMyBjbGFzcz0ib3QtZHBkLXRpdGxlIj48L2gzPjxkaXYgY2xhc3M9Im90LWRwZC1jb250ZW50Ij48cCBjbGFzcz0ib3QtZHBkLWRlc2MiPjwvcD48L2Rpdj48L2Rpdj48L2Rpdj48ZGl2IGlkPSJiYW5uZXItb3B0aW9ucyI+PGRpdiBjbGFzcz0iYmFubmVyLW9wdGlvbiI+PGJ1dHRvbiBhcmlhLWV4cGFuZGVkPSJmYWxzZSIgY2xhc3M9ImJhbm5lci1vcHRpb24taW5wdXQiPjxzcGFuIGNsYXNzP

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	663
Entropy (8bit):	4.682413811217405
Encrypted:	false
SSDEEP:	12:2C0mMuZ07DQih+c+2P7DIeFp/SwpQkp+FpHMn:2C0Q0TEN87np6X66pHM
MD5:	E230DE3C9EE63B650AE6159911B780EE
SHA1:	9FFC06C702523CC122726E57AFFA1E24DD2370B5
SHA-256:	2E99928CD62BC51D3296F5B52556F3F92D3A55F0715E124F537502FCA9371254
SHA-512:	5326A68F7F02E59B7490502CB7BAEE4EF42B1825FAF423BDB36361405A1DC582344FF915B7633FA07BA5A29B3941BB477A1D43D08A1BA151DCFD61E52CA3D9D4
Malicious:	false
Reputation:	low
Preview:	(function() {. // V.rifier si l'op.rateur de cha.nage optionnel est pris en charge nativement. if (!('?.') in Object.prototype) {. // Polyfill de l'op.rateur de cha.nage optionnel (?.). if (!Object.prototype.hasOwnProperty.call(Object.prototype, '__opt_chaining_patched__')) {. Object.defineProperty(Object.prototype, '__opt_chaining_patched__', {. value: true,. enumerable: false,. configurable: true,. });. Object.defineProperty(Object.prototype, '?.', {. value: function (prop) {. return this == null ? undefined : this[prop];. },. writable: true,. configurable: true,. });. }.}.})();

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://r.casalemedia.com/rum?cm_dsp_id=20&external_user_id=k-Bh3PsWinzjvINIfCWPvjpcHWrNFL-huUDSo9Og&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	66476
Entropy (8bit):	7.977279612444116
Encrypted:	false
SSDEEP:	1536:rd5+ydhhIurgAEfxHtQ/om6kGxh3jtTyqjBcBym9NTHMw:rdU+IFfNyom9ghz1yqjbI4w
MD5:	8136FCA6D806599C6992A8B78D8C994E
SHA1:	CD6ED5D1A8D6CA40AC72025D824EF84D8FB4BAF2
SHA-256:	03389C29103283C477B35C442DEC3410826D01B0BFE71014EEB30A8C61C74FCE
SHA-512:	65A93AC8B797EC8060A0F31E2CD02C948CD294D55CF6514BDB410D43CE2F5080BABD372E373BEA6A850713B9679F605943B8AF5C9850B058ED939BE0E248C23D
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/agencemnent-magasin.png
Preview:	RIFF....WEBPVP8L..../..c.M.$.n$Y......... ...>>#.?..?}..n..@_......9o..9.8.7.....r.T..........X..$.............(N.q.G.MR").Jw..^T.G$E).....dl......HQ....l..%...M%)I..$Jb.5..QQ......U'/%F.$..H2$.%E&I..$..n.@.MIR...;^.J.,Q...=6l..DR.VV\|...6`.m.h...I.I....\|....$d...^K....._R...6...Z+..........BJbDj......;&.PJb..........Q...2.$ZJ.>.....%.E...'..'.}.B...DE>....@"..dv[I...l/I..X...sN../...:.<x;..s^.........9.Q........$9r.X.......Es.@.....].5.+eE.$I..$..8.R...n.Y.....c.!..9.u..j...9J6...............q5.>...>....M...WCc.@...K#.....$<..B;....S]......m<......}..7........ !.+...>....@ 00`..P.........Sk.....!...T..5.m.....1:0]..D.d.y.."..)....eY.H(.PJY.DX..D4....H.. r..A.(@..`...D....E........Y......c.+...@..`)..@)E.F...@......X...".Rd.@........`a...7...e.OJ....""...?.af...Y.......B.P.........gT)0L..# N.C.p8...R D.....D.#.9+0........\|%.A.....n......bA...P...X...J.e..U........A&...... .....X..n..'P@0.v5uD.$..p.v......f..c......Hr3..7t....;1.fw(.,.......@..MA

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46512, version 1.0
Category:	downloaded
Size (bytes):	46512
Entropy (8bit):	7.9956016042047375
Encrypted:	true
SSDEEP:	768:kUwx6qBxwm1Af9EnKrRcMv2DUpUAnuGDA8H2pNnKvQC6zBVCvU/lF25srrJeHbW8:kUgv2CnERcinPzHO5KvQC6lVccxHwipS
MD5:	0E64E853CDD7618D8DC4127F5BB995DE
SHA1:	2B58779B07B80B1F7D7846E6B3E4F68799601DCC
SHA-256:	1034BD7637FF1FDFB9B40FBE0F81E5F8B171B228083B9A8C6A1FF25307F9B691
SHA-512:	27DB7FF6EE4F57D9E576643A2C6168A04A53D584C7FC98FA71C987A6E109F2459CD08B40E4858080251B766961CEFA36EFFB6AB3CA64BD031DBA632CAF129485
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/fonts/dearjoe/dearJoe6.woff2
Preview:	wOF2...................B........................?FFTM..$..l.X.`..r.\..e.....,../.6.$.....L.. ..x..C..2?webf.[.wQ........1..1:......RB.8...q.0sO...9.....L.....Rf..(d.!..Qx.lqjM....... ...T8Q.6.qA.F.:NVe})-`R..Q..L.O.z.....(5;#..j<c...6.l..1...4H.w.W.8.....x.KJF...p........=....%..!%C..kM.h.f/...Z.C.......4u...R.P>.>A..xF.(UCC..5.7..5.d...F....:.tg....N...._.......}@_..B.......r./b.3.x..n.C..N...h..K39...c.H...6!...>...&.j.Yi..u.4.F;.R.....,._O...t.".@...@..cL..#F...."...Z....;.v.u....Pn..\g..`.v.gb.~.9Z/....$H.KBp....0_.r.....i.[..x.3....^..=...... .u.R.[.(.n.&.n.m..z...9.@....<..c..kg......:...Y.TTT"....433[ff.7...>........Q......}....>...?."6..\|.7)b.....!..!V.x1.<.Y..8.4.&!.HZ..y..Q.)tD.....v.].O..m.H..&.....}Q.G...A.{.o..........H...?5..}f.E..D.f!j'D.B..xh.x0...W..Vi.H .a.-.8A.;8..V..9..6..........(..t.)./.......[..USc.R<...E.g....+M.!k.....=.Y...p..f...!......kN..[H'.QEm.t.....7.I...U0.D.H.VB...=....Y,.xx.*..0.}...3.z]..YE..@V.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/rtb/appnexus/cookiematch.aspx?appnxsid=3622803516854171940
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_user_logged=0&ep.page_type=home&ep.content_group=home&ep.event_id=780258551.page_view&ep.facebook_pixel=671587811394625&ep.facebook_event=true&tfd=10538&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 116 x 96, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.683346975420911
Encrypted:	false
SSDEEP:	24:yuaFRhwjw4x9DRpzN3LG2lVin3UprT6vyI:QThwN3NSsSENG
MD5:	812717045929599180FCC05DB1A54949
SHA1:	0A4922E91A9100EA5050982F5A40A327860E8130
SHA-256:	20246081FA01987ABABF84F623542E9639E8E93CFF741EE5A8CC6A2A42EEB4A9
SHA-512:	C619D334CF71A5B11CD288E8213C2AB64B0B2C9388FEBA46AB2D69B562B947B56270003CBAEE2F7BEC315CCF21CA2C28F939E78743E740206990D33264702924
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t...`.....f.!....IDATx...?h.a....).......b.@1C#....Dh7.....)..SD..(-...t.......-.....C....Q.ik[..Cc.M{.k......w?.>..{......AR.P.Y.I...NfP....i.b.=Q.x5.\..o`R..R.C...ZJC..7.5P...t.Y..6.t/W ..f......#Z...S.9.iBkfBL..]".n.>....>.c.....1.P...S..).5.....q.eL.`J.z..gh.H..W./.....t...h.m...@.T[.E.[....;..QNs.g.m..K.a.+v...]...D...>...t=..\...\...Zx....=.@..c...4{.%h.#.AG8......L......a~...../...\|..._..E.......r.r>j....+.%.U.Q.......k...u.RP..{...uL^P..).W.C.....c.]...;d.+...d....4...tHoS......_.....u.~...>........5P.5P.5P.5P...9.........h.%@...Ib.H..&K@3(..(._..Sd..^.,...4S$....6q...7} M..qlN...''R.^..N..=""....Z Y.&J..sGD.$.}...2.2.....f.-=..\|.>q..-..t..}.8V.dR..(!B....Q......rg...w.{...`...T.mJQ........i.U..T..........B}..W^i....\|.\._.@....EJ.....:/;.....:.UT....IEND.B`.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 988x482, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	82096
Entropy (8bit):	7.9978486090256755
Encrypted:	true
SSDEEP:	1536:fpFOJmO/6AK0/htqa46NjlXPnwYevLgWYuctffAsJgQsSiY5755InMq8:nu9bkctPnwYqMW2RjT5Em
MD5:	B53E97B6B0A3493642D0F53AAB2D16C4
SHA1:	5892E29F144BE830333192F9AA425A590F87B4A2
SHA-256:	107112823037143203F9AD576D98C6109860620E910BD5F934BE98DE2C335464
SHA-512:	D101F6CFD62BF8654BCA46DDE7612E7E7225628FB3305DDC3B14614A528C1A25B942A18E545242C73A5E662D2658ACCE15DD48958E4FC1A9FB108451D15992D7
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/emballage-noel-24-push-sombre.jpg
Preview:	RIFF.@..WEBPVP8 .@...........>m0.G$".%W. ...cm.jS.j''...c.T..O........{.,.q..:w.t..\|.}../@..}g.......c.w.o..R..............'..._\.V........5.c......O.....~._...?.{^.....M....~.xS............ot...y.W..R..~=.G..k?....'..._...~\...{.................k.../.?....M..._.....z..C..../..........G._.7.....\|..C...................._._._.....1......O.......1.........%.n.pG\|...@?F......o......qh......T.\..H,..$....u...N...2..Z}E&.C..y3....E..q.+@KQ".r'o..O.N.....!.}T.P.,..d..X.f5t$.....\|_...a..W..r0.V.....EO.eY....Tx5.z..eX.j....>+nk..<.................]4>...a.. k....5.... ..8.....o.........H...w..\|-I)...2@...s C...o.......E;.d..^.f....&(...C..;....Q3B.'[I1.E..k....y..5.../g]k.Q.W...^..q.G..[*y...........>f.;...=f.LI.....(.(#.....R>.dR\.Gs.n`..w.........c;..]m7...y.3/.....A$9F.ks.....!G...K.S.OYG.V.4..aul..w.....n.vt.t..H.-...+JG.&.4/...%.E......dA%K5.\|z.}T..5......W........CF...~y..X......0....a.t.L ...q..?.,.As....(........nv.s..=....[Y........R....-/.L..c.%3

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2311
Entropy (8bit):	4.73824873232341
Encrypted:	false
SSDEEP:	24:hYOv91unt7rEQ1NwPG5hqSZ3lpmCHcWwc3e10z/U20u9/nHjMscchjSefHYx9YIZ:59edllfe+z/U208/nH4IjSY4xGIoT1OT
MD5:	16D33FA65C3E9669F2A5A038DD19FCC2
SHA1:	58A0E0A5C1DE441C725EC8E85AE71B66E4105721
SHA-256:	EFE4FF2BCFF85DF1EFECD2621A74AED03BEC542ABD2F471949C6ADF182BC3D7A
SHA-512:	60C26B5090993E0DA073D92CB9CAB32A159658D10A1E6F75F5FD248854D6D5767C9E000485F95D8715425474D6BC80227234E8E66C5EDFA9A7E50DBC714CB0A1
Malicious:	false
Reputation:	low
URL:	https://fledge.eu.criteo.com/interest-group/abt/iframe
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <title>Set ABT pop</title>.</head>.<body>.<script>. const NUM_ABT_POPS = 8;.. function dropIFrame(url) {. const iframe = document.createElement('iframe');. iframe.allow = 'shared-storage';. iframe.width = '0';. iframe.height = '0';. iframe.style.display = 'none';. iframe.title = 'ABT iframe';. iframe.src = url;.. document.body.appendChild(iframe);.. return iframe;. }.. function encodeError(error) {. return encodeURIComponent(error.name + ':' + error.message);. }.. async function callSharedStorage() {. window.sharedStorage.set('chrome_abt_pop', '7', { ignoreIfPresent: true });.. const urls = [];. for (let i = 0; i < NUM_ABT_POPS; i++) {. urls.push({ url: `https://fledge.eu.criteo.com/interest-group/abt/${i}` });. }.. const shuffled = urls. .map(u => ({ url: u, ord: Math.random() })). .sort(

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	4.4946108531876625
Encrypted:	false
SSDEEP:	6:VWSJU3eWD3KYFWSJU3eWD70STX8Q6ZTo/SNneHtK7mWSJU3eWDnOQtK7K:VlIeWD3JlIeWD75T6Z0/WwtKKlIeWDnb
MD5:	85C1A2263175A1FDA278C500F435A1A5
SHA1:	BC68E4A030E887BC376A069DD4F0A7F295B4F035
SHA-256:	013364CC35FE8D0E86B11EB07ECF5CE49F348695A76BE61971EE9A20449330F8
SHA-512:	769D3E16D7E3D3FD9E8A542BCC12F3DF76C3A30684C9F23B0BF69762EA3B7095D3E0C29C32BFEDBB9714121CA83941C38C6997FA900663E4B4300835C56344AA
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/HiPay_FullserviceMagento/css/styles.css
Preview:	.payment-method dd.content table.data.table tbody tr:first-child {. display: grid;.}...payment-method dd.content table.data.table tbody tr:first-child th {. font-size: 1.6rem;. font-weight: 600;. padding-left: 0;. border: none;.}...payment-method dd.content table.data.table tbody tr:first-child td {. padding: 0;. border: none;.}.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	12715
Entropy (8bit):	4.603625033024717
Encrypted:	false
SSDEEP:	192:bLvhQyDCTE6RMGqcB6DAGUVTnCy06xDB3T2tZWi3kMzE0qPmr9rxdHI9j6QTUCuv:bLHC4TGqBwVTDSGcgtmr9rxdHI93Zax
MD5:	CCBE98882DC04D7992ACD33596300A43
SHA1:	3A127D45799FC01CC090CD575DB2EB6170C2BEC9
SHA-256:	C833972A635DEF96E1F018ED9A55FB8167B049F270813DDFE335105B0BA32B8B
SHA-512:	F8B12941C082C907B65D09AD76238522F897D1E0E9E7C5A3A2131EF3CE18E20F6140D45E0D76CBAC288131C6B26A1982F335163FDAFD1B84AB8E1CFCBEC453EB
Malicious:	false
Reputation:	low
Preview:	/* global document: true /./ global window: true /./ global console: true /./ exported smileTracker /../. DISCLAIMER. . Do not edit or add to this file if you wish to upgrade Smile ElasticSuite to newer. * versions in the future.. . @category Smile. * @package Smile\ElasticsuiteTracker. * @author Aurelien FOUCRET <aurelien.foucret@smile.fr>. * @copyright 2020 Smile. * @license Open Software License ("OSL") v. 3.0. /.const smileTracker = (function () {.. "use strict";.. const guid = (function() {. function s4() {. return Math.floor((1 + Math.random()) 0x10000). .toString(16). .substring(1);. }. return function() {. return s4() + s4() + '-' + s4() + '-' + s4() + '-' +. s4() + '-' + s4() + s4() + s4();. };. }());.. function getCookie(cookieName) {. const name = cookieName + "=";. const ca = document.cookie.split(';');. for (let i = 0;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (311)
Category:	dropped
Size (bytes):	362
Entropy (8bit):	5.267284793304081
Encrypted:	false
SSDEEP:	6:+hj6t3j6Vr+JAdilABNM9EGv0WkXbz2xKz1LV76VV:+d6tT6V+OdiSgE8aGEeVV
MD5:	9E290A403626E78EC1FD33F72031A21E
SHA1:	DE7651566D7960E6F8C0A41F4FB7D3012F24DB7B
SHA-256:	ECB9F22D28CF901DA027237961CE1A638008DB6955D86918C38BCFC82758BCC8
SHA-512:	F17AEB9980530F6D5DFD92F0EB8DEE78697A6D96038562A769577D417CD962FFE180B9EBC5BBEEA2A3653C96CE7A888D41D1521BBD15930B23CCF60B71FD50E0
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["handleClickedUrl"],{89761:(e,i,n)=>{n.r(i),n.d(i,{default:()=>c,getIsClickedUrlHandled:()=>a});var t=function(){return!0},a=function(e){return"string"==typeof e&&!1===t(e)};function c(e){t=e}}}]);.//# sourceMappingURL=handleClickedUrl.chunk.js.map

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 494x444, components 3
Category:	dropped
Size (bytes):	20669
Entropy (8bit):	7.929888055862028
Encrypted:	false
SSDEEP:	384:SFywOLTPfDAyAkdpqaeezQG++usuOwUycFIWFRXb4NokVsMFepemZ:SF/OLTPrdpxsG+5s3ycFIWbqnVsOmZ
MD5:	DC610E05C21ADA0DDF29D3861E9095DE
SHA1:	7857907023216D7F738B345FD126CDD0CAE2EBA8
SHA-256:	2EDC98F6D45B282C6EAF500597ED9EAC6CF127A07C6852BD6B7733F45F4981CF
SHA-512:	C9E1E72E7AAEB8E42A9B52BD0E385A2E322A1BB45201BF965B4A08E968E6D768F7792524F57F74D241245B0B0462BC3FE207A1A61A8E06CF37BD1238AE58A831
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................K.........................!1A.Q."aq.2..#B..Rb....3r..$4CDSc...%6ds..Tet..................................5.......................!1.AQaq.."2...R..3Br...#b...............?..F...;..=C.E[>.-C"kG...35...\..U....f.S^)..\|...6.~.....Xv+.A..4PV.i..}...im..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	8234
Entropy (8bit):	7.836395047196885
Encrypted:	false
SSDEEP:	192:SF8yyPrnkWcI0oYyMu6GHygLBr9c30QdVhBTy8U2t70kn:SF8FneIDHyo9qTh88p0k
MD5:	26BBF83E1AA242E1D03FB427AF22808B
SHA1:	BC00873702B9BDABEDF89FB8D3AACF248D626D2C
SHA-256:	8D1E5E89E7B85FA0B5F11F925085906B7640D866E96D06F48EA47C9FB260DAA4
SHA-512:	2EEC1F935B5E40D05358534D8D11DEF7FDF31BB1D1284021F08AC17C19DE41AA1A88D1C51966D379F88903EF8000CFDAF28539A2602320786C8F83A85540113C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................D.........................!1.AQ.aq..."2S...BCR..#3.$rt...%b...56d................................./........................!1A..Qq#2a...."..BRb.............?....X.\|_ .X.\|O ..t)pJ......A/.k>'.P.. 'z..y.z..y....w..'.G..'.PP.'...y.z..y.....M.._.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3779
Entropy (8bit):	4.928197771810045
Encrypted:	false
SSDEEP:	96:npyIs40wjaqiRpUBKxYa6Ayoij+jpjJjeW5hWF:F7eqiRpt6voGqpJtK
MD5:	FB40C09B8191E6A7C31DA44646D7E3E3
SHA1:	DC138F4C0B0C445E873EC674494F2A16CE0609AB
SHA-256:	CA202484B500A49FF1887FAD037E8E2F4E7941C25637BD129335202FB7F5C302
SHA-512:	6B08C0639F2C853A8B313C08F41DD5AA207E1B05A5CAA7999DDC14B5AA5784ECBBF961C2A397FD60B10335E5C569FCF32E074B752BC5067142E08A0A55CA2CD5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944/7b598d17-8e2c-4f6a-a9b0-ce07a9dac944.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.1.0","OptanonDataJSON":"7b598d17-8e2c-4f6a-a9b0-ce07a9dac944","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"87b5ab3f-683b-4ba6-ba61-e882a417e7ec","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","bv","sg","bw","sh","by","sj","bz","sl","sn","so","ca","sr","ss","cc","st","cd","cf","sv","cg","ch","sx","ci","sy","sz","ck","cl","cm","cn","co","tc","cr","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6350
Entropy (8bit):	7.964394256343934
Encrypted:	false
SSDEEP:	192:bISCCG25dZCRKKoiIQ1yZv+I2dbsv5zpQzO9Fk:bh5dZCKfQ1yN+vGzl7k
MD5:	128956D0D9C325212589F2EF1FB3A521
SHA1:	335923D4A95DE909B004BAE8C72A086FECE9F972
SHA-256:	4583B55A9423AB57D4D618697582C196E326863D44B2528A2D76E02711C8DAE5
SHA-512:	491760B48C069D3544425D3BB6D674980C901D234360599BEA16185341885A718BE5C5ECA5EFD71995158FF78035BB5FE52DBEE93233AD859A12DAC9107594B7
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-006346_Retif_PH_02.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....a.......>m2.G$#!.'..(...@.6....%.5..\|.6_..........7..D.2^l...l=..k.....o.....+........+i.j..8......g....x..oz.......`.+. (....?...^U>....t..s......R./..s...G.....h].-a...E.X..v.E.6._..F....?n.c.=.....7....$\|......nt....C......1....l.JP49.I..M..?..........l..k...<.-....z.&..^.7Q.....6.i.U....8.6.....z..E.9.YOy....v.. GlX8?........R2=D.!xb/n.U..\..c....G5}m.0.....0\|k..H....2m.J.0k.y..q7....8.....Q.k.N.2.......y...?.....V]..BI:.T....(..~q%.tnQ....Hv....zj.D....,...?.l....o.y.m.P]..\3...C&..mP.n.z).....5D..,....k.....\|7...S.)x.R.JT..C.h.......9.h.......8.2...c.`>.uR..........+.i.v.......&...K.Ll....>h.(1.=...[D.DT.^.!.&.....{{`.Z.2.e........d..".S......\..]F.>.Ik.f"a.{......b.c.jA...(.....\|..H..6WwrDGq..?..Y....8R.H...!.i...........x..T.M..m4..1....p.$?Dr........~9..,.. ...v...$....4.D.fN.f.....\|u........s.s...6....../6.b.F.........2.z<M.U.......V....{.0.I.................[9[\}Qd>f?9.66.E.q0

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x700, components 3
Category:	dropped
Size (bytes):	75509
Entropy (8bit):	7.857081095279403
Encrypted:	false
SSDEEP:	1536:SFrfG2hL/s/JjELqq3F+PkPp7v6IwFom6WDUe3Imh51vbicx7cbhXMev:sG2d/mjEL3+PqpLMnbDV31ziM7cbZF
MD5:	029F2F727006F8F80175E9D92434A751
SHA1:	B870EF8995C122B634329A87755327BAE7AAE6D8
SHA-256:	FE2878A237F1C59ED719DC2C99394F7B7484A353437F255D1DD5877C4CBF90F3
SHA-512:	73BC0C43AB1C906A2E82B0EDA77EE677E7FD396D6DEB5C41D1FCC77D8EF9FAE9EABCF750A0F3DB23CCA6E9C758E1E49E9AF6DAD9987171237F23391C40096F69
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................W.........................!.1.AQ."aq.2....#BRr.3STs....$%56bt....4CDc.....Udu...7E.....................................?........................!1..AQ"aq.2R...#3r...B.4Sbs.$...c................?..l.\|7.0..............................................

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1368
Entropy (8bit):	7.825885265460087
Encrypted:	false
SSDEEP:	24:IntI0dLbAtP6AFe2YCwkxeTjWmrwRWUQdSXCk+sXJ:cq0dnAtPrEVTkx7yLeJ
MD5:	DE5C5928C949532C3E809E5499342F1D
SHA1:	5D4B9AEFA7AF7AB4BB92CCBAE982959A38FF1E56
SHA-256:	E955AA61CE7BA17BF128ABA9738D884C70DC7B084ADA7249F075EDFBA32A7570
SHA-512:	1249216F4C6710139AE7E3337AB5E22F7ED29641A1AB5A6770020943812D4C4C0A95D1D798B61F0BE377F98C5F0C98EA872D3EDA9E4BD2CB881282DE478FE531
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/4/5/45171_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFFP...WEBPVP8 D...p".......>m6.H.#".#T....en.k...r.....AU....K.........^.J..=3:....v.\|..........Ka.~./c.?.][-..........oy$@U6..\.S..\.]...........#jR.....@.J4u".:.7<..........F..htWq.tf...h..`X.w...h...y>t/..B..'Z...s._b...,...M.I..eYni...R.....&...ej:...(..../.p^..{........<1e...........N..:t.K..1...e. k....kB...nF9d..].n..x...xB...".......B...._.K].=..B..V./w=sEP.M..[.\|e@...7.C..ZWip..W....[.<w8@V..j?.w. .C....\.K...B.../.0..HK.;.]ZB^.(v..Rt...(#...3.g.K...E%...f......e......).%.......}.!t.t'Q..).#x;.,\|H...f...y"&.X....nt.H`P.]..?@._..`ZD9..a..t.a....4k2f.....2..."...,.8..a..x8..\../^.<...... F.bF..s....b.q#...n..o.~. .{...).XP............e>..-F....D(..g....Q.h..o`..QY8C.H...\.L...'....-.y9...Z.....k8....?.fla...R......t......s1H~(..~ ..J&.6.....].s..g..?.LOmn..Z!8.9..V..U.M.~..X.G..^z.X..s.7}....Z~..9.u....E..m...O....H..^.jya.u.U....z..._.#..\|E{R...Sd.Z.....W..V=.t..,.YfO.;......+*.ff......L1..NC4>:....s=,P.3.......V.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16149)
Category:	dropped
Size (bytes):	16215
Entropy (8bit):	5.487697503542321
Encrypted:	false
SSDEEP:	384:QWxEBgCIicugLtdDrD8p9pNe9b8VKtpXhXb3B8iKobGt:Q3moBgRdP0qt8spRL3B8iKam
MD5:	0AC88A44510F3CDDC652E079A7C45316
SHA1:	1EC06DD8074058625B157DB0FD196110F68665AC
SHA-256:	BF8C31D9106576243BFB2B35A7DEED63E1B1C35E715815267BA8C0821A4765FA
SHA-512:	BDB6F4AA63AD4DB9325A68839E0844BAA14B74EF129C406ED51CD7AAE3AE3205FE27433C384270AA40D35D5F782B69970BC298487F05F081C45AE26DEC75B0B9
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["notificationOrchestratorEmitter"],{22308:(t,e)=>{Object.defineProperty(e,"__esModule",{value:!0}),e.toHexString=e.isColor=e.Color=void 0;var o=function(){function t(t,e,o,n){this.red=t,this.green=e,this.blue=o,this.alpha=n}return t.prototype.toString=function(){return 1!==this.alpha?"rgba(".concat(this.red,", ").concat(this.green,", ").concat(this.blue,", ").concat(this.alpha,")"):"rgb(".concat(this.red,", ").concat(this.green,", ").concat(this.blue,")")},t}();e.Color=o;e.isColor=function(t){return t instanceof o};e.toHexString=function(t){var e=function(t){var e=t;return e<0&&(e=4294967295+e+1),e.toString(16).toUpperCase().padStart(2,"0")};return 1!==t.alpha?"#".concat(e(t.red)).concat(e(t.green)).concat(e(t.blue)).concat(e(Math.round(255*t.alpha))):"#".concat(e(t.red)).concat(e(t.green)).concat(e(t.blue))}},83545:(t,e)=>{Object.defineProperty(e,"__esModule",{value:!0}),e

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x700, components 3
Category:	dropped
Size (bytes):	89824
Entropy (8bit):	7.931902900942072
Encrypted:	false
SSDEEP:	1536:SF/tAHEF8toHZkODgysAX4/3YI05t79Enur97+aB5QrKyu3S7Rpc5sDOg143myBU:EAHNtoH3vX4QI07ynurx+aBj32MsDOg7
MD5:	68A963A33B69C3CD5BD2333C80E6B6DD
SHA1:	0834036AC8FC48555722F1EFF1B9416795E73FF6
SHA-256:	4AA60E4C4141A093852BEF4F09B41461C6021DE98E967E3ABC6966A4FACB3557
SHA-512:	CA808DCD3E118063CDD70D73DAA532037404E8211D633EBBFF630AEECC14E122D56CA7DDE935682683B6AA51543840358C451D4F6256CB16DCD1382850B44195
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................Z.........................!.1AQ.a"2q.....B..#3RTbr...$5s....%&4CSct...6Ddu....eEU....7F.................................A........................!1AQ."2aq...3Rr...#B..4s..Cb.S....$5D..............?.....h..+..).M.r.).tU...q..0..;.X,...t .....(...w.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1162x553, components 3
Category:	dropped
Size (bytes):	112261
Entropy (8bit):	7.988508402649296
Encrypted:	false
SSDEEP:	3072:ALXUdZnBvs5wPtsyeXsSlF0IiLTd9aVWoVPYL:pdh1s5wuyel2IiNSWoVPYL
MD5:	85EA9EFAB723C32AEFBEE8666142E31F
SHA1:	53688F9DE2A882F9F1E87AC81141D76A8AD0F8D8
SHA-256:	1183779CC9C7FBCD526B054B51EAFF7D7B6A2A21106587CE03AA9FD5E9861350
SHA-512:	2ED821BCCBB2E5657757396A7D88CC4103D2372D39080813136127FA98E3A35796E073A203C1FDC75E6AD1A0F742B1C1F6654E00ED463675AFB87ABD303F2241
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......)....".............................................................................G._D9;8...$st...+.)`.TQ.Q.U...S>{RUFYjBZ..[Yi...x+.x).P.[..p)...,..v++...5t+..:...H.,...79Q...(5.Y4s.R.R2B....Tc..)H........#..86.G3...NY..hh.h.h..PAA.G..X...@...Z..N..q... F..YV9.Dk.cz8G:k)g.gcWti.o........u'...E)....=.1]......F..X.AD.#G.Y.Hz=)....Ej8.....(..b.)..H(.5..!..ct..[.".......,!8.....A<R.r....AD.."..3..........`8dR..vG..HF.,A).%[k+.4.!.[1. ...).u74.RV...Y.k9./R..GB....8.17qyj...E..Q.....5.....V.n..ak8...,-u...$F.!.<`9..DI]...8.VE.I.5$V-.V....8.9...@UE.Ql......".......A......4p4p0x...G....... ...h....z..FIA...TQ.L.X.s...&.:..Tm.V4U.......z....`...I.Y......Y..N...q.z....0.... .j9...."....r*+.iU.....E.b":...%..j+.k.R.].E.tX...2f....$u%.EN.T...A. TZU.......P.Zy.....2....Z..U....Z.,.m.^.N..=ib...\.,p..[Zfj.[...

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4567
Entropy (8bit):	4.852498443321261
Encrypted:	false
SSDEEP:	96:dm1c+irG1COUyHXSGatNUO1T8j5we2UIQg0sdSXdQFslK5I+cwTI:dm1c+imocprlV
MD5:	358251A15117B68C69AFC72E57C9D614
SHA1:	3C6A85D428BBBFF6E2BC9952810DFEA960FEF985
SHA-256:	910DB69170F18EADBD72C687EBCC8BFCDA388B954CEB940227D9B97C9B6CC917
SHA-512:	59338A2E2888D1AACB3B696FD4D604A824AD3CECAEFDEDA6A16E1D85EBA614B39B084D690CC0E231485EF465255BDD1AA293D00B917084702EDB6AE2BE9828F7
Malicious:	false
Reputation:	low
Preview:	{"config":{"overridenTranslations":[],"version":"e6eea7ff3a87d5aa0f604190aadd63e6e50714e6","curlang":"en","chaturl":"https://halc.iadvize.com/","secure_url":"https://halc.iadvize.com/","static_url":"https://static.iadvize.com/","mirrorHost":"cobrowsing-ha.iadvize.com","platform":"ha","ws_url":"wss://xmpp-ha-alb.iadvize.com/websocket","website_id":"7738","website_url":"https://www.retif.eu/","website_label":"RETIF","website_dateadded":"2021-09-21","firstPartyCookieEnabled":true,"isDeviceIdEnabled":true,"template":"cooktoys2","xmpp_host":"xmpp1.iadvize.com","lock":false,"routing":{"url":"https://api.iadvize.com/conversations/routing/"},"ibbu":{"enabled":false},"targetedVisitors":{"url":"https://api.iadvize.com/engagement/targeted-visitors/"},"visio":{"enabled":true},"social":{"url":"https://api.iadvize.com/social","facebook":{"messenger":{"appId":"622842001212926"}}},"engagement":{"url":"https://api.iadvize.com/engagement","gdprConsent":{"enabled":false},"prefetchBot":{"timeout":3000}},"

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74998
Entropy (8bit):	5.322679158854271
Encrypted:	false
SSDEEP:	1536:8o+VvaCSHBmxVWuooMA53YmOnxqgqot3cLSDyfKTIcG5iE3LGOhn/SNlFEMDw:8bxVWuooYmjodLG1GQ2FEMs
MD5:	43AB36621975858DAE69FDA3F64416AF
SHA1:	0234F504A6D8EF927298D6DCAF01AB1B1DB2EA19
SHA-256:	C01BF65F918D14AB3795DE05F37DB16CE8350FA251607F28A0673758C0E444D2
SHA-512:	6FC752820F26AF31D6A9F1064CA966C1611055D6E604B57A33F8AAF53EA28259DC5EAA25F99D2239C6323EAC45F21C56C15BDE5F4A31904D5127299923408B90
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/targeting.chunk.js
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["targeting"],{66963:(e,t,n)=>{var i=n(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=i(n(24982)),r=n(36167),o=i(n(46856)),l=i(n(86786));t.default=(e,t,n)=>{const i=(0,r.getEventManager)();i.on("targeting.bundle.initialized",(()=>{(0,o.default)(e,t,n)})),(0,a.default)((()=>{(0,l.default)(),i.emit("targeting.bundle.initialized")}))()}},86786:(e,t,n)=>{var i=n(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=n(36167),r=i(n(39556)),o=i(n(66985)),l=i(n(6298)),s=n(27642);t.default=()=>{const e=(0,a.getIdz)();(0,s.startPerformanceMeasure)(s.PerformanceMarks.TARGETING_LOAD),(0,r.default)(window,e),e.Store=l.default,e.JSONStore=(0,o.default)()}},36350:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(21970);function a(e){return(0,i.isSupported)()&&e.video.available}const r={chat:e=>e.chat.available,ca

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	7499
Entropy (8bit):	7.786888076412419
Encrypted:	false
SSDEEP:	192:SF9ZfgEC23reG6zgjzr8ZAnR0pxOP6WhPzsFCBuhs6jk:SFbfggyG6zgjz7ni3WpgEYs6w
MD5:	8BF7653599A13B3C740E16EC363FAFC4
SHA1:	A4B61EB5217A6243ED94B1CF8725C314FA42F945
SHA-256:	C170D3C26F43D032EBDA62EA4785FA2B0D5BCDFC2CB926E9223AEB9149ADACF5
SHA-512:	B7CD63DF322D8965FE0BEE8731ADB8DD90AC653036F95D6642FC6C0C3D9561122B8694B8DD4705F2C280866EF8569F953A3B03AAB77C9E21BBAB1B9E9F0EA55B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................B.......................!.1.AQa."q.2....B...#3Rr...$b....D4CST.................................2.......................!1.AQaq.."2..C..B....Rb..............?..SJR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R....(.)J.JR.R..].L..Z...0...PzO.=.Rs.*..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=5503034&time=1729844241241&url=https%3A%2F%2Fwww.retif.eu%2F&tm=gtmv2
Preview:	{}

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	4.099277144642351
Encrypted:	false
SSDEEP:	3:PouV7uJzhquHbfsGsvziAEtvBL//+ac4NGL:hxuJzhqI4GsbiAEdB6X4QL
MD5:	38227EA31F26CDC0269DA468A2F6CA6D
SHA1:	131E3EF364E2C24812508E7A81C9CB8422AA775D
SHA-256:	0A7C567B36A7BFB198D6F6FBB8B26C0C1FBC557CD4F0FD696835974EDD036F0A
SHA-512:	BA05B3EF2B78DA11134E1FDBADAA1113E11A9DF7148970B8B31A1264CC2A433686D96EF9D00C66AFF4BDAB37052AF3C246C659E4610A2D67FCF7EF106A771303
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/empty.html
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <title></title>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	33903
Entropy (8bit):	7.964185395034682
Encrypted:	false
SSDEEP:	768:SFpXunyIfHgONPm21vjQ42So/Nlmvi26rXq9695LV0IxTF:SFpXuyIf51v+Somvi26rfmIxR
MD5:	95F82548097899966292E071478024E5
SHA1:	AB2C500F58D0F4EBED7661BBA1FA2C6763657633
SHA-256:	AEC133EDA04FDDC3B6F013363C21B57F9C8246523E5D5BF8973BABCBD7D532BA
SHA-512:	0D226682A8970B1BF90D17C9095A3B4CF753D09418F3474501BEC1D8799B5AB94BFF64451F663333B23B00C601A0631378C651EF7D252B3EA693CD17B076E191
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................A.......................!..1AQ.."aq2..#3B.R...b$Cr..4..%Sc...5T.................................3........................!1A"Q..2aq.#.BR..3...$br.............?...'.=.x.a.S.;.....U.@.(,H.3.\|O.@A..]<.*..c.d..h.F..d.Xf.G....T.G2.O0.jgP...t.h..P...G

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1428
Entropy (8bit):	7.849980194308151
Encrypted:	false
SSDEEP:	24:wlWrEI1loQDlifSv59UFkUjtaFUCLTaBZWPXMu/9qKKCcqYMILsdDzxUnmDfx/8:QZQv5aFhFiCsf/9qKVYMI8fxsCfZ8
MD5:	3EDC47FC4E3688428E63EE3D4B6EAECF
SHA1:	B2804F8038136B73B72FA2CF29762A17AC14B7D6
SHA-256:	2D3B1CAFD903745699B9A84F742A28A6AF78C6CEDD95B11625E9CAD3AFBCC037
SHA-512:	FCE35D9D6DCD879F9F51BD76F3CA22795B55288748F6006408638B934C7B4F2502926A40459955D7B5D519E793959A52A87AEB5F46153FDD59E9001E03160286
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/0/502809_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....+.......>m6.G.#$.'..P...in.F.Tg.O./Rw..'...#.f.......}...'..]z`.../.&l........1.E...Q.......j%8.G}.@n.c...h.{11.o... }m.k;.A.{......2Z.F..1H..o...}....'.....y$.lJ..M2......R.].LS..p.NP.i..M.)R....H.V.U`..!...z..f.....09n.j...3.;.\|.[..j.J.............c6..#.^...#....1.5..L.`R.[..+:.l....dN..3.xy,..... ........g.3<;EBF4....-q.Z.8.....>V.@!C4.....~9...It..<}[1....n.7..)H....d...J....."p7P.'XI..<....h._W..$.o../.!'....iT..~.(.7...XQRs@)m`Ff........e..,.@.H.O.9:...3(...)s..N)....9c.j.g..Z.E.._.zA..(VK..P;..=-g%.U..\|yu.2...!5.Z.C..3..[.K..M.0."...}..P'.L.>..........t.N..Q.8..N(.s.xjT.FL.R...+/.....ju....FR...%=.......s.nOX....../W"...gE.6./.?k.\.#v.#.Ry.J.N....A}P.H. x....o..R.x...K....hH'RX......K.+:....Q..Np.0.,T...).z}.....+...WB\..w.3....5{.&SD..O...&1..hk....E.f.c(.\|...<3....}......=c....0..k4M)65.)_...b..GE.\|z..-.T:......^N....p..Z~..~L.....KJ..QP.{...b.>G....XF.f.x...&....`....rX..@#ld...f....+....P........ ....

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12571)
Category:	dropped
Size (bytes):	12618
Entropy (8bit):	5.176778470438052
Encrypted:	false
SSDEEP:	384:XQ+1PqllvSGZw+pNQ7oMg3gAs/AQYoMg32VKFlQboMgMjVTY:D1QSGZw+rQkb8/AQPbzQE4W
MD5:	DF62902969C88B54DA3A4184B89C5D8A
SHA1:	CAD7EBBB6479810A7184437855C86015D409D5C1
SHA-256:	042379814D26183D7B0AF90C206337949BFCB44D513A5384E7487F26A19F6047
SHA-512:	5D69E91E0A2E27860E85B8C0FF6159D4A93DC509FCDEEB92C1658B1F38E4FAF9C2649DC1A173F7AC7765C2185248D638722D94D474C9A5F239E1D65B20A88469
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["dataPipeline"],{4551:(e,t,n)=>{n.r(t),n.d(t,{default:()=>E});var i=n(36167),o=function(e){var t;return"templated_notification"===e.type?"FIXED"===e.parameters.type?[null===(t=e.parameters.button.channel)\|\|void 0===t?void 0:t.toLowerCase()]:e.parameters.buttons.map((function(e){var t;return null===(t=e.channel)\|\|void 0===t?void 0:t.toLowerCase()})):["tag"]};const r=function(e,t){var n=function(e,n,i,r){var a;t({event:e,properties:{notificationId:"".concat(n.id),notificationType:n.type,notificationChannels:o(n),engagementRuleId:"".concat(i),notificationTemplateId:null===(a=null==n?void 0:n.notification)\|\|void 0===a?void 0:a.id,cause:r}})};e.on("notification.displayed",(function(e){var t=e.action,i=e.ruleId;n("engagement.notification.displayed",t,i)})),e.on("notification.clicked",(function(e){var t=e.action,i=e.ruleId;n("engagement.notification.clicked",t,i)})),e.on("notifica

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3512)
Category:	downloaded
Size (bytes):	3560
Entropy (8bit):	5.345104003067578
Encrypted:	false
SSDEEP:	48:iKeL0baF3x5s/hu5F5HfTdTDVGbg+uUuS/+qqCzs5HiBjlnoVGmyjFoAq1wuigHY:3ab5HbS2qqrCBjWcmKlq174j1xV
MD5:	BFDF69FF20EFB35155FF8D49A5A5B71A
SHA1:	12962BA266551DDDB4B00887FEAC05CDD7A72A68
SHA-256:	C6A17D737FD67D2B58A99037A7E5DC95F47DBBE0668FB7B4338295931DFB4D1B
SHA-512:	E75861CB14FCBBC56060B8FEFBF66F66EE552FF2B5142207FB9E1C8C083CCE9BFEBEDE58DD38A2ACE9951F1F4651D16B0DEC2E3D0F1D9203A915A72EE4AEC813
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/debugLauncher.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["debugLauncher"],{24982:(e,n,t)=>{t.r(n),t.d(n,{default:()=>o});var r=function(e,n){var t="function"==typeof Symbol&&e[Symbol.iterator];if(!t)return e;var r,i,o=t.call(e),a=[];try{for(;(void 0===n\|\|n-- >0)&&!(r=o.next()).done;)a.push(r.value)}catch(e){i={error:e}}finally{try{r&&!r.done&&(t=o.return)&&t.call(o)}finally{if(i)throw i.error}}return a},i=function(e,n,t){if(t\|\|2===arguments.length)for(var r,i=0,o=n.length;i<o;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return e.concat(r\|\|Array.prototype.slice.call(n))};const o=function(e){return function(){for(var n=[],t=0;t<arguments.length;t++)n[t]=arguments[t];return setTimeout((function(){return e.apply(void 0,i([],r(n),!1))}),0)}}},77219:(e,n,t)=>{t.r(n),t.d(n,{default:()=>s});var r,i,o=t(43663),a=t(64785),c=t(21268),u=t(84474),l=t(62345),d=t(18677),f=t(96751),g=function(e,n,t,r){return new(t\|\|(t=Pro

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	47506
Entropy (8bit):	7.996008692705797
Encrypted:	true
SSDEEP:	768:Ha7FT4CnZ46s42fHOK2v/WC4ktrZQdSE7SnW4ivb/9oOwH65ZYmgAiZ3EJc9:HUNZ46s42m3QdSE7SnW4Qb/9oD65ZYX
MD5:	86C825F4D4C6E30CBA921548EF809553
SHA1:	E587BF857DDF339B3849A4FB03EF9B197716EDD3
SHA-256:	F8B26434F5AF1956EAE83371DC919E1C3EED9ED4D0F543AC25D081BA38E71CBC
SHA-512:	98C21F44E7EE6F72A9893EB4691BF49F5124DE0E4CB70FA32FA730B3E22FAAFB768B1120E778597882B12D3BB91C4B0C4A4D263C6E07A3F8DDDB4BC1254ADFCB
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/nouvelles-collections-2024_2_1.jpg
Preview:	RIFF....WEBPVP8 ~....D.......>m..F."...X{....el..X...a..`^.3.kA..K..Os..._......o.\|...^.-_../.......~o.^...zOzT......O.oH.K.Zo.>.^s~.......c........_.}.....^..>...?.>....................U.....=.=......_............x.......O........{..._..x/.?............_................?........?.?...?QEIX.i.9Zz.w.......n.z.......B:L..].A.+9.....1S...QK..O....y..\...-..k...G.....)9L./Xe.-W.j...{.G...=...ly.y'..`...@By.."........H..9.t>.>.....-...=8.{,V.,..e...i..0k..#aGA...>.>G..t$.O...t)z..v..\|.._.........n..uq...h......=\wMh.+.\...u.I......W..I.w.I.PZ?...& ......1.u.%e.z)H.j.\|&O.dh##..K..G..5.}.~........sn.....t...u+$..Q....e...)...Q...%X..b."...L!wR.s........A.IW14.:n....f.].c..I85q....(.18...........Y6.\...t.....]....!.mE>xW.....Fn[1z&H...;.Y....."...[lO.`5f.u...$.H.{pr.....OJ...t....K....kfp.^V.{s%..L.P...F..If.w.A`F.S!t..~lV.H.g......Z.'.wOP.w7..w....R..g]iu..nX\<.0F.}..].Q..C-m...[.0..4/....3.x....FA4...}e..2..Y..%.....h............\|0.@..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3041
Entropy (8bit):	6.931459271241775
Encrypted:	false
SSDEEP:	48:/llXiFZJuQrc0+gZ7TA36eilfDdOqeSj3PmMntY46bmLtjwIBXb:/6FCQrcT3tWZeemEt76Et8AL
MD5:	37701827C6F4A5387DEEA3EDC4209F8A
SHA1:	4304B9E0EDABE17410E6CAF6FA3BB31F991F040B
SHA-256:	79F1956B53ECDAB564789D2139EBBB75F02494304BC8243534FF96B8878F09F4
SHA-512:	37621BDF0428B43D9953D98FC826F395196BD9ED19C0B96D2411FB5A6D16B5BFA0FE517304FD682DE442FF22B91D4434751868F0A1D65E5CB4D7269A70938989
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................7.........................!1A"Qaq..23r......#Rb..BCS.................................0.......................!1AQ.."2aq......#.3Rr..............?..A...)...F@...........#r...7 .H .H .....0q=....=Z...........................A .....`.............A ..

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109218
Entropy (8bit):	7.9772614610024934
Encrypted:	false
SSDEEP:	3072:JIy+2a8gu0OI4uA5QFvE5gISoCqEy9p7OQg/h8ab2x2G:JIyu8guDI4uA+E5gISkn90Qg//b2x2G
MD5:	622A2D09AD65CB90ED958BCD2C41C014
SHA1:	4A6CBFE13CE0C7ACD39DBE57D43025410D0C0835
SHA-256:	70617C04BB647C82323FAEE1D2D637F0ABC2C2171DAAE4D136EA6EA0B80D02CA
SHA-512:	2651D2AEFD888B3D1FD1EBC046315BB7EF20A2246F83BE756DECCE2D3B569D884293FF5F3E70455BC4E1134DF6C7BD2E86E06767C9F86C2B55BE799C4880C1BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx...w.e.]......Tu+u.n.d.J..-..c.M...3C.a..X..0.....C...!..k.g../...e..l.V.BK.-u...\|s8.....s....[.Z...<.Tw.n.[...y..... .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. .. ..KA....C..C....`...M.1.si.Q.~6._.N.~..X@....6.....>....N?6.........~....0..re.G.e....A`.X$../..,.p....\.~......s..y\|oAx....rq..i.q...1.....8.....~~.......NW..D...j........,X\...,.<.\|...xr_G$.;.@... .8p.................x.l.#.B....D.yE..x....@~...7.>...\|.l.+..../.@... ...u.7.o'..^<[...".*.Mu.......r....x..f@...b.d.\.........^.".<..@^......s.Mpy..#..).......X...... .@.....Y..6.....r.....;..@k..#<.".<..@^.d.-....$+..^.B....E.....p./G..g ..Um.x...d...g.,...._r.......r.Q.w....q.w....er..Y6..3......D..j.....-Y...k..M.`.......D..wG......~C.......2Y..a.....D..7.....n.2..OK.R...Y...%v....r)..l.....B.....n4.'.t....G./"..r...$.i.6#..\...5.I.f..+

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2558
Entropy (8bit):	7.926547949633931
Encrypted:	false
SSDEEP:	48:++k3rAX13ZvQJwDfw6xiZUjQpXKfLxFJCpWwtDXriPOcZpjoa9USaCo:++bF3ZmWf7iJ+LwpWwx7/mphhf
MD5:	A8F11B59F0C63E7A29FF6E2A6994B2CD
SHA1:	F4094681539421F123269EF32ED0D8EB694988EC
SHA-256:	77A4C4908892F28193E0CF01B8A2A8389F712CD3C217F02F69F9F2D9642AAD7C
SHA-512:	5F9FE94BB45B81E2A9BF104D670A8234FD679B63006451C26489AE6C330B65DB789294A34BFC647739A60BF4B8C6648EEA6AB00273557B2A743AB028E701B302
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/602960_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 .....>.......>m2.G.%.!(.....i3n.4NJ.r;..G.;...>.t..y....g...R.........3:C..e.......).......t....^M) ..vLC...(R. y..~ .../h.`B..Im....).A....{.s..y...)....h#.j.,.X....v.T..^...p.X...+.....`..f/Inr.(..?2....+....+(.....K..4.3.UdO.5.jB.Ep..C.OP../.c.q3..:.4..(m...'.Y.QJ..!../..%.6...M.rw.,..E.:.....{FO...z;[.W..8..e-h..3...L..,.....M..:.F^.>.V...\....6.:.C..LO..z...`....9z..H.p..Llz.3k.G.4)....?.=...Z..k.t......Dr(n>....;mf).....n;.A......q....+....k.....3 ..(...K..%...h..7T..."............~p........M....H.{.5)...D. Z...t.1..TL.]..b.......4....$.%".8@..%F.8...9..\|......\|Yf...a...b.TQ..2......TL....WzCw.....8.....9..4..!.S.7H...=..n...........V.....#)Qm..o......I.....f....#...\|g...f..0.?..I.........+...}g.b N.....,..:.......F...o....\|5.MX...w.!D....e...e?%.).l.W...........\.Rm..[..1[.o.\G$DvN.........R.^/`..$Y.a.........I..*......l..?...{. J..B..Y+..aE..kz.t...0....P...vF..(.K..%.C.....T#...THr...........l)dG

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844231789&gcs=G111&gcd=13t3t3t3t5l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=EA&sst.rnd=831444307.1729844233&sst.tft=1729844231789&sst.ude=0&_s=3&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=1&dr=https%3A%2F%2Fwww.retif.eu%2F&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.business_category=0&ep.content_group=home&ep.site_metier=0&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=4326&tfd=13136&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 490x490, components 3
Category:	dropped
Size (bytes):	63006
Entropy (8bit):	7.97676394639318
Encrypted:	false
SSDEEP:	1536:SFL0g9SHeXtTWbEf7dht0M3YALKWJvDRwFU1KEqT4/x:YcepWbC/3YFi7RwF7T4/x
MD5:	53A55EEFBCD937B1329660A8C37E6874
SHA1:	E8FC6E06930810933D79D850E733E7B65F1973A3
SHA-256:	9A3939C34C214D9F7EF79CDC5D8214E2E5A947DD93403FF59319578F041E86A1
SHA-512:	F7D372388203DD639A237466911703D70FD45C6CAA154FFFE2C9E30B176C39A7BEA85466442341C3B3CA758582516E7AED964D9E85122E7116559AE2EA7D967A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................U........................!..1."AQ..2aq..#B...3Rbr.Cs....$4Sc...%5Tt....Dd.....&6E....................................@......................!..1AQaq.."2........#3BRbr4C...s....$SD.............?...tYm......&..5.c`.x......ec...>L:...v..x~...l>c..

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	115589
Entropy (8bit):	5.261830337124287
Encrypted:	false
SSDEEP:	1536:kZAdJRIpdLC9WKj2sVAboxDqNQyQLXKML36QDmN4uO9CF3vdCe:kUJRwLKdq2fT13fDm3v7
MD5:	A5DA0D8701DF2C5C42900DD4D2EA33C9
SHA1:	DC27DA0133AD4985BF59EF80260C31E855691F44
SHA-256:	612D5A6B58F15D1F9FBA7FCC227B432FE9E5575998208FA13010C4B94C410C35
SHA-512:	0439D04AAB3AC3DDE364DB80DBEC9D8D2B4EEA26547020CCD86E4008D978D8F9D979B5EA4838DFCE9DB5AC49B2212FEE4B5326FCA84705FB4CA337DABA935315
Malicious:	false
Reputation:	low
Preview:	/! For license information please see nr-spa-1.269.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.269.0.PROD"]=self["webpackChunk:NRBA-1.269.0.PROD"]\|\|[]).push([[478],{7699:(e,t,i)=>{i.d(t,{I:()=>r,N:()=>s});const s=64e3,r=1e6},2123:(e,t,i)=>{function s(e){return!!e&&e.self!==e.top}i.d(t,{v:()=>s})},1140:(e,t,i)=>{i.d(t,{n:()=>u});var s=i(9422),r=i(4777),n=i(4624),a=i(3878),o=i(6154),c=i(2843);if(o.bv){o.gm.cleanupTasks=[];const e=o.gm.close;o.gm.close=()=>{for(let e of o.gm.cleanupTasks)e();e()}}var h=i(2614);class u extends r.J{constructor(e,t,i){var s;super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),s=this.unload.bind(this),o.RI?((0,c.u)(s,!0),(0,a.sp)("pagehide",s)):o.bv&&o.gm.cleanupTasks.push(s),this.sharedContext?.ee.on(h.tS.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({un

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	31682
Entropy (8bit):	4.786589299682425
Encrypted:	false
SSDEEP:	384:lH+KgkhYlJEkw+yVxcNcH2aripWDhCgbA2f49zIemzKo/nRsQHlmqE+m9Hzdf2DM:cFq3sfaWKnHQ9GzKAy+mb+o
MD5:	610583D8B8FF06E8E885B6F667FB3525
SHA1:	9A910238D07DD0E9D4BFD753A5E8A856150534FF
SHA-256:	BCDAAE444F3B3B71AFAA16059580256D6110BD4391354751E23494737E78A322
SHA-512:	068838B231F1A61F5A74498AA542AE1ACE5C35D1D75648B3D07DFAA249C366B9ED362970C2FF57A8DAB7C0E8992071F1E8F33FB5746DB928B93CA9795C5036FD
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/translations/livechat/0.1.663/en.json
Preview:	{. "APPELEZ_MOI": "Call me back",. "AUCUN_OPERATEUR_DISPONIBLE": "All our customer support agents are currently unavailable. Please try again later.",. "BONJOUR_NOTRE_SERVICE_CLIENT_EST_ACTUELLEMENT_FERME": "Hello! Our online service is currently unavailable. Please try again in a few minutes.",. "COBROWSING_ACCEPT": "You have agreed to share your browser window.",. "COBROWSING_ASK": "I'd like to help you use this website by accessing the page you are browsing.",. "COBROWSING_REFUSE": "You have declined the request to share your browser window.",. "COBROWSING_STOP": "I've returned the navigation control back to you.",. "CONNECTION_ERREUR": "Oops! A connection error has occurred. Please refresh this page to reconnect.",. "EMAILING_DISCUSSION_CORRECTEMENT_ENVOYE": "The e-mail has been sent successfully.",. "EMAILING_DISCUSSION_ERREUR": "An error occurred when sending your email!",. "FIN_DISCUSSION_SHORT": "End of the chat. You can find our chat history at

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3476
Entropy (8bit):	7.48788311817213
Encrypted:	false
SSDEEP:	48:/llXiF/LD8sPXevIBi2uOCI1A24pNgJz8C3Sy3TQ62NPqBfCFLz40cUN2+yFWcq:/6F/L4yXni6A24qzp3zQwCFLzHNw4j
MD5:	9F9A5F5AD11965797D56C0E2B6AB9FCE
SHA1:	C4D3AE9AFF3A2E1C7A1B8005C97F102F40CAD022
SHA-256:	E782839E00F3C0F484630F0A5DDFDD79ADBBF41D5555A84F5B8C6FCFD422AD16
SHA-512:	4EF0244FE36D95974E525AEC0AD0947884D811F2A5A7743F00C4DE6A01F68128BF623B94D48B3D243697416E7538DEB45EE0298A2385F657B5704537F0120092
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................C..........................!1AQaq..2..."BRr....3b....#...$ESct.......................................................!1QaA............?..X.....x.....#..@1........`.....................b..H..........`.`2.<....<..8......x%..8.A..`0O....`...`X& +..h.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://tapestry.tapad.com/tapestry/1?ta_partner_id=2052&ta_partner_did=k-ILSPcminzjvINIfCWPvjpcHWrNFd8l64069bPA&ta_format=png
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3011
Entropy (8bit):	7.132768974225343
Encrypted:	false
SSDEEP:	48:/llXiFmC1m4L2SyXEXydDY1HKPnPW9jjgGH10neF2PuU:/6FNQBS7CdDGq/uFjgu0W2mU
MD5:	A29FD57DE64BA6C535480AC906F96C2B
SHA1:	577153F82081C4A6594E951A01A68651DF0ADD97
SHA-256:	FC5F9FAC9F541AED600DA043510E0BC0972A0E2EA24B89689A7020C31D789E67
SHA-512:	ABA723D2796DB7A1963E92499F8744BD400DCAF99856AAAA3A0CA05297B4BBC2400C30ECA9A6CA1881D4C08CAC2690AA2BCF8FD492CD5E1DC760FA124DC69926
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................;........................!..1AQ..aq."2....#B..&3Dd.....RTc..............................*.......................A.!#1Qq.23Br...b.............?...................................g8....Q.m.. ......V.6...i.....s.N^RG;tO.?).4.X1%.` ...Zvi....N..M

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63090
Entropy (8bit):	5.40501972020531
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpomBYifvQpWWz1j18n6XrHoQqhF:s/0Rz1j18nMrSF
MD5:	304AB564B27B510FF3ED71DED9FCAA4F
SHA1:	6452B28808FCDA00EE96E18F642348263011769D
SHA-256:	777B4B4A083FE36AFCA14EDFA9DE06DB28DACFE106659598D9C88F576428E2D1
SHA-512:	F676B02BBAF7F117D40191430B30ACE4F3EE8446E4FBF2DF1B2FFFAAF6BAB0EDCA3F0A90D0D6D2D06D3CA6B2847582AC32D90E232AB95713AB43E2998DD69300
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2422), with CRLF line terminators
Category:	downloaded
Size (bytes):	6263
Entropy (8bit):	5.624463516883329
Encrypted:	false
SSDEEP:	96:5iUEZexcBMKtxQ5OJKumtIasDaIXAw2SqXmqcNrxF3Ord:5iU0S83mWasPXCSqXmqcNDOB
MD5:	B0010F3BD3A7405B1591224F182242CC
SHA1:	6E4AF6522F076A89377C65B9A74303CA8885EF5A
SHA-256:	A87112F7B9CE87735B391B4062F3BFB83FD0A242C4CFB786A2ABD50672022E01
SHA-512:	220AE49A402C785C6830120B4B5D47D98F7B163819914AF3709F5F79AC348D6DC4C928012620A51620D0A6EDE4614CC23F9B0811A5A77FDCEEC627C6C45B7313
Malicious:	false
Reputation:	low
URL:	https://fledge.eu.criteo.com/interest-group?data=MMf3iXxqeFB5d0hqeTNMb1BVZHZKT1pTaTJQb0d1cUZkbjZvMlNPWG1RbkpHWGlvenpiRmJLblNYRVVBODBWUVFNNGZIU0hrR2kzTWdsOE0rWlJDemhGUDBxWHJKVXBFN1d0eEZOMHB1Mm5Wd3pGWT18
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <title>Fledge IFrame</title>..</head>..<body>....<script>.. function getBswIg(src) {.. const elt = document.createElement("iframe");.. elt.allow = "join-ad-interest-group";.. elt.width = "0";.. elt.height = "0";.. elt.style.display = "none";.. elt.title = "BSW IG";.. elt.src = src;.... document.body.appendChild(elt);.. }.... if (!navigator.joinAdInterestGroup) {.. console.log("No fledge for you!");.. } else {.. var igs =[{"owner":"https://fledge.eu.criteo.com","name":"nyYiw3xMQkd4T2ViQ1dkSFNGejgvb3VZdlhnPT18","lifetimeMs":2592000000,"priorityVector":{"browserSignals.ageInMinutes":-1,"browserSignals.one":86400},"biddingLogicURL":"https://fledge.eu.criteo.com/simplebid?platform=eu","biddingWasmHelperURL":"https://fledge.eu.criteo.com/criteo.wasm","trustedBiddingSignalsURL":"https://fledge.eu.criteo.com/getvalues","trustedBiddingSignalsKeys":["MvPyqHwxelJVbHcyOG

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	7.769090373501282
Encrypted:	false
SSDEEP:	24:O8BTDP1MNHqzP2y9D/Cud3ZBRKQg7pfJJRz8JXoLDaRsMIk:bBvMHqDUudJB7gzJRwXLsfk
MD5:	88E6C944BC0240E1579D8C45A4B2943C
SHA1:	0928DFB99ABF8A1A4907A9915818AB63C1F960EC
SHA-256:	741489E3DA8ACBF8B82BD561E8CF41FC0DBBB6232EB40C60527E63939CE94123
SHA-512:	7443CB60BCA66B0C183DC194A4A56C9E033D8E8820C7C9DC3D0286A9EE78513C54E8838F909FBE6C37153D329E351A2B8E0FF1B7D4F3B56B3B623B24D043688C
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/5/6/56888_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFFh...WEBPVP8 \............>m6.H$#..%.....in.....i..).... ./N.4`N..O]..:..Y.X....#.E8....D....U.l.6.Xq..[.E.......?.{g 8O?...I...y..x.......[P.f`.t^l.,.:....S.R\..4..\|9...^.}@G:.6J...p.:@pr..u&.(...i.vR{...>T..k..?.R..3...aj4.%....n.....X.....5n#..CCT.....Lt....!..Z...>.....e...sG.........@..0I.l.......J;.K.@.G`.P..........v.h.f..."......q.}.. R.'MT-..J.............X.=.{......(....3.V......RP..!i.....5.u1...G&...a....Qu...l.,.8'1........B....cIm1.R>......J....<.TV..'............m...T.N..g:.......N.4.i.5>..V..\......dK..F...I..U.k...k.k...0.IX.7_..i[..........Ov....Q.P.....4......H..."R....}.A..)!.Tc..h..O.I..^..e.....T+..{.b....[..bm..A....z.}.Si......!....D..s...\|-......#{..-.[...\|.}&(.K:L.u..f......o......U<>^.......$e...Yz...E...?.J.@u...Y.....G..;.f...l.;...nJ^.;/.}A..n....U.....U.)...i..Z...U....!..!.1..l.Y..9.k'..J.k.u...

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31682
Entropy (8bit):	4.786589299682425
Encrypted:	false
SSDEEP:	384:lH+KgkhYlJEkw+yVxcNcH2aripWDhCgbA2f49zIemzKo/nRsQHlmqE+m9Hzdf2DM:cFq3sfaWKnHQ9GzKAy+mb+o
MD5:	610583D8B8FF06E8E885B6F667FB3525
SHA1:	9A910238D07DD0E9D4BFD753A5E8A856150534FF
SHA-256:	BCDAAE444F3B3B71AFAA16059580256D6110BD4391354751E23494737E78A322
SHA-512:	068838B231F1A61F5A74498AA542AE1ACE5C35D1D75648B3D07DFAA249C366B9ED362970C2FF57A8DAB7C0E8992071F1E8F33FB5746DB928B93CA9795C5036FD
Malicious:	false
Reputation:	low
Preview:	{. "APPELEZ_MOI": "Call me back",. "AUCUN_OPERATEUR_DISPONIBLE": "All our customer support agents are currently unavailable. Please try again later.",. "BONJOUR_NOTRE_SERVICE_CLIENT_EST_ACTUELLEMENT_FERME": "Hello! Our online service is currently unavailable. Please try again in a few minutes.",. "COBROWSING_ACCEPT": "You have agreed to share your browser window.",. "COBROWSING_ASK": "I'd like to help you use this website by accessing the page you are browsing.",. "COBROWSING_REFUSE": "You have declined the request to share your browser window.",. "COBROWSING_STOP": "I've returned the navigation control back to you.",. "CONNECTION_ERREUR": "Oops! A connection error has occurred. Please refresh this page to reconnect.",. "EMAILING_DISCUSSION_CORRECTEMENT_ENVOYE": "The e-mail has been sent successfully.",. "EMAILING_DISCUSSION_ERREUR": "An error occurred when sending your email!",. "FIN_DISCUSSION_SHORT": "End of the chat. You can find our chat history at

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.995657630042181
Encrypted:	true
SSDEEP:	24576:2mG56EEV5g37asOIZuzQTeFLdoKHYlfhBYNOhmYQb0GoL:ZGzEVIasnrEZoKHYlJqNqmgGQ
MD5:	86F512FD275E7D74A92066FC74A597F0
SHA1:	A65E58EDA2EA600CAD79B18743154EFA526C26E2
SHA-256:	DABC6A6234AB93693CA4D133F611A5C1EF9F4EF26334BF0FE5B3266153A1EB6E
SHA-512:	AC7C04A86CA20F3574A1A90493AF9D4FF646322262B4D9FD8F7C92D9D0363CDFC5A4F15803BE52B808B1132B1CFC9E7F794A9C6DFC478EE02CCE57475D783FCD
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/VIDEO_MORPHING_LOGO_FRANCE_compressee-1.mp4:2f83df04dadbc4:0
Preview:	... ftypisom....isomiso2avc1mp41....free..C.mdat..........E...H..,. .#..x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=18 lookahead_threads=3 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=1 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=30 rc=2pass mbtree=1 bitrate=397 ratetol=1.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 cplxblur=20.0 qblur=0.5 ip_ratio=1.40 aq=1:1.00......e...'......So......&_Cu%.....:..............J.....@.....x.?.............}.%@........................................................................C.....A.!lB...X.......80....=D........Th!b..iU.'!."&..Z.7X.....

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 988x482, components 3
Category:	dropped
Size (bytes):	97203
Entropy (8bit):	7.974159040881402
Encrypted:	false
SSDEEP:	1536:SFA7+GvydPdKrIEdRq8Ls0lWnkZ7qHUIYyCxu3auOLRyTCAA/+cwLnwbzj9lfOJe:77rvyd1fEd82s0lWkZ7qBC8quOLRj3+8
MD5:	AAD031E8393E8E82B9A1DECC64AEB18A
SHA1:	2E5BC766A9CF7E1AB88A20ACFC1DB9D401D0E2B6
SHA-256:	786C44DCBBD359CCA97E99886708A3149AA9CFE659DBC9CAD1EE536D7314EAFE
SHA-512:	0C735AD8EA1CA88F55E729346B5AF72333F089C0EA196DECCD0E699D49BA0C98F97534AA97E3BD2995FD309F88EC8773426E8AE90C89EBD700F9EBD5F56CCE65
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................Y.........................!1A.."Qaq..2....#BR..$3br.......%456Scdt...&CDs....Te....EUVu.................................A......................!..1AQaq."....2R..3Br....#4bsC...$S..c...............?....<.<.l......3V&.E.(.I.(..P.T.G...EC...4!.%..

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	17836
Entropy (8bit):	7.971567039121817
Encrypted:	false
SSDEEP:	384:TCwjCk+iqZBMno32YIFXBY2BAv8yH2BcqoITlIZmijhVtUdb:TbJGp32lFXPal4voITmZ5jhVUb
MD5:	572AB747A2D50E90547D5C4CB235B021
SHA1:	C33746EE6806817EDC483A71362EC1C137C152F0
SHA-256:	DC197030783422B58A11D9B55F89E1A1E8983F0BF8291164337DD0070D9385EB
SHA-512:	AB6181CF582ED9300F475933D5D9A0A13709856AA9FB2F5A55C3E8AE69E769651F5573A35EECC6A747B1B8CD94B4DE79A201107D4E45885446A68B30649D64E0
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/mannequins.png
Preview:	RIFF.E..WEBPVP8L.E../..c.M@r.H..;....................\..Hk1..j.% ........B<.....{...m..x..*.-d..I..@.X.H]..0...D.6.^...U2...^.(.g..l........N....%h..B....W!Uq.....8`.E.lK.[.A.$...Z..v.I...4I.$.q...n$`...E,.&..-An..s).2?3...4.C...u.6ir.....@.W........^A.........%..tH....G..O.?l..UU..H>.......d.t.;...`..9.~..9.~...l...A?/..^..$I.........5c.y 3i$IPI....+:...)..H...%..........H. ...]......Q...1.FFQ.....$.....D.....{3...H.....p.@.B....!i.A..".$..@.. ".d..s.b.....D..#... .. ..#..""....A~.H'..@.I..Q.2 J0..1.'...f ...D.T.D ..,..D .$...]+.3e.49...D$..@..1F0.........#..2...._,..H......6.$K..u.....5"& ..Q..%.K..@..v.h...@...2\......3.I... )..4 .+@..lU...7" ....nq$/.i...8G........E)Q.Z.H.J..E....>5.....1....P@..P)...A.2H.$..n.Ib..W..Ti.m.@.l.p..4........O......7...<.......}.6W.....g...Z...m.".....}.k.`...b........:..m.."v&.5U..Am...v0G..k[.8...ntT.+..m.F.....i..o.L...e#ug.m...?.m.m...m.zf..hz.o.$...,..affff.Y.a........U03..{.....Y...j..rz.3.Z9u

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=434&userId=k-D0N-a2inzjvINIfCWPvjpcHWrNG47pAaO1WMbQ
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 694x740, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	25218
Entropy (8bit):	7.989971181231776
Encrypted:	false
SSDEEP:	768:DnPGdinJ+AFSpkRBcV3hIzBoJ42VnVb519:regnJLAVRcBAd19
MD5:	B265D0A0DF3AEE21A8559FFD93515A9E
SHA1:	A6DB2D60F10A9713D6BF279B44731717DEE1C15A
SHA-256:	31C184E1A37EE2DC3F8E23F5D03971A8F57CF69CFD609290D3BD4EBC3150601B
SHA-512:	B6A39DC378E3D6059EB14A04B3C098FA29E4D67979707E0E6DF12666428BF71F1B7E76ECF2D70DD1A43166A9218E47C0606D6AA8766ABD042C186F0A6BC0F605
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/perso-push-services.jpg
Preview:	RIFFzb..WEBPVP8 nb..0........>m4.I$"....9.P..gn.n.....r.aLCjF...K.....r......~<.o.k............c..._..B?...z.......?.~...t.....a.......G.....>....................`.......~.x..K._.]$"..o....!..._...?!..b.....?J.....o..........?p/.c...%.w.'.......}.?..[.....o.?.?......s......l/...?r.........~L]."._..7.Ejm./rt..:.@.....-..p.+.>....p..:..m4.%..w..ssb._..7.@.......\wcQ...=z...3S.z.!=.{.......0pd..b...F...\|.......l....Uc.>..4.tS.....q5..L.u`..Gw(...f...g G.F`..Anz..d.o........K=..n..=Y=i.?.....M.d..W...^.K..P>...'x..j.p.r.v..!.... ..c..._...zQR.t.y.1..~.....[+Q."........].G..^B4..h.k...~.!......q78.p^6..T...ET......h...'.C..1......ky.....I./.SxT.iy..u`.@......dGm...>.........R.9.R...<..VE.....G..D..Y.S..}3e..P...M.f.Q..%.9..{....k...`.R.9...}.Y..(T...ET.N#.UM.Q..WI..q......G...x..ul....-"P)...z-.t".g.s...oja.OR.....6..F"$.......b.EO.q...0.....$<.. .........}7.kW....~.d......~....j,..kX.0..xl......[V.;d.ib.p............H.6..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3950
Entropy (8bit):	7.32715980258371
Encrypted:	false
SSDEEP:	96:/6Fif2Wg7/PyK75ulT4GJHsHBjc4Su2E8OB:SFj/p7klUS6rq2B
MD5:	D110B63737B4E742024F2BE59AF5A8C4
SHA1:	DD06C098FAFF3626D905782F80D4D228FE5C740F
SHA-256:	8FF0A1795C38B977FC4EFB3BFE7C56A7140E612C9CF7C7AE64C804FCD64363A0
SHA-512:	6F8830367EC987659915C9E70AF9285ADDFC202A3760E5F8F71F1579F850A7E3DB34960F2279A133A06F7D34204C0DBAFCFFC65A92EE19B0AB4FAC99E5B96253
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".............................................................................@.......vY.............F.U:...E.......)...4.\..c\.q[...Mk.A..(........k.3..z....=..e1...5./ .......WM..$.g..o../.......M........8.f.......N.5..JI...........gL.....k........(/.uz...s...........r.x.Y.l5.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12571)
Category:	downloaded
Size (bytes):	12618
Entropy (8bit):	5.176778470438052
Encrypted:	false
SSDEEP:	384:XQ+1PqllvSGZw+pNQ7oMg3gAs/AQYoMg32VKFlQboMgMjVTY:D1QSGZw+rQkb8/AQPbzQE4W
MD5:	DF62902969C88B54DA3A4184B89C5D8A
SHA1:	CAD7EBBB6479810A7184437855C86015D409D5C1
SHA-256:	042379814D26183D7B0AF90C206337949BFCB44D513A5384E7487F26A19F6047
SHA-512:	5D69E91E0A2E27860E85B8C0FF6159D4A93DC509FCDEEB92C1658B1F38E4FAF9C2649DC1A173F7AC7765C2185248D638722D94D474C9A5F239E1D65B20A88469
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/dataPipeline.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["dataPipeline"],{4551:(e,t,n)=>{n.r(t),n.d(t,{default:()=>E});var i=n(36167),o=function(e){var t;return"templated_notification"===e.type?"FIXED"===e.parameters.type?[null===(t=e.parameters.button.channel)\|\|void 0===t?void 0:t.toLowerCase()]:e.parameters.buttons.map((function(e){var t;return null===(t=e.channel)\|\|void 0===t?void 0:t.toLowerCase()})):["tag"]};const r=function(e,t){var n=function(e,n,i,r){var a;t({event:e,properties:{notificationId:"".concat(n.id),notificationType:n.type,notificationChannels:o(n),engagementRuleId:"".concat(i),notificationTemplateId:null===(a=null==n?void 0:n.notification)\|\|void 0===a?void 0:a.id,cause:r}})};e.on("notification.displayed",(function(e){var t=e.action,i=e.ruleId;n("engagement.notification.displayed",t,i)})),e.on("notification.clicked",(function(e){var t=e.action,i=e.ruleId;n("engagement.notification.clicked",t,i)})),e.on("notifica

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	58030
Entropy (8bit):	7.987007287864174
Encrypted:	false
SSDEEP:	768:MSpysH7tsrSBhE36pB/T1BcFjZzQDNS8NMbAHfswYi+0aDJ3MJoHSCb2kkk/q:MSz7yuBhE3xfzONNNH0Li+7q+zs
MD5:	8A023F020A049A4EC6FAE3863ED920B4
SHA1:	FFBD8505B3D11EE83378AD841ABD9F3D69896C2C
SHA-256:	C8D18D0DEE94FF2087D51085742A41D272837C486E94DDFAB0ACB28D8DE4C9F9
SHA-512:	259F2526AF6E32BFFB1FF3421AB04F1E1D32BAECA45EE67F3F9FA7DE26EA0026E6A0821469E8B7FB4435AB2413F021620AB863437910C2B8309D817D05BB25DE
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/Etiquetage.png
Preview:	RIFF....WEBPVP8L..../..c.M.m.n.p...b6..................W5.Z.!s....jL......h.1..+...\|Gk..{..$A..>I."...6.3'Q$`FbL....z7.C......D.:Lag....v.n(..Rg.u.....?=Y.#n...M.....<.....5..m...UU.^)..;{..Xhie..l..4..WUE7p>.lr.W.KRU..F%.P/6U..\....s.!W.S.k..$_...K_9..+f.C.K.......p}.{\|.5F%,....&.#..G../.. .....0....1.]F..3..!........C..O.`.{T...u~F.].e.C.W-.>.i..W.cP.i..j........W.........?.....p.8.~..-..9.c.....Zk..........m$9.x....L.......S_I.$I...Z..i."H\|v.=f....X.A!#IR....?.......m ..+.)0.'..4...K0w p.p.^S.P.i..s........(`.x ..<u....4......A....T.*.....i.@...T . .A......... ...@!0.P...4....).yQ.d..... "..M.R.@D........J.......N...BZ....(...i................6...`.6.....-...@............4..0.../...,. .P...@..xA..g.(..9@...'......B$@.......,.b....6h...,.R!.....$..........FD..=_....A.....) .H.7E...D..(.J...,...D6.0!Y.8.0l.....hu.! .92,J+. Q.).......C..p."".U.`E>d.l.`h@.H.U....EB.......!..Pv.#. ...... ...&(q....{.).@..ENd.Y.%.H.A.8f,..Nd...,.o..h,5....d.........

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35893)
Category:	downloaded
Size (bytes):	35934
Entropy (8bit):	5.554757107758269
Encrypted:	false
SSDEEP:	768:dFbdKiiE3yKRsCtFQzCkmK92VNiF+RHWBwXEYd0k:PbdKiiE3yK3tFndHe1BWEYd0k
MD5:	D93D2CFE91F2C6997770D0DB83F438F9
SHA1:	6A39EB4542BDCE4D3A44EC19206E3DB60A11AB19
SHA-256:	1A6EBCDD575A9481A6BE18E1B64F46504239B764099E73CBDF838B2A20152FDA
SHA-512:	3602947BC993E90F984B6662528481923EE17B1B0A3AF2ADC6F1561D73DFF92FEE53982D5AABC7DE6B95F8D31A56FCEEAFEB214C67F77AA680C47A7CCB7D9194
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/orchestrator.js
Preview:	(()=>{"use strict";var e,t,n,o,i,r,a={24982:(e,t,n)=>{n.d(t,{default:()=>r});var o=function(e,t){var n="function"==typeof Symbol&&e[Symbol.iterator];if(!n)return e;var o,i,r=n.call(e),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(o=r.next()).done;)a.push(o.value)}catch(e){i={error:e}}finally{try{o&&!o.done&&(n=r.return)&&n.call(r)}finally{if(i)throw i.error}}return a},i=function(e,t,n){if(n\|\|2===arguments.length)for(var o,i=0,r=t.length;i<r;i++)!o&&i in t\|\|(o\|\|(o=Array.prototype.slice.call(t,0,i)),o[i]=t[i]);return e.concat(o\|\|Array.prototype.slice.call(t))};const r=function(e){return function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return setTimeout((function(){return e.apply(void 0,i([],o(t),!1))}),0)}}},79138:(e,t,n)=>{n.d(t,{BB:()=>l,BQ:()=>N,Dd:()=>b,FD:()=>d,FO:()=>_,IP:()=>v,JM:()=>I,JR:()=>c,LV:()=>S,OH:()=>p,OY:()=>h,Rp:()=>s,S1:()=>g,XQ:()=>T,_6:()=>a,hu:()=>C,l8:()=>E,mV:()=>A,qY:()=>f,su:()=>o,vB:()=>u,xh:()=>O});var o,i=n(72023),r=function(){return r=Object.ass

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1540), with no line terminators
Category:	dropped
Size (bytes):	1540
Entropy (8bit):	5.786592273207308
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccARals+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/k:VKEcjKo7LmvtUjPKtX7+1vQZ/rLrwUnG
MD5:	A5A583C1D93FCC44A4F97FD61C0FB5EF
SHA1:	EE6B0F4788236740C13E0D36E7B3A6F9FB8821EC
SHA-256:	F9B9837B102E00890AF92F1FF49FBEF8CCEBA71F979888BB9D41EC1D26286EFF
SHA-512:	9923CEA8CB119D1DE75DE8D9362EADDCCE9242D84384469E3E9BDD0FC60FD235C904E57CC4E7BA769C1C8986804DEEE3AC5D6EA24B2EF725BB84904B73E0D925
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcJeKUZAAAAABbAdczVQFJWD99woXujv8xvtjLA');(cfg['onload']=cfg['onload']\|\|[]).push('executeRecaptchaLoadCallbacks');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.get

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 361, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45037
Entropy (8bit):	7.9812119765997895
Encrypted:	false
SSDEEP:	768:0EPpCoxjUQ0x0lNwea+MdR9ytOGCaZurg3DtGy9AA/VUvrKd9AWNSxiyo:7YIjUjTOMFyt/CaZAgzEy9/StCSxiZ
MD5:	3A784234D35F179B641F501F6F8C95B7
SHA1:	F2D466A16CB410F8620CCEB4F3CD42E8C72E9F89
SHA-256:	AD35BAA8AA74F84B49AB10345D31FEFDE531CBACAA2C74625B613516AFD46406
SHA-512:	75710920188AB15CF3C0303C91713C53D155D7B6E782612AE09CAB628CA43E0E3802955F7EDE15359EBB161F4F54E162191E58D99B54639F8EBE173B606A2CEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...i.....&.......IDATx..].`[...ey.8.I.=H.#..lZJ..Q..2K[f.-....(.......O...2..N.8.{[....t.'E.....CU;...}w\|.;...\|D.Y t...lP8..YN..@.P......T._.......k.R......A............N?kIM.C...w.J.0...oz...jU{.V...U.Vytda.K...NTn.7...f..YN.{...A..Z.c.Py..\.J=l.p@b.S......%\|...).)H)L....%.{UJeg.N._....`.I..J.....C..,G.P@.B..t.N3,6.j..8..r..z.\..>....6.?."..H....7G..H........x.>.w./...g)....L.h.t:u...X.R....6h..V.Ba.G^.,Y.\(k.9.UC6.v.{.@..tUy.^-h..4..T...1..D...........X..^.l..uS.U....S.?3..?O.'.V.T....K....t...lq.?dw....\nw....`L.".:..3..+p....].....y...P.j.i4mi.....S..mT.l.g..X.....lw...........]K(@.....W.Z..$G.`.....^.>.w.J.F=D.......$oH3...F}..d.E.2[....Y..0.Nw..S.^...B.................).C[..t....Q.Z....V..g..X.H....o...g.}.jw,.9]S1Lj."......X....].........j.,'3......ZM.<.e..%..........!.7..-.P........D..Hd.....O....P!...4}.F..E.......U..G..d...;.......au..a<..U..s...d..S..m...=^v...O...H{7/;.u0/y..uT..2{.....X....N...B.`R~../z

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12715
Entropy (8bit):	4.603625033024717
Encrypted:	false
SSDEEP:	192:bLvhQyDCTE6RMGqcB6DAGUVTnCy06xDB3T2tZWi3kMzE0qPmr9rxdHI9j6QTUCuv:bLHC4TGqBwVTDSGcgtmr9rxdHI93Zax
MD5:	CCBE98882DC04D7992ACD33596300A43
SHA1:	3A127D45799FC01CC090CD575DB2EB6170C2BEC9
SHA-256:	C833972A635DEF96E1F018ED9A55FB8167B049F270813DDFE335105B0BA32B8B
SHA-512:	F8B12941C082C907B65D09AD76238522F897D1E0E9E7C5A3A2131EF3CE18E20F6140D45E0D76CBAC288131C6B26A1982F335163FDAFD1B84AB8E1CFCBEC453EB
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Smile_ElasticsuiteTracker/js/tracking.js
Preview:	/* global document: true /./ global window: true /./ global console: true /./ exported smileTracker /../. DISCLAIMER. . Do not edit or add to this file if you wish to upgrade Smile ElasticSuite to newer. * versions in the future.. . @category Smile. * @package Smile\ElasticsuiteTracker. * @author Aurelien FOUCRET <aurelien.foucret@smile.fr>. * @copyright 2020 Smile. * @license Open Software License ("OSL") v. 3.0. /.const smileTracker = (function () {.. "use strict";.. const guid = (function() {. function s4() {. return Math.floor((1 + Math.random()) 0x10000). .toString(16). .substring(1);. }. return function() {. return s4() + s4() + '-' + s4() + '-' + s4() + '-' +. s4() + '-' + s4() + s4() + s4();. };. }());.. function getCookie(cookieName) {. const name = cookieName + "=";. const ca = document.cookie.split(';');. for (let i = 0;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65279)
Category:	dropped
Size (bytes):	143707
Entropy (8bit):	5.24918499382695
Encrypted:	false
SSDEEP:	3072:tJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/YvF:tJLC4dkEUYnafpl9v8cIWybV4y+oGMMC
MD5:	8BD8F48B3E09E7E11B31F44C54A3767B
SHA1:	B79B15912F8E31BCDD1EB4D91A84EC1225EA34CE
SHA-256:	B08CC9BD79F873CBF3A9468010074BD1C2EDE4524D993A1F42EDB1778FA3657A
SHA-512:	C1D50CD01C4CC8C0BF61E9B54560E22225C0EACB17328C72A62855130C4373E7EDCE719E46EE2CF459B197C3ED869C4E879090D1EAA3AB0D50F12720340D66A1
Malicious:	false
Reputation:	low
Preview:	/*. Swiper 8.4.5. * Most modern mobile touch slider and framework with hardware accelerated transitions. * https://swiperjs.com. . Copyright 2014-2022 Vladimir Kharlampidi. . Released under the MIT License. . Released on: November 21, 2022. */..!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Swiper=t()}(this,(function(){"use strict";function e(e){return null!==e&&"object"==typeof e&&"constructor"in e&&e.constructor===Object}function t(s,a){void 0===s&&(s={}),void 0===a&&(a={}),Object.keys(a).forEach((i=>{void 0===s[i]?s[i]=a[i]:e(a[i])&&e(s[i])&&Object.keys(a[i]).length>0&&t(s[i],a[i])}))}const s={body:{},addEventListener(){},removeEventListener(){},activeElement:{blur(){},nodeName:""},querySelector:()=>null,querySelectorAll:()=>[],getElementById:()=>null,createEvent:()=>({initEvent(){}}),createElement:()=>({children:[],childNodes:[],s

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3978
Entropy (8bit):	7.951923215619792
Encrypted:	false
SSDEEP:	96:Mo/xQaAp4kfBBfIPT+Nsn/K1EtoFzMYjiD1f4bSj:Mo/xQrzBMK+Srof4G
MD5:	3849DA68F886DF920BB7DFB4E192DAE3
SHA1:	C016C0E4BE4601374ED3CA6C6B0CE158BF3B1BEB
SHA-256:	33435B5242AE57E60594D84614FD8D162C0DFE6376A3833419FC8AA415E2C3CA
SHA-512:	8698074EBABF5CF5631CF4D93D1A537331EBB2D5838E44C5AB2EFAD3D6C6F44646C650830B77C40C774E531EBE9E82106C1CA21D7A2E0F008CE664C09800E5C1
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/6/0/603883_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF....WEBPVP8 v....?.......>m4.H$".!&.Y....M...9...i.7.{h.....z....o.'.G........./.......\|.=........d.........'.v..........>..[.;...+......../.>q?.._..`.....kT..#...=.?].6}.z>.H....................2:j]..wwwwh"L!..d..j"...7+.T.P{k'#I^.H.+c".)8..c......&...,y..k<l.a..].O...n\|.C.....%.V5eu.Z..........Y.i.#..r.;W?G.._.h.4$...[K..1.4..M..._.....).............o.z...@....'......<I.....3......&..gU..K.\|.b.+.jnC..,...3....+X........8.Xg.Rp.p-.k.7...8..../\..i..L.?.:..`n.....q.7URj.A^..............................@...o...?.....\.......5Sa}..k.!...[Q......o..u.d....X.....=3Z".'.ze7[cT..'I'..S.xu9...\|....}.......@].....U....a...#...akN;6LF.R...N..WD..f..........w....8.E.M..Uo....D.5_.....R.cM....*..$.b......8.U....e..>c.Oa~...t".:5.Y.h.(.)....6.p...-.^{B.m%d....g.4...6h..X.8yN!...d.[..0\...P./=.}i......3...(.f{_...S.(...%I..L..yy.Q..=.K.U.2.n......q.V#R.b\.=.....A".#.o...8.CU.z.ub.z.......i.W0./J..J....o.-.i..Z.V5/M..v.D..(....._:q. ..........o...

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (50719)
Category:	downloaded
Size (bytes):	51033
Entropy (8bit):	5.230580484642605
Encrypted:	false
SSDEEP:	768:UU/u1oWnkxzKhWdBY2rJxgCrMZ45dJ+KIAlj6cizBzzJpUVstotL:n/+3nsflM6IAV6yRtL
MD5:	B59EAFB7585844959BF1AB2FD2309B8C
SHA1:	E78D1BA9837F7D34F73A1650B734774E8C0FE8DF
SHA-256:	7777CAF3ABF606465FE426BDC9659A33CB3C72FF8708D42AE506AEFE5D38065D
SHA-512:	239B25440BB2F61B2C90C6337A66D0CF6FAD4D4425449E3A6EA931992C4CF2CA52F00DD8307DEA918EE04FC0A985ECE6579CE16F6A2248ACB346900044C9DDE0
Malicious:	false
Reputation:	low
URL:	https://dynamic.criteo.com/js/ld/ld.js?a=9456&fpid=GA1.1.965705703.1729844187
Preview:	window.Criteo=window.Criteo\|\|{};window.Criteo.oneTagConfig={partnerId:9456,visitEventEnabled:true,fpIdentifier:"GA1.1.965705703.1729844187",dynamic:!0,gumDomain:"gum.criteo.com",privateModeDetectionEnabled:true,blockedSteps:[],addClientSideSupportForId5:false,shouldFillPageId:false,enableOffsiteProjection:true};.!function(){"use strict";function v(e,t){var n=null==(n=window.Criteo)?void 0:n.oneTagConfig;return null!=(n=n&&n[e])?n:t}var I,T="5.29.0",u=((P=I=I\|\|{})[P.None=0]="None",P[P.Cookie=1]="Cookie",P[P.LocalStorage=2]="LocalStorage",P[P.Library=3]="Library",o.checkLocalStorageIsWritable=function(){try{var e;return window.localStorage?(e="criteo_localstorage_check",window.localStorage.setItem(e,e),window.localStorage.removeItem(e),!0):!1}catch(e){return!1}},o.checkCookiesAreWritable=function(){var e=new o("criteo_write_test",1e4),t=(e.setValueWithNoDomain("1"),"1"===e.cookieValue);return e.removeWithNoDomain(),t},o.prototype.setCookieRead=function(){this.isCookieRead=!0},o.prototype

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844231789&gcs=G111&gcd=13t3t3t3t5l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=EA&sst.rnd=831444307.1729844233&sst.tft=1729844231789&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=1&dr=https%3A%2F%2Fwww.retif.eu%2F&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=page_view&ep.event_user_logged=0&ep.page_type=home&ep.business_category=0&ep.content_group=home&ep.site_metier=0&ep.event_id=988929207.page_view&ep.facebook_pixel=671587811394625&ep.facebook_event=true&_et=757&tfd=3808&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1638
Entropy (8bit):	7.873653989886789
Encrypted:	false
SSDEEP:	48:Q3bsPdTBNYhkemywFsn81vPDcyc7iuBbFCxa2Hs+znm:qg1FqGHyw+813Dc7iuYH/m
MD5:	81F484E9E788464BAC5EBA59D4F36A34
SHA1:	29E08751C03D510EDA01699A3551FD5E8733DC41
SHA-256:	1297FE326586C134D37BD9F99BBCA3D1BF8A248DE5E9E8036788FBABCA22CE3A
SHA-512:	5BC4ADF81E8B5EE3EA5A188AA7E19DAFCD4246B4700399B05E738595EF351252A92EDFECC7087A444A4E2800D692FABAF2C1DB353E25AF5BD1DCEA60F17CCB03
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/V/A/VAR-007473_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF^...WEBPVP8 R....-.......>m6.G$#$.+7.P...in.^.14..(...3D..o..PA.N{.....+.-....Uu._.>.go.s....5.....f.9..r....F<...Z..[R.....%UJ'..XX... ..y..Y$.....e...P.!.&..SR@..cfB..dGC.d.Jj..B.j....v[.......k...#J.3\|..g.......].Kt.YCC0.}.\|.q..c........&.D.c ]....1-.P.@..x(..p..<UNwv.\|...p..Q.........g.k=.].^.aj..3..+J...`.FW.G...\|......ymn.T....P3U.M.%.MW..`M.]s+........ktmk.V..........(.5....W..t...y.x.8............#t.ho.g.%.$9j.....X.0Q...n!\....P\|.%.E..j....$..:...;]....o.....F.>_.=....T...?...-....L..A.>.Vc.....x.8;.Y..F..sk.....eP.C.r.;.+.9.......... ....>..R%=.m. .\.}.e6..m.w../..I.[0J.4G... ......~...\=..2."_.L..P.o..?@Z.u.j.f...RE...[r..Y..V.j.zW{.....b......{.+#..qBC......-.<wY`8..Rp.....y..E!.9.......A.h.Jp.2...8...........Q..J.JY6...o.B)'...)..Gsm...9.5.... ...W.m0 ..+......]o...t..5..u.....\|'.......H..."...2.z.sm.aG.9....'....C...x.......c..../.-...`.s..@....d...6..K.c.2.q.J.g..S...u.....JHy...C..&..L..J. .nE.px...s..y.,....Z...>

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	3841
Entropy (8bit):	7.534961728725586
Encrypted:	false
SSDEEP:	96:/6FS6XRhtJb0yP+GJGyq8Q9b+N7DJLST3XS+p4:SF19Jb0gq8Qb+N71LSLHp4
MD5:	8EEE9363E931FC173A889D08F3D0F831
SHA1:	21465C4F2D8A764DB4978553910D2531AAFFE719
SHA-256:	8C37ECCCD29FE08EC31E3D34731B2F5EE4458950664AB5FF717F69698FD81D1C
SHA-512:	FDF233A06471DD4860451B21887EC80E53BD078A395C04A1373AC2BDDC6CF862DACF301231DE1E32F23B3AEC1C67E5B538A62A43A9B786EDD5A250A078957627
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................H.........................!1...AQaqs.."#$2r.34BCDSbdt.......RTc...%5E....................................................1!..AQaq............?......D@DD.^.....\..lbZ.. l0.#g........l...%.:.u.....[$.5.,.....@6.yV..U.F.......:..h.:......(..q.Q.6

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	11007
Entropy (8bit):	7.870620771787339
Encrypted:	false
SSDEEP:	192:SFCNbL09PewVcwwkm26jHPYgJuGGHpqMaqb+dipXkI8Aa3/gkIdSq6:SFgbA9PefkWJjMaqb+dlTAU/gNgq6
MD5:	5E567870E44F514E435CAA87B3B7C919
SHA1:	C6A06E51FEAB433E431F93ED3D7B04EC78639CFC
SHA-256:	51AE8D84A7C9FDE7F0D73E1272AD950391626C37804BAA2CD26880ED0F6067E4
SHA-512:	442150D7F6C47D4A102C43D2A8E6C186634EC018CA195E453005B0444CE2C8EE281639C4C650377C0E0625B8EB7A57779661CE1D04B67E78A02A713C19F651C9
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................M..........................!1.AQa.."2q.#B......Rbr$36CU.....4SVstu....T..................................0.......................!1A.."Qaq2....R...3..#.............?..(..B.(.....6$...!.Ym;...JG.4Bl...0...i..9[...=.......c....k.;..h....+

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8433)
Category:	downloaded
Size (bytes):	8547
Entropy (8bit):	5.2257419357487604
Encrypted:	false
SSDEEP:	192:l+A7WOtwcsEiueDdUCJOwZ+lBsFgOEEzuWuypaLhFa/U7bD7Hk:BWOOueDdUebgR8uWh4Mn
MD5:	43D5E299135FCBCBAF5095AA276CBF9B
SHA1:	413549E4B0C1404DED3290FCA2C2727F1F3684E4
SHA-256:	B70F80571A9AD3A2301F6FF930DC51C77C97D0BA9C42D234EFC901F90E4EE8E1
SHA-512:	BDEE197F40A57FF3895FF873414C959DC84C9EB985D6A7BD7DA92096DE92CA5F82B7A3131FCF10CAC80A55D71863000FC7E68213B1F8A113D8AB075299D998DE
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/www_js_lib_IframeManager_index_ts-www_js_modules_shared_draggable_draggable_ts.chunk.js
Preview:	"use strict";(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["www_js_lib_IframeManager_index_ts-www_js_modules_shared_draggable_draggable_ts"],{43663:(t,e,n)=>{n.d(e,{vQ:()=>c,S2:()=>d,Ql:()=>u,K9:()=>v,MS:()=>f});var o=n(62345),i=n(2574),r={DRAG_START:"idz-iframe-drag-start",DRAG_MOVE:"idz-iframe-drag-move",DRAG_END:"idz-iframe-drag-end",RESIZE:"idz-iframe-resize"};var a=n(24982),s={},l=function(t,e,n){void 0===n&&(n=!1);var o=t.createElement("script");return o.setAttribute("charset","utf-8"),o.setAttribute("type","text/javascript"),o.src=e,o.defer=n,t.head.appendChild(o),t},u=function(t,e,n,r,a,u,c,d,f){void 0===u&&(u={}),void 0===c&&(c=[]),void 0===d&&(d=[]),void 0===f&&(f="");var v=function(t,e){void 0===e&&(e="");var n=document.createElement("iframe");return n.setAttribute("id",t),n.setAttribute("allowfullscreen",""),n.setAttribute("seamless",""),n.setAttribute("frameborder","0"),n.setAttribute("scrolling","no"),n.setAttribute("

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47540)
Category:	downloaded
Size (bytes):	47573
Entropy (8bit):	5.3289084404620475
Encrypted:	false
SSDEEP:	768:AmawpENTC1alYSAPjP+5T86qTP8V/3AAdGxDwrJ46GTufnSD1Ml+y1eTw+bnkGx4:7aqigalu7fX8V/3APxDwVjzfniMl9e0d
MD5:	8467B5CC149C2E4F981F5DEE1B329238
SHA1:	44AB5ECB08FAB5F342276BE8550FCFA3ED7E918E
SHA-256:	A6738EF63D0077E15C9F520D469E0BB682BFE297D46E9E3DF58143ED4CF7EE8F
SHA-512:	4EB6E03570441A88677B1098D10693334B4FF2A80D99D7129ED74825C1E3EA93DC101E8D6E70AD1035702F840F9BC593FCFA096419CF211E5492CE9F0EF73A82
Malicious:	false
Reputation:	low
URL:	https://halc.iadvize.com/static/livechat/e6eea7ff3a87d5aa0f604190aadd63e6e50714e6/live.js
Preview:	(()=>{var e,t,n,r,o={63747:(e,t,n)=>{"use strict";n.d(t,{X:()=>o,f:()=>i});var r,o=(r=function(e,t){var n="function"==typeof Symbol&&e[Symbol.iterator];if(!n)return e;var r,o,i=n.call(e),a=[];try{for(;(void 0===t\|\|t-- >0)&&!(r=i.next()).done;)a.push(r.value)}catch(e){o={error:e}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(o)throw o.error}}return a}((0,n(23064).Z)(null),2))[0],i=r[1]},64785:(e,t,n)=>{"use strict";n.d(t,{V:()=>o,X:()=>i});var r=n(86866),o=function(){var e=(0,r.e)();if(!e)return"halc";var t=e.indexOf("//")+2,n=e.indexOf(".iadvize.com");return e.slice(t,n)},i=function(){var e=o();return e.includes("livechat-")?e.replace("livechat-",""):"lc"===e?"sd":"ha"}},86866:(e,t,n)=>{"use strict";n.d(t,{X:()=>o,e:()=>r});var r=function(e){var t;if(void 0===e&&(e=document.getElementsByTagName("script")),e&&!(e.length<1))for(var n=0;n<e.length;n+=1){var r=document.createElement("a");if(r.href=e[n].src,t=r.hostname,/(iadvize\.com\|onlinecontact\.uwv\.nl)\/?$/.test(t)&&/(iad

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (10931), with no line terminators
Category:	dropped
Size (bytes):	10934
Entropy (8bit):	5.6917613180608715
Encrypted:	false
SSDEEP:	192:qAshXMRyW6V2XHUE/+BUBaXCYArvTiOCpYi6AP5gHTVBhyiuPfXGQ:dshXMRyW13Uy+Bw1YZTpYi7ABhylfj
MD5:	0FF11BF27794B1FE2ECCA0B43215E9E6
SHA1:	98EF752FF817D708298D3DFAB9A629ADB925F0DB
SHA-256:	6142D42853BCCEC87611AD1CB1E03008C9B07D3CF91C45C21FC4D40F1185AC7A
SHA-512:	4327C0DC7E37508046B46A8D0B50A4E6503C5FCA38D63263E36CCE29F3DFDB452A5EDA113F0D134555AB1FBD10F9DF76E204F5FB32CD20066A1A1772B9B80133
Malicious:	false
Reputation:	low
Preview:	./* /try { eval('(function() {var qss="&cb="+Math.floor(99999999999Math.random());try{qss+="&ref="+encodeURIComponent(document.referrer)}catch(e){}try{qss+="&sc_r="+encodeURIComponent(screen.width+"x"+screen.height)}catch(e){}try{qss+="&sc_d="+encodeURIComponent(screen.colorDepth.toString())}catch(e){}var callDis=function(e,t,n,o){function c(){callDisInternal(e,t,n,o)}"complete"===document.readyState?setTimeout(c):window.addEventListener?window.addEventListener("load",c,!1):window.attachEvent("onload",c)},disCalled=!1,callDisInternal=function(e,t,n,o){disCalled\|\|(disCalled=!0,n=(n?"https:":"")+"//"+t+"/dis/dis.aspx",(t=document.createElement("iframe")).width=t.height="0",t.style.display="none",t.setAttribute("sandbox","allow-same-origin allow-scripts"),t.setAttribute("aria-hidden","true"),t.title="Criteo DIS iframe",void 0!==o&&""!==o&&(document.body.appendChild(t),null!=t.contentDocument)?(t.contentDocument.open(),t.contentDocument.write(o),t.contentDocument.close()):(t.src=(n+

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4859
Entropy (8bit):	7.6673093520523
Encrypted:	false
SSDEEP:	96:/6F0MJaNfJZ0Ip5vkH+1EcN9sQWxK8zmRbsF7LAhVsagi6wXqR:SF0MJgfJZ0svYHcN9Tn47LA5gtZR
MD5:	91BC0C081B08E31B4AB9CCF911C56EE0
SHA1:	94BAEE763E237A6D0CED4AF6C289F599778EF5FC
SHA-256:	0E05F0A4E26A024DD2E74061938CFA7878A35D9FBFEE033612B839633C5C049D
SHA-512:	93FD93ACD1EBB740BE4BE438336CA701BCA993354DF95EA8B6D9C60B30C2E2B304B9C9625C05DE93351DEF45887B75A27F65EB9BAA0DEDBEF5C4824EB1E65F1F
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................G.........................!.1AQ..a.."25qt.....#BRbr.......$(34Ccs68D...............................&.......................1.A!"Qq..2Ra.............?..D@DD.DA....H27+!c.f...Z.}....>.... ........)0<6j..f..q......#[...Ud.D..Gz...xV#.'...D,.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.5360409258397825
Encrypted:	false
SSDEEP:	3:H+0Zhk2C3Tn:e0Zhx0T
MD5:	673CA78822F8B7D1C6A254367265711B
SHA1:	28974681E56E7A80F767C68AD1EBB711F97DD19D
SHA-256:	DD5F938B003A2BC6EACD6F5726DAF25ADD8FD465DD955C1FE53F817D4DDFBEC2
SHA-512:	A671AEF7D10DB05AF080E305E94FFBA8001B8FFDD9EAF540FE266AB6CBE007B5073A674B0D5523C8FF061A2D65FDE72CA23D26D77542138741591BA3CB853E9C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKs3pq4RpazxIFDXoqIIkSFwm-hJLq8T_7_xIFDZSQkvoSBQ1TWkfF?alt=proto
Preview:	CgkKBw16KiCJGgAKEgoHDZSQkvoaAAoHDVNaR8UaAA==

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:qinPoICkY:qyPckY
MD5:	61F6B5BE6E9B14C02765C8593F946600
SHA1:	D8D30096CD4C47BF8E73576C3DAA10D58C586011
SHA-256:	8D66EAE9ACFE08398A754CF6BA74620444A4BD601832A8648611B08E3645AC1A
SHA-512:	FDD6B72F3F93AFF79D1426E5C2C7C7AF096528BF0BD98AFBC21FC207309B440628F2A2220F0A06FEAFD9A78584123B77D1C276F38D16E495B91EE24218417C6F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkd6U4_QoOxgxIFDYOoWz0SBQ1TWkfF?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw1TWkfFGgA=

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	112163
Entropy (8bit):	7.987763467311003
Encrypted:	false
SSDEEP:	3072:jL10iUZcFKqUHdVjwGnXO2vgiEytLakRudzFfDVPXuKoD:HPpFn4nX9gXcxIlxvuj
MD5:	50701BC6FED90CF3DEFF1779E8DD6C6D
SHA1:	585D78C402508932B8330D179D23F63D2CBD7C64
SHA-256:	94898597CAE00806ACE33576E687CEE29F4A56642F5B4A87E7204BEF019BCC5B
SHA-512:	3CCBD39B549D0E6606CE43B062465F5FA55827E1536AA633F531C741A2DC84682F8665A3C6BA9A777C6CFFF9D64B7527CA88CE7F5DCEB9017BC1F88DDDAFD646
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y.eI]..D.s.....K-.]..t7(..l...Mw..: .......8.....;.8....C#.."....5tuu-Y[V...,..G.9...U..u....Ovf.{.9q......p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8....J :....J......&.!`......>.;o?...'....k... ../..5`..g...?g..SM.p8....N7.0...q...n.n......)`.#.;.....~?......X..'.G.....q.q3....~.v.s..}.kg....._..d...8..F9.&{e..........i.]....O.g.#&...#.O......q..........<..<...h..>...O.....3.q\'8.i...u....g...6.g..4.1.o0./...9v.' -8.......x.."LD.c...>.\|.#...p....k.}.w./...d;...c.. .W...6..8.i...5.$p.....\v.9..4.y./....t.9.......\..cD....8.Z..g.?.....ls...' -8.............z......8.Ug...N@Zp.rU..x=..L...c.#$....Y.....d.......x.....'.Dr......L..N@Zp.........SF.q.r.....,v.-...l...a..Q..0...G...G..`.v9:......t........T...0....Qq\a.....K...[...W...qi$f...L..;..G.p.r..,...'1eF....

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	76872
Entropy (8bit):	5.311051992039752
Encrypted:	false
SSDEEP:	1536:GhAYVLLhbINyuFsXp09RB/6729QO56q43ny2ic5a4ywRV2OhXqtqM4WIBCneRurU:w3kwpVhDWIBCih
MD5:	10C7E04EE6593AFE088DC055FF7C597D
SHA1:	D5C895064A944D810812B8E06E36F2B8C41FC89B
SHA-256:	DD77FA93CD2360A98B84CF9259E91D1F302E307F34DBED437826A8C46179A21C
SHA-512:	B8C25A2927DD6D6FA1F2C684D4AC0CE17D67F5C4853ED2C9B997E0B360D035A4BC361B5D402793DE99B183AF64DC819F7A9D616B49E3A0A88C2259A0B3A52524
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["full-mode"],{74657:t=>{t.exports={translationsPaths:{ar:"https://static.iadvize.com/translations/livechat/0.1.663/ar.json",bg:"https://static.iadvize.com/translations/livechat/0.1.663/bg.json",ca:"https://static.iadvize.com/translations/livechat/0.1.663/ca.json",cn:"https://static.iadvize.com/translations/livechat/0.1.663/cn.json",cz:"https://static.iadvize.com/translations/livechat/0.1.663/cz.json",de:"https://static.iadvize.com/translations/livechat/0.1.663/de.json",dk:"https://static.iadvize.com/translations/livechat/0.1.663/dk.json",el:"https://static.iadvize.com/translations/livechat/0.1.663/el.json",en:"https://static.iadvize.com/translations/livechat/0.1.663/en.json",es:"https://static.iadvize.com/translations/livechat/0.1.663/es.json",eu:"https://static.iadvize.com/translations/livechat/0.1.663/eu.json",fi:"https://static.iadvize.com/translations/livechat/0.1.663/fi.json",fr:"h

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3779
Entropy (8bit):	4.928197771810045
Encrypted:	false
SSDEEP:	96:npyIs40wjaqiRpUBKxYa6Ayoij+jpjJjeW5hWF:F7eqiRpt6voGqpJtK
MD5:	FB40C09B8191E6A7C31DA44646D7E3E3
SHA1:	DC138F4C0B0C445E873EC674494F2A16CE0609AB
SHA-256:	CA202484B500A49FF1887FAD037E8E2F4E7941C25637BD129335202FB7F5C302
SHA-512:	6B08C0639F2C853A8B313C08F41DD5AA207E1B05A5CAA7999DDC14B5AA5784ECBBF961C2A397FD60B10335E5C569FCF32E074B752BC5067142E08A0A55CA2CD5
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202401.1.0","OptanonDataJSON":"7b598d17-8e2c-4f6a-a9b0-ce07a9dac944","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"87b5ab3f-683b-4ba6-ba61-e882a417e7ec","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","bv","sg","bw","sh","by","sj","bz","sl","sn","so","ca","sr","ss","cc","st","cd","cf","sv","cg","ch","sx","ci","sy","sz","ck","cl","cm","cn","co","tc","cr","td","cu","tf","cv","tg","th","cw","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","dj","tz","

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G111&gcu=1&gcd=13r3v3r3r5l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&sst.gcut=1.3&_s=5&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_user_logged=0&ep.page_type=home&ep.content_group=home&ep.event_id=780258551.page_view&ep.facebook_pixel=671587811394625&ep.facebook_event=true&tfd=38950&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.784092392969594
Encrypted:	false
SSDEEP:	3:qinPoICkuMT/Fk2C3kYG+:qyPcku6x0++
MD5:	259770C56EF9F8D39EDB812A90BD10EA
SHA1:	3EC92FCD74ED953E40C74EDC9B77B7F8B7051F09
SHA-256:	DD3CB780CC306B79C1984AB0A90485E9BE8BFEB0AA5DBDEBEED1B64AC37DB7C2
SHA-512:	F116FCDFDE7C0A241C0AC757A01610A3A32AABD2010383E28781B7B485A9E375266AB636F8B7A64B0C5ADCF81D31917DE6C918278BA1DF1BF781F3BDD15FA6A1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkd6U4_QoOxgxIFDYOoWz0SBQ1TWkfFEh4J37gGA5GdZKESBQ2UkJL6EgUNU1pHxRIFDaWTNiQ=?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw1TWkfFGgAKGwoHDZSQkvoaAAoHDVNaR8UaAAoHDaWTNiQaAA==

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.366729296672174
Encrypted:	false
SSDEEP:	3:H+gthdVEk+:eo6k+
MD5:	B70D7DC1E25115B67AC355670BE9726F
SHA1:	212AA0E334D0EDCD6E8A74C18375186F7E7CC954
SHA-256:	EA1501AC60A9BBCAE12556A94769B65F0C49146F9E4C6870971EC878CCE642A8
SHA-512:	8552ACCE45276A4C5989B6309D59429E01237F7A7A0F8D6091C4701F051BC5E1FC2EAE35658529779CD04DA8E28F8F0A12984C91880444593D2F6F1C6BB495E1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKs3pq4RpazxIFDXoqIIkSEAnVYIRplEc-DRIFDYOoWz0=?alt=proto
Preview:	CgkKBw16KiCJGgAKCQoHDYOoWz0aAA==

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
URL:	https://t.retif.eu/g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510za200zb9101093033&_p=1729844181429&gcs=G111&gcu=1&gcd=13r3v3r3r5l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&gcut=3&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=noapi&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.gcut=3&sst.syn=1&sst.ude=0&_s=6&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=1&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=user_engagement&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&_et=4102&tfd=43968&richsstsse
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.retif.eu
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	234257
Entropy (8bit):	5.456591568086048
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K7130N:zfLeYc+PJxH8N7QQGArHu58K713G
MD5:	2025B5C3DF8DC34C5543BC11CCB97045
SHA1:	56F6EADF15FB2602AAD1258977BF2CB27E0EFB31
SHA-256:	EAB9CBB1928A9DE3ED2B7164EA7215B1EE0C9D7584D04AAC97FE5B6798140C48
SHA-512:	9F0663C34F0BFD8B24462F82C5E2C39BF6A7150606F4074254392926628674F780B00DC66C71FABE90B54C46D77ECE3B182F466B8EEE3700859B2DAC1FFB755B
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4335
Entropy (8bit):	7.578506720928841
Encrypted:	false
SSDEEP:	96:/6F6r+xeNdfrVq+6U/hyoekh88CbyxuqUpuiypHl6Am+RJmC:SF6rUeHP6OYRkh88q4SyF6Am+KC
MD5:	7C0F5042BACCEF9B25CA08A3EF002D48
SHA1:	F5A5EE43F0F96608A7FD90F07399C74F0F5E5948
SHA-256:	E4AB384F8749BB95B551102B289BCCF4A2D3D035A04B17509BDE5C03F1AEE56E
SHA-512:	A8F63E1C114118622E610402FA4C6728577E4BF68D9405075EF25927DF8C5B5190B2A9F2A33EF6D4A33EA2E7BC5DDBE3815BD72DC3C17C426BA9B9243FC4BD68
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................;.......................!..1A.Q.."aq..2r...#3....BRb..CD................................,......................!..1Q..2Aa."B...q#..............?..." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...." ...""...."

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	2506
Entropy (8bit):	6.656704605585031
Encrypted:	false
SSDEEP:	48:/llXiFOr3Q4m3tZgzRtw7zRVTylUASIlqU61TK5n:/6FOTFm3jYe7vaUAnlqUQQn
MD5:	3F76CF566FB300EAB7CB33D3BDC315A7
SHA1:	02AC71C91E017BBEFD3412C3CCEFC748BC130A5B
SHA-256:	B8DB6188EF57F387D2D627B15DDC32D0B775C32BCC356B3828E1534BCB2EA55E
SHA-512:	E9604D872F1CC6D37EC87025E8F7AD4BD5CC869A136FBA6CA6A910CD2DF30DE348AD07C4411392FE53571EBF6EF30C1C947D8F1A1BF63CC7DA0FB05BB78F865C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".............................................................................................................c5.AS@M...9Ul....... DZ..-........vV`Z..-........'.&-...6Ul.........U.F..J..$.......H.c8.... .......DZ..f.......QG3...t.e...y...E~.m.....e7^.......!.....'_..qW..k.u.n;...egG..

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	333495
Entropy (8bit):	5.616324277701957
Encrypted:	false
SSDEEP:	6144:b4ziRo3k4aNeeBvi8ECFqXk9nH+YFBBNy2Uzy:szi2krNjBKyWW
MD5:	956033AF674F199EF5CF792FF8AA9260
SHA1:	F0BC8C0E62A24D0F1C4113435302FBC11E262DA3
SHA-256:	F3D0C5F3A296B8732CE8CBD398EE5B1164D8319A74E18B55F71B63C068933FB4
SHA-512:	D36C081BAE55EA94C7311452441F42094234F1D5E443AEBD6FE179C3AE96C1B1BA33E81CCF388832C12CCF8F7C161477D45A176B273137369738AAA612C3B075
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"7",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":24,"vtp_rules":["list","retif\\.eu","retif\\.es","retif\\.it","retif\\.be","retif\\.de","retif\\.nl"],"tag_id":108},{"function":"__ogt_referral_exclusion","priority":14,"vtp_includeConditions":["list","secure\\.ogone","3dsecure","paypal","stripe","sogen","retif\\.be","retif\\.es","retif\\.eu","retif\\.nl","retif\\.de","retif\\.it"],"tag_id":106},{"function":"__ogt_dma","priority":14,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":109},{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34725)
Category:	downloaded
Size (bytes):	39811
Entropy (8bit):	5.263201030205329
Encrypted:	false
SSDEEP:	768:FSDpkuGAhFA2OuQikxJdHkx58RuechWqLWZApt6mNdLzBcFp7qbhGW:GQmQHE5URe4W7LLuEgW
MD5:	E4F2DBEC68C40EE4EAB30A492D381CAB
SHA1:	E2011B7F156AB1D9AC560D1BEE7D7E748018B254
SHA-256:	53DB4090EF457848889230C3272670CAB76B1C827DB70A3CC610E341732F0025
SHA-512:	E737B126BC94E1F2B8A70891AF1A01B3D20578D8178DD0D2E7C36EC3484EA362E35007FB086A8054CD65D9CC70A9550DF563F01E7008021E8001156B5DAD4BB5
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/alpine3.min.js
Preview:	(()=>{var We=!1,Ge=!1,B=[];function $t(e){an(e)}function an(e){B.includes(e)\|\|B.push(e),cn()}function he(e){let t=B.indexOf(e);t!==-1&&B.splice(t,1)}function cn(){!Ge&&!We&&(We=!0,queueMicrotask(ln))}function ln(){We=!1,Ge=!0;for(let e=0;e<B.length;e++)B[e]();B.length=0,Ge=!1}var A,K,Y,Ye,Je=!0;function Lt(e){Je=!1,e(),Je=!0}function jt(e){A=e.reactive,Y=e.release,K=t=>e.effect(t,{scheduler:r=>{Je?$t(r):r()}}),Ye=e.raw}function Ze(e){K=e}function Ft(e){let t=()=>{};return[n=>{let i=K(n);return e._x_effects\|\|(e._x_effects=new Set,e._x_runEffects=()=>{e._x_effects.forEach(o=>o())}),e._x_effects.add(i),t=()=>{i!==void 0&&(e._x_effects.delete(i),Y(i))},i},()=>{t()}]}var Bt=[],Kt=[],zt=[];function Vt(e){zt.push(e)}function _e(e,t){typeof t=="function"?(e._x_cleanups\|\|(e._x_cleanups=[]),e._x_cleanups.push(t)):(t=e,Kt.push(t))}function Ht(e){Bt.push(e)}function qt(e,t,r){e._x_attributeCleanups\|\|(e._x_attributeCleanups={}),e._x_attributeCleanups[t]\|\|(e._x_attributeCleanups[t]=[]),e._x_attribut

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77172, version 1.0
Category:	downloaded
Size (bytes):	77172
Entropy (8bit):	7.997178043186645
Encrypted:	true
SSDEEP:	1536:Y+H4UZHGoF+14Manlcb+ZfoVo172ZnqxXsRCEFB5fx1p8S/eS:2GHl+aMs00ikLEFjxzjeS
MD5:	B10922402745E9B7258498EE8A0CD381
SHA1:	445CB64FA665A4E5B58F58829062673150870A0D
SHA-256:	2CF8E30575D4E223584A218DAAD3440AFF253FBB60665AED6D9846D57C1F2F09
SHA-512:	8017909B0AF08460468B68E49446F59CA7B31B48BD10D08F32DD67571E8B7B28EB3EBD5BDA1ADA30754B8AC68F467201920163695FA3ABCDF9B683BAD19B168E
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/fonts/mulish/mulish.woff2
Preview:	wOF2......-t......@...-...............................z..P?HVAR...`?STAT.8'2.../~.....\..v..F.0..z.6.$.... ..4..~..[....%c..7..2.Z...Z(..h.o.z./..<..+./r..!.v0..fU.......\|yl3.//..I9Jk............G.k...m..w.t.n.s...7d%mY..vKhQ.v)(.p..6..v.....^..Aw..V.L.h.4.^..+..).6K+[...U.fIK..{.8...f.d...;...#b...A.^P:.....T.......W.d_E.D[..y....Y<D$`'!....$l.zD.\|W<....j.P..._........6......m....v..2_.(~..Ly.L.0.......=uI.SI......qG.....;..a~..4y.{.....=D.0...`...T....t.. eB.f6.a.!4....XxY..J../.&UIC.`..!.@`.D..z.>...H?.s.=MN7:G..d.?1C......\Z......LV,.+oA_.m.v.!..,.d...\|....I...S..3.Uv...A..D/....U.Oc.\.......:......<E."...$^..! ..S.D.q.....x.....:...... .W5./F.8.x....E..?{.^^... .`!.I..Q1...o.f..AK...........O..,., .-.@.8.4i..< ..x.}d8.pw.i..M...=...}.5_S..:.....T=o...qx ..X$mP.....1..r.Q.......F..../.\|.9"Gm....6.D..~{.w{\...q{.s.r...... bC...K4..K.M3...c,-..[0....T.g;.C...b:hym..#....p0.9 ..7...)....P&.d.-.eY.......I#.Lq..Iq....8.}@{{.....4.).I.42

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	234257
Entropy (8bit):	5.456591568086048
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K7130N:zfLeYc+PJxH8N7QQGArHu58K713G
MD5:	2025B5C3DF8DC34C5543BC11CCB97045
SHA1:	56F6EADF15FB2602AAD1258977BF2CB27E0EFB31
SHA-256:	EAB9CBB1928A9DE3ED2B7164EA7215B1EE0C9D7584D04AAC97FE5B6798140C48
SHA-512:	9F0663C34F0BFD8B24462F82C5E2C39BF6A7150606F4074254392926628674F780B00DC66C71FABE90B54C46D77ECE3B182F466B8EEE3700859B2DAC1FFB755B
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	4572
Entropy (8bit):	7.645024628114027
Encrypted:	false
SSDEEP:	96:/6F5nsEeLRJDZecqxxPBSr9plpiR9AovcVn/oOXpvWRQR:SFFizDZcxd4jzinAovcV/PI6R
MD5:	F357E15930A3C300CFBA86878EAB8DC9
SHA1:	4E796C7F4885C6B921FAED2EB49416B15550DEA4
SHA-256:	AABF5F1E3F4D8CFECECA3AC20F8160149E5A034A4EDF9A1C5E6DBEE734F3535C
SHA-512:	C3E0DC494CE6092F6F170ACCCE9C7E987CED8FDA829874643797E3F02A541D370144491A8E48FAAAFFB8D51D588D02FF9E02DCF2B5125031E91594AF97CE1263
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................A.........................!1.AQ."aq2t......BT...#4Rbrs...$&3S..................................................1.!AQq............?...DD.TT...`..........V.[.z..Ud........Hl.zj.." ""." ""." ""." ""." ........V.[.z..Ud......p..K...Ji.{f..........

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	5868
Entropy (8bit):	7.705947867366042
Encrypted:	false
SSDEEP:	96:/6FPjLPtMID1L/0YeRZu1NdMlFEZj8nAXiqs/06fr+jOh21tqCeU:SFPjLP60/oRk6jE8nAXiqgfr+jvq5U
MD5:	EF9E83551067045AEBE4A365B8EE5223
SHA1:	94A68D04B7F74CA29425DA79486B38D44D7A395E
SHA-256:	42ABAD4C7EB68FCC8D025258BF6FA6E65335E119DEB66E89F0DA420CA1893CE4
SHA-512:	FE30CAC2792008449F151B118616D81C85FD8499AFECDB7D5DE99200A52A8257AE495CE79C410EF00E1977CB9EDCD1B94B1681C799310C4567B7F6BE58A8D293
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............"........................................:.........................!..1A."Qa.#q..2...BR.$3.Ubc...................................3........................!1A.."Q2aq.B.......$34C..............?..D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...DD....D@...D

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	106778
Entropy (8bit):	7.985440612058523
Encrypted:	false
SSDEEP:	3072:sAaWlDSlGvd9+TP3+5QKsRk5uHo+7Y6ackrDB1J:sBW42di3+eKsR2cjack5
MD5:	4B225755CFA8F0282EBD64A493DBA62A
SHA1:	7F58D0C2FA90A5888D0EAA22D9A98E9D623D49AC
SHA-256:	BEF85FB1B61A1B85D5886BCABFE454DDBF7934690894BB2A17B5C299274B89AF
SHA-512:	849A13CF785BB5C9680CD00CA09FA63E90E4FF92CBB8412DC0AC21AC7AE5A03C63D65239E6BEB0928501AD21E99748B865F913BA437880A422498EEC79ACA1B4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..Y.tkz..{.....=...t......d.8V..X... .0(......".%..(. ".".....(H....."!...;m...NO...M{.a....[......c..IK{..].....3..XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX.U...;...................B}....{....'....+?.}..\|..}....'O.X.#...F...f....o...}...{._.....W..j}....A?...K..{.C?...0.......?.7....^D%K.......,\|...g...^.....?.m./l.=~:..b]~.r.m_z.Y......8...$)%.....,,..g.@.~9Dw...O.....?C0E?....o..o..$.w.`.^...o>...g.4..&.z..}?.O.}...t...?.i.~YC.P.2Y".....,E.....?.o.q....WK.....G.2..<..I.q..C.....s.{;.7......-...BdO.......g...i...Z;.......o<.JA......o7..d......X.?..m..^e.&3y&.u'...z."..g7...e..J^L...)^.".n..^..mw...+..o..+..........?..a.;.....[?1.....A.ET....,.........V.......V..S. V....].iC..\^.X7S.yeLVe.~YIM7.4Uc...R.y..}P...i......].......}...}........}7....7....~........,\|-.t.h%N.v.......(W..

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 490x490, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	22386
Entropy (8bit):	7.990112550933301
Encrypted:	true
SSDEEP:	384:iYwpaM//qEhZqYVVNGPoBHMjKRrU6C/j0VZA6xnPA1WW8sStIzKARsZLwYg:i13J3hVNGPoijMoD/Wm6PgW/ftIelg
MD5:	318CD64A0AC502C36DCC2A18F1C33655
SHA1:	C8686A1D138CB83A1BECC5A1FCD5C53C158EB8BB
SHA-256:	2DFD587FFAE1ED6DA62FFF2EE39B134CEFCAD7BE57163610251D07A920905B59
SHA-512:	8264443D9E49133EB3A61EE9BF286BB7EA9C225F96731FCF1C342087F3A224CD1EDE9F7DEF3471D4CC14EEE3BC7597D5BC83B97C14867EC542EFA45D8AEECAFD
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/conseils.jpg
Preview:	RIFFjW..WEBPVP8 ^W..p....*....>m2.H$".1&3.. ..g-..I.j........is..m.....c..M.W{.T;.\|.y..................L&].....\|.......I....b...o.?.}.8....;..4......./...'..!.duA.h.J.5.8.{......Fuku.....e.Q%.pA.?.....]..bH.t..&.........d...c.4.....H.....t...i.......%...<....;.?.r%#..y..C.+..+.i.D...I@.....j..jy..B..ef....p.&..9.....N..;8....N...I..~.Qo....i.Y....uq...#..N..d..s...W....t..8........h.q...Q....s.{..\_..\;...<..0X...2.2...@..5...\.._;....%...s./......~....aa.`>.d~L....;.).V.. YP.'..z.a.....f..qd..W.Wl..e2..Es.H0:.)....k<X....,......p.....rl......91.=c.8,}..A.eV..,..i.k.....-....@....c.i8b.h.dD..X^)...]...0@...H............ S..w.-..+L...#D.B4 A.....6.K.......>.g.'.f.F..~...<.1".....q._.6.g...el.-....T7.9Gu.A..e.]..+aR:....OL.&4Z.....Od....x.%.....6..,_....c.j..`.B..r ..s......1F....V.B.6Y.)<:....9...@:X[.x?..W...!v]..QZ{+.y.m......3..z.S....0ZE. ........V.......U..2.N.h.T..CU._."h.wCy.#.....;D.....a...^..$...r...[.....S.-.p...).b..%.[P.Q.."

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 48x48, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.4354860813141124
Encrypted:	false
SSDEEP:	96:jzuDyMp3I/l6SJ91056Ubp2T/S20l84jG/pC:jI26k3Ut205
MD5:	D93917B33B3ED767BAD867E6188E9E9A
SHA1:	ECFE3287217A3223AC991280A5CCA85A76937C10
SHA-256:	209813F5B1BB4C8BE8ECD08E829900E386D490789DD805701D89A625F3E3536E
SHA-512:	1B466D2903A3F7CC5A25E097EF76F737051BBC3FA6B7E4C23D3264B83F5B0FBE14EBCFD73A085685169BE0C6A467C6B91B92A9DD91FECADE14FA7AF1EE0C03B4
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/static/version1729765264/frontend/Retif/default/fr_FR/Retif_Theme/favicon.ico
Preview:	......00.... ..%..6...00.... ......%..00.... .h....6..(...0...`..... .....(........................................................................................................................................(...'...'...'...'...'...'...'...'...'...'......................................................................................................................................................'..'...'...'...'...'...'...'...'...(. ...............................................................................................................................................U...'.c.'...'...'...'...'...'...'...'...'...$.#.................................................................................................................................................(.-.'...'...'...'...'...'...'...'...'...(.S................................................................................................................................................!,...&...'...'...'...'...'...'...'

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	94331
Entropy (8bit):	7.984046226876326
Encrypted:	false
SSDEEP:	1536:v2axBCDtrzJOxHpbt6zVbWkCb0G1Pb0L9irsPFhgCtQiLQ/msFfgJW8KBHZq6Xik:v2cBatvJOxHxU5bW90wPm9irsPFDLCgK
MD5:	BD0702150D032868D6CF445C63234D57
SHA1:	7056F9ADE96D0D323E0DE57C90259CD51BDFA8F8
SHA-256:	6787E3BD9D065E269515486FD02121979503E64099B4DBFD92A8D6DD39737E3B
SHA-512:	ED5226B3FAC83878C1A8F291F70724D374E07C8D584011F4ACE67D3AF444668F1692E4EDB5272DE18DFD1E350A4EA660ECA34C887738F575763F6E592602FEF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..i.e.y..{.s.]...z.....E.)R.ij.dQ2.H.L...q.AFd$J>$@..^.(1.D...pl.A..A.[R`..-S.%R.$Z.4.......Z].]....!..D.......(twU...=....y..............................................................................................................................................q......i.=.l;..K>....iwV...m...I.o`.K1......zy.m..n...z..b...u..'.s.w.w...j.Y...P.u.#.9j.y.m_.......1v.RY.......<...?z..o..f. ....z~...W[{7nl...F.x.^.6B....c..........0..'...h-(K...)%...1 .H4J..$IKn.Kl..U. I.4U2.S.....u.~.O\|.{..S'}..._..20..,n>.@.n.Y.>.......)1...xt....7.<.......5..)".(..2Q..Zi..H..IP...<!x...:....!$\|.!.()I1..G&....Ak......G..[.C?...e.....>o..'C...g....r.;.]..g.9.5.l....U>.7 .f.....!...}...V.kl.2K..h)QF..Fi.R@. @J.2..u..)....!..wH).@..bB"..b.. x.T..4..R....I.RJ(...<.u4......<........7O.\|.....d......Q.........G.\|5.I=....}S..Vk.os.y.,J.k....T$.(...G..Z3.*.V........"e...u.w..=1....:.T.B..Dg.Z.U...G...T...B.."xOL...wD~,!..I....1.bJ.E..ZV...

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	97372
Entropy (8bit):	7.995878659127073
Encrypted:	true
SSDEEP:	1536:0JZDhq55FUYue1ciYkvBvFez/tsV1bZDbbPuKMo8DPZDuJpCqZmrhAcY192vPu:0Nq55FbueWuZdyQ9HPc7FuePUf2Hu
MD5:	C43399DAF155E581786961170F3BE7F4
SHA1:	90061AF1C9C728FFE052C90E34C1B0CFD407B711
SHA-256:	2AD7158CF7949B3944134C7B5C27B9F809D98694CCF3CBE78ADB42DA07623F8A
SHA-512:	FA99A4BBFDE400F5DD4202A8B05E2B7825D08994ADA7B5E43ADFFD64F9498C4CD6797AA8DD40E2F96681309C96946A1678522438E6D82BEB1929589817E65D75
Malicious:	false
Reputation:	low
URL:	https://www.retif.eu/media/wysiwyg/home/marche-gris.png
Preview:	RIFFT\|..WEBPVP8LG\|../..c.M...n.. .VA.....$........x..4.5\..)x.@o.....qU=S..,.....&.B...... X..'.].s.K..~....=}.....E.]\.A..w.;....@rA.M>3.a.....;>.Y..l..;.i.....w5........v....:......c...@...R...A{.......iV.f."..ur...Us..t()5w^...`}..L.<.cH.....[K..4Y..FU.=.].0P/. Y\..O.......R.8...#u.`q\.b.".........ZIQ..d.-..x.^..z....d.n...e.l..DVU.uKo....LF4+R.u.g`.Uf..#..z..p.......,.R$.uw.....q]CI..\|..\$Rw.?...~.....).A.h........U/h+..H...Y.....o24M.$y..^i..vI...R........s5.r../..S.....JH!..B..OH.lm..6.>.C.y...5<.5'.TT.(.@.'...}.wx..z...4\|M8..3.\|b..<c......1o...h....pB.'....D..s0..........C.z(..l....4.t..h.....$Ar......9.;...... ...^....q.x..(..fj.h..`......Y....4...fj......@B...;y...8f....tGBA1%S..((v.I.s..u.....*QDm..(b.QC.1....P.Tf...}4.Wz..+..L@......y.....[.5.D..z....".-.u......=....;......(0L.X..%.....:PDBA1..q 8..QK........~.~.l#....C$#.....L=..}i..g.Xwx..t..+..@.. !W.R.$$$$P..c.H......la..`a.....v......;....P.l.......=..x,...._1.``......aD..c,..g..j

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	115084
Entropy (8bit):	7.993447179713304
Encrypted:	true
SSDEEP:	3072:ePt9WSnwWxsrjALlaz3h8TgkQmjc9Xx5tjVzkmstFxrvr4i:O99wWxsrcLly3iTWIchZIB
MD5:	5D8F2F15F2E05225902F3DB90D383650
SHA1:	04AFC708C6E91906AB4BF03EAFE993A5EC9847A7
SHA-256:	C9A5BAB8ABBC6CFCBDFF879FE822ADF375355C3FD6EBE0DFBB7AFC2722661F95
SHA-512:	FC45CFF0D3C1B86CFEBD42CA27AF0D9B37BFBCA1DBA3D18E187ECF92C5FE93721A3BE4894D029F95F193CEB3ACFE61872C52C7B718AB10B5E4C5DC6AC0221520
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y.e.U..[{.s.}/..T.y...Bb0 .. @.`..Fb...c..vw....=..h..At.....vc....d.......Th(..5..,.<dfe.w....?.....(U.T..x.Y..w..\...[.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....,X.`.....\Bx......;......>.....B.....>...}..?u.=....o}..G.zv...O<z.KN.........._.M.}..q..%.,Xp.....u..w..w.U..}...w...F.f...9.).._z.k...^)G.3\.c^pi#\..X..R.G....s...e.......^...a-.Yu.+.=.....cu8p.......{.....B...K.K.Y..<......}...sh..1.<.%.z.._}.....Y..O..C.G."D ....k.P.....O..M,.d...@.,8......o?v....jwWW.}...S.>.@p.ivwV...{t..#N....... .(.. ...G.z...x./.../.[\p.cI ...e....~.G...?q...'>....{.._.S..{z.\u.....w6.L"..).. x.P2..Z......+.9v.3>\|...k._^....@.,x.8u.Mr..C;G........=..=.zxw......G..\|N..=..D.w....q..L@..SP4'r.....H.y.jf........H...^.s....@.,.<q......[........tz.rg .8q.3S9......;.wB.p......i.1B...@qBA(. ......auIADH).........>t...9....G.......\|J.\.Xh.......o...>..c7..}..v..

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/ul_cb/match?publisher_dsp_id=38&external_user_id=k-JDqcOWinzjvINIfCWPvjpcHWrNGsLQAsjYgIjg
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	146698
Entropy (8bit):	7.9893574269767385
Encrypted:	false
SSDEEP:	3072:tvD5mEaw95Yc/IFaNJgRdlE13ogtXlhgklXJTF11WurctO66DN:tL3951dJgRdlEJf1malFvm6R
MD5:	DC956CC67F2F7BFFB8C57BFD527D4A31
SHA1:	756D85F00A8D7EA1A7297356C16F080C2E5A19C9
SHA-256:	8E68EFB17871735482935EF62058EEE0330D7B5B227B1D13C123E1E142917069
SHA-512:	CB3D951BA1E3889613DDC8EBCB449EF3F9F4387FFAE6401DE4527E5DDFD73CAEDC43D0D149F2B9FD07752FDB30791DE2C3B8102D3C35063EA27DF958D00759B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx..y.fyV..9....,.R.]......0.0..f.#.@...2....X$.H..N....(..HQ.).d)Rb...!........,.tO..{-o....r..-'..[5...Lw...T.....>...9..f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c..3f.1c.W,....3.p<..O}..g..I..A.O.z+.x#..1.}.O:..}.....E?...M..d....}..7^{..w.'...'.9.......!..4m.k....ST......s.;..4....{.;6.._..{O....x.a. 3f......{........j}...a..@...RU..@......WJ.S.!>@....r..=iwNX..16......V..!.gB...c{MDO.s.z.\|<.1...=.<...c...s..1.e......{../.....k.(..2.[S.R.ywF..4.C......u.....P..iV......j.I.-U..:.../......A.5-....E..FDN...v.....I....p.9.X.i..s...iv.m...G.\h.....n......`. 3f\ .y.Ko{.....O...m....2..a.Hd..b...&D...".cKI....h..Gp(.S.Y.....dJ).p..8..\|.R....B.....U.9.G.....asF..E)..u....-W....B.].... O..t}x.D.\=WK....7..(..=.~4_.g0.O....q.x........._....j.........D...j.qN.M.....2. .U.MCE.c.Z.EU....Pv..q...FD

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.314128390879881
Encrypted:	false
SSDEEP:	3:2erWeKBRk35KLWAzRERxzfRX/H4Y3:29M3tRdfZN
MD5:	83A02FE42F8C2198E7C608AFF363AA49
SHA1:	7B20AE1014450492CC708E3C9DC7522B05C2EFFD
SHA-256:	E64954DC34E12C7190CC2338A54B07644FF0F102AA71CC7209BCBB49C3009F7C
SHA-512:	CD381A8C725C892E9A68D713254A31EA9ED25A39B212A5DC52D4BA2655F38AFDDB32519F03360F32A59D8E7701AF6C2AD0030A6AA760C3DE87C75063F5B65F54
Malicious:	false
Reputation:	low
Preview:	event: message.data: {"response":{"status_code":200,"body":""}}..

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 200x200, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	814
Entropy (8bit):	7.693356962663161
Encrypted:	false
SSDEEP:	24:Ej5PkvtARQTpqNqpKnLFcM9KdZ3Sq8Bti0D:ttAR0pqZnLuMeZ3Sbf
MD5:	BA8AD0A1E28A533C52AED08BFA2D68F7
SHA1:	8E8FDAF514F47C7295FA0763C19F2D67A11D027C
SHA-256:	61A5F1BBD8E098ECE8529ACC2CDF290D41C451674A2ADCF8D3272CA2F208B6BD
SHA-512:	A4011A4ED4758791F2D253BF27BBD6F33F07105BFB04C1A482EA65EC60A1176E754279FC0D56923FCE6B942972DA2C4A7034DABF4480ECAAAC481D51CC6327E0
Malicious:	false
Reputation:	low
URL:	"https://www.retif.eu/media/catalog/product/1/6/16186_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200"
Preview:	RIFF&...WEBPVP8 ....0........>m6.I$#".".H....gn.o!.<.........0...w...26..xcH.;...{4.?l..?..tG.D...m.>G.-w.s.'...>..j.........t[.g..y=...`.....GV.<Z...!xL..f.#.>7[....'u..piZx..!...f5)>\.Q?D......Ya.:..k...E0.&..".p.^.6. 7.X....U.sh.........~.QU.U.v.6j.3j.FLN.0@.....i....,..G.1&...pa...X..:.J.2;....T....;O....uR@.=1......u<!q..}............Jp.N...}..51...BJ@.?.h..u=......V....&...H.y....,Z.F.".........H.p..c..u..PG_2.B.TfC.O>...B.....?.u..../.m.F.<...a.PT..F..G..mL4.~`.p........d...$J\v....!..4..V..f..pu....f.u.bL.w........Vn...4y...H!.DU^.2.V;.'595C.i...-..37......VXr.o..@Cg.;R.A...U...X.........H........3R..Z..42.Q....;.M.}.....,}..c.>..>..X.....\|j.VM.D....4.2.....y....}I.}.j.r...]..S.H..",..k..........z..P..}...P.P....\|....G...p?..4.*X[N~F.<...&,..rc.3...J....B...

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	74998
Entropy (8bit):	5.322679158854271
Encrypted:	false
SSDEEP:	1536:8o+VvaCSHBmxVWuooMA53YmOnxqgqot3cLSDyfKTIcG5iE3LGOhn/SNlFEMDw:8bxVWuooYmjodLG1GQ2FEMs
MD5:	43AB36621975858DAE69FDA3F64416AF
SHA1:	0234F504A6D8EF927298D6DCAF01AB1B1DB2EA19
SHA-256:	C01BF65F918D14AB3795DE05F37DB16CE8350FA251607F28A0673758C0E444D2
SHA-512:	6FC752820F26AF31D6A9F1064CA966C1611055D6E604B57A33F8AAF53EA28259DC5EAA25F99D2239C6323EAC45F21C56C15BDE5F4A31904D5127299923408B90
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_iadvize_core_livechat_app=self.webpackChunk_iadvize_core_livechat_app\|\|[]).push([["targeting"],{66963:(e,t,n)=>{var i=n(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=i(n(24982)),r=n(36167),o=i(n(46856)),l=i(n(86786));t.default=(e,t,n)=>{const i=(0,r.getEventManager)();i.on("targeting.bundle.initialized",(()=>{(0,o.default)(e,t,n)})),(0,a.default)((()=>{(0,l.default)(),i.emit("targeting.bundle.initialized")}))()}},86786:(e,t,n)=>{var i=n(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var a=n(36167),r=i(n(39556)),o=i(n(66985)),l=i(n(6298)),s=n(27642);t.default=()=>{const e=(0,a.getIdz)();(0,s.startPerformanceMeasure)(s.PerformanceMarks.TARGETING_LOAD),(0,r.default)(window,e),e.Store=l.default,e.JSONStore=(0,o.default)()}},36350:(e,t,n)=>{Object.defineProperty(t,"__esModule",{value:!0}),t.default=void 0;var i=n(21970);function a(e){return(0,i.isSupported)()&&e.video.available}const r={chat:e=>e.chat.available,ca

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 266x260, components 3
Category:	dropped
Size (bytes):	11393
Entropy (8bit):	7.8482903375079225
Encrypted:	false
SSDEEP:	192:SFJQYhh1agrA9C8q/InwAouo3xcg/KWf2jVP3ybh03hbnE8Lj:SFJbhhDD8SI96cI76tsh068j
MD5:	B928C6AFC5232082F2583A1EE19F3417
SHA1:	F4B62FF0022F1B58FFBD233BA1AD5755A1A4DE12
SHA-256:	0988962E24BE442DC3A7DE9837845CAB8E25A68402C1D9C43890F5DA3160A6E0
SHA-512:	359B11CA6097BB68A506386DE5F873DAA45ACF665CB5D556724E7E4A9BBB86B2AA6E608065C447A1BB976FE5199C10E744167C2A3138108C64F1B7DF8714748D
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|....C............................."......".$...$.6&&6>424>LDDL_Z_\|\|............".........................................................................................b.d.8u.}.W..m}/......H"..&.jh........2C...b.>+.#.K......A..........$c...... 3Uw.P.....f2j..q./.0`....`..q..`.....p...A.f0..{.........W.S....Z./.C.y..=U_c.S..m.>....X.Wth..EVW...,P.....z.+...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1540), with no line terminators
Category:	downloaded
Size (bytes):	1540
Entropy (8bit):	5.786592273207308
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccARals+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1Z/k:VKEcjKo7LmvtUjPKtX7+1vQZ/rLrwUnG
MD5:	A5A583C1D93FCC44A4F97FD61C0FB5EF
SHA1:	EE6B0F4788236740C13E0D36E7B3A6F9FB8821EC
SHA-256:	F9B9837B102E00890AF92F1FF49FBEF8CCEBA71F979888BB9D41EC1D26286EFF
SHA-512:	9923CEA8CB119D1DE75DE8D9362EADDCCE9242D84384469E3E9BDD0FC60FD235C904E57CC4E7BA769C1C8986804DEEE3AC5D6EA24B2EF725BB84904B73E0D925
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=executeRecaptchaLoadCallbacks&render=6LcJeKUZAAAAABbAdczVQFJWD99woXujv8xvtjLA
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcJeKUZAAAAABbAdczVQFJWD99woXujv8xvtjLA');(cfg['onload']=cfg['onload']\|\|[]).push('executeRecaptchaLoadCallbacks');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.get

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 10:16:18.308387041 CEST	192.168.2.4	1.1.1.1	0x13e2	Standard query (0)	retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:18.308564901 CEST	192.168.2.4	1.1.1.1	0xa002	Standard query (0)	retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:16:19.443187952 CEST	192.168.2.4	1.1.1.1	0xe28e	Standard query (0)	www.retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.443345070 CEST	192.168.2.4	1.1.1.1	0x8682	Standard query (0)	www.retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:16:20.323508978 CEST	192.168.2.4	1.1.1.1	0xe11f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:20.323928118 CEST	192.168.2.4	1.1.1.1	0x612c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:22.519057035 CEST	192.168.2.4	1.1.1.1	0x7b98	Standard query (0)	www.retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:22.519509077 CEST	192.168.2.4	1.1.1.1	0x3fac	Standard query (0)	www.retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:16:23.468998909 CEST	192.168.2.4	1.1.1.1	0x58a5	Standard query (0)	sourcetrap.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:23.469198942 CEST	192.168.2.4	1.1.1.1	0xdcc	Standard query (0)	sourcetrap.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:25.249219894 CEST	192.168.2.4	1.1.1.1	0xd529	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:25.249365091 CEST	192.168.2.4	1.1.1.1	0x64ae	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:25.250642061 CEST	192.168.2.4	1.1.1.1	0xf48a	Standard query (0)	sourcetrap.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:25.250785112 CEST	192.168.2.4	1.1.1.1	0x821f	Standard query (0)	sourcetrap.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:28.834702015 CEST	192.168.2.4	1.1.1.1	0x373a	Standard query (0)	t.retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:28.835383892 CEST	192.168.2.4	1.1.1.1	0xaebe	Standard query (0)	t.retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:16:32.145011902 CEST	192.168.2.4	1.1.1.1	0x6524	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.145011902 CEST	192.168.2.4	1.1.1.1	0x59ed	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:32.154297113 CEST	192.168.2.4	1.1.1.1	0x4d76	Standard query (0)	t.retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.154659033 CEST	192.168.2.4	1.1.1.1	0xb6af	Standard query (0)	t.retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:16:32.216772079 CEST	192.168.2.4	1.1.1.1	0x2f43	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.216772079 CEST	192.168.2.4	1.1.1.1	0xe190	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:34.404844999 CEST	192.168.2.4	1.1.1.1	0x8f72	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:34.405046940 CEST	192.168.2.4	1.1.1.1	0xc27	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:40.523972034 CEST	192.168.2.4	1.1.1.1	0x2daa	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.524210930 CEST	192.168.2.4	1.1.1.1	0x9e76	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:40.525393963 CEST	192.168.2.4	1.1.1.1	0xc4b6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.525583982 CEST	192.168.2.4	1.1.1.1	0x7a6b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:40.529089928 CEST	192.168.2.4	1.1.1.1	0x545f	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.529295921 CEST	192.168.2.4	1.1.1.1	0xcf7a	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 25, 2024 10:16:40.541728020 CEST	192.168.2.4	1.1.1.1	0x5e25	Standard query (0)	halc.iadvize.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.541965961 CEST	192.168.2.4	1.1.1.1	0xeee2	Standard query (0)	halc.iadvize.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:42.233831882 CEST	192.168.2.4	1.1.1.1	0xc3f0	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.234375954 CEST	192.168.2.4	1.1.1.1	0xfff2	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:42.434694052 CEST	192.168.2.4	1.1.1.1	0x90dc	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.434919119 CEST	192.168.2.4	1.1.1.1	0x105e	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:42.459598064 CEST	192.168.2.4	1.1.1.1	0x8cbe	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.459781885 CEST	192.168.2.4	1.1.1.1	0x72fd	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Oct 25, 2024 10:16:42.463640928 CEST	192.168.2.4	1.1.1.1	0x9b9e	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.464091063 CEST	192.168.2.4	1.1.1.1	0xdd8c	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:42.471491098 CEST	192.168.2.4	1.1.1.1	0xd4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.471621990 CEST	192.168.2.4	1.1.1.1	0x924f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:43.257009029 CEST	192.168.2.4	1.1.1.1	0xb1e4	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.257150888 CEST	192.168.2.4	1.1.1.1	0x8667	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Oct 25, 2024 10:16:43.405334949 CEST	192.168.2.4	1.1.1.1	0xbeae	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.405534029 CEST	192.168.2.4	1.1.1.1	0xbfea	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:43.786961079 CEST	192.168.2.4	1.1.1.1	0x5279	Standard query (0)	halc.iadvize.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.787456989 CEST	192.168.2.4	1.1.1.1	0xee2a	Standard query (0)	halc.iadvize.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:44.189172029 CEST	192.168.2.4	1.1.1.1	0x5314	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:44.189331055 CEST	192.168.2.4	1.1.1.1	0xd98a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:46.281970978 CEST	192.168.2.4	1.1.1.1	0x3a27	Standard query (0)	track.effiliation.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:46.282150030 CEST	192.168.2.4	1.1.1.1	0x94a	Standard query (0)	track.effiliation.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:47.229419947 CEST	192.168.2.4	1.1.1.1	0x964e	Standard query (0)	track.effiliation.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:47.229708910 CEST	192.168.2.4	1.1.1.1	0xa3f6	Standard query (0)	track.effiliation.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:52.288412094 CEST	192.168.2.4	1.1.1.1	0xdca5	Standard query (0)	api.iadvize.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:52.288719893 CEST	192.168.2.4	1.1.1.1	0xac36	Standard query (0)	api.iadvize.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:57.221050024 CEST	192.168.2.4	1.1.1.1	0x50fb	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:57.221275091 CEST	192.168.2.4	1.1.1.1	0x7a62	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:57.243009090 CEST	192.168.2.4	1.1.1.1	0x3c72	Standard query (0)	privacyportal-eu.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:57.243232012 CEST	192.168.2.4	1.1.1.1	0x12d7	Standard query (0)	privacyportal-eu.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:58.891417027 CEST	192.168.2.4	1.1.1.1	0x437	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:58.891906977 CEST	192.168.2.4	1.1.1.1	0x4e14	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:58.913521051 CEST	192.168.2.4	1.1.1.1	0x4b7	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:58.913602114 CEST	192.168.2.4	1.1.1.1	0xab44	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 25, 2024 10:16:59.548508883 CEST	192.168.2.4	1.1.1.1	0x936b	Standard query (0)	privacyportal-eu.onetrust.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:59.549037933 CEST	192.168.2.4	1.1.1.1	0xaa95	Standard query (0)	privacyportal-eu.onetrust.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:00.714284897 CEST	192.168.2.4	1.1.1.1	0x8686	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:00.715101004 CEST	192.168.2.4	1.1.1.1	0xacb9	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:01.802880049 CEST	192.168.2.4	1.1.1.1	0x6d63	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:01.803409100 CEST	192.168.2.4	1.1.1.1	0x1ed4	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:13.200642109 CEST	192.168.2.4	1.1.1.1	0x3da	Standard query (0)	dynamic.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:13.200747013 CEST	192.168.2.4	1.1.1.1	0xfd7	Standard query (0)	dynamic.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:17.175189018 CEST	192.168.2.4	1.1.1.1	0xb487	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:17.176052094 CEST	192.168.2.4	1.1.1.1	0xccab	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:20.707870960 CEST	192.168.2.4	1.1.1.1	0x5699	Standard query (0)	dynamic.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:20.708270073 CEST	192.168.2.4	1.1.1.1	0x18fe	Standard query (0)	dynamic.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:20.710540056 CEST	192.168.2.4	1.1.1.1	0x59c5	Standard query (0)	sslwidget.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:20.710741043 CEST	192.168.2.4	1.1.1.1	0x3ab3	Standard query (0)	sslwidget.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.529207945 CEST	192.168.2.4	1.1.1.1	0x52a	Standard query (0)	fledge.eu.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.529593945 CEST	192.168.2.4	1.1.1.1	0x11dd	Standard query (0)	fledge.eu.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.530242920 CEST	192.168.2.4	1.1.1.1	0xb319	Standard query (0)	measurement-api.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.530667067 CEST	192.168.2.4	1.1.1.1	0x8eb	Standard query (0)	measurement-api.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.531832933 CEST	192.168.2.4	1.1.1.1	0x1d7	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.531981945 CEST	192.168.2.4	1.1.1.1	0x6b0d	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.532322884 CEST	192.168.2.4	1.1.1.1	0xf921	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.532680988 CEST	192.168.2.4	1.1.1.1	0xc347	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.533262968 CEST	192.168.2.4	1.1.1.1	0xa84a	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.533684015 CEST	192.168.2.4	1.1.1.1	0xacdb	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.534327030 CEST	192.168.2.4	1.1.1.1	0x220c	Standard query (0)	partner.mediawallahscript.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.534512997 CEST	192.168.2.4	1.1.1.1	0xc1b7	Standard query (0)	partner.mediawallahscript.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.534934044 CEST	192.168.2.4	1.1.1.1	0x2f90	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.535207033 CEST	192.168.2.4	1.1.1.1	0x33e0	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.552583933 CEST	192.168.2.4	1.1.1.1	0x39d6	Standard query (0)	sync-t1.taboola.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.552727938 CEST	192.168.2.4	1.1.1.1	0x2bb7	Standard query (0)	sync-t1.taboola.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:22.565180063 CEST	192.168.2.4	1.1.1.1	0x5b44	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.565373898 CEST	192.168.2.4	1.1.1.1	0xf768	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.634440899 CEST	192.168.2.4	1.1.1.1	0xbf80	Standard query (0)	measurement-api.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.634596109 CEST	192.168.2.4	1.1.1.1	0x303	Standard query (0)	measurement-api.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.866728067 CEST	192.168.2.4	1.1.1.1	0x1b44	Standard query (0)	www.retif.eu	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.866976976 CEST	192.168.2.4	1.1.1.1	0x62b3	Standard query (0)	www.retif.eu	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.867480993 CEST	192.168.2.4	1.1.1.1	0xeb40	Standard query (0)	sslwidget.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.867611885 CEST	192.168.2.4	1.1.1.1	0xcc9b	Standard query (0)	sslwidget.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.868030071 CEST	192.168.2.4	1.1.1.1	0x5752	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.868586063 CEST	192.168.2.4	1.1.1.1	0x3690	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.872565985 CEST	192.168.2.4	1.1.1.1	0x2d53	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.873301029 CEST	192.168.2.4	1.1.1.1	0xeaf5	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.911437035 CEST	192.168.2.4	1.1.1.1	0xe57c	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.911601067 CEST	192.168.2.4	1.1.1.1	0x7d49	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.929315090 CEST	192.168.2.4	1.1.1.1	0x11e	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.929488897 CEST	192.168.2.4	1.1.1.1	0x4adf	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.947459936 CEST	192.168.2.4	1.1.1.1	0x7db2	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.947635889 CEST	192.168.2.4	1.1.1.1	0xa511	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.949474096 CEST	192.168.2.4	1.1.1.1	0x8d6e	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.950321913 CEST	192.168.2.4	1.1.1.1	0xe81c	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:23.951184988 CEST	192.168.2.4	1.1.1.1	0x77cb	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.951373100 CEST	192.168.2.4	1.1.1.1	0x8c53	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:24.066953897 CEST	192.168.2.4	1.1.1.1	0xefdd	Standard query (0)	measurement-api.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.067240000 CEST	192.168.2.4	1.1.1.1	0x77fe	Standard query (0)	measurement-api.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:24.068051100 CEST	192.168.2.4	1.1.1.1	0x579b	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.068492889 CEST	192.168.2.4	1.1.1.1	0xd69d	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:24.119230032 CEST	192.168.2.4	1.1.1.1	0xb779	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.119335890 CEST	192.168.2.4	1.1.1.1	0x69b5	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:24.120081902 CEST	192.168.2.4	1.1.1.1	0xd2e1	Standard query (0)	visitor.omnitagjs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.120316029 CEST	192.168.2.4	1.1.1.1	0x122d	Standard query (0)	visitor.omnitagjs.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:24.170974016 CEST	192.168.2.4	1.1.1.1	0x7b09	Standard query (0)	sync-t1.taboola.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.171386003 CEST	192.168.2.4	1.1.1.1	0xd165	Standard query (0)	sync-t1.taboola.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:25.397700071 CEST	192.168.2.4	1.1.1.1	0x4725	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.398052931 CEST	192.168.2.4	1.1.1.1	0x676f	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:25.403425932 CEST	192.168.2.4	1.1.1.1	0xc4fb	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.403562069 CEST	192.168.2.4	1.1.1.1	0x7e68	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:25.986179113 CEST	192.168.2.4	1.1.1.1	0x704d	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.986316919 CEST	192.168.2.4	1.1.1.1	0xe203	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:25.987153053 CEST	192.168.2.4	1.1.1.1	0x7638	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.987354040 CEST	192.168.2.4	1.1.1.1	0xd08	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.215614080 CEST	192.168.2.4	1.1.1.1	0xb1a3	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.219949961 CEST	192.168.2.4	1.1.1.1	0x2da8	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.534867048 CEST	192.168.2.4	1.1.1.1	0x8811	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.535248041 CEST	192.168.2.4	1.1.1.1	0xa0a4	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.573781967 CEST	192.168.2.4	1.1.1.1	0xd793	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.574140072 CEST	192.168.2.4	1.1.1.1	0x3e2	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.934324980 CEST	192.168.2.4	1.1.1.1	0x126f	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.934504032 CEST	192.168.2.4	1.1.1.1	0x2813	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.953094006 CEST	192.168.2.4	1.1.1.1	0xa809	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.953260899 CEST	192.168.2.4	1.1.1.1	0xdeb1	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:26.956594944 CEST	192.168.2.4	1.1.1.1	0x121e	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.956774950 CEST	192.168.2.4	1.1.1.1	0x8702	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.100420952 CEST	192.168.2.4	1.1.1.1	0xde49	Standard query (0)	trends.revcontent.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.100635052 CEST	192.168.2.4	1.1.1.1	0xd015	Standard query (0)	trends.revcontent.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.112166882 CEST	192.168.2.4	1.1.1.1	0xf15	Standard query (0)	r.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.112365007 CEST	192.168.2.4	1.1.1.1	0xdba7	Standard query (0)	r.casalemedia.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.130244017 CEST	192.168.2.4	1.1.1.1	0xcbb8	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.130489111 CEST	192.168.2.4	1.1.1.1	0xa734	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.958717108 CEST	192.168.2.4	1.1.1.1	0x15d6	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.959006071 CEST	192.168.2.4	1.1.1.1	0x7f7b	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.963011980 CEST	192.168.2.4	1.1.1.1	0x10bd	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.963419914 CEST	192.168.2.4	1.1.1.1	0xed85	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.971285105 CEST	192.168.2.4	1.1.1.1	0x277	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.971589088 CEST	192.168.2.4	1.1.1.1	0x68fa	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.972301006 CEST	192.168.2.4	1.1.1.1	0x61d8	Standard query (0)	tapestry.tapad.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.973220110 CEST	192.168.2.4	1.1.1.1	0x10f2	Standard query (0)	tapestry.tapad.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:27.981250048 CEST	192.168.2.4	1.1.1.1	0x9ed8	Standard query (0)	criteo-sync.teads.tv	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.981446981 CEST	192.168.2.4	1.1.1.1	0x43e7	Standard query (0)	criteo-sync.teads.tv	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.265861988 CEST	192.168.2.4	1.1.1.1	0x7250	Standard query (0)	criteo-partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.266011953 CEST	192.168.2.4	1.1.1.1	0x12cd	Standard query (0)	criteo-partners.tremorhub.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.379044056 CEST	192.168.2.4	1.1.1.1	0x9e6	Standard query (0)	ade.clmbtech.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.379224062 CEST	192.168.2.4	1.1.1.1	0xfe96	Standard query (0)	ade.clmbtech.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.383186102 CEST	192.168.2.4	1.1.1.1	0xad08	Standard query (0)	ad.tpmn.co.kr	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.383374929 CEST	192.168.2.4	1.1.1.1	0x9a42	Standard query (0)	ad.tpmn.co.kr	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.553884983 CEST	192.168.2.4	1.1.1.1	0xbe3b	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.554039001 CEST	192.168.2.4	1.1.1.1	0x4752	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.900657892 CEST	192.168.2.4	1.1.1.1	0x74ea	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.900826931 CEST	192.168.2.4	1.1.1.1	0x89fb	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:28.926877975 CEST	192.168.2.4	1.1.1.1	0x3361	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.927030087 CEST	192.168.2.4	1.1.1.1	0x2328	Standard query (0)	loadm.exelator.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.072818041 CEST	192.168.2.4	1.1.1.1	0xbd53	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.073268890 CEST	192.168.2.4	1.1.1.1	0x33c0	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.074376106 CEST	192.168.2.4	1.1.1.1	0xebe3	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.074558973 CEST	192.168.2.4	1.1.1.1	0x81e7	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.075716019 CEST	192.168.2.4	1.1.1.1	0xaa23	Standard query (0)	exchange.mediavine.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.076131105 CEST	192.168.2.4	1.1.1.1	0xad1a	Standard query (0)	exchange.mediavine.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.077508926 CEST	192.168.2.4	1.1.1.1	0xa65a	Standard query (0)	sync.outbrain.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.077737093 CEST	192.168.2.4	1.1.1.1	0xa252	Standard query (0)	sync.outbrain.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.078816891 CEST	192.168.2.4	1.1.1.1	0x1509	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.079108000 CEST	192.168.2.4	1.1.1.1	0x3007	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.107400894 CEST	192.168.2.4	1.1.1.1	0xf903	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.107400894 CEST	192.168.2.4	1.1.1.1	0x51d7	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.108613014 CEST	192.168.2.4	1.1.1.1	0x9614	Standard query (0)	trends.revcontent.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.109173059 CEST	192.168.2.4	1.1.1.1	0xcdc4	Standard query (0)	trends.revcontent.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.189019918 CEST	192.168.2.4	1.1.1.1	0x1af8	Standard query (0)	tapestry.tapad.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.189210892 CEST	192.168.2.4	1.1.1.1	0x5d1c	Standard query (0)	tapestry.tapad.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.210356951 CEST	192.168.2.4	1.1.1.1	0xc140	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.210695028 CEST	192.168.2.4	1.1.1.1	0x4f3d	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:29.210864067 CEST	192.168.2.4	1.1.1.1	0xb99d	Standard query (0)	s.salecycle.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.211050034 CEST	192.168.2.4	1.1.1.1	0xd48d	Standard query (0)	s.salecycle.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:30.346777916 CEST	192.168.2.4	1.1.1.1	0xe1f6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.347207069 CEST	192.168.2.4	1.1.1.1	0xca36	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 10:17:30.426765919 CEST	192.168.2.4	1.1.1.1	0x8939	Standard query (0)	s.salecycle.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.426970959 CEST	192.168.2.4	1.1.1.1	0x38e5	Standard query (0)	s.salecycle.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:30.490340948 CEST	192.168.2.4	1.1.1.1	0xf437	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.490590096 CEST	192.168.2.4	1.1.1.1	0x6403	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:30.494232893 CEST	192.168.2.4	1.1.1.1	0x4ac5	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.494390965 CEST	192.168.2.4	1.1.1.1	0x15d9	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:31.460979939 CEST	192.168.2.4	1.1.1.1	0x22ab	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:31.461385965 CEST	192.168.2.4	1.1.1.1	0x9445	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:32.196887016 CEST	192.168.2.4	1.1.1.1	0x2ded	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:32.197042942 CEST	192.168.2.4	1.1.1.1	0x1cca	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Oct 25, 2024 10:17:34.158519030 CEST	192.168.2.4	1.1.1.1	0xf1f1	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.158895969 CEST	192.168.2.4	1.1.1.1	0xd879	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 10:16:18.346128941 CEST	1.1.1.1	192.168.2.4	0x13e2	No error (0)	retif.eu		151.101.1.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:18.346128941 CEST	1.1.1.1	192.168.2.4	0x13e2	No error (0)	retif.eu		151.101.129.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:18.346128941 CEST	1.1.1.1	192.168.2.4	0x13e2	No error (0)	retif.eu		151.101.65.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:18.346128941 CEST	1.1.1.1	192.168.2.4	0x13e2	No error (0)	retif.eu		151.101.193.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.471512079 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:19.471512079 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	prod.magentocloud.map.fastly.net		151.101.1.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.471512079 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	prod.magentocloud.map.fastly.net		151.101.65.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.471512079 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	prod.magentocloud.map.fastly.net		151.101.129.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.471512079 CEST	1.1.1.1	192.168.2.4	0xe28e	No error (0)	prod.magentocloud.map.fastly.net		151.101.193.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:19.512039900 CEST	1.1.1.1	192.168.2.4	0x8682	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:20.331032038 CEST	1.1.1.1	192.168.2.4	0xe11f	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:20.331502914 CEST	1.1.1.1	192.168.2.4	0x612c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:22.526834965 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:22.526834965 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	prod.magentocloud.map.fastly.net		151.101.1.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:22.526834965 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	prod.magentocloud.map.fastly.net		151.101.129.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:22.526834965 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	prod.magentocloud.map.fastly.net		151.101.193.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:22.526834965 CEST	1.1.1.1	192.168.2.4	0x7b98	No error (0)	prod.magentocloud.map.fastly.net		151.101.65.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:22.538177013 CEST	1.1.1.1	192.168.2.4	0x3fac	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:23.484100103 CEST	1.1.1.1	192.168.2.4	0x58a5	No error (0)	sourcetrap.net		82.202.163.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:25.256702900 CEST	1.1.1.1	192.168.2.4	0x64ae	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:25.256702900 CEST	1.1.1.1	192.168.2.4	0x64ae	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 25, 2024 10:16:25.256702900 CEST	1.1.1.1	192.168.2.4	0x64ae	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 25, 2024 10:16:25.258074045 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:25.258074045 CEST	1.1.1.1	192.168.2.4	0xd529	No error (0)	scontent.xx.fbcdn.net		157.240.27.27	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:25.265913010 CEST	1.1.1.1	192.168.2.4	0xf48a	No error (0)	sourcetrap.net		82.202.163.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:28.852329969 CEST	1.1.1.1	192.168.2.4	0x373a	No error (0)	t.retif.eu		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.152219057 CEST	1.1.1.1	192.168.2.4	0x6524	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:32.152219057 CEST	1.1.1.1	192.168.2.4	0x6524	No error (0)	scontent.xx.fbcdn.net		163.70.128.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.152395964 CEST	1.1.1.1	192.168.2.4	0x59ed	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:32.152395964 CEST	1.1.1.1	192.168.2.4	0x59ed	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 25, 2024 10:16:32.152395964 CEST	1.1.1.1	192.168.2.4	0x59ed	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 25, 2024 10:16:32.202899933 CEST	1.1.1.1	192.168.2.4	0x4d76	No error (0)	t.retif.eu		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.224900961 CEST	1.1.1.1	192.168.2.4	0x2f43	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:32.224900961 CEST	1.1.1.1	192.168.2.4	0x2f43	No error (0)	star-mini.c10r.facebook.com		157.240.247.35	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:32.225090981 CEST	1.1.1.1	192.168.2.4	0xe190	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:34.412630081 CEST	1.1.1.1	192.168.2.4	0x8f72	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:34.412630081 CEST	1.1.1.1	192.168.2.4	0x8f72	No error (0)	star-mini.c10r.facebook.com		157.240.201.35	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:34.413016081 CEST	1.1.1.1	192.168.2.4	0xc27	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:38.236378908 CEST	1.1.1.1	192.168.2.4	0x503e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:38.236378908 CEST	1.1.1.1	192.168.2.4	0x503e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.725516081 CEST	1.1.1.1	192.168.2.4	0xc4b6	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.725534916 CEST	1.1.1.1	192.168.2.4	0x2daa	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.725704908 CEST	1.1.1.1	192.168.2.4	0x545f	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.725704908 CEST	1.1.1.1	192.168.2.4	0x545f	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.725872040 CEST	1.1.1.1	192.168.2.4	0xcf7a	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 25, 2024 10:16:40.726346016 CEST	1.1.1.1	192.168.2.4	0xeee2	No error (0)	halc.iadvize.com	d2eoz69k2i8ht6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:40.726361990 CEST	1.1.1.1	192.168.2.4	0x7a6b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:40.726375103 CEST	1.1.1.1	192.168.2.4	0x5e25	No error (0)	halc.iadvize.com	d2eoz69k2i8ht6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:40.726375103 CEST	1.1.1.1	192.168.2.4	0x5e25	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.88	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.726375103 CEST	1.1.1.1	192.168.2.4	0x5e25	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.726375103 CEST	1.1.1.1	192.168.2.4	0x5e25	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:40.726375103 CEST	1.1.1.1	192.168.2.4	0x5e25	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.241760969 CEST	1.1.1.1	192.168.2.4	0xfff2	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:42.241760969 CEST	1.1.1.1	192.168.2.4	0xfff2	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:42.241848946 CEST	1.1.1.1	192.168.2.4	0xc3f0	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:42.241848946 CEST	1.1.1.1	192.168.2.4	0xc3f0	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:42.241848946 CEST	1.1.1.1	192.168.2.4	0xc3f0	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.442375898 CEST	1.1.1.1	192.168.2.4	0x90dc	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.442375898 CEST	1.1.1.1	192.168.2.4	0x90dc	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.443833113 CEST	1.1.1.1	192.168.2.4	0x105e	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:42.467840910 CEST	1.1.1.1	192.168.2.4	0x72fd	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Oct 25, 2024 10:16:42.468034029 CEST	1.1.1.1	192.168.2.4	0x8cbe	No error (0)	cdn.cookielaw.org		104.18.86.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.468034029 CEST	1.1.1.1	192.168.2.4	0x8cbe	No error (0)	cdn.cookielaw.org		104.18.87.42	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.470913887 CEST	1.1.1.1	192.168.2.4	0x9b9e	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.479029894 CEST	1.1.1.1	192.168.2.4	0xd4	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:42.479827881 CEST	1.1.1.1	192.168.2.4	0x924f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:43.264384031 CEST	1.1.1.1	192.168.2.4	0xb1e4	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.264384031 CEST	1.1.1.1	192.168.2.4	0xb1e4	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.264384031 CEST	1.1.1.1	192.168.2.4	0xb1e4	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.264445066 CEST	1.1.1.1	192.168.2.4	0x8667	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.264445066 CEST	1.1.1.1	192.168.2.4	0x8667	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.412626982 CEST	1.1.1.1	192.168.2.4	0xbfea	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:43.415572882 CEST	1.1.1.1	192.168.2.4	0xbeae	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.415572882 CEST	1.1.1.1	192.168.2.4	0xbeae	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.795922041 CEST	1.1.1.1	192.168.2.4	0xee2a	No error (0)	halc.iadvize.com	d2eoz69k2i8ht6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.797338009 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	halc.iadvize.com	d2eoz69k2i8ht6.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:43.797338009 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.797338009 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.797338009 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.88	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:43.797338009 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	d2eoz69k2i8ht6.cloudfront.net		108.138.26.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:44.196680069 CEST	1.1.1.1	192.168.2.4	0xd98a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:44.196707010 CEST	1.1.1.1	192.168.2.4	0x5314	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:46.290112019 CEST	1.1.1.1	192.168.2.4	0x3a27	No error (0)	track.effiliation.com		34.102.211.201	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:47.237504959 CEST	1.1.1.1	192.168.2.4	0x964e	No error (0)	track.effiliation.com		34.102.211.201	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:51.664238930 CEST	1.1.1.1	192.168.2.4	0x354f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:51.664238930 CEST	1.1.1.1	192.168.2.4	0x354f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:52.296538115 CEST	1.1.1.1	192.168.2.4	0xdca5	No error (0)	api.iadvize.com		3.126.238.44	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:52.296538115 CEST	1.1.1.1	192.168.2.4	0xdca5	No error (0)	api.iadvize.com		52.58.239.222	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:52.296538115 CEST	1.1.1.1	192.168.2.4	0xdca5	No error (0)	api.iadvize.com		3.125.190.130	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:57.229238033 CEST	1.1.1.1	192.168.2.4	0x7a62	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:57.238070965 CEST	1.1.1.1	192.168.2.4	0x50fb	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:57.251265049 CEST	1.1.1.1	192.168.2.4	0x12d7	No error (0)	privacyportal-eu.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 10:16:57.251629114 CEST	1.1.1.1	192.168.2.4	0x3c72	No error (0)	privacyportal-eu.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:57.251629114 CEST	1.1.1.1	192.168.2.4	0x3c72	No error (0)	privacyportal-eu.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:59.214050055 CEST	1.1.1.1	192.168.2.4	0x4e14	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.214050055 CEST	1.1.1.1	192.168.2.4	0x4e14	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.214157104 CEST	1.1.1.1	192.168.2.4	0xab44	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.214848042 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.214848042 CEST	1.1.1.1	192.168.2.4	0x437	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.215712070 CEST	1.1.1.1	192.168.2.4	0x4b7	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:16:59.556519985 CEST	1.1.1.1	192.168.2.4	0x936b	No error (0)	privacyportal-eu.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:59.556519985 CEST	1.1.1.1	192.168.2.4	0x936b	No error (0)	privacyportal-eu.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:16:59.557879925 CEST	1.1.1.1	192.168.2.4	0xaa95	No error (0)	privacyportal-eu.onetrust.com			65	IN (0x0001)	false
Oct 25, 2024 10:17:00.721621037 CEST	1.1.1.1	192.168.2.4	0x8686	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:00.721621037 CEST	1.1.1.1	192.168.2.4	0x8686	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:00.722647905 CEST	1.1.1.1	192.168.2.4	0xacb9	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:00.722647905 CEST	1.1.1.1	192.168.2.4	0xacb9	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:01.810678005 CEST	1.1.1.1	192.168.2.4	0x6d63	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:01.810678005 CEST	1.1.1.1	192.168.2.4	0x6d63	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:01.812207937 CEST	1.1.1.1	192.168.2.4	0x1ed4	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:01.812207937 CEST	1.1.1.1	192.168.2.4	0x1ed4	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:11.164181948 CEST	1.1.1.1	192.168.2.4	0x1346	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:11.164181948 CEST	1.1.1.1	192.168.2.4	0x1346	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:13.208460093 CEST	1.1.1.1	192.168.2.4	0xfd7	No error (0)	dynamic.criteo.com	in-ftd-109.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:13.209580898 CEST	1.1.1.1	192.168.2.4	0x3da	No error (0)	dynamic.criteo.com	in-ftd-109.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:13.209580898 CEST	1.1.1.1	192.168.2.4	0x3da	No error (0)	in-ftd-109.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:15.188251972 CEST	1.1.1.1	192.168.2.4	0x443	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:15.188251972 CEST	1.1.1.1	192.168.2.4	0x443	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:17.183317900 CEST	1.1.1.1	192.168.2.4	0xb487	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:17.183317900 CEST	1.1.1.1	192.168.2.4	0xb487	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:17.183367014 CEST	1.1.1.1	192.168.2.4	0xccab	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:20.716742039 CEST	1.1.1.1	192.168.2.4	0x5699	No error (0)	dynamic.criteo.com	in-ftd-109.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:20.716742039 CEST	1.1.1.1	192.168.2.4	0x5699	No error (0)	in-ftd-109.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:20.716757059 CEST	1.1.1.1	192.168.2.4	0x18fe	No error (0)	dynamic.criteo.com	in-ftd-109.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:20.718317986 CEST	1.1.1.1	192.168.2.4	0x3ab3	No error (0)	sslwidget.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:20.718497038 CEST	1.1.1.1	192.168.2.4	0x59c5	No error (0)	sslwidget.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:20.718497038 CEST	1.1.1.1	192.168.2.4	0x59c5	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.537012100 CEST	1.1.1.1	192.168.2.4	0x52a	No error (0)	fledge.eu.criteo.com	fledge.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.537012100 CEST	1.1.1.1	192.168.2.4	0x52a	No error (0)	fledge.nl3.vip.prod.criteo.com		178.250.1.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.537806034 CEST	1.1.1.1	192.168.2.4	0x11dd	No error (0)	fledge.eu.criteo.com	fledge.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.537816048 CEST	1.1.1.1	192.168.2.4	0x8eb	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.538387060 CEST	1.1.1.1	192.168.2.4	0xb319	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.538387060 CEST	1.1.1.1	192.168.2.4	0xb319	No error (0)	measurement-api.nl3.vip.prod.criteo.com		178.250.1.24	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.539798975 CEST	1.1.1.1	192.168.2.4	0x1d7	No error (0)	cm.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540131092 CEST	1.1.1.1	192.168.2.4	0xf921	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540131092 CEST	1.1.1.1	192.168.2.4	0xf921	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540301085 CEST	1.1.1.1	192.168.2.4	0xc347	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.540635109 CEST	1.1.1.1	192.168.2.4	0xa84a	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542804003 CEST	1.1.1.1	192.168.2.4	0x33e0	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.542818069 CEST	1.1.1.1	192.168.2.4	0x2f90	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.550488949 CEST	1.1.1.1	192.168.2.4	0xc1b7	No error (0)	partner.mediawallahscript.com	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.555237055 CEST	1.1.1.1	192.168.2.4	0x220c	No error (0)	partner.mediawallahscript.com	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.555237055 CEST	1.1.1.1	192.168.2.4	0x220c	No error (0)	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		52.31.55.243	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.555237055 CEST	1.1.1.1	192.168.2.4	0x220c	No error (0)	mw-emptypixel.eba-vdzmhv2f.eu-west-1.elasticbeanstalk.com		54.73.249.0	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.559840918 CEST	1.1.1.1	192.168.2.4	0x2bb7	No error (0)	sync-t1.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.559946060 CEST	1.1.1.1	192.168.2.4	0x39d6	No error (0)	sync-t1.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.559946060 CEST	1.1.1.1	192.168.2.4	0x39d6	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.573092937 CEST	1.1.1.1	192.168.2.4	0xf768	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.574285984 CEST	1.1.1.1	192.168.2.4	0x5b44	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:22.574285984 CEST	1.1.1.1	192.168.2.4	0x5b44	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:22.574285984 CEST	1.1.1.1	192.168.2.4	0x5b44	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.641936064 CEST	1.1.1.1	192.168.2.4	0xbf80	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.641936064 CEST	1.1.1.1	192.168.2.4	0xbf80	No error (0)	measurement-api.nl3.vip.prod.criteo.com		178.250.1.24	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.643157959 CEST	1.1.1.1	192.168.2.4	0x303	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.876132011 CEST	1.1.1.1	192.168.2.4	0x5752	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.876132011 CEST	1.1.1.1	192.168.2.4	0x5752	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.876642942 CEST	1.1.1.1	192.168.2.4	0xeb40	No error (0)	sslwidget.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.876642942 CEST	1.1.1.1	192.168.2.4	0xeb40	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.876846075 CEST	1.1.1.1	192.168.2.4	0xcc9b	No error (0)	sslwidget.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.877535105 CEST	1.1.1.1	192.168.2.4	0x3690	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.881261110 CEST	1.1.1.1	192.168.2.4	0x2d53	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.881261110 CEST	1.1.1.1	192.168.2.4	0x2d53	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.883892059 CEST	1.1.1.1	192.168.2.4	0xeaf5	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Oct 25, 2024 10:17:23.891144037 CEST	1.1.1.1	192.168.2.4	0x62b3	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.913379908 CEST	1.1.1.1	192.168.2.4	0x1b44	No error (0)	www.retif.eu	prod.magentocloud.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.913379908 CEST	1.1.1.1	192.168.2.4	0x1b44	No error (0)	prod.magentocloud.map.fastly.net		151.101.1.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.913379908 CEST	1.1.1.1	192.168.2.4	0x1b44	No error (0)	prod.magentocloud.map.fastly.net		151.101.65.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.913379908 CEST	1.1.1.1	192.168.2.4	0x1b44	No error (0)	prod.magentocloud.map.fastly.net		151.101.129.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.913379908 CEST	1.1.1.1	192.168.2.4	0x1b44	No error (0)	prod.magentocloud.map.fastly.net		151.101.193.124	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.919692993 CEST	1.1.1.1	192.168.2.4	0xe57c	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.919692993 CEST	1.1.1.1	192.168.2.4	0xe57c	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.919708014 CEST	1.1.1.1	192.168.2.4	0x7d49	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.937081099 CEST	1.1.1.1	192.168.2.4	0x11e	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.937438965 CEST	1.1.1.1	192.168.2.4	0x4adf	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		52.214.168.252	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		54.217.60.241	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		52.214.176.63	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		34.250.113.134	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		34.250.40.170	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		63.32.245.173	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		52.31.86.79	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955030918 CEST	1.1.1.1	192.168.2.4	0x7db2	No error (0)	euw-ice.360yield.com		18.202.59.189	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955377102 CEST	1.1.1.1	192.168.2.4	0xa511	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.955377102 CEST	1.1.1.1	192.168.2.4	0xa511	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		3.86.122.147	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		50.17.243.176	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		52.70.166.202	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		54.87.160.28	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		52.44.235.139	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		50.16.112.139	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		98.83.83.213	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.958501101 CEST	1.1.1.1	192.168.2.4	0x8d6e	No error (0)	idaas-ext.cph.liveintent.com		34.197.141.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.959532022 CEST	1.1.1.1	192.168.2.4	0x77cb	No error (0)	contextual.media.net		88.221.168.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:23.959547043 CEST	1.1.1.1	192.168.2.4	0xe81c	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.074637890 CEST	1.1.1.1	192.168.2.4	0xefdd	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.074637890 CEST	1.1.1.1	192.168.2.4	0xefdd	No error (0)	measurement-api.nl3.vip.prod.criteo.com		178.250.1.24	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.075393915 CEST	1.1.1.1	192.168.2.4	0x77fe	No error (0)	measurement-api.criteo.com	measurement-api.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076072931 CEST	1.1.1.1	192.168.2.4	0x579b	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.076519012 CEST	1.1.1.1	192.168.2.4	0xd69d	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.126610041 CEST	1.1.1.1	192.168.2.4	0x69b5	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.126765013 CEST	1.1.1.1	192.168.2.4	0xb779	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.126765013 CEST	1.1.1.1	192.168.2.4	0xb779	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.128104925 CEST	1.1.1.1	192.168.2.4	0x122d	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.128180027 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	visitor.omnitagjs.com	visitor-fra02.omnitagjs.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.128180027 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.153	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.128180027 CEST	1.1.1.1	192.168.2.4	0xd2e1	No error (0)	visitor-fra02.omnitagjs.com		185.255.84.152	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:24.178735018 CEST	1.1.1.1	192.168.2.4	0xd165	No error (0)	sync-t1.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.178941965 CEST	1.1.1.1	192.168.2.4	0x7b09	No error (0)	sync-t1.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:24.178941965 CEST	1.1.1.1	192.168.2.4	0x7b09	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.405456066 CEST	1.1.1.1	192.168.2.4	0x4725	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.405456066 CEST	1.1.1.1	192.168.2.4	0x4725	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.406013012 CEST	1.1.1.1	192.168.2.4	0x676f	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.88.80	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.250.93.70	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.254.132.151	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.241.251.121	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.154.229.188	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.240.122	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.42.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.411204100 CEST	1.1.1.1	192.168.2.4	0xc4fb	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.142.7	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.412728071 CEST	1.1.1.1	192.168.2.4	0x7e68	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.412728071 CEST	1.1.1.1	192.168.2.4	0x7e68	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.412728071 CEST	1.1.1.1	192.168.2.4	0x7e68	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:25.999502897 CEST	1.1.1.1	192.168.2.4	0x704d	No error (0)	exchange.mediavine.com		52.29.5.69	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.999502897 CEST	1.1.1.1	192.168.2.4	0x704d	No error (0)	exchange.mediavine.com		18.197.187.37	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.999502897 CEST	1.1.1.1	192.168.2.4	0x704d	No error (0)	exchange.mediavine.com		3.74.62.171	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:25.999778032 CEST	1.1.1.1	192.168.2.4	0x7638	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.000046968 CEST	1.1.1.1	192.168.2.4	0xd08	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.223334074 CEST	1.1.1.1	192.168.2.4	0xb1a3	No error (0)	thrtle.com		44.218.161.108	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.223334074 CEST	1.1.1.1	192.168.2.4	0xb1a3	No error (0)	thrtle.com		52.22.232.254	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.223334074 CEST	1.1.1.1	192.168.2.4	0xb1a3	No error (0)	thrtle.com		54.86.166.145	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.223334074 CEST	1.1.1.1	192.168.2.4	0xb1a3	No error (0)	thrtle.com		35.172.4.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.223334074 CEST	1.1.1.1	192.168.2.4	0xb1a3	No error (0)	thrtle.com		54.205.223.36	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.542557001 CEST	1.1.1.1	192.168.2.4	0x8811	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.542557001 CEST	1.1.1.1	192.168.2.4	0x8811	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.542557001 CEST	1.1.1.1	192.168.2.4	0x8811	No error (0)	nydc1.outbrain.org		70.42.32.255	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.543416023 CEST	1.1.1.1	192.168.2.4	0xa0a4	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.543416023 CEST	1.1.1.1	192.168.2.4	0xa0a4	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.581921101 CEST	1.1.1.1	192.168.2.4	0xd793	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.581921101 CEST	1.1.1.1	192.168.2.4	0xd793	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.581952095 CEST	1.1.1.1	192.168.2.4	0x3e2	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.942403078 CEST	1.1.1.1	192.168.2.4	0x126f	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.942444086 CEST	1.1.1.1	192.168.2.4	0x2813	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.962210894 CEST	1.1.1.1	192.168.2.4	0xa809	No error (0)	contextual.media.net		88.221.168.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.964700937 CEST	1.1.1.1	192.168.2.4	0x121e	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.964700937 CEST	1.1.1.1	192.168.2.4	0x121e	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.964700937 CEST	1.1.1.1	192.168.2.4	0x121e	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:26.967824936 CEST	1.1.1.1	192.168.2.4	0x8702	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:26.967824936 CEST	1.1.1.1	192.168.2.4	0x8702	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:27.118438005 CEST	1.1.1.1	192.168.2.4	0xde49	No error (0)	trends.revcontent.com		52.215.27.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.118438005 CEST	1.1.1.1	192.168.2.4	0xde49	No error (0)	trends.revcontent.com		34.243.99.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.119645119 CEST	1.1.1.1	192.168.2.4	0xf15	No error (0)	r.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.119645119 CEST	1.1.1.1	192.168.2.4	0xf15	No error (0)	r.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.119996071 CEST	1.1.1.1	192.168.2.4	0xdba7	No error (0)	r.casalemedia.com			65	IN (0x0001)	false
Oct 25, 2024 10:17:27.137563944 CEST	1.1.1.1	192.168.2.4	0xa734	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137563944 CEST	1.1.1.1	192.168.2.4	0xa734	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		52.31.86.79	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		54.76.211.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		52.17.248.236	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		34.250.40.170	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		54.154.78.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		63.32.245.173	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		52.214.168.252	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:27.137666941 CEST	1.1.1.1	192.168.2.4	0xcbb8	No error (0)	euw-ice.360yield.com		54.171.207.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.100696087 CEST	1.1.1.1	192.168.2.4	0x7f7b	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101186991 CEST	1.1.1.1	192.168.2.4	0x9ed8	No error (0)	criteo-sync.teads.tv	criteo-sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101236105 CEST	1.1.1.1	192.168.2.4	0x61d8	No error (0)	tapestry.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101327896 CEST	1.1.1.1	192.168.2.4	0x43e7	No error (0)	criteo-sync.teads.tv	criteo-sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101598978 CEST	1.1.1.1	192.168.2.4	0x15d6	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101598978 CEST	1.1.1.1	192.168.2.4	0x15d6	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.101818085 CEST	1.1.1.1	192.168.2.4	0xed85	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.102212906 CEST	1.1.1.1	192.168.2.4	0x277	No error (0)	s.ad.smaato.net		13.32.27.65	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.102212906 CEST	1.1.1.1	192.168.2.4	0x277	No error (0)	s.ad.smaato.net		13.32.27.108	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.102212906 CEST	1.1.1.1	192.168.2.4	0x277	No error (0)	s.ad.smaato.net		13.32.27.67	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.102212906 CEST	1.1.1.1	192.168.2.4	0x277	No error (0)	s.ad.smaato.net		13.32.27.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.103302002 CEST	1.1.1.1	192.168.2.4	0x10bd	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	criteo-partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		23.22.188.59	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.157.126.247	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.66.138	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.159.177.233	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.203.22.141	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.200.50.106	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.192.53.197	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273288012 CEST	1.1.1.1	192.168.2.4	0x7250	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.88.180	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.273957014 CEST	1.1.1.1	192.168.2.4	0x12cd	No error (0)	criteo-partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.387279987 CEST	1.1.1.1	192.168.2.4	0x9e6	No error (0)	ade.clmbtech.com	ade.clmbtech.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.387685061 CEST	1.1.1.1	192.168.2.4	0xfe96	No error (0)	ade.clmbtech.com	ade.clmbtech.com-v2.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.394800901 CEST	1.1.1.1	192.168.2.4	0xad08	No error (0)	ad.tpmn.co.kr	adgcp.tpmn.co.kr		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.394800901 CEST	1.1.1.1	192.168.2.4	0xad08	No error (0)	adgcp.tpmn.co.kr		34.102.166.132	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.403004885 CEST	1.1.1.1	192.168.2.4	0x9a42	No error (0)	ad.tpmn.co.kr	adgcp.tpmn.co.kr		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.561105013 CEST	1.1.1.1	192.168.2.4	0xbe3b	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.561254978 CEST	1.1.1.1	192.168.2.4	0x4752	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.908236980 CEST	1.1.1.1	192.168.2.4	0x89fb	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.908390045 CEST	1.1.1.1	192.168.2.4	0x74ea	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.908390045 CEST	1.1.1.1	192.168.2.4	0x74ea	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.908390045 CEST	1.1.1.1	192.168.2.4	0x74ea	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.936933994 CEST	1.1.1.1	192.168.2.4	0x3361	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.936933994 CEST	1.1.1.1	192.168.2.4	0x3361	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.936933994 CEST	1.1.1.1	192.168.2.4	0x3361	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.936933994 CEST	1.1.1.1	192.168.2.4	0x3361	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:28.937278986 CEST	1.1.1.1	192.168.2.4	0x2328	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.937278986 CEST	1.1.1.1	192.168.2.4	0x2328	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:28.937278986 CEST	1.1.1.1	192.168.2.4	0x2328	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.082993984 CEST	1.1.1.1	192.168.2.4	0x81e7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.082993984 CEST	1.1.1.1	192.168.2.4	0x81e7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.082993984 CEST	1.1.1.1	192.168.2.4	0x81e7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.246.111.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.35.71.243	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.216.81.134	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.208.241.210	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.241.251.121	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.221.135	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.166.1	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083007097 CEST	1.1.1.1	192.168.2.4	0xebe3	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.42.29	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083195925 CEST	1.1.1.1	192.168.2.4	0xbd53	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083930016 CEST	1.1.1.1	192.168.2.4	0xaa23	No error (0)	exchange.mediavine.com		3.74.62.171	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083930016 CEST	1.1.1.1	192.168.2.4	0xaa23	No error (0)	exchange.mediavine.com		52.29.5.69	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.083930016 CEST	1.1.1.1	192.168.2.4	0xaa23	No error (0)	exchange.mediavine.com		18.197.187.37	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.084880114 CEST	1.1.1.1	192.168.2.4	0xa65a	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.084880114 CEST	1.1.1.1	192.168.2.4	0xa65a	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.084880114 CEST	1.1.1.1	192.168.2.4	0xa65a	No error (0)	nydc1.outbrain.org		64.202.112.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.084997892 CEST	1.1.1.1	192.168.2.4	0xa252	No error (0)	sync.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.084997892 CEST	1.1.1.1	192.168.2.4	0xa252	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.086949110 CEST	1.1.1.1	192.168.2.4	0x1509	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.086949110 CEST	1.1.1.1	192.168.2.4	0x1509	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.087735891 CEST	1.1.1.1	192.168.2.4	0x3007	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.091497898 CEST	1.1.1.1	192.168.2.4	0x33c0	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.115355015 CEST	1.1.1.1	192.168.2.4	0xf903	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.115355015 CEST	1.1.1.1	192.168.2.4	0xf903	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.115355015 CEST	1.1.1.1	192.168.2.4	0xf903	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.115387917 CEST	1.1.1.1	192.168.2.4	0x51d7	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.115387917 CEST	1.1.1.1	192.168.2.4	0x51d7	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.125713110 CEST	1.1.1.1	192.168.2.4	0x9614	No error (0)	trends.revcontent.com		34.243.99.253	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.125713110 CEST	1.1.1.1	192.168.2.4	0x9614	No error (0)	trends.revcontent.com		52.215.27.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.197386026 CEST	1.1.1.1	192.168.2.4	0x1af8	No error (0)	tapestry.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217443943 CEST	1.1.1.1	192.168.2.4	0x9e5f	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217443943 CEST	1.1.1.1	192.168.2.4	0x9e5f	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217443943 CEST	1.1.1.1	192.168.2.4	0x9e5f	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217758894 CEST	1.1.1.1	192.168.2.4	0xc140	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217758894 CEST	1.1.1.1	192.168.2.4	0xc140	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217758894 CEST	1.1.1.1	192.168.2.4	0xc140	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217758894 CEST	1.1.1.1	192.168.2.4	0xc140	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217758894 CEST	1.1.1.1	192.168.2.4	0xc140	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:29.217946053 CEST	1.1.1.1	192.168.2.4	0x4f3d	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:29.218569994 CEST	1.1.1.1	192.168.2.4	0xb99d	No error (0)	s.salecycle.com		52.222.249.7	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.354612112 CEST	1.1.1.1	192.168.2.4	0xe1f6	No error (0)	googleads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.354970932 CEST	1.1.1.1	192.168.2.4	0xca36	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 10:17:30.435386896 CEST	1.1.1.1	192.168.2.4	0x8939	No error (0)	s.salecycle.com		52.222.249.7	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.436569929 CEST	1.1.1.1	192.168.2.4	0xdc9d	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:30.436569929 CEST	1.1.1.1	192.168.2.4	0xdc9d	No error (0)	ax-0001.ax-dc-msedge.net		150.171.29.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.436569929 CEST	1.1.1.1	192.168.2.4	0xdc9d	No error (0)	ax-0001.ax-dc-msedge.net		150.171.30.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.499293089 CEST	1.1.1.1	192.168.2.4	0xf437	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.499293089 CEST	1.1.1.1	192.168.2.4	0xf437	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.499293089 CEST	1.1.1.1	192.168.2.4	0xf437	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.499293089 CEST	1.1.1.1	192.168.2.4	0xf437	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.501351118 CEST	1.1.1.1	192.168.2.4	0x4ac5	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:30.501351118 CEST	1.1.1.1	192.168.2.4	0x4ac5	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.501351118 CEST	1.1.1.1	192.168.2.4	0x4ac5	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.501351118 CEST	1.1.1.1	192.168.2.4	0x4ac5	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.501351118 CEST	1.1.1.1	192.168.2.4	0x4ac5	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:30.502180099 CEST	1.1.1.1	192.168.2.4	0x15d9	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468252897 CEST	1.1.1.1	192.168.2.4	0x22ab	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468252897 CEST	1.1.1.1	192.168.2.4	0x22ab	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		99.81.126.203	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468252897 CEST	1.1.1.1	192.168.2.4	0x22ab	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		176.34.85.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468252897 CEST	1.1.1.1	192.168.2.4	0x22ab	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.251.58.26	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468252897 CEST	1.1.1.1	192.168.2.4	0x22ab	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.252.97.142	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:31.468636990 CEST	1.1.1.1	192.168.2.4	0x9445	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:32.205002069 CEST	1.1.1.1	192.168.2.4	0x2ded	No error (0)	script.hotjar.com		18.245.253.79	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:32.205002069 CEST	1.1.1.1	192.168.2.4	0x2ded	No error (0)	script.hotjar.com		18.245.253.99	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:32.205002069 CEST	1.1.1.1	192.168.2.4	0x2ded	No error (0)	script.hotjar.com		18.245.253.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:32.205002069 CEST	1.1.1.1	192.168.2.4	0x2ded	No error (0)	script.hotjar.com		18.245.253.48	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:32.385698080 CEST	1.1.1.1	192.168.2.4	0x6ca6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:32.385698080 CEST	1.1.1.1	192.168.2.4	0x6ca6	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:17:32.385698080 CEST	1.1.1.1	192.168.2.4	0x6ca6	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		52.208.46.191	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		52.208.224.133	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		52.19.175.37	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		52.210.72.167	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		34.241.33.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		52.208.252.239	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:17:34.166698933 CEST	1.1.1.1	192.168.2.4	0xf1f1	No error (0)	match.prod.bidr.io		34.250.144.175	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:19 UTC	651	OUT	GET / HTTP/1.1 Host: retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:19 UTC	121	IN	HTTP/1.1 302 Found Connection: close Content-Length: 0 Cache-Control: max-age=0, must-revalidate, no-cache, no-store
2024-10-25 08:16:19 UTC	3985	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:19 UTC	390	IN	Data Raw: 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 62 66 31 36 32 65 64 64 30 62 66 36 39 31 36 36 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 62 66 31 36 32 65 64 64 30 62 66 36 39 31 36 36 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 38 3a 31 36 3a 31 39 20 47 4d 54 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 70 61 72 2d 6c 66 70 67 31 39 36 30 30 35 33 2d 50 41 52 2c 20 63 61 63 68 65 2d 64 66 77 2d 6b 64 61 6c 32 31 32 30 31 31 36 2d 44 46 57 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d Data Ascii: X-Platform-Server: i-0bf162edd0bf69166X-Platform-Server: i-0bf162edd0bf69166X-Xss-Protection: 1; mode=blockAccept-Ranges: bytesDate: Fri, 25 Oct 2024 08:16:19 GMTX-Served-By: cache-par-lfpg1960053-PAR, cache-dfw-kdal2120116-DFWX-Cache: MISS, M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:20 UTC	707	OUT	GET / HTTP/1.1 Host: www.retif.eu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:21 UTC	61	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1484587
2024-10-25 08:16:21 UTC	4059	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:21 UTC	213	IN	Data Raw: 58 2d 43 61 63 68 65 3a 20 48 49 54 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 63 68 65 2d 48 69 74 73 3a 20 35 2c 20 30 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 43 6f 6f 6b 69 65 0d 0a 63 6f 75 6e 74 72 79 3a 20 55 53 0d 0a 70 6f 73 74 61 6c 5f 63 6f 64 65 3a 20 37 38 36 34 35 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 35 37 36 30 30 0d 0a 0d 0a Data Ascii: X-Cache: HIT, MISSX-Cache-Hits: 5, 0Cache-Control: no-store, no-cache, must-revalidate, max-age=0Vary: Accept-Encoding,Cookiecountry: USpostal_code: 78645Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 22 3e 0a 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 20 20 66 62 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 2f 66 62 23 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 28 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 29 2e 69 6e 69 74 3d 7b 70 72 69 76 61 63 79 3a 7b 63 6f 6f 6b 69 65 73 5f 65 6e 61 62 6c 65 64 3a 74 72 75 65 7d 2c 61 6a 61 78 3a 7b 64 65 6e 79 5f 6c 69 73 74 3a 5b 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 5d 7d Data Ascii: <!doctype html><html lang="fr"><head prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb#"> <meta charset="utf-8"/><script type="text/javascript">(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:true},ajax:{deny_list:["bam.nr-data.net"]}
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 6e 3d 72 28 37 38 33 36 29 2c 69 3d 72 28 33 34 33 34 29 2c 6f 3d 72 28 38 39 39 30 29 2c 61 3d 72 28 36 31 35 34 29 3b 63 6f 6e 73 74 20 73 3d 7b 7d 2c 63 3d 61 2e 67 6d 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 75 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 64 3d 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 6c 3d 22 6e 72 40 77 72 61 70 70 65 64 3a 22 2e 63 6f 6e 63 61 74 28 6e 2e 50 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 7c 7c 6e 2e 65 65 29 2e 67 65 74 28 22 65 76 65 6e 74 73 22 29 7d 28 65 29 3b 69 66 28 73 5b 74 2e 64 65 62 75 67 49 64 5d 2b 2b 29 72 65 74 75 72 6e 20 74 3b 73 5b 74 Data Ascii: :()=>f});var n=r(7836),i=r(3434),o=r(8990),a=r(6154);const s={},c=a.gm.XMLHttpRequest,u="addEventListener",d="removeEventListener",l="nr@wrapped:".concat(n.P);function f(e){var t=function(e){return(e\|\|n.ee).get("events")}(e);if(s[t.debugId]++)return t;s[t
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 3b 63 6f 6e 73 74 20 6e 3d 61 73 79 6e 63 28 29 3d 3e 7b 6c 65 74 20 6e 3b 74 72 79 7b 69 66 28 28 30 2c 70 2e 56 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 29 7b 63 6f 6e 73 74 7b 73 65 74 75 70 41 67 65 6e 74 53 65 73 73 69 6f 6e 3a 65 7d 3d 61 77 61 69 74 20 69 2e 65 28 34 37 38 29 2e 74 68 65 6e 28 69 2e 62 69 6e 64 28 69 2c 36 35 32 36 29 29 3b 6e 3d 65 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 7d 7d 63 61 74 63 68 28 74 29 7b 28 30 2c 65 2e 52 29 28 32 30 2c 74 29 2c 74 68 69 73 2e 65 65 2e 65 6d 69 74 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 5b 74 5d 29 2c 74 68 69 73 2e 66 65 61 74 75 72 65 4e 61 6d 65 3d 3d 3d 6f 2e 4b 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 26 26 74 68 69 73 2e 61 Data Ascii: ;const n=async()=>{let n;try{if((0,p.V)(this.agentIdentifier)){const{setupAgentSession:e}=await i.e(478).then(i.bind(i,6526));n=e(this.agentIdentifier)}}catch(t){(0,e.R)(20,t),this.ee.emit("internal-error",[t]),this.featureName===o.K.sessionReplay&&this.a
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 65 4e 61 6d 65 3d 74 2e 54 5a 3b 23 69 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 72 2c 6e 3d 21 30 29 7b 6c 65 74 20 69 3b 73 75 70 65 72 28 65 2c 72 2c 74 2e 54 5a 2c 6e 29 2c 74 68 69 73 2e 72 65 70 6c 61 79 52 75 6e 6e 69 6e 67 3d 21 31 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 22 2e 63 6f 6e 63 61 74 28 6a 65 2e 48 33 2c 22 5f 22 29 2e 63 6f 6e 63 61 74 28 6a 65 2e 75 68 29 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 28 30 2c 67 2e 53 52 29 28 65 29 26 26 74 68 69 73 2e 65 65 2e 6f 6e 28 74 2e 47 34 2e 52 45 43 4f 52 44 2c 28 28 29 3d 3e 74 68 69 73 2e 23 6f 28 29 29 29 2c 74 68 69 73 2e 23 61 28 69 29 3f 28 74 68 69 73 2e 23 69 3d 69 3f 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 Data Ascii: eName=t.TZ;#i;constructor(e,r,n=!0){let i;super(e,r,t.TZ,n),this.replayRunning=!1;try{i=JSON.parse(localStorage.getItem("".concat(je.H3,"_").concat(je.uh)))}catch(e){}(0,g.SR)(e)&&this.ee.on(t.G4.RECORD,(()=>this.#o())),this.#a(i)?(this.#i=i?.sessionRepla
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 74 69 66 2e 65 75 2f 22 2c 22 6e 61 6d 65 22 3a 22 52 65 74 69 66 22 7d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 69 74 65 6d 22 3a 7b 22 40 74 79 70 65 22 3a 22 57 65 62 50 61 67 65 22 2c 22 40 69 64 22 3a 6e 75 6c 6c 2c 22 6e 61 6d 65 22 3a 22 52 45 54 49 46 20 3a 20 4c 61 20 70 61 73 73 69 6f 6e 20 64 75 20 63 6f 6d 6d 65 72 63 65 20 64 65 70 75 69 73 20 31 39 36 35 22 7d 7d 5d 7d 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 0a 7b 0a 20 20 20 20 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 3a 2f 2f 73 63 Data Ascii: "WebPage","@id":"https://www.retif.eu/","name":"Retif"}},{"@type":"ListItem","position":2,"item":{"@type":"WebPage","@id":null,"name":"RETIF : La passion du commerce depuis 1965"}}]}</script><script type="application/ld+json">{ "@context": "http://sc
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 3d 20 61 63 74 69 76 69 74 69 65 73 44 61 74 61 5b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 63 74 69 76 69 74 69 65 73 44 61 74 61 29 5b 30 5d 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 61 63 74 69 76 69 74 69 65 73 44 61 74 61 5b 63 75 72 72 65 6e 74 41 63 74 69 76 69 74 79 5d 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 49 6d 67 50 61 74 68 20 3d 20 61 63 74 69 76 69 74 69 65 73 44 61 74 61 5b 63 75 72 72 65 6e 74 41 63 74 69 76 69 74 79 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: = activitiesData[Object.keys(activitiesData)[0]]; if (typeof activitiesData[currentActivity] !== 'undefined') { customImgPath = activitiesData[currentActivity]; }
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 42 72 6f 77 73 65 72 20 53 74 6f 72 61 67 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 27 73 74 6f 72 61 67 65 5f 74 65 73 74 27 2c 20 31 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 6f 77 73 65 72 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 27 73 74 6f 72 61 67 65 5f 74 65 73 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: console.warn('Browser Storage is unavailable'); return false; } try { browserStorage.setItem('storage_test', 1); browserStorage.removeItem('storage_test'); }
2024-10-25 08:16:21 UTC	16384	IN	Data Raw: 70 61 6e 20 78 2d 74 65 78 74 3d 22 73 65 61 72 63 68 52 65 73 75 6c 74 2e 62 72 65 61 64 63 72 75 6d 62 2e 6a 6f 69 6e 28 27 20 3e 20 27 29 2e 63 6f 6e 63 61 74 28 27 20 3e 20 27 29 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 74 65 6d 70 6c 61 74 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 78 2d 74 65 78 74 3d 22 73 65 61 72 63 68 52 65 73 75 6c 74 2e 74 69 74 6c 65 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 62 73 6f 6c 75 74 65 20 72 69 67 68 74 2d 31 20 62 6f 74 74 6f 6d 2d 31 2f 32 20 74 72 61 6e 73 6c 61 74 65 2d 79 2d 31 2f 32 20 74 65 78 74 2d 67 72 65 79 20 74 65 78 74 2d 78 73 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 78 2d 74 65 78 74 3d 22 27 28 27 20 2b 20 73 65 Data Ascii: pan x-text="searchResult.breadcrumb.join(' > ').concat(' > ')"></span> </template> <span x-text="searchResult.title"></span> <span class="absolute right-1 bottom-1/2 translate-y-1/2 text-grey text-xs" x-text="'(' + se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	643	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/css/styles.css HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 343939 Content-Type: text/css Etag: "671a1fb0-ce1e" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016274d18c067963496d72e45a7bfb-e5b0a87337fd208b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960047-PAR, cache-dfw-kdal2120046-DFW X-Cache: HIT, HIT X-Cache-Hits: 74, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 6b 65 79 66 72 61 6d 65 73 20 6c 6f 61 64 69 6e 67 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 31 30 30 25 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 31 30 30 25 20 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 6f 70 7b 30 25 7b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 35 30 25 7b 74 6f 70 3a 36 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 6f 70 3a 36 70 78 3b Data Ascii: @charset "UTF-8";@keyframes loading{0%{background-position:0 100%}to{background-position:100% 0}}@keyframes spin{0%{transform:rotate(0deg)}to{transform:rotate(360deg)}}@keyframes top{0%{top:0;transform:rotate(0)}50%{top:6px;transform:rotate(0)}to{top:6px;
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 6e 20 53 61 6e 73 2c 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 35 31 20 35 31 20 35 31 2f 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 29 29 7d 68 72 7b 68 65 69 67 68 74 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 31 70 78 7d 61 62 62 72 3a 77 68 65 72 65 28 5b 74 69 74 6c 65 5d 29 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e Data Ascii: n Sans,Source Sans Pro,sans-serif;font-size:.875rem;letter-spacing:0;--tw-text-opacity:1;color:rgb(51 51 51/var(--tw-text-opacity))}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 7d 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 64 64 2c 64 6c 2c 66 69 67 75 72 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 72 2c 70 2c 70 72 65 7b 6d 61 72 67 69 6e 3a 30 7d 66 69 65 6c 64 73 65 74 2c 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 65 67 65 6e 64 7b 70 61 64 64 69 6e 67 3a 30 7d 6d 65 6e 75 2c 6f 6c 2c 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 74 65 78 74 61 72 65 61 7b 72 65 73 69 7a 65 3a 76 65 Data Ascii: ::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset,menu,ol,ul{margin:0;padding:0}legend{padding:0}menu,ol,ul{list-style:none}textarea{resize:ve
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 29 3b 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 63 61 6c 63 28 31 70 78 20 2b 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 29 2c 76 61 72 28 2d 2d 74 77 2d 73 68 61 64 6f 77 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 35 36 33 65 62 7d 2e 66 6f Data Ascii: ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow);border-color:#2563eb}.fo
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 65 64 69 74 2d 73 65 63 6f 6e 64 2d 66 69 65 6c 64 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 79 65 61 72 2d 66 69 65 6c 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 32 30 20 32 30 27 25 33 65 25 33 63 70 61 74 68 20 73 74 72 6f 6b 65 3d 27 25 32 33 37 33 37 33 37 33 27 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 27 72 6f 75 6e Data Ascii: edit-second-field,::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}select{background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3e%3cpath stroke='%23737373' stroke-linecap='roun
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 62 3b 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 63 6f 6c 6f 72 29 3b 2d 2d 74 77 2d 72 69 6e 67 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 69 6e 73 65 74 29 20 30 20 30 20 30 20 63 61 6c 63 28 32 70 78 20 2b 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 77 69 64 74 68 29 29 20 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 63 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 74 77 2d 72 69 6e 67 2d 6f 66 66 73 65 74 2d 73 68 61 64 6f 77 29 2c 76 Data Ascii: b;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),v
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 3a 66 6f 63 75 73 2c 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f Data Ascii: er-color:transparent;background-color:currentColor;background-size:100% 100%;background-position:center;background-repeat:no-repeat}[type=checkbox]:indeterminate:focus,[type=checkbox]:indeterminate:hover{border-color:transparent;background-color:currentCo
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 6c 69 6e 65 2d 66 6c 65 78 7d 2e 61 63 74 69 6f 6e 73 2d 74 6f 6f 6c 62 61 72 20 2e 70 72 69 6d 61 72 79 20 62 75 74 74 6f 6e 20 73 70 61 6e 2c 2e 62 74 6e 20 73 70 61 6e 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 20 73 70 61 6e 2c 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 20 73 70 61 6e 2c 2e 62 74 6e 2d 74 65 72 74 69 61 72 79 20 73 70 61 6e 2c 2e 62 74 6e 2d 77 68 69 74 65 20 73 70 61 6e 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 62 74 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 3a 68 6f 76 65 72 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 32 20 32 32 32 20 32 32 32 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 Data Ascii: line-flex}.actions-toolbar .primary button span,.btn span,.btn-primary span,.btn-secondary span,.btn-tertiary span,.btn-white span{vertical-align:middle}.btn:focus,.btn:hover{--tw-bg-opacity:1;background-color:rgb(222 222 222/var(--tw-bg-opacity));--tw-te
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 35 30 6d 73 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 7d 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 3a 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 39 20 33 39 20 32 39 2f 76 61 72 28 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 32 39 20 33 39 20 32 39 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 29 29 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a Data Ascii: sition-duration:150ms}@media (min-width:768px){.btn-primary{font-size:.75rem}}.btn-primary{--tw-border-opacity:1;border-color:rgb(229 39 29/var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(229 39 29/var(--tw-bg-opacity));--tw-text-opacity:
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 2c 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 31 35 30 6d 73 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 7d 7d 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 20 73 76 67 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 37 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 7d 2e 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 64 69 73 61 62 6c Data Ascii: backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:150ms}@media (min-width:768px){.btn-secondary{font-size:.75rem}}.btn-secondary svg{margin-right:.75rem;display:inline-flex}.btn-secondary.disabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	668	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/HiPay_FullserviceMagento/css/styles.css HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 338 Content-Type: text/css Etag: "671a1fae-ac" Last-Modified: Thu, 24 Oct 2024 10:21:34 GMT Traceresponse: 00-18016274d2906ac2ad43cf6a93610737-3730b6770c0e8a94-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 29260 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960029-PAR, cache-dfw-kdal2120051-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	338	IN	Data Raw: 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 20 64 64 2e 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 2e 64 61 74 61 2e 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0a 7d 0a 0a 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 20 64 64 2e 63 6f 6e 74 65 6e 74 20 74 61 62 6c 65 2e 64 61 74 61 2e 74 61 62 6c 65 20 74 62 6f 64 79 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 36 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 70 61 79 6d 65 6e 74 2d 6d 65 74 68 6f 64 20 64 64 2e Data Ascii: .payment-method dd.content table.data.table tbody tr:first-child { display: grid;}.payment-method dd.content table.data.table tbody tr:first-child th { font-size: 1.6rem; font-weight: 600; padding-left: 0; border: none;}.payment-method dd.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	655	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Smile_ElasticsuiteTracker/js/tracking.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	678	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12715 Content-Type: application/javascript Etag: "671a1fa3-ce9" Last-Modified: Thu, 24 Oct 2024 10:21:23 GMT Traceresponse: 00-18016274d2afd98ccd511b38ed181120-2bb6083bbc959a1b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960049-PAR, cache-dfw-kdal2120138-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 6f 63 75 6d 65 6e 74 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 67 6c 6f 62 61 6c 20 77 69 6e 64 6f 77 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 67 6c 6f 62 61 6c 20 63 6f 6e 73 6f 6c 65 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 65 78 70 6f 72 74 65 64 20 73 6d 69 6c 65 54 72 61 63 6b 65 72 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 44 49 53 43 4c 41 49 4d 45 52 0a 20 2a 0a 20 2a 20 44 6f 20 6e 6f 74 20 65 64 69 74 20 6f 72 20 61 64 64 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 67 72 61 64 65 20 53 6d 69 6c 65 20 45 6c 61 73 74 69 63 53 75 69 74 65 20 74 6f 20 6e 65 77 65 72 0a 20 2a 20 76 65 72 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e 0a 20 2a 0a 20 2a 20 40 63 61 74 65 Data Ascii: /* global document: true // global window: true // global console: true // exported smileTracker //* * DISCLAIMER * * Do not edit or add to this file if you wish to upgrade Smile ElasticSuite to newer * versions in the future. * * @cate
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 20 2b 20 65 78 70 69 72 65 73 41 74 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 22 3d 22 20 2b 20 63 6f 6f 6b 69 65 56 61 6c 75 65 20 2b 20 22 3b 20 22 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 20 70 61 74 68 3d 22 20 2b 20 70 61 74 68 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 52 65 74 72 69 65 76 65 20 76 61 6c 75 65 73 20 66 6f 72 20 61 20 70 61 72 61 6d 20 69 6e 74 6f 20 55 52 4c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 73 Data Ascii: res = "expires=" + expiresAt.toUTCString(); document.cookie = cookieName + "=" + cookieValue + "; " + expires + "; path=" + path; } // Retrieve values for a param into URL function getQueryStringParameterByName(name) { let res
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 6e 20 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 61 72 61 6d 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 61 72 61 6d 56 61 6c 75 65 20 3d 20 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 70 61 72 61 6d 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 56 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 47 41 20 70 61 72 61 6d 20 74 6f 20 74 68 65 20 74 72 61 63 6b 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 64 64 50 61 67 65 56 61 72 28 70 61 72 61 6d 4e 61 6d 65 2c 20 70 61 Data Ascii: n (element) { const paramName = element; const paramValue = getQueryStringParameterByName(paramName); if (paramValue) { // Append the GA param to the tracker this.addPageVar(paramName, pa
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 20 28 6d 65 74 61 54 61 67 73 5b 74 61 67 49 6e 64 65 78 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 61 6d 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 3d 20 6d 65 74 61 54 61 67 73 5b 74 61 67 49 6e 64 65 78 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 61 6d 65 27 29 2e 73 70 6c 69 74 28 27 3a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6d 70 6f 6e 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 32 20 26 26 20 63 6f 6d 70 6f 6e 65 6e 74 73 5b 30 5d 20 3d 3d 3d 20 27 73 63 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 61 72 4e 61 6d 65 20 3d 20 63 6f 6d 70 6f 6e 65 6e 74 73 5b 31 5d 3b 0a 20 20 Data Ascii: (metaTags[tagIndex].getAttribute('name')) { let components = metaTags[tagIndex].getAttribute('name').split(':'); if (components.length === 2 && components[0] === 'sct') { let varName = components[1];
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 79 73 28 74 68 69 73 2e 76 61 72 73 29 2e 66 6f 72 45 61 63 68 28 6b 65 79 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 5b 6b 65 79 5d 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 76 61 72 73 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 72 61 63 6b 65 74 56 61 72 73 54 6f 4a 73 6f 6e 28 74 68 69 73 2e 76 61 72 73 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 75 72 6c 50 61 72 61 6d 73 20 3d 20 67 65 74 54 72 61 63 6b 65 72 56 61 72 73 2e 62 69 6e 64 28 74 68 69 73 29 28 29 3b 0a 20 20 20 20 20 20 20 20 72 65 Data Ascii: ys(this.vars).forEach(key => { this.vars[key] = decodeURIComponent(this.vars[key]); }); return bracketVarsToJson(this.vars); } function getTrackerUrl() { let urlParams = getTrackerVars.bind(this)(); re
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 62 6f 64 79 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 69 6c 64 54 72 61 63 6b 69 6e 67 49 6d 67 2e 62 69 6e 64 28 74 68 69 73 29 28 62 6f 64 79 4e 6f 64 65 2c 20 67 65 74 54 72 61 63 6b 65 72 55 72 6c 2e 62 69 6e 64 28 74 68 69 73 29 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 54 65 6c 65 6d 65 74 72 79 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 Data Ascii: nt.getElementsByTagName('body')[0]; buildTrackingImg.bind(this)(bodyNode, getTrackerUrl.bind(this)()); } this.trackerSent = true; this.vars = {}; } } function sendTelemetry() { i
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 62 75 69 6c 64 54 72 61 63 6b 69 6e 67 49 6d 67 28 62 6f 64 79 4e 6f 64 65 2c 20 74 72 61 63 6b 69 6e 67 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 69 6d 67 4e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 20 74 72 61 63 6b 69 6e 67 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 6c 74 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 72 61 63 6b 65 72 53 74 79 6c 65 28 69 6d 67 4e 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 64 79 4e 6f 64 65 Data Ascii: } function buildTrackingImg(bodyNode, trackingUrl) { let imgNode = document.createElement('img'); imgNode.setAttribute('src', trackingUrl); imgNode.setAttribute('alt', ''); setTrackerStyle(imgNode); bodyNode
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 78 70 69 72 65 41 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 65 78 70 69 72 65 41 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 20 2b 20 70 61 72 73 65 49 6e 74 28 63 6f 6e 66 69 67 5b 27 76 69 73 69 74 5f 63 6f 6f 6b 69 65 5f 6c 69 66 65 74 69 6d 65 27 5d 2c 20 31 30 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 43 6f 6f 6b 69 65 28 63 6f 6e 66 69 67 5b 27 76 69 73 69 74 5f 63 6f 6f 6b 69 65 5f 6e 61 6d 65 27 5d 2c 20 67 75 69 64 28 29 2c 20 65 78 70 69 72 65 41 74 2c 20 70 61 74 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 70 69 72 65 41 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 65 78 70 69 72 65 41 74 2e 67 65 74 53 65 63 Data Ascii: xpireAt.setSeconds(expireAt.getSeconds() + parseInt(config['visit_cookie_lifetime'], 10)); setCookie(config['visit_cookie_name'], guid(), expireAt, path); } else { expireAt.setSeconds(expireAt.getSec
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 74 68 69 6e 67 2e 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 72 61 63 6b 65 72 0a 20 20 20 20 63 6f 6e 73 74 20 53 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 54 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 56 61 72 73 41 64 64 65 Data Ascii: (e) { // Nothing. } } // Implementation of the tracker const SmileTrackerImpl = function() { this.vars = {}; this.trackerSent = false; this.telemetryTrackerSent = false; this.trackerVarsAdde
2024-10-25 08:16:22 UTC	304	IN	Data Raw: 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 65 72 56 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 61 64 64 43 75 73 74 6f 6d 65 72 56 61 72 2e 62 69 6e 64 28 74 68 69 73 29 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 53 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 53 65 73 73 69 6f 6e 56 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 61 64 64 53 65 73 73 69 6f 6e 56 61 72 2e 62 69 6e 64 28 74 68 69 73 29 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 3b 0a Data Ascii: mileTrackerImpl.prototype.addCustomerVar = function (varName, value) { addCustomerVar.bind(this)(varName, value); }; SmileTrackerImpl.prototype.addSessionVar = function (varName, value) { addSessionVar.bind(this)(varName, value);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	647	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/optChaining.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	676	IN	HTTP/1.1 200 OK Connection: close Content-Length: 663 Content-Type: application/javascript Etag: "671a1fb2-14a" Last-Modified: Thu, 24 Oct 2024 10:21:38 GMT Traceresponse: 00-18016277d08116dc24c2173447c2175a-df0d52cbbd5b510d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72184 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960063-PAR, cache-dfw-kdal2120109-DFW X-Cache: HIT, HIT X-Cache-Hits: 16, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	663	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 2f 2f 20 56 c3 a9 72 69 66 69 65 72 20 73 69 20 6c 27 6f 70 c3 a9 72 61 74 65 75 72 20 64 65 20 63 68 61 c3 ae 6e 61 67 65 20 6f 70 74 69 6f 6e 6e 65 6c 20 65 73 74 20 70 72 69 73 20 65 6e 20 63 68 61 72 67 65 20 6e 61 74 69 76 65 6d 65 6e 74 0a 20 20 69 66 20 28 21 28 27 3f 2e 27 29 20 69 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 20 7b 0a 20 20 2f 2f 20 50 6f 6c 79 66 69 6c 6c 20 64 65 20 6c 27 6f 70 c3 a9 72 61 74 65 75 72 20 64 65 20 63 68 61 c3 ae 6e 61 67 65 20 6f 70 74 69 6f 6e 6e 65 6c 20 28 3f 2e 29 0a 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function() { // Vrifier si l'oprateur de chanage optionnel est pris en charge nativement if (!('?.') in Object.prototype) { // Polyfill de l'oprateur de chanage optionnel (?.) if (!Object.prototype.hasOwnProperty.call(Object.prototype

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	668	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/fonts/dearjoe/dearJoe6.woff2 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.retif.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	667	IN	HTTP/1.1 200 OK Connection: close Content-Length: 46512 Content-Type: font/woff2 Etag: "671a1fb1-b5b0" Last-Modified: Thu, 24 Oct 2024 10:21:37 GMT Traceresponse: 00-18016274d3737e0142d71cdd8faf4dfe-41bab2ad2c6eb0ef-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960075-PAR, cache-dfw-kdfw8210072-DFW X-Cache: HIT, HIT X-Cache-Hits: 76, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 b5 b0 00 13 00 00 00 01 9d e0 00 00 b5 42 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 24 1b b9 6c 1c 58 06 60 00 83 72 08 5c 09 84 65 11 08 0a 85 d9 2c 85 93 2f 01 36 02 24 03 87 14 0b 83 4c 00 04 20 05 86 78 07 85 43 0c 82 32 3f 77 65 62 66 06 5b ce 77 51 c2 8e bd 84 db 81 8d b5 fe b3 31 0b b8 31 3a 83 ee c0 87 bb a8 52 42 c5 38 d6 11 8c 71 00 30 73 4f 92 fd ff 39 c5 c9 18 8e 09 4c d3 ea d9 ff 9c 52 66 85 a2 28 64 98 21 e8 e5 51 78 18 6c 71 6a 4d 15 d1 1c d6 c9 ec ba ee 98 20 97 f0 fa 54 38 51 2e 36 9c 71 41 d9 b9 46 c5 3a 4e 56 65 7d 29 2d 60 52 14 13 51 04 92 4c 0c 4f 19 7a dc 8b f0 c0 16 bc 28 35 3b 23 a8 c9 6a 3c 63 b7 c3 0c 36 ce 84 6c cf be fc 31 bd 83 7f 34 48 c4 77 ab Data Ascii: wOF2B?FFTM$lX`r\e,/6$L xC2?webf[wQ11:RB8q0sO9LRf(d!QxlqjM T8Q.6qAF:NVe})-`RQLOz(5;#j<c6l14Hw
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 47 6c 5a 59 62 54 68 ee 25 27 9a bb 6f 1c 2d b6 04 b1 91 9d f0 f6 2b 00 04 80 5b 5b 57 0e 01 e0 ea 91 47 2f 00 e0 6e 45 bf ff f2 72 39 c0 09 c0 60 10 2f 10 2f bd c2 90 7e dc 9f 3c 6f c9 85 0f 72 f5 54 55 09 64 61 09 4a bf c8 95 73 15 e1 16 87 17 d2 fa 75 a9 9e f5 a6 ef 8c 4f 9f b5 18 7f 11 e8 2b 39 ec c3 33 fc 23 22 86 45 72 a4 47 56 14 47 4d 4c 89 85 f1 28 de c4 b7 f8 3b a5 4c 4f c6 3a 5d d2 27 43 72 50 46 65 6c 8e ce 82 9c 99 8b 72 75 6e c9 a6 3c 9c 17 aa 3f a5 a3 a0 6f f1 3c 43 4a 06 5e b9 bc b3 f9 ee 83 2a 9f 10 13 a8 56 d0 af 6e c1 1a 85 14 10 ea ae b0 80 ba 28 96 de ba 0d 2f 95 98 12 5d 48 7c 42 42 ae e4 ad 3c 22 5f 6a 96 b4 bd 66 93 8b 37 25 9b 6a 9a e9 66 b4 cf 8c 16 65 56 06 ab 36 ab ad d1 18 db 2b 3b ec b4 2b 5a 0b 6d da 99 74 e8 cc 5d b1 24 41 Data Ascii: GlZYbTh%'o-+[[WG/nEr9`//~<orTUdaJsuO+93#"ErGVGML(;LO:]'CrPFelrun<?o<CJ^*Vn(/]H\|BB<"_jf7%jfeV6+;+Zmt]$A
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 12 bb a0 0e 29 88 23 49 6d d2 0e 8d bf 04 50 21 ca 2d a0 49 d4 5a 3a f4 0c 54 43 ce 0e 3d a7 e6 b8 20 af 80 de cf 8a 4e ce fa 0d c8 8b ba a4 c6 7f d3 00 eb 30 5f 5a 93 7a c0 7d 00 d0 68 ba d4 4c 0f 7f 58 fa d9 d7 03 ba 00 9a 04 1e e0 56 b9 a8 06 0c 23 c2 74 48 04 af d0 95 3c 14 2d a1 00 70 c9 f8 57 51 0f c3 a6 b8 65 ea 58 14 d6 8a 68 a6 d8 33 8c f1 80 17 0b e8 c3 e2 c0 37 3a 86 bc 92 a6 a5 82 be 43 f4 88 a4 a2 76 6d bb f2 29 84 fa 55 9d 99 d9 c2 74 6b 8d da 24 c1 c8 4e 5b 21 53 33 45 2a 4d df 51 c6 fd 59 80 f3 3b 10 c8 01 00 35 d2 d1 94 b3 b3 51 7f a3 b5 ac 16 68 29 99 db d7 b3 7a 0a 61 0d 69 a7 0e 96 17 ae c8 3d 42 4c dc 53 d3 15 6f 06 80 3e 44 6f 86 59 fe 81 55 0a 17 0c d4 3c 14 2f 89 1a 4a c1 96 ce b2 fa d5 f6 40 41 f5 f5 d1 34 a8 8c c2 63 6b 30 c4 8e Data Ascii: )#ImP!-IZ:TC= N0_Zz}hLXV#tH<-pWQeXh37:Cvm)Utk$N[!S3E*MQY;5Qh)zai=BLSo>DoYU</J@A4ck0
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 51 6e eb bf ea 9d 11 36 5d ea ff ea 4f 46 a0 24 7f 89 a6 96 75 73 d4 2c 88 d5 e2 57 b1 13 63 1d 12 50 87 39 fc 20 71 28 1c 4c 4c 08 62 21 ea 83 ea 30 77 bf b7 9b 3f a4 92 12 a1 a2 cc a1 b0 82 bd 0c b8 5b 71 ab 80 bc 79 ed 08 e4 cb ef 20 d6 a7 ed a2 9d 85 65 78 b9 90 d2 08 bb 53 3e 00 33 b3 45 88 d5 26 88 04 19 ad 3e aa e0 39 2f d6 18 6e 47 19 05 4b 26 34 40 2b b6 cc ae 81 86 85 39 77 68 c3 c7 26 05 ad 16 b0 d0 6a 7f 0b a2 05 8b 59 f1 18 d8 45 6e 07 14 0d ee 05 c8 5d dc 02 f6 42 5c 92 c8 9a f7 0c 29 05 bc db 5b 00 1c 3a da 81 d8 30 2d 41 5e d3 11 af 10 de 33 ce 89 a0 3b 07 85 24 6e b4 cd cd ac ed 68 11 6c fb e4 67 af a6 3b 70 1e 70 28 e1 31 c0 39 9f f8 e0 e1 32 51 12 78 3b b7 e2 23 6e a6 10 b0 e5 4a 56 39 70 db fd 5b 96 b3 63 01 6d 90 a0 4f 57 8b cb 93 5d Data Ascii: Qn6]OF$us,WcP9 q(LLb!0w?[qy exS>3E&>9/nGK&4@+9wh&jYEn]B\)[:0-A^3;$nhlg;pp(192Qx;#nJV9p[cmOW]
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 32 54 70 99 93 66 a8 1f 3f 18 dc b3 f0 0c 9a 6d 34 95 d0 2e c6 02 e2 ad b4 bc 2a 70 9e a4 a2 5a e8 52 19 d7 d4 26 c7 61 47 02 0b a9 54 0d be 0d 67 bf 21 e6 da c5 d8 bf af 52 ee 1d 50 31 82 dc d3 d8 3d 78 5f 7d 8f d5 c3 7f 12 4f 35 34 68 e7 f3 20 c6 50 62 82 a9 72 ba 6e ca ab 5c a2 dc e9 0c 70 ca 66 ce 89 49 0e a9 75 c3 43 65 88 da 6e bb f6 e1 53 72 50 49 42 31 60 e1 29 53 56 a4 25 fe 36 70 c2 5a b7 c7 f2 37 46 c5 27 c9 46 05 7e 04 c2 da db fa d5 6c 1b b2 25 44 80 5a 8b 1b 93 fc e8 54 c5 dd 04 bf a1 ad ba f0 ef e3 92 f0 0e 11 d6 75 50 26 42 b6 b9 e0 6f 8a 6e da e5 e4 29 e5 48 f3 4a 25 83 a1 e7 aa 1a 76 55 93 94 db b5 ac b8 cf c3 5c a1 38 da b8 2d a5 13 7a 6b 76 47 aa c5 5c 57 3f e0 0b 02 36 98 78 b0 cd ca 1f f6 8f 88 09 55 24 49 b5 6a bc b1 f2 b4 ac 34 26 Data Ascii: 2Tpf?m4.*pZR&aGTg!RP1=x_}O54h Pbrn\pfIuCenSrPIB1`)SV%6pZ7F'F~l%DZTuP&Bon)HJ%vU\8-zkvG\W?6xU$Ij4&
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: f1 e9 99 c8 fb 5b 88 31 74 18 86 03 e2 e5 74 fd 21 77 ec 48 31 1e ba 9a 72 78 4c 1f 06 99 53 52 21 a2 14 e0 d0 e7 25 c7 52 5a bb 8e 41 68 bc 67 7a d9 fd c0 22 49 77 c3 09 66 6e 2a 2d e6 b6 7c 90 59 cd 23 c0 0a 5d 28 9a 3f bf b5 01 1a 77 cf 58 79 b1 bb 60 d9 96 02 22 13 0e f0 9f eb 24 e5 a8 c4 84 65 89 fa f7 0d 77 dc 05 51 51 a9 5a cb a7 e7 63 c4 58 35 89 3f e6 83 81 d7 ba a5 19 4e 04 69 e3 00 3a 94 b1 21 44 77 87 f0 15 9d 68 93 26 2f f1 14 dc 61 09 97 d4 5f db ee 2f bb d3 f5 3a 0a c8 34 98 73 99 ca 64 69 c8 87 ff 87 e5 2d d4 67 88 73 78 a1 c5 a8 51 a9 44 8e 84 7d 6f cb 25 e8 c7 50 6b cb 20 5d bf a5 7b dc f4 1e 89 8b 31 ef ea 74 d8 1d 36 d7 da f7 d2 06 b6 dc 08 fd df dc 62 af 4c 41 8e 6e e2 d8 71 d6 b5 a1 53 30 95 0f c2 ba 20 54 ac 05 81 e7 65 e9 ae 92 87 Data Ascii: [1tt!wH1rxLSR!%RZAhgz"Iwfn*-\|Y#](?wXy`"$ewQQZcX5?Ni:!Dwh&/a_/:4sdi-gsxQD}o%Pk ]{1t6bLAnqS0 Te
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 8e 15 9d 80 2c 44 22 3e d9 ac c2 8d 4b 97 0f 94 b7 29 c6 3a bb ec e9 fb 29 11 17 96 e4 a9 04 f8 ad 80 ec 0f 41 71 c3 2a 8c e0 e8 32 07 cb 9f 25 44 52 69 4e ee 88 4e 09 4e 1d 75 06 83 59 34 63 b8 7c 44 a4 e5 8c a7 ee 19 6e 95 96 67 cb 9d d3 2f 97 c5 e8 26 b0 6c 0e d8 36 62 1b 6a 0c c3 c9 c2 94 3f 7b e6 a4 11 87 3d 19 09 4e 1b 8d cc 80 4d 1e 92 d5 df 3f d5 69 50 7b d7 f3 05 5e 04 03 17 6e 82 44 64 19 d2 e2 64 ce 43 cb 78 a5 8c ff 28 c1 d0 7e 4a 76 11 86 fd dc b8 af cb 8b 43 2c c0 65 fd 43 db d2 0e c2 4c 31 27 80 e2 5d f2 8c 50 3b 04 bc d8 4c 64 c5 0d 77 07 4d 0f cc 0d d7 42 70 d3 c8 10 63 c9 d7 40 3e 08 d7 c8 5d ea 22 1e 3e af 90 85 0b 5e 38 9a e7 16 60 52 31 b9 f1 3a 7a 84 51 51 9b 7b 12 16 2a 27 2a 1e 54 80 8e cf ff 6f 6d 9c 72 60 06 08 b2 c7 fb 7b 60 21 Data Ascii: ,D">K):)Aq2%DRiNNNuY4c\|Dng/&l6bj?{=NM?iP{^nDddCx(~JvC,eCL1']P;LdwMBpc@>]">^8`R1:zQQ{'*Tomr`{`!
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 75 fe 2a a8 a2 62 49 e5 52 62 89 92 d9 e0 37 83 ba ce 83 7c 95 5f 87 9d a4 0f 90 de 0b 04 a1 5b 73 1a 1c 6c 65 cd 40 1c f6 4a f6 44 54 a3 e4 cc eb 20 87 c8 60 d8 70 c0 05 51 d1 62 11 d0 42 09 c2 c3 e1 49 24 9c ba c4 6e 83 18 a8 ff c8 2a bc 20 24 01 d4 17 c4 32 7a 54 91 7d e6 49 8e d7 6a be e8 b8 a9 af fc 52 90 4d 7e a6 07 89 21 02 d2 d9 6d 25 da 97 ee a9 7c 3b 8f 34 c3 cb de 15 0b 27 4a f5 f4 ab cd ec 4e bd 3c 87 0d 34 3a 0f 37 94 f3 49 35 cd 6e 01 03 6d 61 eb 94 3a b9 86 1d c1 e8 a6 93 3a f6 9c 3c 8d e0 ff 71 c6 4b c7 04 76 90 b9 85 30 8f 50 ce 99 1d b7 80 9d 4b 42 0b d9 1b bd 75 37 35 a2 8c 06 c1 c1 83 40 b6 f8 20 c0 e4 d6 e5 3f 50 6a b8 00 53 01 17 13 29 8f 2e 13 38 0f 7b bd 34 2e e0 5e 25 23 49 20 d3 d7 e1 dc 36 90 db da ab 2e 4c 86 0b 2b d3 4a dc 42 Data Ascii: ubIRb7\|_[sle@JDT `pQbBI$n $2zT}IjRM~!m%\|;4'JN<4:7I5nma::<qKv0PKBu75@ ?PjS).8{4.^%#I 6.L+JB
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: e0 fa 47 17 f9 a4 dd fc c9 da 96 05 d5 6e 08 64 59 56 88 44 71 3b 8e cf 0e 3b b7 a9 08 29 35 cd 0c 9a 5f d7 8e aa 79 62 05 ab 80 4f 4c 94 53 c4 71 c6 fe f6 d7 82 26 f6 e3 b0 01 ca 28 0e aa 44 6b 4f ca c9 62 bd 51 0f 52 88 16 d5 e9 8a 11 ba 63 4f c7 18 71 bf 28 94 9a c3 5c 7f 32 e6 9b 57 56 54 a1 12 a2 fe 57 73 fd 68 df b0 3f 77 4c 59 af 70 ec 78 39 d2 a7 bc 18 2b e9 f7 c5 b9 f5 9b d0 82 ec 3c 00 19 61 f8 d6 a6 74 ad 21 74 df 02 47 7e 74 b8 9d a2 31 02 82 98 87 53 6e 74 a7 f6 e7 8e 63 08 3a eb 4d 31 d1 4e 28 ab b0 44 f0 13 64 79 6d 6e 3d d7 92 14 04 27 59 bc 59 c8 22 2f 28 82 d8 d1 22 ba 70 ec c9 55 92 77 60 62 bf 4d 46 8d a5 bc c4 24 0d 19 89 c9 d1 be a7 24 6b d7 57 9c fe f7 3e 26 21 2f 43 71 08 84 82 df a9 fc 6b 5d d6 f2 f2 67 5f 81 ca 4a 79 a7 a1 f3 85 Data Ascii: GndYVDq;;)5_ybOLSq&(DkObQRcOq(\2WVTWsh?wLYpx9+<at!tG~t1Sntc:M1N(Ddymn='YY"/("pUw`bMF$$kW>&!/Cqk]g_Jy
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 15 c2 7f 73 60 99 42 d2 d3 22 17 f5 db b5 8d 06 48 82 31 10 02 4e b4 dd 58 4f 81 e6 53 8c e1 4b 10 0f e9 65 c2 ae 0d 9c 3f 93 a3 87 21 9c 2c 40 cd a3 a0 3b 50 ca 77 dd 5d dd 23 32 44 bc e5 7b c1 d4 68 73 f4 55 bd c3 bd f5 aa 8f 6a 97 6f e8 65 fa 77 95 0b 50 63 37 13 30 63 dd 37 b1 d2 72 89 f1 92 ad c4 3c 84 a0 ef ba c4 1c 34 8e 1a 9e da 16 ec 9e 32 b5 3d 58 b5 8d c5 9e f4 0d 50 f9 6e 73 96 29 47 41 25 92 91 0b d8 34 78 f0 b6 4f d4 d3 12 75 dc 3f bf bf b8 9a ab 68 13 cd c2 62 6d 35 f6 cf 85 ae 08 3b cf b1 d1 ec de 5d 6e 47 74 1f 02 ff 4b c1 40 fa a0 4c 58 10 3b 75 9c 26 77 f0 e8 ba f4 01 6d 66 83 1e f4 4a 75 d1 bf 7a a1 da f7 98 fa 71 35 f5 c1 f2 a8 0c a9 5d f8 ea c2 9d 70 aa 27 97 a3 f7 c3 85 37 c6 c7 57 13 61 11 fd d7 d8 19 df db 73 b5 96 77 85 6c cf bc Data Ascii: s`B"H1NXOSKe?!,@;Pw]#2D{hsUjoewPc70c7r<42=XPns)GA%4xOu?hbm5;]nGtK@LX;u&wmfJuzq5]p'7Waswl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:16:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=203320 Date: Fri, 25 Oct 2024 08:16:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:22 UTC	667	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/fonts/dearjoe/dearJoe6.woff HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.retif.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:22 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58944 Content-Type: font/woff Etag: "671a1fb1-e640" Last-Modified: Thu, 24 Oct 2024 10:21:37 GMT Traceresponse: 00-18016274d3c2800ada97f103dfbdcb78-bd3e8932c869b259-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:22 GMT X-Served-By: cache-par-lfpg1960071-PAR, cache-dfw-kdal2120087-DFW X-Cache: HIT, HIT X-Cache-Hits: 76, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 e6 40 00 13 00 00 00 01 9d e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 e6 1c 00 00 00 1c 00 00 00 1c 7a 79 bf 55 47 44 45 46 00 00 db a4 00 00 00 22 00 00 00 24 01 17 01 c9 47 50 4f 53 00 00 dc 14 00 00 0a 06 00 00 1c ec 1f 5a a8 c5 47 53 55 42 00 00 db c8 00 00 00 4a 00 00 00 58 da 59 dd a7 4f 53 2f 32 00 00 02 20 00 00 00 54 00 00 00 60 58 89 8a 79 63 6d 61 70 00 00 04 e0 00 00 01 98 00 00 01 f2 2e f3 95 60 63 76 74 20 00 00 08 e8 00 00 00 5c 00 00 00 5c 11 2d 14 b2 66 70 67 6d 00 00 06 78 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 db 9c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0b 10 00 00 cd 03 00 01 6c ac e0 ac bb 34 68 65 61 64 00 00 01 a8 00 00 00 Data Ascii: wOFF@FFTMzyUGDEF"$GPOSZGSUBJXYOS/2 T`Xycmap.`cvt \\-fpgmxeS/gaspglyfl4head
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: e7 ef f3 07 47 1e ec 7f b0 e7 c1 ee 07 3b 1e 6c 7d b0 f6 c1 92 07 0d 0f 4c ee ef bf f5 8c f5 11 d4 b5 24 01 46 36 06 b8 36 46 26 20 c1 84 ae 00 18 14 2c ac 6c ec 1c 9c 5c dc 3c bc 7c fc 02 82 42 c2 22 a2 62 e2 12 92 52 d2 32 b2 72 f2 0a 8a 4a ca 2a aa 6a ea 1a 9a 5a da 3a ba 7a fa 06 86 46 c6 26 a6 66 e6 16 96 56 d6 36 b6 76 f6 0e 8e 4e ce 2e ae 6e ee 1e 9e 5e de 3e be 7e fe 01 81 41 c1 21 a1 61 e1 11 91 51 d1 31 b1 71 f1 09 89 0c cd 2d 6d 1d 13 a6 ce 5e 30 7f e1 e2 45 4b 96 ad 58 be 72 d5 9a d5 6b d7 6d d8 b4 71 f3 d6 2d 3b 77 ec da cd 50 90 92 9a 79 8b 61 5e 7e f6 c3 92 2c 86 d6 e9 0c 85 0c 0c e9 a5 10 e7 55 32 2c dd 5e 97 9c 0b 62 e6 54 dd 4e aa 6f 9a b2 ff c0 a5 cb d7 6f 5c b9 ba 8d 61 df 41 86 07 77 ef 3d 7e c2 50 76 ed 26 43 63 67 43 57 7b 4f 6f 5f Data Ascii: G;l}L$F66F& ,l\<\|B"bR2rJ*jZ:zF&fV6vN.n^>~A!aQ1q-m^0EKXrkmq-;wPya^~,U2,^bTNoo\aAw=~Pv&CcgCW{Oo_
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 68 c7 e2 79 4b f9 96 49 2d cf 5a 91 b5 f2 d7 2a 8f 55 6d 38 e0 a9 d5 7c ab 83 56 df 5b 93 b6 e6 da 5a b7 b5 5d 6b 3f ac 0b 5b b7 6b dd bb f5 71 40 b8 6c fd a3 f5 8f 36 f2 6d 2a db 34 6f cb be 6d 61 00 70 16 c6 25 00 00 00 78 da 8c bc 0d 78 1b d7 75 26 3c 33 18 5c 0c 86 c3 c1 9d c1 cf 10 04 87 20 38 1c 0e a1 11 08 02 20 00 82 ff 02 29 92 a2 20 88 a2 69 8a a2 68 8a a2 28 92 a2 fe 25 d3 b2 a2 c8 8c a2 c8 8a a3 38 8a 63 3b 4e 1c c7 75 54 c7 55 1d af 3b 03 d2 4a aa a4 29 9d 34 4f eb f5 7a fd e5 c9 da 7d fa a5 69 b7 4f d2 2f cb 26 9b bf a6 3f ca 3a e4 77 ef 00 94 94 b6 bb cf d2 f2 c5 cc 9d 8b 9f 99 73 ee 39 ef 7b ce b9 97 a0 88 5e 82 a0 66 ec 0f 12 36 c2 41 34 9a 24 11 6d 2f 38 e8 ad ff 33 6e 02 fb 5f b7 17 6c 14 3a 24 4c 1b ee b6 e3 ee 82 03 44 3e 68 2f 90 b8 Data Ascii: hyKI-ZUm8\|V[Z]k?[kq@l6m4omap%xxu&<3\ 8 ) ih(%8c;NuTU;J)4Oz}iO/&?:ws9{^f6A4$m/83n_l:$LD>h/
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: ab 9f 3e 31 72 f1 e9 8b 23 83 53 13 90 f7 0a 40 84 2d 51 a9 56 e2 c4 40 00 4c ce 65 87 77 95 b3 61 ad 0a 06 b5 0a be bd 12 36 e9 d5 23 1f 7e e6 e2 48 62 f4 f8 d9 53 ba e8 a2 28 c0 4a 2c 57 ce 29 8a 8f e1 38 fb 8d 4f 92 37 f8 ee 9e 44 db f8 dc 78 9b 36 38 db 1d 79 f4 d3 9f ff dc 53 9d 5a 22 c8 51 bd c9 68 8e a6 90 d5 63 98 68 6b 87 3f 34 9e 54 bb a2 01 a9 26 c4 79 5c c0 c9 05 68 aa 4c 84 fa b9 4f 3d f7 cc d5 84 9a df d9 d7 a6 97 85 76 0c 0d ab 48 41 68 46 56 34 c8 44 5a da fc 11 83 b0 13 2f 6f bc 67 5f b0 7f 9f a8 24 34 62 0f 71 84 b8 40 fc 01 51 d8 85 2d 04 8b 05 a9 94 11 22 92 51 4d bc d0 8a 4f 17 f7 ee 6a 2d d7 cd 45 ec 7c 3e 6c c9 36 e0 5a 33 02 d0 1c 46 12 5a e0 d7 90 45 30 cf a0 c3 03 fc 9a 79 11 bd 0e 07 04 f1 ab 2e 9f bd 46 69 88 f5 e3 79 bc 20 18 Data Ascii: >1r#S@-QV@Lewa6#~HbS(J,W)8O7Dx68ySZ"Qhchk?4T&y\hLO=vHAhFV4DZ/og_$4bq@Q-"QMOj-E\|>l6Z3FZE0y.Fiy
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 62 b5 53 c7 37 69 46 44 74 8f 31 8c f9 25 cb c1 82 44 1c 99 68 7b ba d9 ba 01 34 25 ea 9b 11 a6 4a 49 08 91 55 db bc 1e aa 08 b8 34 74 7f af 4b 55 41 16 f2 02 64 98 e0 ec f9 8b f3 03 74 65 f6 e4 08 1b e4 d0 cd 20 bc 02 bd 4c 38 a2 82 c1 c5 7c b8 35 0d 15 a1 ef 0f 5f ba 1a 42 32 83 0a e7 f7 72 8c 48 73 cd 63 97 6f fd ea 0b b9 57 5e b9 d1 cf 20 62 e0 e2 2a 9c f8 76 a9 40 b0 92 ee fd c6 5b ab 03 97 d6 ff 65 56 de 26 cd 7c 76 3a 4a fb ab e5 22 76 99 a7 9e 44 1f 1f 22 4e 11 bb 89 42 03 06 c5 e5 58 96 fe 84 71 2c 6a f4 26 48 e3 74 d4 98 7c df dc 8b 84 98 1f 89 c7 2d ef b6 77 52 10 6f d1 82 68 7f e0 f0 9c 85 34 1a 8e 09 62 37 eb 10 42 8a d8 3e b0 e3 d0 9c 65 2d 2c 07 84 b1 82 25 5c a9 d3 be 69 22 1c d8 5a f8 24 2f 36 0a ed 08 6d 00 07 7e 14 c0 5b d4 49 0d 69 a7 Data Ascii: bS7iFDt1%Dh{4%JIU4tKUAdte L8\|5_B2rHscoW^ b*v@[eV&\|v:J"vD"NBXq,j&Ht\|-wRoh4b7B>e-,%\i"Z$/6m~[Ii
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 46 f7 ae 7c f3 ab 4f 8d 2d 3c ff 6a 56 fd f0 33 9f 5f 1a 73 b6 4c 9c a3 a9 48 4a a7 52 3b 86 fc e9 4f 3f f7 5c 56 4c 0d 9e ff fc 8d 17 31 57 df 78 93 9a a5 a3 e8 6e 54 a2 b0 d5 0a 71 59 bf 7e a5 c6 8a 22 5a bf ba 06 87 ee 02 5b 8b a1 bb 12 8d b2 a2 1f 1a 7a ea 29 a9 44 b9 2c 18 65 c7 86 20 8b 60 12 1b 3e 9c 54 92 2c d7 29 53 6a b2 3d 1d 66 b8 00 47 bb a1 a7 49 f3 51 94 4f 0e 50 30 d9 3b d8 93 11 f8 b0 e2 f7 83 48 26 5b 79 9c f4 7d 4e 56 91 86 b1 6c eb f6 7c 36 42 33 b4 8c 44 ed 0f 42 2e dd 9e 60 b4 17 57 df 7a 65 81 ab 08 15 65 af 6c dc a4 39 fa 34 31 4e ec 22 0a 22 92 82 a9 23 ac 85 45 50 c8 63 39 f4 62 39 ec 8f 1a 75 ef 9b 55 dc 9a 51 19 37 27 d0 9d 54 21 eb 5a a0 bb f6 58 a0 be 37 6f 49 c0 10 85 15 3a 50 d3 5c 5d c4 f4 25 a3 80 24 50 9f d2 ea b1 22 59 Data Ascii: F\|O-<jV3_sLHJR;O?\VL1WxnTqY~"Z[z)D,e `>T,)Sj=fGIQOP0;H&[y}NVl\|6B3DB.`Wzeel941N""#EPc9b9uUQ7'T!ZX7oI:P\]%$P"Y
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: b5 7d 2c a1 0c 74 45 b1 cf d8 f8 e1 6f 03 b6 35 db 3a b1 40 f4 10 85 38 f6 19 32 58 2b a4 31 e1 68 c3 5c e3 c1 a8 d9 8f dd c6 d1 a8 79 0c cf ca fe 07 d1 dd f9 c4 1c 8e 12 c9 c2 b2 bf b2 a1 1b ab 50 5c 34 02 e8 76 6d d6 44 b5 63 55 68 24 93 a5 59 5b 6f 45 13 f0 bd 5b ba a2 75 52 be 7b e1 46 8b dd fa d0 33 4a 59 03 ac 99 0c ee 4e 66 cb 75 ca a9 9e 76 c0 e8 c9 74 53 b5 c6 b0 81 44 36 4d 67 e6 d2 6d 93 7d fc 60 ae 83 16 95 00 af e7 d2 21 ca f3 f8 cd 42 2f cc 8f f4 00 6e ab 5e 9d 46 ef 51 b7 cb 80 82 dc be 89 41 da 21 a2 07 d5 27 f0 e9 d6 28 72 24 5a 58 e4 5b 07 47 76 65 45 4f 5d 85 eb b7 4f f3 0f 4e 0e 71 70 68 ee cc 91 3c e4 bd 3c dc 0a 3d 32 52 d1 99 bf 5e 40 24 90 62 dd 15 6e 7f bd 0b ca dd 23 c3 62 2c c4 50 2e 5a f4 f2 de aa 10 cb 0c 8c 0c b2 6d 9f de 0e Data Ascii: },tEo5:@82X+1h\yP\4vmDcUh$Y[oE[uR{F3JYNfuvtSD6Mgm}`!B/n^FQA!'(r$ZX[GveEO]ONqph<<=2R^@$bn#b,P.Zm
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: d0 57 dd 17 68 ef 76 f1 c2 16 3b 10 dd 9e 7a ad 21 ac 6f 8d fc fb 78 14 1a 40 db 81 03 0d f1 fe c7 63 ee 0b 62 ec 42 5e d7 18 ca 18 1d 82 d9 8c 80 9a 91 15 8d 96 8c 69 8b a2 5e 15 d3 e5 94 95 31 b1 12 27 f5 88 19 14 43 54 c8 a7 16 53 fd 92 cf 6b d1 33 ac f5 6e 1c 5b ae c6 5c ae c8 d4 48 a5 98 0a 2c 45 fb 5f 50 fb 29 b6 b9 2d 81 40 af d7 c3 d0 0a e2 57 5d 6d d1 32 8f e2 81 e8 51 ab 61 95 e1 69 aa f7 c9 a7 9e ce 85 26 c6 fb 18 29 aa 55 5e a0 68 56 3b bb 30 c2 7a 06 73 dd 2c d3 da 95 00 30 2a 89 dd 3e 46 6f df ae 8a 79 29 3b d6 11 a6 de 62 78 0e 96 97 95 d3 2c 42 60 08 85 f9 38 86 77 b3 5c a0 9c f3 57 70 6c 19 0d 61 79 22 db b1 fe 53 8e 11 1d 88 ed 3a a9 72 9e 65 45 19 c2 46 0a 4a 95 4e 9a 0f c6 3a 8a 71 94 3f b7 0d d1 12 a1 11 44 aa 14 35 a7 91 3b e9 22 ab Data Ascii: Whv;z!ox@cbB^i^1'CTSk3n[\H,E_P)-@W]m2Qai&)U^hV;0zs,0*>Foy);bx,B`8w\Wplay"S:reEFJN:q?D5;"
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: a0 2b d3 d3 7f 37 30 89 35 1e 57 49 a6 d2 77 4b 25 25 1b 8e f2 df 1f 17 2a 95 b0 01 af 47 2a d9 40 0d cf 37 c4 54 8b 21 a3 cd 7f f8 8a f5 51 b6 34 6f 13 fb 46 fa 5c 10 52 4c 4c 0e d5 85 3b f5 81 a7 97 a6 7c fe 44 24 48 5f b8 34 0e 9b a2 7e 96 66 42 02 d0 d3 19 29 17 16 59 2f 00 36 12 91 45 5f b9 dc 95 d6 28 86 2d 4f d2 2c 57 ce 80 e8 d4 c1 63 51 b8 c5 23 a7 e5 a0 8f a6 65 08 14 35 40 b9 2e 1c 6f 03 d0 ed 61 d4 89 a9 a9 5e f5 91 73 53 e5 a0 2a 14 e2 58 3f cb 96 47 a7 ba 17 be fb d6 b7 26 00 54 12 a1 0f fe 19 e7 17 90 ad 97 20 60 59 20 ba 40 c7 67 76 e6 06 6b aa c3 1a 1b ac 92 b2 c3 fd e8 9b 5d d2 d0 c4 f4 30 e2 38 1e a9 5a 62 72 4a f4 44 2a 99 53 58 18 ac d7 a8 fd 15 1e a7 7a e2 d2 c7 db d2 8f 5f 7b 02 67 e6 37 6e 82 eb 60 06 e9 f8 87 89 2f 12 7f 44 f2 45 Data Ascii: +705WIwK%%G@7T!Q4oF\RLL;\|D$H_4~fB)Y/6E_(-O,WcQ#e5@.oa^sSX?G&T `Y @gvk]08ZbrJDSXz_{g7n`/DE
2024-10-25 08:16:22 UTC	1379	IN	Data Raw: 3f fe cd f5 ff 6f fd 6f d7 ff fb fa bf ee 0f 6f 8b 06 3e 07 2a 82 d3 ff bc fe 8b db a7 17 6f de ee f5 79 e7 66 26 43 34 cb d3 a0 8c 16 49 2f 10 ab 2a d9 70 34 5c c6 f2 2e 3e ac 56 56 c7 3b 3a 5a c4 b6 b9 a8 d4 03 61 75 f4 60 94 62 3d 2d 17 fd b5 e1 98 a6 bf fc 9d b7 77 d7 36 42 a1 77 60 b0 0f 80 ae 18 83 dc 13 ed a0 05 a4 97 14 4e 91 07 5c 65 50 74 ce ac ff e0 f6 85 7f fd fb b7 5f 98 66 a3 bd fd 1e 26 30 7b bd f0 ee 0f cf e7 ae 9f ee 25 a1 c4 31 50 77 b5 5d 6a 63 bd 3c 17 2c 0f 0c 30 da f0 f0 48 98 93 42 0d 6e 3a 39 72 64 7e 5a 3d f7 c1 79 20 68 9c 9c 08 b0 01 00 5b ac dc e7 c6 d7 36 0c fb d7 ec bf 24 fe 13 f1 23 a2 f0 3c d6 94 c7 c0 5a e1 b1 e7 31 0d 7b ec 13 48 ce 5b b1 4a 44 63 89 84 19 60 d7 8c a1 78 21 89 b5 a7 3e 61 e6 90 f6 e4 92 58 09 72 35 68 5c Data Ascii: ?ooo>oyf&C4I/p4\.>VV;:Zau`b=-w6Bw`N\ePt_f&0{%1Pw]jc<,0HBn:9rd~Z=y h[6$#<Z1{H[JDc`x!>aXr5h\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	474	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/optChaining.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	676	IN	HTTP/1.1 200 OK Connection: close Content-Length: 663 Content-Type: application/javascript Etag: "671a1fb2-14a" Last-Modified: Thu, 24 Oct 2024 10:21:38 GMT Traceresponse: 00-18016277d08116dc24c2173447c2175a-df0d52cbbd5b510d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:23 GMT Age: 72185 X-Served-By: cache-par-lfpg1960063-PAR, cache-dfw-kdal2120146-DFW X-Cache: HIT, HIT X-Cache-Hits: 16, 1 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	663	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 2f 2f 20 56 c3 a9 72 69 66 69 65 72 20 73 69 20 6c 27 6f 70 c3 a9 72 61 74 65 75 72 20 64 65 20 63 68 61 c3 ae 6e 61 67 65 20 6f 70 74 69 6f 6e 6e 65 6c 20 65 73 74 20 70 72 69 73 20 65 6e 20 63 68 61 72 67 65 20 6e 61 74 69 76 65 6d 65 6e 74 0a 20 20 69 66 20 28 21 28 27 3f 2e 27 29 20 69 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 20 7b 0a 20 20 2f 2f 20 50 6f 6c 79 66 69 6c 6c 20 64 65 20 6c 27 6f 70 c3 a9 72 61 74 65 75 72 20 64 65 20 63 68 61 c3 ae 6e 61 67 65 20 6f 70 74 69 6f 6e 6e 65 6c 20 28 3f 2e 29 0a 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function() { // Vrifier si l'oprateur de chanage optionnel est pris en charge nativement if (!('?.') in Object.prototype) { // Polyfill de l'oprateur de chanage optionnel (?.) if (!Object.prototype.hasOwnProperty.call(Object.prototype

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	665	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/fonts/mulish/mulish.woff2 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.retif.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	668	IN	HTTP/1.1 200 OK Connection: close Content-Length: 77172 Content-Type: font/woff2 Etag: "671a1fb1-12d74" Last-Modified: Thu, 24 Oct 2024 10:21:37 GMT Traceresponse: 00-18016274d364c45e6a24affe849efd90-2e5d03bb9924e4a0-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72198 Date: Fri, 25 Oct 2024 08:16:23 GMT X-Served-By: cache-par-lfpg1960037-PAR, cache-dfw-ktki8620038-DFW X-Cache: HIT, HIT X-Cache-Hits: 93, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 74 00 14 00 00 00 03 40 9c 00 01 2d 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 87 18 1b 83 94 7a 1c 97 50 3f 48 56 41 52 92 0c 06 60 3f 53 54 41 54 81 38 27 32 00 95 1a 2f 7e 11 08 0a 83 88 5c 82 c1 76 0b 90 46 00 30 85 8e 7a 01 36 02 24 03 a0 16 04 20 05 8d 34 07 c8 7e 0c 07 5b 90 13 93 08 25 63 ec fe 37 09 8c 32 cc 5a e9 1c db 5a 28 2a bf 04 68 93 6f a0 7a ed 2f 06 d8 3c 1a 9d 2b e6 a9 2f 72 05 db a6 21 ef 76 30 87 dd 9f 66 55 fe ff ff ff ff ff df 97 7c 79 6c 33 c9 2f 2f c7 ef 49 39 4a 6b 11 b9 14 98 c2 e6 08 0a ae a6 1e c8 a5 47 d6 2a 6b dd e4 ec a4 6d e7 06 77 a0 74 f2 6e d9 73 a3 15 ad 37 64 25 6d 59 03 b7 76 4b 68 51 fb 76 29 28 8b 70 ca ce 36 94 a3 76 96 07 f2 c1 15 5e 81 a9 41 77 Data Ascii: wOF2-t@-zP?HVAR`?STAT8'2/~\vF0z6$ 4~[%c72ZZ(hoz/<+/r!v0fU\|yl3//I9JkGkmwtns7d%mYvKhQv)(p6v^Aw
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: cc f4 74 de 14 93 2a e4 b0 70 c0 2e 74 e9 2f fd 02 1b b1 a9 b5 ff fd 0f 24 3c 13 5f c2 2c 7d b9 3d f1 15 9f 33 0f 9d d4 b6 31 64 66 c1 4b 20 25 98 ed dc 97 d3 be aa 6e 3b 79 af 4a 1d 2f 08 12 5e 32 60 96 3c 59 e2 23 37 c8 56 26 0e c1 12 66 2e d6 6d 9f 7c 1c 20 f0 7c 60 46 95 ad 8b 96 47 48 a0 08 bd da 64 7a 70 73 91 1f 20 3c 9f 2b f7 a6 15 b6 36 c9 ff 39 ee 99 5a 24 12 21 51 72 83 50 f8 4d 39 84 53 1b 02 67 fb f5 f2 5e ef bf 5f 40 23 9b 1d a0 54 cd 2c 24 55 12 51 bb 12 4d ee af 05 1c 50 ee 09 60 41 e0 cb 8f b5 90 ea 65 2a 64 d7 fc f3 65 44 4f 74 e5 6c 05 5b 39 5b c1 86 0c 79 c8 90 01 b9 d9 bd ef 0b 02 06 3a a1 85 97 ee c9 06 44 57 00 01 3c ff ea f1 e7 e5 ce 9b 69 ab 42 7e a2 25 7c ab 96 6d 3e 2c a1 09 77 45 35 21 0d 21 0d 21 8d a4 96 a0 4e 9f 7a 85 44 a3 Data Ascii: tp.t/$<_,}=31dfK %n;yJ/^2`<Y#7V&f.m\| \|`FGHdzps <+69Z$!QrPM9Sg^_@#T,$UQMP`AedeDOtl[9[y:DW<iB~%\|m>,wE5!!!NzD
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: ba ea a6 84 57 07 26 32 51 13 b5 49 97 d8 ac cf 86 62 ac a6 ca 37 be 99 9b d0 85 6e e9 d6 61 9b 8e e9 7c fa f5 8e 32 5a f1 46 b6 76 f4 b3 5f e3 12 f9 9b ca 76 c1 01 81 52 46 20 18 78 29 1d 4c 74 08 07 81 01 de 0c 60 07 86 18 27 7c 05 7c c3 8f 28 a2 ca 22 ee a1 1e 1c 96 82 1e 34 4a 40 c8 e2 ae 5e 7d fa 0d 1a 42 0e 43 0b 0a 04 53 59 50 08 01 2e 47 5c 10 cb 6b 40 89 86 30 02 61 22 41 5f 4e c8 da 09 62 f2 0e f2 9e 32 1a 3f 6c 43 50 da 61 94 6b 06 e5 9e 43 79 2e a2 1a 6d a1 c2 43 05 15 59 b3 a0 46 75 18 75 f0 45 9a 5e cc d0 54 1a a1 a9 6c 9e b6 37 49 9a de 65 41 55 6b 4b 03 28 98 12 1c 28 a3 13 13 93 e4 58 64 c4 4f 4e 02 ad 4c b0 dc 84 5a 9d 06 d6 24 4c 51 5a d8 92 56 f6 84 24 f6 d0 9d 2b f4 e2 0b 29 e2 61 a8 74 18 e9 28 cc 62 08 8b d8 c3 52 ae b0 9c 27 e4 a8 Data Ascii: W&2QIb7na\|2ZFv_vRF x)Lt`'\|\|("4J@^}BCSYP.G\k@0a"A_Nb2?lCPakCy.mCYFuuE^Tl7IeAUkK((XdONLZ$LQZV$+)at(bR'
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: d1 ec eb 67 0a 4a 37 02 4f 80 28 0d 6d 37 00 44 c1 23 d6 c5 ac 12 6d 7f 4f 29 de 47 72 d1 a6 c6 d1 93 53 79 ee 77 5d 86 f7 23 bb ae 0c 72 a7 d3 df 24 cc 37 09 9a a0 84 e3 3a 7b 3a 34 d4 9e 1c ed 13 61 1a c0 3a 60 4c 2f 56 f6 b8 d6 97 35 47 d3 16 2d af cb 0e 18 d3 e3 c7 1b 81 87 6a f8 15 95 d4 e4 b1 43 45 7d 96 6f 5e 83 43 7b 03 38 0c 43 ed 88 d5 a2 5a 18 f0 69 cf af 8d 23 70 dd 7a 03 a2 aa 7b 85 ed 52 fe 23 50 3d fe 67 b0 45 f0 a8 e1 62 74 95 bb f2 44 3f 5e e3 da 5f 69 10 ee 1e d4 a8 2c 00 00 1f a9 57 a1 61 78 c3 d2 a3 14 2f 0a cb 10 5c 0d b7 4a 3d 84 ca 5d 69 b9 82 87 10 49 ae 79 1c 40 92 c3 71 e1 8d 58 d6 ae 21 08 18 f6 e9 5c f4 19 94 7d c3 a8 1c 26 24 22 6f 12 e2 15 07 5f 1e 36 0b e2 11 f5 bc c8 e5 c4 aa 19 01 e1 95 a2 84 de ee 96 d6 34 26 3e d2 cc 28 Data Ascii: gJ7O(m7D#mO)GrSyw]#r$7:{:4a:`L/V5G-jCE}o^C{8CZi#pz{R#P=gEbtD?^_i,Wax/\J=]iIy@qX!\}&$"o_64&>(
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 78 fa 78 6e a9 29 d0 fb 0f 2e fd a9 1b 19 17 c1 f0 f5 5a 27 cf 7d cc 1d 7c 79 f7 a6 7c 47 ad 3f 82 a5 28 02 4b 92 fe 91 da b1 c9 4a 1e 8e e9 8c f3 11 bf e3 08 e0 17 c7 7a a8 59 6f 8c 5b 68 fc da 0d d7 74 b7 dc c2 84 b1 4b f3 06 9b 47 2a d0 12 74 c5 bf 6e 47 36 51 ef 04 98 8f 1d ea 61 5b 46 a6 a6 e8 64 bb 1f 91 c6 45 0f a3 8b 8d 6c 3f 2c be 25 f5 03 db ec 3d ff 7a 68 31 a8 c0 c3 47 83 d1 c1 12 4c 0e 0b fa 9d 6a 85 4e ee f3 59 e9 db b2 b9 c9 f9 42 f3 14 64 11 37 5e 64 f9 16 da 5c bf 70 0b 08 e3 6b 63 4c 27 d7 4f 3d 2b b9 79 f5 de 77 8e 16 dd dc 2e d8 28 bb 79 31 e2 1f 20 d3 18 03 6e 5e 19 09 74 33 d5 d9 b6 d4 d6 ba 0f db c7 08 e2 f9 f5 3d 15 92 76 85 02 6c bc 3b af d8 76 92 c9 9c 8e 2c bd 27 e6 82 33 ff fe d5 71 50 d6 52 1c 01 e8 3d 65 7a fa 67 19 01 6e da Data Ascii: xxn).Z'}\|y\|G?(KJzYo[htKG*tnG6Qa[FdEl?,%=zh1GLjNYBd7^d\pkcL'O=+yw.(y1 n^t3=vl;v,'3qPR=ezgn
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: fa e0 a8 76 8a 9b ba b9 f4 6e 2d b1 8e 67 b9 61 17 46 dc 6d 72 b9 0f 87 53 70 db 19 c5 48 1e a4 6f 3a ef a7 7c c2 46 0e ea 5f 4f 16 74 71 a9 b6 ac e2 4b cf d3 1a bc 93 4e fd e3 3c 3b 9b 65 30 82 96 63 7e fd e2 4a 1b c5 6a 1f fd 53 fa 31 f4 62 87 0f 16 60 58 5a 11 42 08 1d dd 3d c4 56 52 f6 5e d4 2c ae 76 47 8e 46 4f 76 e5 9c 7b a2 bf 54 84 ab e8 ed 36 13 39 d2 2a fc 81 44 2a 7f 5f 4c ac 41 2d 4d 7f 73 7f 39 08 e9 96 2e a2 1c 6e ac 40 b1 24 3c a0 97 0d b9 d7 bc c3 73 cb b0 87 f8 42 3b 35 a9 d3 04 09 55 d7 49 51 6e c3 26 6c 61 6c 58 f0 29 16 ff c0 35 ad a4 1d e7 cb 19 ec 68 21 2e 11 86 10 a9 cb 28 62 91 e7 b7 7c da 22 0b fc da 6b b1 74 a4 14 bf 8c 1f cc 09 1b d9 36 2c 2c bc 3f e4 37 3b 94 f6 16 56 cf e0 90 33 e3 a2 80 28 1b 6b 6b 98 0d 6d e7 78 ab 12 08 db Data Ascii: vn-gaFmrSpHo:\|F_OtqKN<;e0c~JjS1b`XZB=VR^,vGFOv{T69D_LA-Ms9.n@$<sB;5UIQn&lalX)5h!.(b\|"kt6,,?7;V3(kkmx
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 99 c4 86 f8 27 77 2d be d4 21 44 17 e4 47 f2 4f 1e 17 11 ef 81 47 ae 6e 1d 54 a6 c1 8d d6 5d fe b6 dc 5d 6e 9d 1b 16 f2 5b 37 f0 b3 d6 1e 7e a0 f2 f4 4f 1d ff 7c 7b ca 49 3b bd ec 6f 00 ba db ed 48 62 26 90 2a ab c3 4e 80 e5 4c c5 83 52 3c 02 1e 23 31 20 7b cb 43 95 a3 d5 0c 72 4c df 71 23 96 d8 19 12 35 ef 49 01 3f 74 55 ba 44 98 07 8d bf 73 00 d8 22 f7 8e 6e b5 b3 dd b0 31 2c 87 10 1d 94 16 00 3a 91 55 d1 be bf 99 0b a5 2d 9b bf 82 46 86 31 4a a0 2a 62 77 5b 0e de a3 70 48 1c b5 b9 8c 0d bd bf fa 58 80 c2 8e d1 30 00 be 1d b9 91 a2 3a c9 cd b0 75 b6 c3 61 80 59 64 52 f6 4c 49 11 5a ff 95 1e 98 de 4d e7 98 51 af cf 29 24 47 dc 79 ea 2b e1 cd 2d bf b6 74 ab 91 02 16 96 ec 27 33 8b 5d 2d 08 fd 26 5b e3 d3 50 85 19 19 8c 25 0d 1b 11 0e a5 ef 9e 6f d1 8c 12 Data Ascii: 'w-!DGOGnT]]n[7~O\|{I;oHb&NLR<#1 {CrLq#5I?tUDs"n1,:U-F1Jbw[pHX0:uaYdRLIZMQ)$Gy+-t'3]-&[P%o
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: ff 89 b7 8c 14 0c a9 2e 06 38 2a 2f a9 bc db 5d 0d 82 c1 a4 8b ee 54 9c be 6e 0d 4a 5a 1b 82 17 d0 0d b5 51 b1 38 fd 26 bd ef 69 0e 69 4b 14 9e 92 ff ff d5 e1 73 6a 8e 7a 49 86 97 1b 46 c4 c5 bb c9 1f 14 73 7e 08 b4 9c 85 67 d8 b3 13 07 0e 1b ba e5 25 b0 56 bb 6d f7 aa 7a f0 2f 25 ea ae e6 96 e8 59 fe a4 76 f7 61 be 0c bf 63 e6 e6 9a f2 9b e1 32 d9 28 6e 46 2f fd ff 52 dc 6c 50 69 41 e7 db 62 f9 d0 38 1a 5f da 54 be b5 f2 5b 1e 5c af a2 3b 14 81 6a 95 30 fa 68 f5 38 37 64 e7 fa 4d 9b a7 7d f8 c4 22 0d 00 c4 72 cd fe 08 1b 50 ab 95 e7 b5 72 9e fd 7f 03 10 f0 c6 ef 80 3d dc 82 ad fd 2f f9 0a 18 b2 c8 01 76 50 5e 10 25 88 61 a7 c7 2a 78 7c 29 35 74 6b 08 94 db 17 17 e8 4f 6c 68 25 bc 9a 1a 8f 6c c6 fb 6b f1 17 a0 ce 38 37 f1 71 4d a3 84 da 51 6c e4 bb 31 72 Data Ascii: .8/]TnJZQ8&iiKsjzIFs~g%Vmz/%Yvac2(nF/RlPiAb8_T[\;j0h87dM}"rPr=/vP^%ax\|)5tkOlh%lk87qMQl1r
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 09 04 e2 fb d7 22 26 18 cc 7c ba 41 34 e7 21 82 0b 0f c7 c7 e9 47 18 89 0b 4f 31 e6 fe 33 8c 83 91 41 f2 f9 ae f5 c6 ba e9 30 b6 11 04 b6 87 d6 ec 48 6d a6 27 06 b4 29 e1 ea 34 ef cf ae a1 e4 3a 77 f0 e5 4d 9e a0 bc 46 f1 a3 2d 0e 58 f1 41 8e 1c d1 a8 25 a0 8a 64 a3 1f 4c 39 75 1e 18 76 db 7d 33 04 99 c7 de a6 61 96 81 ae 5a 0e 99 fd 40 8a bc e1 f3 87 a8 27 c2 f7 90 bf d4 8e 5c 63 b3 0d d2 2a 3d 43 d4 ea 5c 86 a6 2a 3d 71 c3 91 ee e6 fe df 1a b8 2e a7 81 20 35 c6 01 9f b0 e7 fb 25 cf eb 35 f9 08 d1 91 a9 b2 3b b1 7a f2 0c a3 c6 52 c0 eb aa 7d a8 56 75 46 04 6b 1a 47 a7 19 c7 a8 05 47 ad 1f 8e 4e 1a 27 d9 41 0e 7b f3 8c a6 53 18 3d 2d 08 69 c2 e6 24 41 2d a8 f7 30 16 58 8c eb 98 09 28 82 cc 94 ac a9 96 09 52 b2 36 c3 31 6c 3e ba 9a 09 96 ba 19 38 92 99 99 Data Ascii: "&\|A4!GO13A0Hm')4:wMF-XA%dL9uv}3aZ@'\c=C\=q. 5%5;zR}VuFkGGN'A{S=-i$A-0X(R61l>8
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: fa 63 eb 5b e9 25 7c 81 50 24 96 48 e5 0a 25 08 c1 08 8a e1 04 49 d1 6a 8d 56 67 30 9a cc 16 ab cd ee 60 d8 70 2f 79 01 37 bf 7a 15 5e dd c6 03 9b 19 05 5f 20 14 89 25 52 b9 42 09 42 30 82 62 38 41 52 b4 5a a3 d5 19 8c 26 b3 c5 6a b3 3b 18 36 dc 66 e1 6e 58 c1 17 08 45 62 89 54 ae 50 82 10 8c a0 18 4e 90 14 ad d6 68 75 06 a3 c9 6c b1 da ec 0e 86 0d 57 93 60 d4 cb a9 e0 0b 84 22 b1 44 2a 57 28 41 08 46 50 0c 27 48 8a 56 6b b4 3a 83 d1 64 b6 58 6d 76 07 c3 86 9b 2c 3e ff dc 4c 3f f4 f5 c7 82 77 c9 e9 79 ac 9e 98 3d be 25 7c 81 50 24 96 48 e5 0a 25 08 c1 08 8a e1 04 49 d1 6a 8d 56 67 30 9a cc 16 ab cd ee 60 d8 70 ab ba d6 c7 a7 05 e2 df 8c c8 a9 e0 ad 15 a7 65 14 60 a0 49 6b fe 21 08 3b b6 3e e3 4b f8 02 a1 48 2c 91 ca 15 4a 10 82 11 14 c3 09 92 a2 d5 1a ad Data Ascii: c[%\|P$H%IjVg0`p/y7z^_ %RBB0b8ARZ&j;6fnXEbTPNhulW`"D*W(AFP'HVk:dXmv,>L?wy=%\|P$H%IjVg0`pe`Ik!;>KH,J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49748	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	670	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/alpine3.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.retif.eu sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	679	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39811 Content-Type: application/javascript Etag: "671a1fa6-3964" Last-Modified: Thu, 24 Oct 2024 10:21:26 GMT Traceresponse: 00-18016274d3efd450c8b58e46dcdd1682-a4eb41d57191ff8b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72198 Date: Fri, 25 Oct 2024 08:16:23 GMT X-Served-By: cache-par-lfpg1960032-PAR, cache-dfw-kdal2120085-DFW X-Cache: HIT, HIT X-Cache-Hits: 76, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 57 65 3d 21 31 2c 47 65 3d 21 31 2c 42 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 74 28 65 29 7b 61 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 6e 28 65 29 7b 42 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 42 2e 70 75 73 68 28 65 29 2c 63 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 65 29 7b 6c 65 74 20 74 3d 42 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 21 3d 3d 2d 31 26 26 42 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 29 7b 21 47 65 26 26 21 57 65 26 26 28 57 65 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 6c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6e 28 29 7b 57 65 3d 21 31 2c 47 65 3d 21 30 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 42 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 42 5b Data Ascii: (()=>{var We=!1,Ge=!1,B=[];function $t(e){an(e)}function an(e){B.includes(e)\|\|B.push(e),cn()}function he(e){let t=B.indexOf(e);t!==-1&&B.splice(t,1)}function cn(){!Ge&&!We&&(We=!0,queueMicrotask(ln))}function ln(){We=!1,Ge=!0;for(let e=0;e<B.length;e++)B[
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 74 74 3d 21 31 7d 76 61 72 20 74 65 3d 5b 5d 2c 6e 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 75 6e 28 29 7b 74 65 3d 74 65 2e 63 6f 6e 63 61 74 28 65 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 65 2e 6c 65 6e 67 74 68 26 26 21 6e 74 26 26 28 6e 74 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 28 29 3d 3e 7b 64 6e 28 29 2c 6e 74 3d 21 31 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 29 7b 58 65 28 74 65 29 2c 74 65 2e 6c 65 6e 67 74 68 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 21 74 74 29 72 65 74 75 72 6e 20 65 28 29 3b 66 6e 28 29 3b 6c 65 74 20 74 3d 65 28 29 3b 72 65 74 75 72 6e 20 72 74 28 29 2c 74 7d 76 61 72 20 69 74 3d 21 31 2c 67 65 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 55 74 28 29 7b 69 74 3d 21 30 7d 66 Data Ascii: tt=!1}var te=[],nt=!1;function un(){te=te.concat(et.takeRecords()),te.length&&!nt&&(nt=!0,queueMicrotask(()=>{dn(),nt=!1}))}function dn(){Xe(te),te.length=0}function m(e){if(!tt)return e();fn();let t=e();return rt(),t}var it=!1,ge=[];function Ut(){it=!0}f
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 74 61 63 6b 3d 5b 74 2c 2e 2e 2e 6b 28 72 7c 7c 65 29 5d 2c 28 29 3d 3e 7b 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3d 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 2e 66 69 6c 74 65 72 28 6e 3d 3e 6e 21 3d 3d 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 2c 74 29 7b 6c 65 74 20 72 3d 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 5b 30 5d 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 5b 6e 2c 69 5d 29 3d 3e 7b 72 5b 6e 5d 3d 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3f 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3a 74 79 70 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: tack=[t,...k(r\|\|e)],()=>{e._x_dataStack=e._x_dataStack.filter(n=>n!==t)}}function ot(e,t){let r=e._x_dataStack[0];Object.entries(t).forEach(([n,i])=>{r[n]=i})}function k(e){return e._x_dataStack?e._x_dataStack:typeof ShadowRoot=="function"&&e instanceof S
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 28 74 68 69 73 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 2c 28 29 3d 3e 70 6e 28 6e 2c 69 29 2c 73 3d 3e 73 74 28 6e 2c 69 2c 73 29 2c 69 2c 6f 29 7d 7d 3b 72 65 74 75 72 6e 20 74 28 72 29 2c 6e 3d 3e 7b 69 66 28 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 6e 2e 5f 78 5f 69 6e 74 65 72 63 65 70 74 6f 72 29 7b 6c 65 74 20 69 3d 72 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 62 69 6e 64 28 72 29 3b 72 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 28 6f 2c 73 2c 61 29 3d 3e 7b 6c 65 74 20 63 3d 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 28 6f 2c 73 2c 61 29 3b 72 65 74 75 72 6e 20 72 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3d 63 2c 69 28 6f 2c 73 2c 61 29 7d 7d 65 6c 73 65 20 72 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3d 6e 3b 72 65 74 75 72 Data Ascii: (this.initialValue,()=>pn(n,i),s=>st(n,i,s),i,o)}};return t(r),n=>{if(typeof n=="object"&&n!==null&&n._x_interceptor){let i=r.initialize.bind(r);r.initialize=(o,s,a)=>{let c=n.initialize(o,s,a);return r.initialValue=c,i(o,s,a)}}else r.initialValue=n;retur
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 5b 65 5d 29 72 65 74 75 72 6e 20 6c 74 5b 65 5d 3b 6c 65 74 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6e 3d 2f 5e 5b 5c 6e 5c 73 5d 2a 69 66 2e 2a 5c 28 2e 2a 5c 29 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5e 28 6c 65 74 7c 63 6f 6e 73 74 29 5c 73 2f 2e 74 65 73 74 28 65 29 3f 60 28 28 29 20 3d 3e 20 7b 20 24 7b 65 7d 20 7d 29 28 29 60 3a 65 2c 6f 3d 28 28 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 5b 22 5f 5f 73 65 6c 66 22 2c 22 73 63 6f 70 65 22 5d 2c 60 77 69 74 68 20 28 73 63 6f 70 65 29 20 7b 20 5f 5f 73 65 6c 66 2e 72 65 73 75 6c 74 20 3d 20 24 7b 6e 7d 20 7d 3b 20 5f 5f 73 65 6c 66 2e 66 69 6e 69 73 68 65 Data Ascii: [e])return lt[e];let r=Object.getPrototypeOf(async function(){}).constructor,n=/^[\n\s]if.$.*$/.test(e)\|\|/^(let\|const)\s/.test(e)?`(() => { ${e} })()`:e,o=(()=>{try{return new r(["__self","scope"],`with (scope) { __self.result = ${n} }; __self.finishe
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6c 28 29 3b 6e 72 3d 74 2c 69 65 2e 73 65 74 28 74 2c 5b 5d 29 3b 6c 65 74 20 72 3d 28 29 3d 3e 7b 66 6f 72 28 3b 69 65 2e 67 65 74 28 74 29 2e 6c 65 6e 67 74 68 3b 29 69 65 2e 67 65 74 28 74 29 2e 73 68 69 66 74 28 29 28 29 3b 69 65 2e 64 65 6c 65 74 65 28 74 29 7d 2c 6e 3d 28 29 3d 3e 7b 64 74 3d 21 31 2c 72 28 29 7d 3b 65 28 72 29 2c 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 65 29 7b 6c 65 74 20 74 3d 5b 5d 2c 72 3d 61 3d 3e 74 2e 70 75 73 68 28 61 29 2c 5b 6e 2c 69 5d 3d 46 74 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 69 29 2c 5b 7b 41 6c 70 69 6e 65 3a 49 2c 65 66 66 65 63 74 3a 6e 2c 63 6c 65 61 6e 75 70 3a 72 2c 65 76 61 6c 75 61 74 65 4c 61 74 65 72 3a 67 2e 62 69 6e 64 28 67 2c 65 29 2c 65 76 61 6c 75 61 74 65 3a 50 2e 62 69 6e Data Ascii: l();nr=t,ie.set(t,[]);let r=()=>{for(;ie.get(t).length;)ie.get(t).shift()();ie.delete(t)},n=()=>{dt=!1,r()};e(r),n()}function at(e){let t=[],r=a=>t.push(a),[n,i]=Ft(e);return t.push(i),[{Alpine:I,effect:n,cleanup:r,evaluateLater:g.bind(g,e),evaluate:P.bin
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 3a 74 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 41 65 2e 69 6e 64 65 78 4f 66 28 72 29 2d 41 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 2c 72 3d 7b 7d 29 7b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 64 65 74 61 69 6c 3a 72 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 29 7d 76 61 72 20 6d 74 3d 5b 5d 2c 68 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 54 65 28 65 3d 28 29 3d 3e 7b 7d 29 7b 72 65 74 75 72 6e 20 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 28 29 3d 3e 7b 68 74 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 4f 65 28 29 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 74 Data Ascii: :t.type;return Ae.indexOf(r)-Ae.indexOf(n)}function z(e,t,r={}){e.dispatchEvent(new CustomEvent(t,{detail:r,bubbles:!0,composed:!0,cancelable:!0}))}var mt=[],ht=!1;function Te(e=()=>{}){return queueMicrotask(()=>{ht\|\|setTimeout(()=>{Oe()})}),new Promise(t
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6c 65 70 6f 72 74 42 61 63 6b 29 2c 21 21 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 72 65 74 75 72 6e 20 51 28 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 72 65 74 75 72 6e 20 66 72 28 29 2e 73 6f 6d 65 28 74 3d 3e 65 2e 6d 61 74 63 68 65 73 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 3d 52 29 7b 69 72 28 28 29 3d 3e 7b 74 28 65 2c 28 72 2c 6e 29 3d 3e 7b 6e 65 28 72 2c 72 2e 61 74 74 72 69 62 75 74 65 73 29 2e 66 6f 72 45 61 63 68 28 69 3d 3e 69 28 29 29 2c 72 2e 5f 78 5f 69 67 6e 6f 72 65 26 26 6e 28 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6e 28 65 29 7b 52 28 65 2c 74 3d 3e 51 65 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: leportBack),!!e.parentElement)return Q(e.parentElement,t)}}function dr(e){return fr().some(t=>e.matches(t))}function w(e,t=R){ir(()=>{t(e,(r,n)=>{ne(r,r.attributes).forEach(i=>i()),r._x_ignore&&n()})})}function bn(e){R(e,t=>Qe(t))}function oe(e,t){return
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 29 3d 3e 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 72 7c 7c 22 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 61 2d 7a 5d 29 28 5b 41 2d 5a 5d 29 2f 67 2c 22 24 31 2d 24 32 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 2c 74 3d 28 29 3d 3e 7b 7d 29 7b 6c 65 74 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3f 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 72 3d 21 30 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 64 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 2c 28 65 2c 7b 76 61 6c 75 65 3a 74 2c 6d 6f 64 69 66 69 65 72 73 3a 72 Data Ascii: )=>{e.setAttribute("style",r\|\|"")}}function Sn(e){return e.replace(/([a-z])([A-Z])/g,"$1-$2").toLowerCase()}function se(e,t=()=>{}){let r=!1;return function(){r?t.apply(this,arguments):(r=!0,e.apply(this,arguments))}}d("transition",(e,{value:t,modifiers:r
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 3a 66 7d 2c 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 74 65 72 2e 73 74 61 72 74 3d 7b 6f 70 61 63 69 74 79 3a 6c 2c 74 72 61 6e 73 66 6f 72 6d 3a 60 73 63 61 6c 65 28 24 7b 75 7d 29 60 7d 2c 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 74 65 72 2e 65 6e 64 3d 7b 6f 70 61 63 69 74 79 3a 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 31 29 22 7d 29 2c 6f 26 26 28 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 6c 65 61 76 65 2e 64 75 72 69 6e 67 3d 7b 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3a 79 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 70 2c 74 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 3a 4e 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 60 24 7b 70 65 7d 73 60 2c 74 72 61 6e 73 69 74 69 Data Ascii: :f},e._x_transition.enter.start={opacity:l,transform:`scale(${u})`},e._x_transition.enter.end={opacity:1,transform:"scale(1)"}),o&&(e._x_transition.leave.during={transformOrigin:y,transitionDelay:p,transitionProperty:N,transitionDuration:`${pe}s`,transiti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	482	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Smile_ElasticsuiteTracker/js/tracking.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	678	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12715 Content-Type: application/javascript Etag: "671a1fa3-ce9" Last-Modified: Thu, 24 Oct 2024 10:21:23 GMT Traceresponse: 00-18016274d2afd98ccd511b38ed181120-2bb6083bbc959a1b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:23 GMT Age: 72198 X-Served-By: cache-par-lfpg1960049-PAR, cache-dfw-ktki8620065-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 1 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 64 6f 63 75 6d 65 6e 74 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 67 6c 6f 62 61 6c 20 77 69 6e 64 6f 77 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 67 6c 6f 62 61 6c 20 63 6f 6e 73 6f 6c 65 3a 20 74 72 75 65 20 2a 2f 0a 2f 2a 20 65 78 70 6f 72 74 65 64 20 73 6d 69 6c 65 54 72 61 63 6b 65 72 20 2a 2f 0a 0a 2f 2a 2a 0a 20 2a 20 44 49 53 43 4c 41 49 4d 45 52 0a 20 2a 0a 20 2a 20 44 6f 20 6e 6f 74 20 65 64 69 74 20 6f 72 20 61 64 64 20 74 6f 20 74 68 69 73 20 66 69 6c 65 20 69 66 20 79 6f 75 20 77 69 73 68 20 74 6f 20 75 70 67 72 61 64 65 20 53 6d 69 6c 65 20 45 6c 61 73 74 69 63 53 75 69 74 65 20 74 6f 20 6e 65 77 65 72 0a 20 2a 20 76 65 72 73 69 6f 6e 73 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 2e 0a 20 2a 0a 20 2a 20 40 63 61 74 65 Data Ascii: /* global document: true // global window: true // global console: true // exported smileTracker //* * DISCLAIMER * * Do not edit or add to this file if you wish to upgrade Smile ElasticSuite to newer * versions in the future. * * @cate
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 72 65 73 20 3d 20 22 65 78 70 69 72 65 73 3d 22 20 2b 20 65 78 70 69 72 65 73 41 74 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 22 3d 22 20 2b 20 63 6f 6f 6b 69 65 56 61 6c 75 65 20 2b 20 22 3b 20 22 20 2b 20 65 78 70 69 72 65 73 20 2b 20 22 3b 20 70 61 74 68 3d 22 20 2b 20 70 61 74 68 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 52 65 74 72 69 65 76 65 20 76 61 6c 75 65 73 20 66 6f 72 20 61 20 70 61 72 61 6d 20 69 6e 74 6f 20 55 52 4c 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 6e 61 6d 65 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 72 65 73 Data Ascii: res = "expires=" + expiresAt.toUTCString(); document.cookie = cookieName + "=" + cookieValue + "; " + expires + "; path=" + path; } // Retrieve values for a param into URL function getQueryStringParameterByName(name) { let res
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6e 20 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 61 72 61 6d 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 61 72 61 6d 56 61 6c 75 65 20 3d 20 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 50 61 72 61 6d 65 74 65 72 42 79 4e 61 6d 65 28 70 61 72 61 6d 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 61 72 61 6d 56 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 70 70 65 6e 64 20 74 68 65 20 47 41 20 70 61 72 61 6d 20 74 6f 20 74 68 65 20 74 72 61 63 6b 65 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 61 64 64 50 61 67 65 56 61 72 28 70 61 72 61 6d 4e 61 6d 65 2c 20 70 61 Data Ascii: n (element) { const paramName = element; const paramValue = getQueryStringParameterByName(paramName); if (paramValue) { // Append the GA param to the tracker this.addPageVar(paramName, pa
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 20 28 6d 65 74 61 54 61 67 73 5b 74 61 67 49 6e 64 65 78 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 61 6d 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 3d 20 6d 65 74 61 54 61 67 73 5b 74 61 67 49 6e 64 65 78 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 61 6d 65 27 29 2e 73 70 6c 69 74 28 27 3a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6d 70 6f 6e 65 6e 74 73 2e 6c 65 6e 67 74 68 20 3d 3d 3d 20 32 20 26 26 20 63 6f 6d 70 6f 6e 65 6e 74 73 5b 30 5d 20 3d 3d 3d 20 27 73 63 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 76 61 72 4e 61 6d 65 20 3d 20 63 6f 6d 70 6f 6e 65 6e 74 73 5b 31 5d 3b 0a 20 20 Data Ascii: (metaTags[tagIndex].getAttribute('name')) { let components = metaTags[tagIndex].getAttribute('name').split(':'); if (components.length === 2 && components[0] === 'sct') { let varName = components[1];
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 79 73 28 74 68 69 73 2e 76 61 72 73 29 2e 66 6f 72 45 61 63 68 28 6b 65 79 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 5b 6b 65 79 5d 20 3d 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 68 69 73 2e 76 61 72 73 5b 6b 65 79 5d 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 72 61 63 6b 65 74 56 61 72 73 54 6f 4a 73 6f 6e 28 74 68 69 73 2e 76 61 72 73 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 75 72 6c 50 61 72 61 6d 73 20 3d 20 67 65 74 54 72 61 63 6b 65 72 56 61 72 73 2e 62 69 6e 64 28 74 68 69 73 29 28 29 3b 0a 20 20 20 20 20 20 20 20 72 65 Data Ascii: ys(this.vars).forEach(key => { this.vars[key] = decodeURIComponent(this.vars[key]); }); return bracketVarsToJson(this.vars); } function getTrackerUrl() { let urlParams = getTrackerVars.bind(this)(); re
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 62 6f 64 79 27 29 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 69 6c 64 54 72 61 63 6b 69 6e 67 49 6d 67 2e 62 69 6e 64 28 74 68 69 73 29 28 62 6f 64 79 4e 6f 64 65 2c 20 67 65 74 54 72 61 63 6b 65 72 55 72 6c 2e 62 69 6e 64 28 74 68 69 73 29 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 54 65 6c 65 6d 65 74 72 79 28 29 20 7b 0a 20 20 20 20 20 20 20 20 69 Data Ascii: nt.getElementsByTagName('body')[0]; buildTrackingImg.bind(this)(bodyNode, getTrackerUrl.bind(this)()); } this.trackerSent = true; this.vars = {}; } } function sendTelemetry() { i
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 62 75 69 6c 64 54 72 61 63 6b 69 6e 67 49 6d 67 28 62 6f 64 79 4e 6f 64 65 2c 20 74 72 61 63 6b 69 6e 67 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 69 6d 67 4e 6f 64 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 20 74 72 61 63 6b 69 6e 67 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 69 6d 67 4e 6f 64 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 6c 74 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 73 65 74 54 72 61 63 6b 65 72 53 74 79 6c 65 28 69 6d 67 4e 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 62 6f 64 79 4e 6f 64 65 Data Ascii: } function buildTrackingImg(bodyNode, trackingUrl) { let imgNode = document.createElement('img'); imgNode.setAttribute('src', trackingUrl); imgNode.setAttribute('alt', ''); setTrackerStyle(imgNode); bodyNode
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 78 70 69 72 65 41 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 65 78 70 69 72 65 41 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 20 2b 20 70 61 72 73 65 49 6e 74 28 63 6f 6e 66 69 67 5b 27 76 69 73 69 74 5f 63 6f 6f 6b 69 65 5f 6c 69 66 65 74 69 6d 65 27 5d 2c 20 31 30 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 43 6f 6f 6b 69 65 28 63 6f 6e 66 69 67 5b 27 76 69 73 69 74 5f 63 6f 6f 6b 69 65 5f 6e 61 6d 65 27 5d 2c 20 67 75 69 64 28 29 2c 20 65 78 70 69 72 65 41 74 2c 20 70 61 74 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 70 69 72 65 41 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 65 78 70 69 72 65 41 74 2e 67 65 74 53 65 63 Data Ascii: xpireAt.setSeconds(expireAt.getSeconds() + parseInt(config['visit_cookie_lifetime'], 10)); setCookie(config['visit_cookie_name'], guid(), expireAt, path); } else { expireAt.setSeconds(expireAt.getSec
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 4e 6f 74 68 69 6e 67 2e 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2f 20 49 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 74 72 61 63 6b 65 72 0a 20 20 20 20 63 6f 6e 73 74 20 53 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 65 6c 65 6d 65 74 72 79 54 72 61 63 6b 65 72 53 65 6e 74 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 74 72 61 63 6b 65 72 56 61 72 73 41 64 64 65 Data Ascii: (e) { // Nothing. } } // Implementation of the tracker const SmileTrackerImpl = function() { this.vars = {}; this.trackerSent = false; this.telemetryTrackerSent = false; this.trackerVarsAdde
2024-10-25 08:16:23 UTC	304	IN	Data Raw: 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 43 75 73 74 6f 6d 65 72 56 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 61 64 64 43 75 73 74 6f 6d 65 72 56 61 72 2e 62 69 6e 64 28 74 68 69 73 29 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 53 6d 69 6c 65 54 72 61 63 6b 65 72 49 6d 70 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 53 65 73 73 69 6f 6e 56 61 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 61 64 64 53 65 73 73 69 6f 6e 56 61 72 2e 62 69 6e 64 28 74 68 69 73 29 28 76 61 72 4e 61 6d 65 2c 20 76 61 6c 75 65 29 3b 0a Data Ascii: mileTrackerImpl.prototype.addCustomerVar = function (varName, value) { addCustomerVar.bind(this)(varName, value); }; SmileTrackerImpl.prototype.addSessionVar = function (varName, value) { addSessionVar.bind(this)(varName, value);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	648	OUT	GET /media/logo/default/logo.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	809	IN	HTTP/1.1 200 OK Connection: close Content-Length: 648 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "HNyGexF6svi11NVko8oeYFFl01I//+gif9wTqEm3eZE" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=1824 idim=266x95 ifmt=png ofsz=648 odim=266x95 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277d446bbb9ff8680c592eb25cc-9ce11dda4170814d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72184 Date: Fri, 25 Oct 2024 08:16:23 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-ktki8620025-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	648	IN	Data Raw: 52 49 46 46 80 02 00 00 57 45 42 50 56 50 38 4c 73 02 00 00 2f 09 81 17 10 8f 40 90 6d 53 92 f9 7b 3e 77 98 f2 e1 50 db b6 0d 1b 72 1b 9d 92 40 3f fe 10 14 3f 1c 68 db b6 13 d5 b6 12 88 82 07 29 e6 ff 7f ee bd 12 40 97 d9 d5 43 44 ff 27 80 3e b3 0f 19 f4 15 b8 1d 15 80 fd 78 3f 1b fe df 76 3e 16 f4 1a 6e 4b 15 4a a3 b9 fd c4 40 8b f9 a3 60 ac b5 78 4b 0d c3 4d e5 c2 89 a9 76 92 a3 62 b6 8d 78 4f 0d 0b 5a 88 63 5e d4 42 7f ea c7 15 77 f1 f3 e2 1d 2f 5c bc ef 7e e1 62 af 5c 1c f9 86 1e ab 96 b4 bb 29 b8 e3 85 e0 be f9 42 d0 1b 2f 32 6e 28 cb fc b7 04 f7 65 00 20 6f 5f 07 40 dd be 0e 80 ec be 0e d0 c2 d7 01 90 f8 eb 00 85 bf 0e 50 f8 eb 00 e7 17 02 a2 6d e2 e8 94 cb 10 f8 61 79 d5 0b 9f 07 97 ae 96 07 1f cb 94 bc a8 ef a3 99 72 54 5d 19 46 cf 28 5d 99 26 cf Data Ascii: RIFFWEBPVP8Ls/@mS{>wPr@??h)@CD'>x?v>nKJ@`xKMvbxOZc^Bw/\~b\)B/2n(e o_@PmayrT]F(]&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	721	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Retif_AtomicDesign/vendor/swiper/swiper-bundle.min.css HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0
2024-10-25 08:16:23 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16470 Content-Type: text/css Etag: "671a1fb0-11fc" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016277f54492e340eaccbe0660f054-dd53c64bb12bd4ca-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72185 Date: Fri, 25 Oct 2024 08:16:23 GMT X-Served-By: cache-par-lfpg1960032-PAR, cache-dfw-ktki8620057-DFW X-Cache: HIT, HIT X-Cache-Hits: 76, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 38 2e 34 2e 35 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 32 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 32 31 2c 20 32 30 32 32 0a 20 2a 2f Data Ascii: /** * Swiper 8.4.5 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2022 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 21, 2022 */
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 42 67 45 51 41 52 6f 42 4a 41 45 75 41 54 67 42 51 67 46 4d 41 56 59 42 59 41 46 71 41 58 51 42 66 67 47 49 41 5a 49 42 6e 41 47 6d 41 62 49 42 7a 67 48 73 41 41 42 34 32 75 32 4e 4d 51 36 43 55 41 79 47 57 35 36 38 78 39 41 6e 65 59 59 67 6d 34 4d 4a 62 68 4b 46 61 45 78 49 4f 41 56 58 38 41 70 65 77 53 74 34 42 69 63 34 41 66 65 41 69 64 33 56 4f 42 69 78 44 78 66 50 59 45 7a 61 35 4f 2b 58 66 69 30 34 59 41 44 67 67 69 55 49 55 4c 43 75 45 4a 4b 38 56 68 4f 34 62 53 76 70 64 6e 6b 74 48 49 35 51 43 59 74 64 69 32 73 6c 38 5a 6e 58 61 48 6c 71 55 72 4e 4b 7a 64 4b 63 54 38 63 6a 6c 71 2b 72 77 5a 53 76 49 56 63 7a 4e 69 65 7a 73 66 6e 50 2f 75 7a 6e 6d 66 50 46 42 4e 4f 44 4d 32 4b 37 4d 54 51 34 35 59 45 41 5a 71 47 50 38 31 41 6d 47 47 63 46 33 69 50 Data Ascii: BgEQARoBJAEuATgBQgFMAVYBYAFqAXQBfgGIAZIBnAGmAbIBzgHsAAB42u2NMQ6CUAyGW568x9AneYYgm4MJbhKFaExIOAVX8ApewSt4Bic4AfeAid3VOBixDxfPYEza5O+Xfi04YADggiUIULCuEJK8VhO4bSvpdnktHI5QCYtdi2sl8ZnXaHlqUrNKzdKcT8cjlq+rwZSvIVczNiezsfnP/uznmfPFBNODM2K7MTQ45YEAZqGP81AmGGcF3iP
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6e 3a 63 6f 6c 75 6d 6e 7d 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 73 77 69 70 65 72 2d 61 6e 64 72 6f 69 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2c 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 30 2c 30 29 7d 2e 73 77 69 70 65 72 2d 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 7b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a Data Ascii: n:column}.swiper-wrapper{position:relative;width:100%;height:100%;z-index:1;display:flex;transition-property:transform;box-sizing:content-box}.swiper-android .swiper-slide,.swiper-wrapper{transform:translate3d(0px,0,0)}.swiper-pointer-events{touch-action:
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 31 30 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 6c 65 66 74 2c 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 2c 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 29 7d 2e 73 77 69 70 65 72 2d 33 64 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 2d 73 68 61 64 6f 77 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 72 69 67 68 74 2c 72 67 62 61 28 Data Ascii: 10}.swiper-3d .swiper-slide-shadow{background:rgba(0,0,0,.15)}.swiper-3d .swiper-slide-shadow-left{background-image:linear-gradient(to left,rgba(0,0,0,.5),rgba(0,0,0,0))}.swiper-3d .swiper-slide-shadow-right{background-image:linear-gradient(to right,rgba(
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 69 70 65 72 2d 76 65 72 74 69 63 61 6c 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 3a 3a 62 65 66 6f 72 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 63 65 6e 74 65 72 65 64 2d 6f 66 66 73 65 74 2d 61 66 74 65 72 29 7d 2e 73 77 69 70 65 72 2d 63 65 6e 74 65 72 65 64 3e 2e 73 77 69 70 65 72 2d 77 72 61 70 70 65 72 3e 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 73 77 69 70 65 72 2d 76 69 72 74 75 61 6c 20 2e 73 77 69 70 65 72 2d 73 6c 69 64 65 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 Data Ascii: iper-vertical>.swiper-wrapper::before{width:100%;min-width:1px;height:var(--swiper-centered-offset-after)}.swiper-centered>.swiper-wrapper>.swiper-slide{scroll-snap-align:center center}.swiper-virtual .swiper-slide{-webkit-backface-visibility:hidden;trans
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 6e 65 78 74 3a 61 66 74 65 72 2c 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 3a 61 66 74 65 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 77 69 70 65 72 2d 69 63 6f 6e 73 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 73 69 7a 65 29 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 69 6e 69 74 69 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d 70 72 65 76 2c 2e 73 77 69 70 65 72 2d 72 74 6c 20 2e 73 77 69 70 65 72 2d 62 75 74 74 6f 6e 2d Data Ascii: mportant}.swiper-button-next:after,.swiper-button-prev:after{font-family:swiper-icons;font-size:var(--swiper-navigation-size);text-transform:none!important;letter-spacing:0;font-variant:initial;line-height:1}.swiper-button-prev,.swiper-rtl .swiper-button-
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 70 72 65 76 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 36 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 70 72 65 76 2d 70 72 65 76 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 33 33 29 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 61 63 74 69 76 65 2d 6e 65 78 74 7b 74 72 61 6e 73 66 6f Data Ascii: -bullets-dynamic .swiper-pagination-bullet-active-prev{transform:scale(.66)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-prev-prev{transform:scale(.33)}.swiper-pagination-bullets-dynamic .swiper-pagination-bullet-active-next{transfo
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 6d 61 72 67 69 6e 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 2d 76 65 72 74 69 63 61 6c 2d 67 61 70 2c 36 70 78 29 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 76 65 72 74 69 63 61 6c 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 2d 64 79 6e 61 6d 69 63 2c 2e 73 77 69 70 65 72 2d 76 65 72 74 69 63 61 6c 3e 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 73 Data Ascii: swiper-pagination-bullets .swiper-pagination-bullet{margin:var(--swiper-pagination-bullet-vertical-gap,6px) 0;display:block}.swiper-pagination-vertical.swiper-pagination-bullets.swiper-pagination-bullets-dynamic,.swiper-vertical>.swiper-pagination-bullets
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 6e 61 74 69 6f 6e 2d 62 75 6c 6c 65 74 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 32 73 20 74 72 61 6e 73 66 6f 72 6d 2c 2e 32 73 20 72 69 67 68 74 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 62 61 72 20 2e 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 6f 67 72 65 73 73 62 61 72 2d 66 69 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 73 77 69 70 65 72 2d 74 68 65 6d 65 2d 63 6f 6c Data Ascii: nation-bullet{transition:.2s transform,.2s right}.swiper-pagination-progressbar{background:rgba(0,0,0,.25);position:absolute}.swiper-pagination-progressbar .swiper-pagination-progressbar-fill{background:var(--swiper-pagination-color,var(--swiper-theme-col
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 70 65 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 2c 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 25 3b 62 6f 74 74 6f 6d 3a 33 70 78 3b 7a 2d 69 6e 64 65 78 3a 35 30 3b 68 65 69 67 68 74 3a 35 70 78 3b 77 69 64 74 68 3a 39 38 25 7d 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 2d 76 65 72 74 69 63 61 6c 2c 2e 73 77 69 70 65 72 2d 76 65 72 74 69 63 61 6c 3e 2e 73 77 69 70 65 72 2d 73 63 72 6f 6c 6c 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 33 70 78 3b Data Ascii: per-horizontal>.swiper-scrollbar,.swiper-scrollbar.swiper-scrollbar-horizontal{position:absolute;left:1%;bottom:3px;z-index:50;height:5px;width:98%}.swiper-scrollbar.swiper-scrollbar-vertical,.swiper-vertical>.swiper-scrollbar{position:absolute;right:3px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-25 08:16:23 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=203319 Date: Fri, 25 Oct 2024 08:16:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-25 08:16:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	1010	OUT	GET /store-sales/retimag/index/ HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" method: GET tracestate: 1322840@nr=0-1-3479757-1120079262-5ee6ae67890384d7----1729844181526 traceparent: 00-7ac4b74438f964b8944d29dd7305e105-5ee6ae67890384d7-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjM0Nzk3NTciLCJhcCI6IjExMjAwNzkyNjIiLCJpZCI6IjVlZTZhZTY3ODkwMzg0ZDciLCJ0ciI6IjdhYzRiNzQ0MzhmOTY0Yjg5NDRkMjlkZDczMDVlMTA1IiwidGkiOjE3Mjk4NDQxODE1MjYsInRrIjoiMTMyMjg0MCJ9fQ== contenttype: application/json sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:24 UTC	119	IN	HTTP/1.1 200 OK Connection: close Content-Length: 48 Cache-Control: max-age=0, must-revalidate, no-cache, no-store
2024-10-25 08:16:24 UTC	4015	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:24 UTC	374	IN	Data Raw: 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 62 66 31 36 32 65 64 64 30 62 66 36 39 31 36 36 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 46 61 73 74 6c 79 2d 53 68 69 65 6c 64 2d 52 50 3a 20 73 74 3d 30 3b 73 72 63 3d 32 3b 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 20 30 38 3a 31 36 3a 32 34 20 47 4d 54 0d 0a 58 2d 53 65 72 76 65 64 2d 42 79 3a 20 63 61 63 68 65 2d 70 61 72 2d 6c 66 70 67 31 39 36 30 30 35 32 2d 50 41 52 2c 20 63 61 63 68 65 2d 64 66 77 2d 6b 64 61 6c 32 31 32 30 30 37 39 2d 44 46 57 0d 0a 58 2d 43 61 63 68 65 3a 20 4d 49 53 53 2c 20 4d 49 53 53 0d 0a 58 2d 43 61 Data Ascii: X-Platform-Server: i-0bf162edd0bf69166X-Xss-Protection: 1; mode=blockAccept-Ranges: bytesFastly-Shield-RP: st=0;src=2;Date: Fri, 25 Oct 2024 08:16:24 GMTX-Served-By: cache-par-lfpg1960052-PAR, cache-dfw-kdal2120079-DFWX-Cache: MISS, MISSX-Ca
2024-10-25 08:16:24 UTC	48	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 53 68 6f 70 20 64 6f 20 6e 6f 74 20 65 78 69 73 74 73 20 21 22 7d Data Ascii: {"success":false,"error":"Shop do not exists !"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:23 UTC	668	OUT	GET /media/wysiwyg/emballage-noel-24-push-sombre.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:23 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82096 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "5iOWtO4tapAgavm0wJCljkvOdUaKbct2nWPFfDMPxg8" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=486782 idim=988x482 ifmt=jpeg ofsz=82096 odim=988x482 ofmt=webp Fastly-Io-Served-By: img03-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e8316fc5488ebc1dee8d45cb-ff77040a952e12e8-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72184 Date: Fri, 25 Oct 2024 08:16:23 GMT X-Served-By: cache-par-lfpg1960065-PAR, cache-dfw-kdal2120075-DFW X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 52 49 46 46 a8 40 01 00 57 45 42 50 56 50 38 20 9c 40 01 00 90 ba 03 9d 01 2a dc 03 e2 01 3e 6d 30 93 47 24 22 a2 25 2a 57 eb 20 a0 0d 89 63 6d fa 6a 53 c1 6a 27 27 96 1e d3 63 d9 54 d3 0f 4f 02 0c ab 9f c8 c4 c6 fe 7b ef 2c ce 71 f3 f6 3a 77 a1 74 8f f9 7c d2 7d 93 fa 2f 40 ff f8 7d 67 7f 8d f5 0c fe ff e9 63 ff 77 ad 6f de ef 52 1f ba de b0 ff f8 bf f7 7f b9 f7 91 fe 1f d4 27 fb bf fa 5f 5c 1f 56 af ee 9f fa ff ff fb 94 7f 35 ff 63 ff ff da bf ff af ef 4f c4 07 f8 ef fd 7e 99 5f ff fd 80 3f fe 7b 5e ff 00 ff f1 c6 4d ff 93 ce 97 ce 7e ec 78 53 f9 97 d6 ff af ff 09 fe 93 fe bf f9 6f 74 bc b3 f6 79 ff 57 fb bf 52 7f a0 7e 3d fe 47 f9 1f 6b 3f db fe d0 f9 27 fa d7 f3 5f f6 7f d0 7e 5c fc 85 fb 7b fe 1f a9 c7 e2 fe d9 7f c0 f1 04 df 7f dc ff e8 ff 6b ec 11 Data Ascii: RIFF@WEBPVP8 @>m0G$"%W cmjSj''cTO{,q:wt\|}/@}gcwoR'_\V5cO~_?{^M~xSotyWR~=Gk?'_~\{k
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: b2 b5 95 1f d9 4e 4b 46 2c 18 c3 84 69 73 ee 84 52 08 4d 72 d9 52 94 b4 e7 76 d0 07 80 91 c2 1e a7 b7 5e d9 25 71 c3 27 d5 de f2 b1 50 31 ca f3 f9 dd db f0 d5 ba 51 e8 08 6c 80 68 be ab 8a 4e 26 74 54 04 ba fe 73 62 1b 08 f2 d1 44 24 d7 e2 fd a2 6a 05 a4 e2 76 4d f7 76 63 65 91 a9 23 d1 a8 68 e0 3a fb 31 be bb 87 fd 47 f6 64 69 a6 28 4b e6 e9 d1 0e 9d 0f 99 22 04 23 69 50 e2 7b ac 48 8e 31 0b 8a 4d bc c3 fe a1 bb cc 05 8e da db 27 8c 79 dc 0e 5c d6 41 eb 0f cb 57 31 ff 98 d2 60 ad c1 ce be ad f2 f0 c2 4e 83 51 4f ef 35 87 3c 01 c8 44 2d 00 4e 78 14 a3 0c 87 7a 50 67 98 3c bf 58 94 a4 03 49 54 3e d9 42 52 57 f4 f0 6f 9c e6 76 10 ff e3 89 ce 9f 5c 86 9b 1d 1c 76 41 16 8a 70 c6 71 53 9e 51 0b 9c 95 07 68 d6 e5 2c e9 77 d7 dd 9d fd e1 61 9a a0 0a 5c 01 41 89 Data Ascii: NKF,isRMrRv^%q'P1QlhN&tTsbD$jvMvce#h:1Gdi(K"#iP{H1M'y\AW1`NQO5<D-NxzPg<XIT>BRWov\vApqSQh,wa\A
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 2e a8 8f 55 b5 8f 03 16 07 71 a3 0f 8a fa b6 98 d6 ac 94 41 81 e3 4c 15 3e 3e 05 63 4c b2 8a ed b0 e8 8b 7d 19 e3 6c 06 e6 b1 38 ff 52 41 73 4d cb 69 26 16 a0 73 ec fe 60 89 d1 a6 7c fb 2e 66 26 f6 37 ee 35 80 4b bd 65 a6 21 34 85 d9 a2 1b e7 bf 9e e1 31 8c a9 64 48 e3 84 ff 40 94 8f 22 89 80 15 6f ca e6 4c 17 6b a9 22 7d 5c db d0 b2 fb e9 f6 e8 fc ea 21 c5 bf f6 a2 06 e8 a2 22 61 da 34 87 72 4f 1b d1 8d 02 08 ad d3 e7 f8 55 3f f3 f5 9d a3 0f d2 ce 3e a3 58 60 74 f9 67 5e 8f d6 b5 7f fc 14 0c eb 23 0f 82 c2 f2 78 29 d1 3d 3b 7e 8e 6e 1d 65 cf 18 b0 83 50 05 da 3a 08 d8 50 74 db 23 fe 5a 9a ac 4b ab 08 06 0c 8f 45 e7 66 e8 a1 42 1d b3 1e c1 ee a7 e9 eb 3f 6c 52 64 8b 18 62 a4 40 71 af 64 e0 b2 8f a2 44 83 3b ea 08 58 55 bc 54 3f 4f 85 1e 1b 45 99 07 f3 c8 Data Ascii: .UqAL>>cL}l8RAsMi&s`\|.f&75Ke!41dH@"oLk"}\!"a4rOU?>X`tg^#x)=;~neP:Pt#ZKEfB?lRdb@qdD;XUT?OE
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: ca 38 8f b6 82 d0 07 29 96 d3 80 4f 2d df c9 bc ce 53 54 51 cc a9 90 05 9a 2d eb b0 1d da e5 0b a6 77 e7 3b a3 bb 64 0b 8b 53 01 ea 62 9d 73 52 39 a1 c7 c1 13 99 88 c6 91 f0 37 1a c9 1f 4b ce ae 24 34 31 26 da fb 40 2b 52 d3 15 85 be d5 f7 69 bd 0d d3 f9 ff 4f 06 47 17 c5 04 c4 31 e3 c2 ff a5 08 49 59 e2 2e 7a 87 66 f8 3c 89 16 bc f7 18 e2 6f 51 50 51 88 45 69 cd 92 74 04 d4 9c d8 e8 b5 da 37 a7 c2 f4 98 a9 7d d1 29 6d f8 92 49 47 80 d2 fe a4 62 47 f9 ab df 8d b6 b6 43 66 d4 71 90 7b fe fc 1a 4e b6 42 36 b2 41 a1 d6 b1 be 7f 50 64 50 eb 82 2d 31 70 37 69 96 4c 70 15 c8 29 1d db 6d 3d 8c d5 c4 d9 ca 19 b3 56 92 3c 90 0d 2d 3d 89 ba 25 0f 90 8e 05 82 0b 9d 68 b0 6d 9f e7 13 2d 19 e6 75 b5 36 83 d5 28 e2 3b 1a 54 ec 1a 0f 84 8b 4a e0 2f e0 66 21 df ba bf cb Data Ascii: 8)O-STQ-w;dSbsR97K$41&@+RiOG1IY.zf<oQPQEit7})mIGbGCfq{NB6APdP-1p7iLp)m=V<-=%hm-u6(;TJ/f!
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: a4 19 0e c0 8b 08 2a fe 82 9e e5 ee ba 3e 02 80 a4 d1 df 81 00 31 0f dc 16 fa e7 61 1f 50 d5 24 8d c8 52 57 bc 5d 7b 0e eb 24 7c b2 59 80 f6 61 f6 30 09 45 a6 c2 1c 6d 1b 04 69 cd 74 a2 9f d2 e5 4f 6e f7 7a 31 71 a4 0a cd a1 a1 c2 82 d0 39 88 19 20 ef a7 c7 8b 3d 79 c0 18 61 39 ff e2 db f0 8a 8f 3e f9 ff a8 ae d1 ae b9 ba 87 6f b2 45 4c f5 79 e0 92 77 28 14 e7 d3 13 61 41 61 dd 6a ec cd 0d 51 2f bb b2 77 31 e2 5a 86 24 47 a2 87 5f 43 74 3b 87 f6 04 a2 95 56 a1 12 3a 7e 2f 65 ea 10 f9 b9 dc 60 14 c0 27 7d 95 43 04 b1 aa a4 02 5d 2a 6c 99 c3 a4 02 b4 bb e1 d2 09 86 a1 1b 68 eb ce ac 56 8c 86 32 93 cd 29 88 bd 8c 6a d1 0a 23 63 9d f1 64 68 bb 70 6e d8 c6 a6 75 d1 a5 bd 52 e4 ec 7f 36 91 c9 97 1e 91 94 0f 93 1a f6 63 2b a6 df a3 37 69 7a 72 a3 1d 09 c4 d0 64 Data Ascii: >1aP$RW]{$\|Ya0EmitOnz1q9 =ya9>oELyw(aAajQ/w1Z$G_Ct;V:~/e`'}C]lhV2)j#cdhpnuR6c+7izrd
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 58 f7 12 1f 81 6a af 74 31 11 89 a2 6b 80 a7 2d 9b 91 bf 55 40 d0 d4 33 97 93 59 88 94 75 f9 cc fa 1f a9 79 80 ff 51 ad ed d5 57 ae 76 69 17 fc de f3 8a 9e 1b 25 48 e4 10 34 5d 50 8b 62 3d 5a 41 4a c3 7e fd 8f 54 d7 71 7e c9 27 d4 8d 6a 3d b9 0f 8e e6 d0 07 44 f1 f0 66 a6 fe 6f bb 6d bf 93 5a 5e 00 77 f9 81 ef c8 e9 46 86 bf 19 8e 97 40 7a a7 d0 9d 83 52 94 b2 c5 81 4c 0e 9d 17 b0 47 bd 64 5f 6b 55 85 2d f5 07 e7 9e 02 37 b1 28 a6 f6 64 13 48 2b 06 8a c2 c1 09 1d f8 47 f7 a0 30 66 2d 67 56 05 b0 57 3d 61 32 c7 ad 68 16 04 70 fd d0 7e 1a c8 0a f3 97 09 cf 09 ad ea a2 d5 6f dd 15 91 22 47 0d c8 84 b0 62 ef a9 34 05 b6 6a 8c ca 4f fe 5b 00 e0 7a 5d de 24 50 31 f3 57 bf b8 8e 4d fe d2 9c 6d ae 11 a1 d5 c1 06 0d a8 24 ed 50 60 9e 5e 2f 06 f4 5e 14 a9 fb 23 f8 Data Ascii: Xjt1k-U@3YuyQWvi%H4]Pb=ZAJ~Tq~'j=DfomZ^wF@zRLGd_kU-7(dH+G0f-gVW=a2hp~o"Gb4jO[z]$P1WMm$P`^/^#
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: 96 e1 28 f9 44 d3 7f 27 13 9e ca 3e 29 c1 5c 1a fe a0 6c e6 3a f7 5e 9f a1 57 86 d4 54 9d dc a7 83 23 d6 b6 5f 6d b0 46 01 88 eb 3e 19 64 05 47 8e e2 91 d9 dd 5d cc 1d be 47 c1 07 fa 74 3e 6c b9 72 c7 79 c8 bf 6c 10 fe 02 ee 3d d1 a5 cf 4a c5 75 c0 56 11 24 16 fe 31 c8 03 d4 72 87 3b 6f 01 a5 dd 20 c3 1e 5d fe 8f e3 b6 72 8e 4f c5 a9 2c ed 07 b0 46 6a 35 83 6f 49 2a fb 02 72 57 59 38 79 0c 8c 71 90 c8 06 83 10 94 4f 6c 1a f3 5d 59 0d 1d 15 00 10 f2 fd f1 78 ee 4e 9c 79 18 5b ed 2e 50 33 2e 79 f4 4b 68 3f 5b 77 e2 82 3b 7c 22 84 b8 0a 54 78 f5 86 ea 63 6b 77 4a bd f8 0a f3 9c 37 3c 97 54 03 75 68 93 d8 ce ec ca 40 5d b1 5d aa 74 37 df 93 e6 03 aa f7 0d d3 89 69 eb ce e2 2c 27 6d 67 78 2b 2c 54 da 5b 7f 65 b7 82 59 0a 8e 51 80 b1 bd 41 8b 24 cc ce 47 76 be Data Ascii: (D'>)\l:^WT#_mF>dG]Gt>lryl=JuV$1r;o ]rO,Fj5oI*rWY8yqOl]YxNy[.P3.yKh?[w;\|"TxckwJ7<Tuh@]]t7i,'mgx+,T[eYQA$Gv
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: f6 f6 46 a3 ce ed 4f 01 ec 0f df 89 17 d5 1f 2b 09 ba a8 58 cc 72 b2 11 37 e4 b9 0f 57 dd ef a8 c7 3f 66 d8 80 a4 f6 75 8d ed d3 d6 a0 8d 60 48 5e e1 af 04 98 c0 48 9b cb 1f 9c 6b 6d b8 8a 46 1c aa ee c1 4c 46 a8 08 80 f7 cd cf 4f 96 63 c8 4f 75 97 cb 5f 09 62 3a b2 11 da c8 d0 c4 a0 8d da ff cc ac 4f 14 c7 f5 73 06 de 32 1e 7e 19 4b 93 91 ff b2 5b 5f 9c 31 27 f7 01 46 46 63 c5 8d 97 a4 dc 02 6e 83 a0 7d 40 8d 84 b0 c9 d8 ce ce 5d a0 24 cf 7a c8 6c 35 c9 f1 16 e1 5e c0 76 aa f8 dc a6 d2 2e 1b 10 3b 44 68 92 e6 46 7f 35 ae b9 29 5d 7a cf b7 d8 05 ab bc b3 6e 54 c4 ef f6 22 c7 43 16 f0 01 14 28 6a 85 97 4e 67 f7 1f 25 6c 83 45 84 ac e0 97 64 58 36 66 e4 34 bc d2 60 23 f5 22 60 1c a6 80 0e fb e4 09 be ad 78 39 b1 94 05 a9 9e 46 07 6f 88 e7 76 0c 67 a9 6b b8 Data Ascii: FO+Xr7W?fu`H^HkmFLFOcOu_b:Os2~K[_1'FFcn}@]$zl5^v.;DhF5)]znT"C(jNg%lEdX6f4`#"`x9Fovgk
2024-10-25 08:16:23 UTC	1379	IN	Data Raw: e2 e5 c2 f8 15 93 45 a6 a2 7a 2b 93 3b 1c 17 4d cf 2d 5f 62 31 40 b3 78 a5 30 ed 64 b9 06 68 c3 3a 86 c9 b4 45 0d 44 25 27 89 63 80 1a c0 a9 c9 80 52 00 43 99 39 fa d0 df 15 54 80 26 5a b3 49 47 80 ff c0 3b 89 b0 71 62 3f ec ac a5 3e 41 32 86 07 de 8c 70 53 35 81 60 97 42 4c 96 93 08 7e cb 23 c3 c5 e8 78 ce 51 b0 c2 3c 5f d1 15 68 f2 1d be 4b 71 76 c1 86 41 f5 3d 0e ee 12 46 08 f2 fe 4c 80 02 a6 73 53 ef 26 e5 80 f5 a9 f5 f8 c6 a6 21 4a 62 7b 68 82 8c 71 ea 0e 76 91 f6 4d 7b 0f 39 34 1f b0 3e 6a bb bc 16 4f 94 47 36 04 ba cd 29 65 ee 1c 89 3b b5 e8 b5 e8 ad 83 43 03 57 f2 e3 18 91 b9 ec 61 41 62 0f 5c da ff 16 1f 03 ed a5 e2 c6 9a 35 d6 f3 cb 42 e7 5b cd ea 4f cd 61 ac 19 f0 09 e5 2f 28 57 29 5f 64 d1 05 b2 34 56 2b e2 08 60 4a 0d 96 e9 c5 ad af 69 62 0e Data Ascii: Ez+;M-_b1@x0dh:ED%'cRC9T&ZIG;qb?>A2pS5`BL~#xQ<_hKqvA=FLsS&!Jb{hqvM{94>jOG6)e;CWaAb\5B[Oa/(W)_d4V+`Jib
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 1a c6 42 11 b7 4c 63 e0 ea b2 91 85 94 02 60 9c 71 10 ec 15 35 a1 bd 5d 9f f2 da 8f aa a5 70 4a c1 0d 46 8c d0 74 fb 15 0f e7 f7 f7 55 77 40 43 40 74 60 1d e4 00 8a 49 fe b0 4b 8a e2 5f a6 15 02 84 6d 3e 10 2b 0d d4 9c 1b ca 14 f0 5a 44 35 e5 4f 4c ab 2e d5 31 1f 1c 29 82 72 59 d1 bc 18 da 37 e6 a5 70 e8 35 0f e9 16 c2 7a 79 b5 b4 38 42 c1 69 98 6f 1c 9b d6 19 b2 b6 e7 58 9e a6 37 3b c2 d7 ef 44 b7 d4 bd bb 6a 62 ee b5 10 d2 7b 49 5f 21 e7 30 0f 55 49 b3 4f 3c d1 40 20 73 a9 d1 e4 82 fc b0 1b 6d f3 dd a4 ac ca 13 a2 a2 f2 18 f7 1c 5e bb 6f db eb 7f 96 18 ac b7 1f 4a 4b 8e 92 7a ec bb 9d 98 3b 2b 5d c9 f3 81 aa ff 5e 87 ab 4c ba 57 9b 7c 9c 89 3b c2 04 b7 2d 1e b9 7e 1e e3 5b 90 06 8e a0 4d 67 c8 75 ff 44 17 30 55 a1 2d e6 97 0e f3 8f 60 47 4b 27 e6 6d f6 Data Ascii: BLc`q5]pJFtUw@C@t`IK_m>+ZD5OL.1)rY7p5zy8BioX7;Djb{I_!0UIO<@ sm^oJKz;+]^LW\|;-~[MguD0U-`GK'm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49763	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	655	OUT	GET /media/wysiwyg/home/sacs-1-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:24 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 55558 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "44WxAlOLKz1JnKpbm1YOBILSlFOmKgDO+4yhNycweVY" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=94331 idim=400x400 ifmt=png ofsz=55558 odim=400x400 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-18016277e843c2b9cd04685927792882-98011b3b3407371c-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72185 Date: Fri, 25 Oct 2024 08:16:24 GMT X-Served-By: cache-par-lfpg1960064-PAR, cache-dfw-ktki8620038-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 52 49 46 46 fe d8 00 00 57 45 42 50 56 50 38 4c f2 d8 00 00 2f 8f c1 63 10 4d d0 92 6d 2b a8 18 d5 3d de e3 8e 5c 99 ff 80 05 c4 97 74 7f 47 f4 7f 02 e2 7f 74 7f d4 23 7f e5 38 2e 70 d8 88 fc 95 cb 15 cf 7a fe 84 ba 99 49 fa ea 38 06 42 03 49 7c 75 cc 3c b8 55 9f 1d 13 89 41 b9 ea 1a 65 ee 39 16 8a 1e 11 f4 aa ea 11 15 8a c8 dc 71 0c ab 22 aa 43 8f 88 c0 06 90 22 22 f3 dd 31 01 2a 78 da 6b f1 ee 98 8a 5b 57 10 e0 c6 d0 9d 51 6e b3 ed 06 f0 a7 b5 01 78 10 99 6b c7 34 64 8b 61 21 5b 36 30 8a 5d 65 4d b0 0d ee 4b b9 a2 05 19 99 06 0e 0c d8 d8 93 58 3a 96 24 e3 32 60 1b b7 cf f4 c0 66 d8 6c c0 cc 42 33 ad 75 f9 89 c1 2e 03 de f2 d6 6e 06 70 60 43 fb ce 02 23 01 18 db f0 95 2d 09 68 60 0f fc 95 ed c2 27 74 0f 30 fc 80 00 db 60 a6 1f c9 08 db 00 36 98 ab 7d 45 Data Ascii: RIFFWEBPVP8L/cMm+=\tGt#8.pzI8BI\|u<UAe9q"C""1*xk[WQnxk4da![60]eMKX:$2`flB3u.np`C#-h`'t0`6}E
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: ff a7 31 36 77 65 85 c3 ad 6d 6b 99 b2 7f 97 11 dc dd 9d cc ab d0 d0 ca d0 32 88 88 c9 2d a7 0f ba 20 1d 9f 51 d8 b6 6d 43 7d 90 74 fc a0 a0 6d 23 a7 f7 83 3f de 8e bb a3 21 20 28 f2 7f 34 02 49 1b f7 fe 9d 1f e1 20 92 24 45 aa ee d9 03 ff 4e ef 19 06 6c 38 6c db 36 90 68 e7 7f ff 89 af 76 dc b6 91 24 51 3d f9 47 3b bf 3d da 6c 1b 49 52 1c 2d ef f8 ee d1 e2 ff f0 24 d9 b6 6c db b6 15 d5 5a 5b eb 7d cc b5 f7 b9 f7 bf 8f ef 43 cc 0d 43 8c fc 13 26 e4 fb 3e fc ff df 7b f7 9e bd d6 1c a3 b7 d6 aa c8 0b 21 ec cd f9 51 df 82 24 59 92 24 49 16 20 ab cf 7d e6 ff bf 73 de 76 a7 c2 84 7c 0b 92 64 49 92 24 59 80 ac 3e 7b ff ff 6f dd 9e 0c 13 0a 48 6c 24 29 92 9c cb 7b 5c cb 3b 50 7d 4f cd d6 b6 29 92 24 38 3f 98 99 9b bb 47 44 52 31 74 f7 d4 30 8b 99 f6 da e9 68 a9 Data Ascii: 16wemk2- QmC}tm#?! (4I $ENl8l6hv$Q=G;=lIR-$lZ[}CC&>{!Q$Y$I }sv\|dI$Y>{oHl$){\;P}O)$8?GDR1t0h
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 94 d0 61 8d 8e a6 b5 d2 9d a5 6e ee 3e 4e 3f 37 1d 8b 3f ed d0 74 2f 3b a7 69 c7 89 62 4f 06 b3 e6 e8 8b dd 5f fb e8 dc 47 6f 6e 6e fa bf bc 6c 06 3d 5b 4c 4e d3 1d 32 98 e2 84 4c 26 56 39 98 24 d9 c1 d3 8e dd 60 0c 61 b0 86 a9 c2 ac 97 16 b3 98 0c 46 0b 6b e0 e8 f8 c4 32 dd a2 b1 c0 a4 e0 43 fa e3 af b8 9b bb bf b8 bb 25 10 1e 84 48 5d b2 cb b2 a6 38 28 2e df 3d de f2 6f 38 64 66 b0 3c 7d de 9d be 36 71 b9 48 7d d5 12 09 78 79 bc 66 ff 7d 96 fa 65 ef e1 b5 3a e2 db c3 01 16 01 75 c5 d5 32 0e 86 c3 0b 97 31 40 26 46 6d 34 c4 4e 0a 0a d2 01 7b 11 87 ec 64 84 51 69 f1 c9 5d 8e 16 17 9d 1c c4 34 62 29 4a 15 6b f9 a6 60 f1 8c b9 e5 ea 73 67 23 b6 62 4b 10 03 35 3a 5f cd 54 fd f4 cf e7 f5 77 a7 ac 9b 8d e0 ea c6 5f c7 80 ff 37 d3 c3 37 36 cb 06 7a 52 1d 24 68 Data Ascii: an>N?7?t/;ibO_Gonnl=[LN2L&V9$`aFk2C%H]8(.=o8df<}6qH}xyf}e:u21@&Fm4N{dQi]4b)Jk`sg#bK5:_Tw_776zR$h
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: fe 74 ef db d1 33 75 3d 7e fe f2 da 16 8c b8 24 a0 ea af 75 61 15 5d 42 0a 23 ad 42 17 96 94 e7 d1 c4 6d 03 a7 6f 21 ce 47 5d 7c 8c 0f f1 18 c2 01 89 74 e9 ee 53 17 ac ac 15 27 5d ce 2e 65 d3 e3 8a 1c 33 5a db d7 eb cb ef 1d 2e 13 9d 82 68 10 ae ba 58 4d d5 d8 f5 a0 53 15 12 4f 8d 56 99 9c 64 5a 9b ee fa c7 dd 96 ba e5 21 85 88 8c f4 7e 35 e3 6f fd 9f ff d8 ff 99 be f8 bc ee ef e5 ef 55 ea 5c e5 42 8a 08 f0 73 c5 4c 87 73 8e 9f dd 7d 77 9e 33 ef b9 5e 3b 8c c6 89 6b b5 01 4a a7 6d 0c c1 28 e1 8b 79 c0 10 08 57 71 41 11 d2 b4 49 0a 2e 63 cd cd c3 f9 a8 84 8f f1 39 9e 46 38 80 1c 59 ea fa c3 85 63 b8 30 87 ae 37 7d 26 78 52 4e 72 1e 92 1c c6 70 7c 76 77 ee da 5d d7 e5 7b 60 ee 7c cd ea a3 cb a7 40 68 e3 5e 5e 03 17 ab 32 64 77 de eb e7 ed c6 e5 af f5 ee eb Data Ascii: t3u=~$ua]B#Bmo!G]\|tS'].e3Z.hXMSOVdZ!~5oU\BsLs}w3^;kJm(yWqAI.c9F8Yc07}&xRNrp\|vw]{`\|@h^^2dw
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: bc d7 2f f3 00 e8 3c 86 ce 1a 80 2a 6a d1 46 14 ba ac 58 9a e7 cc 6b d8 e4 2b 42 58 84 0e 38 71 bc 29 6b f4 c0 2f 88 dc ee d3 db 2f fd 83 b6 17 f1 7d 63 a9 bf f6 3e f7 77 54 f5 d4 24 87 15 53 03 ee 5a f5 c5 8c 77 ea 38 62 0f 1d d1 d2 c9 0c 12 6e db b7 cf bf ef 78 3d 06 d5 a8 00 42 d1 40 12 4d 40 0c ac 96 3b 4f b9 00 7e 96 ef 78 24 c0 02 14 15 4b b1 b8 1b b3 c7 c0 1b 36 7a 8b 12 8c 47 57 a4 1d 2a e7 8a c4 17 e8 82 2a 57 38 65 f2 ea 0f 16 5f 03 76 df a5 b4 bf af 7d 9f cd 58 dd 87 b1 30 f5 2a 5b dc 8c a6 04 50 02 d8 b0 66 c1 00 86 12 71 67 ef 2d 2b de e7 1f ff 2b ec d7 d2 ac a4 63 83 90 90 88 53 09 07 62 e5 ac 1e 71 3e ef 01 00 4b 77 3f 5d 0f cf 8b ee 93 bb 2c c0 32 1c 1b f7 e0 94 67 6c 76 18 d7 d1 1b 03 91 7f 9c e0 25 fc 79 cd 12 00 40 b5 c3 e3 b5 5f 67 7c Data Ascii: /<jFXk+BX8q)k//}c>wT$SZw8bnx=B@M@;O~x$K6zGWW8e_v}X0[Pfqg-++cSbq>Kw?],2glv%y@_g\|
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 49 b8 8a bf 31 f5 30 38 57 0c 9e 43 79 a8 88 c9 f0 5c 6e 86 17 73 eb a0 16 84 50 94 08 62 cb 1b d8 6c fa f8 0a 01 00 9a 79 47 08 bc 00 ad 02 18 1a 6a ed 05 74 44 d0 aa 17 fa 68 96 5b f4 d8 db d7 67 3c 9d 2e 69 c0 02 55 4c c6 f1 52 d1 c6 71 20 51 59 be e9 2a c0 27 c5 82 03 2d 09 9c bb 13 c7 cd e6 56 f5 12 de 77 3e 94 97 3c 41 35 61 2c fe 39 88 3d 55 50 0b 0f d4 f5 52 e5 8a 97 a8 28 5a 1f 74 d6 13 4c 8c 5a 01 83 a0 db 78 f3 88 02 00 b4 1c 1c c8 b2 a0 35 03 4c 85 1e a0 80 5f 90 9a 63 06 f4 16 dd 27 27 b0 2d 8d 03 bc 5b 67 93 a6 2a 8c dc 0a 98 aa 8f 8f d7 3f bd 3e c0 7c 6a 01 02 20 da 75 ce 95 35 69 12 2b c2 43 e6 ae f3 d6 1b d4 13 f6 e0 23 24 1d 01 b8 15 8d a1 2e c2 26 6f d4 a8 4d 9a 01 12 cf 1e 10 4d 2c d2 ce 26 e6 b5 7a 9d d8 00 00 2c f2 8e f7 6a 11 c7 48 Data Ascii: I108WCy\nsPblyGjtDh[g<.iULRq QY'-Vw><A5a,9=UPR(ZtLZx5L_c''-[g?>\|j u5i+C#$.&oMM,&z,jH
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 68 97 f8 29 c9 cd cf 36 49 3d 5b 5b 98 c5 ea 2f 75 98 71 ae d2 99 a3 0c f1 18 af 00 3f 70 d8 a6 91 dd cf 39 9b ac bc b9 10 65 1a 10 ea d4 1b d1 e0 94 c9 82 f7 4f de fe aa 07 5e b3 f7 66 73 fd a3 d3 da 31 5c 87 ef 57 5f 3f 76 f8 f9 7d ba bf d3 62 b1 97 16 e1 7e cd e7 e9 13 0e 1c 78 73 38 6d 5e d0 58 ab 8c 82 75 72 34 9a 99 eb 40 c0 47 33 a9 34 19 2b 06 39 00 12 45 a0 82 54 6b 8d b4 ea d7 0b 73 fd bc 10 bd 93 4b 87 3d a9 5c df 3a 79 37 e7 06 ef 4e 96 cc ec 71 0e 58 2c c0 9a 0b 8a 68 00 b0 60 6e dd 74 ff ce 8d f3 4b 33 31 b2 49 4e b0 c2 24 41 52 eb e3 9d bf 99 62 da ef f9 c7 f3 7f db bf 58 59 24 10 c2 80 c0 0a dd cd ba 7f fe 0f 53 06 b6 0a 15 10 d1 d7 2b ca 43 33 8c bb 4b ed d6 48 5a 6f d3 7e af 75 a8 09 07 c3 89 e9 0c 2e 08 b4 f3 f1 09 c7 24 05 b4 d9 3a 08 Data Ascii: h)6I=[[/uq?p9eO^fs1\W_?v}b~xs8m^Xur4@G34+9ETksK=\:y7NqX,h`ntK31IN$ARbXY$S+C3KHZo~u.$:
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: a5 62 ca 64 ea a9 d8 74 74 a5 52 86 16 f6 03 56 47 46 35 1a ca 14 75 e1 29 c4 de 40 85 4b 91 fb f0 cb d3 0e 1e 59 e5 06 ee 24 3c 14 4b d4 95 15 65 4a eb f9 fd d9 b6 73 0a d3 ed 6f 5e 9d 74 f0 f0 9d 76 a0 69 cf ea b2 c4 64 8e e6 6e 6a 5a bb e3 d9 42 c0 5d 09 96 63 a6 ac a0 00 c2 ad e6 52 15 a6 d6 a3 4a 75 96 23 41 95 5c 4c 1c 84 a9 b5 67 5b de 5d 6c 28 1d 10 dc 40 0a 03 16 87 c6 9d 96 71 c0 95 17 84 ba 07 02 0d 1b a3 03 15 3d 4c d7 64 9e 5e c0 f3 df b7 fd a9 df 4a cf 1e 6b 29 a8 30 87 a1 a2 28 99 9b 71 f4 15 49 ee c4 9d 1c f3 78 f1 ee f7 e7 b6 d9 7e 15 b9 cd e1 69 86 c6 a6 80 51 a8 24 9a b2 12 29 b9 87 af f5 8d eb 6d 20 17 05 59 53 a3 b5 6d 8b 68 91 8f 7b 42 10 48 96 cc 86 48 45 90 06 34 3b 28 6c 59 83 d2 eb 3d ed cd 13 d2 4f 7a e7 24 3e a0 73 7b c3 dd f5 Data Ascii: bdttRVGF5u)@KY$<KeJso^tvidnjZB]cRJu#A\Lg[]l(@q=Ld^Jk)0(qIx~iQ$)m YSmh{BHHE4;(lY=Oz$>s{
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: e8 80 2e 15 85 01 3a db 60 25 41 9a b1 69 1d 17 7a 41 11 7c 67 48 80 34 57 e8 b0 0a 80 70 ac d1 75 b9 dc 0e c8 08 40 c4 2d bf 02 5a 14 af 38 d6 ad 8f 0e a7 db 1a 30 9a 8e 9b e6 f5 03 93 17 6d ce 7d d4 31 48 e0 87 4f fe 2e 0f 3b 0e 6b 1b 84 35 43 95 9d bd 57 d5 69 0a 91 46 35 09 ea 54 11 11 32 97 6b aa a4 9d 90 d2 29 90 52 7b eb fb ec 3f f9 a7 df f1 e7 f9 a5 3f 88 59 28 e5 e6 f4 7d f3 ad 35 2d 9e 42 ba 59 5c a1 a7 98 41 56 71 1c 9a 37 83 93 f1 26 8f c7 98 cf f7 57 f6 bf e2 13 5e ff 9c b9 de f3 a7 dd eb 3d 14 1c 7c 84 df a6 cd 7b 36 7f fa cf 43 dc fd 4d 34 fc 03 50 c8 50 8f e4 c3 d6 ac f9 88 8a 2d 4c 34 56 57 49 6c 95 c4 15 9d 52 e7 17 66 e8 4e db 91 eb 74 56 da b1 60 8b d9 10 b6 86 09 29 14 14 9a 4a e3 8d e1 81 db 52 4d 84 3a 64 c0 6e 65 01 b5 75 a6 1a 21 Data Ascii: .:`%AizA\|gH4Wpu@-Z80m}1HO.;k5CWiF5T2k)R{??Y(}5-BY\AVq7&W^=\|{6CM4PP-L4VWIlRfNtV`)JRM:dneu!
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 79 cd 71 2e b0 c2 00 92 54 9b 04 b8 14 db a4 ef 26 01 78 6c 2c 22 51 81 34 81 5e 45 20 eb 4d 91 20 81 2a 06 c4 6a 6a cd 96 40 86 74 c5 f0 d5 6b 2f 2e 4d 5d 4c ab 83 65 39 ec 0e ee 85 2d 56 2a c3 45 0b a8 02 5a 83 36 1d 2d a7 03 18 c8 96 55 c0 46 65 49 32 6a ed 6e 52 75 77 4b 4b 53 2f dd dc 03 c0 58 83 f5 2a 06 40 b5 fd 20 70 aa 23 20 0b e7 a1 05 79 01 28 d5 13 e7 24 5e f3 75 57 6d bc f7 be c1 fe 72 8b 46 71 66 94 b5 24 eb 6c c3 78 56 8b ee fb ce 97 c2 ad 84 d8 f7 39 56 77 dc 4b ce 57 6c 15 88 d3 0b 11 9a ea 9e 49 b8 3a 7b 50 33 33 b9 c3 0c 71 47 44 92 79 8c a7 ee ca cb 74 e7 d3 86 52 75 21 0b 64 4a de e2 c9 1a 95 ca 62 81 87 24 f3 e7 ca ea 52 29 ab 7c 01 6d 40 53 b3 dc 24 40 16 b3 7a e5 b4 34 1c 6f 86 13 a0 a0 93 85 fa 9c 69 5d 0f 1d a5 63 29 da 5a 5d 34 Data Ascii: yq.T&xl,"Q4^E M jj@tk/.M]Le9-VEZ6-UFeI2jnRuwKKS/X*@ p# y($^uWmrFqf$lxV9VwKWlI:{P33qGDytRu!dJb$R)\|m@S$@z4oi]c)Z]4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	660	OUT	GET /media/wysiwyg/home/emballage-gros_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:24 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13544 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "ppQE6B85tYYvY+6iwnYmb9JYbi3u0VnF5cRg2ccyyDg" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=79819 idim=494x444 ifmt=jpeg ofsz=13544 odim=494x444 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-18016277e832a81777da42e09d43690a-dadc84b352101676-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72185 Date: Fri, 25 Oct 2024 08:16:24 GMT X-Served-By: cache-par-lfpg1960070-PAR, cache-dfw-kdfw8210109-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 52 49 46 46 e0 34 00 00 57 45 42 50 56 50 38 20 d4 34 00 00 d0 ea 00 9d 01 2a ee 01 bc 01 3e 6d 36 96 48 a4 22 a2 24 23 14 c9 78 80 0d 89 67 6e 92 ca cb a2 d0 de 42 be fe cf cb 97 93 7c 4e fa 44 6f 39 6b cd 25 f9 7f e9 fa cd fe c9 ea 25 cf 77 cc b7 9c 07 fe 0f 58 bf e5 bd 40 3f b2 7a 61 7a ba 7a 26 79 cf 7a bc 7f 78 f3 c0 f5 00 ff ff ea 01 d4 7f 1b 7e 5c 7e ef c4 3f 41 1f 0f f7 43 e2 e3 0e 7d b0 6a 53 f3 df c9 ff c7 f5 cd fd ff fd 9f 19 7e 5d ff ab ea 11 ed 6f f6 bf 6d fc 77 f7 07 d0 47 dc 2f bb ff d7 ff 1f ea f5 f8 1f f4 bd 37 fb 69 ec 07 dd 77 e4 f3 41 0f d3 df f6 7e e0 3e 5e 3f f2 ff 59 fe 9f d7 7f d6 9f fb fd c3 3f 9c ff 73 ff bd eb ab ec ab f7 63 d9 eb f6 67 ff f8 3c aa 4e 02 56 9c 5c 79 7a dc fc f3 50 b3 4c 7b 45 1b 05 f2 c0 63 4a 2b 60 19 d7 72 03 Data Ascii: RIFF4WEBPVP8 4*>m6H"$#xgnB\|NDo9k%%wX@?zazz&yzx~\~?AC}jS~]omwG/7iwA~>^?Y?scg<NV\yzPL{EcJ+`r
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 45 be 07 40 b2 68 bb ac f5 c1 2c ee 5b 6a 33 a8 14 a3 63 a1 fc 3f 24 13 db 88 af 60 c1 4a 85 11 ee 3b cf 4a a5 cb c9 87 59 39 04 06 fc f9 da 4a c0 55 cd e2 4b 0d 92 78 e2 6d 90 60 97 ec 30 f5 95 c4 ae ae f7 51 15 78 9f 3b b4 70 f1 92 0f b2 df fd 7f 42 00 40 20 2e af aa c3 a1 83 f1 3f a6 71 92 31 35 fb db 8e 03 8f e7 62 b5 b5 49 0a fd e2 02 c6 8d 91 d6 15 a9 85 72 2b 9b 44 25 b5 78 96 65 ea 65 38 bf 2c f6 c6 dc b3 5d 15 ca cc 32 7f 28 a6 36 1e 17 25 ec 4f b3 cf 67 55 a8 2a 20 9d dd d4 20 78 3c a1 88 99 4f a4 c6 73 ce 53 91 9d be e4 d6 00 18 c2 4d 33 84 a7 50 30 36 36 72 aa 41 65 44 9f ad 86 5b 59 b8 63 8e a0 2e b4 99 4a 68 3a 52 72 4b fa e6 e2 76 aa cf 49 e6 ba 4d ce a5 60 b9 34 1d 1f 75 ae 89 f4 70 4a fc bd 16 f1 9a 10 36 d9 c8 31 e6 5f 88 f0 f7 16 b2 ce Data Ascii: E@h,[j3c?$`J;JY9JUKxm`0Qx;pB@ .?q15bIr+D%xee8,]2(6%OgU* x<OsSM3P066rAeD[Yc.Jh:RrKvIM`4upJ61_
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 75 b8 c7 8d 76 9a 9b bf 42 4f a2 9c a7 88 65 fb 8c eb 7d 64 fd d3 36 f8 25 a3 b4 74 d6 3d 3a 18 35 a9 fb c3 87 0b d4 76 f3 af bd 93 e2 ae f6 09 f7 49 c6 56 fb 39 f3 c7 b3 41 80 92 91 91 dc 58 38 1e bf ce 66 b7 15 23 68 64 0e 8a fc 24 77 a5 15 61 79 5f ea de 93 c0 87 77 b3 49 aa a4 7f f2 c4 05 7b 20 2f c6 ba bf 4d ef 5e 73 1a d3 c1 69 cb c2 14 7e d8 f5 8c c1 8d 0a 9e b5 50 29 f6 b4 c4 d7 be 03 7b d2 2c 7f 4f 53 e2 14 46 21 da 36 c5 3b f4 3f db 3a b3 36 b8 f2 e9 32 35 0a 63 17 1d 6d b4 63 11 ea 0d e1 43 68 27 02 3a db 3b 4b b8 85 80 79 3b 8a 96 cc 67 15 01 07 a3 50 0f 36 e7 d6 67 e9 a7 f3 70 ac b5 06 bf 41 76 e5 da d5 89 44 36 1b ff e3 e7 d8 7c 42 73 ce 9d 91 f5 76 19 f6 d8 93 e4 e1 ea 24 f4 94 5f 2a bb cb ef 0e b9 c3 fd 4c fb 5b e4 2f 3e 12 70 8c 98 37 60 Data Ascii: uvBOe}d6%t=:5vIV9AX8f#hd$way_wI{ /M^si~P){,OSF!6;?:625cmcCh':;Ky;gP6gpAvD6\|Bsv$_*L[/>p7`
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 95 a3 1c 66 72 d3 81 7c c2 a4 29 4f 2d 49 fd 68 53 32 c0 df fd 33 31 0e 1e 21 c9 84 78 8a 64 bd 05 fc d9 0f 81 65 28 53 16 7b 2e 7a 9e dc f0 13 9e 26 a3 63 e1 09 60 46 c9 a4 03 c7 bc 69 f4 26 af d1 d7 5a 66 44 64 c0 a8 91 4f d2 31 c7 1a d1 c7 0a c4 a8 72 13 18 39 30 1d d6 05 03 27 66 87 1d c9 89 a6 cb 6c 64 17 1a 20 9c 64 40 8c b3 c2 2a ac db b1 ba ff 9e dc c8 dc 16 70 c1 f7 a8 b0 d2 a9 00 22 31 45 19 36 11 e9 bb fa 4d ff d5 e3 40 58 25 68 96 2f df f9 e7 b8 f0 ac c7 80 85 2d d9 a5 23 77 85 6b 8f 06 32 16 17 f1 45 17 b0 31 5a 82 c1 e8 b9 41 a8 57 88 bf 82 e8 db 37 7b d4 92 08 e6 41 f8 04 ea cc ec 06 05 6a 72 cf f5 99 aa 7d 2d f8 92 f8 ee 9b 7a 9a a3 de e3 04 f9 52 14 11 0f 8c d4 d5 b8 fb bc 9b 49 e0 21 cc 78 b4 86 b2 f1 a8 2f ed 2b 10 c1 4a 19 fd 3f 84 15 Data Ascii: fr\|)O-IhS231!xde(S{.z&c`Fi&ZfDdO1r90'fld d@*p"1E6M@X%h/-#wk2E1ZAW7{Ajr}-zRI!x/+J?
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 2d 67 f8 71 6c 8c 75 ee 67 72 3a 98 78 ad 38 77 7f 3c 5c c0 1e b1 11 77 09 6e c0 92 88 9a 4b f2 e9 aa db 1c ea d7 ce 4a 82 dc c2 94 1f 5f 2f f9 37 eb 4c 8c 1a 7e 0e 16 ab f9 d8 25 cd 7a d2 a4 75 46 2b 0d dd 12 a1 6a b8 89 d4 ec 29 0a 09 70 fa 68 7c 44 eb f9 4a de 6e 22 1b 30 67 ee 5c ae d2 10 e2 91 6b 9c 8f 11 aa ea 57 90 fb 86 cb e4 9f 20 29 7b 3f ed 34 9b 6e d0 98 36 13 2f ce 53 6c 1d 94 2a ad 39 25 3c 89 42 56 c9 1f 73 09 0a 6a de b1 07 f1 1f 1f 4b 62 e9 a1 7c aa 85 f5 01 45 d9 a9 f9 9b 2e a8 8f 4a 6a 63 e8 48 a0 2c cd b4 6b 1b 80 1d 1b 8c 92 5c 53 d1 ba 73 99 58 cf e9 6a d2 e0 a8 fa 8a d9 71 05 35 f3 fb 6e d8 fa ac 83 15 fd 91 b2 fa e8 f9 1b 2e 40 9d 81 54 8e f7 c9 5a c6 5f 92 cf e3 f4 a4 6c 9a 8a 43 b4 ee 3f 60 df ef c3 a9 22 63 27 5d b6 7a f9 da 33 Data Ascii: -gqlugr:x8w<\wnKJ_/7L~%zuF+j)ph\|DJn"0g\kW ){?4n6/Sl*9%<BVsjKb\|E.JjcH,k\SsXjq5n.@TZ_lC?`"c']z3
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 3f 44 7a 26 eb 11 5b 9b d1 6e f7 6e 76 ae 49 36 b6 b8 79 da 3b 06 33 07 d5 5f 8c ac 27 9e fb 05 d9 8d af fd b7 c2 17 85 fd 9b 28 8f 27 82 da cf 5f fa 54 62 aa f1 5c 31 c8 89 03 4d 2c 65 e9 4f 5f 96 9c 53 0a 17 55 a3 d9 05 e5 12 34 57 30 12 e3 81 9b c1 86 6b 3d 90 7b d9 15 66 aa 2c c2 38 6d 19 09 5e 87 67 33 dd 10 b5 76 85 84 a2 48 cf 8f 97 02 0a 26 f7 d6 a6 66 4a 7b ae fc 81 fb d2 2c af be 81 e3 09 91 1f 27 13 76 5c de 5b 28 25 b3 5b 2e 3d 15 4d 10 a2 8e f9 ab b6 b1 66 cb 88 fb ab c0 59 48 72 97 81 54 76 26 c7 5f 6e 39 7f 29 f9 56 1d 5f 21 80 4d 89 41 46 ec 85 df 5f a7 da 5f f5 4e 30 05 00 f4 2d c1 9a d3 64 4d db 1f fa 20 23 1c 7f 45 13 3d 00 9c fb f3 c4 58 40 21 7f 8b 5d 80 38 a3 81 84 4d 97 6e cc 28 b7 c6 fc 06 13 30 da 53 65 c2 b0 f7 cf 5e 3b d3 45 b1 Data Ascii: ?Dz&[nnvI6y;3_'('_Tb\1M,eO_SU4W0k={f,8m^g3vH&fJ{,'v\[(%[.=MfYHrTv&_n9)V_!MAF__N0-dM #E=X@!]8Mn(0Se^;E
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 63 a2 02 62 5e f4 f1 7a 58 74 e3 30 69 72 c6 3d d3 45 60 c9 0a 41 fe ed 5a c5 a4 46 3e 4a 4d dc 00 10 a4 5f 7c 94 d3 fd b2 97 54 a6 96 4f 79 77 ed 5b b6 3c 58 49 02 72 d3 a0 4c ad 0b 2e fc 85 29 08 b6 e6 45 43 59 53 f8 b3 a1 4b ab 06 f4 12 ad d2 9f 88 4c 14 45 2b 3f 62 b7 4a f6 71 17 41 c6 18 a5 b4 52 43 b3 e1 84 15 3c 9e 6d 61 15 7a 9a 3f 81 e1 7b f4 e2 8b 96 3a b3 46 11 e5 3c 37 1a 0b ca 68 db a9 a4 c1 19 86 a5 b5 0a cf 23 7d 85 7b ec 7f 92 66 70 17 27 51 5b a1 f3 02 78 5f a9 88 e3 6d fd 92 6c 75 7c cb 1f 6d e2 e4 06 b2 4e e2 6b ba 8f d6 31 58 68 81 88 1e ab be d8 6b f9 18 89 44 70 06 d0 e4 b1 63 0c 16 b6 58 a4 f5 cd 01 68 bc 93 cf c5 58 6b 34 6f f0 58 37 bc 66 32 d7 d2 0a d3 66 46 b4 01 f2 cb 5a 7f bd ba f6 1a a4 d1 75 e1 f4 ef 62 97 51 f1 6e 93 71 66 Data Ascii: cb^zXt0ir=E`AZF>JM_\|TOyw[<XIrL.)ECYSKLE+?bJqARC<maz?{:F<7h#}{fp'Q[x_mlu\|mNk1XhkDpcXhXk4oX7f2fFZubQnqf
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 5d 27 80 d3 47 f3 02 e6 3c 9d 9b 0e 4d 04 1b 4a 27 79 ba 6c 93 c5 d3 72 02 56 b7 a7 73 5c b3 ae 76 c3 41 d1 5a 9b 6a 45 be e5 59 ff 9c 37 e6 53 17 5a dd 52 f6 ad d3 5e dd 60 44 fa 16 ac 27 d9 59 ef b1 3f e3 6f 59 67 15 46 9f b1 76 da 69 65 fb d5 a5 c3 be aa f8 20 36 83 d3 41 8e c4 a7 22 53 9d 60 ef 0d d0 89 fe e0 d0 f9 c8 76 db 66 45 28 f6 a4 6f 4e e9 66 1a 76 7e bb 08 ed c0 19 04 af 0b 93 aa 3f 51 16 d9 e5 35 6f 26 83 d8 ad 35 30 40 a8 f1 eb 4c 27 59 7b a5 d8 63 9e 95 01 24 1f 3a c1 f8 7d 3f ba 64 7f 33 e1 0c e8 bb 2e 7f f6 7c 6e 03 8a 67 fa 3d cd 85 cd f9 bb 2d 72 8c 8a 3c f7 e8 a1 29 f7 32 98 a4 ee 4d 42 6e f7 9c ae c1 4f 77 1b 1b 89 0d fc bc be 9f 1a 70 c1 f3 fe e4 8c 00 ae bd f5 e9 f8 a1 8a 06 d0 8a 88 c2 80 6a 5e f4 c7 6f 6c 8a ab ec f2 ad 59 bf e7 Data Ascii: ]'G<MJ'ylrVs\vAZjEY7SZR^`D'Y?oYgFvie 6A"S`vfE(oNfv~?Q5o&50@L'Y{c$:}?d3.\|ng=-r<)2MBnOwpj^olY
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 33 cf 7e 11 13 4d 91 3a 5c 97 d8 68 c7 85 dd 93 5f 0f ce cb 77 16 bc 02 ba a0 33 f3 87 d0 4d cb e5 c6 d9 d9 e7 ba f1 05 26 e5 da df 90 d4 29 41 75 3b 16 1c c7 d8 4b 91 b4 e4 32 3b 1a 2d 8a 52 1b f2 e2 51 bf 95 99 f3 ad e1 00 13 c7 e8 d0 39 f1 74 b8 af 8b ff d8 62 c3 99 69 a7 02 7e 0e 5b 4b f2 06 bf f2 91 f0 04 2c a9 c3 ed 77 f1 39 f7 e5 cc a3 08 70 9d 10 0e 3a 7e 70 83 75 b6 b1 a7 45 50 de b9 f1 7e f3 b4 5a 6d 82 6d 72 42 14 61 c3 aa 94 97 16 5e ee a0 d7 81 33 31 96 ad a5 81 7f bc 54 d9 bb 97 7f 95 fd 2d 08 0e 04 24 79 c7 db 00 c4 6e 45 97 12 84 1f 50 da 53 dc 19 82 84 3a e7 8c 46 bf 92 7f aa 4c a5 cb 6d 8c 91 41 b4 09 d4 93 ec f7 6c 3c ff 8c b6 48 33 c4 8c 9e a5 50 39 c8 e8 4c 51 31 93 f3 60 21 65 e0 92 fd 1b 5b 16 19 45 01 ea fc db 6f 42 52 03 08 72 01 Data Ascii: 3~M:\h_w3M&)Au;K2;-RQ9tbi~[K,w9p:~puEP~ZmmrBa^31T-$ynEPS:FLmAl<H3P9LQ1`!e[EoBRr
2024-10-25 08:16:24 UTC	1133	IN	Data Raw: 10 fe 8c b0 6e 68 a5 27 b6 b1 8b 13 aa 7e 34 9a 41 1b 68 15 de a6 4e 43 ab c0 70 81 3e 40 1a 86 ff b5 51 73 07 a2 cd d2 ca f2 ae 0a b3 1e 8f b3 7b c4 c0 f4 9f c3 7a 01 85 39 1c 7f c8 2f 54 d3 39 6e ec 1d 4c a2 9b c2 d3 e0 8b 4a f7 53 61 7f 01 e8 99 6d 1e 38 88 b7 d4 34 02 8c d0 51 b2 8e 6a 9b 88 99 69 11 4a 40 46 17 49 00 05 c8 39 a7 93 76 b5 b8 ad 0f af e9 93 36 61 84 ff cb ad 09 f3 f7 52 32 7a d6 99 70 c9 3d 52 61 45 45 0a d2 51 09 35 b8 47 af 08 28 57 a3 1d 9e 30 96 3a 8b 2b e5 09 65 55 32 38 45 84 78 51 21 97 ca 27 3c 1b 1c 5e f2 d8 6a 45 04 f6 ff d6 bb ae c7 52 30 cd b3 be 72 37 50 a3 51 10 01 6c cc 7a 26 3c de fd 14 b1 59 7c 67 24 4a be 41 4c b6 49 a9 f1 c0 6d 14 15 5a 75 68 bf 5c 25 36 93 88 ad 02 65 42 ed 6c 31 36 c3 f9 63 4b 0f 19 5c 5b ca 22 85 Data Ascii: nh'~4AhNCp>@Qs{z9/T9nLJSam84QjiJ@FI9v6aR2zp=RaEEQ5G(W0:+eU28ExQ!'<^jER0r7PQlz&<Y\|g$JALImZuh\%6eBl16cK\["

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	654	OUT	GET /media/wysiwyg/roue-concours_2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:24 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41860 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "Er+Dwu57K92EjsPNJ8cYroTqUhJcu4GDcWFkxgQgmes" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=169383 idim=494x444 ifmt=jpeg ofsz=41860 odim=494x444 ofmt=webp Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e82f59239aa4a7e272972509-a295ba950613318a-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72185 Date: Fri, 25 Oct 2024 08:16:24 GMT X-Served-By: cache-par-lfpg1960041-PAR, cache-dfw-kdfw8210161-DFW X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 52 49 46 46 7c a3 00 00 57 45 42 50 56 50 38 20 70 a3 00 00 30 4a 02 9d 01 2a ee 01 bc 01 3e 6d 30 93 47 24 22 a1 a1 28 35 5c a8 80 0d 89 63 65 22 87 7c 14 3f 6c 2d 45 d9 b6 c8 04 0d 62 7b 4d 99 ca 27 7d 5f ab 3e c4 fc e6 92 5e 61 f5 2a 39 b8 73 75 66 6f 7e e7 df cf d2 ef f8 8f 50 af ef bd 1b fc ce fe db 7a c8 7a 43 ff 0f ea 0f fe 2b d3 3b d5 87 fc ff fd ef 61 af da df 5a 2f fe 3f ba bf 0e 5f e4 bf f7 7e e6 7b 63 ff ff f6 00 ff ff ea 01 ff ff 9f 5f d0 7c 65 fd 0f af 3f ce fe f9 fe 0f dc 87 bc 86 4e fd f3 fd 1f 33 fe df ff 3b fc a7 b6 0f f2 3f f4 78 cf fa df f5 7f f7 7d 42 ff 3f fe b5 bf b3 73 3f 6e 3d 85 3d c8 fb af 9d 17 e7 7f ec ff 55 ec 07 ee 5f ec 7d 80 bf 5f 7f ee 7b 2d ff af c6 73 f3 9f f7 bd 80 ff a6 ff aa f4 8a ff e7 ce 8f eb 9f ee bf fc 7f bb f8 Data Ascii: RIFF\|WEBPVP8 p0J>m0G$"(5\ce"\|?l-Eb{M'}_>^a9sufo~PzzC+;aZ/?_~{c_\|e?N3;?x}B?s?n==U_}_{-s
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 80 59 d0 b4 36 74 4f 69 a2 72 8e 05 aa 54 d7 70 cf ea 8f 41 63 c8 6b a6 5f 4f f6 e3 f0 90 16 aa ee 2b c5 48 e0 7a d6 a3 14 d8 c7 65 26 e1 68 b2 b2 1c 5f d9 2b 8d 24 f5 d2 22 bd 4b 4c 88 df f9 2c 51 0b 82 bc 7c 92 7e b7 fb 96 8b 69 6c b9 89 a7 6e d4 1f 09 8c 7f 0b 82 19 c1 2f 64 f2 58 8f 22 aa fc 22 22 d2 02 1c 24 03 15 f9 70 b1 85 97 0e dc d0 c5 b2 0a 93 6f f0 7a df e6 64 11 8e a7 83 a9 f8 9d 27 2f c6 b6 e6 79 1a 97 da b8 7f 87 42 21 2e 04 89 6d 18 e2 cd b4 ae 72 c3 7a ed cb 26 a4 e9 cf bf d6 55 3f c6 da 67 85 bc 1b 77 8f 53 34 32 7f 82 33 2c 83 e8 9a d0 5a 29 c2 ca 66 60 01 33 e6 16 bb e9 14 37 1d d8 9d 2c 83 85 8c dd e2 1b 32 ee 9a d1 27 7b f2 cb 3a be 77 c1 93 2e dc 8c 6f 64 5f 88 08 46 df 16 0e 9f fb 03 76 5b f8 0e 20 63 d1 6a bc fe bf fd 61 53 31 e8 Data Ascii: Y6tOirTpAck_O+Hze&h_+$"KL,Q\|~iln/dX"""$pozd'/yB!.mrz&U?gwS423,Z)f`37,2'{:w.od_Fv[ cjaS1
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: d6 f7 9d d0 91 5b ee 3d e8 24 89 99 a4 58 6a 6e 8b 3c b6 14 c6 72 d4 30 9c db 08 78 c4 e4 86 39 f6 e9 b0 92 f5 65 eb 96 17 ba 5f 33 a1 08 87 c1 29 ce 8e 1f 10 ee 64 9d 2e 86 7e b1 54 67 76 b0 fc c7 e2 4b 3c d4 14 c8 62 fd 71 c6 c5 ef a8 3f 60 80 2e e0 2b 47 34 3e ba d5 35 07 2e f8 a0 70 28 9c 1e df 8a 88 bb ad 89 05 c7 fd a9 5e 30 26 dd b5 49 44 a2 c5 db 97 25 6b 53 f1 9c 88 e9 04 6d 2e b0 5b ca 3b 21 80 77 85 52 3c 45 fb 70 95 cb 73 f2 32 46 be 5e e7 72 9d 4a 7c cb 44 41 f4 90 e2 ef fd 52 1d 1d c5 04 f1 a3 3e 00 2b cf 25 c1 81 8a 13 e4 f3 e1 58 1d 8b dc 06 69 64 b6 67 ce 43 c5 27 c4 48 19 c6 6c ae 5b 7a 36 f7 30 f5 a6 9a 15 66 04 84 5b 1f ac 77 94 30 42 6c 16 87 36 ca b1 39 ee fc 75 51 ed 96 47 31 76 b9 d6 78 33 80 df 28 62 fb c8 7b 0c 52 4b 76 be 9c 0b Data Ascii: [=$Xjn<r0x9e_3)d.~TgvK<bq?`.+G4>5.p(^0&ID%kSm.[;!wR<Eps2F^rJ\|DAR>+%XidgC'Hl[z60f[w0Bl69uQG1vx3(b{RKv
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 68 3b 3f d2 96 77 2a 36 e4 78 2a f9 0e e1 63 d6 eb 43 bf f9 3a c7 d1 ff c1 d0 4c 49 47 84 45 d1 65 52 96 0f b5 95 0c cc 77 90 c0 73 27 98 c8 84 18 c3 2f 58 14 3c cd e9 a1 e5 71 b0 80 fc 05 ac d5 a6 b6 bd 3d b6 d0 27 ec 9e a8 b3 1c e2 e2 6c 59 d3 72 ed 13 82 67 78 bc cf 47 fe 24 56 7a e0 d3 b3 ab 13 fa f0 be 4b 9a bd 27 2e 79 25 00 6e d9 5a 28 e1 c9 98 83 f2 4d 7e cd 4f cf 16 71 4a 99 0a 60 a9 92 31 ec 10 66 72 4f 7c 74 a1 ea c2 bd cb ed 27 0d c8 41 37 11 30 30 66 ee be 4d e2 20 9e 05 96 7d ad db 5b 26 8b 7a df 48 66 47 54 d7 fd 17 ea 9d 99 86 9d 1e 55 3e de a3 b9 20 c1 99 b3 02 7c 82 db b0 7e 88 e5 b4 c2 62 7d 8d f6 94 c4 aa c4 c6 07 45 5f c1 6d 77 18 1f d6 46 4b cd 9e 7a b5 c3 99 d3 0a 81 d9 c0 3e a3 e9 c0 21 ca 00 66 99 9a bb b6 d2 d9 4b d9 1c 50 92 6e Data Ascii: h;?w6xcC:LIGEeRws'/X<q='lYrgxG$VzK'.y%nZ(M~OqJ`1frO\|t'A700fM }[&zHfGTU> \|~b}E_mwFKz>!fKPn
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 23 c7 ac 7b 7b e6 15 23 ca af 29 ec 1e a6 02 d0 94 70 ee d5 4b cc ec da b7 f1 07 1b a2 e4 a0 f6 34 3d 87 16 bb 25 3d 5b 43 7d 01 07 41 2c 5d 79 bf 5a 6e 79 bd b3 e0 08 1e b9 e2 61 dc e0 60 49 19 43 f4 93 c9 f4 99 53 3d f9 c8 2e f8 ec 39 1c 22 e8 fb 80 d8 a2 92 c8 3e 00 18 b0 22 38 85 01 a4 40 cf cc 0e 70 bc 4a 75 33 57 cc 5a e0 0f 18 94 a4 ea 46 e8 60 cb 8f 26 5c 33 50 96 8e 5f 58 bc f8 a3 97 9b 08 8e e4 de 00 61 9f 49 9c 01 80 95 2f 16 97 b2 27 cf 39 84 88 47 78 e6 0c dc 3b 62 1e 65 bd 98 19 d9 8e bb 25 76 c2 26 5f f5 e0 fc e5 60 35 f3 b2 f9 62 a6 bc 7a 67 3b 30 1b c8 71 60 25 a6 30 eb 32 04 9b 9b 7f 63 83 d7 e3 56 d8 a4 ad 1c f3 fb 16 ae ed 11 3a bb d5 57 21 a9 21 8c 24 68 78 56 54 67 45 65 0d 40 cc 7b 4c 8d d7 eb 68 9f 25 99 08 c9 2e aa 13 d6 b2 48 85 Data Ascii: #{{#)pK4=%=[C}A,]yZnya`ICS=.9">"8@pJu3WZF`&\3P_XaI/'9Gx;be%v&_`5bzg;0q`%02cV:W!!$hxVTgEe@{Lh%.H
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 11 bf e2 90 a5 b5 cb 8c 5f bd a4 2d 79 4a 96 dd c6 65 ee b2 df 25 2e 31 85 01 11 a2 81 ec 1c 78 d5 39 5e ea 65 22 7b da 70 04 7b a8 e0 7d 92 58 fa ed b3 a8 60 74 a9 3b 35 4f c7 e1 36 dd 29 7f f3 4f 2a 68 9d 02 64 29 10 a4 3b e9 fd d2 a0 82 87 fb 47 8f 2c d9 d9 88 6c a7 1f 6b f9 dc b4 0b 39 6d 33 0f b9 65 db 1e 81 6f 35 e8 24 5b b9 c5 76 39 ee 7f e4 02 d1 51 14 40 d1 0f 3d 6a d8 ec b3 d7 5f 23 9e 16 5f 8e 5e 3c 45 a8 a0 14 a8 66 ba 82 f9 fd 64 63 8a 8a a3 24 b6 b7 c6 fa 76 e4 8b ce af 7d c8 15 c4 ae fb 05 a5 8c 76 8c 26 11 74 c8 eb 3f 76 e6 76 0b 2a 74 09 bc d6 cd 26 25 ff ca 74 27 17 05 d4 9b 68 43 8f 15 0a 58 2c a4 8a 99 2c 2f db 51 46 ed cb 9f ae 86 20 7d cb 3c 7d d1 ae d2 d5 67 c6 54 df 0b 26 0a 74 f7 a4 92 8d 78 39 f6 b4 8b 3e 25 f2 2b 42 db ca 94 5e Data Ascii: _-yJe%.1x9^e"{p{}X`t;5O6)Ohd);G,lk9m3eo5$[v9Q@=j_#_^<Efdc$v}v&t?vvt&%t'hCX,,/QF }<}gT&tx9>%+B^
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 16 45 b5 56 e2 4e 51 48 d0 f3 16 20 13 d9 94 23 c0 db 72 87 8a 42 a1 b9 a0 1c f7 1b ff 92 a1 17 54 28 e0 76 5b d8 8e 0a 73 f7 93 b7 95 d6 22 fe f7 a2 20 10 12 58 9a 07 6e f4 b4 92 9d 6b 1f 82 5e 4d 75 53 5a 70 ba b2 72 a0 16 87 0d 36 17 10 9f 7e 70 70 e8 2c 48 ab 39 3e 14 b6 05 c7 cd d6 99 7b 41 b1 2a 69 e3 f7 ce be 5d 52 b1 9b d9 ca db 06 c2 78 ac 6c 51 98 e3 54 8a a2 73 4d 6c d0 85 ce 11 8b da d1 88 c7 ac 61 b6 99 b2 35 a5 e5 69 87 08 ac fd 89 d2 b1 ae 52 a0 ba 99 b0 7d 9a 5a 31 3d b9 f8 b8 7c 78 d6 2f ca 89 c0 58 c5 3c bf 2a 0d f1 8f 7b e0 17 f8 34 f3 06 c0 a2 44 58 df 5d 33 be 53 e0 b5 79 50 3a 19 c4 56 4c 54 93 3a 02 97 64 09 31 68 60 96 68 be fe e7 43 e6 3d 69 b6 af 30 dd 6b f3 f8 e7 fb 18 c2 d7 53 ee 9f 14 8d ba 06 1f fc 6b 25 ba b6 fa 14 81 e9 86 Data Ascii: EVNQH #rBT(v[s" Xnk^MuSZpr6~pp,H9>{Ai]RxlQTsMla5iR}Z1=\|x/X<{4DX]3SyP:VLT:d1h`hC=i0kSk%
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 3e 48 11 92 53 7d 97 e3 0e 8d 56 45 24 b8 05 0d 23 18 b8 53 99 e5 0b 4c d5 94 ea 46 8a ad c8 2c 4b 35 d5 2d 83 8b ca 16 19 94 f0 45 4c b8 e8 73 0f 0b ff a1 e7 8c a7 13 6a 69 ba c4 d8 ad e7 58 36 92 fb 9e af de 90 7a e7 ca 7d 96 ba de 0c dd 37 56 d8 21 e6 3b b3 1a 84 17 67 4a f3 39 54 2f 04 3e 7e 1d 53 a2 4a d6 2d 13 02 e9 c4 b5 e6 e3 2e ea 0b 74 7c db eb 0a 26 b6 d1 66 6a 40 88 97 47 4a 2d 35 2c 9e 23 98 61 ed f3 b2 7f 4c 98 3a c5 26 57 bf 40 e1 56 70 38 ed 0f 7e a3 3d 8b 3c b5 f4 03 2d 40 fe 18 95 b5 9b a2 c3 89 6d d9 3d 45 e3 f9 ec 87 92 7e 5a 8b fe 38 cf b0 6e e8 f0 34 f5 e5 24 e7 8a c3 0d 87 d1 0c 01 a7 85 77 39 e4 c8 98 a9 29 a7 7c 9e 59 55 27 61 bb b3 fa a8 09 69 84 8b f2 52 2a e7 d3 a8 27 95 c1 06 69 26 b4 5d aa 99 b5 c7 26 3f 62 c6 dd 8b bc e5 08 Data Ascii: >HS}VE$#SLF,K5-ELsjiX6z}7V!;gJ9T/>~SJ-.t\|&fj@GJ-5,#aL:&W@Vp8~=<-@m=E~Z8n4$w9)\|YU'aiR*'i&]&?b
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: e1 96 85 ab a7 bc cf 96 cc 71 4f 31 1b a7 e1 f9 e1 f1 23 a6 f4 d5 fa 6c b1 1f 0d 04 05 60 08 4e 63 43 64 2a f6 2c 65 f8 e8 23 c9 9d 74 52 4b 8f 26 8e 94 34 b6 b0 f9 7a 5d 6d e0 61 89 3f c5 cc 09 ef 23 fe 12 a1 ac 27 b5 dd 20 ef 7d ca 74 51 c5 ee 40 60 b2 64 e7 63 5d 95 61 f0 a2 13 8c f0 22 4f a6 d0 08 10 b6 f3 38 1b ce e2 ec 72 e4 fe 50 ab 1f d0 1d 78 18 b6 bc ce b9 91 6b 77 5c 3b dd 03 09 b6 d2 b0 14 c9 c7 37 57 60 d9 99 d7 8a d6 b8 72 b4 f2 57 5e 1a 95 eb 90 f2 56 ad ce 76 b9 26 10 28 5e b2 76 86 5a ec 9b a5 9e 10 41 53 54 d3 82 f7 f1 61 17 c4 03 67 48 a3 5a 70 b2 8b 12 51 39 bf 7a 4f c8 aa ed 3e a0 2c 09 32 f8 7f 2c 94 9a 78 20 00 a4 a4 ed ac 09 89 93 5a a6 13 10 66 ce af 55 5e dd 09 5c be f8 7a bc 38 05 27 2c 9e 1f f5 5e c1 3a b8 1f 11 53 72 a0 3d b8 Data Ascii: qO1#l`NcCd*,e#tRK&4z]ma?#' }tQ@`dc]a"O8rPxkw\;7W`rW^Vv&(^vZASTagHZpQ9zO>,2,x ZfU^\z8',^:Sr=
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: b4 2f 55 ab f1 ac a2 24 28 84 16 45 e2 56 12 00 ce 53 5f ba e9 24 e3 ff fb 03 58 7e d5 73 41 39 ee 34 ab 5a 60 c0 dc 35 58 c7 df 6b 87 e5 9d 7c 9a 25 15 10 8f 63 14 6d 0f a0 d0 a1 f2 bb 44 d7 48 9c 2c 95 5b fa bb 32 96 1a 4b 6a a5 1f ac 40 02 40 b3 5d 58 5e fa aa c4 aa 5e 59 f5 8a 90 0c e9 2b 5f b7 58 b3 27 76 7c e2 78 83 12 a3 a3 81 ad 63 77 ed f6 f2 21 0d a4 7d 4c 1a b7 8f b8 1e 1e ca 16 d9 9b 60 95 b9 4d da 78 55 81 68 7d f0 2b 59 e0 df a7 07 96 ea e6 c3 ae 30 d7 39 29 7b 69 81 86 dc 39 96 db a4 75 d3 2d 71 9d 48 e4 82 ac 49 9f c0 7f d5 39 66 8a 7f 2e 6b 54 a2 1e 0c ff 64 93 84 d0 7b 02 85 9e 79 75 fa 79 b2 42 4b fd 3a 05 62 e1 72 22 fa ae dc 95 4a c7 64 e8 2f 79 1e f8 37 6d e5 c1 81 24 80 1a 44 c4 a0 31 e0 d4 ed ec 8f 11 27 9a 9a b5 ca 2a 30 35 97 a9 Data Ascii: /U$(EVS_$X~sA94Z`5Xk\|%cmDH,[2Kj@@]X^^Y+_X'v\|xcw!}L`MxUh}+Y09){i9u-qHI9f.kTd{yuyBK:br"Jd/y7m$D1'*05

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	82.202.163.23	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	549	OUT	GET /tu//?page=all HTTP/1.1 Host: sourcetrap.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.retif.eu Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:24 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 25 Oct 2024 08:16:24 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	623	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Hyva_Theme/js/alpine3.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb
2024-10-25 08:16:24 UTC	679	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39811 Content-Type: application/javascript Etag: "671a1fa6-3964" Last-Modified: Thu, 24 Oct 2024 10:21:26 GMT Traceresponse: 00-18016274d3efd450c8b58e46dcdd1682-a4eb41d57191ff8b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:24 GMT Age: 72199 X-Served-By: cache-par-lfpg1960032-PAR, cache-dfw-kdal2120120-DFW X-Cache: HIT, HIT X-Cache-Hits: 76, 1 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 57 65 3d 21 31 2c 47 65 3d 21 31 2c 42 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 24 74 28 65 29 7b 61 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 6e 28 65 29 7b 42 2e 69 6e 63 6c 75 64 65 73 28 65 29 7c 7c 42 2e 70 75 73 68 28 65 29 2c 63 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 65 29 7b 6c 65 74 20 74 3d 42 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 21 3d 3d 2d 31 26 26 42 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 63 6e 28 29 7b 21 47 65 26 26 21 57 65 26 26 28 57 65 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 6c 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6e 28 29 7b 57 65 3d 21 31 2c 47 65 3d 21 30 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 42 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 42 5b Data Ascii: (()=>{var We=!1,Ge=!1,B=[];function $t(e){an(e)}function an(e){B.includes(e)\|\|B.push(e),cn()}function he(e){let t=B.indexOf(e);t!==-1&&B.splice(t,1)}function cn(){!Ge&&!We&&(We=!0,queueMicrotask(ln))}function ln(){We=!1,Ge=!0;for(let e=0;e<B.length;e++)B[
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 74 74 3d 21 31 7d 76 61 72 20 74 65 3d 5b 5d 2c 6e 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 75 6e 28 29 7b 74 65 3d 74 65 2e 63 6f 6e 63 61 74 28 65 74 2e 74 61 6b 65 52 65 63 6f 72 64 73 28 29 29 2c 74 65 2e 6c 65 6e 67 74 68 26 26 21 6e 74 26 26 28 6e 74 3d 21 30 2c 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 28 29 3d 3e 7b 64 6e 28 29 2c 6e 74 3d 21 31 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 29 7b 58 65 28 74 65 29 2c 74 65 2e 6c 65 6e 67 74 68 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 29 7b 69 66 28 21 74 74 29 72 65 74 75 72 6e 20 65 28 29 3b 66 6e 28 29 3b 6c 65 74 20 74 3d 65 28 29 3b 72 65 74 75 72 6e 20 72 74 28 29 2c 74 7d 76 61 72 20 69 74 3d 21 31 2c 67 65 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 55 74 28 29 7b 69 74 3d 21 30 7d 66 Data Ascii: tt=!1}var te=[],nt=!1;function un(){te=te.concat(et.takeRecords()),te.length&&!nt&&(nt=!0,queueMicrotask(()=>{dn(),nt=!1}))}function dn(){Xe(te),te.length=0}function m(e){if(!tt)return e();fn();let t=e();return rt(),t}var it=!1,ge=[];function Ut(){it=!0}f
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 74 61 63 6b 3d 5b 74 2c 2e 2e 2e 6b 28 72 7c 7c 65 29 5d 2c 28 29 3d 3e 7b 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3d 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 2e 66 69 6c 74 65 72 28 6e 3d 3e 6e 21 3d 3d 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 2c 74 29 7b 6c 65 74 20 72 3d 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 5b 30 5d 3b 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 5b 6e 2c 69 5d 29 3d 3e 7b 72 5b 6e 5d 3d 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3f 65 2e 5f 78 5f 64 61 74 61 53 74 61 63 6b 3a 74 79 70 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 Data Ascii: tack=[t,...k(r\|\|e)],()=>{e._x_dataStack=e._x_dataStack.filter(n=>n!==t)}}function ot(e,t){let r=e._x_dataStack[0];Object.entries(t).forEach(([n,i])=>{r[n]=i})}function k(e){return e._x_dataStack?e._x_dataStack:typeof ShadowRoot=="function"&&e instanceof S
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 28 74 68 69 73 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 2c 28 29 3d 3e 70 6e 28 6e 2c 69 29 2c 73 3d 3e 73 74 28 6e 2c 69 2c 73 29 2c 69 2c 6f 29 7d 7d 3b 72 65 74 75 72 6e 20 74 28 72 29 2c 6e 3d 3e 7b 69 66 28 74 79 70 65 6f 66 20 6e 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6e 21 3d 3d 6e 75 6c 6c 26 26 6e 2e 5f 78 5f 69 6e 74 65 72 63 65 70 74 6f 72 29 7b 6c 65 74 20 69 3d 72 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 62 69 6e 64 28 72 29 3b 72 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 28 6f 2c 73 2c 61 29 3d 3e 7b 6c 65 74 20 63 3d 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 28 6f 2c 73 2c 61 29 3b 72 65 74 75 72 6e 20 72 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3d 63 2c 69 28 6f 2c 73 2c 61 29 7d 7d 65 6c 73 65 20 72 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3d 6e 3b 72 65 74 75 72 Data Ascii: (this.initialValue,()=>pn(n,i),s=>st(n,i,s),i,o)}};return t(r),n=>{if(typeof n=="object"&&n!==null&&n._x_interceptor){let i=r.initialize.bind(r);r.initialize=(o,s,a)=>{let c=n.initialize(o,s,a);return r.initialValue=c,i(o,s,a)}}else r.initialValue=n;retur
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 5b 65 5d 29 72 65 74 75 72 6e 20 6c 74 5b 65 5d 3b 6c 65 74 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6e 3d 2f 5e 5b 5c 6e 5c 73 5d 2a 69 66 2e 2a 5c 28 2e 2a 5c 29 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5e 28 6c 65 74 7c 63 6f 6e 73 74 29 5c 73 2f 2e 74 65 73 74 28 65 29 3f 60 28 28 29 20 3d 3e 20 7b 20 24 7b 65 7d 20 7d 29 28 29 60 3a 65 2c 6f 3d 28 28 29 3d 3e 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 72 28 5b 22 5f 5f 73 65 6c 66 22 2c 22 73 63 6f 70 65 22 5d 2c 60 77 69 74 68 20 28 73 63 6f 70 65 29 20 7b 20 5f 5f 73 65 6c 66 2e 72 65 73 75 6c 74 20 3d 20 24 7b 6e 7d 20 7d 3b 20 5f 5f 73 65 6c 66 2e 66 69 6e 69 73 68 65 Data Ascii: [e])return lt[e];let r=Object.getPrototypeOf(async function(){}).constructor,n=/^[\n\s]if.$.*$/.test(e)\|\|/^(let\|const)\s/.test(e)?`(() => { ${e} })()`:e,o=(()=>{try{return new r(["__self","scope"],`with (scope) { __self.result = ${n} }; __self.finishe
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 6c 28 29 3b 6e 72 3d 74 2c 69 65 2e 73 65 74 28 74 2c 5b 5d 29 3b 6c 65 74 20 72 3d 28 29 3d 3e 7b 66 6f 72 28 3b 69 65 2e 67 65 74 28 74 29 2e 6c 65 6e 67 74 68 3b 29 69 65 2e 67 65 74 28 74 29 2e 73 68 69 66 74 28 29 28 29 3b 69 65 2e 64 65 6c 65 74 65 28 74 29 7d 2c 6e 3d 28 29 3d 3e 7b 64 74 3d 21 31 2c 72 28 29 7d 3b 65 28 72 29 2c 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 65 29 7b 6c 65 74 20 74 3d 5b 5d 2c 72 3d 61 3d 3e 74 2e 70 75 73 68 28 61 29 2c 5b 6e 2c 69 5d 3d 46 74 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 75 73 68 28 69 29 2c 5b 7b 41 6c 70 69 6e 65 3a 49 2c 65 66 66 65 63 74 3a 6e 2c 63 6c 65 61 6e 75 70 3a 72 2c 65 76 61 6c 75 61 74 65 4c 61 74 65 72 3a 67 2e 62 69 6e 64 28 67 2c 65 29 2c 65 76 61 6c 75 61 74 65 3a 50 2e 62 69 6e Data Ascii: l();nr=t,ie.set(t,[]);let r=()=>{for(;ie.get(t).length;)ie.get(t).shift()();ie.delete(t)},n=()=>{dt=!1,r()};e(r),n()}function at(e){let t=[],r=a=>t.push(a),[n,i]=Ft(e);return t.push(i),[{Alpine:I,effect:n,cleanup:r,evaluateLater:g.bind(g,e),evaluate:P.bin
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 3a 74 2e 74 79 70 65 3b 72 65 74 75 72 6e 20 41 65 2e 69 6e 64 65 78 4f 66 28 72 29 2d 41 65 2e 69 6e 64 65 78 4f 66 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 2c 74 2c 72 3d 7b 7d 29 7b 65 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 64 65 74 61 69 6c 3a 72 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 29 7d 76 61 72 20 6d 74 3d 5b 5d 2c 68 74 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 54 65 28 65 3d 28 29 3d 3e 7b 7d 29 7b 72 65 74 75 72 6e 20 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 28 28 29 3d 3e 7b 68 74 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 4f 65 28 29 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 74 Data Ascii: :t.type;return Ae.indexOf(r)-Ae.indexOf(n)}function z(e,t,r={}){e.dispatchEvent(new CustomEvent(t,{detail:r,bubbles:!0,composed:!0,cancelable:!0}))}var mt=[],ht=!1;function Te(e=()=>{}){return queueMicrotask(()=>{ht\|\|setTimeout(()=>{Oe()})}),new Promise(t
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 6c 65 70 6f 72 74 42 61 63 6b 29 2c 21 21 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 72 65 74 75 72 6e 20 51 28 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 72 65 74 75 72 6e 20 66 72 28 29 2e 73 6f 6d 65 28 74 3d 3e 65 2e 6d 61 74 63 68 65 73 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 2c 74 3d 52 29 7b 69 72 28 28 29 3d 3e 7b 74 28 65 2c 28 72 2c 6e 29 3d 3e 7b 6e 65 28 72 2c 72 2e 61 74 74 72 69 62 75 74 65 73 29 2e 66 6f 72 45 61 63 68 28 69 3d 3e 69 28 29 29 2c 72 2e 5f 78 5f 69 67 6e 6f 72 65 26 26 6e 28 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 62 6e 28 65 29 7b 52 28 65 2c 74 3d 3e 51 65 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 Data Ascii: leportBack),!!e.parentElement)return Q(e.parentElement,t)}}function dr(e){return fr().some(t=>e.matches(t))}function w(e,t=R){ir(()=>{t(e,(r,n)=>{ne(r,r.attributes).forEach(i=>i()),r._x_ignore&&n()})})}function bn(e){R(e,t=>Qe(t))}function oe(e,t){return
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 29 3d 3e 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 72 7c 7c 22 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 61 2d 7a 5d 29 28 5b 41 2d 5a 5d 29 2f 67 2c 22 24 31 2d 24 32 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 65 2c 74 3d 28 29 3d 3e 7b 7d 29 7b 6c 65 74 20 72 3d 21 31 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 3f 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 72 3d 21 30 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 64 28 22 74 72 61 6e 73 69 74 69 6f 6e 22 2c 28 65 2c 7b 76 61 6c 75 65 3a 74 2c 6d 6f 64 69 66 69 65 72 73 3a 72 Data Ascii: )=>{e.setAttribute("style",r\|\|"")}}function Sn(e){return e.replace(/([a-z])([A-Z])/g,"$1-$2").toLowerCase()}function se(e,t=()=>{}){let r=!1;return function(){r?t.apply(this,arguments):(r=!0,e.apply(this,arguments))}}d("transition",(e,{value:t,modifiers:r
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 3a 66 7d 2c 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 74 65 72 2e 73 74 61 72 74 3d 7b 6f 70 61 63 69 74 79 3a 6c 2c 74 72 61 6e 73 66 6f 72 6d 3a 60 73 63 61 6c 65 28 24 7b 75 7d 29 60 7d 2c 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 65 6e 74 65 72 2e 65 6e 64 3d 7b 6f 70 61 63 69 74 79 3a 31 2c 74 72 61 6e 73 66 6f 72 6d 3a 22 73 63 61 6c 65 28 31 29 22 7d 29 2c 6f 26 26 28 65 2e 5f 78 5f 74 72 61 6e 73 69 74 69 6f 6e 2e 6c 65 61 76 65 2e 64 75 72 69 6e 67 3d 7b 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3a 79 2c 74 72 61 6e 73 69 74 69 6f 6e 44 65 6c 61 79 3a 70 2c 74 72 61 6e 73 69 74 69 6f 6e 50 72 6f 70 65 72 74 79 3a 4e 2c 74 72 61 6e 73 69 74 69 6f 6e 44 75 72 61 74 69 6f 6e 3a 60 24 7b 70 65 7d 73 60 2c 74 72 61 6e 73 69 74 69 Data Ascii: :f},e._x_transition.enter.start={opacity:l,transform:`scale(${u})`},e._x_transition.enter.end={opacity:1,transform:"scale(1)"}),o&&(e._x_transition.leave.during={transformOrigin:y,transitionDelay:p,transitionProperty:N,transitionDuration:`${pe}s`,transiti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	656	OUT	GET /media/wysiwyg/home/black-friday.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:24 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67360 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "P+ONYxwSomxDzUhvdOAXrlRtTxJ9BLnyKEuq7H+bHok" Expires: Fri, 24 Oct 2025 16:25:23 GMT Fastly-Io-Info: ifsz=106778 idim=400x400 ifmt=png ofsz=67360 odim=400x400 ofmt=webp Fastly-Io-Served-By: img06-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801703947a76af50dc9acfbe06a0ede-ca0f341efcda8d95-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 57061 Date: Fri, 25 Oct 2024 08:16:24 GMT X-Served-By: cache-par-lfpg1960078-PAR, cache-dfw-kdal2120061-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 52 49 46 46 18 07 01 00 57 45 42 50 56 50 38 4c 0b 07 01 00 2f 8f c1 63 10 4d c8 b2 6d b7 6e 1b e3 02 d0 09 08 7a fe 03 16 29 d3 e9 e3 3b a2 ff 13 60 ff c9 fd 27 d4 1f 00 90 89 bd df bf a5 17 40 02 bf c3 3b c9 5b e6 78 db 05 8c c5 3c e6 ee f3 0d 90 64 a6 9b c5 c8 64 80 99 f5 3c e2 b7 bc 41 26 81 cd 24 01 06 26 9d 70 77 97 92 04 b2 86 b8 ec fd 5e 01 7d c2 17 79 4b 60 64 c2 48 c6 46 07 7c 39 2b d5 9d 24 24 80 65 42 02 ad f8 c8 37 89 d4 52 67 2e 30 d6 52 c4 a1 ce d4 32 51 0b 83 31 c6 00 aa 22 e2 99 af 35 13 f5 cb a5 4c a9 dc 3a da 12 30 49 87 66 a5 d6 94 d6 ad d9 45 96 a4 88 27 be 4b a4 7a dd e6 62 b6 e4 0e ba 1f eb 36 97 32 5f 2d 29 41 52 e6 4a 27 6c 42 62 d6 dd b3 bb a5 ec 7e 49 8c 9d 76 da cc 49 b5 59 db fd d6 ba 0f b2 16 7a b2 9d 95 fa a1 0a d7 25 27 dd Data Ascii: RIFFWEBPVP8L/cMmnz);`'@;[x<dd<A&$&pw^}yK`dHF\|9+$$eB7Rg.0R2Q1"5L:0IfE'Kzb62_-)ARJ'lBb~IvIYz%'
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: e7 ea 22 f1 7d e6 12 03 cb d7 c9 46 cd 79 03 62 a7 eb d1 74 71 b2 21 01 c7 76 9e 10 f6 ea 02 a1 4d ec 68 3c 18 75 80 57 03 38 55 55 43 31 b0 10 01 51 07 9b ad 46 f0 d6 2e 60 25 59 90 87 e2 c3 59 60 3b 9a 2e cc a8 ed 6a 6a 20 b9 08 e4 14 53 fd 00 b1 0f e7 3c e6 c4 e0 ab dd 8e c6 b1 cd a4 5d 17 d5 1f e8 e2 d7 52 47 bd ec 34 36 24 37 36 73 f8 3e b6 0d c4 41 e3 ec 17 4e 67 c7 63 55 25 b1 27 db 65 f4 44 2b f6 d5 65 ab e3 80 b4 69 2f b1 c7 c9 85 06 ab 6f 8e ec 8e c6 0f af 22 d0 78 3d fc 66 d6 78 a7 c9 3a 0e 48 db fe 4a 1d 35 5c 25 55 ff 9a 9e ae be 71 a3 d9 ba e9 6b 57 e9 cd ab 7f ab cf ad f3 1b bd 6d d5 fb fd db e5 b9 b6 6d d7 91 6c db aa 13 1e 9c b3 54 c4 de 5b 82 ad c9 2e 21 c6 16 63 cb b5 75 08 1d 76 76 a7 58 10 04 37 60 16 87 01 58 6b cd 31 e6 c0 da d4 65 Data Ascii: "}Fybtq!vMh<uW8UUC1QF.`%YY`;.jj S<]RG46$76s>ANgcU%'eD+ei/o"x=fx:HJ5\%UqkWmmlT[.!cuvvX7`Xk1e
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: ab 8d 8b 7d 9d 95 fd 5a 11 20 6a f3 5c df ff d9 a7 b3 6a 5f 1b fb d3 c4 7e 8c 6c 45 25 04 10 e8 78 12 9f a8 d9 42 b1 20 07 64 5c 17 c3 4e 73 0c 39 26 d5 fc cd f2 73 ea 7b ca d7 02 df e3 cc cb 84 d5 11 eb ea e4 4f e5 78 d2 1f ad 95 e7 56 ef 13 bf 19 7f e2 37 f3 d5 3a 2a 20 1a 9f 9f d7 87 e7 73 db 8f ac 85 91 d0 35 91 aa 6c 00 88 60 03 44 a0 2b 52 31 cc c4 85 8b 89 d1 ee 1b 9d c6 b4 70 13 86 09 33 46 af a4 33 d9 de d7 f1 45 c3 4c 52 9d b8 ec 50 9b f9 a6 35 db 95 55 4f 25 d3 75 26 fa 59 f9 37 5c f9 27 7c 35 f9 d5 b3 04 00 84 55 39 e8 12 54 f4 f5 65 a3 77 b8 57 32 6b 9f 86 87 02 f4 44 cc 45 5d c0 25 5e 19 ed 27 d2 0b 6f 84 57 4d 35 6a e3 d5 a9 6b 78 05 c0 00 31 09 aa e1 a2 23 cb 8c 1d 0e 5b 71 00 33 d8 31 bd 44 fa 8e 24 41 4e da d0 ce 9a 7a 35 93 96 f7 ca ec Data Ascii: }Z j\j_~lE%xB d\Ns9&s{OxV7:* s5l`D+R1p3F3ELRP5UO%u&Y7\'\|5U9TewW2kDE]%^'oWM5jkx1#[q31D$ANz5
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 63 d1 a8 d6 73 b5 9e f5 5a fd 51 e8 43 db aa 46 7a 0f e7 92 a4 48 60 04 09 02 00 09 12 df 76 04 45 05 d6 62 15 36 a0 71 bf 04 40 64 ae 0f bb b5 5e 24 71 bf dc c4 6c a3 de 80 80 28 1c 00 c0 c0 04 c2 65 c9 28 9b 73 ec bc b1 ed 7c 99 71 e8 4b bc 4f d9 c1 7d ca 88 66 61 42 9b 0a ec 34 67 3d 0c 31 b2 50 a9 32 cd 7d 67 41 e5 7d 24 43 65 4a 29 01 69 c0 52 84 ad b5 b1 20 b7 35 02 10 39 d4 4d 32 e2 ae 61 23 6a 55 ab 78 77 c0 b9 e2 69 c2 55 1c c8 23 36 8b 01 37 50 7d 84 ea 84 be 60 ce 36 3d 90 d5 62 f7 75 95 21 8e 64 29 ac 20 41 f0 e7 77 2f d0 81 14 2c c3 12 94 ee 13 ee 79 27 f2 dc 8b fd eb f3 d9 09 7d 21 4d b7 fb af c8 2f 89 84 10 12 0a d8 83 58 68 c0 ce 82 42 45 45 0b ef bc e3 63 28 5c 6a 90 41 d8 25 c2 63 33 49 4c 00 2b 7c fc 3d f4 66 37 60 d2 23 e3 f8 0d 95 58 Data Ascii: csZQCFzH`vEb6q@d^$ql(e(s\|qKO}faB4g=1P2}gA}$CeJ)iR 59M2a#jUxwiU#67P}`6=bu!d) Aw/,y'}!M/XhBEEc(\jA%c3IL+\|=f7`#X
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 82 80 28 01 01 12 24 00 16 a2 82 0d 34 a0 02 c3 d9 40 82 ae 2f ab e1 a9 eb a3 e4 72 2f 4b f2 90 51 ed 13 f0 4e 44 80 4b 69 1a 0c 86 7e c0 42 30 e1 18 a2 32 a0 e1 d2 24 f0 4f cf c2 cf d8 9a 0c 83 88 97 01 42 bf 04 c4 38 3a f2 92 e4 1e 39 28 52 19 e3 8d 85 27 10 84 35 fc 4d c2 f0 ec 45 cd 1f 0e 44 00 2a 43 60 4c 74 11 59 4c 56 a4 38 b0 98 04 1e 90 f1 0e 8a 21 aa 6a 02 83 7a 04 aa 6c 30 25 b8 06 15 01 5c 78 f4 5f 46 ec 18 70 14 04 52 e1 f1 97 0c a9 0a 6f 96 90 07 53 e1 65 d0 95 d1 ba 02 8c 16 76 8a 41 49 19 d7 6b fa b5 d9 a9 c7 2d d9 93 f6 e4 5b b7 3a 1b 4a 22 72 90 20 40 02 a0 19 15 fc a0 05 29 72 1f 3e 5f 7d f8 70 77 e9 eb cd 8f 3f 7f 73 c7 e0 f3 b7 d6 2f ec 20 30 b6 a2 28 19 eb 97 1a 62 c6 31 2f 30 36 78 f0 a1 d1 f1 8f 0d 48 97 32 c4 38 dc f3 da 44 39 b0 Data Ascii: ($4@/r/KQNDKi~B02$OB8:9(R'5MED*C`LtYLV8!jzl0%\x_FpRoSevAIk-[:J"r @)r>_}pw?s/ 0(b1/06xH28D9
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: a0 d0 85 81 60 94 02 78 b0 03 1d 80 aa 63 50 e3 18 17 d6 de a0 23 53 bd 86 9c 2d dd e0 f3 8b 12 85 18 2f 5e df 18 62 1e 1c ab 60 58 92 83 22 28 14 49 a8 11 41 c4 84 00 26 3c 98 aa 39 34 89 c8 05 47 80 44 b1 8c f4 e0 47 0f 30 d6 94 e3 23 6c 39 7b d2 23 2d 1b 92 e4 30 50 f1 83 5c 35 37 cc 29 46 1d f1 b5 76 90 d3 41 5c 89 94 b0 d1 ee 88 e6 16 df 60 b3 e0 e7 a3 bc cf 84 61 f1 af 9e 5b ff 63 fe f5 0c 10 ff 1f de 14 17 50 3c 8e 2f af 1f 41 c7 19 41 70 6b 1b 20 c6 09 97 87 40 1e 15 f3 28 f7 a1 47 34 f7 4e 46 c5 30 3c 46 b9 91 4a 86 c4 dc a4 e1 c7 34 15 bb d9 f1 d7 51 8f 07 b4 8f 47 1c d7 a5 17 82 2e fb a8 bf 67 95 c7 0b 97 00 a2 1f c9 80 87 25 a3 6e 62 2c 49 e6 c3 a9 8f 70 5c 18 5b 69 63 40 0a 5f f2 30 68 e9 9d cd e4 d1 14 38 1a 81 08 1c 1f 06 09 a0 2a 4c 93 81 Data Ascii: `xcP#S-/^b`X"(IA&<94GDG0#l9{#-0P\57)FvA\`a[cP</AApk @(G4NF0<FJ4QG.g%nb,Ip\[ic@_0h8*L
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: f2 7b c6 8b 48 f5 c1 fb d0 1d 36 15 24 40 a8 60 85 1b 44 ec 51 82 60 88 8a 12 84 8c 80 d4 de 4a 36 36 f2 c4 47 87 58 cf fa 72 8b 5a d9 d0 ad 16 87 3a 23 18 6e 8c 10 a4 8f 4c 0d ed c8 e8 20 37 33 da 7b e4 76 fa ac bf 6a 6a ae 76 d9 47 fd b8 72 7f 38 37 eb 2f 66 ff 57 99 f0 f3 d7 d8 94 30 50 dc 8f e7 10 bd 10 00 41 f6 b9 e3 bc e6 b3 16 44 a0 51 7d 02 aa 83 6a 68 59 8f 80 0c bf b3 4a 7b f4 20 3f b2 43 17 da a3 46 1d 29 cd 19 92 0b 63 33 5f 9e 64 d2 d2 96 bf 3b 8c f5 fd 63 81 9a 5e c0 27 0a 17 3f bb 18 28 50 7d 82 8a ac d7 f1 f7 b8 40 cd 07 1c 36 ae e8 f1 3e e8 c8 1f f9 8f 86 1c 14 51 89 aa ad e4 02 97 5a 79 a5 54 06 11 73 e9 dc 86 59 3a a8 9c 38 05 8b 06 21 46 11 9a cc a8 08 08 1a a2 f4 d6 5c 1c 0e 87 1b 43 14 27 1c 4d ca 89 32 8d 94 cb 53 f9 28 39 23 f0 94 Data Ascii: {H6$@`DQ`J66GXrZ:#nL 73{vjjvGr87/fW0PADQ}jhYJ{ ?CF)c3_d;c^'?(P}@6>QZyTsY:8!F\C'M2S(9#
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 67 f9 7e 81 c0 2f d0 b1 72 07 8e 5f e3 96 54 9a a4 8b e2 3b c6 f8 f5 c8 5f ea 82 07 2c 13 ff bf 2c 44 c0 46 d4 70 ca 10 49 c1 07 b1 8d 2e 8e 1b eb 30 87 10 50 d9 20 07 f8 01 a5 61 86 f8 79 c2 f8 f9 bc fd d1 f9 9f a5 e5 ff fe eb e2 0f fe 6a 15 8a 9d 70 2f 6e 5c 69 8e 17 da 48 ea f6 5f fe 96 1c 08 10 2c 42 41 07 11 24 1c e8 70 5c 87 de 59 51 4d 31 d9 c1 ce 34 57 d9 97 69 02 0b da 41 69 0e 0a 2e 5e 9e 66 61 40 a0 d0 88 e6 8f 65 2e 03 45 e4 a2 5a 97 35 a6 82 02 23 f5 ac 66 1e e5 7d d2 3b 14 b9 b3 e2 0c 2a 5b 90 81 1f d3 f4 f8 11 08 28 32 65 89 2e 6a 91 10 3c 47 1b 33 12 a9 92 c1 4a d3 73 96 5b 6d d1 1f 85 31 71 38 80 31 48 5a bb 03 29 3a d5 a6 02 a2 00 b4 a0 24 10 f4 d1 45 60 8e 38 ba e4 df 91 17 7c 51 9f d6 d9 51 9c 79 a9 48 e6 1c b9 24 80 58 19 85 97 8f e2 Data Ascii: g~/r_T;_,,DFpI.0P ayjp/n\iH_,BA$p\YQM14WiAi.^fa@e.EZ5#f};*[(2e.j<G3Js[m1q81HZ):$E`8\|QQyH$X
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: d2 c3 17 ff ce 1d 56 02 a9 ec 98 91 3c f6 cb b9 dc f1 29 5f 91 4a 43 2f 88 89 56 28 26 5c 2e 5c e5 c6 cf a5 86 7c 27 2d ed 8d 95 7b 67 f7 50 63 25 63 7d 33 c0 85 2f 2b e8 e8 05 3d c7 11 23 1c 2a ab 19 8b bc 0c 20 b8 4c 01 50 47 4b c2 16 79 90 a1 38 c5 77 18 76 78 d4 9e 7a 94 40 07 0c e4 aa 1f 4d 75 7c ad d3 d7 82 b0 60 85 0d 01 e0 db 5f 0c a5 24 36 46 25 a9 b2 9f 4e 58 60 99 0f f8 82 11 05 0b 0b c4 56 20 ea 25 37 d4 8f 1e cb d4 07 8d 38 0c cd ec 45 05 e3 d5 54 7f fc 96 1d a0 10 75 ed 08 a7 46 11 d2 71 9c 1e 28 13 49 a8 e4 31 80 32 c3 76 e8 32 cd 3f 4b 2e a7 a4 90 8b 05 2c 72 d3 8d df 40 39 ca 39 6a d4 40 8c c0 e0 9e e8 14 5c f1 f7 9d 3f 76 f4 c1 d8 1a 69 ab 69 50 da e5 c7 fb 9b f2 7c d1 af b1 07 50 a5 70 0a 2e df 66 55 a7 55 5d 12 e9 ea 78 5e b2 4c 8f 2e Data Ascii: V<)_JC/V(&\.\\|'-{gPc%c}3/+=#* LPGKy8wvxz@Mu\|`_$6F%NX`V %78ETuFq(I12v2?K.,r@99j@\?viiP\|Pp.fUU]x^L.
2024-10-25 08:16:24 UTC	1379	IN	Data Raw: 87 66 92 e8 d9 d6 83 d0 b0 90 3d 10 00 50 59 e5 ff 39 ea 4d a3 76 91 98 49 53 c1 34 48 02 c5 8c 14 b5 5c cb 3e 5e 40 b3 60 4b be 63 97 e3 86 e0 00 83 7d 56 9f 2c 5a 04 87 41 dc e5 e8 99 6a 56 8e 5e 28 a7 82 0b 04 a0 f0 ac 80 cd ea 34 dc 92 a2 c8 4f 31 e4 68 20 54 30 c4 ac 80 72 5e 3e 80 a3 94 34 52 59 a2 ce 90 e4 34 47 01 23 47 33 c5 b9 1c 35 b5 63 9b 19 7c 89 4b 01 67 71 df dd 9f 5e 57 73 df 48 7d 88 d9 18 7b 80 79 7d bb a1 c7 8a c6 99 9b 0d 53 50 e8 92 6a d6 47 19 7b 9a 4a 3b aa cc 28 cd 04 cb 5e ee 52 a3 89 01 01 30 39 37 70 09 b3 6d 92 48 60 53 3c 25 42 de c7 1a 50 ca 6f aa 04 e2 8e 1f 7f ee 99 61 11 f8 28 ef 18 0b 9a 21 04 07 42 91 61 f8 29 ef 01 ff 9d f7 3d ad 29 32 6f be 4a 8d 6d 87 a3 61 ec 4f 2b d3 29 90 26 37 58 34 7e e3 67 c1 01 4d 05 e0 46 1a Data Ascii: f=PY9MvIS4H\>^@`Kc}V,ZAjV^(4O1h T0r^>4RY4G#G35c\|Kgq^WsH}{y}SPjG{J;(^R097pmH`S<%BPoa(!Ba)=)2oJmaO+)&7X4~gMF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:24 UTC	568	OUT	GET /media/logo/default/logo.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb
2024-10-25 08:16:24 UTC	808	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1085 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "xt1H+rCo6e5jPqidmIqftjBtMb3dMyWOjfom/9YNTio" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=1824 idim=266x95 ifmt=png ofsz=1085 odim=266x95 ofmt=png Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277d446bbb9ff8680c592eb25cc-9ce11dda4170814d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:24 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-ktki8620058-DFW X-Cache: HIT, HIT X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:24 UTC	1085	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0a 00 00 00 5f 08 03 00 00 00 27 21 79 0b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 36 50 4c 54 45 ff ff ff e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c e5 1e 1c c0 bc b9 a0 00 00 00 12 74 52 4e 53 00 30 70 c0 ff 50 90 e0 10 60 b0 f0 80 d0 a0 20 40 94 a6 4e 90 f2 00 00 03 97 49 44 41 54 78 9c ed 9c eb 9a a3 20 0c 86 3d 8b f5 38 f7 7f b3 db ed 54 0b 18 92 c0 f6 11 d6 f0 fd 9c 9a 03 ef a3 11 22 4c 51 c4 50 59 d5 4d 94 c0 89 a9 ed fa e6 a9 d8 69 c4 96 1a 1e 63 f3 ab d8 a9 44 55 39 cd cd 47 b1 b3 89 a7 76 e9 1b 43 b1 13 8a a3 75 78 34 27 c5 4e 2a 82 ca 6e 3e 73 90 87 42 b5 cb 08 72 10 86 62 ad 80 c7 Data Ascii: PNGIHDR_'!ysRGB6PLTEtRNS0pP` @NIDATx =8T"LQPYMicDU9GvCux4'N*n>sBrb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	665	OUT	GET /media/wysiwyg/home/emballage-cadeau-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69432 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "4ijI68i0P1n3mYl3jJ60FojbTF+J3iZWk4V4XjHRI8g" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=106299 idim=400x400 ifmt=png ofsz=69432 odim=400x400 ofmt=webp Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e847093b4bcb7ad99b81b95b-81a6e544df1cad94-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-kdal2120076-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	16384	IN	Data Raw: 52 49 46 46 30 0f 01 00 57 45 42 50 56 50 38 4c 24 0f 01 00 2f 8f c1 63 10 4d d0 b2 c0 30 6e 1b 3d 80 04 41 0a e4 fd 0f 4c 9a 5e da 59 3e 23 fa 3f 01 f8 3f bd 94 9f 2b bf 57 be 51 3f 54 be 82 5a 3f 51 be 84 5a df 2b 5f c3 7b e5 17 ea 7b 13 d7 b3 4e 24 c0 bc 41 ad 77 a5 14 d2 07 ca 60 48 2e 18 b0 6d 18 40 80 8f 24 99 a1 6c 92 5c b4 7d d8 b5 d5 9b 72 48 26 4d f2 24 5f c2 76 00 7c c6 21 a9 b1 71 d9 8b 02 1e ef 6f f1 98 d8 89 49 7a 7b 0c 50 86 6d 27 87 f9 8a e5 a0 e5 c0 a6 b9 42 52 00 86 dc dc 65 9b 00 40 cc 17 e7 84 89 2d db 99 0c 16 22 59 cf e3 0b fb 0d 64 26 56 a4 8d 6b 31 be 3c 95 f2 86 b7 e8 79 4a 29 04 10 09 6f b5 77 94 d0 26 40 85 01 42 69 1b 36 4e 69 ed 8d 30 b6 69 0b 24 b9 12 61 0b 82 04 04 42 be 61 c3 47 2d 92 89 9d 20 00 bc 6f ac 79 27 21 dd ed b5 Data Ascii: RIFF0WEBPVP8L$/cM0n=AL^Y>#??+WQ?TZ?QZ+_{{N$Aw`H.m@$l\}rH&M$_v\|!qoIz{Pm'BRe@-"Yd&Vk1<yJ)ow&@Bi6Ni0i$aBaG- oy'!
2024-10-25 08:16:25 UTC	16384	IN	Data Raw: 89 21 43 45 53 26 31 a6 5b 71 9c 63 a4 2d 6d dc ca 23 9d 5b 6f 09 0d da 54 63 28 42 a2 8d 81 b1 ac 5c f5 83 38 2e 3c de f1 62 b3 e5 e4 ff dd f8 03 f1 bc 24 60 0a a4 61 11 01 ac ce 04 82 5d e7 e0 69 c6 4f 43 fa 74 57 9e 18 cc 07 89 91 de b1 1f 9e 83 a1 8d 4b ab bc 55 1e 62 82 88 ce f9 32 2f 15 fe 91 fc 4f b4 23 e3 f6 a3 29 ae 67 a4 60 28 88 a1 8e 05 1b b5 32 ba 6a 56 a4 f3 25 3b bf aa 05 a0 e9 17 c5 e2 4b 77 ff 0e d4 26 3a 25 61 36 e1 15 7e 5b 22 03 2e e4 6b 00 f1 c2 05 23 53 92 58 32 fc 8d 8f cf 07 f8 87 ec 2b 9e a7 82 55 93 ee 8f 7a 77 e4 7e 70 6f 03 4d 36 9b ba fe 8e 33 7b 45 aa ad 2e 2e 1a 39 75 19 b0 b3 35 6d e4 4e 7a 74 4d 8f fa 72 06 be ed b3 bc de 83 77 3d 02 9f e1 b8 51 b7 2c 96 02 eb 64 a9 6a 58 b8 14 a9 64 1c fd 8e f2 2c ba f8 93 6e e9 3f 73 a1 Data Ascii: !CES&1[qc-m#[oTc(B\8.<b$`a]iOCtWKUb2/O#)g`(2jV%;Kw&:%a6~[".k#SX2+Uzw~poM63{E..9u5mNztMrw=Q,djXd,n?s
2024-10-25 08:16:25 UTC	16384	IN	Data Raw: 39 ed ea 41 25 f7 bd 4b 2f 97 a7 59 fa 6a b8 93 36 09 ba e5 0e 86 49 b3 71 5f 11 21 36 c5 9e 3c 9f ed 87 94 60 15 70 75 05 ea c0 2a 9c 18 83 88 48 d8 5b 4b 91 4d 87 ac 89 9e a9 55 eb c4 34 02 8b 51 41 6f ad 00 c7 a0 06 68 1e 6e 37 65 8b e8 db c1 18 73 77 cc 67 64 8e ae 67 13 60 47 8c ad e2 5d 47 8e 7a 64 ff 42 08 6d c9 1a 7c 50 77 0c b1 4e 12 8b 95 a5 d4 03 09 78 3f 77 0c f9 4e 1a ff 70 53 a5 07 8a dd d7 8e c7 88 3d 09 98 92 1e 69 b3 7e 68 c9 4d ba 29 b7 87 4c ec 81 a9 c8 5e 32 80 9c 0d 53 c3 39 23 67 a2 53 ae ca 63 24 e7 9a 42 09 b2 d7 c2 a0 6c c8 c9 65 4b 12 e1 09 80 d4 44 f0 41 24 5c cb cb 32 63 a2 30 43 22 1e a4 c0 5f 0c 46 b9 37 61 f4 f7 10 77 43 6f 65 54 f5 fc 3a d8 a2 f6 99 e4 eb 67 72 1f 3b 5a cc f7 64 a1 6e 80 c7 e8 44 34 43 a3 26 4e 14 71 d4 9d Data Ascii: 9A%K/Yj6Iq_!6<`pu*H[KMU4QAohn7eswgdg`G]GzdBm\|PwNx?wNpS=i~hM)L^2S9#gSc$BleKDA$\2c0C"_F7awCoeT:gr;ZdnD4C&Nq
2024-10-25 08:16:25 UTC	16384	IN	Data Raw: 8e fd 4c 5c 0d 63 86 be fa cd 32 fd fe 83 6c 03 a4 66 11 cd 14 74 9e 28 c7 2f 60 5b 9a 84 9b 31 63 18 20 40 ad 5d e2 22 14 63 07 64 68 24 61 d5 95 32 2b fa 2a 61 0e 78 f8 d2 65 d2 f9 2e 2a 82 be 56 e5 7a 5f ca 2f 32 76 01 ba f7 b9 1c 80 de 10 78 6f 5d 02 59 95 94 fd 1b 91 8e 77 42 f5 d1 29 ba b4 12 fe b2 f3 f1 ac 97 8a 70 2e d9 2d d4 46 0e cc 0a 0f 31 96 ed c6 62 a1 55 b6 53 c6 4e e1 3b e3 30 2e ad 9a e9 48 2c 0f bd 30 2e 26 46 9c b7 91 13 70 66 0b 4c d5 87 ea c9 c7 0b bc 54 e8 ec 25 8b 04 6d cb 70 cb df 49 e8 59 1a cd 04 81 f1 75 c6 76 f9 dc ab 74 9c f0 ac e6 3c ae de 8e 59 5e 87 61 0d eb 80 4d e2 71 8c f7 d7 ac 17 9c 17 bb 36 e1 68 38 16 4b bb 3e 93 51 38 93 99 5e ac b0 da 4a 36 10 5b 7a 24 32 05 91 94 a7 14 f6 5c f8 bc e6 bc ba 2d e4 7e aa 04 f0 50 4d Data Ascii: L\c2lft(/`[1c @]"cdh$a2+axe.Vz_/2vxo]YwB)p.-F1bUSN;0.H,0.&FpfLT%mpIYuvt<Y^aMq6h8K>Q8^J6[z$2\-~PM
2024-10-25 08:16:25 UTC	3896	IN	Data Raw: 80 48 9a 18 a1 1a 60 ef 8c 35 35 3f 10 63 73 98 c5 43 8e ee 94 88 bb 49 53 ae de 60 60 dd 11 06 4c 74 1a c0 06 28 44 5c 98 52 6d 07 20 0e 82 40 c6 8e b6 09 47 6a 4a 05 44 a7 56 27 db 01 46 b4 b7 4a 61 98 a7 e6 30 39 3f 52 b5 b4 c0 8a 24 31 b9 a0 03 e9 72 04 fa 58 33 b0 9b 9b da 24 11 60 80 7d 19 22 b8 72 65 2a 79 c8 58 b2 8d 9a 84 bd 65 98 17 d3 cf 42 0d ab 67 d1 a8 a2 73 bc ab 8d 94 e1 72 25 c9 5b 16 61 6d 28 44 04 d4 4c c6 87 cf 78 f2 14 9b 09 74 40 1d b1 1d 00 86 9f 8b 30 20 ed 01 36 a0 a3 98 09 bb cc a5 4f c1 78 27 dd 1f 49 db 00 76 e7 6f 75 57 31 1d 09 7d d0 47 de cd de fa df 08 d2 20 39 03 a1 03 5b f2 0e 9d b3 19 e8 14 fc 09 22 c2 02 44 13 aa 5e 86 db 44 06 7b 8b d8 c5 66 52 4f 86 75 cd 91 1a a3 f5 18 c7 60 6e 0c 80 7a ba 27 e6 41 a4 89 b8 10 1f bd Data Ascii: H`55?csCIS``Lt(D\Rm @GjJDV'FJa09?R$1rX3$`}"re*yXeBgsr%[am(DLxt@0 6Ox'IvouW1}G 9["D^D{fROu`nz'A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	670	OUT	GET /media/wysiwyg/home/enciassement-securite-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67422 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "7Cgoq5tlRqfdQWCRnFm1CCtXg0QeiIkM+0FRijMtg4c" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=112163 idim=400x400 ifmt=png ofsz=67422 odim=400x400 ofmt=webp Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e9bde49ef2128ee107b507f5-dadd415db168ef67-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960062-PAR, cache-dfw-kdal2120107-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 52 49 46 46 56 07 01 00 57 45 42 50 56 50 38 4c 4a 07 01 00 2f 8f c1 63 10 4d 50 92 24 c7 91 24 89 01 48 60 62 3c e2 ff 0f e6 43 96 1c 23 fa 3f 01 fc 9f ee fe db f9 ef e7 bf 22 1e f9 2f 21 e2 85 ff 22 22 ee fc a8 f2 05 77 be 73 4e bf 8b 78 e5 ee e0 42 02 69 51 2b 22 ce fc d0 6c 23 a4 4f 9c be 32 00 1d e3 9e 2b 7d 11 27 be 97 44 09 a6 3e b9 7f 3e 49 66 f6 86 43 89 6d 66 e2 3f 9a 1e 55 1d 5c bb 4d b6 b3 0d db 9f 14 da 59 4d 92 cc ec c4 16 d4 aa 80 41 df 00 2a eb 75 23 b9 b9 8a 2a 60 40 71 2e 99 a9 d9 99 bb d3 d9 16 40 3f 73 1a 66 d6 fb d8 f9 0c 68 c1 28 2e dd 4c 5f 58 6b 1a 5a b9 3b 40 f9 87 80 aa f2 69 2c 84 dc cc ca da bc 92 b3 d6 a0 9c b5 73 e8 66 6a e3 0c db 2c c7 30 07 97 c0 16 92 79 99 b5 b3 88 5d 21 80 72 97 0b 19 20 c9 eb 9b ec 84 08 d0 34 77 66 13 Data Ascii: RIFFVWEBPVP8LJ/cMP$$H`b<C#?"/!""wsNxBiQ+"l#O2+}'D>>IfCmf?U\MYMAu#`@q.@?sfh(.L_XkZ;@i,sfj,0y]!r 4wf
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 2e 05 b9 ab 09 aa 75 3e 9e f0 b2 80 6a e0 0b 33 13 f5 a2 9c 22 75 66 26 1f 9b 24 2a a7 02 52 72 7c 39 aa 00 41 c0 f9 cd a8 02 89 3f 33 49 54 14 e7 87 13 d5 e4 97 ce a8 99 c9 2f cd 8c 26 f3 f3 99 bf 74 3d d6 b6 ad da 66 2b f7 b7 76 03 68 81 bb f5 45 9a 4b 13 76 c4 20 d4 c8 2d fc 32 e4 0b e6 fb 95 7c ef 7c e7 fb a1 75 84 3b c4 dd 21 65 8c 3f 44 56 88 bb bd 78 8d 51 d9 d6 06 7c 38 e1 0a b1 26 b8 3b ac 31 70 77 87 0b fb 83 0f 27 74 af 70 87 3f b9 bb f3 e2 7c b8 3b d9 5a 21 ee e1 df 00 c2 6a c4 0e 8b cc a5 70 87 d0 5e dc 25 5c 21 ee ee 0e a1 c3 df 00 06 51 85 38 84 f6 07 b8 4b 35 00 87 b0 c8 b6 85 2b c4 e5 19 15 16 d9 0e 91 d5 00 dc a5 42 dc 9d 15 e2 ee 0e 13 0b 7f 24 5c 61 85 d5 80 15 e2 1e ae 0e 4c dc a9 10 0b dd 1d 2a c4 21 74 5f 0d c0 dd 21 d4 c0 61 db 36 Data Ascii: .u>j3"uf&$Rr\|9A?3IT/&t=f+vhEKv -2\|\|u;!e?DVxQ\|8&;1pw'tp?\|;Z!jp^%\!Q8K5+B$\aL!t_!a6
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 11 04 55 32 84 a4 b4 9d d6 b6 6d db 76 d2 a6 cc 6d 4f 1d db 5d 6e 19 db bb 0c 86 c0 09 dc 2a 1a c0 49 69 56 79 6c 27 ad 9d 8c 21 23 b0 4a 9d f6 3e 29 8d fa 8e 22 a5 27 70 d3 d9 4e da d3 e6 94 69 cf 18 ee 04 32 02 6b 02 b6 ad f6 b4 b8 6c 6d 52 24 49 d2 2f 22 0a 06 4e c1 dc d5 cc cc cc cc dd 1b 98 75 30 2d 61 de 79 e6 8d 99 99 99 99 67 b2 20 21 c8 c3 dd cc cd 4c 55 45 30 69 db a4 48 92 a4 5f 44 14 cc cc cd 3c 3d 22 a3 b2 99 99 99 e9 10 bd eb f5 9c 61 9e d9 d1 01 70 cd ab de 0f 33 33 33 f3 14 64 66 55 64 84 7b b8 b9 99 a9 aa 88 c4 04 70 be ff 7f b9 24 5b ca ef f7 db 3b 22 32 b3 b2 32 4b ef 39 75 ee a9 eb d2 ee 36 f2 1e 79 37 33 18 f1 0f f8 3f c0 48 c7 ce cc 99 39 23 77 77 d7 eb 55 57 8e 54 9d d2 cc c8 88 78 9e df 60 47 e6 a9 c4 c6 9f 41 5b 0c 70 67 af c5 99 Data Ascii: U2mvmO]n*IiVyl'!#J>)"'pNi2klmR$I/"Nu0-ayg !LUE0iH_D<="ap333dfUd{p$[;"22K9u6y73?H9#wwUWTx`GA[pg
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: c3 39 69 69 ff b9 c5 dc 20 b9 ea 43 58 e2 af 7a 38 03 e4 da 7f 67 a9 7f e7 57 0d 8e cb 6f 6a c9 bf d9 c9 a1 71 47 96 fe a3 13 c3 a2 68 7b 35 cb df 89 a2 63 50 fc de ab ec 03 5e 59 0c 0e 88 0f f1 04 ed 0b 5e f4 70 06 c3 e9 5b da 27 bc e5 e5 43 e1 3a 3d 49 22 19 d3 41 0f 1a 88 a0 e1 22 03 36 90 00 30 00 04 f4 91 0c 69 10 81 71 46 05 98 59 4e 86 90 a2 72 20 5c 71 65 4f 24 e7 a3 c9 6e c0 22 26 4a 08 13 1a 05 09 f5 d8 90 40 23 80 a1 2f c6 be e0 9e 6e 61 12 26 58 e0 40 cb be 98 bb 6e ed a5 db 66 9c 85 3a c0 a1 49 22 74 b3 41 86 cc c5 ef 60 10 5c f6 f7 f4 e3 f1 cb 23 63 84 88 07 82 c4 30 49 04 ae a0 a4 95 2c f0 d1 94 aa e0 a8 91 46 80 a0 e9 cc dc 85 51 90 69 66 83 38 b1 ef cb 80 01 94 03 4f 25 9e dc b8 57 78 51 c7 d9 d1 d1 21 01 a3 0c 7a 7f 2c fe f7 45 03 e0 f4 Data Ascii: 9ii CXz8gWojqGh{5cP^Y^p['C:=I"A"60iqFYNr \qeO$n"&J@#/na&X@nf:I"tA`\#c0I,FQif8O%WxQ!z,E
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: f0 65 b2 72 1e 09 97 a4 e1 ae 0e 0d e3 9e ce 3b f5 05 c9 7a 2c e1 6b bc 80 e6 f1 9e 65 d4 89 0f fa 19 02 0b fd 2e c4 f8 e9 a2 75 41 5d 10 e7 a3 51 25 9c fe 83 13 a4 41 a0 f7 6b 53 0c fd 86 05 f5 73 8b af e6 be b7 5e af 1a 54 9b 15 d9 3d c8 c3 3c c9 87 21 e8 0b 7f 94 a2 4f ff 7d 8c 7d 8b 10 3e 8e 0d 1b 94 30 ec 38 2c ff 6e b8 a7 47 ba da e8 32 01 4f 5e 63 99 a0 79 f6 b8 27 12 62 ab d1 88 ad 94 df 51 f4 1a a2 8c d9 59 f6 5a ac 3c 4b 64 cc 92 40 ae 87 12 e4 91 f0 30 1a f8 d2 73 d0 2a ca 8a 92 b2 bf b7 75 11 0b 3e 62 67 d4 bf a1 5a e9 e9 14 17 b0 20 2e 3f 96 60 86 74 b3 65 70 d4 3e 46 4f 27 db f0 77 00 54 18 4d c3 da 27 37 9e fc e3 3d c1 c9 78 72 1e 5b 0b a0 83 08 00 81 de 2f ca 85 3f 77 31 15 9f 7e ee dc 75 48 fd a8 9a a0 a7 78 0e 76 1d cf 11 c5 28 18 43 aa Data Ascii: er;z,ke.uA]Q%AkSs^T=<!O}}>08,nG2O^cy'bQYZ<Kd@0s*u>bgZ .?`tep>FO'wTM'7=xr[/?w1~uHxv(C
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 40 27 c0 df fb 4d e4 14 50 89 02 fd ea 83 8f 52 cc 2c 96 e2 6e b1 3b 4f 32 1e b7 eb 28 b9 eb d4 6d d4 02 60 10 0e 1c 7d 39 7c af 57 08 67 8b 19 aa 25 62 dc f3 bc 57 d2 03 6f 6a ea 74 d8 aa 3f 69 ab 13 9e 7b 9c 3e 78 b8 54 60 e9 c3 84 e7 93 8f 54 ee f3 6c bd 15 9c 76 fc 0e b3 b8 f5 5f b1 92 8e ce 84 58 cc 92 ee 4b 56 19 b0 ab 65 f4 53 4f 0c 2b b3 96 28 7d d7 8a 8f 40 62 61 10 43 f1 46 00 50 c6 98 b0 a4 76 c4 42 08 43 49 48 b0 d5 6b 5e 24 07 fa 0a 4c 5d fa d2 7d db ad 23 8f 3b 4f ea 9c dc 12 a6 f3 8c cd ae 31 c3 4b 56 62 39 a5 40 81 7e 75 eb 4c 71 67 a1 fc bd 0b cd 71 98 f4 28 62 79 0d 68 a9 21 82 c2 c5 09 9d 5e 7e 89 af fc 93 83 01 f8 cc e7 40 4f e4 1c 8b 40 00 52 f0 46 52 34 8c 3a 36 60 05 16 c6 f7 0c ee 4f ee e6 60 85 07 39 26 cf 0f cb 19 ec c2 82 ab 97 Data Ascii: @'MPR,n;O2(m`}9\|Wg%bWojt?i{>xT`Tlv_XKVeSO+(}@baCFPvBCIHk^$L]}#;O1KVb9@~uLqgq(byh!^~@O@RFR4:6`O`9&
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 1d 29 02 bc 2f dc 3b d9 d6 eb b9 e3 11 7b 87 c5 5c bd 78 b9 7a 32 fc 5a b3 6c f0 a1 17 e5 ac da 3f 9f 43 7a 24 ab 01 5a ce 8b fa be 8b a1 38 74 62 4e 7a 42 21 12 22 7d a5 a2 03 65 0f 5b a0 11 d3 4b 1e ca 5e db 9c d8 02 f6 2e 35 12 3f 44 d8 26 ec f8 df d7 59 59 4d ad d1 82 ed fa 1a 80 8d cc 22 19 0b 0e 1d 31 2a a5 86 bd 0d 9e 7c 65 89 18 68 dc da 85 e8 f7 46 89 85 b5 7e 5a 54 eb 91 ee 3d 0f 92 cc 7a 14 00 cb 01 90 60 ad 9d f2 7c 33 e1 e6 92 15 01 58 4e b4 bc 8e c8 c1 84 97 9c 35 cc f3 a3 99 3c 79 0e 95 52 87 63 48 04 f7 91 5c 9b 31 c0 19 8c e4 36 08 bb 80 84 c4 6f 06 ab a7 86 e9 38 28 93 93 bc ea 0b 3d 51 c3 04 4d a0 de 14 c7 17 c2 1d 16 1f cc 65 c9 e4 95 94 18 c4 0c e5 38 22 a9 02 2c e0 67 c0 a8 13 b2 a0 f1 ec 71 b2 8d 6d 57 eb e9 99 c6 8e 94 aa a1 d8 aa Data Ascii: )/;{\xz2Zl?Cz$Z8tbNzB!"}e[K^.5?D&YYM"1*\|ehF~ZT=z`\|3XN5<yRcH\16o8(=QMe8",gqmW
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ab ae a3 92 c7 d8 68 44 a8 15 47 11 d5 9a be d6 00 fc 15 b0 dd 0c b7 0f 23 80 7a 54 a4 c8 4d 7d 44 dc c0 ef 21 8a 92 b8 07 86 75 24 d3 6f 6c 75 bb 2c 9e 4a a9 dd 33 c2 1c 41 02 84 48 6f cd 6d 1e da bf 79 81 49 98 a0 03 40 fd 22 ca 88 52 df 49 47 4e ae 2b ab 1e 58 b3 80 2e 27 68 3a bf c7 59 e0 d8 95 c0 61 d6 e6 d1 d2 d2 92 ad ad f5 e4 39 16 3b fd f6 66 ee 60 cf 75 e7 03 68 c7 63 7a a0 68 3c 9a 83 a5 ec 2d ae 01 de 63 22 be b1 13 0c 62 a5 81 11 f6 93 46 c8 24 00 6e bf 76 fb 8f 68 00 02 6f b6 4f f2 56 23 bb fa 14 e1 1a 80 a4 e2 e7 54 d6 ab 9a be fa 9a 41 bf ef 51 53 6b 76 a8 0d e9 6f 85 d6 d2 37 11 01 b0 3c 68 72 69 4d 46 d4 0b 5c c0 45 46 40 f0 25 14 44 25 09 f6 00 12 c6 00 e0 fe 02 44 44 b0 f4 cb 4d c2 4d 95 ce 63 83 f6 53 11 d4 0d 3c 4a 96 88 55 72 6a 40 Data Ascii: hDG#zTM}D!u$olu,J3AHomyI@"RIGN+X.'h:Ya9;f`uhczh<-c"bF$nvhoOV#TAQSkvo7<hriMF\EF@%D%DDMMcS<JUrj@
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: db 67 db c5 f7 f9 af 6e 83 56 ba 5f fd bd 5b ee 18 21 b2 40 aa eb 3e 80 ef 38 f0 50 dd 3d fa b5 02 61 28 db 7b f2 f5 14 43 95 78 52 a0 01 42 bc 47 87 11 3c 78 d3 d3 eb b2 88 3c ac 09 26 44 59 ca 7b 96 8e 36 a7 8f 85 f0 53 36 3c cb 5a 41 03 e4 ec b9 c0 a4 4b b2 bf d5 6a a8 17 e9 58 11 df 5b 05 a9 c8 b0 87 ff cf ef b5 24 df 0d bb 88 dc 7f b6 9f c1 f3 c2 0b b2 ab 52 21 95 48 f9 f9 30 fe e8 ab 6d c9 b6 23 59 c2 5f dc 0e e5 9b 06 a8 95 5d 2f 82 a4 fe 85 e9 20 7f 7d 1a fc 7c ce 25 a0 09 3c 10 12 3c d4 bb e3 2c 64 81 41 2d cf 62 f7 5d f0 dd 0f 27 be 79 6f 41 c9 d8 6c 50 27 5b 9d 49 fe 4f e7 d2 1e 75 13 3d eb d3 f6 57 87 11 35 ad a1 92 24 01 ad 90 e0 24 88 99 48 4f 23 df 00 a4 2e 0c 7b 43 48 0f b4 e7 0c 8d 1f 0f 6f 6c 59 89 4b e9 ab d7 b3 c9 34 f5 be c2 a6 ed 3a Data Ascii: gnV_[!@>8P=a({CxRBG<x<&DY{6S6<ZAKjX[$R!H0m#Y_]/ }\|%<<,dA-b]'yoAlP'[IOu=W5$$HO#.{CHolYK4:
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 50 59 a5 a3 7c 88 7e c1 6c 6f 88 b2 2e 8f b4 7f e5 ba ab 8f d1 cb ad 59 27 21 90 84 e7 47 eb 1e eb 68 f0 89 08 f0 2e d5 8b f6 45 8a ab fd 54 04 14 d8 1e 69 13 59 56 39 e3 fc ef c9 84 74 e0 ee c1 48 89 f6 aa 43 15 77 29 f9 ce 40 2d 57 57 a0 03 1f bc 89 5a b5 7d 10 83 2b 62 b9 da 8b ee 26 1a 0d c9 99 a4 09 e3 18 57 b1 2d c1 00 c3 b7 3d 9d 2d 48 82 c2 ea f7 e4 48 7d 2d 95 ea 45 90 1e 8f b2 61 3f 62 b3 e2 74 1f 55 c0 f2 5f df 0a 28 db e9 d0 c7 4b 67 fc 03 b2 ad 26 2e 38 5e e1 ab e6 81 a6 9b 13 e4 8a a0 0d e6 cf 90 8a 00 db d2 7f f0 e4 00 c3 fd 65 2f fc 7e e5 7e e0 7b 78 4d 77 74 e3 2f dc 78 f6 69 7e e7 7f bb be 4f b6 62 de c2 3c 13 a6 14 ed 06 49 21 22 f2 e1 00 40 96 24 50 e4 83 45 36 22 05 15 b3 34 34 59 20 50 5e 37 2e 4c a8 6b 3d 67 70 4b 61 2e c0 23 ee 3c Data Ascii: PY\|~lo.Y'!Gh.ETiYV9tHCw)@-WWZ}+b&W-=-HH}-Ea?btU_(Kg&.8^e/~~{xMwt/xi~Ob<I!"@$PE6"44Y P^7.Lk=gpKa.#<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49775	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	588	OUT	GET /media/wysiwyg/emballage-noel-24-push-sombre.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb
2024-10-25 08:16:25 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 97203 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "fXaS25gn7fwvnTfj7H0WcZpKBGecTiKGGKXKFPktaXs" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=486782 idim=988x482 ifmt=jpeg ofsz=97203 odim=988x482 ofmt=jpeg Fastly-Io-Served-By: img03-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e8316fc5488ebc1dee8d45cb-ff77040a952e12e8-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72187 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960065-PAR, cache-dfw-kdfw8210075-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 5a 89 b5 2f 0f e9 fe 1e d5 e5 d6 a2 92 4b 56 b7 f2 e4 48 c6 64 61 21 db 85 e4 73 59 7b 6b 7b 48 6c ed 92 d9 5d 63 11 8d 8a e7 2c a8 7e c8 62 3a 90 3a d7 3e 88 6b ab d4 25 86 43 84 1d b4 57 ba 43 5b 7d 91 4b ea 03 8e 05 04 4d e3 95 c7 c6 9d db 9e 86 96 0f 20 57 48 2c e5 23 cb 18 e6 8d 63 50 78 1c d2 c9 18 cd 25 58 1e 94 24 97 f6 47 ca 9e 42 0e 08 34 c1 e7 8f 7a 5a 64 0a 4a 41 5b 5b 9c b0 a9 af a7 68 da 62 ad 9d 95 f1 96 56 dd 3c b1 1f fd 9f 9a 73 c7 b2 93 d0 55 24 53 b8 00 81 cd 4c 83 40 d4 75 3d 46 1d 4a d4 a0 58 20 92 2b 90 4e 0b 21 f5 2e 3d c8 22 b1 d6 6c 38 12 4c 72 9f a2 b9 a4 47 34 cb a6 dd df 3a 48 04 90 7f 2a 95 2c 25 49 19 19 ef 51 fa 1a d3 4d f9 86 aa a7 35 25 f2 25 0d d3 1d 6a 1a a8 53 2c 59 f7 c7 bf 3d 08 a9 52 1c b5 45 9c 31 b9 56 c7 05 46 7e Data Ascii: Z/KVHda!sY{k{Hl]c,~b::>k%CWC[}KM WH,#cPx%X$GB4zZdJA[[hbV<sU$SL@u=FJX +N!.="l8LrG4:H*,%IQM5%%jS,Y=RE1VF~
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 36 07 63 4e 8e 9d 29 84 fb 4c 71 cd 2f 79 53 83 42 13 a7 03 24 9a 6c ca 9d b2 69 b9 1c 30 1e c0 e6 92 0e 47 1c 1f 6a 09 49 4a 04 62 85 32 8c c4 60 af 34 bc f3 c0 3f 1a 10 97 42 86 28 63 14 d0 90 c3 81 f3 a0 07 34 be b4 8e 87 1e fd 29 21 2a 88 81 47 49 72 42 92 3a f6 a1 09 38 e3 14 b2 a0 01 81 47 8e 05 28 f2 28 42 60 81 cd 18 e9 46 40 27 e3 40 8a 10 87 5e b4 44 50 e6 86 28 42 6c 9e 79 a0 79 14 6c 32 3a f4 a4 0c e4 d0 84 90 01 1d 7a 53 ea 08 14 8d a4 52 81 cf 4a 10 95 80 09 3d cd 18 a2 23 3d 28 f9 ef 42 10 c5 1d 0e 28 71 42 13 47 6e ee bc fb 51 91 43 62 ee dd df 14 b2 29 21 20 51 9f ba 8e 92 cb b8 10 68 42 22 09 3c f4 14 d4 8a 7d 20 67 ee a9 01 45 2e 92 14 5f 2d 89 c9 00 54 c8 94 02 05 20 a8 22 a4 44 bd 05 41 f6 05 49 ba a9 7a f7 85 23 d7 3c 29 72 8b 79 0c Data Ascii: 6cN)Lq/ySB$li0GjIJb2`4?B(c4)!*GIrB:8G((B`F@'@^DP(Blyyl2:zSRJ=#=(B(qBGnQCb)! QhB"<} gE._-T "DAIz#<)ry
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 88 1c e3 8c f6 a5 ed fb 3f 0a 2c 96 04 72 00 ef ef 4b c7 03 e5 42 48 b1 d6 87 34 63 14 78 27 bd 08 52 c8 02 9b 63 4b 66 5c 1e 45 34 72 1b 91 d7 a5 49 08 c6 78 e7 e1 8a 3c f5 a2 ce 09 f6 a4 06 c5 08 46 18 83 92 69 c2 70 b9 c5 36 0f 3d 88 34 e9 da 57 1d a9 84 26 f6 ae 43 63 9a 51 14 d2 c6 e0 e3 76 47 6a 70 8c 01 93 cd 12 84 3b e2 8f ad 25 7a d2 be 34 d0 88 67 3f 0a 3e a6 92 7a f5 a5 62 84 91 62 9b c1 07 a7 df 4e 93 44 7d a8 42 2a 4b 2e e5 22 97 91 44 68 42 63 ec ae 4f 4a 32 43 0c 76 a7 76 82 39 19 a4 b2 82 06 69 21 24 e0 75 a6 5d 54 b7 4e 40 eb 4f 63 77 19 c6 28 3a 1e 31 49 34 85 c0 cf 34 9d 85 49 39 e0 d1 ed 6e 46 3a 1e d4 61 5c f0 56 84 26 8f 7c fe 54 06 71 9c 62 9d 11 f3 ea a5 79 43 1d 4d 10 84 8d c4 01 83 d3 ad 3a 1c 1c fc 29 83 90 3a d2 72 0b 70 3e 74 Data Ascii: ?,rKBH4cx'RcKf\E4rIx<Fip6=4W&CcQvGjp;%z4g?>zbbND}B*K."DhBcOJ2Cvv9i!$u]TN@Ocw(:1I44I9nF:a\V&\|TqbyCM:):rp>t
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: de ea d7 09 6c 93 75 5c 47 6a 8e cb d7 14 f9 75 3c 67 e7 4c b1 03 27 35 ad 52 a2 3a f3 8a 48 55 27 14 4f 91 c9 eb ef 4e 44 ca c3 24 52 4d 3a ab 8a 70 0c 73 49 e0 02 7d b9 34 ec 87 2a a4 10 05 34 92 49 0a 46 7d aa 47 5e 07 6a ac dc ec e7 1e a3 d8 76 a4 c7 34 88 fe bc e3 38 a0 a6 02 d1 da 4a 8b 22 b1 e4 29 c9 f6 c5 4d d7 3c 59 6f 7f 71 f5 14 b6 45 11 44 b8 93 b9 27 a8 1f 2a a1 de 18 0c 9d a0 11 9a d0 dc 68 1e 1d 8e ca de f8 df 84 ba 91 4a ac 65 86 1b df 8e b9 1e f5 87 10 69 b6 ab 1c e6 92 76 85 73 43 8b 39 03 ea b2 6d 91 9c 8e bd e9 9c 53 8e a1 49 0a d9 03 bd 23 15 b0 19 0a a2 80 ed 4f a6 29 91 4f a0 e2 9a 45 3a a0 e6 9c 27 8a 4a 8e 3e 74 a2 46 07 e1 4d 24 83 cb 66 88 8e 0d 2c 0e 83 bd 1f 1f e3 42 14 47 0f 9c 86 e7 da 9d 54 60 b9 ce 7d f3 46 e0 e4 e3 8e 69 Data Ascii: lu\Gju<gL'5R:HU'OND$RM:psI}44IF}G^jv48J")M<YoqED'hJeivsC9mSI#O)OE:'J>tFM$f,BGT`}Fi
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 4b 98 b4 8b cd 32 62 5d f4 9d 46 6b 30 79 24 26 77 22 9f cf 15 2b 53 d7 6d 74 86 e3 f5 b3 a9 ca c6 a7 85 23 9f 59 ed f2 eb 56 0a 8c a4 d2 5e f0 1a 37 29 65 73 cc 06 dc a8 fa 26 b3 6f ac e8 96 da a9 31 c6 1d 4a dc 02 42 ac 72 a7 db 1c e3 00 f5 1f 3a 5d ae a5 a6 df 09 c5 9d c2 4a 23 20 36 3b 83 dc 0e b8 f8 d6 3a d7 4c b5 b6 86 53 02 bc 6b 3c 86 67 88 31 31 b3 37 3f 65 b2 38 ed 56 1a 54 c9 6d 34 72 79 6a 03 8c 1c 00 32 0f 6a e6 1f 6f 52 ed 9a d1 4c 8a 79 a1 ce 26 fd 61 68 fe 09 d9 09 2e ef 45 80 d1 6b d0 30 55 19 e9 ef 4e e3 8e 94 ae 0f 20 e4 1e 41 a0 45 77 d6 04 d9 ab 4d 3b c4 f6 de 1d 59 66 92 c8 4d e6 b2 23 36 40 65 04 e3 3c f6 f7 15 58 c3 34 b8 74 fb 1b f9 16 da f0 37 93 29 0b 21 5e a0 1f 6f 8d 53 5c 34 d3 76 69 81 7b 72 53 a7 33 03 74 f5 dc df 58 99 e4 Data Ascii: K2b]Fk0y$&w"+Smt#YV^7)es&o1JBr:]J# 6;:LSk<g117?e8VTm4ryj2joRLy&ah.Ek0UN AEwM;YfM#6@e<X4t7)!^oS\4vi{rS3tX
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 80 8b 97 dc c4 82 ac 85 76 8f 7f 8d 1f c4 d0 f8 fe 45 1d 95 4f 85 41 e4 83 b6 8c 21 3c 15 e3 e3 55 d7 9a b5 9e 9d 77 2c 0d 1d c3 b2 47 1b 1c 28 21 b7 8d c0 29 cf 24 0e 4f b5 42 ff 00 2c 34 a7 55 0b 6d 78 7d 82 c7 bb 20 77 a9 8a b4 c8 90 f0 91 a7 50 7d d2 af c4 60 6e 03 ee c5 3d 10 e7 91 80 07 5f 7a ce c1 e2 bd 20 6d 2b 0d d9 dd 8c 13 16 01 c8 dd c1 3c 74 e9 49 b8 f1 bf 87 a3 3b 4b cc cd dd 51 03 e3 e6 41 c5 3c ec d3 30 4b 23 fe 12 b5 81 b6 ee dd ef c5 29 0e ef d9 c5 63 17 c7 5e 1b 2a 02 b5 d6 3b fe af fd f4 fa f8 f7 c2 f8 00 3d df ff 00 27 fd f4 f3 37 e2 09 65 77 05 ad 22 a3 48 49 f4 f6 ee 6b 36 7c 7b e1 6c 90 67 ba 1f f8 1f ef a6 bf cb 9f 0a 96 e2 ea 70 3b e6 13 9f e3 4e 46 c5 28 3c 16 9f 6b 1e 14 7c a9 d4 0c 3a 8a cd c5 e3 7f 0a 9f fd f6 5c ff 00 f0 5a Data Ascii: vEOA!<Uw,G(!)$OB,4Umx} wP}`n=_z m+<tI;KQA<0K#)c^*;='7ew"HIk6\|{lgp;NF(<k\|:\Z
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 4a fb e9 23 22 96 09 ed 8a d4 aa 4f 70 00 1f 0a 52 90 08 34 ce 69 40 d0 50 12 7c 41 e2 bd 5a c7 48 82 28 64 db 6e b3 05 98 01 cb 46 fe 92 33 d8 0a aa 5f 38 73 22 e3 3d 2b 5b a5 dd 69 76 d7 1b ef 6d 96 74 d8 46 c6 01 87 e0 78 aa 5b ad 72 d3 5f 61 7d 6d 6d e4 23 65 1a 2e 3d 2c 9e 92 0e 2b 1b 09 6d 62 d6 d3 81 bb ae af 70 96 82 4c a8 4a 73 9a 2d a7 af 7a 20 b8 6e 41 c9 14 be 6b 5a a5 29 17 dc 66 9f f3 36 95 f4 f7 e7 9a 69 73 4f 00 18 8c f4 c5 09 2b 08 64 1c 11 d8 71 51 b5 df 11 eb 36 d0 da 18 64 66 b3 49 42 dc 42 06 73 1c 87 1b 87 c5 4f 34 43 8c 55 be 97 7b 1d 9d d4 37 05 15 c2 37 42 32 39 ac f5 e9 b4 8c d9 33 11 a0 56 b1 c7 4c d0 14 1b cb 46 84 e4 fd 96 c6 2a a9 f7 82 e7 70 db 9c 63 f9 d4 fb af 11 cd ac cb 7b 24 b6 ab 0c b1 4c 62 68 d4 e4 61 7a 10 7e 23 9a Data Ascii: J#"OpR4i@P\|AZH(dnF3_8s"=+[ivmtFx[r_a}mm#e.=,+mbpLJs-z nAkZ)f6isO+dqQ6dfIBBsO4CU{77B293VLF*pc{$Lbhaz~#
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 0f 2b 89 5b 91 83 ee 4d 65 e5 68 62 8a 48 a3 d3 ed 36 2c ac a8 8e 9b 8e 4b f9 6a 59 8f 27 a6 4f bd 5d f8 da 56 8b c5 f3 32 f5 5b 7b 76 1f 35 00 8f ce a1 6a 50 aa 5f e1 0e 41 96 36 dd fb c0 86 c0 fb 98 f1 58 aa 7d a9 9e be 4b 5b 7d c3 1b 01 e8 ab c4 16 1b 37 c9 a7 44 d1 6e 28 30 4c 72 b9 07 05 b7 0e 06 48 3b 54 03 c7 35 53 35 aa c3 3c 65 55 bc a9 41 31 87 eb 83 e9 c1 23 83 83 df bd 5f 5a 99 6e 05 9c 70 2e e4 8d 09 42 c4 2a e3 00 31 76 3c 2b 29 18 39 ed 50 75 6b 88 64 55 8e 29 03 88 f7 31 91 46 14 b1 1d 13 3d 86 3a d2 6c e6 2d bd c1 9b e8 93 a3 2c c6 9a 5b 75 db ed 62 3f 55 b5 85 87 3f 57 8d 0f cf 60 06 b1 7e 50 04 ec 20 ed 27 69 ed c1 ad ed a6 7c ab 22 49 24 c3 09 27 b9 25 41 ac 35 9a e6 39 54 94 26 39 e4 5c 21 c8 00 b1 23 39 e8 79 ae 45 23 77 78 2d ec 03 Data Ascii: +[MehbH6,KjY'O]V2[{v5jP_A6X}K[}7Dn(0LrH;T5S5<eUA1#_Znp.B*1v<+)9PukdU)1F=:l-,[ub?U?W`~P 'i\|"I$'%A59T&9\!#9yE#wx-
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: de e9 17 0d 79 1e 64 8e 56 fe 91 01 3c 48 bd 7e e6 1d 8f 6a f4 0d ac f6 f7 b6 d0 5d 5a 3f 99 04 c9 bd 1b a1 c7 70 c3 b1 5e 84 57 d0 e9 54 0f 2e 6c f7 9b 67 0e 7c 97 05 ec 2d 01 df 74 e8 b2 5e 27 5f 3e e7 c3 3a 73 11 9b ad 5e 36 6c fe e4 03 76 7e fc d6 a2 56 dc 64 91 98 28 04 97 76 20 28 cf 72 4f 02 b1 ba e6 a1 02 f8 a7 47 ba 89 63 b9 8e c2 ce 75 60 18 85 f3 e5 24 0e 47 50 06 09 22 98 7b 93 a8 c8 bf 5b 09 2a 83 95 42 30 8a 7e 00 7f 3a c1 8c f6 ae 1b 0d 22 4d 47 fc 2d db a9 57 d1 c2 55 a9 04 f7 47 12 af a4 f1 3e 96 b2 04 88 bc b1 e7 0d 38 5f d5 8f ee 83 cb 7c e9 c2 d6 d7 6b b9 66 59 57 3e 92 ad c0 fb aa 95 ec 10 ff 00 52 c1 54 8c 32 1e 9f 75 40 6d 24 06 2d 92 4f 73 de bc ae 33 da 35 71 87 be f2 d6 6c c1 ee f8 f1 2b a5 4b 0f 4e 90 ee 8b f1 3a ad 03 db 30 39 Data Ascii: ydV<H~j]Z?p^WT.lg\|-t^'_>:s^6lv~Vd(v (rOGcu`$GP"{[*B0~:"MG-WUG>8_\|kfYW>RT2u@m$-Os35ql+KN:09

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49773	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	611	OUT	GET /store-sales/retimag/index/ HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	119	IN	HTTP/1.1 200 OK Connection: close Content-Length: 48 Cache-Control: max-age=0, must-revalidate, no-cache, no-store
2024-10-25 08:16:25 UTC	3993	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:25 UTC	508	IN	Data Raw: 58 2d 42 75 69 6c 74 2d 57 69 74 68 3a 20 48 79 76 61 20 54 68 65 6d 65 73 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 44 65 62 75 67 2d 49 6e 66 6f 3a 20 65 79 4a 79 5a 58 52 79 61 57 56 7a 49 6a 6f 77 66 51 3d 3d 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 65 36 65 38 38 62 64 65 31 39 61 32 64 39 36 61 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 65 36 65 38 38 62 64 65 31 39 61 32 64 39 36 61 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 Data Ascii: X-Built-With: Hyva ThemesX-Content-Type-Options: nosniffX-Debug-Info: eyJyZXRyaWVzIjowfQ==X-Frame-Options: SAMEORIGINX-Platform-Server: i-0e6e88bde19a2d96aX-Platform-Server: i-0e6e88bde19a2d96aX-Xss-Protection: 1; mode=blockAccept-Ranges: by
2024-10-25 08:16:25 UTC	48	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 53 68 6f 70 20 64 6f 20 6e 6f 74 20 65 78 69 73 74 73 20 21 22 7d Data Ascii: {"success":false,"error":"Shop do not exists !"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	661	OUT	GET /media/wysiwyg/home/restauration-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 40300 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "ZTWuTI72Lz9GPWuiWyNEj5eSE9vbMKHaK7+XoMNlkuI" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=78901 idim=400x400 ifmt=png ofsz=40300 odim=400x400 ofmt=webp Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e85bcd8377f0ba36148f16aa-868d9c7eacd960d4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120078-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 52 49 46 46 64 9d 00 00 57 45 42 50 56 50 38 4c 58 9d 00 00 2f 8f c1 63 10 4d 48 72 23 c9 91 24 98 7b b4 f4 e8 ff 3f b8 22 2b 6b c4 8a 63 44 ff 27 80 ff e9 f6 b7 f3 f7 f3 57 d4 45 fe 12 aa ae f0 17 51 b5 e7 2f 63 cf df a1 be cb fd 04 55 2b 01 b6 ef dd cd 78 1f da 87 b1 06 36 12 2e fc 3c 1e 4f 57 95 4a 9a 6a 01 e8 1a 78 3c 9e 56 79 c5 55 39 2e e0 59 65 5b be 20 67 d8 88 aa ca d2 84 56 4a 00 b2 e0 6c cb 55 f2 35 21 ac fb cc 28 4b d4 46 93 e4 cc 9c 9c 90 fc 92 76 96 9d 53 82 fb c2 c4 1b 09 08 e8 6e 9d 90 00 1e 07 3b c9 86 6a 21 4d 69 c2 fc 01 5b b1 37 12 72 90 7a 6a 71 d6 9a cf 49 5b 12 28 80 84 2c e5 12 0d ad 53 5a 1c 3d f5 05 ea c5 0b 92 53 c7 73 08 a4 83 16 b2 cb f6 bb 00 dd 9f f6 05 b5 e8 41 b2 5f ef e1 fd 7e 09 16 7d 4a 5b 02 74 f7 ed f9 b2 d6 1b ac b4 Data Ascii: RIFFdWEBPVP8LX/cMHr#${?"+kcD'WEQ/cU+x6.<OWJjx<VyU9.Ye[ gVJlU5!(KFvSn;j!Mi[7rzjqI[(,SZ=SsA_~}J[t
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 0b b1 6d 23 41 0e 35 8f f4 df 70 6e 0d 35 16 00 04 d5 c3 99 80 c8 0e 74 46 20 bb 53 39 06 80 0e 9d 2f 23 b8 ec e0 2e 59 9b bb bb 4e 80 36 68 db 5e b9 6d a4 13 fa 74 8e 68 a0 11 08 12 60 ce 94 48 2a e7 3c ce 39 d6 e4 9c c3 bf d9 9c 73 ce 39 27 e7 6c 6b 57 ce 59 39 50 62 26 c1 00 92 c8 40 67 74 3c e7 6c 50 22 40 fb f7 27 da db 4e 90 bc 36 85 0a 5e 16 68 16 39 91 32 0d 0e 75 6c 78 74 34 16 4a 52 89 46 b9 e1 a5 e1 92 8a d8 2d 45 42 53 f4 91 cc f1 51 00 27 88 03 83 d2 c2 70 22 1c 15 5a a3 6a 47 38 81 23 6b 65 9a 98 44 07 60 a2 82 5b 65 b5 e4 00 ad 05 d1 1a 79 e9 22 bd 1e 4a 45 81 b6 c7 93 20 49 92 6c 5b 92 04 c8 76 dd 17 e6 3b 73 5f b4 7b c4 7b 57 85 7c 4b 92 64 49 92 64 5b 44 ac 9e 0d f3 d5 7d fb ea 99 b5 d2 84 62 02 b4 3d db ee 48 72 e4 9c 88 cc aa 36 f4 1c Data Ascii: m#A5pn5tF S9/#.YN6h^mth`H*<9s9'lkWY9Pb&@gt<lP"@'N6^h92ulxt4JRF-EBSQ'p"ZjG8#keD`[ey"JE Il[v;s_{{W\|KdId[D}b=Hr6
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: d6 75 aa 75 47 63 02 3e da 63 3a d4 6f 5d 94 89 f8 c7 6e d3 99 7e eb a2 4c c8 eb d6 75 a4 95 75 4c cc 1d 69 6d 47 26 e8 b5 b5 0e b4 2c c4 4c d4 6b cb 9d 67 ed cc 4c d8 97 39 7c c7 59 11 22 26 6e c1 5b eb 34 cb f7 64 02 3f ce 4a 97 f9 67 26 f2 d9 72 77 f9 8b e5 c9 8c ff e8 2c 7f 2c 46 99 d0 d7 c4 50 47 39 ca 99 99 d8 85 4c d0 3a c9 4d 77 66 82 bf e9 51 3a c8 3d 9f c8 44 ff cb 37 ed 1c bb 5f 89 09 ff 7a 67 ee 1a e7 65 e2 df b0 dc 2d 44 d5 4e 93 df b2 a8 e9 14 f7 bb 29 53 c0 6b 8a d6 0e b1 f3 8f 30 15 3c c7 51 3a c3 65 f6 62 4a b8 d7 ee 5d e1 c1 4c 0d 45 6e 47 b8 fa 35 a7 07 e7 bf 44 27 f8 8b 47 31 45 7c da 39 3a c0 65 7e 96 a9 e2 91 0e 3f fe 44 ca ca 74 61 4d a4 8f bd bd fe 82 29 e3 5f 5c 72 cc 5d f3 f6 4c 1d 2f 71 9c f1 76 62 a6 90 22 62 ac dd f8 34 d3 88 Data Ascii: uuGc>c:o]n~LuuLimG&,LkgL9\|Y"&n[4d?Jg&rw,,FPG9L:MwfQ:=D7_zge-DN)Sk0<Q:ebJ]LEnG5D'G1E\|9:e~?DtaM)_\r]L/qvb"b4
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: f7 85 e6 ed fe fe d9 e0 f7 d7 5e 03 de 1f bf 83 94 68 76 7b 6b ef 4c b9 d5 f3 96 d7 83 26 bd 76 dc 6b 6b d5 a1 d0 4d c2 46 f1 d5 87 eb c6 43 43 b1 96 c7 5d da cd b4 35 1c 2b c5 7d 1f 9d 2a 9c bc 07 9f d7 a2 5f 8f 9b 1e 83 7f f0 5d 70 2f a3 41 f4 de ea ba 67 5e 6f 6d 1d 72 0a 46 b7 b6 be ee 3b 57 8e f0 71 0d 8c 58 43 8d 4a ac 4f dc c7 e8 f8 4b 88 c8 17 d9 39 c0 39 c4 e2 40 30 89 60 39 90 b1 84 31 49 4a a4 e6 87 66 92 70 6c 81 12 9e 26 10 df 78 3c c8 4f a9 c9 6f f6 5b dd 3f e4 8e 49 84 8a e7 36 67 0b 3e 81 04 fb e4 6f 1e c6 ea a1 d0 1a 4f 86 84 b3 da c9 3a 93 01 3a 63 51 e4 48 de 42 1f c8 29 f3 c3 ba ed e0 81 7c cc a2 81 b2 16 8a 3a 65 5b 0b 1f 04 e6 90 a4 cb a1 76 90 5b a1 b8 43 07 f6 61 fc a7 d8 f7 93 4c d4 c9 4d 00 e3 6e 78 c7 38 18 37 5c 64 06 f8 61 f1 Data Ascii: ^hv{kL&vkkMFCC]5+}*_]p/Ag^omrF;WqXCJOK99@0`91IJfpl&x<Oo[?I6g>oO::cQHB)\|:e[v[CaLMnx87\da
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 72 dc e4 c3 0b 83 5a 9e f7 c0 80 49 f3 0f 4e 4a 09 15 17 49 c9 39 12 8e e2 88 03 72 d2 a9 ec 50 98 75 84 79 84 37 64 4e ea 91 87 6f d2 c8 3a 39 47 71 c5 4a 6d a5 20 09 24 f9 04 4c f1 01 52 79 5d 6a 80 7f 08 d3 95 5a 89 dd 09 c1 93 f5 80 3e ab a8 e1 7b c4 c4 4a 3d 4f dd 81 2b 3a dc 4e bf 9f 2b 0f 7e a2 2f 74 d5 37 7a 37 88 0f 7b fb b6 5d c4 f8 97 e3 56 a6 3f 07 9e 82 95 da a2 36 83 38 36 8a bb a4 0a 9d b5 a9 29 c5 d7 92 a8 b9 b4 8d db e6 21 79 b5 d2 95 aa 4b 82 01 01 9d ea 90 87 36 9b 22 2c 54 41 20 f2 21 5c 2f d3 0d 8e 64 f1 6b a2 f5 ec ae f8 c9 08 1c 13 1a dd b6 26 d0 e7 78 89 ef 72 51 5a 8f 6c c8 1e ec 5d 47 8f 78 34 86 25 63 b7 0f 96 7e b2 11 a2 02 03 d0 86 94 31 33 ae a6 80 bc 07 fc cc ee e0 cb 1c 5a 22 14 e2 75 fb ce 68 16 83 86 38 be 08 12 79 51 6c Data Ascii: rZINJI9rPuy7dNo:9GqJm $LRy]jZ>{J=O+:N+~/t7z7{]V?686)!yK6",TA !\/dk&xrQZl]Gx4%c~13Z"uh8yQl
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 92 b3 7b 39 51 ba 08 75 89 42 20 4e 40 4c 66 7c 60 22 0c 12 c6 c8 80 20 88 2c 22 05 06 90 41 42 84 94 b6 06 98 99 88 4a a4 04 7e 95 18 a7 7c 0e 1d 03 88 58 ea b4 4b 59 6b db 72 cd d1 b2 8c a8 38 54 69 14 a4 42 42 e8 88 32 0e 9b 50 42 98 da 13 75 61 e9 a8 b5 11 f5 ec 37 79 39 97 cf bd b5 87 f3 3b 3e 9f 8c 29 67 7c 1a 88 6d 7b e8 c7 bf fd 6b c2 f7 da d9 b6 25 63 e3 65 b9 b4 a7 d6 ad 8a ed 15 7b de 24 ee 49 79 74 ea b6 dc 54 51 c8 c6 99 3f 7c b1 d9 7b 9d c7 d9 61 d1 b9 ff 0c f0 ef 36 e8 8b c0 f8 d9 7c de 50 f3 a2 ad 2c 90 8a dc 14 37 a9 4d 9e 4d 9b 9c d0 96 f8 1c 1b 33 64 4f 13 62 19 cc 88 92 85 89 85 45 ba f0 55 6c 28 2a 06 3e fa 1d 24 89 61 0b fa 8f e6 d1 bc c7 07 3b c5 1d ec d6 1a c4 7d 31 9a 39 61 87 93 bd 0c 28 c0 64 e2 b1 88 94 30 e9 81 20 7b 7e c7 67 Data Ascii: {9QuB N@Lf\|`" ,"ABJ~\|XKYkr8TiBB2PBua7y9;>)g\|m{k%ce{$IytTQ?\|{a6\|P,7MM3dObEUl(*>$a;}19a(d0 {~g
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 99 06 25 86 65 8f cf 4e bf 6f f5 e3 d5 46 92 1a 62 bf bd 11 1e 32 47 ad fd 6b fb cc de 77 20 38 50 50 c3 18 05 20 2c fc 61 a1 f6 d9 4a db 2b 02 1b c6 3d 1f 2b 22 8e 51 a3 51 45 63 4b 6b 13 31 2d d7 ef 88 88 90 18 d2 0b 19 ff ad 21 62 20 51 aa 29 c4 60 59 5b 7c 36 26 a4 8c 9d 33 fe ca 79 eb b4 51 94 9b 13 3f d6 22 c4 0d 31 92 b1 db d0 de db 06 e4 85 a3 47 3d 87 03 cb 7c e6 2e 2b a5 89 40 a4 f1 f8 97 16 0e ed dd a5 bd 6c 05 19 47 18 59 eb 10 31 b8 d4 7c fc ac 31 7e e9 35 82 04 d8 20 e9 97 ef 68 44 47 1b 90 ae 56 f7 99 0a 43 b2 4f 75 89 e0 3b 5e 0c 85 b8 31 03 d9 8b c1 3a 99 be 9c 53 4c 31 9e 90 62 29 df 69 47 d5 d0 d6 b5 7c e2 20 07 85 4e e4 36 55 fd ae 9c 8f f9 2f 43 0e 6e 13 c5 89 62 b8 a3 0e 31 41 e0 80 62 d8 47 41 4f 38 e1 67 b9 23 2d 7b f8 44 3c cc 61 Data Ascii: %eNoFb2Gkw 8PP ,aJ+=+"QQEcKk1-!b Q)`Y[\|6&3yQ?"1G=\|.+@lGY1\|1~5 hDGVCOu;^1:SL1b)iG\| N6U/Cnb1AbGAO8g#-{D<a
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ba 4e 89 28 f8 21 ba 5d b4 77 ba 09 48 e1 60 04 c3 0a e1 c0 e5 53 d6 f2 89 79 b6 cc 29 25 00 56 a9 76 09 52 9c cd 55 0b ac 6f 8a d0 b1 f7 f7 3a a9 c9 b7 28 57 90 31 43 f4 6d 49 32 1f 9d 4c 66 6c 41 8c ca 2c 17 9f c2 3b a1 fc 56 04 48 a4 39 db 98 17 74 82 4c 4d 2a 67 a6 3f d8 69 9d b1 c6 31 10 74 01 7d c8 ce 9d 6d 9d b4 8b b7 fe 31 56 2e 29 fe a9 6c a8 6c c0 d4 8e 44 27 2e 34 3b 51 aa 71 c4 50 4f 3e 1f 73 cd 62 a9 a7 18 94 2a de 62 09 8f e9 aa 74 94 c9 f1 a4 0f 91 8a ce 0d 94 86 08 a0 77 b2 17 39 36 97 45 95 65 22 bb 64 05 0e 19 79 c4 13 f5 c8 1b 0b 9c f4 72 6b 01 ee 86 0d 50 a9 c4 53 85 3d 58 76 8d 39 59 a8 7e 5b 12 2a 52 81 a1 72 bb ac 81 0c d1 a7 91 f2 68 72 05 f1 88 e9 d3 63 59 e7 cc 6c 2b fc f1 1b 2b f9 a7 b8 fa 53 ca 97 6f cf 96 f1 62 e3 ab d5 ec fb Data Ascii: N(!]wH`Sy)%VvRUo:(W1CmI2LflA,;VH9tLMg?i1t}m1V.)llD'.4;QqPO>sbbtw96Ee"dyrkPS=Xv9Y~[*RrhrcYl++Sob
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 30 59 d3 02 74 ad 87 64 27 72 c4 e6 1c 7d fc 3f fc 3b 9e 80 59 71 90 f5 f9 17 07 98 50 ae 80 95 b9 8c c9 4f 15 72 fc 28 f2 50 3f d8 ec 62 2c b2 1e 7b d6 22 56 c7 b8 6d bb a6 eb c4 b9 d8 62 5c f7 d0 aa 05 52 b2 39 f7 3a 5d 22 4e 62 5b 31 6a f2 51 bd 54 9c 06 83 2d 8d 8b a7 b2 a4 7d 24 57 be 22 28 a5 aa de 90 23 1d c9 49 6c 56 29 0b a9 4a b9 d6 cf 1c c5 bf e3 64 59 23 7e 94 45 a7 28 32 28 3a c6 1f 09 eb 95 b0 aa 06 19 cd 2e 69 ed 74 4a 01 9b a5 7c b2 87 a6 da a6 4a 00 3d 34 b4 6c 7b b6 58 71 43 5a f3 a6 c2 ae 37 23 e2 f1 31 38 be ae 07 1c 18 67 ce 5b 84 55 5f 72 90 f4 09 b7 e3 c3 70 3d 84 a3 5e 63 7e 6e 0e 02 e2 ed c2 1b fe b9 7f fc 57 f5 4f f3 6c 36 bb 91 1b ad c7 5d ed 2b dd ac f8 c0 a0 50 6f 6b 36 f6 64 f6 ed 81 96 0a 2f 3f 78 26 7f f0 74 4a e8 0c 26 5e Data Ascii: 0Ytd'r}?;YqPOr(P?b,{"Vmb\R9:]"Nb[1jQT-}$W"(#IlV)JdY#~E(2(:.itJ\|J=4l{XqCZ7#18g[U_rp=^c~nWOl6]+Pok6d/?x&tJ&^
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: d2 f2 7a 88 c2 b9 d0 99 5a 70 bc a7 bc 01 47 46 23 d9 4f 0f 3e 82 74 ba a0 2b 1a 41 ce 73 b5 f9 83 b4 5f eb da b4 b7 41 d2 80 5b 6d 93 a9 9b 43 d1 5d 4a 7e d0 eb aa b0 73 c5 b4 dd 9b 4a a7 b7 63 08 a9 a2 2b 4f 81 91 8b af 17 5f 6f 71 eb 3c 13 39 db c9 02 0a 10 13 34 ba f0 b1 96 83 f7 d7 e1 83 5f 90 0b 90 d6 c7 c2 34 ff 67 03 05 94 19 2c 7e 62 f4 c4 ae 8b 1e f2 cf 6b 12 7b de 3d 6f 78 6d 4d 0e de 19 84 2d b8 a2 1b 58 5c 35 19 e1 53 85 2c 68 88 e6 64 8f 0f 0f 6d 86 7e c3 47 6f 61 79 a5 83 4f c4 d7 67 df 92 3e 56 cc 02 de 69 a3 00 8e f3 b2 6e 10 d0 1f 86 05 62 5b 7e 22 b0 60 4d df 9a c7 6a cb ca c9 1a 8f 59 7c 61 e1 00 49 6c ca f5 0c 19 42 cf 3b 39 ed 8d 51 9e d7 23 46 1e ca 0d 88 82 7a cd e7 7a f4 59 ab 0c 74 18 39 3a 46 7e 4d 66 75 e7 b4 d3 2f 76 d6 f1 03 Data Ascii: zZpGF#O>t+As_A[mC]J~sJc+O_oq<94_4g,~bk{=oxmM-X\5S,hdm~GoayOg>Vinb[~"`MjY\|aIlB;9Q#FzzYt9:F~Mfu/v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49771	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	624	OUT	GET /media/wysiwyg/home/emballage-gros_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20669 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "ama5lQlW/BYWxZb6EpdsocIa+EWWOOrmYIxbUD4kVQQ" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=79819 idim=494x444 ifmt=jpeg ofsz=20669 odim=494x444 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-18016277e832a81777da42e09d43690a-dadc84b352101676-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72187 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960070-PAR, cache-dfw-ktki8620071-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: d3 53 43 d9 8e 71 1f de 36 fe 4b 0c 3e ed a7 61 00 0d 7c a0 0b 68 34 d5 7c 78 ac be 36 23 50 e0 74 61 0c 1f e1 d3 f8 ad d8 65 43 26 a7 61 66 85 a7 29 1d 88 fe a3 54 4d 75 fe c3 24 26 b4 eb 67 51 71 ea 7e 0d dd 1f 06 2b 4e 22 a8 ce 07 dd ca 2e 3e 9b fd 42 d5 4f 2d 8e 52 6d ad c1 1c 3b fa 15 d8 2a e9 c5 4d 33 e3 1f 30 f3 46 7b 38 71 f5 d8 ae aa d3 ae de 96 e7 db dc 70 aa c9 1e 99 5f 89 e8 e8 f2 2c da 65 17 f3 43 e1 7f d8 e6 43 80 06 e1 b6 71 d4 1f 90 fa 83 f8 4a f9 2a 68 81 70 92 23 95 df aa e3 6f f9 5d b1 f6 5f 55 34 35 13 d2 d4 4f 18 0e 6c 21 a6 6b 11 70 d7 1b 07 91 fa b7 d0 9e 0a de ca 7a bc d9 59 4d 31 75 81 ca c6 b8 e8 ed 8d 85 f4 3c 15 c3 71 7b 36 8d 10 8e 6c 6f aa 31 7b f9 6c ce be c7 16 90 45 da e6 ba e2 de 52 08 e7 4d 8f a8 b2 ec ef ea 4c 46 b7 0d Data Ascii: SCq6K>a\|h4\|x6#PtaeC&af)TMu$&gQq~+N".>BO-Rm;M30F{8qp_,eCCqJhp#o]_U45Ol!kpzYM1u<q{6lo1{lERMLF
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: b0 55 16 9f 8b fb b2 89 cb 7b 5b d2 5f 64 79 96 2b d7 55 b3 e1 f0 c3 87 48 ec 3e 8c 31 ac 76 21 20 fb d9 72 b6 c4 53 b3 7f af ef 0b a0 4d e1 45 17 81 2b 26 a6 a6 96 ce 34 e0 87 56 d6 1b dc 19 4f e1 04 ec 0e 9d 81 2b 64 b3 3d 95 3e 23 e5 31 d4 11 6f 16 52 2a 2a c8 e0 46 c6 f9 63 1d bb 2e 3a a6 b2 0c 3f 33 9d 21 a4 73 ee 5d 23 dd e2 d6 cb 7f 41 f2 5f 9d bd d5 d1 69 1e 46 4f 69 92 55 bb 7e 1f fb 83 90 c4 b1 ac 5b c3 c9 53 50 e7 54 7c b1 52 33 ce e8 d8 07 ca f7 ba e6 e0 71 b8 dc d9 76 99 fe 1e e3 11 d1 c5 5b 51 8a d1 5a 66 b5 cc 6f 9d ee 71 73 6e 03 40 16 bf a8 d1 74 1a 1c 17 10 c5 61 32 18 ce 1f 86 bc 16 99 a4 d6 59 c7 ea b4 69 9b d8 59 be eb d1 31 8e a9 ab 65 2c 4d 82 91 8d 11 44 d8 59 2c 92 e6 70 63 00 6d 9a db 00 36 bb 8f ff 00 e2 b6 2e 52 6a b6 8f 89 32 Data Ascii: U{[_dy+UH>1v! rSME+&4VO+d=>#1oR**Fc.:?3!s]#A_iFOiU~[SPT\|R3qv[QZfoqsn@ta2YiY1e,MDY,pcm6.Rj2
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 40 d9 d9 1b a7 c3 a9 08 92 4f 94 64 6b 5d e6 b7 06 db ae b3 d3 58 6e 09 3e 0b 57 87 52 50 3f 0d 75 7b 65 a7 a8 88 b3 ef 98 5e db 17 e7 7d dc f1 af 97 32 ee 95 dd 3f 4d 89 74 d9 c0 a4 a8 99 b0 fd 9e 18 0c ac b0 93 2c 16 b1 d7 4b 9c ba ac 2d 55 9e fc 65 6a 2d 3e f7 ba af b1 e6 98 17 c2 cc 6b 0f c7 f0 dc 49 d8 9d 04 b0 d3 54 32 57 86 17 97 90 ce 06 96 d5 6c ea bf 87 9d 45 8a 75 06 29 88 d2 53 d2 cb 0d 49 63 99 9a 4c 8e d1 81 a5 a4 11 a6 a3 75 da 70 4f 87 1d 2d 83 56 d3 55 53 c1 54 fa 88 a4 0f 8e 49 67 7b b2 b8 72 00 b0 fc d7 c3 d4 5f 0f 6a 71 9c 6a b3 10 67 51 d5 d2 19 5c c2 d8 e2 69 2d 60 63 72 db e6 1b fa 2e 1c 62 e3 55 df c4 ee df 57 2b 8f 03 9a e8 5c 07 12 c0 7a 58 d0 62 2c 8d b5 01 f5 32 39 ac 76 70 1a f1 a0 ba f8 fa 54 f5 18 e9 2e 9d 9f 0f fb 14 b1 0c Data Ascii: @Odk]Xn>WRP?u{e^}2?Mt,K-Uej->kIT2WlEu)SIcLupO-VUSTIg{r_jqjgQ\i-`cr.bUW+\zXb,29vpT.
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: f8 42 e1 ab 2a a7 af a8 2f 2d 24 db ca c1 ad 9a 38 1f cf ba e7 70 d7 36 8a 0a c6 c9 f3 41 25 dc 0f eb 16 ed f9 e8 bd a8 54 4f 90 ca e7 9e 4e 54 fa 7b 7d 7b 9c 5d 64 8c 76 34 e7 39 d6 02 41 1b 7d 4b 45 80 fc d6 78 ad 11 9a 9c 4c d1 e7 8a f7 f5 61 dc 7d 37 5c 7d 6d 3e 7a 66 39 ce f3 3a 5b df d7 5b ae 6a 83 11 0c 64 4c ac 01 ae 73 03 9b 21 f9 5e 0e 9a f6 3d d4 7b 55 f1 45 af a9 6a d0 cd 2c 5a 8c 6e da 6d 38 f9 1c 25 1d ed 90 f6 f2 ff 00 45 c8 7d 87 ed b9 62 14 f2 4a f3 f2 e4 69 2e fa 58 15 9d 65 23 29 a5 0e 88 de 17 ea c2 3f 09 df 2d ff 00 82 f5 7e 8a eb 36 48 e6 61 d5 d2 37 c4 73 80 8a 4e 5e e3 a0 69 b7 2b 3e 4c 93 8a d9 26 7b 1a 6d 2e 1c 92 8b eb 94 6f 86 bc 7c 0e a9 d3 1f 0d 31 49 eb 63 a8 c4 04 94 d4 ac 39 86 a1 b3 38 f6 b0 be 5f 75 fa 0d ac 6b 18 c8 da Data Ascii: B*/-$8p6A%TONT{}{]dv49A}KExLa}7\}m>zf9:[[jdLs!^={UEj,Znm8%E}bJi.Xe#)?-~6Ha7sN^i+>L&{m.o\|1Ic98_uk
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ed ca d4 f0 3c b7 fd 61 6f 75 a2 4e 91 5a e4 34 da d7 df f8 2a 34 27 ea b2 0d de fb 9d d4 b2 20 cc 00 b0 54 8b e9 65 95 b5 b2 11 b1 52 41 39 23 8b 29 6b 9f fe 6c b3 b5 8a 5b 95 00 c0 ad 2e 17 b8 bd ae b7 10 56 bc b7 3b d9 73 25 71 6b c5 33 a5 b3 46 bf b3 87 b5 c0 b9 a6 e0 0d bb 1e 41 5f 3d 45 21 79 0f 74 cc 01 a2 e6 ee b3 5a 06 ff 00 bb ba f9 31 49 b1 98 45 b0 fc 36 3a 97 16 93 99 f3 08 da d2 38 22 c4 9b af 38 a8 c2 fa f3 1f 9a 46 55 b2 3a 58 1a fb 08 de e0 c8 f4 de cc 6e 62 fb 70 4a c7 2d 0e 3c bf 3a 49 78 d9 dc b3 ca 1f 2a 72 7f 63 0e a3 ea 00 0c d4 f4 98 83 de f6 b9 c0 54 44 43 5a d8 b8 6d dd 70 eb 7e be c0 6d 72 bc 9f 11 8d ad 25 d2 d5 cb 24 ae b5 c9 17 22 fc d8 eb ae cd 6e e7 73 60 bd 90 fc 32 94 b0 13 8e 91 26 ff 00 d8 79 73 5b 71 ad fe a7 55 d7 1d Data Ascii: <aouNZ44' TeRA9#)kl[.V;s%qk3FA_=E!ytZ1IE6:8"8FU:XnbpJ-<:IxrcTDCZmp~mr%$"ns`2&ys[qU
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: d5 13 d3 4c cc 92 c1 23 a3 91 9b e5 73 4d 88 f5 0b 74 55 16 01 92 59 c0 01 94 93 ab 7b 6b db b1 5f a4 7a bb a2 e8 3a 8a 21 26 7f b3 d6 46 0f 87 3b 40 f3 7e cc 83 f1 0d 37 dc 2f 03 c6 3a 47 a9 70 62 c3 55 40 e9 18 f3 95 b2 d3 fd eb 0b 8f 1a 6a 09 f5 1a ad 10 cc 9d 6f 4c f3 f5 1a 19 c5 ba 5d 51 ec fb a3 e1 a8 6b 26 68 6c b7 b8 d1 ae 70 bb 9b ec e0 b8 79 a1 92 13 77 10 f6 f0 e0 6f 6f 7e 42 ec 98 6f 4d 75 45 74 90 c7 1e 11 58 c8 de 45 a6 7c 45 ac 68 ee 6f 6d 02 ed b4 7f 0c fa 8c cc 45 64 3f 76 0d be ee 66 59 c3 bd f7 01 75 93 2e 35 bb 7b f9 6e 71 a6 d2 ea 93 a5 1f 86 ff 00 99 d7 e9 67 94 b5 e6 47 36 26 c6 e9 1e fb 06 b1 a0 b9 ce bf 00 0d 4a f6 6e 89 e9 7e a8 a6 96 0a 8a aa f9 68 e9 83 83 8d 15 f3 ba 50 3f 0b c1 d1 80 fa 6a bb f6 07 d1 b4 d8 4c 5f 71 4d 4f 03 Data Ascii: L#sMtUY{k_z:!&F;@~7/:GpbU@joL]Qk&hlpywoo~BoMuEtXE\|EhomEd?vfYu.5{nqgG6&Jn~hP?jL_qMO
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: c6 37 0f 5f 65 8b 9a e0 34 05 01 80 36 e3 55 0d ca 3a 56 32 c1 ee b2 fa 1a 45 81 06 ea 2c 9a 35 47 6d 4a dd dd 57 0c c3 46 d9 4b df 5f 45 24 10 1e fb 59 52 75 b7 65 2c 82 d6 40 7c 56 3d d4 ca b7 86 94 20 76 5c 16 59 a7 2a b9 56 cc a7 b2 06 94 06 19 3d 16 42 3b e9 a2 cc 34 9e 56 f0 cb 76 f5 52 41 f2 f8 47 94 f0 f5 5f 58 b7 64 f2 a5 11 67 cc 3c a3 46 95 49 7f 60 be 8c 80 ec 99 02 03 e6 f3 f7 4c a4 f2 b7 e5 17 d1 56 b0 3b 50 52 85 9f 36 50 b2 cb 63 6b 2f ab c3 b2 96 b2 50 b3 48 d0 ec 56 7a f6 57 5e 15 0c f5 b9 52 09 96 fa 00 b2 14 ec 36 27 75 b1 ad b0 59 a1 16 62 d6 35 bb 2c 8d 90 95 81 28 0c ef 62 a1 78 5a 89 2b 1e 37 53 40 c8 9b ac 74 4b 25 92 80 b7 17 58 b4 38 9b 85 48 b8 de cb 26 12 34 04 7a a8 06 56 05 63 94 2c c9 05 63 ca 50 b3 30 6c a1 2b 14 e5 28 00 Data Ascii: 7_e46U:V2E,5GmJWFK_E$YRue,@\|V= v\Y*V=B;4VvRAG_Xdg<FI`LV;PR6Pck/PHVzW^R6'uYb5,(bxZ+7S@tK%X8H&4zVc,cP0l+(
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 40 7f 8a 6c 50 14 1d 4f 62 a0 20 1f 75 6f c7 a5 94 1b 6a 80 ce db ac 0a 0e 7d 51 00 f5 54 28 2f a0 4b ea 0f 64 05 b9 4d 16 2e 3b 95 4d 90 19 22 9c 2a 80 22 26 88 0a a7 64 dd 10 05 15 b2 20 05 39 09 c2 70 80 25 95 51 00 b2 77 55 10 05 34 d5 5b 22 02 2a 8a a0 22 5d 11 00 e5 12 c9 7d 10 04 44 40 11 44 40 54 45 10 15 62 aa 20 32 51 4d 91 00 ba b7 51 06 c1 00 4e 54 44 02 ea a8 88 09 74 4e e8 80 2a 74 b2 97 4b ec 80 70 9d d2 e8 80 a8 56 37 57 94 06 47 72 a2 9d d5 36 d0 f7 42 42 8a ec 48 ee a5 f4 40 44 be 81 13 d1 01 7f 0d c2 3a c5 41 a0 21 38 f7 40 5b 5d 42 80 91 73 c1 54 11 74 04 d4 14 07 e6 52 fa 7a a8 7d 10 14 9b 59 53 b9 58 dc 7e e5 2e 80 a8 a5 d4 d5 01 bd 41 a6 88 88 41 50 28 0d d1 01 4f a2 22 88 0a af 74 07 55 10 04 1b ea 89 d9 00 e5 11 39 40 52 a2 25 d0 Data Ascii: @lPOb uoj}QT(/KdM.;M""&d 9p%QwU4[""]}D@D@TEb 2QMQNTDtN*tKpV7WGr6BBH@D:A!8@[]BsTtRz}YSX~.AAP(O"tU9@R%
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: a0 54 cb 3e 5a e5 22 c8 e2 85 f0 77 e8 71 ff 00 1d 8d 7b 0b 40 23 62 36 5b 46 2b 31 d9 cc fc 97 e6 4c 47 ab 31 87 cc 1f 4b 38 86 1d 72 35 bb d8 72 e5 de 7a 57 a9 67 c5 69 e4 8e 7f ed e1 b5 c8 d9 c3 ba e3 db 65 ae ae b3 66 4f c3 e5 0c 6b 23 8c 6b bf 8a 3d 8f f4 9d 45 fe 76 7e 4b e3 a9 c6 a6 61 c8 ea 98 e2 bf ca 6d 73 7f 65 d5 1d 58 e8 d8 5d a9 b6 b6 1b ae b1 d5 b5 12 9c 36 19 d8 dd 9d e6 24 da c0 ff 00 1f 65 54 f3 e4 6a 96 49 27 cf 26 6f 65 15 bd 23 b3 d1 75 c6 23 06 2c 70 ec 47 c0 d5 c0 36 41 a1 f3 6c 48 5d e0 e2 d3 0f d4 5f 97 71 ca a9 66 66 1b 5a 41 6b dd 15 89 22 d7 2c d8 af 5d a3 c5 1d 51 4f 48 f0 09 12 42 1d 9b 85 da cf 96 be 76 6c d5 69 f0 3c 5a 7c d0 82 8f 5c 6a 49 71 68 f4 4f d2 f2 72 e8 d4 38 d1 17 d5 85 74 7f 1d c4 15 04 8e cd 62 54 fb ce 45 b5 Data Ascii: T>Z"wq{@#b6[F+1LG1K8r5rzWgiefOk#k=Ev~KamseX]6$eTjI'&oe#u#,pG6AlH]_qffZAk",]QOHBvli<Z\|\jIqhOr8tbTE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49776	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	654	OUT	GET /media/wysiwyg/home/mannequins.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:25 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17836 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "oHqduBbXSd2iaXnNQ9e/3/cvZL7P3P1nLFm2edY+eXU" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=36120 idim=400x400 ifmt=png ofsz=17836 odim=400x400 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e86de6ec1a3d119914f2d3bd-2feefc178a5f2b90-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960024-PAR, cache-dfw-kdfw8210077-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 52 49 46 46 a4 45 00 00 57 45 42 50 56 50 38 4c 98 45 00 00 2f 8f c1 63 10 4d 40 72 db 48 92 04 3b a2 b6 b6 e3 ff 0f ee aa c8 ac 9c e5 1c d1 ff 09 c0 af 99 ab b1 9c 5c cd ae e5 48 6b 31 d0 e6 6a a7 25 20 d7 88 08 00 11 fe b8 90 b9 42 3c f8 b4 ed ed e4 7b f1 e0 a3 aa bc 6d ee e4 a4 78 e2 c1 2a 99 2d 64 ce 88 ce 49 db 1c 40 e6 58 b4 48 5d b4 07 30 16 ad 83 44 1e 36 c9 5e be 01 93 55 32 ab 87 cc 5e f4 28 d2 67 94 8a 6c e1 15 17 19 11 aa 1a c9 4e 8c a8 10 11 25 68 00 f3 42 ba a2 02 90 57 21 55 71 c5 b6 d9 f6 10 9f 38 60 d5 45 a9 6c 4b d8 5b e8 b4 41 b2 24 b1 0a df 5a c2 e4 76 15 49 03 d0 1a 34 49 db 24 01 71 89 8d a4 6e 24 60 8d ae a4 45 2c d2 26 af 1b 2d 41 6e b6 c8 73 29 da 32 3f 33 fc 96 bf 34 0b 43 f6 b6 d8 75 d2 36 69 72 c8 f3 ca db 9d de 40 87 57 e8 e3 Data Ascii: RIFFEWEBPVP8LE/cM@rH;\Hk1j% B<{mx*-dI@XH]0D6^U2^(glN%hBW!Uq8`ElK[A$ZvI4I$qn$`E,&-Ans)2?34Cu6ir@W
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 5c 3c 11 89 cf 16 b0 76 ce b4 88 5c 3b a7 d6 07 cd 3c 20 ac 07 b8 01 c0 6a 9c ca 6e 05 67 4f 48 79 6b df bb 29 7d 5b 5a df 83 fa b3 58 af 20 25 95 d4 f3 e8 e7 28 be 48 f3 07 d2 f8 ae 04 ef d5 7b 3b e5 1f c0 50 21 25 09 81 7a 19 79 8e e4 25 aa ef 22 7c 2f de fa 51 fc 41 f4 ea 19 98 68 11 48 e5 45 1c 46 b8 4c f4 0c 9f f7 da 6d 10 da 75 33 d8 06 43 a0 0f 85 46 e6 f4 1a cb 4b bc b6 d6 ad 03 b7 75 a1 fb 1c 52 52 81 92 17 61 d7 e1 25 8c 75 fa f2 fc df c6 6c 6b dd fa 88 fa 5c 2a 49 25 64 d0 54 1f 0e ec 76 d3 97 b3 b8 0e e1 ad 73 2d a4 e6 7d 7a 93 40 a4 88 67 76 e1 92 17 70 fe 36 ec 7a 59 c9 f1 d6 39 61 a9 01 65 00 5c 86 c3 b9 60 de 85 65 77 fa 8d b0 63 59 c5 e9 d6 b9 79 a8 47 a4 83 63 c0 98 57 b1 56 99 f4 6e 6d 5d c5 fe 75 29 6f 95 9b 87 f4 24 46 6b e8 59 a7 b2 Data Ascii: \<v\;< jngOHyk)}[ZX %(H{;P!%zy%"\|/QAhHEFLmu3CFKuRRa%ulk\*I%dTvs-}z@gvp6zY9ae\`ewcYyGcWVnm]u)o$FkY
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 3c 0e 9c 92 15 28 63 5e 26 eb f9 99 20 d8 ed d6 29 90 0d d0 39 33 0e 8e 95 8b 0d 03 20 3e 7c d8 4e 7b a4 56 e4 44 88 50 61 38 7f 51 4f ec 80 d4 64 33 57 c4 78 e6 1c e1 bc b8 6e 7f c1 84 df 04 cf 17 7b 83 60 20 1a 60 40 ca dd 70 00 8f 2e a2 c5 b3 1e a8 15 7a e1 22 4e 31 ac bf e8 0a 6c 6d 24 50 34 3b 0a 92 01 46 85 45 ef a6 82 63 76 ba 9e 36 2a 10 a5 34 00 66 c6 01 59 2f c3 02 d3 a2 58 14 4d f7 3a 42 fb 70 37 65 58 ef ed 6e 5b b0 24 4e 68 e2 20 06 d0 44 58 39 54 a1 7b 9d b3 85 48 a0 00 62 63 66 8b c6 b0 00 4b 4e 26 8e 7a 9a 56 d8 be 45 a8 32 ac 9f 55 4c 49 c6 28 68 21 30 04 08 08 0b 29 8a 42 b2 7e 9e e9 ba d2 2a 61 18 1a bc 77 3e 86 3e 17 95 e1 81 29 d1 b4 71 41 ec 5d 84 99 b8 7c 30 86 35 bf 22 0c c7 61 8c 51 44 a1 8e 48 01 84 97 aa 1d 3d 80 2c 94 99 eb da Data Ascii: <(c^& )93 >\|N{VDPa8QOd3Wxn{` `@p.z"N1lm$P4;FEcv64fY/XM:Bp7eXn[$Nh DX9T{HbcfKN&zVE2ULI(h!0)B~aw>>)qA]\|05"aQDH=,
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: ab 44 c6 69 a9 e0 b4 31 6c 31 36 56 48 cd 18 26 0e 06 00 42 27 c7 50 4d 7e 74 74 1e 0c af 0e 8e b4 12 84 ee 44 a0 81 31 68 30 f5 73 17 75 6f db cc 0e 93 48 67 f8 a2 90 04 18 c5 c6 01 8f 42 43 d2 53 d0 23 d1 fb a8 38 06 ff 7b e6 88 24 2c 14 6b 98 dd 36 10 70 20 2c cc 17 eb ba d6 b6 26 6a 08 3c 55 86 31 e6 e6 4a 48 fc c2 48 5b 0a 54 ad ba ef 7b 5e a9 dd 27 1a df 13 6f b2 bd a8 30 2a ae a1 7b b2 99 04 26 80 31 9b bd b2 b5 91 d2 90 c2 ca 31 9c 31 d7 14 cf dc 38 66 0e 7a 10 ea ba 96 b1 5e 08 01 d7 ff e3 77 bf 3a 01 2d 48 2a d5 4b 3d 6c 11 a1 00 18 cc c0 0c e2 c9 5d a1 c3 3c 28 55 87 64 58 63 5a 80 c2 11 d4 c5 d8 79 40 b5 a8 2a f5 92 c2 52 e8 13 61 6f 56 92 00 4a 92 18 27 65 d1 a2 81 90 18 00 88 2b a7 6a 8f cd 0a 2c dd 54 f5 c3 1b 02 3f 57 34 cd 62 0c 3d 5b a9 Data Ascii: Di1l16VH&B'PM~ttD1h0suoHgBCS#8{$,k6p ,&j<U1JHH[T{^'o0{&1118fz^w:-HK=l]<(UdXcZy@*RaoVJ'e+j,T?W4b=[
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 33 bd a9 07 f6 6e b7 53 00 ea 72 80 59 6b c7 0d 50 04 1f a2 2f f3 dc 42 a0 2b 32 80 00 c9 cc fa ef b5 7a 04 3a 11 11 57 ba 98 ee ee 3f e4 c8 9b fe a4 63 b7 3e 2d f6 ff 46 d2 eb ba d3 00 14 73 b8 29 e3 67 46 2e d3 8d 58 99 37 5d 4e 2d 1e 6b 62 0a 46 48 9b 60 01 b1 22 08 73 58 3f 1c 79 ef 06 ed d3 0f c4 fc e7 f9 25 06 04 ec c0 81 a7 35 22 a8 03 60 59 ef a6 21 73 f6 26 7d a0 88 3f 34 be 32 ba 06 07 30 58 94 c0 10 ec 40 55 a7 60 7a 9e 78 be 56 d7 73 8c 20 cd 09 dc 5a fd 9f 70 d0 d4 40 1a 15 40 ea 4e df 34 90 3c 96 8e 85 92 d1 bf 54 ab e5 8c 82 be e4 92 b2 7e d0 fe 31 98 ca a8 38 8b 57 b3 f9 38 72 20 5e fc 95 53 8b c4 08 1e 9e 0d 05 34 30 88 c1 3a 37 0d 52 ee 10 a1 59 91 02 b8 74 dc 3e 5a 50 26 c3 53 9e 6f 29 a4 10 8a ba 48 46 7b f7 ca c1 7e 88 fa a4 8e 11 84 Data Ascii: 3nSrYkP/B+2z:W?c>-Fs)gF.X7]N-kbFH`"sX?y%5"`Y!s&}?420X@U`zxVs Zp@@N4<T~18W8r ^S40:7RYt>ZP&So)HF{~
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 28 eb 0e f1 24 be 3c 59 5e 85 02 fd ec ff 6f f0 e7 3f 75 76 0a ee 1e d8 e2 60 8e a4 80 62 4b 2a a2 8b b1 19 fa 3e 52 46 45 a2 77 05 b4 93 08 c4 5c e8 e0 3a 29 14 0f eb 6b 8f 99 63 89 52 e3 04 58 06 57 5f 07 40 88 6f 2d 45 ab 49 f7 8c 2d e2 78 9d 3b 98 21 54 05 10 f0 2e 95 4d 1d 8c 29 61 77 de dd 8c a2 8a 8b bd dc e7 56 74 7b 97 b5 98 bc 43 8e 19 96 d9 9d 6d 62 ee 09 7c 59 0d 08 c6 ae ba 38 f8 0f eb 4d f8 d2 47 b3 51 37 67 09 24 9b 2d 04 c8 fc 2d 9b 82 26 34 b1 37 5f 1f c5 a6 8a 77 8d 57 24 ad 4e 44 6d c6 fc 89 c7 cd 2b 8b 09 db 7e 68 ca 17 08 32 e2 a4 fb 9d 74 bf c0 9e eb e1 09 31 39 d6 e4 de 8b 7e 14 7c 2c fc e6 4a 49 a9 40 9c 10 a4 ae 1e 9d 08 a8 2a 10 3f d4 ba db 9d ee 80 32 8f 06 be d8 93 b8 73 a2 0b 28 de 5e 8e 1b 01 8b 30 d3 c4 5b 51 86 af 4f 06 24 Data Ascii: ($<Y^o?uv`bK>RFEw\:)kcRXW_@o-EI-x;!T.M)awVt{Cmb\|Y8MGQ7g$--&47_wW$NDm+~h2t19~\|,JI@?2s(^0[QO$
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 71 10 7b 63 f4 5d c2 d4 79 ea 7a 88 63 ef da 00 99 18 34 64 19 1c 5a f3 31 4c 4e 5e b8 23 eb 9b 05 f5 a5 30 c0 83 66 3a 39 a4 48 58 21 41 d1 08 c9 1c 93 44 f2 e3 cd c8 c4 8e cd 11 8f 45 9c 0b 9f df 58 99 1b ca af df f1 2e 02 4a 78 a5 c1 1d bc 7b 58 82 56 29 31 52 e3 fc 68 80 2b 64 c7 2d bb fd 5d b4 a0 3d cf 90 2c cf a9 54 27 8b 05 44 23 d7 9f 42 f0 df 97 9a 11 4a d8 9b 73 ca 27 f0 c0 cb 1b b0 98 8b 7b 8a 6e e3 15 0a 02 11 06 e9 54 f7 87 42 10 12 99 38 4b eb 4d a6 14 19 ae 8a 4f 81 53 91 4d a9 04 eb 75 3d 50 36 5e 12 e9 e9 4a 0e 0b 54 b5 dc 68 00 bb 33 0f 46 e8 9d 9b 73 fa 85 1e 5c 76 5c ea a8 41 5f c3 52 3f aa 9b 4a a3 7a 00 38 ef c9 91 03 c9 79 ef ba d3 3d 43 de 98 39 dc ae ce 00 83 3d 49 b7 d3 ea 42 e2 6e 07 f3 b4 e8 51 24 18 02 84 00 49 c0 4c 87 e2 0e Data Ascii: q{c]yzc4dZ1LN^#0f:9HX!ADEX.Jx{XV)1Rh+d-]=,T'D#BJs'{nTB8KMOSMu=P6^JTh3Fs\v\A_R?Jz8y=C9=IBnQ$IL
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: d5 33 5e da bd e0 07 3d 28 fc c5 b9 3b 77 ae d3 3e 4b c7 6e d5 af 15 ce 62 8c bb eb 95 43 b5 a7 80 91 02 7b 92 9f 52 7f 1a b4 c5 31 13 8f 7d cf b9 df 14 26 62 12 25 7a d8 c6 28 c2 66 08 47 72 c4 f8 71 43 5a 61 12 32 5e e0 dc ed 56 41 c4 45 ce ee fd e8 f0 fb 74 c2 4d f8 3b 47 77 ce 2e db b7 a3 9e 5d e8 a6 dd 31 c1 cc 02 b5 bf ab 84 f4 ee 74 05 10 24 c3 9a 71 df df c7 df 9c ec 6b 72 ce c5 99 cf 73 96 33 e7 cc 36 82 9a 03 60 02 b8 41 8e 20 6c c4 10 12 82 dd 8e 53 8f f9 d1 92 40 e7 ec 50 d4 17 fd cd ef 0c bd 0f cc 02 ec 5e bc cd 26 da a5 6a 33 7e a8 30 81 6a 0a 7a d4 ab 6d cf de 75 00 39 bc f1 bd 63 f6 07 75 05 70 3d 20 8b f6 20 2b 81 6c a3 66 52 9d e4 9d 18 e4 85 40 fc 96 1d 8f 87 97 ef 03 1a a1 2a 10 f8 94 7f f9 e1 f0 ce e3 51 4e 44 be 67 82 73 ae d1 f9 b1 Data Ascii: 3^=(;w>KnbC{R1}&b%z(fGrqCZa2^VAEtM;Gw.]1t$qkrs36`A lS@P^&j3~0jzmu9cup= +lfR@*QNDgs
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: fc 38 5a 25 23 8c 22 b1 df 7f f6 1c 54 71 36 ea 90 25 e8 74 76 35 d6 09 20 51 a8 8b ac 58 e4 c8 82 e7 9d 94 24 35 2b 68 e3 32 01 4d af 2d 72 2b e8 75 32 4f c0 ae 0e cc 8c 85 b2 d0 8a 51 47 9e 2c 0c 09 b1 2a 04 b3 9c d9 20 74 37 80 05 04 74 8b 10 30 81 a8 ce 5d 7d c2 20 96 59 27 ab 68 0e cc c1 64 17 49 4c 3e ae 1f e3 56 7c 9e 23 0b 50 8a 6c 09 32 97 ff b9 6b db d8 3d 1f 73 f3 15 a5 fb c1 d7 cd e6 19 61 38 b3 2a f0 56 08 ac 23 27 81 26 84 1a 87 51 91 f5 e9 61 da 13 ba db 07 5e 57 8e 08 a0 8a eb 8e c7 df 38 66 1b 55 9c 79 15 b8 f2 22 40 3e 8b af 3c bc 0b 63 00 d4 37 b8 d2 10 a6 78 7d 9b b1 d9 94 44 4f d7 be 12 ff be 72 4a d8 cd 27 7b 80 67 f3 84 86 bb d7 1e 52 75 48 42 fa 5d 78 7d d7 0a d8 72 83 02 63 76 36 c8 88 6d fb 8d c7 3b 07 02 6f e1 32 b3 b8 04 ca 91 Data Ascii: 8Z%#"Tq6%tv5 QX$5+h2M-r+u2OQG,* t7t0]} Y'hdIL>V\|#Pl2k=sa8*V#'&Qa^W8fUy"@><c7x}DOrJ'{gRuHB]x}rcv6m;o2
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 60 e5 86 b2 2a 9c 1a 7d 64 6b 04 b8 8d 0f 80 35 42 b4 d7 a5 04 3b 9a a2 e0 6e b5 20 b0 01 69 37 96 22 08 ed 98 f1 70 61 53 c1 94 b1 93 fd 8d 38 7f 71 cc 15 9b 5e 58 03 68 c5 2c 02 71 5a d6 32 53 74 25 ea 96 40 cf 9c 39 2d 32 c6 97 aa a7 52 4b e6 20 8d 01 e5 ce f2 f2 f6 ec c5 0b aa 00 c4 dd 08 d0 c4 a6 52 18 4a d9 88 00 92 e5 8c 08 2d 34 3b fb 6b 02 28 a0 05 ca 1d e6 a7 da 73 e9 57 f7 21 77 05 51 f1 f5 a7 13 49 83 03 92 07 17 4f f6 10 10 10 30 cb 01 cc 32 f1 2f f4 7f 46 11 89 44 c0 a2 d2 24 a9 15 55 39 04 03 e5 81 fc 8c 00 df b6 6d 7b 9a d3 ba f0 be 3a b9 37 64 33 f3 a3 bf 62 17 11 dc 28 4e d8 47 06 21 00 51 ce ee 59 28 92 93 f7 93 41 00 41 20 69 b9 c3 7c 78 0c 3e bf 0b 5e ee f8 3d 4f 69 51 98 9f fc 31 2b 64 92 ee 2a 92 28 41 05 04 e6 e4 e9 59 01 80 87 df Data Ascii: `}dk5B;n i7"paS8q^Xh,qZ2St%@9-2RK RJ-4;k(sW!wQIO02/FD$U9m{:7d3b(NG!QY(AA i\|x>^=OiQ1+d(AY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49777	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	712	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-imbattables.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0
2024-10-25 08:16:25 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 51330 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "gUvvgO5VNp+jf++Ccfhvas4RDLIjpFXymhEtLq1Op9k" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=298142 idim=1920x700 ifmt=jpeg ofsz=51330 odim=1920x700 ofmt=webp Fastly-Io-Served-By: img07-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277d44f8334f26334f26a293e71-7d7a04e1e7809415-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72186 Date: Fri, 25 Oct 2024 08:16:25 GMT X-Served-By: cache-par-lfpg1960079-PAR, cache-dfw-kdfw8210027-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 52 49 46 46 7a c8 00 00 57 45 42 50 56 50 38 20 6e c8 00 00 d0 4a 03 9d 01 2a 80 07 bc 02 3e 6d 36 97 49 24 22 b4 aa a1 f7 28 b2 90 0d 89 67 6e ff aa 37 8c 34 b3 9a b3 96 08 e2 0e 72 5c df 38 da 8a d6 cd 7c 84 8a 92 88 f5 69 e3 1a a3 be 07 e6 b7 bd 97 1d f9 99 f1 8f 63 3f e6 ff 80 fa 00 fe 9f a8 ff 31 ff 5f cc d7 9d bf e9 ff 8d f6 81 ff 0f fe f7 b2 7f e9 3f e5 ff ec fe 7f fd 05 7f 4a fe af fa b3 fe 9b db 8f f6 ab df 27 f7 7f fc 1e a3 bf a0 7f 83 ff e1 fe 9b dd fb fd ff fe 1f f3 fe f0 3f b4 7f bb fd 90 ff 55 f2 01 fd 6b fd 67 ff ff 6b df fb 3e c8 3f e5 3f e4 ff ea f7 18 fe 8d fe b3 ff 77 b4 87 fe 2f dd 9f 85 3f ee 1f f2 ff 74 bf f6 fc 8e 7e d6 7f fd ff 8d ee 01 ff f3 db 17 f8 07 ff 9e b8 fe 3f 78 2f fe 5f fd 27 e5 ff 9d be 58 3d d7 fb e7 ee 27 f8 ef da 6f Data Ascii: RIFFzWEBPVP8 nJ*>m6I$"(gn74r\8\|ic?1_?J'?Ukgk>??w/?t~?x/_'X='o
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 56 56 14 3d 35 98 5c 7d a4 6f 10 3e 9f 8a 4a c6 b3 b9 00 5c c6 7f 71 c4 dd a3 d2 db 4a f4 28 31 b2 65 6b b3 4a 67 23 39 59 06 5f 49 7b 93 23 5f 3a 22 6d 88 fc 00 a7 db 8f dc 81 4a 9c ce 32 aa 40 7a a3 67 4a d0 ca d5 35 fc 4c 26 46 db e9 21 af 00 3f bb 31 44 5a 5a 50 58 37 70 a2 27 d2 2d 29 73 fd 51 d9 0b 8f e0 af 25 91 a0 1b 9b 42 e7 18 41 23 0d b3 20 f9 e1 c9 6b f2 04 80 90 12 02 40 48 09 01 20 18 aa 40 cc e1 6c 93 ef 00 ae 02 cc 94 b9 86 cb 75 5a 34 98 84 d7 6c ff 79 03 b2 25 d7 7d 65 20 c1 06 85 af 7d a2 a2 0a fd 6a 9f f4 1b 27 74 08 49 a1 55 58 02 29 eb f9 0e 87 4c 45 34 8b 21 a9 9a f0 86 a7 03 c4 76 9d 5b 15 c1 ae bb 79 ae 87 f7 bd d4 6c 42 39 3e 3f a4 12 3f ee 7c 07 72 c0 39 48 5b 31 60 b0 8b 03 13 ae 88 5f 42 f8 e0 28 fa 76 79 97 11 a8 f5 96 cb 53 Data Ascii: VV=5\}o>J\qJ(1ekJg#9Y_I{#_:"mJ2@zgJ5L&F!?1DZZPX7p'-)sQ%BA# k@H @luZ4ly%}e }j'tIUX)LE4!v[ylB9>??\|r9H[1`_B(vyS
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 5d 83 75 39 58 e6 32 da 10 f9 d3 72 da 9a 2b d5 f5 fd 66 b5 03 69 0c dc 8b 08 b9 16 8e 18 30 ca 80 e9 20 a1 14 70 e2 60 74 b2 ea f9 ed d1 aa 00 6a ef d9 ba 34 23 31 5c c0 e7 6e 94 60 8c 94 66 b5 7a 1f bb fa 18 aa 29 a3 4b 20 f2 16 e4 05 0a 8e a5 17 6e 43 2d 3e 2f ce b7 21 93 ae 16 fa 5d bf 18 f6 bb c6 5f a0 1c 6c 8d ac b2 b8 4c e7 de 7d 60 d2 14 87 23 6f d9 5f 7c 73 f5 47 62 51 0c 71 86 2b c9 ae 2a b3 44 0c cf 95 7a 15 19 93 93 0d f8 0a 98 e0 de 8f e4 38 9b c9 bb 4f a0 c7 b0 88 1a d5 45 9c 8f f6 63 6f 4d 8d 05 14 0a b7 af 96 a2 61 c4 06 9c 00 65 7f e5 19 74 64 e6 0f 0e 7f b8 ab b8 42 b8 53 4c ee 60 b7 27 ac 7b 98 b2 1d 60 89 e0 b0 52 eb f5 7c f3 db e2 02 29 9e c7 7b 1d 3b 06 5f 5d 45 79 f8 e1 93 b0 f1 d7 79 6e de 7a 58 4d 27 13 37 8a b5 36 7b a7 f3 da cb Data Ascii: ]u9X2r+fi0 p`tj4#1\n`fz)K nC->/!]_lL}`#o_\|sGbQq+*Dz8OEcoMaetdBSL`'{`R\|){;_]EyynzXM'76{
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 68 b5 ec b6 01 51 a5 63 99 0c f7 3a 6f 51 80 ce 9e 02 6d 53 d1 d3 2d f9 b0 b7 13 43 b5 2b 30 55 02 0e a1 25 b1 54 0b 2f 5e 79 e3 b6 b2 7c 9a 85 86 12 19 fd b7 a0 07 9e e3 21 97 9e ca 40 49 8c bb 4a f2 f7 1e b9 e9 0f 3d 23 97 98 a2 a4 23 5a bb 7e 06 89 27 ae 6c 35 3e 15 11 d3 2a 7c 02 70 90 63 3c e6 b5 76 93 ca 97 3c fa c1 ec 2d 7b e4 d2 d6 a9 47 52 14 5a 92 cc ea 8a fe e1 fc f4 75 d2 36 c8 ae 39 5a c4 11 f0 64 43 c7 1e 44 fa b2 75 94 7f 67 eb a8 58 22 de af 93 6f b5 1a 3e b2 65 3d f4 9b 61 14 2d 05 eb e4 4f a9 aa f1 6a cc ba e6 25 94 6e 96 51 2e d5 00 07 eb 1d fb f6 85 94 ad fb 42 a2 db c5 a0 e5 6a ce 87 2b aa 86 b0 f5 82 38 8b a3 0b 80 7f 58 82 21 d1 b2 44 f9 06 47 ca eb 59 4b ec 81 6d 6e 7e cd b0 54 31 58 c3 ec 65 4c 55 10 75 db a4 a7 b5 88 14 d7 51 37 Data Ascii: hQc:oQmS-C+0U%T/^y\|!@IJ=##Z~'l5>*\|pc<v<-{GRZu69ZdCDugX"o>e=a-Oj%nQ.Bj+8X!DGYKmn~T1XeLUuQ7
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 9a a4 3d 24 a8 2b 52 1d 82 5f 83 9f d5 47 f3 58 a8 10 60 6b d7 11 41 90 f4 5d cf da 54 7e 78 48 10 c1 33 34 7a a8 1f f6 7d e5 c5 ec 69 94 f7 32 04 59 b0 78 63 9a 36 b4 c7 df c0 98 8f ef 76 ce 40 80 8f c6 e5 64 ca 42 88 13 3d cd 89 64 6b 2f aa 30 7c 00 3c b8 83 33 34 9a 8c f4 04 8d 7a 9b 90 80 ae 64 29 8f f0 4c 23 4a 7c cf 95 e1 d5 47 fc 35 bc 60 6a e6 38 b6 4d e3 54 6b a8 7f f7 5b 37 a7 9f a5 d8 d2 ac c2 40 82 95 6a ab 37 35 95 be b0 f6 a4 1e a7 0d 9d 9d f1 4b bf eb a1 05 25 9e b9 f8 c3 10 de 8e 9e 7e 1b 0a 48 43 57 28 c2 a5 05 03 93 51 97 0a 72 b7 cb 0f 7f d8 7b e9 50 49 c8 c1 2f 2c 7d c2 15 7c 78 28 57 28 62 c5 6c e3 42 a5 ef 3c ae 14 8b c3 ee fa 4e e2 ed 9c cb ed 28 68 19 f3 ec cd 7c e1 d8 0d 99 7f 48 2f 40 48 d6 73 c0 41 eb 0a d7 cf a7 d8 c7 bf 46 7e Data Ascii: =$+R_GX`kA]T~xH34z}i2Yxc6v@dB=dk/0\|<34zd)L#J\|G5`j8MTk[7@j75K%~HCW(Qr{PI/,}\|x(W(blB<N(h\|H/@HsAF~
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 04 8f af 35 bd 27 85 b2 c5 56 df 4b b1 80 0e 3e d1 d0 36 7f ac 80 da ab 86 19 94 85 55 8a 24 a1 e1 45 65 69 1f 00 f1 1e 79 45 cb 31 c7 ab b6 7e bd ec 7b 54 18 4e 92 20 7f d8 cd 31 67 6a b6 27 60 77 73 3b ff af 24 67 0b 8a 45 29 49 3b 19 37 2b 52 0c 86 a7 7a 07 24 7c d1 df c3 68 19 7a f0 8c f9 8b 91 33 20 bb ab 37 f9 a5 75 dc d5 28 e5 b3 d7 97 a1 df fe 22 75 18 bc 09 e7 46 80 03 a9 97 66 a6 0e 28 df e4 8d fb be 97 f8 52 4f 8a 24 50 be 28 cd 2e f6 b8 11 bc df 4f 03 ac 9f fc 98 a2 19 bd 09 5e 99 72 15 c1 ac d1 c3 a0 c2 88 c2 d8 a2 14 35 d5 bd b4 01 72 e0 b9 c3 47 ed 99 ea f3 92 b4 fd ac fd a1 29 c9 ce 72 c5 28 8c c5 ee 53 87 ae 64 f5 9c a4 e4 2f 9c 5a ad 1f e8 33 e7 2d 6c 7d 65 ed 4f c5 6e c7 dd cc f2 ef f7 07 c7 05 56 6f ca b4 c1 6f d6 9b 6e 02 bb e6 43 13 Data Ascii: 5'VK>6U$EeiyE1~{TN 1gj'`ws;$gE)I;7+Rz$\|hz3 7u("uFf(RO$P(.O^r5rG)r(Sd/Z3-l}eOnVoonC
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 90 6e db 83 eb ba e3 a4 5b 8a 4f dc f3 33 d8 a0 7e 16 56 b0 ce f2 8c 64 de e6 e6 6c da ac e4 62 e0 68 0c f1 7b 52 b0 3f e0 04 94 83 a9 0d 40 c8 b3 61 a1 54 a2 96 0d ac 3b 1e fc 90 b9 c4 0d b7 88 a7 8a 7e 11 36 eb 8f 15 bb 79 0e 2a d1 f4 a6 ce 27 f3 06 b7 31 b7 28 82 95 bb c2 6e 79 a2 d5 6a 5b 4f a9 15 74 29 43 22 1c 7f ed ef 58 80 b8 c9 b1 f1 2a 6f 9a b7 32 35 1a 6a ab a5 68 de a6 58 73 78 87 4c 05 ca 2b 2b 01 6f 5d 66 bc db 64 3d 0f d7 00 00 00 00 00 00 07 da 57 fd 91 5a 6b b4 8c 1a 39 56 74 94 7f ed 04 3e e7 b6 f0 8e 80 9f dd 91 7a f1 45 60 22 46 18 5d 83 02 21 ca aa 6d 97 a5 d2 0e 0c ed e1 15 2f 62 d5 6c 85 97 12 d1 ab 8f ad 14 5b f0 b7 90 22 82 3b 51 f7 14 bb e2 7a 27 01 22 22 7e bc 1a b6 21 a6 4d a1 ef 07 6c be 3d 68 e8 ff 39 bd 32 8a 6e ee ac 64 60 Data Ascii: n[O3~Vdlbh{R?@aT;~6y'1(nyj[Ot)C"Xo25jhXsxL++o]fd=WZk9Vt>zE`"F]!m/bl[";Qz'""~!Ml=h92nd`
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: eb 6d f5 29 5f 54 cb 6c 88 ac 53 33 40 9e 7d f7 d4 ff 8f d4 10 bc 89 33 bc 56 9c e5 ab 24 9a ac b5 8b 9f 33 01 82 e6 6b f1 49 cf 5f a6 fe ca ca 8a bd 0c 73 5f 8e 8e d5 52 88 7a ea a9 4c 82 78 3e 4d ee d6 20 cf 27 28 26 5e 8a f6 8f e6 f8 7d 94 b0 e3 92 a5 3b d1 bc 3a 6b 81 e5 39 d8 ac ac 6b 7c 1d 0f a1 a3 3e 57 2c 1c 11 14 ca 29 b1 b1 05 65 af d4 ea 35 85 a7 95 7c 76 6f 88 cd 2c 34 38 52 7f 30 29 72 15 f7 1d 9d e2 c4 19 81 fc 7b 2a e7 99 55 c0 8c 42 4a b2 e3 be e1 47 99 4d 9d 97 27 10 73 d4 9f 6d 38 ad 71 c8 9d 82 11 df 7a c8 eb 8c 75 57 9b 06 83 ba 7c 87 7e 92 ca 36 b9 d2 fe dc e4 01 17 7f 2a 4e ee 14 42 e9 73 71 10 2c 8d c7 83 2b fe e7 6c c2 16 f5 20 b9 5a 62 10 e1 c1 fe 7b 28 0c f2 ad 66 37 f1 24 2d 6c 72 ae aa b8 ea 14 25 f1 4d 51 72 07 fb aa c8 53 f5 Data Ascii: m)_TlS3@}3V$3kI_s_RzLx>M '(&^};:k9k\|>W,)e5\|vo,48R0)r{UBJGM'sm8qzuW\|~6NBsq,+l Zb{(f7$-lr%MQrS
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 16 31 8e 1b d8 d9 73 e6 91 85 fa c9 57 c4 23 34 e3 77 39 c8 6f 65 75 4c af ea 51 69 2f dc 62 58 28 41 c0 d0 02 5a 0f 45 8a e6 4a 12 e7 64 aa de af 66 61 f9 2e 09 07 86 28 36 0f 13 88 70 fa fa f0 81 2d a2 c0 55 33 69 ec d1 98 53 b4 3b e0 f3 15 02 ea 53 8b 40 d5 ea e6 12 36 df 36 d1 0b da d2 6e 5d 86 c3 09 ab c8 57 2d 87 7f 4e 85 9d b0 91 58 45 86 93 cf 44 3d f1 dd fb bf 60 f5 50 1d 38 69 6d a7 ce 67 65 dd c9 cb 48 38 ad a4 3c 11 3a 51 df eb 43 3d 5c 8d 58 55 15 fa 02 6e 5e b1 e7 97 cc 2b fc ec 84 49 9b 31 35 70 06 35 a4 cb 87 3c 97 59 8f a2 40 8f bc ad 09 91 04 44 4c 8a 82 3d 2c bb 35 88 63 17 ae 96 5e cb 63 02 75 7a 23 f2 7f 2f 94 e3 d7 b5 0f bc 52 56 21 a4 14 09 18 44 6d e9 ac 18 16 ce 45 9c 85 29 4a 46 38 5a d3 c0 8c 24 1f ca 70 8e ba d9 c6 d3 43 cb ec Data Ascii: 1sW#4w9oeuLQi/bX(AZEJdfa.(6p-U3iS;S@66n]W-NXED=`P8imgeH8<:QC=\XUn^+I15p5<Y@DL=,5c^cuz#/RV!DmE)JF8Z$pC
2024-10-25 08:16:25 UTC	1379	IN	Data Raw: 6c 90 29 18 91 54 df 26 f2 da 68 02 f2 29 3a 3d 0c 71 14 9b fa fb 0d ef 50 eb 37 03 6d 30 98 2d 57 69 96 1f 39 6d 34 3b c2 0b 6b 4c be a6 fc a2 ab e1 17 85 a3 37 d5 2d 06 f6 03 98 c3 c1 5d 61 3b de cc e4 a3 ab 52 c5 68 a4 84 d0 af 58 fc 1e 21 8b c2 a8 cd 5d 70 ab 29 b0 f2 8f ed fc 11 a1 5f bb 2d b3 c0 c9 f9 e6 aa b0 04 b4 9a 02 6b 3c a2 2e b9 33 cf 50 5f 47 d8 d0 6a 60 86 98 c3 58 eb 0f ef 44 c9 7b 9d 4f 82 af 08 10 7b 35 18 ef 5f a7 10 0f ba b2 a1 4f 1f 8f 38 ce 8c 71 cc 67 c9 27 03 ab 11 bc 39 3e a2 61 72 2c ea 90 2c aa ff 74 92 c6 72 83 f5 e8 31 75 9a d4 dd f2 2c 13 07 5f 54 9c 3c 94 6a 50 08 6b 3c 60 06 97 7e aa 79 c4 d7 c0 7d e8 a4 84 e7 85 6f ff a9 67 40 6d a7 72 da 64 2c e6 ce 82 6d a3 66 77 a8 34 e0 71 39 b4 14 cd c2 be 22 ca 69 8f 7e 4a 61 35 60 Data Ascii: l)T&h):=qP7m0-Wi9m4;kL7-]a;RhX!]p)_-k<.3P_Gj`XD{O{5_O8qg'9>ar,,tr1u,_T<jPk<`~y}og@mrd,mfw4q9"i~Ja5`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49778	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	1298	OUT	GET /elasticsuite/tracker/hit/image/h.png?page[store_id]=2&page[cms][identifier]=home&page[cms][title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[type][identifier]=cms_index_index&page[type][label]=Page%20d%26%23039%3Baccueil%20CMS&page[locale]=fr_FR&session[uid]=a8d192db-5991-52a6-41a9-76e4bd77e9b0&session[vid]=24d84efb-95be-2629-9e94-c7ebe5f23039&page[site]=www.retif.eu&page[url]=%2F&page[title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[resolution][x]=1280&page[resolution][y]=984 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb
2024-10-25 08:16:26 UTC	119	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75 Cache-Control: max-age=0, must-revalidate, no-cache, no-store
2024-10-25 08:16:26 UTC	4013	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:26 UTC	484	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 44 65 62 75 67 2d 49 6e 66 6f 3a 20 65 79 4a 79 5a 58 52 79 61 57 56 7a 49 6a 6f 77 66 51 3d 3d 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 65 36 65 38 38 62 64 65 31 39 61 32 64 39 36 61 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 65 36 65 38 38 62 64 65 31 39 61 32 64 39 36 61 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 Data Ascii: X-Content-Type-Options: nosniffX-Debug-Info: eyJyZXRyaWVzIjowfQ==X-Frame-Options: SAMEORIGINX-Platform-Server: i-0e6e88bde19a2d96aX-Platform-Server: i-0e6e88bde19a2d96aX-Xss-Protection: 1; mode=blockAccept-Ranges: bytesDate: Fri, 25 Oct 2024
2024-10-25 08:16:26 UTC	75	IN	Data Raw: eb 0c f0 73 e7 e5 92 e2 62 60 60 e0 f5 f4 70 09 02 d2 8c 20 cc c1 04 24 27 94 07 df 03 52 6c 25 41 7e c1 0c 60 90 b7 8c 7d 22 90 e2 f1 74 71 0c a9 98 93 9c 90 90 00 e4 b1 30 30 7e 13 b7 08 05 c9 7b ba fa b9 ac 73 4a 68 02 00 Data Ascii: sb``p $'Rl%A~`}"tq00~{sJh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	619	OUT	GET /media/wysiwyg/home/sacs-1-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:26 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 94331 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "2YX9YGFGSmLCGdmu5PVQRd/GLN6zRMDHLIiZRHMmw7g" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=94331 idim=400x400 ifmt=png ofsz=94331 odim=400x400 ofmt=png Fastly-Io-Served-By: vpop-etou8240196 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016277e843c2b9cd04685927792882-98011b3b3407371c-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72187 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960064-PAR, cache-dfw-ktki8620074-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 69 8c 65 e9 79 df f7 7b b7 73 ce 5d aa ba aa 7a 99 99 9e 99 9e 45 dc 29 52 0b 69 6a a1 64 51 32 e5 48 b2 4c d9 a2 15 d9 71 1c 41 46 64 24 4a 3e 24 40 0c 01 5e e2 28 31 90 44 c8 e2 c4 70 6c c3 41 e2 d8 41 00 5b 52 60 0b 91 2d 53 16 25 52 a6 24 5a a2 34 14 b7 e1 0c 87 b3 f5 5a 5d cb 5d cf f2 ae f9 f0 9e aa 21 a5 a1 44 0e bb bb ba ba cf 0f 28 74 77 55 f5 b9 ef 3d f7 de f3 9c f7 79 9e ff ff 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 81 Data Ascii: PNGIHDR6 IDATxiey{s]zE)RijdQ2HLqAFd$J>$@^(1DplAA[R`-S%R$Z4Z]]!D(twU=y
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: b7 58 eb 51 29 a1 7c cb 73 1f ff b7 3f bd 7f ed 99 3f 76 f6 a1 37 fc fa 09 bd 64 03 f7 19 f2 a4 17 30 30 f0 6a d4 b3 2b af 7b f1 53 1f f9 8d d4 5e 79 fd f6 58 50 92 30 22 32 9e 4c 40 16 dc dc 5f f3 e4 1b de ca 13 8f 3f c9 6c 6f 8f bd bd 9b ac 57 2b 6c db 52 af 56 44 ef 51 42 21 92 c4 fb 00 08 46 93 29 aa 2c 91 52 a1 94 c6 fb 80 0f 91 84 c0 39 47 db b5 74 9d 25 f8 80 b7 0e 6f bb 9c 46 12 12 44 be f8 a7 04 88 5c 8b 08 21 50 94 25 5a 29 52 cc 69 a8 98 02 46 1b 88 91 e0 72 fd c3 3b 47 74 b9 18 1e 9c cb c1 cd fb 1c 20 a4 24 78 9f 53 01 42 10 53 24 c5 44 e8 77 27 52 4a 84 c8 f5 90 fc 25 10 80 29 73 31 be 6b 1b 7c 88 e8 b2 a2 a0 1b 3d ff d4 47 7e 7e be fb dc d7 9f e4 6b 37 70 ff 30 04 90 81 bb 8e e5 f2 e5 4b d7 9f fe b5 0f b9 1b 2f 3d e4 eb 19 ab e5 8a ce 59 9c Data Ascii: XQ)\|s??v7d00j+{S^yXP0"2L@_?loW+lRVDQB!F),R9Gt%oFD\!P%Z)RiFr;Gt $xSBS$Dw'RJ%)s1k\|=G~~k7p0K/=Y
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 74 ee a4 22 d1 97 67 88 21 a7 cf 48 1c 07 8d 18 23 09 f0 c1 63 ad 45 29 89 94 2a 17 d0 a3 c7 3a 87 56 0a eb 1c 6d d3 30 2a 2a 52 88 39 54 fa 80 52 86 a8 c6 c4 18 d9 1e 4b d2 ea e6 7b 9f f9 ad 0f 7e a0 2c bb f2 8e bf c0 03 f7 34 43 00 19 38 31 52 10 1b 7b 9f ff e4 2f 1f 3c fb d1 b7 3f ff a9 df 62 35 df 23 91 68 db 06 a3 0d a3 d1 84 04 dc 9c cd f8 9e f7 bd 8f 73 0f 5d e4 f2 e7 5f c4 b5 16 5d 96 28 a3 89 08 92 90 48 ad d0 45 89 54 05 11 81 36 15 52 1b a2 c8 69 2a ef 1c 32 25 44 4c c7 b5 0c ef 3d 29 a6 6c 6a 68 14 3e 0a 5c cc a9 ae 90 f2 c5 3d 86 44 4a b9 bb 4a a0 48 31 7b 56 09 91 5b 81 95 32 90 f2 f7 9c f5 28 a9 88 31 e2 83 03 12 46 69 72 ef 54 ca b5 18 eb f0 ce e3 82 45 09 81 91 0a ad 25 da 18 84 d0 28 6d 10 42 1c a7 c1 00 94 d2 a4 18 88 c1 61 4a 43 42 a0 Data Ascii: t"g!H#cE):Vm0R9TRK{~,4C81R{/<?b5#hs]_](HET6Ri2%DL=)ljh>\=DJJH1{V[2(1FirTE%(mBaJCB
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: b2 22 b4 4b 9e fa c5 9f 61 3d db 65 77 7f 0f 7c 6e cb f5 21 d1 b5 4d 4e 8d a5 9c e6 d2 85 21 25 18 8f c6 f4 ce 8c fd 2e 45 a1 44 9e 3f 92 7c c8 6d c8 2a 17 fc 85 d2 a0 0c e3 28 69 5d f7 76 b2 07 64 3c d1 77 c6 c0 a9 66 08 20 03 b7 8b 8b c0 9f 06 7e 00 d2 7b 2e ff ee 87 cc 95 4f 7c 08 b7 5c 31 d6 5b 94 85 40 4b b0 a2 c5 f7 0a ec e8 3d d7 6e ee f3 0d df fe 9d 3c f1 c6 37 f1 dc 67 3e 8b 5e b4 d9 ea 5c 24 9c eb 40 90 db 6c 85 20 44 4f 65 46 68 65 a8 eb 25 65 59 e6 c2 f9 51 fd 43 4a 8a be fe 11 52 a2 e8 0b ca 3e 04 94 d4 48 a5 30 65 91 85 7a 09 7c 04 11 12 45 59 22 94 41 97 0a 64 22 26 cf 7a b9 22 b8 84 b3 01 17 22 42 6b 92 50 5c 99 35 38 1f 31 c5 04 53 4e 98 4c 36 18 6f 4f 39 33 9a 30 1a 6f e6 f6 dd a2 3c 6e 07 96 7d 71 ff 4b 4d 52 d8 bd 7a 93 58 df 20 74 2d Data Ascii: "Ka=ew\|n!MN!%.ED?\|m*(i]vd<wf ~{.O\|\1[@K=n<7g>^\$@l DOeFhe%eYQCJR>H0ez\|EY"Ad"&z""BkP\581SNL6oO930o<n}qKMRzX t-
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: e6 4b 9e fe dc f3 bc f9 6b df ce 3b be f1 1b f9 f8 c7 7f 97 42 29 46 e3 71 ee 9a f2 1e ad 34 c6 14 58 eb 72 2b ad 31 c8 98 b2 ea 5c 68 44 12 34 eb 86 aa 39 fd 4e e5 b6 69 59 dc b8 ce 64 4a ef e5 65 f0 d6 e3 82 c7 88 dc 59 26 8c ce 62 c7 94 ad 51 a4 32 08 1b c0 7b 26 d3 29 f3 d9 21 ce 39 8a a2 20 44 9f 87 64 41 f6 fb 52 9a 10 13 31 45 a4 92 28 a9 58 ae 16 a4 e8 11 d2 bc da 92 14 f0 27 fa af 97 81 bf 43 0e 26 07 77 ec a4 0c dc f5 0c 01 64 e0 f7 f2 35 c0 7f 0e fc 08 30 7d 2d 07 e8 da 9a 14 2c 65 51 12 7d 64 b1 98 b1 5e af 68 57 2b ea ba 41 29 4d 67 3d 5a 4b 82 77 ac 66 4b ce 6c 9e 21 88 48 a1 35 9d eb 30 a6 a0 34 a6 f7 95 8a f4 e6 b6 b9 48 ac 15 89 3c e5 2f 06 c1 e2 e0 90 9d 53 3e 36 69 7e b8 c7 7a b5 c4 1a 0d 52 61 7d c0 39 0f 24 88 a0 4d 81 ea db 90 55 ef Data Ascii: Kk;B)Fq4Xr+1\hD49NiYdJeY&bQ2{&)!9 DdAR1E(X'C&wd50}-,eQ}d^hW+A)Mg=ZKwfKl!H504H</S>6i~zRa}9$MU
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 0e 9f 04 cb ba e5 e0 f0 90 ba 5e e1 9c c3 b9 80 0b 1e 91 22 75 b3 24 46 87 77 2d d6 da e3 61 50 d9 cf 49 12 53 c0 7b 8f 54 0a 6d 0c c6 e8 63 9f 27 2d 35 31 74 74 ed 57 9d cb 3f 11 bc 6b b9 f6 dc bf 65 54 48 a6 1b 67 d8 d8 dc 64 34 ae 28 8a 22 4f 4c 94 92 18 d2 b1 90 50 48 e8 82 c5 c6 48 14 63 b6 2f 3c 0c 64 df 2b 33 3e 8f d4 23 50 89 28 03 42 09 fa 38 d2 cf 39 01 21 12 10 41 e4 20 24 01 d7 dd 36 1d 8d 26 77 6d 3d 03 fc 55 60 74 bb 1e 68 e0 64 18 02 c8 bd c9 f7 90 ef fe fe 0e 70 ee 4e 3d 68 f0 16 bb 3e a4 5e ae 71 75 8b 22 d1 36 1d cb e5 8a c3 c3 19 b3 d9 8a f5 ba cd 75 91 18 21 44 4a 63 38 38 dc a7 b3 5d 36 49 14 ba f7 6d 4a 94 c5 2b fa 04 01 a4 10 09 2e e7 f8 95 52 08 72 8e 5f 2b 4d b3 9a df a9 a7 79 4b 69 9a 9a d9 c1 21 cd ba 61 bd 5e d1 75 1d 89 3c bf Data Ascii: ^"u$Fw-aPIS{Tmc'-51ttW?keTHgd4("OLPHHc/<d+3>#P(B89!A $6&wm=U`thdpN=h>^qu"6u!DJc88]6ImJ+.Rr_+MyKi!a^u<
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 04 6c 9e f0 5a 06 be 0c 86 00 72 7a 78 17 d9 f0 f0 47 4f 7a 21 af 86 73 6b 6c 5b b3 5e ae 71 ce 52 8d 4a 54 af 82 06 fa 59 14 d9 aa 24 a4 9c d3 8f 31 22 c6 1b 6c 5d 7c 02 25 8b 5c 44 0f 01 29 15 42 28 bc 8f 79 32 5f 2f 88 0b c1 13 42 c4 14 45 7f 67 9e 90 4a e2 fb b1 b7 ae 3d 5d 01 e4 f0 fa 65 62 b7 26 04 4f d3 ac f1 c1 23 fa ba 45 e8 77 60 10 09 d1 65 25 7a 70 a4 14 59 ae d7 3c fc e4 eb 10 af a2 be af aa 09 de bf d2 5c 20 45 36 56 4c a9 3f df 42 f4 69 ad dc d1 e6 9d 47 2b 81 b5 77 95 8e e6 2f 90 8b ec 43 6d e4 2e 67 08 20 77 3f 8a dc 61 f5 11 72 9b ee 5d c9 7c be cb b8 2a 51 64 e1 db 91 a5 c6 72 b9 24 45 b0 9d cb fa 35 01 4a 69 10 0a e7 3c e5 99 33 6c 9f 7f 88 e8 2c 88 d4 5b 97 24 42 c8 85 5f ef 3d de f9 7e 30 52 7e 2c 1f 42 af d4 16 78 1f 48 29 60 a4 24 Data Ascii: lZrzxGOz!skl[^qRJTY$1"l]\|%\D)B(y2_/BEgJ=]eb&O#Ew`e%zpY<\ E6VL?BiG+w/Cm.g w?ar]\|*Qdr$E5Ji<3l,[$B_=~0R~,BxH)`$
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 1b 30 1e 05 64 d9 9b 8c 09 f2 e8 e1 94 12 52 0a 8c 36 28 a5 58 cc ee ba 4e ac 3f 88 f3 64 53 c6 bf cc 6d 9e 71 33 f0 a5 b9 ab 3b 7b ee 03 46 64 61 e0 9f 3d e9 85 7c 35 b8 ae 61 54 40 21 0c 4d d7 d1 36 f9 e2 25 95 c2 db 44 55 55 b9 a0 9e 22 46 6b 14 82 b2 30 ac 6c f6 76 3a 42 2a 4d 14 9a 48 42 f5 6a ec 98 7c af 6b c8 9e 58 29 09 54 6f ce 98 79 45 d3 50 96 0a ef 4f 47 11 fd da e5 e7 d1 46 d1 d4 0d 2e 69 84 2e f0 b6 cd 96 23 5d 87 f5 10 10 d8 ce 92 44 6f 3b 62 1d 5f f3 e4 1b f9 bf ff d6 4f f2 c6 b7 bd 19 6d 14 b3 83 03 0e 77 af a3 48 cc 67 33 2a 13 79 f4 91 07 79 ef 0f fe 20 42 29 04 b9 9b 2d f8 2e cf 59 49 a2 37 15 cb 7a 10 21 25 28 c1 f6 f6 26 8d 4e 7d cb ef a9 b9 af 54 c0 4f 91 77 24 3f 0a ac 4e 76 39 f7 1f 43 00 39 39 2e 02 ff 9c 53 98 b2 fa bd 38 db e2 Data Ascii: 0dR6(XN?dSmq3;{Fda=\|5aT@!M6%DUU"Fk0lv:BMHBj\|kX)ToyEPOGF.i.#]Do;b_OmwHg3yy B)-.YI7z!%(&N}TOw$?Nv9C99.S8
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 85 f7 01 91 60 bc 71 86 df db 81 59 96 13 a4 54 8c 47 23 42 ca 1e 5a 02 08 de 11 53 20 f4 4e b3 3e 25 48 0a a4 42 a9 a3 3a 8a 40 09 8d 6d 5f bb 1a 3d a5 d4 0b ef 02 7b bb 57 59 2f 17 2c 67 fb bc f0 cc a7 68 76 9f c7 1d 5e a5 6d 6a 84 48 2c 57 4b 0a 23 98 2a 30 63 4d 40 e2 ca 92 51 b5 93 ad d2 63 44 86 84 e8 db 8f 9b b6 c5 0b c9 6c 3e 67 b9 6a 28 ab 44 eb dc f1 64 c5 18 22 21 24 84 12 a4 04 29 09 42 84 98 24 46 0a 36 47 1a a3 22 d6 36 c8 a3 b1 b5 79 eb 87 94 9a 7a bd 82 71 a4 1a 29 ea 66 cd fe b5 1b 38 63 d8 da d8 e0 dc b9 0b 40 89 10 86 18 13 88 88 20 f6 5a 1b 0d 22 11 93 27 b9 36 a7 c8 8a 53 57 48 7f 35 fe 0a b9 dd f7 3f 06 ee e8 cc de fb 85 21 80 dc 5e 0c f0 0f 81 7f ef 84 d7 71 db 08 ce e1 66 d7 19 95 25 b5 f7 88 94 fa b1 a9 12 a9 0d 6d b3 26 39 8f b5 Data Ascii: `qYTG#BZS N>%HB:@m_={WY/,ghv^mjH,WK#*0cM@QcDl>gj(Dd"!$)B$F6G"6yzq)f8c@ Z"'6SWH5?!^qf%m&9
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 94 02 4a 29 ac 6d f3 05 50 c8 be d0 9c c7 dd 22 60 6f b9 64 34 b5 ec 6c 8d b9 b8 35 e6 0d 8f 3d c8 ce 46 c1 c6 e8 0c de 47 aa 72 8c a5 cb 73 da a5 64 b9 5a a1 4d 09 5a 22 8c e4 cc ce 06 b6 6b 81 c0 b9 b3 67 59 af 1a da ba cd 83 9d 26 63 90 09 8a 82 28 12 a4 7c d1 d5 46 63 5d 4b 55 96 44 24 cb d5 92 72 54 12 62 60 b6 9c 13 93 60 3c d9 60 b5 6e 09 a1 63 6b e7 02 8f 5c 7a 02 48 34 6d 83 0f 9e ba 6e 58 1f cc 88 42 51 af 5b 82 8f 78 9f 68 9b 86 10 5b 2e 3e b8 c1 64 ac 30 95 42 09 c3 78 3a e5 cc d9 b3 cc eb 15 67 cf 9f 63 63 e3 0c d6 3a ca d2 e0 9c 83 83 7d 2a ef 98 cd 67 94 e5 98 71 94 14 45 89 b5 8e d6 76 28 ad d0 52 22 c4 91 3d 4c d6 95 e4 01 88 82 d8 7a de f5 ad df d1 17 dc 05 d6 d5 c4 d8 b1 ae d7 d0 da de 11 20 e1 dc 12 e7 f2 6e ac ae 97 78 1f 50 4a 63 0a Data Ascii: J)mP"`od4l5=FGrsdZMZ"kgY&c(\|Fc]KUD$rTb``<`nck\zH4mnXBQ[xh[.>d0Bx:gcc:}*gqEv(R"=Lz nxPJc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:25 UTC	618	OUT	GET /media/wysiwyg/roue-concours_2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:26 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 48287 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "qGvjslzwzi46S9BrYfu3eUj8/JnDNZcJYtcXR1wWXNU" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=169383 idim=494x444 ifmt=jpeg ofsz=48287 odim=494x444 ofmt=jpeg Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e82f59239aa4a7e272972509-a295ba950613318a-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960041-PAR, cache-dfw-ktki8620069-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 5f 9e c6 b4 ca e0 06 10 49 22 86 4c 60 f9 58 6a e8 71 9c 11 e9 4b 78 14 16 6f 69 00 5b d8 92 46 25 7c 16 62 5d e6 3d 02 f4 c8 e5 d2 b4 04 34 25 2d 1a 05 42 d6 c2 7c 95 fd a6 af 13 46 3d 06 2a 2e 3e 73 dd 2a 87 86 00 d3 25 d2 bc aa a9 98 41 cb 2a 36 ca cd ef df 9d 14 eb 24 6f 17 87 77 a8 43 2b 61 11 b4 81 26 30 56 40 39 e3 f7 4d 75 ad 1a 36 56 97 40 90 81 85 d8 3e 9e 84 8e 78 ed 9a 32 2b 17 59 63 ce 0a b3 e0 e9 c1 f3 13 be 48 fc 5d f3 bd 2c 88 c8 8b ac 80 f2 c6 a0 88 4d cc e7 3a 54 b0 48 d7 f8 a5 7e 83 b0 1b 9a f3 be 27 61 71 69 74 52 71 18 67 1e 22 98 f7 46 04 fe 1f 41 da bd 46 d9 8d ed ba dd 49 0c 51 2a b4 a1 9c 0c 22 88 d8 ae a2 7a 6c 37 ac 57 db 08 e2 8e f6 dd 92 ef c6 95 a2 f3 aa b0 64 45 1f 06 9c 72 cf 6f 9d 3d 37 1d 71 39 9f a2 de 8b 24 a4 ab 64 1d Data Ascii: _I"L`XjqKxoi[F%\|b]=4%-B\|F=.>s%A6$owC+a&0V@9Mu6V@>x2+YcH],M:TH~'aqitRqg"FAFIQ"zl7WdEro=7q9$d
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 3a c2 ae a5 ad 9b 58 91 b7 2c 58 72 c6 d8 ed 58 98 21 69 a6 8e 20 ea 9a d8 02 ec 70 ab dd 8f a0 1b 9a e8 a4 08 65 ed 18 ec 88 2b eb 7b 79 6e 1c 47 12 6a 27 9f 40 3d 49 3b 01 4e db ec 8f da 29 3e e1 2d 9d d5 a4 6a e5 83 2b 39 fd a6 f8 e8 0f 21 40 5d 7d a7 e1 7c 19 ac 96 c4 b3 49 72 e1 61 c8 07 ca 06 1e 56 53 9c 82 39 03 54 dd fd ad 8a c6 e2 0e 1d 2c d7 73 d8 5c 4a 12 e2 e2 2c 96 d6 77 0c a3 1b 81 f8 fa 1a 85 4a c5 d2 05 84 fa a6 84 fa 4f b1 7c 55 60 91 a0 96 2b a6 88 94 94 26 55 b5 28 df 01 80 ce 7a 62 b1 ee 85 49 42 08 23 62 0e c4 11 de b5 69 c7 af 23 bb e1 0b 3c f2 4b 0f 86 cf 0c f1 4a 43 29 0d 82 8f fc 27 1b 67 a5 2b e2 af e2 db 70 fb a6 97 54 b7 01 89 df 25 46 76 56 18 c8 2b eb d2 ad 46 ab cb a1 d0 6f 9e a9 08 09 06 76 04 13 da a6 8a e5 99 15 49 3d 87 Data Ascii: :X,XrX!i pe+{ynGj'@=I;N)>-j+9!@]}\|IraVS9T,s\J,wJO\|U`+&U(zbIB#bi#<KJC)'g+pT%FvV+FovI=
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 99 fd d3 d8 f6 e5 5c b5 7c 3b 8d 51 51 b1 24 43 87 31 bf 74 c1 de 5d 27 b8 5a 8e 1f f6 68 ca ea ca 0e 7d 4e 71 5b 1b f8 6c 78 67 0c 31 b8 0c c7 7c 77 22 b0 16 bf 69 d6 04 22 35 99 4f ae 0d 2c bf e2 b7 37 ac 5a 46 38 ed 9d e9 c3 1d a8 6a 30 01 98 0a 70 6f 01 59 7f 7a 8f 6e a8 04 6e f2 1d 4c 46 75 22 af 25 3d 37 e6 68 1b 0b 58 ee e4 bb 8d 89 5f f8 3b 86 04 1c 61 82 1c 1f 95 08 08 5d 81 c1 ab 61 9c c4 5c ae 74 b4 72 46 fd f4 48 ba 58 0f 5c 1d aa 87 06 06 d8 4c 1b 68 95 98 b5 b9 13 5f 34 d3 2c b2 c0 b3 98 99 23 55 fb c0 91 14 05 8a 25 38 d4 00 1c f3 5f 70 f0 63 49 26 97 ef 92 d9 db 5d 04 d6 ce 22 37 0d 32 96 31 ae 33 a7 18 df a1 3b 56 8e 4f b3 e2 e2 c3 88 df 5c 21 37 31 5b 68 59 21 24 1f bc 04 3e 1c ac a7 25 d5 86 33 8d f1 4d 61 e0 57 73 45 63 67 70 6d ae a1 Data Ascii: \\|;QQ$C1t]'Zh}Nq[lxg1\|w"i"5O,7ZF8j0poYznnLFu"%=7hX_;a]a\trFHX\Lh_4,#U%8_pcI&]"7213;VO\!71[hY!$>%3MaWsEcgpm
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: b6 0b 69 93 89 19 cc 3a 15 4e 50 63 af 7a be 2e 26 04 eb 1c d0 84 5c 02 08 e9 ef 51 e2 ad 73 0c 89 3c 17 59 5c 7c 39 ce 28 d8 8b c1 96 ee 67 ec b6 3d 15 32 5a 86 bd 96 79 74 33 b1 24 2f 6c fa 52 1b f8 63 8e 5f 2e d9 dc 8e d4 45 d5 e7 8e 10 f8 7a 24 5f c4 0d 2e 62 ec 72 c7 7e e6 83 9c dd 30 06 c8 6e a8 23 0c 2a 0c 4e 76 fc aa fc 03 9d f7 aa f4 81 be db d4 09 4c b5 ea 84 e9 eb bf 2e d9 ab 9a 35 46 65 6c 36 09 19 07 6a a6 32 00 27 39 c1 e9 56 96 4c 6c 0f ce bc d3 32 ba b6 55 6b 2a d8 23 23 a0 a2 64 f0 43 29 8a 43 22 18 d4 9c 8c 10 c7 98 f9 1a 15 89 2d 8e c3 6a e6 76 c6 ae 54 d1 70 50 94 40 e5 93 dc 60 66 be 65 ce 75 0e 67 23 d2 a2 48 d3 ef 8c d5 89 92 01 07 9f 7a dd 51 56 0b 79 25 70 b1 ae 4e 96 3b 7a 0c 93 55 e9 21 00 02 ae f3 2b 10 09 1d aa 59 6c 74 3f bd Data Ascii: i:NPcz.&\Qs<Y\\|9(g=2Zyt3$/lRc_.Ez$_.br~0n#NvL.5Fel6j2'9VLl2Uk##dC)C"-jvTpP@`feug#HzQVy%pN;zU!+Ylt?
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 21 bf 3e 04 e6 01 96 6f 09 72 99 eb 2c 67 20 ff 00 36 e2 ab b2 11 da dc f1 48 f8 9e 11 25 51 75 1a 2c 5a d4 99 40 25 31 c8 03 cc 63 90 af 46 9b ea 69 6b 81 0f 07 60 6e a6 6d 9b 2c 93 86 61 e6 39 c6 31 9a 86 8d 6e a0 02 49 20 56 f6 f3 ec d7 0f 9a ce de f3 86 5f c3 38 93 71 6f af 49 db 19 d2 cd 8c 73 fc 5c a9 1f 14 b7 e1 51 10 d6 6d 30 d3 2b 2c d1 4b b3 44 14 02 35 7a d5 db 5e 9b b4 86 cc 99 db 1d d0 83 74 86 f6 dc 5b dd cf 0a 6a 2b 1b 95 1a be 2d bb d0 c7 1b b1 e7 da 9e f1 81 c3 4c d1 cb c3 d8 f8 32 20 3a 59 f5 ba 30 d9 83 f6 3e 94 84 af 2c 8e b5 56 5d 8d 99 98 ba 07 2a a3 9e 7d 2b e0 d9 39 02 a6 40 24 e3 e9 52 2a 9e 50 a0 8f 28 d4 4f ef 75 c7 a5 36 22 c8 2f 8b bb 0c 1e 55 74 73 68 5d 20 50 fa 79 62 a7 81 8d 8d 60 4f 39 59 5d 1c 32 ce c7 03 63 cc d3 78 20 Data Ascii: !>or,g 6H%Qu,Z@%1cFik`nm,a91nI V_8qoIs\Qm0+,KD5z^t[j+-L2 :Y0>,V]}+9@$RP(Ou6"/Utsh] Pyb`O9Y]2cx
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: e0 fc 47 56 37 3e f5 93 a6 f7 7f b3 8e e1 08 20 97 19 cf 3e 7d 69 41 e7 52 f1 6d 0d ac e0 0e c3 ec 8b 3e 50 ab 95 55 66 76 00 02 c4 12 7b f6 cd 10 bb b8 14 34 e7 ce a7 f8 45 5c 0e f5 ce 32 99 3d e1 5a 56 ec 1f ff 00 8d ab 65 6d 36 14 9c f2 56 fd 2b 0d c2 ff 00 fb 86 3f c0 6b 52 b2 69 86 63 da 37 ff 00 d3 5d f4 3e 48 e4 a9 3f 2b 14 c0 82 57 57 be 2a cb ad ee 13 3d 00 63 50 51 a9 40 db 61 b7 ad 46 56 06 49 1b d0 01 57 fe 27 f2 d2 e8 5d f8 42 9e 4a 16 e7 c4 68 27 f0 d0 bb 85 c8 41 b1 63 da a6 b9 08 a0 f3 0a 2a d8 be 16 3d ea b6 e7 5e 38 17 27 95 75 d4 62 1a b7 bc 16 f2 e6 1e 1b 1f 83 23 2e 24 7e 55 80 1c c7 b5 6f 78 13 c3 fe 15 1a b0 19 32 c9 fd 2b ab c3 dd de 8a 4f c7 aa 5b c6 60 16 ef 6b 79 0f ec a6 91 9f 2c 9b 02 46 3a 7a e7 7e f4 b1 4c 77 6c ca 16 38 ae Data Ascii: GV7> >}iARm>PUfv{4E\2=ZVem6V+?kRic7]>H?+WW=cPQ@aFVIW']BJh'Ac=^8'ub#.$~Uox2+O[`ky,F:z~Lwl8
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 61 fb a3 d4 d1 61 55 54 24 69 a5 14 79 57 a8 f5 3e a7 ad 5c 90 c5 14 69 0c 59 d0 bb 96 ea ed d5 8f f4 ab fc 20 b8 ce c0 f5 e7 81 5a 9b 60 eb 7f cc 7e 83 80 82 aa d7 79 e2 f2 fe 2d cd 28 79 0e a3 bf 53 5a 0b 42 d1 c9 20 55 04 3a 95 39 1b e3 9e 47 63 b5 66 8f 5a e2 f1 df f5 1b 6b 69 b2 66 e1 42 27 92 39 9d f2 ac ba 83 22 e3 96 d8 60 7b ea a9 4a 02 36 14 e5 4e 0a 9e ea 77 15 0e 55 67 c7 16 3a c6 49 1f ca 79 8f 91 ae 36 34 58 7b 26 25 5b 69 bc a7 da 9d 45 b9 c0 ea 71 49 6c ff 00 cc 6f e5 a6 f0 b7 99 7f 9a bb 69 d9 8a 2e ca 97 da 3f 02 63 69 71 01 cb 5c c2 0b 28 1b ea 8f ca 4f cf 1f 5a ca bc 52 8c fe cd b6 3b d6 bf 86 b2 cf 1d d7 0f 90 a8 f1 49 78 9b aa b8 3d 0f 4c f5 a4 8c cc a4 ae e1 81 c1 07 b8 e9 55 77 83 75 4a 8f 8a a0 44 40 2d 9b 45 b7 45 af 00 09 6f d5 Data Ascii: aaUT$iyW>\iY Z`~y-(ySZB U:9GcfZkifB'9"`{J6NwUg:Iy64X{&%[iEqIloi.?ciq\(OZR;Ix=LUwuJD@-EEo
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: ac 0e 18 20 e5 81 9c 50 ae d2 15 07 5e 73 80 73 be 31 ca bb 23 1f 13 04 63 96 fd e8 e9 98 e5 09 5d 96 3c e1 b5 65 49 d8 8e 62 af e1 d3 59 c5 79 0c 97 50 19 23 5c e5 07 e2 db 02 85 0e 59 86 36 1b e3 d6 a3 e6 c9 62 c3 38 c0 ff 00 6a 7d 32 d2 d2 4d c4 5a d9 42 60 82 11 30 99 56 76 d0 84 30 07 6c 67 0a 7b fa 62 9a 71 ce 20 b7 73 5b 47 13 96 8a 0b 75 8f 51 04 6a 7e 6c 70 7e 94 a1 2e 24 05 82 b1 56 65 20 9e e0 ed 8a 87 98 8d 27 f3 e7 4c d6 9d 52 40 c0 09 4c 59 13 17 84 2d c9 25 fc 52 e3 4f ee e8 c6 ff 00 3c d4 e3 91 80 61 9d 9b 00 f6 da 86 45 23 4e fb 63 6a 31 45 17 01 7d e4 a2 14 9e 48 e3 8d a4 7c e1 07 2e e4 f4 aa 78 5a a4 a6 79 26 32 07 66 0a 74 a8 38 cf 21 be 30 28 7b a9 11 a6 21 db f6 51 10 5c f7 73 d3 e5 4c 2d af 2c 2e cc f2 70 f9 25 59 ad 66 5b 69 84 c9 Data Ascii: P^ss1#c]<eIbYyP#\Y6b8j}2MZB`0Vv0lg{bq s[GuQj~lp~.$Ve 'LR@LY-%RO<aE#Ncj1E}H\|.xZy&2ft8!0({!Q\sL-,.p%Yf[i
2024-10-25 08:16:26 UTC	1379	IN	Data Raw: 80 0d 5e 19 18 23 3b 52 c4 bf 81 9b 0c c5 09 27 39 1d 4d 28 aa 5a f7 59 b0 00 83 bf 55 a2 c9 4d b7 01 b8 07 33 30 55 eb 8d cd 59 c4 ec f8 75 bd b8 55 07 c4 fc 21 77 27 de b5 b0 2e b8 c6 1b 52 9e a3 7a a8 a5 b0 94 87 d1 e2 0e 59 e7 48 2b 36 4f d8 59 0d 2b cc 5d 1d 48 04 11 9e 59 15 d9 62 99 63 12 95 60 85 8a 87 c6 c5 87 40 6b 71 c7 23 b5 36 a7 c4 65 0e 3e 0c 0d cf a5 62 1e 59 de 25 81 99 bc 20 da b4 f4 04 f5 ac 4c 86 91 cd e7 8e 8b 72 83 24 93 5c d2 0e 0e 6a 6e 98 df a5 52 40 07 7c f2 a7 08 2d 38 d8 8c 29 23 49 e7 d2 ac 84 6a 50 a0 e3 27 6f 7a e2 ef c8 6f 8d 85 4d 46 08 04 63 3b d7 85 ca ef 5f 28 d6 ac 09 c6 83 90 3b d1 48 54 00 48 c9 c1 c0 a8 68 fd aa 91 b0 1f f9 8a 9a 01 e2 10 08 c0 ce e7 fa 52 b8 cf dd 10 17 10 2e fa 81 1e 95 53 05 50 dd 48 1c b1 ca 88 Data Ascii: ^#;R'9M(ZYUM30UYuU!w'.RzYH+6OY+]HYbc`@kq#6e>bY% Lr$\jnR@\|-8)#IjP'ozoMFc;_(;HTHhR.SPH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49788	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	878	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-imbattables-mobile.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16896 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "r8Fem054vH+Dm4jj6dyukia8K6exMY8rZOypU+5VgC4" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=93878 idim=700x400 ifmt=jpeg ofsz=16896 odim=700x400 ofmt=webp Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-18016277d4e687400892544f97551de0-4b59dac941ac4067-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960084-PAR, cache-dfw-kdfw8210173-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 49 46 46 f8 41 00 00 57 45 42 50 56 50 38 20 ec 41 00 00 b0 06 01 9d 01 2a bc 02 90 01 3e 6d 36 97 48 a4 22 a2 24 23 13 89 50 80 0d 89 65 6e e3 4f 40 36 b9 e7 95 29 5c 1b 54 33 a6 df 78 e3 12 7f e3 fc a0 7a 4f ee fb db 7a 96 e7 31 e4 39 91 fb 4f f3 fe 71 ff e0 7e d2 fb 96 fd 1b ec 07 fa cd ea 5b ff 27 ad 6f ed 1f f9 fd 47 ff 53 ff 43 fb 79 ef 11 fe df f6 33 dc f7 f8 1f f6 1f b4 7f 00 1f d2 ff cf fa ce ff d3 ff eb ee 53 fe 0f fe 5f ff ff 70 ff e7 bf e5 7f ff fa f2 fb 24 ff 7d ff c9 ec 2d fb 8b ff e3 d8 03 ff ff b5 ff f0 0f ff fd 63 fc 46 f4 c3 e6 6f e3 7f 29 bd 11 f2 c1 ec 7f df 7f 6c 3f c2 fb 56 58 b5 a9 97 ce 7e ee fe 93 fb b7 b6 3f ed 7f db ff 8b f1 b7 e3 57 f8 7e a1 1f 8f 7f 2d ff 31 fd d3 83 7f 5c ff 5b ff 8b d4 2f d8 9f aa ff c9 fe f5 f9 5f f0 eb Data Ascii: RIFFAWEBPVP8 A*>m6H"$#PenO@6)\T3xzOz19Oq~['oGSCy3S_p$}-cFo)l?VX~?W~-1\[/_
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 4e 77 fc 47 a2 ca 93 e8 03 fc c6 7a 9d 73 a8 29 ff 78 9d 06 d5 40 15 a8 45 ad ad fb df a4 45 ce af de eb fb 0c 0f 75 03 8b 7b e8 b6 ae 0b e6 f6 d5 24 37 c5 eb 43 71 d5 d8 16 b6 54 69 85 f8 c3 5b 03 c5 e2 5b bf fd 7c 15 81 ed 77 2e 43 46 b7 e5 67 a2 d6 70 b4 75 71 5f 3e b6 62 b1 9b e1 6e c4 cb 77 78 6b c9 e2 74 47 16 0a d9 f0 fc cd 23 18 7b 38 7a 27 26 21 99 32 21 fb f1 17 13 4c e9 55 f2 4b 52 f4 00 d4 0d 13 fb 10 e9 fe f5 bc 3d 48 e6 bd 69 30 1b 73 a7 23 b7 31 f7 35 b5 cf a2 79 63 8a 22 ad 08 28 f7 37 28 fd a5 4e 24 1e 0d 09 81 1a 45 43 00 b7 70 96 c8 37 46 1e 38 72 e9 bf bb f4 10 ee 5b c8 83 c9 d9 fd 32 d9 da f5 83 4f 45 88 12 2d 07 78 cc c6 cc 01 44 5e 44 73 da c1 a4 3d 84 21 22 dd d8 34 87 5b f7 1c 1d 8e d9 ae db 1d fd 42 56 1a 14 6f 55 5f a5 e3 8b c4 Data Ascii: NwGzs)x@EEu{$7CqTi[[\|w.CFgpuq_>bnwxktG#{8z'&!2!LUKR=Hi0s#15yc"(7(N$ECp7F8r[2OE-xD^Ds=!"4[BVoU_
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 7d e9 be 23 8a 2a dc 20 cf 98 42 8e de 09 c4 b6 94 34 ac 22 0e c1 de b0 41 6c d0 04 84 c9 49 e6 b0 35 62 30 9e 44 d7 73 1e 3b ea 2b 72 a2 b6 99 39 2f ab 96 04 4c b4 6c 2a 17 77 14 ef 08 8d 2f 39 cf be f5 dc 5f 62 b1 48 86 cd c7 31 ba 7c 83 2d df b4 e7 2a df d4 f1 5f 4c eb 51 af 6d 8a b9 4e f1 f4 ac 7a 80 66 33 ee df 92 ab 84 7a 4e 44 aa 97 a1 3a c4 75 55 68 0a 29 41 c2 f6 97 d6 75 97 f2 d8 94 9d e2 9a 9d d2 a9 fb a0 f2 0f 68 e0 01 f6 bc 2e 5c d4 68 2c 82 9c 7d 22 6c 56 a1 72 d0 5b e2 75 ae e9 f8 d1 be 9a 27 62 21 3c 6f 38 bd 35 3e f8 93 c6 13 eb a2 8b 74 71 db dc f4 13 1a a0 92 6b 89 67 4d 78 90 3f d5 28 d5 3d aa cd e9 c2 03 60 73 2e d4 d5 41 36 9e 43 d4 c2 e7 79 14 c4 59 20 8e 3e ca 13 52 4a 0f 07 4f 69 58 6d d4 04 4a 83 92 83 bd bb 0c 2c 91 76 26 13 a4 Data Ascii: }#* B4"AlI5b0Ds;+r9/Llw/9_bH1\|-_LQmNzf3zND:uUh)Auh.\h,}"lVr[u'b!<o85>tqkgMx?(=`s.A6CyY >RJOiXmJ,v&
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 7b e7 7c 6e 35 cb 19 00 d3 5f 9a 65 c6 92 43 9a fe 37 a1 47 1d ab dd ce 32 49 0d 7e 66 1a ac 65 87 30 3f b7 f4 cc 23 32 5b fb 0a 6b 0e 6e 75 60 3a 8e 1c 96 66 fe bf a6 1a b6 b3 4b d2 01 ba 44 72 b6 d5 75 a9 5b 32 4a a4 0f c2 34 17 91 07 20 86 6b f2 06 53 aa be 4a 3e b0 33 9a 64 9e 20 4a 82 06 c8 e0 be 88 bd 39 95 88 74 cf de d6 c1 58 f6 dd fd bf 4a 71 2e 3f fe c4 7b fc f2 ac 3b 7f 73 25 ea 7b 96 71 c9 d0 92 b5 98 d1 36 a7 5f 06 7c e8 ce d3 51 d6 68 12 ef 6a 4b 02 81 8b ae 28 6f 33 41 a7 aa fd b7 17 fa a9 11 c3 54 38 ee b9 85 37 26 5a 5c 46 f3 b2 36 7b b7 7a 7c 6c 03 7d e5 cb a1 d8 58 c1 01 62 7f 7c bb db f6 08 2d a7 e6 a1 06 17 6a 17 09 7c bf 0b 80 74 bb 94 4b a1 7e 7e 6c 6e a6 95 fe 15 33 25 69 2a eb 21 fb 3c 71 d9 cd 3e 9c 49 6a 86 a1 32 fe 82 2b 6b b3 Data Ascii: {\|n5_eC7G2I~fe0?#2[knu`:fKDru[2J4 kSJ>3d J9tXJq.?{;s%{q6_\|QhjK(o3AT87&Z\F6{z\|l}Xb\|-j\|tK~~ln3%i*!<q>Ij2+k
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: a6 67 16 81 af 2a 9a 94 a6 3f ec fd fc c7 f8 71 00 3a 26 81 43 af 11 ba b7 a1 f4 14 e5 89 9b 0a 5c 22 e5 90 76 14 20 79 58 75 39 5e 71 f8 08 8f ee 5f 5d 67 91 3c 23 2f 5a 19 c0 0d 84 7e a3 0b ab a8 86 e9 a2 cc 1a 16 d7 31 24 2a a9 93 82 c2 7e 09 1f 40 01 d6 12 36 e4 31 a1 8d ce 5a e0 a1 28 f6 dc b2 eb 33 ac 47 29 9b 71 33 ce b1 a6 c3 24 c8 78 16 6c ec 3f cc 5e bf 8a 95 fc cd e8 5f e2 22 4c f0 85 88 02 5d 37 f6 db a0 9b c7 39 b4 c1 8f 46 10 9c 9c 46 4a cb 62 15 63 ad e7 5e c0 63 22 a4 97 bc 63 1e 87 cf af ad 6b fd 20 32 76 c5 3a d6 20 85 75 b9 0d 57 dc 3f 76 3e a1 5c a9 28 b7 9a 1c c7 2f a4 9c 7d 1b da 61 f1 ed 51 9d 78 63 96 50 4a ea 6f 06 0e 18 c2 da f0 8b 8a 25 af 41 4c 8e 2e 20 67 ad 7e 7e ca 3c bf a2 23 13 a7 7b 6f d6 e1 5a c8 b9 eb c6 0d 17 c9 bd c2 Data Ascii: g?q:&C\"v yXu9^q_]g<#/Z~1$~@61Z(3G)q3$xl?^_"L]79FFJbc^c"ck 2v: uW?v>\(/}aQxcPJo%AL. g~~<#{oZ
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: cc ff 6e ec e3 ef 5a e1 b7 c8 c7 f4 4f a6 a9 90 45 d0 38 9a cd f6 4e df 81 e5 62 e6 68 fd 7b 2d 71 d0 1c f0 f6 8e 64 79 f5 58 08 e3 17 01 c3 cd 08 74 b9 50 20 73 49 f0 e6 ad 0d d4 a2 b8 66 fa 51 4c 04 c7 ea bb db 99 d7 03 99 31 56 d7 ab fb 17 aa 5c 2e db fd d2 b9 f9 17 4f 3e 5f a3 e3 06 4b 1a 79 7b 63 33 28 85 f0 5d ab 1f 9f 92 4e 9b eb 21 39 cf 16 13 aa 5f 39 ef da 73 87 e0 91 42 cd 51 5b ce 98 c7 d3 4a 0d 80 d5 97 31 99 5a 9a c7 13 f1 c0 fc 26 e2 61 45 ee c2 30 e4 13 dd 0e 29 97 bc ef ad 85 c7 b1 72 f3 20 43 ba 0d aa b3 db f8 ee 93 13 e1 df 1c 48 a6 80 90 a3 77 f9 d8 45 b5 39 c7 53 c0 1a 83 3b 21 c9 d3 c1 c3 7b a6 09 ce b9 d0 b8 1f 02 46 e0 2b 30 17 1c a1 3a 18 e2 fd 11 cd 38 d7 58 8d c3 64 23 89 a6 68 1c ba 5f b8 40 89 98 64 ca d8 51 07 fc e9 3a fb 21 Data Ascii: nZOE8Nbh{-qdyXtP sIfQL1V\.O>_Ky{c3(]N!9_9sBQ[J1Z&aE0)r CHwE9S;!{F+0:8Xd#h_@dQ:!
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 9c 3d e7 92 da 0d 5a 99 65 0b 9a 36 7b 1f 57 04 fc c8 ef 1b dc 12 86 a9 f6 c6 c9 c7 d7 6e 2e f6 e1 ac b4 b2 a4 4a 6b e4 95 88 52 4d 8b 81 fc c0 8b 1e 93 11 f6 a1 9e 51 8c f7 d4 93 e7 39 c6 1f a5 f1 51 3c 35 7c 5e bb a5 56 f3 01 fa b9 c7 2f e9 8f e9 36 8d 23 0d 11 c3 31 80 09 9a 0e 92 d9 eb b6 d4 6e 8a 3a 99 21 15 26 66 49 63 10 32 64 08 7f de 86 ac ea e9 1e c2 46 60 c9 bb fe a5 85 e2 a0 85 ae 8c 61 79 c5 f8 44 5a e4 c3 36 78 1d 50 43 71 93 f0 cd 4b b0 15 9c 1b 5d 0f da 59 e1 c9 81 01 37 b0 2f 58 50 3b dc 4b 5a 29 00 50 64 79 fd c2 84 22 84 9f 08 27 cf fb af 03 ad eb d9 05 40 de ca 95 bf 6a b0 6d 45 91 2c 53 c8 9b 35 00 f9 4e df b2 9b 8c 6b 4e 0d 80 53 14 7f d2 dd 95 a6 25 b8 25 69 eb 81 6b 3f 2a bb ed 48 2d c7 22 9d b3 8d d3 b9 79 a0 5b 7f 0b ea 44 f8 22 Data Ascii: =Ze6{Wn.JkRMQ9Q<5\|^V/6#1n:!&fIc2dF`ayDZ6xPCqK]Y7/XP;KZ)Pdy"'@jmE,S5NkNS%%ik?*H-"y[D"
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 4f 91 21 14 94 ce 2d f8 be a7 47 ec 4d 89 c0 3e 80 cc f3 45 50 9e f5 04 28 b0 1e ee 79 5f 08 8c 2e 1b 72 a4 88 72 0a a4 f0 65 93 8c f6 b2 05 86 8c 41 e9 c2 13 06 a7 c7 df 5d 59 ac 8b fc 17 1e 59 81 a5 3e 03 95 64 9c be bf 42 98 e0 93 34 f6 75 48 8a 67 73 72 fd 39 49 8a a3 c9 f1 ce 91 29 72 ef 3a 66 1b 81 84 9a 28 43 7e ff 57 40 a9 32 c1 58 5f 8a ec ed 8d 02 6a 1a 30 7d 77 6e d3 29 2f 46 51 ce 9d 80 78 49 2f 00 31 f8 7b a8 b6 a2 76 34 d5 61 79 70 7c da 70 13 d7 3f 2f 9f 30 fd ea 14 31 00 ac fd d1 f4 69 cf 5d 8b 64 a5 fb 77 ee 16 99 d9 00 34 13 56 dc e9 5e f8 6f ca ea ff bc 22 cd 37 ed 26 72 5d 25 e5 da 62 ce 14 ef b1 ae 8c 77 97 71 aa 66 fb 1c 63 78 24 14 44 64 fa 3c 05 58 7a 8e 9e 65 40 73 60 14 ac 3c 78 c7 66 3d c5 ed e9 1c 7a b7 94 80 04 3d 4a af 66 a8 Data Ascii: O!-GM>EP(y_.rreA]YY>dB4uHgsr9I)r:f(C~W@2X_j0}wn)/FQxI/1{v4ayp\|p?/01i]dw4V^o"7&r]%bwqfcx$Dd<Xze@s`<xf=z=Jf
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 2d c4 ab 91 1a 91 4b d5 c2 6c e4 f5 ff 1c 4d c3 2f 61 3c 25 85 6b 57 9d a8 3e cc 72 87 fa b9 51 c0 8d 08 1b 06 9d 61 5d ec f8 e9 fa 91 99 53 9e ef 6e 94 a8 a5 00 3b 75 9b c3 02 f5 e5 b2 be 8c 2c 1a 1a fb 1d 62 64 8e fe 6d 7c 12 3e d5 ec d1 9d 93 01 82 88 f6 94 68 a0 66 2c 41 84 93 12 63 05 04 ee 99 0d 36 d8 0c a3 7b c9 62 cd b0 5d 63 8b 83 cf 8c 82 e9 f8 d9 64 7f 39 bf 46 ee 76 52 c5 1e 59 82 62 fa 54 58 1a d3 1b 4f 6d f8 33 55 49 82 b5 cb dd 6d 91 17 2b d1 09 ec 45 f0 8b 4c 40 2d cd 2e b0 6d 54 c6 f6 04 50 53 5b 44 e6 09 71 44 01 67 4c 5e 67 b2 c8 5c 8b 51 e1 a5 6d 57 ea 83 8a b8 1e 03 ac a7 2d cb 76 e9 1e d9 6e 22 ff 92 b7 46 78 38 82 69 59 97 c8 5d a4 65 13 a3 9f f0 b3 c8 23 c7 9e 64 ea 3e 42 8f 91 52 41 2c a6 17 2f 7b 94 a1 d7 20 f0 ae 96 d5 9c fc 57 Data Ascii: -KlM/a<%kW>rQa]Sn;u,bdm\|>hf,Ac6{b]cd9FvRYbTXOm3UIm+EL@-.mTPS[DqDgL^g\QmW-vn"Fx8iY]e#d>BRA,/{ W
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: ee d2 13 7b 1f 8e ec 9e d6 ac 87 c2 66 76 38 48 b1 9e 8e c5 99 3f 03 00 31 8b db 1a f8 64 f0 f4 21 8e 2d 1a eb 5b dd 8c 96 0f 60 05 99 76 aa a5 92 e9 05 0f ec 79 6b 27 21 41 2b a9 77 4d 10 25 19 3d 05 6c 0b 38 d6 7d 91 c8 c1 82 35 76 db 09 6e ec f8 61 67 c0 3d 33 e0 48 0b d2 4f 80 e4 ab 80 6b 03 23 35 32 0a 01 fc 9e c1 be 13 3d ed 6e 80 10 ba 0d 10 10 de e4 b5 2c f2 cd e8 6e a3 2a 34 f1 22 d9 b8 44 d7 e0 37 d5 e1 8d 95 5c 94 ba dd c6 dd 52 07 da 8b ce 94 a4 44 cc fb 7e 78 ee a2 8d 73 07 1f c7 34 c0 f0 22 49 40 c9 93 43 96 6a 6f 5b b0 1d 5b b8 58 72 d4 89 39 22 95 b2 a6 1d 57 c9 33 56 63 a0 09 38 01 d0 46 d0 b9 99 c6 0b 26 f0 dc ec aa e2 37 d7 fd 5a bc 0f c1 ab 46 b8 ee da 64 28 d4 55 46 13 16 3b 51 65 af 78 53 b9 c2 29 ab 62 37 f5 67 4d 4d be d6 8a 9c 0a Data Ascii: {fv8H?1d!-[`vyk'!A+wM%=l8}5vnag=3HOk#52=n,n*4"D7\RD~xs4"I@Cjo[[Xr9"W3Vc8F&7ZFd(UF;QexS)b7gMM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49786	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	895	OUT	GET /media//wysiwyg/footer/Trophe_e-Prix-Meilleure-Satisfaction-Client-small-1.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25490 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "jR80CjLNYFrmCu3esY3c8WITlif59yWpPtbpOS59yE4" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=45895 idim=300x361 ifmt=png ofsz=25490 odim=300x361 ofmt=webp Fastly-Io-Served-By: img05-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162777056ba3268be89c257e08306-267d1560a874029e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960086-PAR, cache-dfw-kdal2120096-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 49 46 46 8a 63 00 00 57 45 42 50 56 50 38 4c 7d 63 00 00 2f 2b 01 5a 10 55 87 23 b7 6d 24 49 fa ff b3 bb 2b 71 a5 b7 99 5b 44 4c 00 bf 48 55 b0 9d 89 b6 50 4a a4 8c 97 dc 7a 19 62 36 fa 1c a4 5e 81 33 c2 ab 53 f2 42 a5 da 5b 03 3b 58 75 7b 8f ed 90 ab bb b7 30 de e4 10 da 66 99 41 32 41 b6 c5 44 f9 bb ea 7e ff 7f b9 24 b9 c9 1f c6 89 99 99 99 99 99 ed a5 e1 e9 c1 66 66 e6 62 e6 3a 75 aa ce a9 53 e7 d4 39 75 4e 31 35 33 16 8e e6 39 e7 7c 9f e7 3c e7 39 e7 d4 e5 93 2c ef f6 86 2e 97 46 9a ca e5 64 c3 c9 b6 95 2b 53 4b 31 d4 48 66 c6 e5 95 4c 6b a6 69 45 a6 d9 15 85 66 a2 0a 98 b9 cc 9e 35 db 13 e6 c4 30 1d 36 75 98 0d bd ca 63 66 86 70 d2 81 96 62 e8 0d 9b 99 71 25 b3 3d 13 75 38 6d 29 66 4f 05 5a 0a 73 ca cc 4c 23 d5 45 c8 d0 81 95 66 c6 72 98 69 67 35 Data Ascii: RIFFcWEBPVP8L}c/+ZU#m$I+q[DLHUPJzb6^3SB[;Xu{0fA2AD~$ffb:uS9uN1539\|<9,.Fd+SK1HfLkiEf506ucfpbq%=u8m)fOZsL#Efrig5
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 8e 01 41 4d f2 35 86 0f 50 e5 8d 63 03 73 bd 2a a4 2d 73 0e c7 73 e3 02 c3 87 e1 c3 09 60 a8 c9 56 74 95 a7 61 45 b2 20 99 d3 d8 11 d5 82 85 d1 e5 6e 3f 2b ac b5 2e 9a c0 5e 06 2c 7d 55 44 96 cd c3 0d c7 83 73 81 e3 87 e1 c3 50 d9 db 7f fb 2f 64 49 32 83 31 27 b1 84 32 c9 5a af 56 b8 fd 78 35 2f ac 5a af 72 67 5e e9 91 fc 81 17 de 76 97 ce 70 13 7d b0 8e d4 f7 42 96 34 77 67 46 63 4c 67 06 62 27 c7 05 9c 71 43 cd 92 2d d4 b7 ea af ef 17 b0 f5 79 57 d8 22 4e b8 8b 5d fe 44 13 91 a7 4d 9b 17 f3 10 75 96 be bb 5e bd 7a 75 ee dc a6 8d 44 30 f5 fe f6 15 53 fd 3e f2 5c d2 ca 8f eb ce 0d e9 2c 64 b5 c2 b5 de af f0 c6 11 6a 59 78 93 0e 15 ef 38 d3 33 31 96 83 68 73 8a 70 97 0d 1a 90 41 02 98 20 f1 fe ef 3f 51 42 70 07 b8 93 bc 13 5e c7 47 ea 8b f9 2d 55 7a fd f3 Data Ascii: AM5Pcs*-ss`VtaE n?+.^,}UDsP/dI21'2ZVx5/Zrg^vp}B4wgFcLgb'qC-yW"N]DMu^zuD0S>\,djYx831hspA ?QBp^G-Uz
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 3f 2f 5c 76 04 ab c4 98 6a 25 db a8 a4 1a af ef c2 89 98 6b 6d 65 fa e9 f1 8d 74 b1 df 2e ac 1a a4 3e e2 79 96 cf 79 90 c5 18 70 4d 3a 69 8e 70 45 e9 95 25 ee 38 55 05 95 39 ab d0 3e aa 7a 92 9b c6 f7 d8 0e 16 3c 05 35 9e 40 6a 25 35 4a 38 2f f5 38 45 18 f0 35 cc 89 90 0b ce fd cc 1b 54 8e 6f e2 69 1b df ad a7 6c eb 05 17 db c2 ac da 38 44 76 c2 9a f0 a0 11 22 d4 78 1d 26 bc 89 f2 67 29 73 54 d9 bd 94 d9 aa dc 59 5e 59 2a bc 9a 72 7b f1 94 11 21 74 0b 48 a8 7c 27 74 ed cb 6a d0 a0 c1 da cb 9e 25 3e fe a9 4a 6f 15 5c 1d a6 e6 eb 4a 6d f5 f4 dd cb ec a5 81 34 bd ab bc 09 91 9a 32 b7 33 23 9d d4 13 e2 ca c3 90 1b 2e 2b 82 c3 d2 77 55 4b 70 49 be 58 fc cc 72 6e 36 be d9 7a c1 35 d2 05 fa 26 bc 7b 44 ba 0a 67 31 fa fd d2 ff fd 12 d3 21 84 e2 6d e6 65 d4 7f 75 Data Ascii: ?/\vj%kmet.>yypM:ipE%8U9>z<5@j%5J8/8E5Toil8Dv"x&g)sTY^Y*r{!tH\|'tj%>Jo\Jm423#.+wUKpIXrn6z5&{Dg1!meu
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: e4 50 91 57 62 a0 a9 1d 87 8d e7 b0 9b 5c 3b 42 6a b8 70 d7 72 45 ff 10 47 66 84 34 28 7a b2 3f 86 6b ed ff 54 ac 96 b6 e1 b0 f1 6d f9 01 4b 3d 3c 52 cf 11 9d 65 b9 39 99 70 1c 53 da 48 ec ad 83 a8 d7 6a 3a 8f 86 38 6c 6c 6b 15 b8 16 84 90 ba 2e b9 10 4e 09 47 a6 08 69 22 b1 b7 0e a4 98 12 4b 6f 30 99 d7 8d e3 98 c4 6a 6e 6a bc 22 54 e6 76 f9 61 de 3c 2c 13 d2 ba 53 47 a2 56 29 7f e6 69 96 b6 9b cc ed 68 08 b3 f2 62 ef 65 04 a4 d6 53 f6 76 f9 e0 e6 86 65 42 c8 80 94 12 45 7c d7 55 14 52 f1 8c 63 2d 6c b7 98 d9 61 61 07 ec b0 ed 3d 55 7e 03 52 f3 29 fb ba bc 70 37 0c 7b dd f4 48 19 91 4d 7e 77 9c 46 19 41 d5 fb b3 3c e7 5f a1 85 6d b0 c3 9e 5e ed 57 84 46 ce 0b f7 ab 61 eb de db f4 c8 b5 a5 6e 3f 82 22 82 4b f2 1c a2 a6 9b 8e 63 7b 60 96 be 4d 5f e5 76 08 Data Ascii: PWb\;BjprEGf4(z?kTmK=<Re9pSHj:8llk.NGi"Ko0jnj"Tva<,SGV)ihbeSveBE\|URc-laa=U~R)p7{HM~wFA<_m^WFan?"Kc{`M_v
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 14 68 ce 93 0c 2a 41 9a be a8 6d 13 30 17 00 63 8a 28 10 ea d5 45 f8 90 77 5c 63 02 42 31 4d d7 06 cc 74 e9 43 c7 82 e0 36 a0 72 93 ab 80 a1 2f 9b 00 c1 b0 a1 ba 41 75 0d 10 6d cb 14 80 c3 4d d7 00 64 ac 96 c0 05 57 53 48 66 42 d0 b0 48 29 f0 43 72 e6 c5 e4 6e 86 6f e7 35 c7 70 5e 3d 61 e5 cf 84 48 74 07 b2 80 be 69 af 92 c3 8b c0 50 e7 e2 a9 aa 0f 73 ca e0 07 b0 e5 34 73 cd fd cc 88 fc 2a 10 b9 30 42 c5 1a 33 82 a8 d0 f4 d1 67 f6 dc cf 6c 28 e1 00 4e cd e2 01 02 f4 6a b7 d3 d7 72 c9 4b cb 0a 17 80 fe 23 e7 cc fd cc 2c 85 1d 0d 51 d3 84 02 4f b9 ea 1e ba 37 68 bd 59 e9 15 21 d5 ba 93 c9 67 e1 7e 83 71 ad 1e f4 fd dc 45 88 4c 89 18 6f 1c d8 a5 7b f4 f8 6a 26 60 ce 15 74 fd f2 e2 3f 86 0a 21 2f 30 44 44 67 32 1c 6c 38 57 9c 37 34 74 1f 04 9c 3a eb 0c 11 c5 Data Ascii: hAm0c(Ew\cB1MtC6r/AumMdWSHfBH)Crno5p^=aHtiPs4s0B3gl(NjrK#,QO7hY!g~qELo{j&`t?!/0DDg2l8W74t:
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 82 82 4b 72 cd ed ac 1e 03 b4 fa b2 67 41 04 28 f8 78 f7 46 ba 22 26 2f f2 32 63 46 05 a3 ea b1 6b 82 a5 cb fa d8 de 5d 72 12 71 b8 63 59 3b d0 07 8e 9b 0f 92 75 b3 a8 28 66 dd 8c a8 e3 1f c9 b9 63 39 05 de 35 51 6b 0f 18 95 cb b1 9c b2 cb 09 11 51 f9 5a a6 be 03 cb b2 4c 6b d3 9f 99 d8 fc 03 c7 75 bc 4d 86 cf dc 52 3f 73 54 d9 5f 52 9c 5d 37 8b ba f3 cb 22 1f c9 d1 d2 3e 83 96 37 51 ea c9 d6 07 85 a2 32 35 2c 72 65 90 14 91 52 31 57 57 6f 92 ab 18 8f b4 e2 d8 33 86 18 8d 43 40 83 48 d5 d9 d1 d3 a6 cd 79 52 d6 ba a9 d2 7d da 2a d7 9a 08 46 f3 5c 6b 95 b4 dd 57 91 ee 47 d1 d6 81 8b 5c fc c5 3f d4 31 0b e5 90 6c 13 e9 23 6d da ae d8 95 23 2a d5 d1 f4 28 72 f1 45 fa 5f 33 44 94 b7 d5 9e 3c 15 ce 7d ad 61 fa 64 7c cb 97 f5 50 17 5f bf 9b 06 67 42 3e b2 92 3c Data Ascii: KrgA(xF"&/2cFk]rqcY;u(fc95QkQZLkuMR?sT_R]7">7Q25,reR1WWo3C@HyR}F\kWG\?1l#m#(rE_3D<}ad\|P_gB><
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: bb da 00 a0 18 97 d5 51 bc 3f e7 98 5d e5 9e b8 dd 94 33 15 25 32 81 7e 72 a3 a3 0c 7d 34 40 73 14 e5 29 d3 78 6c db 3b b2 98 4b d8 49 ec 94 50 39 77 73 71 9e fb 5a a3 3d 6e 63 2f 8a ec 6d 28 2b ca cb cd a6 d8 87 f7 f7 71 79 2e ce 8d 4d e7 8c 54 94 97 35 ff 81 5d 07 3f ef fc b9 b8 eb e6 e2 f6 84 b8 51 22 2a a9 bb 8e a4 2c 37 b2 10 2d 63 32 2b 4a 64 6a c9 b8 ee 0e de b9 ec bd 62 2e 1f 3d e5 59 fb 3b 33 25 38 8a a9 b7 3f 8b e7 72 73 71 ab 7a 3f 81 09 6a 62 75 33 00 06 8b b4 07 c2 bb 0a f0 08 e5 af eb 8c 0f c4 60 3c 1c 04 a4 a8 14 c7 e7 36 00 a1 2b a3 e2 d1 2a fa 94 75 68 e8 02 de 38 3a 00 79 8c a1 15 c6 82 34 ee 81 89 a8 55 0e 98 d7 ea b5 be 1c 3f 52 80 89 5a fb 49 3d a7 6b 35 21 8d 32 05 bc ba 0a 3a ec 74 c4 32 34 20 6a 0e 78 75 59 d3 b4 a5 7b 09 1a 3d 10 Data Ascii: Q?]3%2~r}4@s)xl;KIP9wsqZ=nc/m(+qy.MT5]?Q",7-c2+Jdjb.=Y;3%8?rsqz?jbu3`<6+uh8:y4U?RZI=k5!2:t24 jxuY{=
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 2e 67 5e 25 cf 23 f9 68 f1 fe 81 c4 4a 44 48 61 87 75 01 f0 db 91 e8 40 b3 01 f3 bc 89 e2 53 1a 80 52 89 f5 13 fc e9 cc bf f6 cf 60 90 ad f4 4e 44 d4 6e 6a 15 e0 7d fb d5 ae 2c 60 6b 77 c0 4e 47 ef 56 66 1d c3 04 9c f3 3d 35 18 cb c2 35 dd bd cc 7c a4 9e ce bf 8c a5 6d 40 3f 2c 23 be 9a 0a f0 7c ca e0 70 60 60 2f 80 59 16 10 a5 78 f2 33 79 ec a8 9f 74 fa 03 d1 9f 4f d9 3d 29 ae 78 06 07 80 92 6e c1 b9 83 26 59 2d ed 6e c1 56 01 58 bd 13 d1 14 e2 02 46 e9 cb 23 a2 88 2d b8 90 3a 86 87 d2 b9 7f 8f bd 17 5e 3b 5b 0a 22 a2 63 5a 80 b9 30 fc 4a 44 4d 19 90 e3 3a f4 28 b8 0b 1d ac d6 4a db 80 d2 15 33 c7 cc e0 40 a8 47 23 a2 56 4d 40 cd 10 e3 7f 5c 57 5d 01 d4 91 cf fe 89 a8 e4 ad 28 1a 60 d5 53 86 80 37 0c ee 69 06 c0 00 51 32 c0 e7 c8 09 29 e9 6d 3a ee aa 58 Data Ascii: .g^%#hJDHau@SR`NDnj},`kwNGVf=55\|m@?,#\|p``/Yx3ytO=)xn&Y-nVXF#-:^;["cZ0JDM:(J3@G#VM@\W](`S7iQ2)m:X
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 17 fa 87 c5 fb 03 d1 9f 9f 16 14 ae 2a 00 83 8b 6c dd ec ab b0 e1 da 00 64 c9 a9 6a 6e 15 42 be 3a c6 ba 49 6e 00 f2 c8 49 15 aa e6 c6 46 86 10 f3 ce 27 41 62 ab 4c 75 83 a3 80 8a 26 3f a3 0f 94 c7 f8 04 62 30 af af 51 e3 75 54 75 21 cc 59 a9 d0 cb d5 0d 48 55 07 bc 90 4e 6b e9 00 9c 94 03 f9 d7 8f 26 00 3b db fa 08 55 59 4d 40 b9 f2 c4 d6 4a 33 32 ec 1b 60 81 f1 23 0d a2 2c a4 49 e7 13 b7 f4 33 77 34 c0 2a 6c 3d 21 8a ca 5b c7 02 60 3e 5c 16 1f fb 29 5f b1 05 c0 bd 4e ff 52 e5 d6 01 a5 66 33 b4 70 40 99 19 40 a9 e0 0b c3 9a 74 0c 6b d2 c9 22 ce 7c 90 4d 14 aa ea 8e 03 70 9f 34 d6 e7 0c f3 fa 74 c0 a8 90 c2 2f 5a 0a 08 06 6b 75 48 2d 20 0c 16 9d 1b 60 80 28 83 45 d6 97 7f 7d c7 4a 77 ee 67 34 6f 7d 2c 60 34 57 3a 8a 8a 7d 28 0b 50 be dd a9 85 7c e6 95 0d Data Ascii: ldjnB:InIF'AbLu&?b0QuTu!YHUNk&;UYM@J32`#,I3w4l=![`>\)_NRf3p@@tk"\|Mp4t/ZkuH- `(E}Jwg4o},`4W:}(P\|
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 94 3a ec 9d 76 73 f1 0f f5 7c eb 0e d1 8a b8 98 b3 39 9b 3e ea 11 9b a2 9f b2 7a fd eb bb f8 e3 f7 72 8e c4 a4 71 da 7b ba b3 e9 6a 47 ac a4 f9 ce e6 6c 76 d3 1b b1 f9 66 95 7e c2 43 5d fc cf e9 ab 54 38 33 19 52 df 09 87 63 e0 d8 a9 13 22 36 5e 3e 45 64 2d de 32 bb fa 16 0e e7 ec 0b de 9e 08 88 84 42 22 78 5d d0 87 d1 10 c2 cb 1a a3 e1 bc cd b0 d6 11 10 7f 03 c6 41 0e 87 1f 13 09 aa 2e 82 23 1d 7d 36 17 31 14 e7 71 c9 88 87 29 52 23 41 e6 ef a5 50 da 70 0e 62 44 04 87 ff 1d 06 f5 04 3e 86 6b be f0 2c 9f fe 2e ac dc 9d d4 a8 1a af ab 7e bb 49 89 e6 f6 87 ab 86 c2 cf 0d 30 49 bc 50 7a af 33 71 9e 73 a2 3e c5 b3 e6 16 69 31 2e 82 31 1f 97 ed dc ea 50 d7 7e d9 2e 7d 18 c7 9b 53 a3 ec c7 f1 77 cc fb 43 30 a6 e3 63 33 0e 8a b1 5e 0a 7e 2e 93 df 1d 47 5e a3 fe Data Ascii: :vs\|9>zrq{jGlvf~C]T83Rc"6^>Ed-2B"x]A.#}61q)R#APpbD>k,.~I0IPz3qs>i1.1P~.}SwC0c3^~.G^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49785	82.202.163.23	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	351	OUT	GET /tu//?page=all HTTP/1.1 Host: sourcetrap.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:27 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 25 Oct 2024 08:16:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Strict-Transport-Security: max-age=31536000;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49780	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	620	OUT	GET /media/wysiwyg/home/black-friday.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 106778 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "jgdASetnjDqeSo1MPPpO3CkZ32sZ7wpDHz9NNbe3JTE" Expires: Fri, 24 Oct 2025 16:25:23 GMT Fastly-Io-Info: ifsz=106778 idim=400x400 ifmt=png ofsz=106778 odim=400x400 ofmt=png Fastly-Io-Served-By: img06-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801703947a76af50dc9acfbe06a0ede-ca0f341efcda8d95-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 57063 Date: Fri, 25 Oct 2024 08:16:27 GMT X-Served-By: cache-par-lfpg1960078-PAR, cache-dfw-ktki8620026-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 59 ac 74 6b 7a df f5 7b 87 f5 ae b1 a6 3d 9c d3 e7 74 9f ee b6 dd ed e0 b8 1d 64 c5 38 56 1c a3 58 06 12 91 20 84 30 28 91 85 04 11 89 90 22 c1 25 93 a2 28 81 20 22 01 22 17 88 0b a6 8b 28 48 08 09 92 a0 0c 22 21 01 9c d8 a6 3b 6d b7 dd 8e ed 4e 4f a7 cf f0 4d 7b aa 61 cd ef c4 c5 5b df d7 93 8f c7 d3 ee 63 f7 fa 49 4b 7b aa aa 5d bb aa f6 fa d7 33 fd 1f 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 58 Data Ascii: PNGIHDR6 IDATxYtkz{=td8VX 0("%( ""(H"!;mNOM{a[cIK{]3XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: f5 cd 38 0e cf 4c 5e ed ef 5e 5b 3d fb 81 7f fa 83 b7 4f ee 8e b7 bd f5 cf 9e 3d 3d 1e df 7a eb d9 f4 0b ff f8 8b 8e 77 a8 a7 7c f6 f8 68 11 95 85 df 11 54 cd e6 9b 7d 17 80 f7 a0 80 2c 7c 73 b1 f3 ac 72 4d 73 7f 77 5f ef ae 2e 94 8c 81 7e 1c 29 ca 12 ad 15 d3 24 68 54 46 8c 81 10 41 20 70 ce 72 3c 1e 99 9c c7 e4 9a cc 48 7e ff 0f 7c 3f 5d d7 a2 32 4d 0c 82 79 9a c9 72 8d c9 0c 65 59 30 4d 23 21 c0 a9 ed b8 bc bc 4c b7 63 2d 65 55 a2 32 cd 38 4d 59 66 e4 4b 51 b8 9d d2 f1 15 6d e4 3c 0c fd 5c 18 33 cd 73 6b d7 95 7c d8 2a 75 f3 81 8b dd e3 bb 87 bb c7 bf e7 b5 f7 dd bb ef fb f0 cd ed 0f 7f cf fe 38 cc 0f 6d 37 3e 6d db f1 e1 13 1f ff a5 ee e9 b3 7d 04 e2 47 d7 af 2e a2 b2 b0 f0 2e b2 08 c8 02 90 a2 0f 40 48 19 f2 c3 c3 5d b3 da d4 ab 48 50 36 40 51 18 44 Data Ascii: 8L^^[=O==zw\|hT},\|srMsw_.~)$hTFA pr<H~\|?]2MyreY0M#!Lc-eU28MYfKQm<\3sk\|*u8m7>m}G..@H]HP6@QD
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 49 45 54 3e dd 8e 94 dc 3c bb c5 98 1c 25 15 0c 02 ef 1d 5a 67 34 4d 45 df b6 68 a5 19 da 8e dd 76 4b 24 d2 f7 3d 44 89 77 01 81 44 48 c5 c5 d5 15 e3 34 91 97 25 0f fb 3d 9b cd 86 c3 f1 48 d7 75 bc fc f2 cb 8c e3 c4 dd dd 1d 02 81 88 e0 e6 19 49 a0 28 0b 4c 66 a8 ca 12 15 3d de 3b c2 ec 39 9d 4e 94 65 89 b5 16 11 23 59 51 e1 9c c4 34 3b f2 d5 86 a2 5e d3 6f ae 91 79 8d c8 2b 10 9a bc 6c a8 ea 35 45 59 a1 b4 7a 47 51 79 97 04 05 e0 02 f8 23 e7 03 52 61 ff 1f 00 7f 07 f8 3f 49 a9 af a5 bb 6c e1 1b ce 22 20 0b cf 11 7e b8 5f 69 a3 3e 60 67 7f 5d 97 45 e1 66 2b c6 79 44 0a 49 08 10 63 c4 39 87 d6 9a 10 02 5a 6b a6 71 22 d3 1a 21 a1 aa 2a 9c 77 04 1f c0 9e a3 8c 8b 0b 42 08 3c 7d fc 18 48 d7 17 80 ce 34 de 3a e6 28 d0 46 73 71 b1 66 b6 33 a7 e3 09 29 05 5a 6b Data Ascii: IET><%Zg4MEhvK$=DwDH4%=HuI(Lf=;9Ne#YQ4;^oy+l5EYzGQy#Ra?Il" ~_i>`g]Ef+yDIc9Zkq"!*wB<}H4:(Fsqf3)Zk
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 6d d7 93 69 4d c0 d1 1e 4f b4 c7 23 9b d5 8a e3 c3 03 93 b7 34 9b 0d 31 2a 8a a6 66 bb bd 44 e7 35 51 65 c8 2c e7 4e e7 a0 4b 84 a9 50 45 cd f6 f2 15 d6 9b 1d 79 59 7e 59 44 de 9d d4 97 00 fe c0 f9 f8 4b c0 5f 07 fe 7b 52 11 3e fc 0a d7 5b 58 78 c1 22 20 0b 6c 2f 36 7a 78 fa d6 55 2c c4 55 99 65 26 d3 a9 29 cb 39 8b d2 1a 21 15 ce 7b 32 a9 18 fb 99 cc 28 bc 8f 80 40 2b c3 e9 74 a2 c8 0b 8c 31 3c 3c 3c d0 d4 29 a2 38 b6 47 56 ab 86 f6 78 62 1e 47 ae 2f 2f 78 fb ed b7 11 80 b5 0e a3 15 75 53 13 7c f2 d5 1a 87 81 ed 6e cb 34 4d a9 23 4b 28 f2 dc 20 a5 22 9c 6b 13 44 88 21 10 9c c5 cd 13 46 2b bc 77 5c 5c 5c d1 9e 5a 10 a9 7e e2 ac 47 48 e8 bb 81 10 02 59 96 21 84 20 c4 88 f3 1e 9d 65 38 ef 53 63 c0 e4 90 d2 70 b1 bb 20 0a e8 bb 1e 4f e4 ad 37 1f b3 5a ad f0 Data Ascii: miMO#41*fD5Qe,NKPEyY~YDK_{R>[Xx" l/6zxU,Ue&)9!{2(@+t1<<<)8GVxbG//xuS\|n4M#K( "kD!F+w\\\Z~GHY! e8Scp O7Z
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 3c 1c 30 79 81 d6 19 6d d7 51 95 05 b9 c9 00 43 3f f4 0c c3 80 31 86 ab ab 2b c4 39 8d e3 6d c0 13 d0 da d0 0f 1d 75 dd 30 cd 13 bb 8b 2b e6 79 c6 5a 08 d1 e3 3d 84 73 43 e2 e1 d8 d1 d4 15 dd dc 91 15 39 5a 49 84 31 84 69 c2 5a cb 7a 9d 3a c4 da ee 84 55 0a e7 5c 7a 1c a6 11 6d 32 88 0a 9d 69 ca a2 c1 ba 19 a9 14 a7 f6 84 52 19 45 a1 88 11 42 0c 1c ba 96 e8 03 75 5d 33 4d 13 42 08 b6 db 2d d1 79 10 8a a6 28 99 ba 81 b2 2a 52 1a 4c 27 7b 98 aa 2c d9 ed 76 38 eb f0 6e a2 c8 32 da d3 1e 10 9c 7c 20 22 88 e3 11 ef 02 79 5e 21 b2 9c a8 14 f3 fc 84 cf 7f d6 23 4c 8d ca 1b 54 d9 b0 bd 7a 99 dd e5 35 26 2f 7e ad b6 2c 35 f0 ef 00 7f 8a d4 0a fc 17 49 36 2a 0b df a2 2c 6d bc df c2 7c 74 fd aa f8 f8 17 3e fd 07 a7 e1 f8 9f 3e f9 c5 9f fa fd e3 b3 cf a1 a2 e3 74 3c Data Ascii: <0ymQC?1+9mu0+yZ=sC9ZI1iZz:U\zm2iREBu]3MB-y(RL'{,v8n2\| "y^!#LTz5&/~,5I6,m\|t>>t<
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: a2 60 1c 47 56 ab 15 6d df 21 45 b2 26 c9 b3 8c 3c 2f 28 f2 92 fb fd 9e 10 53 bb 6e 88 01 3b 5b b4 d6 94 65 c9 3c cf 10 21 af 4a 9c 77 28 a9 18 c7 81 a2 28 19 86 31 a5 87 a4 42 48 99 06 11 05 14 26 59 b7 cc f3 8c 3e 9b 37 4e f3 84 14 f2 7c 92 37 8c e3 44 d7 76 98 3c c3 cd 0e 21 23 5d 3f a4 54 53 88 ac d7 0d ce 3a ea a6 4e 0d 05 75 12 bd 79 f6 a9 63 4b c8 14 bd c5 98 1a 16 da 96 a2 2c 29 8a 22 89 4a 88 78 ef a9 8a 92 61 1c 70 7e 66 bb db b1 7f b8 3f b7 08 07 94 31 18 5d 90 99 0c 1f 60 7f 38 a4 eb 54 15 d3 34 b1 d9 6c 98 c6 11 63 32 b4 d6 c9 2e 5f 0a 8a 3c 67 bd 59 e1 42 e0 e6 f6 26 fd ad e3 8c 51 1a 99 e9 e4 a6 2c 24 de 27 bf 30 1b 02 65 bd 45 55 6b c6 a0 f1 aa 42 17 35 ef ff b6 ef 64 7b f9 32 65 55 9f 9d 96 45 8c f0 57 4f 87 e3 9f fd fe 6f fb d8 3f 66 d9 Data Ascii: `GVm!E&</(Sn;[e<!Jw((1BH&Y>7N\|7Dv<!#]?TS:NuycK,)"Jxap~f?1]`8T4lc2._<gYB&Q,$'0eEUkB5d{2eUEWOo?f
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: f0 80 c9 0d 43 db 25 9b 99 10 18 c7 81 d7 5e fb 20 87 fd 31 3d ee 53 87 0f 8e dc 54 0c b3 65 bb 69 98 ac a5 2a 6b 86 31 75 e4 85 28 c8 ab 1a 93 55 04 52 2b f4 69 74 e3 dd fe f0 89 37 de 78 fb a7 87 29 7e b2 3f f5 3f fb c5 cf 3f fe e2 c7 3f fe 0b 13 bf bc 98 2c 51 ca 3b b0 08 c8 3b b0 08 c8 6f 8a 8f 00 ff 05 f0 2f ff 4a 17 8a 31 75 13 4d e3 c8 a3 cf 7c 9c fe e9 e7 39 3e 7d 9b a9 3f 52 16 86 10 02 b9 c9 39 ec 1f d8 ee 76 a9 b5 f5 5c 38 97 4a 81 14 4c d3 4c 3f 74 6c d6 1b ee 0f 27 f2 22 23 53 19 d3 38 42 88 48 a9 68 9a 32 75 1e e9 34 6c 58 55 d5 79 92 3c 6d 28 b4 b3 45 09 45 51 54 08 99 52 53 de b9 54 30 2e 0a 90 82 c3 e1 c0 7a bd a6 ae 2a c6 69 62 9e 66 86 61 a0 2a 4b 88 e9 76 66 6b 59 af 37 04 04 ce 7b 0e c7 23 f5 d9 ae 24 cb 52 9b 6d 55 56 f4 d3 c0 b1 3d Data Ascii: C%^ 1=STeik1u(UR+it7x)~????,Q;;o/J1uM\|9>}?R9v\8JLL?tl'"#S8BHh2u4lXUy<m(EEQTRST0.zibfa*KvfkY7{#$RmUV=
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: fc f5 5c 31 84 94 3e ba 7f f4 39 1e 7f fa c7 e9 6f df e4 f6 ee 06 21 65 5a 9a 24 05 22 8a f4 cf 3f cd d4 4d 85 00 ba d3 09 21 25 e1 dc d6 39 ba 34 fd 2c 02 8c 43 72 9e 1d a7 81 d5 c5 1a 6b 1d 7e 76 28 25 ce 69 2b 87 31 05 31 0a 8a bc a0 eb 5a 56 ab 35 eb cd 96 69 1a e9 fb 8e e0 67 56 f5 0a eb 1c c3 38 31 cd e7 ed 84 d3 48 55 ad b9 bc d8 f1 a5 37 5e 67 b3 5a a3 94 48 86 89 3a cd 9b c4 18 99 dd cc e1 e1 70 16 93 c8 fb 5e 79 99 be 6f 19 e7 91 6e 18 cf 13 d6 d0 75 1d d3 38 71 75 71 09 02 9c b5 a9 80 8f e6 70 b8 67 b5 aa 88 41 a2 94 7e e1 b9 15 42 48 bb 46 86 89 ed 66 47 59 28 6e 7b c9 d5 77 fe 3e b6 af 7e 07 de a7 ba 4d 96 19 74 a6 d3 f6 c6 f3 c2 2d 29 cf 4f 8f 10 88 af f8 97 8b c4 d4 8a 7b 3e c2 59 3c 9e 8b 8a 73 0e ef 3c d1 cf dc 3e 7a 9d bb 2f fe 0c b1 bd Data Ascii: \1>9o!eZ$"?M!%94,Crk~v(%i+11ZV5igV81HU7^gZH:p^yonu8quqpgA~BHFfGY(n{w>~Mt-)O{>Y<s<>z/
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 31 d7 79 87 54 1a 1b 1d 78 c1 34 8c 6c 36 a9 9d f7 b9 43 6d d3 ac 20 a6 f9 86 b6 3b b2 59 5f 30 8d 23 97 57 5b 6e 6e 6f d0 59 8e 14 32 15 e3 c7 64 5b 9e 9b 34 78 37 bb 64 f5 31 bb 99 aa dc 21 84 c4 e4 e9 9d bc 56 0a 6f 53 f1 de f9 39 45 4e 36 9d e0 a6 69 26 cf 0d 65 59 b1 df 1f 28 8a 82 b2 6c d0 26 e3 e1 e1 9e 61 e8 59 ad b6 38 37 33 4e 03 eb d5 9a 9b db 1b 72 63 28 8a 92 e8 1d 4a 19 8e a7 96 ed 6e 4b 91 a5 49 f6 69 1e 38 1c 8e 40 a0 de 5c f3 f2 77 fd 30 ab 57 bf 13 7f 4e 6d 99 a2 38 4f 7a 67 69 4f c8 d7 d4 3c 7e 35 5e 08 08 5f 8e 46 38 0b 89 f3 2e 99 30 ce 36 f9 8f d9 89 c7 9f fd 38 d3 ed 17 39 de 3c 42 ca 34 ad 1e bc 4f 73 22 2e 80 10 ac d6 2b a4 92 dc ef 1f b8 ba ba a2 3b f5 e9 cd 41 14 38 37 13 71 ec b6 17 78 4f f2 df 2a cb 34 8d ee 1c 79 9e 31 4d 03 Data Ascii: 1yTx4l6Cm ;Y_0#W[nnoY2d[4x7d1!VoS9EN6i&eY(l&aY873Nrc(JnKIi8@\w0WNm8OzgiO<~5^_F8.0689<B4Os".+;A87qxO*4y1M
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: d6 1a c9 81 16 26 39 53 55 35 d3 a4 cf 9d 5c 21 6d 19 ec 3a 9c 4b d1 83 75 16 42 4a dd 5c 5c 5e 31 4e 23 d3 34 53 96 a9 b8 ea ec cc e9 e4 51 2a a5 9b e6 d9 b2 5a ad e8 fb 96 e3 e1 40 51 af d0 4a 23 00 65 0c 6e 9e e9 bb 8e dc 94 6c 36 6b 66 37 e3 62 64 18 5b 88 81 9b 9b 81 a2 2c ce e6 88 e7 f5 b6 4a 71 68 3b ca a2 20 0b 82 a1 6d 59 6f 56 69 38 52 69 4e 6d 4f fd d2 05 b3 77 98 e2 79 9b ae f8 ba 56 dd 77 8b 17 b7 27 25 69 1c 51 63 4c fa 56 d9 6c 28 2f df 8f 9b 0e b8 63 da d3 f2 dc 0e 26 04 4f dd ac 70 ce a1 83 c3 68 4d 7b 4a 9b 1e 9d 0f 68 a1 99 ed 48 56 fe ff ec bd 49 a8 ae 5b 9a e7 f5 5b 6b bd ef 7a bb af db 7b 9f 73 9b 68 32 2b ab 2a 2a cb 92 ea 50 2c 14 21 c1 06 c4 4a 14 44 50 74 56 43 41 d1 89 88 13 67 e2 40 07 2a 38 50 4a 45 c1 49 29 d8 64 89 22 e2 a0 Data Ascii: &9SU5\!m:KuBJ\\^1N#4SQZ@QJ#enl6kf7bd[,Jqh; mYoVi8RiNmOwyVw'%iQcLVl(/c&OphM{JhHVI[[kz{sh2+P,!JDPtVCAg@8PJEI)d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49791	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	625	OUT	GET /media/wysiwyg/home/restauration-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78901 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "8LYF94KSM/o5taERsbxqzuOToGq3U5602mCQ7v+/hcw" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=78901 idim=400x400 ifmt=png ofsz=78901 odim=400x400 ofmt=png Fastly-Io-Served-By: img08-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016277e85bcd8377f0ba36148f16aa-868d9c7eacd960d4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:27 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120102-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 77 94 1c 47 7e e7 f9 89 cc 2c d3 be 1b 68 00 0d df 70 84 f7 96 16 86 e4 d0 0f e8 dd 38 ad 4e ab a7 d5 8c 56 e6 b4 6f 64 6e 4e ab 93 5b 8d b4 23 ed 49 da 95 34 bb da 1b cb 21 39 24 e1 08 12 20 61 08 10 84 21 61 48 78 4b 78 db de 96 c9 8c b8 3f 22 32 ab ba e9 09 53 8d 46 7c de 6b 54 a3 ba 2a 2b 2a b3 2a be f1 b3 01 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c Data Ascii: PNGIHDR6 IDATxwG~,hp8NVodnN[#I4!9$ a!aHxKx?"2SF\|kT+*bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,bX,
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 92 63 85 1e 48 4f c1 66 61 59 3e 8b 67 d0 d5 e4 56 3c 2c 37 3a b7 a0 dd b7 df 2c f4 40 2c 5d b1 02 d2 f3 88 01 ff 08 fc 1c e8 19 cb 0c 8b a5 f0 94 03 3f 02 fe 05 48 14 78 2c 16 83 15 90 9e c5 60 60 3d f0 ed 02 8f c3 62 e9 a9 fc 3a 7a 03 ab a1 85 1e 88 c5 0a 48 4f e2 0e f4 fe d2 36 f3 c4 62 f9 74 e6 00 db b1 1b a2 15 1c 2b 20 3d 83 df 41 6f 09 5a 53 e8 81 58 2c d7 09 fd d0 4d 19 ff 13 3d 28 19 e8 46 c3 0a 48 61 29 06 9e 03 fe 0e 9b aa 68 b1 7c 51 5c e0 fb e8 9d 36 4b 0b 3c 96 1b 12 2b 20 85 63 10 da 97 fb 74 a1 07 62 b1 5c e7 3c 8e ee a7 35 a4 d0 03 b9 d1 b0 02 52 18 a6 a1 f7 8d 9e 59 e8 81 58 2c bd 04 fb 9d 2a 00 56 40 ae 3d f7 63 57 4b 16 cb d5 60 10 ba 7a 7d 71 a1 07 72 a3 60 05 e4 da f2 ab c0 52 ac bf d6 62 b9 5a 94 00 2f a1 f7 62 b7 5c 65 ac 80 5c 3b Data Ascii: cHOfaY>gV<,7:,@,]?Hx,``=b:zHO6bt+ =AoZSX,M=(FHa)h\|Q\6K<+ ctb\<5RYX,*V@=cWK`z}qr`RbZ/b\e\;
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 7f 0a 3d 90 ab c5 8d 60 81 f4 43 6f fc 72 c3 55 89 5a ae 3d be 0c d8 ba 79 1b ff f5 bf fd 1d 6f 6f d8 48 67 67 07 45 45 45 38 c2 21 1e 8f 91 cd 64 b4 f5 60 94 42 99 6f a0 10 02 29 25 2a 54 10 25 10 42 68 b1 11 e0 07 41 ee 45 14 28 f3 77 80 6c 36 4b 90 ff 77 43 71 71 31 b1 58 8c 78 3c 4e 2c 16 23 91 48 50 56 56 46 ff fe fd a9 ae ae a6 5f bf 7e d4 0c e8 4f 75 75 3f 4a 4a 4b 18 58 53 43 49 49 31 c9 44 82 8a 8a 0a 8a 8b 8b 89 c7 e3 b8 ae 83 e7 dd 28 6b cd 2b 4e 1b 70 13 70 ee 4a 1e d4 5a 20 d7 8e 3f c5 8a 87 e5 1a 70 f4 d8 71 7e f7 f7 7e 8f 0d 1b de c2 8b b9 c4 63 31 fa 54 55 a0 94 c2 71 1c 23 06 0a 90 04 7e 16 21 04 ca d1 c2 21 1c 01 0a 40 0b 83 42 a1 24 91 48 7c c4 55 a5 f4 ff 85 10 78 ae 87 91 23 fd af ca dd 76 74 74 d0 d6 d6 86 52 0a 29 e5 67 be 07 cf f3 Data Ascii: =`CorUZ=yooHggEEE8!d`Bo)%*T%BhAE(wl6KwCqq1Xx<N,#HPVVF_~Ouu?JJKXSCII1D(k+NppJZ ?pq~~c1TUq#~!!@B$H\|Ux#vttR)g
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 ca dc ef 96 8f f0 9d df fa 1d 5e 7f fd 75 aa aa aa f0 3c 57 c7 3c 94 64 40 ff 7e 94 16 17 33 79 e2 64 4e 9f 3e c5 ee 0f 76 f3 b5 67 9f e5 e0 a1 c3 ec dd bb 97 07 1e b8 9f 53 a7 4e d2 d0 d0 40 49 71 31 e5 15 15 b8 8e 60 d7 fb 7b 58 b8 60 3e f5 75 f5 6c db b6 8d a7 9f 7a 8a 0f de 7f 9f e6 a6 26 66 ce 9c ce a1 43 87 08 a4 22 11 8f 53 5d 5d cd c9 93 27 48 26 13 8c 1b 37 96 95 af ad 66 de bc d9 38 8e c3 fa f5 eb 79 fc f1 47 d9 bc 65 1b 32 90 d4 d6 0e e7 d8 87 c7 e9 d3 a7 0f 95 15 15 64 03 89 1f 04 8c 1f 37 8e 0b 17 2e 52 33 60 00 13 26 4e 60 ff fe 83 2c 5e fc 55 2e 5d ba 44 49 49 29 f3 e6 cd e3 d0 e1 c3 dc 75 d7 5d d4 d5 d5 51 5e 5e ce e8 d1 63 38 73 e6 0c 93 27 4f a6 b5 b5 85 f2 f2 72 2a 2a 2a 68 6b 6b 67 c0 80 01 a4 33 19 8a 92 45 b8 ae 8b ef fb 5d 6a 55 Data Ascii: R^u<W<d@~3ydN>vgSN@Iq1`{X`>ulz&fC"S]]'H&7f8yGe2d7.R3`&N`,^U.]DII)u]Q^^c8s'Or***hkkg3E]jU
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 86 0d eb 98 3c 71 fc 17 7b a2 0c 90 52 a7 4a 1a 9f ec 4a e9 07 f7 65 7d 9f 74 aa 93 4c aa 13 a5 7c 44 20 09 82 2c 8e e3 e1 38 2e 7e 10 20 83 00 c7 4c 78 ca 58 00 a0 27 73 a5 24 98 e4 48 a1 40 18 ef ac 5e bd 83 f6 fb 6a 01 01 7d 97 e7 ba d1 dc 2d 94 09 16 0a 2d 20 52 4a c8 cb 4a 11 5a b7 08 80 00 a5 fd c6 fa 05 10 c2 c1 11 da d2 70 8c 8a e8 8c 18 f3 9e a3 31 a0 ad 13 19 20 94 b1 4c 84 11 1c f3 3e 84 00 e9 08 94 00 e1 6b b7 54 28 03 32 90 28 a5 7d d7 44 ef 02 f3 fa 8e 11 0f 3d 1e 7d dc 40 8f 05 85 30 15 70 4a 80 34 22 28 42 4b 26 ac ac 96 3a 1d 14 47 20 51 51 f1 5b a0 1c 14 8e 79 7d 89 23 40 38 90 f1 03 e2 89 24 b1 78 02 85 43 32 99 24 e6 c5 71 1c 6d 19 25 12 09 e2 f1 38 78 0e 42 b8 20 5c 14 f2 9a 0a cd 77 7e eb 3f f2 b3 e7 9e a3 a2 bc cc c4 0d 1c ee b8 e3 Data Ascii: <q{RJJe}tL\|D ,8.~ LxX's$H@^j}-- RJJZp1 L>kT(2(}D=}@0pJ4"(BK&:G QQ[y}#@8$xC2$qm%8xB \w~?
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 4d da ab ab d3 4c 01 82 40 6a 97 96 70 90 41 a0 45 33 bc 46 52 19 1d d2 d7 89 f0 47 38 48 05 59 a9 93 01 94 d0 0b 00 2f 16 c3 f5 3c dd 8e 23 1e c7 75 3d e2 45 45 80 83 e3 b8 5f d8 72 f9 e6 b7 fe 1d 2b 5e 5d 4e 55 55 25 81 0c c8 66 32 4c 9b 32 99 a6 a6 26 c6 de 74 13 db b6 6e 43 f9 01 8f 3f fa 28 4b 97 2d 25 93 c9 72 ef bd f7 b0 75 eb 36 5c cf a5 b2 4f 95 4e 92 08 02 0e 1f 3a c6 c2 85 0b a8 af af 63 c3 86 4d 7c f3 57 be c1 f6 ed db b9 70 ee 1c b7 dd 76 1b 07 f6 1f 22 1e 8f 93 0d 02 06 d5 d4 70 ee e2 05 ce 9c 3b cb 57 17 2f 66 e9 92 25 94 97 97 73 eb ad b7 f2 8b e7 5f 64 de bc 39 04 41 c0 89 13 a7 e8 df bf 9a 4c 3a 4d 32 59 cc d9 b3 e7 98 33 67 36 5b b7 6e a5 a4 a4 94 09 13 26 b0 74 f9 0a 16 3f f4 00 fb f6 ed a7 b9 a5 85 db 6f bb 8d d7 5f 5f c5 8c 19 d3 69 Data Ascii: ML@jpAE3FRG8HY/<#u=EE_r+^]NUU%f2L2&tnC?(K-%ru6\ON:cM\|Wpv"p;W/f%s_d9AL:M2Y3g6[n&t?o__i
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 5f 63 ed fa b5 b4 36 36 73 ff 43 0f b2 7c f9 72 86 0c 1e 4a 59 59 09 f5 0d cd 3a d9 00 18 3a 74 28 eb df da c8 bc b9 b3 f1 3c 8f 95 ab d7 f0 2b 5f 7b 9a 37 d6 ae c3 8b c5 99 3d 6b 26 6b d7 ad e7 a6 31 63 e8 e8 e8 40 08 68 6f ef 64 c8 90 41 9c 3a 7d 9a c0 0f 98 31 63 06 4b 96 2d e3 c1 fb ef 63 df be fd b4 b4 b4 70 f3 bc 79 2c 5d f1 2a 8f 2c 7e 88 f7 de db 4e 32 91 60 c0 c0 01 1c 3a 78 88 51 23 47 71 ee e2 05 8a 8b 4b f4 f7 45 08 32 e9 0c 55 55 95 9c 3d 77 8e 3e 55 95 64 b3 59 da da 3b 18 32 64 30 fb f7 1d 60 da f4 a9 6c db f6 2e e3 c6 8d e5 c2 f9 0b 14 17 15 13 8b c7 68 68 6c 60 c0 80 01 1c 38 70 90 58 2c bf e3 90 c0 cf 06 3c ff 8b e7 b8 ef de af 7c 81 99 e4 ba e2 87 c0 af 7f 99 27 f6 1a 01 59 f9 e2 cf c5 fd 4f 3c 7b d9 02 b2 e5 d5 97 f5 a4 1c 4e b2 c6 95 Data Ascii: _c66sC\|rJYY::t(<+_{7=k&k1c@hodA:}1cK-cpy,]*,~N2`:xQ#GqKE2UU=w>UdY;2d0`l.hhl`8pX,<\|'YO<{N
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: c8 95 62 df c6 37 a3 b4 d7 d0 d7 1e c5 40 c2 09 4d 08 c2 74 5a 1d 53 70 40 77 da 3d 2a 84 33 2c ff 78 e1 64 e6 79 da b2 d0 b1 92 fc 89 55 e4 4d ba 61 f0 37 d7 80 2e 3c c6 a7 75 23 cd 9f e4 f3 ef eb e2 7f 0f 5d 53 42 7c e4 6f 90 13 47 00 d9 cd d5 94 ff 98 5c 35 7b f0 91 e3 85 d6 48 ee f9 79 4e b5 2e 56 09 79 ef 39 77 0e c2 f7 11 ba b6 ba 0b 5d 68 bd e5 0b 45 fe 78 c3 c7 86 7f 77 8d 81 91 3f 36 84 88 2a df 43 eb 20 ff 3c 74 8d 59 e8 e7 78 61 2c c6 7c 1e 1c d7 8d 52 7f 45 58 a4 29 8c 3b 0a 65 ac 25 1d ff 52 81 8e ab 60 52 90 b5 e0 29 63 79 88 68 fd 21 44 9e 90 46 29 15 02 1c 6d d5 b8 c6 75 17 9e d5 30 26 14 8f c7 f5 6b 0b 41 3c 19 27 2b 25 0d 4d cd 34 34 34 72 f8 d0 11 de df b5 9b f3 17 2e 52 57 df 40 3a 9b e5 c4 c9 93 8c be e9 26 2a ca 2b 59 b5 7a 15 0f dc Data Ascii: b7@MtZSp@w=3,xdyUMa7.<u#]SB\|oG\5{HyN.Vy9w]hExw?6C <tYxa,\|REX);e%R`R)cyh!DF)mu0&kA<'+%M444r.RW@:&*+Yz
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: c7 a8 6f 6a a4 76 64 2d 07 f7 1f 64 e8 90 a1 74 a6 3a a8 bb 54 cf ac 99 33 78 6d e5 2a 1e 7a e8 01 d6 ad 5b cf e8 d1 a3 68 6b 6b a3 be be 9e f1 e3 c7 f3 ee 7b ef 72 f3 cd 37 b3 75 cb 36 c6 8d 1f cb e9 53 67 e8 db b7 2f ad ad ad 08 47 90 88 c7 69 6f 6f c7 f3 3c 2e 5e bc 68 92 1f f4 e7 20 d5 99 e6 db df fe 36 7f f3 d7 7f f9 19 df bc eb 9e 2f 5c 58 68 05 a4 1b c7 df df a2 5d 54 e1 c4 f5 91 7f d1 6e 2b c2 6a 6a 07 21 c4 48 50 87 b5 9f 22 ef ab ed 84 e9 a2 b9 e7 4a 53 45 fd 89 71 05 53 34 27 4d 07 51 2d 27 44 13 e6 27 09 9b ec f6 f7 4f b2 08 f2 27 ee ee ae aa 8f 4e fe d0 d5 0d d5 d5 65 94 4f fe eb 99 7b a2 d5 74 28 3a f9 02 d6 dd 75 16 de 9f 8b 33 75 8d 69 74 99 58 55 6e af 87 fc 80 7f 77 2b 2c df 02 c9 3d 3f 97 ae 1c 66 a8 39 61 9c 4b 09 94 90 a6 dd 4c 40 ce Data Ascii: ojvd-dt:T3xm*z[hkk{r7u6Sg/Gioo<.^h 6/\Xh]Tn+jj!HP"JSEqS4'MQ-'D'O'NeO{t(:u3uitXUnw+,=?f9aKL@
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: f1 b5 a7 9f 60 f3 e6 2d d4 d7 d7 f3 d0 43 0f f1 dc 2f 9e 67 da f4 e9 24 12 49 0e 1f 3e cc a0 41 83 00 e8 4c a5 68 69 6e 66 e6 cc 19 ac 5d bb 8e 31 63 c6 50 5a 5a ca 86 8d 1b 78 fa c9 a7 78 f9 95 97 99 3e 7d 3a b1 58 8c 77 77 ec 64 fe 1d b7 b3 7d c7 76 06 0f 1e 4c 67 67 8a 6c 90 25 f0 03 2a 2b 2a b9 70 e1 3c c3 86 0e e3 d4 a9 53 14 17 17 53 55 55 c5 07 bb 77 b3 60 fe 7c 5e 7f 7d 35 0b 16 dc c1 fb 1f 7c c0 e0 41 83 e8 e8 ec a0 bd a3 9d 81 35 03 39 78 f0 10 e3 c6 8e 65 ff fe fd 4c 9e 3c 85 7d fb f7 31 b0 a6 86 33 67 ce 74 c9 ac 03 81 9f 95 3c f7 f3 9f f2 c0 fd f7 72 03 70 09 18 02 64 3e cf 83 7b 8d 80 5c 29 f6 6f 5d ff 91 fb 84 30 c1 cf 70 52 51 98 2c 1a 05 88 07 04 6a 45 d8 8b 2a ec 3a 1b 46 55 15 0a 47 38 a6 cd 3a a6 cf 93 ee ab 15 ce a1 fa 36 9c 40 3e 3e Data Ascii: `-C/g$I>ALhinf]1cPZZxx>}:Xwwd}vLggl%+p<SSUUw`\|^}5\|A59xeL<}13gt<rpd>{\)o]0pRQ,jE*:FUG8:6@>>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	634	OUT	GET /media/wysiwyg/home/enciassement-securite-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 112163 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "hPnpxZ+ykZMnoFj4H5DpUkD4dEIXWETRWL1iS2arCII" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=112163 idim=400x400 ifmt=png ofsz=112163 odim=400x400 ofmt=png Fastly-Io-Served-By: img08-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016277e9bde49ef2128ee107b507f5-dadd415db168ef67-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:27 GMT X-Served-By: cache-par-lfpg1960062-PAR, cache-dfw-kdal2120127-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 9c 65 49 5d a7 fd 44 9c 73 f7 bc b9 af 95 4b 2d d9 5d bd d1 74 37 28 08 d2 6c c2 88 80 82 4d 77 b3 08 3a 20 f8 0a e8 eb e8 bc 02 ea 38 88 b6 8e cc b8 f1 8e 3b 8a 38 8e 8e a3 a8 43 23 bc bc 22 2a bb a8 03 b2 35 74 75 75 2d 59 5b 56 e5 be dd e5 2c 11 f3 47 c4 39 f7 e6 cd 9b 55 d5 dd 99 75 b3 aa e2 e9 4f 76 66 dd 7b cf 39 71 cf 12 df 88 df 16 e0 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c Data Ascii: PNGIHDR6 IDATxyeI]DsK-]t7(lMw: 8;8C#"*5tuu-Y[V,G9UuOvf{9qp8p8p8p8p8p8p8p8p8p8p8p8p8p8
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: da 5a ef c2 25 c1 ee 59 5c 14 d6 de 66 3f 66 01 1f 57 2e db 71 3d f3 59 cc ac e4 58 a7 1b b2 57 70 51 58 8e 4b f1 6a 4c 36 b9 13 0f c7 f5 ce 33 81 2f 02 df db e9 86 38 36 e3 04 64 ef 91 03 7e 07 f8 13 60 6f 0c 33 1c 8e ce d3 0d fc 21 e6 d9 c8 75 b8 2d 0e 8b 13 90 bd c5 41 e0 d3 c0 0f 74 ba 21 0e c7 1e e5 07 30 0b 58 4d 76 ba 21 0e 27 20 7b 89 17 01 ff 1b f8 a6 4e 37 c4 e1 d8 e3 3c 0d f3 ac b8 05 d1 3a 8c 13 90 ce 23 80 b7 63 e2 df fb 3a dc 16 87 e3 6a 61 08 53 94 f1 c7 d9 43 c1 40 d7 1b 4e 40 3a 4b 01 e3 eb f8 45 4c b8 ae c3 e1 b8 7c 3c e0 3f 63 56 da ec ea 70 5b ae 4b 9c 80 74 8e 7d 18 5b ee ab 3a dd 10 87 e3 2a e7 5e 4c 3d ad 89 4e 37 e4 7a c3 09 48 67 b8 13 b3 6e b4 f3 77 38 1c 3b 43 f2 4c 3d b5 d3 0d b9 9e 70 02 72 e5 79 31 6e b4 e4 70 ec 06 fb 30 d9 Data Ascii: Z%Y\f?fW.q=YXWpQXKjL63/86d~`o3!u-At!0XMv!' {N7<:#c:jaSC@N@:KEL\|<?cVp[Kt}[:*^L=N7zHgnw8;CL=pry1np0
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 a9 0b a5 14 5a 27 1d b0 02 21 c9 e7 0a 5c 98 bb c0 dc 85 0b 0c 0c 0e d2 df db 47 14 87 44 71 84 d0 02 5f fa 54 aa 15 36 36 6a c8 ac 4f 24 62 3c df 23 eb 65 91 c2 43 08 89 50 20 94 46 1a 3d 42 64 3c 24 0a 8d ed e8 35 84 51 48 bd 5e 4f 7f c2 30 62 63 63 1d 88 37 b5 3a 97 cd b3 6f 7c 9c 9b 6e ba 91 1b 6e 98 e6 49 4f 7a 12 07 0f 1e 60 6c 74 94 fe fe 7e 4a a5 22 9e 94 9b 7c 2f ed cc 64 0e c7 65 10 03 cf 05 3e 7d a5 0f ec 04 a4 85 0e 0a 48 37 f0 25 e0 40 a7 1a b0 d7 88 a2 98 37 bf f5 87 78 f0 c1 8f 70 f0 c0 01 3c 2f c3 66 97 83 46 eb 98 4c 26 c7 85 0b 17 58 5e 5e 66 df f8 38 85 5c 9e 7a bd 0e 9e 02 34 52 fa 2c 2f ad 32 34 3c c2 f4 d8 7e ea ab eb 54 74 95 f3 95 25 36 2a 55 44 35 20 88 14 75 21 50 5a e1 8b 0c 9e e7 91 cd f8 78 68 04 1a cf f3 90 08 34 a6 83 17 Data Ascii: RZ'!\GDq_T66jO$b<#eCP F=Bd<$5QH^O0bcc7:o\|nnIOz`lt~J"\|/de>}H7%@7xp</fFL&X^^f8\z4R,/24<~Tt%6*UD5 u!PZxh4
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 64 32 54 96 d7 91 9e a4 b7 a7 9b ca dc 32 73 5d 19 a2 e7 3e 87 07 4f 2d f3 e0 17 3f 4d 6f 5f 2f dd 5e de 46 7f 25 3d bc 6e fa 11 4d 3f 9a d4 94 a5 93 70 ae c4 bc d5 2c 36 b2 65 1f cd 98 f7 b5 02 ad 8d 2f 27 7d 5d 0b 7b b7 28 84 04 21 05 9e f0 91 c2 47 78 82 58 85 44 2a 44 00 51 18 52 af 05 e8 28 b6 3e 98 0d ea 41 8d 38 56 84 4d 8e fd 5c c6 63 64 64 94 e9 e9 69 0e 1c d8 cf ed b7 df ce 81 03 fb 99 98 98 60 68 78 88 ee ee 32 19 3f b7 c9 b7 03 8d 99 8b 13 93 3d 87 06 9e cd 15 88 ca 72 02 d2 c2 15 14 90 1c 26 ea ea a6 2b 75 c0 bd c8 ca ea 1a af 7e cd f7 72 ec f8 09 46 47 46 89 95 42 e8 18 24 44 5a 13 6b 4d d6 f3 f1 f1 38 7b e6 2c 6b ab ab 4c ec 9f 42 f8 1e f5 5a 0d 5f 34 4c 32 51 14 12 fb 1e df f1 ac e7 f3 22 ba 90 1f f9 10 fb 07 4b 28 df 63 79 e6 0c 83 07 26 Data Ascii: d2T2s]>O-?Mo_/^F%=nM?p,6e/'}]{(!GxXD*DQR(>A8VM\cddi`hx2?=r&+u~rFGFB$DZkM8{,kLBZ_4L2Q"K(cy&
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 0c 59 0b 2b 54 55 8d 9c ef 21 95 87 d2 19 32 f9 12 a5 8c 26 17 99 a9 47 d4 7a 5b 0a dd 66 06 62 df 6a 11 10 13 75 d5 24 20 62 eb bc a4 a9 2b 44 da a2 90 4a 29 5b 1b 52 d3 ee 38 c6 69 bd e9 15 7b fc c6 1e 37 8b 48 f2 1a d6 a9 df 4e 40 1a a4 02 b2 e5 ad a6 b9 98 b5 b4 c5 b1 11 54 3f 93 41 6a 8d 46 a1 55 53 32 a5 0d a9 56 4a a1 94 c2 93 92 7a ad 4e ad 5a 45 45 11 71 1c 13 44 11 eb 1b eb 04 f1 66 53 7d b9 5c a6 a7 bb 9b 89 c9 09 6e 3a 7c 13 2f 7c e1 b7 f1 cc 67 3e 83 c1 81 81 4d c9 93 4e 50 2e 8b fb 31 8b 50 ed 38 4e 40 5a d8 65 01 c9 03 0f 01 07 77 f3 20 7b 91 d9 f3 17 78 e3 1b 7f 90 47 1f 3d c6 c4 d4 7e b4 30 8e 5c 2d cc 78 5e 29 85 e7 79 f8 9e cf b1 63 8f b2 b2 ba ca c1 03 07 f1 7d 9f 8d 4a 85 8c f4 52 97 b3 e9 a0 24 33 33 33 74 75 95 f9 85 5f f8 05 2a d5 Data Ascii: Y+TU!2&Gz[fbju$ b+DJ)[R8i{7HN@T?AjFUS2VJzNZEEqDfS}\n:\|/\|g>MNP.1P8N@Zew {xG=~0\-x^)yc}JR$333tu_*
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 94 cd 26 b0 6b 50 54 de c7 0e 57 bd d8 2b 33 90 3d 73 a5 76 49 40 0e 63 42 e9 ae 87 99 16 b5 5a c0 5b de fa a3 7c e2 93 9f e4 c0 fe 83 08 89 e9 3c ed 65 8e e3 18 a5 35 85 42 81 f9 f9 79 ce 9e 39 c3 f0 f0 30 c5 52 89 7a ad b6 69 c4 98 20 30 a3 79 15 c7 a9 80 68 ad 89 e3 18 df f7 09 c3 90 c5 c5 45 72 b9 1c 5a 6b ca 5d 65 34 9a 5a ad 46 a1 58 60 68 70 88 e7 3e f7 b9 7c fe f3 9f 47 4a c1 8b 5f fc 62 3e f4 d7 1f e6 95 f7 df 4f 77 77 37 ef 7b df fb b8 fd f6 db f9 bb bf ff 3b 4e 9e 38 c9 e4 d4 24 61 10 b6 f9 76 db cf 36 da a1 95 ed 90 44 a3 f3 bd ac ed 2e 5b 40 b6 d9 be 45 40 50 ad fb 7c 2c 02 92 88 be d9 c6 66 47 62 b2 e1 cd cc 44 5b 1f d6 b6 ce ff c6 11 5b 8e 65 7e 9b 92 f7 c2 68 4c bb 73 a4 21 e3 79 d4 aa 35 82 b0 46 be 90 b7 15 99 b3 d4 6a 75 54 1c 91 cf e7 Data Ascii: &kPTW+3=svI@cBZ[\|<e5By90Rzi 0yhErZk]e4ZFX`hp>\|GJ_b>Oww7{;N8$av6D.[@E@P\|,fGbD[[e~hLs!y5FjuT
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 56 58 b6 9b bc 6e 23 20 97 1d e1 d5 9e ad 3e 90 cb f3 df 68 bb 9d d6 f6 4c 88 ad 6d 4c 9d e2 c9 bf b1 ce 7d 6d 66 1b aa e5 b3 f9 5c 8e b9 b9 39 96 97 97 98 3a 78 d0 dc 47 9e c7 fa da 1a 71 ac 28 16 4b a8 38 36 d7 d2 9a da 8c c9 8c f4 b2 0a 21 d3 66 a4 9d 73 53 b6 bf 6e 9e 65 69 f3 99 64 f9 e4 30 0e 91 52 1a 73 a0 15 54 21 31 89 93 f6 1a 99 31 81 c0 cf e5 4c 5d b1 d8 2c 71 1c 87 21 9a 18 29 8d 8f a8 58 2e 52 2c 16 29 e5 0b 0c f6 0e 32 39 39 c5 c1 e9 69 26 a6 f6 9b b2 fa c3 43 26 d2 cc f7 c9 66 b3 9b af 47 9b bf 9f 20 df 86 a9 04 fe 84 70 02 d2 c2 0e 0b c8 83 c0 77 ee e4 0e f7 12 61 18 f1 23 ff cf 3b f8 d8 df 7e 8c a9 fd 07 f1 6c 47 29 9a 42 33 e3 30 46 78 56 18 a4 64 f6 dc 39 fa fa fa 10 52 52 ad 56 cd 2a 7c 34 39 27 d9 2a 20 ca 0c 1d ad 23 58 34 46 91 32 Data Ascii: VXn# >hLmL}mf\9:xGq(K86!fsSneid0RsT!11L],q!)X.R,)299i&C&fG pwa#;~lG)B30FxVd9RRV\|49' #X4F2
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: f9 7c 8e 7c 3e 9f 7e 8f 24 27 e7 12 e7 e7 f9 c0 d3 b9 06 2c 25 d7 9a 80 bc 8d 3d 34 ab da 19 04 bf fe 5b bf cd 2f fd da 7b 38 78 e0 10 b9 5c de f8 37 ac e3 33 b1 3e 6f 32 33 37 87 16 35 a1 e2 18 cf f3 e8 ed eb 43 2b b3 38 54 22 22 71 14 99 12 16 5a 13 06 01 41 10 98 2a bd 4a e1 7b c6 4e 9e cd 66 8d f9 02 eb 97 88 95 ad 0c 6b 0e a4 da 99 a9 76 08 ad 75 ea 7b 49 10 08 b3 3c 49 bb 85 05 db ef 05 a1 5b 7c 26 97 ec e4 d2 83 5d 01 36 0d a1 cd 20 5b aa 96 01 bc 68 2b 50 a9 8e 3f 0e 12 a7 f9 da ea 2a 4b 8b 4b 4c 4e 4d 91 cb 66 41 08 56 96 97 09 c3 90 9e 9e 1e 63 d2 dc 26 7a ac 9d 58 a8 6d 3a d2 d4 e4 e3 79 84 61 48 b5 56 a3 5e af 13 d4 43 93 af 64 73 46 3c 29 c9 64 32 78 be 59 b7 c4 f3 3c 7c df c7 4b 9c eb 5a 23 13 31 49 4c 48 89 60 6e 5a 00 66 b3 ef 27 31 7e 81 Data Ascii: \|\|>~$',%=4[/{8x\73>o2375C+8T""qZAJ{Nfkvu{I<I[\|&]6 [h+P?KKLNMfAVc&zXm:yaHV^CdsF<)d2xY<\|KZ#1ILH`nZf'1~
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: eb 01 b9 7c 9e ac e7 99 ec 5d 20 8e b4 b5 88 34 e6 f2 51 4b 29 12 b3 1f 5b 79 57 35 d6 8c 10 42 10 44 91 e9 94 a5 b4 ce 73 f3 b4 25 ab dc d9 8d 53 47 a8 27 3d bc a2 87 c4 94 29 89 ac f8 c4 71 4c ac 62 a2 30 24 88 34 95 b0 8e c0 94 26 97 c2 98 95 32 d2 27 9b cb a6 39 09 8d fd d3 98 31 34 91 cc 68 12 36 3b 8a 9b 6d 49 89 53 5b d8 30 de a6 7d 25 b3 0e ec 04 a5 c9 b9 be 2d 42 25 bd 77 cb 1b ed d6 f2 b8 b4 4d 4b eb b8 e9 6f 6d 0b 08 4a 13 10 91 cc 36 5a 0e d5 6c ef 4f de 4f 8e 94 8a cb e5 88 a1 d6 14 f2 79 16 97 97 d8 58 5f e7 e0 a1 43 e9 c2 54 4b 4b 4b 68 ad e9 eb ed b5 b5 aa cc 75 96 a2 65 d6 98 c4 d7 36 91 c9 64 58 5f 5f 67 75 6d 8d 81 fe 7e a4 b0 d1 7d b6 53 4d c3 a4 3d 33 f0 89 c3 d0 06 5f 60 97 eb f5 ec 00 47 a6 8e f2 38 8a d2 ef 97 94 3d 89 c2 10 ad 14 Data Ascii: \|] 4QK)[yW5BDs%SG'=)qLb0$4&2'914h6;mIS[0}%-B%wMKomJ6ZlOOyX_CTKKKhue6dX__gum~}SM=3_`G8=
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 66 35 bb a4 44 ba 19 ea a5 c2 90 cb e7 a9 56 2a 9c 3d 77 8e 62 b1 c8 c4 f8 38 61 60 a6 ce 8d 11 6c 22 22 66 34 1e 04 21 8b 0b 0b f8 7e c6 ac a3 90 cd e2 fb 1e 3a 29 79 b1 4d bb 9a 3b 55 bb 57 eb 2f b8 b8 5d 3f 29 7e d7 d8 91 c6 44 bc 4a a4 2f 6c f2 a2 de 12 de d9 1c 11 94 bc 96 ec 4f 08 41 2e 9b 43 7a 5e ba a8 95 b6 26 b0 28 0a 6d 76 30 d4 6d 84 18 68 1b fd 25 d3 4a c3 9e ef d9 50 65 2f 75 8e 46 51 94 7e c7 cb 4d b6 bb 38 56 18 55 6c 7d 3c d2 ea 6f d3 0c 48 b4 77 b4 68 6b 86 f2 b8 3c 57 cc 25 69 b3 03 81 c9 e4 ce f8 3e e7 ce 9e 25 9b cd 32 3c 3a 4a ad 56 23 93 c9 32 37 77 01 df f7 19 18 18 a0 56 ab a5 eb c7 6c 97 c7 91 1e ca 76 be cb cb cb d4 83 80 d1 d1 51 93 6f 74 79 a1 ac 6d f7 79 39 af b7 23 8e e3 b4 8e 57 65 63 83 c1 c1 41 02 b5 7d f2 65 42 b3 df 4d Data Ascii: f5DV*=wb8a`l""f4!~:)yM;UW/]?)~DJ/lOA.Cz^&(mv0mh%JPe/uFQ~M8VUl}<oHwhk<W%i>%2<:JV#27wVlvQotymy9#WecA}eBM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49793	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	851	OUT	GET /media/wysiwyg/footer/In-White.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	806	IN	HTTP/1.1 200 OK Connection: close Content-Length: 614 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "Er9JPPlqasbbyAQe9ZCjC+gd4DwwqZ3oY16mIabWMnI" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=848 idim=116x96 ifmt=png ofsz=614 odim=116x96 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-1801627777b737f30c86c3c2aec5f755-3083b16396b066ec-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960061-PAR, cache-dfw-kdal2120047-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	614	IN	Data Raw: 52 49 46 46 5e 02 00 00 57 45 42 50 56 50 38 4c 51 02 00 00 2f 73 c0 17 10 55 48 b0 6d 37 6e 1b ee 7f d3 37 a3 40 27 40 d2 b9 10 18 01 85 b6 6d 53 db f9 7e db b6 6d db 56 53 b3 9a ff f4 27 db b6 6d 3b db b6 6d 7c d6 7d 0e dc 46 52 24 d7 31 e3 d0 f6 0b ba 1b bf 74 3b f0 b0 84 39 b7 f4 5e b0 1f 2e 6e 61 69 73 7a 7f 0f 4d e2 9c de 84 df ed a4 ce e9 3d d2 61 c9 23 7d 8f dd ec ee 3d f0 d9 9d 3d 93 3e 3f ef fc 77 35 90 21 01 f8 17 34 7e 01 06 4f 21 ee 58 be 7f 41 2c dd 96 e1 8a 44 5f 64 5c 15 81 4e af 2f 73 d0 6b 50 d7 41 a6 06 96 11 96 25 c0 c3 45 e0 4e 05 ce 3a cc d4 54 f3 cc 77 75 93 51 1b 39 35 db a2 ef ab cd 9d 71 cb e2 bd fb 54 ea 43 0d f2 7f ed 43 ef 39 f5 c6 0a 35 c7 7e bf ce c0 1b 97 c6 9d 16 09 ec 84 69 72 90 6a 1e e9 53 ed be a6 be 8e cd b7 2c 0a c1 Data Ascii: RIFF^WEBPVP8LQ/sUHm7n7@'@mS~mVS'm;m\|}FR$1t;9^.naiszM=a#}==>?w5!4~O!XA,D_d\N/skPA%EN:TwuQ95qTCC95~irjS,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	851	OUT	GET /media//wysiwyg/footer/CharteQ.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	813	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6678 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "iJRVsboGOXTB1Vo+IxtVZkfdepqv/ziyvpE7G152+0I" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=12366 idim=266x260 ifmt=jpeg ofsz=6678 odim=266x260 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162777797ca4bca65954f03d88117-37da3543f8af60e4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960025-PAR, cache-dfw-kdal2120036-DFW X-Cache: HIT, HIT X-Cache-Hits: 18, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 49 46 46 0e 1a 00 00 57 45 42 50 56 50 38 20 02 1a 00 00 f0 6b 00 9d 01 2a 0a 01 04 01 3e 6d 34 97 47 a4 23 22 a1 28 13 49 b8 80 0d 89 4d db f0 fd a0 5e dd 90 78 cb ed 06 f7 de 13 f3 33 da 06 bd fe 57 fb 57 ec 2f 64 5d db f6 37 96 df 95 7e e1 ff 8b fc 77 e5 8f cc cf f1 ff b0 7e e8 ff 42 7e af 7c 02 fe b9 7e be f5 97 f3 1b e6 bd ff 53 d7 ef a2 77 ee 7f 5d 37 a4 bf 9b 07 fd df 69 cf dc cf da 1c 54 be e8 3f ad 7f 98 f1 47 c9 7f ad 7d 9f f9 60 c3 1d aa 7f 32 fb bb fa ef 65 3f d3 77 bf c0 0b f2 6f e8 1f ee 37 ac e1 03 d8 17 be be 9a 7f 5b fa b3 ea a7 88 07 eb 0f a9 5f f5 bc 29 fd 3b d8 27 f9 f7 f8 9f 58 9f f1 fc d7 7d 54 48 29 d9 c9 78 bd da f3 1c c5 dd ab ad 33 fe 02 48 0a 01 75 77 c7 49 1b f0 e9 15 87 a6 99 42 ab 7b d0 15 9f 46 eb 70 ba 61 01 97 79 ac ce Data Ascii: RIFFWEBPVP8 k*>m4G#"(IM^x3WW/d]7~w~B~\|~Sw]7iT?G}`2e?wo7[_);'X}TH)x3HuwIB{Fpay
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 6d ad e8 6b 1a 56 eb f9 78 3c 5f 1f ef 2f e8 c0 e1 f0 cb 62 b3 f3 1c 10 7a 97 9e d3 1c fb 35 56 7f e1 a8 c9 c2 f0 d2 78 08 b9 25 46 6d 07 f7 66 10 54 e4 d7 a1 9d cd ae 3b 7f 9c 36 92 d7 f6 40 18 ee bd 1c 4b 2f 1f 57 fd 0f 6e 34 66 ad aa ff a4 20 1d 11 5a 98 f4 4f 94 e9 33 e1 ec df e5 e0 45 57 ee 16 df b8 40 a5 fe 72 a3 b2 5c 26 10 11 47 d9 9d fc 4b 33 33 b6 71 c2 be e9 66 c7 84 84 62 11 41 f3 43 32 84 ee c2 bc bc cb 35 d5 99 42 ef f7 e6 b2 98 3a 28 64 7b 38 8a 6c f8 6e 68 a1 41 03 03 4b b0 2c 01 47 43 d6 11 90 4e ce 53 91 8d 9e de 65 80 36 2f 1b 6a df 2b 7f 56 54 0c 91 62 84 97 af 0f 7a 31 bd a4 51 93 b4 6b 56 38 d4 0e 82 ea db 89 3b 88 92 53 a7 37 10 f2 11 b8 4b 28 a3 40 be 25 32 40 de 5f b5 81 67 9f 97 2c 10 ae cb 9a 5b 84 50 e2 97 44 9f fe de 3f 93 67 Data Ascii: mkVx<_/bz5Vx%FmfT;6@K/Wn4f ZO3EW@r\&GK33qfbAC25B:(d{8lnhAK,GCNSe6/j+VTbz1QkV8;S7K(@%2@_g,[PD?g
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: c1 8f 53 dc 56 22 f2 29 33 18 08 0a 82 ac a6 58 e2 6f 72 9e 8c 00 55 a7 8a 3c 27 49 a4 fd 2b 5f 9c ea 8d d8 7b ab a7 6e bb f9 ed a5 f1 4a 56 b3 67 c9 ce 80 f7 18 75 fa 48 2c 49 6f 0a ff fc 60 a0 b8 8c e0 d3 c4 ef 6e 96 53 62 95 ae 2a 91 53 40 1d 47 d2 1b de a3 57 6a 2c 52 f9 88 99 ef 33 7d 3b dd 34 e4 5d 01 a7 b4 ee cb 99 9f 9c 86 41 55 cb 21 fc 3b c4 7b 71 ff 86 21 02 fe 95 e1 12 bd e5 3c 82 f0 91 2f c2 80 47 e9 7f 1a 38 97 a7 5f 0f 72 53 fe 7d 96 89 64 eb b1 12 46 82 14 0f 86 a5 67 d0 3e 42 0b a7 48 9b fb 2a e6 f2 0a 67 3c 71 ef 58 e6 53 e7 b5 6a d1 9c 14 c1 9d ec b8 dd 07 12 4a b1 ad a0 87 b8 09 fe 76 ac c4 23 94 d0 21 dd af 2b 5a 4c a0 90 f1 ad 59 5d 1a 8a ed 44 d7 01 a1 98 62 31 09 b7 68 ab 7c ab be 98 b7 7e 53 0f 46 0f ff c3 45 cb 61 3e 8a c6 47 de Data Ascii: SV")3XorU<'I+_{nJVguH,Io`nSbS@GWj,R3};4]AU!;{q!</G8_rS}dFg>BHg<qXSjJv#!+ZLY]Db1h\|~SFEa>G
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: c4 b4 4b 3d 55 73 49 c1 58 df a8 0b b7 86 c3 c5 c4 a9 e3 48 f7 34 04 24 5b 1e fb d7 a8 1f 0f 8f 8c f7 8e 6d ca 98 6c dc 3c 9c 56 02 fe 7d e6 f7 a3 48 17 db 3f 77 7d 0b bc 21 77 d2 e3 04 39 e4 78 ed b2 06 dc 61 db ca 19 2d 39 c5 8a dd 94 d8 87 89 35 03 6e 5c cf 69 27 16 46 6c 5e 0e e5 ef 2b 0c ca e4 39 5a 5d a9 83 4c aa 86 32 65 db 68 83 18 7b 6d a0 b9 89 6e a8 46 86 c2 2f 84 fe 9f 4f b6 21 08 14 85 61 7a 2e b4 9c 04 a6 88 e9 0f 78 bb 53 0e 9b 57 60 9a b0 cb c2 69 86 5f 0d 36 bf 62 a2 d4 c7 fb 93 50 61 ca b7 9b e5 b5 4d 78 e5 0a 7c b8 6b 16 c0 5f ab 5f 84 5e fe e8 2a 73 87 dc 70 cb 68 6f 8c 0b 43 aa 93 f0 85 ed 54 8e 39 5e f0 f6 c1 9b d2 01 67 77 5a d8 a2 bf 1c 90 6b 48 63 cb b4 13 29 63 79 2d 85 33 8e 81 98 8b 7f 74 d7 7e 91 41 d4 d3 89 66 7e 60 bc 3e aa Data Ascii: K=UsIXH4$[ml<V}H?w}!w9xa-95n\i'Fl^+9Z]L2eh{mnF/O!az.xSW`i_6bPaMx\|k__^*sphoCT9^gwZkHc)cy-3t~Af~`>
2024-10-25 08:16:27 UTC	1162	IN	Data Raw: 33 38 a8 ae ae 0b 13 42 58 ef 54 68 1c 21 3e e3 08 dd b6 71 b7 b0 1c d6 2c 5d 23 4b 3f 08 7e 7f 11 64 a0 29 5c b1 72 b7 19 2e f6 14 f6 cd 29 97 ce c8 36 42 1f 4e d1 1a b1 cc aa ed 69 f5 ab fa f3 72 95 e7 53 17 4d 47 8f a3 07 1f 9a 50 cf 10 74 0d 08 ae 4a 62 43 92 7e 57 e6 0a b0 99 29 12 83 b4 64 13 d8 ee 0d 1f 29 16 05 45 54 b0 c0 d8 a0 e5 83 c9 4b 14 26 47 db ab ad a7 e8 59 be 4d 8d 7c 8f e0 66 6e b0 da 2b de 4e 4e d3 de 26 3a 79 fa 24 16 32 50 e7 cd 7d e6 b3 f0 a2 cb 12 ad 8f 21 27 94 8a c2 8a 7d 69 a8 54 94 c7 64 bb 97 e0 8b 13 20 c7 55 eb 24 32 a6 b5 ee 0d 4a cb 84 a4 f4 46 ee 3e 90 07 af 6a 5a 8c f6 90 43 bd f0 ef ef 9f c2 bf 9e c2 45 d0 4e ed cd 4d 34 f4 61 8d 69 10 48 e3 17 1a eb dd d0 d2 0b 0d 63 0a 3b 40 65 f9 38 fd 76 0b a9 b6 6c 33 f4 e5 67 87 Data Ascii: 38BXTh!>q,]#K?~d)\r.)6BNirSMGPtJbC~W)d)ETK&GYM\|fn+NN&:y$2P}!'}iTd U$2JF>jZCENM4aiHc;@e8vl3g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49792	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	629	OUT	GET /media/wysiwyg/home/emballage-cadeau-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 106299 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "/ZZ0CmmDFLgLFRy0nem7x0s98sYPUsl2iGXAbr6oLQQ" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=106299 idim=400x400 ifmt=png ofsz=106299 odim=400x400 ofmt=png Fastly-Io-Served-By: img08-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016277e847093b4bcb7ad99b81b95b-81a6e544df1cad94-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:27 GMT X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-kdal2120087-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 7b b4 65 c9 79 d0 f7 fb aa 6a ef 73 ee ed be fd 9a e9 19 8d 34 d2 e8 2d 1b db c8 b2 2d 09 1b 0b 81 6d c5 02 83 1d c0 80 31 0f 63 c0 5e c6 90 00 09 04 42 42 b0 0d 04 92 95 40 b2 88 17 24 bc 56 48 42 12 1e 06 8c 1f 2c b3 6c 1c 30 36 b6 6c 23 c9 92 fc 10 96 46 23 cd 43 f3 e8 d7 7d 9d b3 77 55 7d f9 e3 ab da e7 dc 9e 9e 77 df 3e b7 bb eb 37 eb cc ed 7b ee bd 7b d7 d9 bb 76 7d ef af a0 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d 46 a3 d1 68 34 1a 8d Data Ascii: PNGIHDR6 IDATx{eyjs4--m1c^BB@$VHB,l06l#F#C}wU}w>7{{v}h4Fh4Fh4Fh4Fh4Fh4Fh4Fh4Fh4Fh4Fh4Fh4
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 6e 1f de 85 35 3c fc e6 4d 0f a4 d1 38 66 7e 0f 16 64 ff b2 4d 0f a4 f1 fc 34 01 72 f2 f1 58 86 d5 bf c5 d2 74 1b 8d bb 81 37 60 bd b5 be 93 56 04 7b 62 69 59 58 27 9b 87 b0 0d 7c 5a bb ec c6 dd cc 8f 63 56 c9 27 36 3d 90 93 44 cb c2 6a 3c 1f bf 13 ab 26 6f c2 a3 71 b7 f3 65 c0 bf 07 7e ef a6 07 d2 38 4a 13 20 27 8f 19 f0 bf 02 7f 1f d8 bc 8a d1 68 9c 0c ce 00 ff 3b f6 6c cc 36 3c 96 46 a1 09 90 93 c5 1b 80 1f 03 be 75 d3 03 69 34 4e 28 df 8a 6d 60 f5 da 4d 0f a4 d1 04 c8 49 e2 fd c0 cf 00 5f b2 e9 81 34 1a 27 9c 77 61 cf 4a db 10 6d c3 34 01 b2 79 04 f8 53 58 fe fb f9 0d 8f a5 d1 b8 5d b8 88 35 65 fc 93 9c c0 64 a0 bb 85 26 40 36 cb 16 16 eb f8 cb 58 ba 6e a3 d1 78 f1 78 e0 bf c7 76 da 3c bd e1 b1 dc 95 34 01 b2 39 5e 8d f9 72 bf 61 d3 03 69 34 6e 73 be Data Ascii: n5<M8f~dM4rXt7`V{biYX'\|ZcV'6=Dj<&oqe~8J 'h;l6<Fui4N(m`MI_4'waJm4ySX]5ed&@6Xnxxv<49^rai4ns
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 86 fb 2e f2 d6 37 be 9a b7 7d ee 5b f9 ec 53 4f f1 f3 bf f0 31 ae ed 5d e1 cd 6f 7a 33 e7 ce 9c e7 ca d5 ab a4 98 79 e4 b1 47 f9 f4 63 8f b2 7b f5 1a a7 e6 5b dc 77 f1 5e 86 04 1f f9 c4 a3 7c f2 d1 c7 38 73 f6 0c 3b a7 76 70 f3 9e 71 ef 80 7c 65 9f ad 79 60 e7 f4 29 ce ee 9c e1 0d 0f dc c7 43 f7 9e e3 8d af 7d 2d 6f 7a f0 41 ee 3b 7b f6 e4 4d f6 c6 9d c4 67 80 cf 03 ae dd aa 13 36 01 72 03 6e a1 00 f9 5b c0 1f b8 55 27 3b f1 88 b0 58 2e 01 08 21 10 bc 47 81 98 32 31 46 16 8b 81 67 ae 5c e1 60 b1 a4 0f 81 0b e7 ce f1 d8 93 cf f0 9d 7f e3 6f f2 a9 a7 9e a1 3b b5 43 0e 1d 69 4c 2c c7 05 42 a4 eb 02 5d df 23 22 a8 08 3b a7 76 38 45 e4 f3 df fc 1a 2e ed 5e 61 7f ff 90 b8 38 e0 13 3f ff 31 16 fb 07 7c e9 bb be 8c f3 e7 ee e1 17 3f fa 0b ec 32 d0 9f de e6 be 0b Data Ascii: .7}[SO1]oz3yGc{[w^\|8s;vpq\|ey`)C}-ozA;{Mg6rn[U';X.!G21Fg\`o;CiL,B]#";v8E.^a8?1\|?2
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: bc ef 38 3c 5c e0 c4 d1 05 cf 7c 6b 9b b7 bd f5 ad 84 ed 9e 27 ae 5d 25 8a 07 81 14 33 c1 39 bc 17 9c 04 e6 db 5b 38 f1 8c 71 04 81 ac 89 10 3a 04 cf 72 39 d2 75 1d 39 25 44 9c c9 c8 ac 74 ce a3 9a c8 29 e1 bc 20 e2 48 9a 48 71 c4 e1 90 10 f0 39 f3 90 57 be f1 8b de c8 7c 71 95 03 7a 9c 08 9a 23 88 a7 df 3e c7 df ff c0 cf f3 a1 c7 9e e1 de 33 9e 6f f8 ad ef e7 be ed 2d 1e 79 fc d3 bc e3 ad 9f cf 8f fc e4 8f f1 fd ff fc 47 f9 e3 7f e0 8f f2 3d 3f f5 23 7c f0 89 a7 39 bd b5 83 08 64 8d 24 cd 88 f3 28 8e 1c 33 ce 39 b2 66 44 6c 11 8e cb 81 3e 74 04 2f 0c e3 80 aa a2 0a 38 87 33 a9 88 ad f5 82 c7 a1 0a 71 8c 84 e0 70 de b3 1c 06 04 e8 66 33 5c 08 cc 76 77 c9 5d 47 9a 05 dc 10 39 1c 46 d4 39 82 0f ec cc 7b 7c f0 78 ef c8 d9 ae 8b 0a 38 32 5d e8 f0 62 82 c5 39 Data Ascii: 8<\\|k']%39[8q:r9u9%Dt) HHq9W\|qz#>3o-yG=?#\|9d$(39fDl>t/83qpf3\vw]G9F9{\|x82]b9
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 89 a3 eb 3b 9c 38 bb 4e 39 73 f6 f4 36 5e 3c a7 66 33 ce 9e de 62 e7 d4 16 db b3 8e ed ad 9e 59 f0 38 11 66 7d 30 81 77 3c fc 3a e0 b7 61 9b 50 dd b1 dc 2d 02 64 8e 6d 12 75 73 70 8e a7 2e ef 71 ea de 8b 84 30 63 d4 4c 70 9e 9c b2 69 77 88 2d f6 39 03 c5 4f 28 f5 c9 10 22 e6 0a 11 15 62 b4 c0 2d 4e 4c 3b cc a6 f5 0b 66 75 e4 14 d1 6c f1 0d fc ea 30 59 23 a2 0e d4 b4 2e d1 44 54 41 9c 33 c1 a1 4a d2 f2 c0 17 ad cc f9 22 b8 00 b0 f7 54 33 51 b3 2d bc 36 50 14 b5 c7 ca 49 f9 5e c8 36 c4 b2 3c c3 6c 3e 67 b9 1c 79 f4 d3 9f e6 35 f3 19 7e 36 67 ef f0 d0 5c 50 7d 20 6b 06 94 f9 7c c6 30 46 52 4a a6 7d 62 ee b5 18 13 c1 3b 42 e8 cc b5 a6 4a 4a 99 9c 13 4e 02 7d d7 93 16 07 0c 83 b9 87 ca 25 22 25 73 e1 e0 84 65 ea f9 d4 b5 91 bd b8 40 e3 80 3a 07 c5 5d 74 b8 7f Data Ascii: ;8N9s6^<f3bY8f}0w<:aP-dmusp.q0cLpiw-9O("b-NL;ful0Y#.DTA3J"T3Q-6PI^6<l>gy5~6g\P} k\|0FRJ}b;BJJN}%"%se@:]t
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: c1 72 b9 24 8e b6 a0 aa 0a 07 07 07 38 ea fc 48 b8 6c 89 13 a2 ca 78 b8 b0 f9 a0 90 55 10 ef d1 9c 8b 55 a9 36 cf b2 7d 4d 39 e2 bd 23 e5 44 22 5b c0 df 79 c6 e5 68 8a 4f 11 0a 39 59 7c 4a d5 ce 99 52 2c b1 20 53 ad ed 9e da bd 52 b5 05 3d e7 cc f2 70 61 31 b9 be 9f 2c 4f 73 1d 59 18 32 46 5b cc 9d 13 bc 0f 64 22 43 4a 0c 8b 25 69 8c 24 4d e4 22 30 6a 06 9e 96 38 5d b5 98 72 b2 a4 8c 31 0e e4 ac 25 ee 21 c4 71 40 9c 63 96 7b c6 38 32 0c 4b 54 53 71 a1 3a 16 8b 05 39 29 33 3c b3 d9 36 9a 95 21 66 9e 22 f2 af 3f f8 8b fc ce af 7c d7 2b 5b 24 56 fc 49 e0 6f 02 8f df ac 03 9e 24 ee 06 01 f2 9d dc e4 4d a2 bc 13 4e 9d da 62 7b 7b 8b 45 1c 19 c6 c1 b4 6d 31 ab c3 12 5f dc 4a eb 74 1e 17 04 51 9d 7c c8 8a a2 5e 50 5d 59 02 aa e6 72 40 d4 dc 60 c5 0d 64 f9 2d 6e Data Ascii: r$8HlxUU6}M9#D"[yhO9Y\|JR, SR=pa1,OsY2F[d"CJ%i$M"0j8]r1%!q@c{82KTSq:9)3<6!f"?\|+[$VIo$MNb{{Em1_JtQ\|^P]Yr@`d-n
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 8a b5 65 df 43 d6 8c cb 19 29 6e 49 01 5c c9 48 0b 5d 57 e2 00 76 8d 5d 4c a8 53 48 35 85 01 c8 99 61 19 71 a5 e6 42 d5 ce 1b b3 65 87 39 17 70 58 86 5f 5d 60 35 2b 2a 76 4d 9c 13 f2 68 96 5f 37 9b 31 a4 88 38 c7 18 07 c6 61 c4 39 c7 ac ef 4d b8 8c a3 65 0a 46 53 64 ea fe 2b 82 09 a4 b1 c4 11 62 4a 66 b9 0a c5 3d 17 50 11 c6 12 cf d2 9c 19 d2 80 77 81 8c 90 47 4b d7 ce a9 28 14 ce e2 87 19 8a 90 b3 1a 94 e2 a0 35 e1 3a 8e 38 f1 88 a4 e2 0e ce 56 58 59 ee c3 10 07 b3 ea ca b3 91 72 b6 6c c8 20 a4 18 cb 3c 34 2b 29 04 47 56 65 58 8e 45 89 cb 8c 43 2e 31 19 65 8c 23 07 7b 07 9c bf 70 ee 85 1e ff 97 8a 07 fe 22 d6 b1 f7 8e e2 4e 16 20 9f 07 fc 8e e3 3a f8 d9 b3 e7 38 38 d8 e3 6c ba 88 77 5d c9 4e 01 53 81 6d 91 f0 d8 7a b6 0a 88 0b 4e 2d d8 9a c8 e0 c0 e7 55 Data Ascii: eC)nI\H]Wv]LSH5aqBe9pX_]`5+*vMh_718a9MeFSd+bJf=PwGK(5:8VXYrl <4+)GVeXEC.1e#{p"N :88lw]NSmzN-U
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: d6 30 9a 1b 31 45 ab 09 71 d9 92 16 7c b1 34 14 f0 be 9b 16 7f c8 38 01 df 39 96 c3 88 28 84 2e 90 49 96 f9 27 82 96 aa 7d b0 24 88 29 be 25 82 17 21 89 96 d8 61 44 71 84 d0 5b ba 7b 09 f2 8f 71 9c fe 6d 29 f2 99 1c 23 43 ad a9 b2 40 15 29 9b 25 58 2d 6b ef 41 b3 05 ef fb d9 ac cc 36 9b 7e 35 a5 58 8a 5b 30 e5 91 b3 5b 33 e6 5b 5b cf 7a 16 6e 12 ef c5 aa d3 7f e4 b8 4e 70 ab 39 36 0d 7d c3 7c 17 47 12 50 6f 3e c1 39 ee 39 b7 63 bd a8 48 c5 5d 21 d7 9d b5 c6 29 04 bb d4 a6 15 79 75 88 28 ee fa ab 5f dd f7 f5 af b3 f9 b1 eb cf c4 95 d8 08 55 70 38 44 ac f2 dd 3b cb d0 71 e2 f1 6b af fa 9e 88 69 8e 96 99 e5 ed 25 cf f7 72 20 56 45 1f aa 0b 86 aa fd 96 c5 c7 39 a4 0b 93 66 ed 44 98 cd 66 e5 73 aa b5 a4 28 56 98 f5 e8 4a 93 c0 a0 58 0c 22 26 54 9c b7 22 ba 94 Data Ascii: 01Eq\|489(.I'}$)%!aDq[{qm)#C@)%X-kA6~5X[0[3[[znNp96}\|GPo>99cH]!)yu(_Up8D;qki%r VE9fDfs(VJX"&T"
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: f5 7f af bf 58 7b 4d ff d5 9f 3b 99 02 99 6e 12 42 ab bf ab 6e 95 4a 3d 6d d6 84 66 e8 7c 47 e8 82 d5 b0 24 0b 60 5a eb 78 f0 02 a1 26 97 65 13 98 a6 51 7b 7c 58 35 d7 ab 6e 05 a7 9e 5c 1e 6a 5b 2c ec ba 8e a3 b9 17 9c ab ad 40 a4 64 17 95 85 30 33 b9 df ea 20 93 5a ea 26 0e 32 82 0b 33 76 f7 0e 39 bc fc 59 2e 70 c0 a9 ad 6d 1e 79 f2 29 de 74 f1 01 e6 9a 39 a5 9e b3 dd 16 87 c3 62 8a 75 d4 58 54 f0 d6 21 56 c9 96 cd 54 6e 77 aa b5 0b 25 81 a1 de d7 ce 17 4d 56 61 5c 0e b8 7a ff a4 d6 61 c4 29 c0 ed 8b c5 e0 c4 f6 43 a9 9f 51 d7 2c 8e 2a c0 aa 10 8a 25 73 a9 5a 1c 96 b1 96 27 ab 43 ca fc 43 64 6a 29 63 a9 bd 96 7a 2c c5 f2 a9 bd c5 ea fb ce 39 ba 10 4a fd 52 71 b5 95 04 8d 5a 00 9a 4b fd 46 ed 8e ec c5 95 e4 0a 13 dc 93 05 5e c6 9f 52 b2 f1 6a 9a e2 3e 69 Data Ascii: X{M;nBnJ=mf\|G$`Zx&eQ{\|X5n\j[,@d03 Z&23v9Y.pmy)t9buXT!VTnw%MVa\za)CQ,*%sZ'CCdj)cz,9JRqZKF^Rj>i
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 56 9c e8 38 b9 53 04 c8 69 e0 db 6e e5 09 05 6b 57 d1 f9 60 2e 25 ad 79 2e 50 2b d1 5f 88 aa ed d7 9c fc 1b 59 29 37 93 95 a0 38 ea d6 aa 0e fd 69 f1 28 3e f5 fa de 6a 61 29 9d 5d ab 9f 9b a2 ad aa 05 76 eb 16 bb 3e 58 bb f0 58 9a fe 55 e1 e7 9d 67 be 35 b7 54 63 17 4a 96 d3 30 2d 84 de 7b 82 5b 69 9a aa 6a 6d e6 dd 6a 2f 70 c1 da e0 ab 5d 40 6a 3d 8a a5 5f 95 54 de ea 30 5a 85 9c 70 aa 04 d7 b1 58 2c 89 31 71 e6 dc bd ec 3e 75 99 7c 69 97 a7 f7 77 b9 92 96 88 64 e6 5b 73 2b 80 d1 52 00 e9 ea 82 d8 15 f7 79 2e 6e 23 5b 14 a7 6c a2 29 36 50 fa 5d 95 bf 4b 65 b7 c5 e9 fa ca 2a 35 16 b7 ca 56 b2 b6 1b 3a 55 48 57 17 68 d7 75 ac cd 2c fb bd f2 b3 69 ce 88 05 e2 ab 7f bf 2e a8 ce 39 eb fe 5b b4 fb ea 2e 43 d5 5a e4 97 c2 bf 1a 47 a9 42 bb 5a 1f 5d b1 04 d6 cf Data Ascii: V8SinkW`.%y.P+_Y)78i(>ja)]v>XXUg5TcJ0-{[ijmj/p]@j=_T0ZpX,1q>u\|iwd[s+Ry.n#[l)6P]Ke*5V:UHWhu,i.9[.CZGBZ]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49789	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:26 UTC	864	OUT	GET /media/wysiwyg/home/semaine-dvlpt-durable_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:27 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17836 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "FOQ6ztfvGKw4lus6PJIxZBNx2lNSGcOfypnOk40tlEs" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=103021 idim=490x490 ifmt=jpeg ofsz=17836 odim=490x490 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-18016277e898c4a347f5f78c22507b5c-dbb6d2ab1d7cfdf4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72188 Date: Fri, 25 Oct 2024 08:16:26 GMT X-Served-By: cache-par-lfpg1960044-PAR, cache-dfw-kdal2120062-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 52 49 46 46 a4 45 00 00 57 45 42 50 56 50 38 20 98 45 00 00 30 53 01 9d 01 2a ea 01 ea 01 3e 6d 34 96 48 a4 22 a2 24 23 91 b9 d0 80 0d 89 67 6e 8b b7 56 a6 4f 23 85 7f 97 dc 8a 26 52 f0 f3 fb f0 84 8c 6e 05 e9 c3 fe 27 a5 0f a6 9f 52 1e 60 3c d4 7d 2b f4 44 7a c1 ff 3b ff b9 ec 1f fb 33 eb 7f eb 6f fe 1f d7 ff 30 b3 ff 77 99 cf a2 7d d1 f1 27 f4 ae b9 ac 19 fb e7 82 9f 7b 34 05 dc bf f0 5f ea fa 0b e4 b7 77 f7 77 e6 47 df af 3a cf d6 fd 9c f6 57 ed 67 ec 4f c0 27 f3 8f e9 3f ad be e8 f9 12 7e 4f fe f7 b0 47 f4 8f f1 3e b2 df f2 f9 d8 fd bf fe 3f b0 b7 4c bf 43 91 d3 7b 5d b2 4f b3 f0 51 de dd ac 69 24 e1 24 0b 6d 62 b2 d7 bf 8f af d7 0a 4c e2 8a 29 06 df da 48 fb 5b c0 0a 50 37 b0 1a d4 bc f0 6a 15 4c 2c 39 b5 8f d0 27 36 bd 1c cd f3 71 f4 da 71 05 2c d0 Data Ascii: RIFFEWEBPVP8 E0S*>m4H"$#gnVO#&Rn'R`<}+Dz;3o0w}'{4_wwG:WgO'?~OG>?LC{]OQi$$mbL)H[P7jL,9'6qq,
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 8f b0 4e 2d 63 08 ef 67 16 b0 12 b4 dd dc 6e 33 77 7a d4 41 20 77 10 98 19 64 17 a1 28 26 9b 74 85 ea 32 7c 8d 4a a9 6c 6b 63 83 58 bd 27 0b 12 9f c5 a9 a5 a4 57 fd 12 80 29 b0 60 34 94 6d 51 a5 86 87 38 49 df 29 85 cf 53 00 94 13 86 0c 87 dc 3e b7 ec c1 a4 a9 5a 8d a3 96 90 1d 51 2a d1 a0 06 58 28 f4 e6 f9 0f 8f 6e 7e da 15 86 eb c9 be 00 b7 be 9f 9e 8d 9c 34 7a 46 aa 92 6c 73 fa 0d 7e 1d 15 5b a2 d9 6a 1d 13 20 ec 2d b5 b9 5d af 78 ef c1 bb 79 af 7d c0 f5 fa e4 23 0d 5b 34 27 45 ce 91 e6 32 6b 74 02 0d 83 ce 0d e8 0d bb 26 65 52 01 45 38 b6 48 ad ff 5d 87 5a 9a 27 c4 20 56 05 05 57 6a 86 83 8d 9d dd c4 e8 a1 71 89 c3 a3 6a 50 e0 7c b2 20 28 0c e7 c4 c1 18 a5 ea 25 75 09 c7 2f de c3 dc c3 87 17 0d b6 fa 0e 21 12 ac 99 d6 31 ac 51 d0 2c e1 1e e4 48 f2 d5 Data Ascii: N-cgn3wzA wd(&t2\|JlkcX'W)`4mQ8I)S>ZQ*X(n~4zFls~[j -]xy}#[4'E2kt&eRE8H]Z' VWjqjP\| (%u/!1Q,H
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: aa f7 52 2e 7e 5e 0e 2a 38 ae 72 e3 7e e2 da 00 02 e4 67 ec 95 e7 de dc 04 85 f2 9e 76 17 cd 6b 26 ea f8 e7 2f 0c 07 bb 46 77 57 df 45 ea 02 11 d4 7d 18 2d 0d 73 87 75 7c 4a 60 05 8c 89 43 ec 89 76 a6 fa 1d 20 95 cf 33 7a 50 f8 11 cb 3d 4a f8 98 02 d8 69 d3 16 e9 86 2f 8f b8 53 db d1 4d 91 4e d5 aa ef c9 62 8e f8 46 af 79 d1 6e 55 d7 f2 a0 c3 90 04 0f 84 a0 c8 a1 21 dc 02 af d8 b9 a3 22 49 4a b5 ff fb 9e 45 b1 89 d7 e3 a5 d2 bf 47 c5 e0 aa 86 18 92 e0 94 91 5e 96 76 ee 2d 45 21 f2 de bb 66 86 0d 7e 12 6a be 1e 78 21 a5 2f 1a d5 86 58 33 73 f6 da 0c 19 69 30 2f 9c 87 32 39 f7 8b 25 fd 33 81 a0 61 e3 71 16 fd e7 70 bf b5 1e c8 00 00 11 3b b9 0a 78 31 c5 96 a8 b2 b3 00 9e 39 b1 34 34 dd 73 f3 35 b1 4b 9e 8a 09 03 db a9 45 a5 23 9f 01 4e a0 28 20 e9 83 71 20 Data Ascii: R.~^*8r~gvk&/FwWE}-su\|J`Cv 3zP=Ji/SMNbFynU!"IJEG^v-E!f~jx!/X3si0/29%3aqp;x1944s5KE#N( q
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 80 28 03 64 b4 bf dd c7 2f e0 e0 2d b9 33 c7 44 9e 6f d0 85 36 e2 b6 86 d9 82 e8 09 1a eb 51 a5 9a 41 bf 7d 18 c0 4c 5d 0c 5d 07 85 58 18 e4 7e 28 b0 61 c5 dc 47 fb 92 57 3d d6 14 4c 96 49 f1 c1 9d 04 33 6d dc 5c b5 42 9c 6e 86 7c d8 9b 66 18 5a b3 35 b9 dd 0a 22 5a a6 ea 1e 16 f3 11 ae 57 13 31 87 33 77 e9 81 39 64 b0 44 40 5f a5 bb c4 ff e9 08 ec c6 15 a1 a8 fe a2 fb a1 88 c2 18 c6 14 63 f6 b0 72 01 a8 dd 9e 21 80 e0 ce d4 e2 91 95 c9 73 a9 83 2e 07 d9 0b 2a 13 ae 4a 13 d4 f5 fb 86 f9 8c 73 12 43 5d 61 52 1b 4e e6 80 bd 75 29 01 d2 4e 8b ca 26 c9 b1 23 1c fb ae ec 6e 7f 00 dc 08 19 11 62 8a a4 b1 82 20 90 e9 df 9f 48 91 6c f8 4a e8 92 dc 98 71 a7 9b a9 8b f0 d0 9a 41 6e b3 32 e5 80 77 d6 39 0d 6d 46 3f 53 90 bb f4 55 2f 71 5b 70 7a 79 24 fb 67 ae 7f 68 Data Ascii: (d/-3Do6QA}L]]X~(aGW=LI3m\Bn\|fZ5"ZW13w9dD@_cr!s.*JsC]aRNu)N&#nb HlJqAn2w9mF?SU/q[pzy$gh
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 6a 8b 62 f4 b2 9e 6d 3a fa 62 55 f6 fb 74 db 1c fb 1f 05 40 3e 1d ef df 08 27 38 33 c1 be e8 a7 25 08 3b ea 32 61 d1 a1 01 87 7c 15 2c a0 c5 a4 38 fe e9 f1 ff f2 95 a7 18 df e8 f1 9c c1 12 a0 4e b5 52 1b be 1d b1 2b f8 cd 0a cc 75 bc 15 70 39 19 0f e1 3f 64 d3 88 37 57 13 f6 28 e3 1a 4b ff 99 71 78 1e 93 a5 b1 e6 a2 c7 33 45 b1 30 e5 b6 cb 0f 49 f5 87 a6 05 73 39 6f 38 3a dd 76 48 71 ed 62 b9 e3 d1 0a f5 64 cd b1 2d 5d 45 86 3a a9 7c f7 45 d5 4a 48 21 a9 d0 2d d8 08 fb 2a c0 22 45 61 74 c0 02 72 7b c1 5a 92 9a 48 8f 85 55 b0 8a d1 eb 0b a9 7f 4b 54 0f 02 ed 63 30 0c 77 c7 a0 a5 e7 e2 b3 95 7c 4a b5 e4 9e 46 15 82 63 60 95 1f 16 65 1f 28 b7 9a 03 23 f5 3a 27 e6 c4 48 69 ee b3 40 a4 ff 40 9d 03 aa 06 03 d3 3d 40 fc ad b7 ca f3 69 ec 93 48 5a de 44 c4 e4 72 Data Ascii: jbm:bUt@>'83%;2a\|,8NR+up9?d7W(Kqx3E0Is9o8:vHqbd-]E:\|EJH!-*"Eatr{ZHUKTc0w\|JFc`e(#:'Hi@@=@iHZDr
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: ad 26 11 79 38 f9 b9 4f 9b f2 0b b0 d2 2e 86 40 7f 9a c5 10 c3 37 f0 a9 a4 4c 1e 86 62 29 61 0b e8 9e f7 2e 7a bb 7b 2d 95 17 1c 9e cd 64 80 30 1a 72 c4 3b 08 1c 39 c3 fa 2f 0c 7c 52 1a a5 96 54 58 cc 4d 89 7f 5d 13 3b 8a 6f 42 7b 52 da aa 9f c0 da 30 b5 c2 a3 52 11 0a 7f d7 d3 07 43 4f 23 14 1f 02 83 05 bd 3f 8b df b1 57 e7 e2 5f da 4a 43 2a bd dd 95 da ad e2 e4 a0 7f fb a0 d9 18 eb a9 04 12 80 3e 00 38 0b 71 fa ce 89 e1 e8 63 9d 85 79 14 5a e2 d7 e6 c8 e8 2c 62 41 e7 32 f4 80 c3 8b db 3a 9e 16 1d 1f 02 2e f2 d9 8e 22 34 1b 78 38 5e e3 51 57 36 11 bb bb fd ed ce 95 aa 9c 8c f9 9f fb 60 e5 dd b6 c7 16 c9 55 c0 ad 3a 30 35 2c f4 ce 8b cf 83 3b 89 00 d9 4a 28 6c 17 5b 31 c6 3d b2 86 8d 17 f1 1f 4d 4e 6c d2 71 c6 ea 78 b1 00 b5 d4 21 6f 90 47 43 06 2a 8d d5 Data Ascii: &y8O.@7Lb)a.z{-d0r;9/\|RTXM];oB{R0RCO#?W_JC>8qcyZ,bA2:."4x8^QW6`U:05,;J(l[1=MNlqx!oGC
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 80 aa 95 fa 82 e2 f4 ff 62 bd b1 72 de df 2b ce ef b8 79 1e 79 2a ce 42 4b 9d 64 2e 19 4b fc 59 43 d8 24 38 c9 31 95 33 05 35 8e 3c 2e 9c 88 bb c2 a6 99 fd 38 a6 10 5c 30 40 cd 6c 5a 1c 93 1e c3 c0 e7 5d b3 eb 32 60 ac 06 c3 38 72 07 04 2f 81 a6 cc e5 c1 f1 5c 63 5d a5 f3 0f dc fc 0d 96 d3 54 62 68 4d cf 84 bd d8 3e 87 da 8d e1 ea da 2d 58 41 89 20 24 35 d8 c8 e4 15 b3 2e ce 4a 05 39 05 27 ad 41 ed 48 eb c7 ee 18 97 ce 2f 29 df f2 e1 af 85 c7 b3 ee 49 83 23 31 fb 9a 6f 72 fd 99 dd 2b e6 b3 2b 89 16 94 d9 1b b7 d4 d1 76 ee df 8d 40 b5 83 70 e3 6c 6a 55 03 a1 22 1d f6 3c b7 85 32 22 88 63 80 74 26 be fa fc e3 4d a5 27 13 26 8b e2 7a f6 cb e5 ae ae 10 98 4e 70 f7 11 8c 7e 9a 30 61 c5 b5 10 79 69 68 9a 64 3f 3c 1e 57 6d d7 8e dd 9e 5e e3 9d f4 eb 2e ed 1a 5a Data Ascii: br+yy*BKd.KYC$8135<.8\0@lZ]2`8r/\c]TbhM>-XA $5.J9'AH/)I#1or++v@pljU"<2"ct&M'&zNp~0ayihd?<Wm^.Z
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 74 19 49 a8 c5 3b bd 9a 1d 01 73 b3 b5 35 3b 97 e0 e4 be 7a 0d 74 57 25 9e 0b 5c 6a d7 7c d9 81 cf 1b 79 58 6f 80 de f0 a3 b1 37 e8 67 f7 96 13 b7 9c 72 1d 99 e8 f5 a1 5a 09 34 b9 71 85 59 f2 08 de 19 25 43 77 d9 9d c6 8e 33 3f b7 dc 7d 13 7f e0 99 03 b5 9d de 2e bf c0 d6 90 52 a0 2e f7 c7 67 41 e8 a4 83 f5 54 da 14 35 01 9d c3 01 81 4d a0 56 5c 42 46 22 3b e8 ce 6d 78 15 a9 d9 94 fb df 7d 0f 34 58 88 1a d0 fc 7d a0 1a b2 c2 c7 b9 de 79 b5 54 5d 4b 39 bf ec 94 c4 68 aa d1 ec 34 44 07 24 d6 83 2c 4b 01 29 55 12 ec eb 8a cc 2c 15 76 da ac 9a 17 80 75 f5 39 87 6d 64 bc ad c1 7e b2 e4 13 6d 58 c1 c5 9e 62 23 d7 7e 48 cd 66 8d 38 4a 8b 3d 79 50 2c e0 24 14 8b f9 8a fa b5 b3 68 6f a5 ec 84 b3 79 56 b0 93 cc ce db 6f 7b af 90 a4 d6 1c bb 4a 42 5c d9 30 29 6f 79 Data Ascii: tI;s5;ztW%\j\|yXo7grZ4qY%Cw3?}.R.gAT5MV\BF";mx}4X}yT]K9h4D$,K)U,vu9md~mXb#~Hf8J=yP,$hoyVo{JB\0)oy
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 93 43 a2 89 3e 11 4a 78 31 ce c0 f9 84 33 3b 92 21 bc f5 c5 5f eb 80 02 ba 74 61 b6 56 58 62 45 f8 e2 1a b3 24 cd d2 24 b9 50 e0 56 dd 6c d1 c6 57 f2 2f 96 71 5d 30 4b eb f3 a3 51 5c be 66 2d b6 96 a7 94 25 ee b8 90 2b ea 3a c9 33 ce 62 b2 be c7 7b cd eb 1a a9 95 13 f7 6b 67 f9 5b af 87 89 44 c2 d7 e9 4b da 47 81 8a c7 ac dc c4 39 cd cb 1a 71 34 fa 0e 97 39 9b 6b df fc 82 cc 1a 64 81 ab c9 3c af dc 8c c0 54 14 48 4c 6a 3d 26 4b cc e6 d1 68 2d 61 e3 c3 41 82 b6 cd f8 ff e9 fa 89 9e bd 95 23 2b 0a 9d e5 f5 b4 65 ad 64 38 2e f6 1e 5b d9 87 2b b0 b5 d2 17 4d c2 5c 9d e4 a8 92 47 f4 e5 45 7f 24 84 53 41 48 a1 61 72 d6 32 56 c9 87 62 0b 66 ab 88 7d 62 ca 2c bc c1 8c 23 68 fc 93 d6 84 a9 4c e1 31 5b 46 12 71 a1 ab 99 85 86 be f5 e2 63 b6 85 b3 86 54 58 77 2e 3e Data Ascii: C>Jx13;!_taVXbE$$PVlW/q]0KQ\f-%+:3b{kg[DKG9q49kd<THLj=&Kh-aA#+ed8.[+M\GE$SAHar2Vbf}b,#hL1[FqcTXw.>
2024-10-25 08:16:27 UTC	1379	IN	Data Raw: 5e e1 c0 a0 f2 89 99 76 13 a4 fb b3 8f 1b d2 7b 18 c2 c2 ba a8 7f eb 3c 16 87 2d 6b a3 60 bf 27 9d c8 d4 75 58 8f 1d a7 4e 7e 47 6b 3d ee 23 b0 d1 5c fa b7 98 c3 a3 ec 3c cc 1f 92 92 68 09 60 b0 a8 72 32 8f 61 8a 9f 1d 2d 2d 8b 45 e0 65 97 02 d4 00 2a 20 3e 19 62 c7 71 e9 d0 94 c8 84 c4 3c f2 cb 91 6a fc b4 72 21 1a 0e 26 db dd 3c 08 a6 b4 fb 9f a4 cc 2e b1 d5 b7 ce 3e 12 6e 4d b4 cf 69 c0 57 33 5a 3c 5b f6 99 c7 78 95 4c 0b dd 49 4b f0 6f b5 91 cb f8 44 d0 b3 74 83 e9 f5 ef c5 d7 0c 08 cb f8 ba 47 84 38 03 6f 9d 17 b7 b7 cd 49 e2 12 91 13 27 1a 20 5e a5 f7 4f c9 ad b6 f2 7d e8 a4 39 85 d4 9a 93 7d 2a e3 36 59 b6 85 94 a8 c3 95 3b e3 e4 a3 9a d2 45 e5 cb ae 55 12 44 be 06 a8 34 62 23 e6 b4 ea 86 ae e5 a2 36 d6 f6 a3 9a 9e 02 17 0c b5 a1 a7 e7 e7 a6 5e d3 Data Ascii: ^v{<-k`'uXN~Gk=#\<h`r2a--Ee* >bq<jr!&<.>nMiW3Z<[xLIKoDtG8oI' ^O}9}*6Y;EUD4b#6^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49783	157.240.27.27	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:28 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-25 08:16:28 UTC	1672	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-25 08:16:28 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-25 08:16:28 UTC	14884	IN	Data Raw: 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3d 21 30 2c 65 3d 21 31 2c 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 67 3d 61 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 Data Ascii: ");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=function(){function a(a,b){var c=[],d=!0,e=!1,f=void 0;try{for(var g=a[typeof Symbol==="function"?Symbol.iter
2024-10-25 08:16:28 UTC	1500	IN	Data Raw: 29 3b 69 66 28 68 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 2c 69 64 3a 62 7d 3b 69 66 28 66 3d 3d 3d 22 47 54 4d 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 Data Ascii: );if(h!=null)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CONSTANT_VALUE",id:b}}if(f==="GLOBAL_VARIABLE")return{domain_uri:c,event_type:d,extractor_type:"GLOBAL_VARIABLE",id:b};if(f==="GTM")return{domain_uri:c,event_type:d,extractor
2024-10-25 08:16:28 UTC	14884	IN	Data Raw: 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 66 69 6c 74 65 72 2c 64 3d 62 2e 6d 61 70 2c 65 3d 62 2e 72 65 64 75 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 Data Ascii: Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.filter,d=b.map,e=b.reduce;function g(a){re
2024-10-25 08:16:28 UTC	1500	IN	Data Raw: 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 52 65 73 6f 6c 76 65 4c 69 6e 6b 22 29 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 77 3d 73 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 Data Ascii: s("SignalsFBEventsResolveLink");s=f.getFbeventsModules("SignalsPixelCookieUtils");var w=s.CLICK_ID_PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT
2024-10-25 08:16:28 UTC	14884	IN	Data Raw: 65 72 49 6e 74 65 67 72 61 74 69 6f 6e 73 3a 5b 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 5d 2c 43 6f 6d 6d 6f 6e 49 6e 63 6c 75 64 65 73 3a 5b 22 63 6f 6d 6d 6f 6e 69 6e 63 6c 75 64 65 73 22 5d 2c 44 65 66 61 75 6c 74 43 75 73 74 6f 6d 44 61 74 61 3a 5b 22 64 65 66 61 75 6c 74 63 75 73 74 6f 6d 64 61 74 61 22 5d 2c 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3a 5b 22 63 6f 6f 6b 69 65 22 5d 2c 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 3a 5b 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 2c 49 57 4c 50 61 72 61 6d 65 74 65 72 73 3a 5b 22 69 77 6c 70 61 72 61 6d 65 74 65 72 73 22 5d 2c 45 53 54 52 75 6c 65 45 6e 67 69 6e 65 3a 5b 22 65 73 74 72 75 6c 65 65 6e Data Ascii: erIntegrations:["automaticmatchingforpartnerintegrations"],CommonIncludes:["commonincludes"],DefaultCustomData:["defaultcustomdata"],FirstPartyCookies:["cookie"],IWLBootstrapper:["iwlbootstrapper"],IWLParameters:["iwlparameters"],ESTRuleEngine:["estruleen
2024-10-25 08:16:28 UTC	1500	IN	Data Raw: 70 65 6f 66 20 67 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 67 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 68 3d 67 2e 75 6e 73 61 66 65 50 69 78 65 6c 2c 6a 3d 67 2e 75 6e 73 61 66 65 54 61 72 67 65 74 2c 6b 3d 65 28 68 2c 63 29 2c 6c 3d 6a 20 69 6e 73 74 61 6e 63 65 6f 66 20 4e 6f 64 65 3f 62 28 6a 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6b 21 3d 6e 75 6c 6c 26 26 6c 21 3d 6e 75 6c 6c 3f 5b 7b 70 69 78 65 6c 3a 6b 2c 74 61 72 67 65 74 3a 6c 7d 5d 3a 6e 75 6c 6c 7d 6c 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 67 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 Data Ascii: peof g==="undefined"?"undefined":i(g))!=="object")return null;var h=g.unsafePixel,j=g.unsafeTarget,k=e(h,c),l=j instanceof Node?b(j):null;return k!=null&&l!=null?[{pixel:k,target:l}]:null}l.exports=new a(g)})();return l.exports}(a,b,c,d)});f.ensureModule
2024-10-25 08:16:28 UTC	14884	IN	Data Raw: 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 63 2e 72 65 64 75 63 65 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 73 73 52 61 74 65 3b 61 2e 6e 61 6d 65 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 2e 70 61 73 73 65 64 3d 65 28 29 3c 62 29 7d 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 28 74 68 69 73 2c 63 29 7d 68 28 63 2c 5b 7b 6b 65 79 3a 22 73 65 74 47 75 61 72 64 72 61 69 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 64 28 63 2c 62 29 3b 69 66 28 63 21 3d 6e 75 6c 6c Data Ascii: beventsModules("SignalsFBEventsUtils");c.reduce;var e=function(){return Math.random()},g={};function i(a){var b=a.passRate;a.name;b!=null&&(a.passed=e()<b)}c=function(){function c(){n(this,c)}h(c,[{key:"setGuardrails",value:function(c){c=d(c,b);if(c!=null
2024-10-25 08:16:28 UTC	1491	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49794	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	863	OUT	GET /media/wysiwyg/home/decoration-halloween_2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21668 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "etzT3nz/v9eqr7TjCgPv9WSM8UfuBjL27GCKDtnVVAM" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=104856 idim=490x490 ifmt=jpeg ofsz=21668 odim=490x490 ofmt=webp Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277eb7285c6b7c1cfff0577180e-8820b9e3eab228ce-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960060-PAR, cache-dfw-kdfw8210139-DFW X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 9c 54 00 00 57 45 42 50 56 50 38 20 90 54 00 00 10 36 02 9d 01 2a ea 01 ea 01 3e 6d 30 93 46 a4 23 26 a8 2b 53 db d1 00 0d 89 63 6d 37 a5 2b 76 b8 5c 87 f9 ef 86 f0 e9 04 4f 8f 4f 59 1c 73 f5 7c f1 fa bf d7 f2 b5 82 7d 8c ff f1 7b 16 dc 6f 35 5d fb ad 91 bb 32 06 f0 79 97 bd be c3 38 a7 f6 0f 07 77 1f a2 ef df b8 c5 ff 5f 7b 56 ae ff 43 39 95 a8 0e 0d 1b a0 75 33 9e fa 4a da c7 0e af 4c 7c 32 1d 54 de 7d df 3d cb 6f 05 2d 25 b6 84 b7 ef 1a aa 88 03 8e d4 14 3e e4 2e 81 d0 a3 46 6a 8b 13 cc 3d 08 08 48 be 3a ae 3f 1d 3c d5 e5 f9 b1 31 1f 13 cf 56 cf f6 f2 c1 a6 8f ef 8f 00 7c bf ee 3d 30 3c 9e 05 7c 7a 0a 91 df 3f 7e 09 a8 41 bf df 55 41 5a 3b de bd 92 c8 fc 89 25 c2 0b f6 d0 00 e6 72 e4 e4 42 b0 a0 13 11 c2 96 81 00 95 49 6f 4a c2 08 d7 67 d2 Data Ascii: RIFFTWEBPVP8 T6*>m0F#&+Scm7+v\OOYs\|}{o5]2y8w_{VC9u3JL\|2T}=o-%>.Fj=H:?<1V\|=0<\|z?~AUAZ;%rBIoJg
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 42 02 df 44 33 65 e4 b3 5b ca f1 06 16 8f ce b8 6d 2f 22 39 19 d3 20 14 39 c9 87 16 ef 92 93 13 14 a8 ed d4 d9 f3 33 d9 b1 bd a6 66 4d b6 15 89 72 d3 7a 78 a7 d8 7b 80 d2 5e f1 f9 9f d4 ba a4 c5 24 85 d1 f6 86 a8 03 5a 43 c4 dc 3d 12 ac 09 de 74 ea 8b 76 fe 14 af c6 fa d3 65 60 37 ba 11 74 28 31 a4 47 db 3b 35 23 d7 a6 fd b9 72 75 33 e0 64 ca 68 20 77 c5 ae 59 12 1e 22 8d 3e b9 67 d6 46 2a d3 10 ed 4b f5 72 fd 38 7d 5f e7 93 25 1b 38 5d 5a 07 ab f7 49 5f b4 0f d9 20 5c d5 85 75 ea e4 13 5d ca 38 6c 1f 30 1b 5a cf 67 5f 99 1b 52 73 3d dc c6 b5 24 9b 2c 29 9a ee fd 02 33 70 82 97 21 99 a9 1e e0 d5 44 b4 21 59 30 65 d2 55 90 73 16 38 a2 7a 15 ae 8a 9c 86 75 9a 9a f2 a8 00 0b cc 06 d6 f4 3d 53 76 86 98 53 cf 08 e8 6d fd 72 da ca 36 ee 90 f1 09 4c 74 57 4e 65 Data Ascii: BD3e[m/"9 93fMrzx{^$ZC=tve`7t(1G;5#ru3dh wY">gF*Kr8}_%8]ZI_ \u]8l0Zg_Rs=$,)3p!D!Y0eUs8zu=SvSmr6LtWNe
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: fc c6 f5 fb 64 29 c1 71 52 59 9e e6 eb 97 b5 55 6e 93 5a 8a c0 82 c8 4b 3c 55 38 22 33 15 bb f4 fa 99 03 5d 94 ec 76 09 1e 16 40 85 53 1f 5e 71 bd d9 b9 3e f1 8a 34 42 a7 8b b9 0d 36 1e 0e 2a 71 d3 5b 33 97 9e 47 c1 87 27 fc 9b e0 be ec 7a 86 e4 46 d5 c7 3e 09 30 b2 ba ba 17 ef 5e e8 1b ea df 57 0d ab 11 ff 67 11 d6 cb 30 c0 05 89 4a 8a 4f 8d 1a 1e 45 22 69 1f 95 64 86 56 ab 75 4a ec a1 a6 80 ea 56 15 e8 a7 f8 98 3c 4d 2c b0 b3 41 99 91 c1 77 64 96 1b c8 09 80 02 a5 2d 4d 5f 8a a2 0c fa 20 10 38 b6 54 11 3e 18 f5 a9 d4 75 5f 81 7b fb 8c 5a 72 6c c8 d7 70 4a e4 5c 2a 2d 41 ec 72 a6 15 7f bc b6 3d ee 56 d9 44 99 c1 ee f5 72 8e 48 65 d7 90 f8 57 74 dc 5e f2 12 fd c4 75 3a 28 ea b7 29 62 1e 0f 6f db 22 24 c1 38 87 7e 8f d6 b8 16 ac 15 34 46 49 fa 27 fb c3 e1 Data Ascii: d)qRYUnZK<U8"3]v@S^q>4B6q[3G'zF>0^Wg0JOE"idVuJV<M,Awd-M_ 8T>u_{ZrlpJ\-Ar=VDrHeWt^u:()bo"$8~4FI'
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 3b 84 6f a6 17 d3 37 a7 18 8d f8 8f c6 0b d9 af 5e ee 58 f0 18 3f 07 88 0e 79 21 82 9c ea 3c bb fa 73 7e 46 48 e6 5d 93 02 5d 7c fd 43 c0 20 ad 8c d5 cd fc 3c 43 b6 d6 80 9a d7 30 21 ac 10 64 d6 95 41 44 ad 40 e0 5d 2c 96 dc 68 77 ff 09 81 31 81 c9 46 06 a5 76 99 f3 d6 5c 5b 35 1a 40 22 e3 25 02 b9 1b 5e 60 72 1e 8d b4 29 53 6e ae 2d 37 62 33 6b 90 c4 e4 8a ab 80 91 69 3f 19 03 89 6b c8 23 ce 62 da 2d a0 97 30 b0 22 9d eb ad 15 af c7 a6 db 94 05 79 f2 1e b3 db 2a b3 51 1d 91 18 8b 27 44 55 4e 59 78 8a 69 c1 d1 a1 ab 2d d9 ad c7 35 7d 7c 25 cc 3d 3f e1 75 1a 6c 1c 83 a9 37 4d 72 ea c6 dd a6 2b 3b 32 eb 4e 43 63 27 c1 1b ff fc 9f 30 1a b8 e5 00 da ba c7 9c 40 c4 04 9e e3 97 94 40 01 a6 ed d0 6c 03 f2 5f 06 a2 b4 73 0b 3b 03 47 ab 5b 46 54 05 b7 48 ad 76 50 Data Ascii: ;o7^X?y!<s~FH]]\|C <C0!dAD@],hw1Fv\[5@"%^`r)Sn-7b3ki?k#b-0"y*Q'DUNYxi-5}\|%=?ul7Mr+;2NCc'0@@l_s;G[FTHvP
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 7f e4 3f 92 86 f8 75 08 39 13 39 26 9b 05 ec 51 26 f2 a5 c1 64 9a 2f 02 29 16 ce 3e 11 2a d4 d0 a3 f5 55 17 0b 02 62 ec 22 6a 74 93 cb 74 a1 75 ee 1d 46 25 22 2a 0e 36 cc 35 d4 20 17 49 ca 48 33 2f 2a 30 76 8a 2f 5c 36 e4 07 0e 70 ec 17 db 4a ca b6 6c 87 ff b4 75 9d c2 cd d0 11 02 3b 2a 7e b2 9e 96 b1 88 aa 36 ee 3c 9a 24 85 e4 db 5e 74 a3 48 ab 35 55 16 9f d4 b4 c5 8d b1 b8 d9 a1 c0 17 6c d3 b5 d4 77 6b 9c 56 8d 7f 21 1b c1 89 d0 01 12 e8 90 6a 34 26 52 3f 27 92 93 67 33 ef 0b 12 98 93 22 47 b0 be db 70 8a 54 6d 33 c9 55 bc ca 45 33 31 75 fb 63 a6 ae 09 75 5d 5c 45 86 7a 18 01 f8 80 37 af 92 f3 98 15 6a ba d5 a2 ea a7 16 92 11 d3 2b 22 21 5f e9 e8 09 a8 a3 36 38 8c d1 ad 65 3e c4 ee 02 64 00 f7 85 94 b9 dd 38 f0 14 4f ac 87 9c 10 6c 1d 77 53 a1 b6 78 f6 Data Ascii: ?u99&Q&d/)>Ub"jttuF%"65 IH3/0v/\6pJlu;~6<$^tH5UlwkV!j4&R?'g3"GpTm3UE31ucu]\Ez7j+"!_68e>d8OlwSx
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 70 f9 c5 18 d3 cc 10 5a 44 03 d2 cf 1b 76 e9 4a a0 7b 96 03 01 40 33 7b d5 3d 9d 55 26 19 2f f4 cb 98 de 24 a3 a5 54 e9 a6 67 af 78 3b 8a a6 94 5f 3d 93 da 26 32 54 44 ee b0 37 d1 9b 2c 90 e0 5b c7 ec 4b 70 f2 d6 a1 f2 66 4a 2e 4f 39 55 5b 0d 22 41 5e d2 65 d9 16 5c bc 67 2b e3 0b ea 2b 7c fa 36 ee f4 cf 86 10 03 ea 83 19 f4 45 ed e1 72 d1 99 6f 6c 13 cb b6 2d 42 58 6a 8e 9e 0c eb 78 3e b9 ca d3 5b 6f 37 f8 27 05 58 85 86 ad d5 df 6f 0e 60 90 67 dc 66 6e cb 40 a0 93 f2 a6 8d cf ce a8 d1 d0 a5 da 26 40 07 6d 1a 45 7b 08 d9 3c e9 2d 58 ed 49 c1 7f 38 45 94 4c bb 4c 4c 99 c2 ea 7f e7 f2 0e 3e cc c0 0d d9 d3 d3 0c 55 58 38 7d cc b9 00 d6 61 26 17 a7 50 35 24 16 81 15 6c f4 a1 8d 75 e5 8e eb 56 74 15 3b 99 36 7e 32 21 d9 55 ea 61 4b a6 be bd 31 79 f3 ea 2a b0 Data Ascii: pZDvJ{@3{=U&/$Tgx;_=&2TD7,[KpfJ.O9U["A^e\g++\|6Erol-BXjx>[o7'Xo`gfn@&@mE{<-XI8ELLL>UX8}a&P5$luVt;6~2!UaK1y*
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 70 3f 69 46 60 f3 f6 95 26 8f 08 b3 20 3f bf b8 db 56 48 99 2b 5a 3e 0d 06 e0 43 2b 2e c1 e9 b6 51 b6 4c 52 a8 6c 99 0e 55 79 79 99 f8 0d 2b 61 26 71 54 1b 56 be 42 30 14 a9 f7 31 0d fd 6b fb 6e c4 d6 67 d5 e1 56 69 d7 39 e6 28 08 a6 ef 5e a2 49 86 16 67 13 81 72 44 c5 39 e6 15 a5 b1 5d 52 d4 9d 7c e5 18 52 9f 72 e9 d8 a8 d5 00 d7 4c 5c fb 69 17 ff 8f 57 0c 49 75 ef e5 f2 42 ce 81 d8 89 d0 54 37 00 e5 0c cd 2a e2 48 ec 5d d8 47 5a 22 6a 68 77 09 9b 90 9c 28 af 3c 9b 0b 04 f4 29 a5 3c 2f d5 3f 11 c4 fb a6 39 ac 2e bf d0 1e 9e b8 4d c7 c5 61 3f f0 d6 03 8e 67 ea 10 57 c8 43 e9 55 98 6f 7c bd 54 59 38 49 7d 17 7c d0 6b d3 af d5 07 22 88 30 0e 3e 45 a3 4a ae 39 77 00 89 aa 79 94 6b 57 ec 75 83 35 9d 0e 14 75 18 46 ce 71 df e0 b8 84 c2 2e 82 65 00 7c e8 42 5b Data Ascii: p?iF`& ?VH+Z>C+.QLRlUyy+a&qTVB01kngVi9(^IgrD9]R\|RrL\iWIuBT7*H]GZ"jhw(<)</?9.Ma?gWCUo\|TY8I}\|k"0>EJ9wykWu5uFq.e\|B[
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 23 19 9a 1a d3 91 4b a0 c1 44 25 35 02 53 20 76 a4 1d 0c a1 61 77 aa ef 75 09 32 c0 6d 2e 12 69 95 cc 37 9f c7 1d 4b 32 c7 22 d2 43 bc 85 d0 89 2c 5d 3c 66 b4 92 bc 4d c7 7f d8 de 51 28 0e 3a cb e1 0e 79 d8 8a e6 70 f1 05 0b c2 91 dd 0f d9 7c 30 92 96 2c b8 5f 6a 5c 90 7f 6a 34 6e 5c 8e 6f a9 af e1 5d 0c a8 9a 19 7a f2 7c 19 16 d0 5c fa eb 07 b0 48 b0 1c 97 4d 09 70 6e 32 fd f4 5b ec 6c cc 5e fd 37 c0 6d b8 b4 2f 56 f7 80 08 29 cf 37 f9 63 c6 da fb 24 e6 c6 aa d0 69 58 45 dd b6 a3 d3 c4 78 59 57 ee ea a9 cc 57 43 a5 05 8d e1 b0 5a 89 de 81 c0 e3 1c b6 4e 67 2d fd d1 09 48 f4 50 a2 d0 3b a0 d2 1d 21 68 69 62 ab 8c 2e e5 4e d5 82 09 62 5e dc 0d 96 2f 75 34 7a 4d 37 5f c3 97 13 0b 29 94 3c 40 b5 3e 12 08 eb cd b4 93 9a dd 7f 77 ed b5 16 1a a3 28 55 d4 b4 05 Data Ascii: #KD%5S vawu2m.i7K2"C,]<fMQ(:yp\|0,_j\j4n\o]z\|\HMpn2[l^7m/V)7c$iXExYWWCZNg-HP;!hib.Nb^/u4zM7_)<@>w(U
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 57 8f ad 70 7e d4 e7 fb 9a 08 5d 64 a4 cd 77 ee 3c dd 63 24 42 87 0a 33 ad 4a ca b5 af dc 1d c8 bf 3f 03 d9 b5 d6 c7 af 56 86 47 0a d9 1c 00 11 fd f9 2a fc 82 ff 37 9f 55 e2 81 25 d4 89 a9 70 2b 07 9e 8d a8 ad 63 f5 14 cb 2c cf 96 85 81 59 22 2a e9 f1 0a 79 76 6f d1 1b 35 4c f6 63 9a fe 2b 98 f3 ed 6e 38 bf 85 d3 d3 bb d2 79 8d 57 b9 63 97 e2 89 da 1e 94 e3 72 da 26 8a 97 eb 10 2f 63 fb c7 8a a7 09 9c fc d3 1e 4b 2f cf 45 d9 54 1a 9f 49 87 16 4d 47 b1 27 d9 75 10 b4 1e 2a e5 6d 42 f3 cc 07 8e 5b 03 fa 78 9b bf 6b 85 6a 65 79 e4 6e 83 4d a5 78 2c 56 8c 06 98 75 6a f5 7c 85 79 0b 22 c2 5c 7d 2f c2 c2 88 50 88 bd a2 c7 28 59 59 f9 4d 7b d5 8b 6a 7e af 9b dc 4e cf e1 33 bc 48 f0 3e 18 f3 7b 7e d2 54 fa a2 14 3a 21 e7 8a b4 b6 63 df 2a e5 df 14 1d 6a 05 d2 ce Data Ascii: Wp~]dw<c$B3J?VG7U%p+c,Y"yvo5Lc+n8yWcr&/cK/ETIMG'umB[xkjeynMx,Vuj\|y"\}/P(YYM{j~N3H>{~T:!cj
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: fa 3e 86 04 ff 9b 9d 5c 60 12 e5 74 bc e3 43 d9 96 1b 4b 72 d2 93 90 25 f4 72 2f 67 39 d4 2c f6 3a 9c 98 e6 16 e2 9a c1 51 73 08 8b 32 fd c8 bb 4d db 63 01 d6 bc f7 1a 2a c6 14 3c f6 1e 5a 9c 47 80 b5 fe ac cf 23 ba 8e e6 37 0a ba 84 6b 2c 8b d6 f0 88 37 22 65 e6 08 17 f4 02 20 50 e6 2d 1e bb 23 99 7a 07 e0 e9 65 ba 5f 86 c2 7b 68 a1 90 30 19 b5 9c cb b5 27 96 a1 87 54 f6 5b 8f 8c c7 f8 fe de 96 86 f5 05 f2 9d e3 c7 08 f3 dd 43 4d 07 e5 aa 5d 9d 39 b4 d4 f0 06 70 66 93 95 23 13 7c 72 c5 60 c2 27 ab a5 ca 39 55 2e c9 7a 24 06 bf 1f 12 c2 81 c5 30 17 33 28 a3 8e 18 13 05 14 b9 19 8e 5c d7 42 5f dd cc 39 78 1d a5 8e 80 52 af 23 93 8b 2d c0 22 4e 0c d6 ed 0a 36 09 6f 6f af 67 86 33 76 23 a6 31 84 a7 2a 5f 10 78 ec 0a 3b a7 ed 52 b9 07 82 e9 55 56 e2 a3 49 49 Data Ascii: >\`tCKr%r/g9,:Qs2Mc<ZG#7k,7"e P-#ze_{h0'T[CM]9pf#\|r`'9U.z$03(\B_9xR#-"N6oog3v#1_x;RUVII

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49795	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	618	OUT	GET /media/wysiwyg/home/mannequins.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36120 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "rc5urOdwBpb2nRim/x9SMUTchIwOJlQCQCbsxbl1qH4" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=36120 idim=400x400 ifmt=png ofsz=36120 odim=400x400 ofmt=png Fastly-Io-Served-By: img09-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016277e86de6ec1a3d119914f2d3bd-2feefc178a5f2b90-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960024-PAR, cache-dfw-kdal2120057-DFW X-Cache: HIT, MISS X-Cache-Hits: 2, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 98 24 e9 5d df f9 8d 3b f2 ac bb ba bb ba fa 98 ee 96 a6 67 34 2d 8d 06 ad 66 84 06 0d 8c 84 66 84 2c 69 41 c2 23 c0 ec 1a d6 f0 60 79 01 3f eb b5 01 7b 59 40 be 30 8f 2d d6 0b d8 3c f6 ca ac d6 46 ac 31 0b 18 83 0c 6b 3f fb 78 57 1a 0c 48 7a 90 2c 34 3d 67 4f 4f 77 d7 5d 95 99 95 47 5c 19 c7 fe 11 f5 7b f3 17 51 59 7d 54 77 57 64 56 bd 9f e7 89 a7 aa b2 32 33 de c8 ea 7e bf f1 bb 01 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 0e 3b 4a d1 0b Data Ascii: PNGIHDR6 IDATxy$];g4-ff,iA#`y?{Y@0-<F1k?xWHz,4=gOOw]G\{QY}TwWdV23~D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H;J
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 16 c5 41 76 ba ff de d2 7d 26 91 48 6e 8f 91 b3 40 24 87 9f 38 8e df c1 3b ee 72 f6 72 5f 91 28 28 c8 66 62 01 10 f1 10 5d d7 45 40 5d d7 75 18 86 21 fa 66 59 96 05 d3 34 71 fe dc 03 4f 00 f8 05 00 93 00 a6 76 be da 00 ea 48 ff 3f 4c b2 d3 da 00 4a 00 42 00 9d 9d c7 7a 00 68 d2 61 73 e7 ab 07 a0 c5 8e 26 80 8d 9d 63 79 e7 eb 75 f6 1e 12 c9 a1 40 0a 88 e4 c0 49 92 e4 22 ff 59 51 14 61 3d d0 68 5a 66 31 08 f1 50 55 15 50 90 79 8c 57 b1 f3 6c ad 61 59 5e 9a a6 61 7e 7e f6 d9 7d 2c 59 47 2a 36 60 5f f7 c3 16 80 ab 3b c7 15 f6 fd 55 00 af 01 f0 ef e2 bd 25 92 03 47 0a 88 e4 c0 89 e3 78 45 55 d5 a1 1d 72 77 46 d2 8a f8 85 e7 65 3d 4e c3 6a 41 78 bc 64 58 1a 30 90 66 61 55 2a 65 58 a6 79 bf 2e eb 76 98 d9 39 be 61 c8 ef 42 00 af 00 f8 1a 80 af ee 7c fd 33 00 af Data Ascii: Av}&Hn@$8;rr_((fb]E@]u!fY4qOvH?LJBzhas&cyu@I"YQa=hZf1PUPyWlaY^a~~},YG6`_;U%GxEUrwFe=NjAxdX0faUeXy.v9aB\|3
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 61 66 7a 0a d3 53 53 30 65 70 1e 48 d3 b9 df 07 e0 ff 41 fa ef e9 ff 2b 76 39 92 83 44 c6 40 8e 1e df 80 b4 4f d2 e7 31 82 e2 01 a4 2d 4e aa 95 b2 a8 e3 50 14 45 b8 b0 28 2b 8b 0b 08 77 69 51 2a 2f 75 e8 f5 3c 0f dd 6e 17 71 1c c3 b6 6d b8 ae 8b 6e b7 8b 5e af 07 3f f0 c5 6b 08 7a ad ef fb 70 1c 07 9e e7 a1 df ef a3 df ef 43 d3 34 44 51 8c f5 8d 2d 7c ed eb 97 f1 c2 8b 2f a3 b5 dd 3e f8 0f 68 34 79 1a c0 ff 8b b4 f7 d6 7f 55 f0 5a 24 07 84 b4 40 8e 0e 17 91 ba 1a 3e 86 31 e8 d6 1a 27 e9 74 42 3e e7 9c 5c 57 5c 44 b8 9b cb 30 0c a8 aa 0a d7 75 c5 74 43 de f6 c4 f3 3c b4 5a 2d 31 5b 9d aa db e9 fd f9 fb 51 eb 94 fc ac 11 5d d7 a1 eb 3a 2c cb 42 bf 1f e2 e5 57 5e 83 ae 69 38 77 ee 2c 26 27 ea 07 ff 41 8d 1e ef 43 da 36 e5 b7 00 fc 24 80 17 8a 5d 8e e4 7e 22 Data Ascii: afzSS0epHA+v9D@O1-NPE(+wiQ*/u<nqmn^?kzpC4DQ-\|/>h4yUZ$@>1'tB>\W\D0utC<Z-1[Q]:,BW^i8w,&'AC6$]~"
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 53 85 4e 96 07 ad 97 d6 4f b1 9c d6 76 1b 93 13 75 d8 f6 91 2f 36 bc 19 df 8b b4 57 db 5f 00 f0 87 05 af 45 72 13 a4 05 32 fa 68 48 33 ac 9e c7 98 8a 87 aa 6a e8 87 91 68 1d c2 2d 07 5e 20 c8 c9 07 aa e9 79 64 05 44 51 da 51 b7 52 a9 88 4c 2c ee de a2 80 38 ff 99 36 f5 72 b9 8c 6a b5 8a 7a bd 8e c9 c9 49 51 88 48 07 9d 83 e2 1d 3c f3 ca 30 0c 58 96 85 52 a9 24 ea 4b 66 e7 66 51 2a 95 d2 0e be 3b 6e b3 7c b3 47 c2 b2 2c 2c ad ac de df 0f fc 70 f0 00 d2 de 5a 3f 03 79 a3 3b b2 c8 3f cc 68 73 06 c0 bf 44 da 72 7d 6c 09 e3 04 80 02 4d d5 d0 0f a9 29 61 1a 50 e6 71 82 61 35 20 fc 31 4a c3 ad 54 2a f0 7d 5f b8 8d aa d5 2a 5c d7 85 e3 38 bb 66 a6 73 0b 05 48 eb 3e ea f5 3a a6 a6 a6 30 35 35 05 db b6 11 c7 31 4c d3 44 a5 52 11 e7 e4 c2 96 0f c2 47 51 04 c3 30 d0 Data Ascii: SNOvu/6W_Er2hH3jh-^ ydDQQRL,86rjzIQH<0XR$KffQ;n\|G,,pZ?y;?hsDr}lM)aPqa5 1JT}_*\8fsH>:0551LDRGQ0
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 2e 51 14 c1 71 9c cc b0 29 0a 8c 7b 9e 27 ba fa f2 76 ef 94 d6 5b ad 56 45 aa af aa aa a2 06 84 e0 d9 5a c2 ea 88 e2 8c 48 24 49 02 05 03 a1 e4 a2 69 9a 26 b6 1a 2d cc cf cd 1c d8 df e3 90 f2 28 80 3f 46 3a 46 f7 cb 05 af e5 c8 20 05 e4 e0 f9 36 00 ff 1a 69 37 dd 23 01 cf a6 4a 92 04 ae eb a2 52 a9 a0 db ed c2 f3 bc 4c 8c 83 5c 3d d5 6a 55 08 03 6f e7 4e a9 bf fc 3d e9 ee be 54 2a a1 5c 2e a3 df ef 8b 0e bd 00 10 04 81 28 ee e3 75 1d 40 76 58 14 7d cf 9b 26 96 4a e9 14 56 3e 75 50 d7 f5 5d 63 70 79 d0 3f 8a 07 5d 84 c5 fa 94 41 df 2f 6a 31 ef 79 1e 74 5d c7 c6 c6 a6 14 90 7b c3 02 d2 ea f5 ef 41 6a dd 4b ee 33 b2 95 c9 c1 f2 fd 48 ff 61 1f 19 f1 50 73 5d 69 29 b0 ac eb ba 28 bc e3 ee 1b be d9 f3 d8 02 6f 29 c2 ab d5 f9 1c 11 6a 41 42 fd b2 68 66 08 cf a8 Data Ascii: .Qq){'v[VEZH$Ii&-(?F:F 6i7#JRL\=jUoN=T*\.(u@vX}&JV>uP]cpy?]A/j1yt]{AjK3HaPs]i)(o)jABhf
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 71 ea 92 4b 0d 0b 69 d2 1f dd d1 97 cb 65 4c 4f 4f a3 dd 69 e3 ca 95 2b 30 0c 03 41 10 0c 0d 58 73 d7 15 b7 3a e8 2b 75 da a5 b6 21 b4 61 73 d1 20 f2 75 2a 79 97 14 bd 7f 10 04 a2 c9 22 ef c8 bb e7 b5 b3 73 51 76 18 af 71 a1 cf e5 76 de 4b 72 cf f9 56 00 bf 8a 43 38 8b e7 20 90 02 72 77 fc 63 a4 fd ad 24 b7 24 db 4e 84 66 73 58 96 85 99 99 19 4c d4 27 84 4b c7 30 0c 54 2b 55 cc cf cf e3 e5 97 5f 16 b5 13 1c 1e 7c e7 1b 3e 2f d2 0b c3 50 74 db f5 7d 1f bd 5e 4f c4 43 f6 b2 5c e8 6b 7e d6 07 59 27 e4 12 9b 9f 9f 17 b1 99 cc 7b 29 83 d7 e7 85 83 ae 9d 02 f1 3c 39 80 ac a3 30 94 05 d3 05 f0 31 00 bf 8c f4 3e 47 72 07 48 01 d9 3f 3f 0e e0 87 8b 5e c4 d8 90 24 b0 2c 53 6c a4 a6 69 a2 5a ad a6 71 90 6a 0d 95 6a 25 13 68 b7 4b 36 16 17 17 f1 e2 8b 2f 62 7b 7b 1b Data Ascii: qKieLOOi+0AXs:+u!as u*y"sQvqvKrVC8 rwc$$NfsXL'K0T+U_\|>/Pt}^OC\k~Y'{)<901>GrH??^$,SliZqjj%hK6/b{{
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: ae ac 37 15 bd 90 51 43 8e b4 1d 8e 09 e0 d7 01 1c 2b 7a 21 87 15 ba a1 e7 59 58 86 61 c0 b6 6d f4 7a bd cc b8 58 5d d7 51 a9 54 b0 be be 2e 5e 7f f2 e4 49 d8 b6 8d cb 97 2f a3 d5 6a c1 b2 2c e8 ba 8e 30 0c d3 4c 28 3f cd 86 a2 d7 53 66 94 a6 69 a8 54 2a a2 96 83 b2 b0 f2 56 87 aa aa 08 82 20 53 a7 41 9b bf 61 18 bb 02 eb c3 5a 9f 0c cb e2 e2 31 98 bd e2 2c 41 10 64 6a 62 24 23 c1 04 d2 1b ca 6f 84 1c 8b 2b 90 16 c8 70 3e 85 f4 1f 8a e4 3e a1 32 17 0e f5 c0 a2 16 ef 7c 63 a5 ca ef e9 e9 69 6c 6f 6f 67 7a 59 cd cc cc e0 c9 27 9f c4 f9 f3 e7 a1 28 0a 36 36 36 70 e3 c6 8d 74 62 60 b3 01 c7 71 c4 dc 75 c7 71 a0 69 1a 26 26 26 c4 a0 2a 6a e2 a8 eb 7a 26 1b 8c 17 0e d2 eb 5d d7 85 e7 79 70 5d 77 97 78 ec 55 8f 32 0c 12 9a 5d ed 53 30 10 9e ed 76 e7 7e 7c e4 92 Data Ascii: 7QC+z!YXamzX]QT.^I/j,0L(?SfiTV SAaZ1,Adjb$#o+p>>2\|ciloogzY'(666ptb`quqi&&&jz&]yp]wxU2]S0v~\|
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 38 8e 45 c6 56 b9 5c 46 14 47 e8 76 bb e2 7d 86 a5 0d f3 de 56 fc 71 ca da 0a c3 10 96 65 09 b7 19 4f 15 26 b1 8a e2 28 23 2e db db 6d 04 41 1f a6 29 5b b2 8d 38 8b 00 7e 16 c0 27 8a 5e c8 41 72 54 05 e4 9b 01 7c 7f d1 8b 90 0c 06 2d f0 0d 99 aa c3 c9 3a 00 7b 0e 05 d2 f7 8b aa aa 98 99 99 c1 e4 e4 a4 48 d3 6d b7 db 22 fb 8a 5a c4 93 88 78 9e 87 89 89 09 98 a6 09 c7 19 64 6d f1 75 51 8c 43 d3 b4 cc dc 0f ee 8e 4b 92 04 0a 14 51 b8 c8 2d 19 5e 4b 12 85 a9 15 42 16 8c 65 59 58 5e 59 c3 d9 33 f2 5e 67 0c f8 21 00 9f 05 f0 85 a2 17 72 50 1c c5 20 ba 05 e0 97 21 87 c4 8c 04 f9 de 51 fc 2e 7e 58 bc 41 d7 75 38 8e 83 76 7b 7f 9e 02 55 55 51 ab d5 30 3d 3d 8d 6a b5 8a 4a a5 22 36 7e cf f3 32 6d df 35 4d 13 d9 52 51 98 ba b9 ca e5 f2 ae 96 ed 49 92 c0 b6 6d 21 3e Data Ascii: 8EV\FGv}VqeO&(#.mA)[8~'^ArT\|-:{Hm"ZxdmuQCKQ-^KBeYX^Y3^g!rP !Q.~XAu8v{UUQ0==jJ"6~2m5MRQIm!>
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 01 f9 69 1c 0d 2b 6b 6c 89 e3 dc 78 da 9d 18 84 68 19 12 0e 52 5a a9 93 2d 9f 1e 78 bb f0 6a 6f da c8 c9 85 45 19 59 b4 91 d3 4c f6 72 b9 8c 0f 7e f0 83 38 71 e2 04 96 96 96 e0 ba ae e8 91 d5 6e b7 d1 e9 74 d0 6a b5 d0 0f fa c2 32 e2 f0 e6 8c f9 c7 75 43 87 a2 2a 50 15 15 8a aa ec 1a a2 45 01 78 4a e9 a5 59 ea 14 a8 ef f6 9c fd 7d e0 92 22 d0 00 fc dd a2 17 71 3f 38 cc 02 f2 16 00 cf 15 bd 08 c9 de 28 aa 8a 88 b9 72 b8 80 90 4b 2b 89 07 bd a7 68 c8 d3 9d 76 e0 25 e8 6e 1e c8 ce 1f a1 ac 29 d3 4c 63 17 9d 4e 07 d5 6a 15 ef 7d ef 7b 31 39 39 89 95 95 15 11 ef 20 cb 83 0e cf f3 d2 0a f2 30 a2 a2 7a b1 46 3a 07 17 44 21 12 ea 40 24 14 0c dc 69 3c 13 2c ef ce a2 d7 27 49 82 cd ad fd a7 31 4b 0a e1 c3 00 de 55 f4 22 ee 35 87 59 40 7e 06 87 fb fa c6 1e 4d cb 1a Data Ascii: i+klxhRZ-xjoEYLr~8qntj2uC*PExJY}"q?8(rK+hv%n)LcNj}{199 0zF:D!@$i<,'I1KU"5Y@~M
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 8d 90 58 d0 b5 e5 d3 7d f9 28 5c de 47 8b 5b 29 3c f3 8a d2 79 c9 82 0a c3 50 a6 f3 8e 2f 7f 01 c0 9d df 09 8d 10 87 45 40 be 0f c0 9d 55 95 49 0a 85 8c 0e ba bb e6 35 1e b4 69 eb 9a 0e 15 aa 18 71 eb 79 1e e6 e6 e6 70 e1 c2 85 3b 3e 1f bf eb a7 0c 26 cf f3 10 86 a1 c8 b6 22 e1 a0 c7 b9 eb 88 37 5f 14 85 7f 3b 16 42 cf 49 dd 5e 61 3f dc 55 ac 48 5f a9 cf d6 5e d9 59 aa aa c2 b4 4c 31 26 97 c7 49 78 21 21 35 7c f4 3c 0f 9b 9b 9b 62 76 ca 3e bb bb 48 8a a5 84 31 bf f1 3d 0c 02 a2 03 f8 6b 45 2f 42 72 a7 28 99 78 42 de 8d a5 aa 2a 14 5d 81 aa ab 28 95 4b 28 95 4a e8 f7 fb 38 73 e6 cc 4d 5d 5e c3 a0 d8 46 b7 db 15 05 89 64 61 f0 c6 88 bc e3 2d 90 ad 56 a7 18 0c 59 11 f4 d5 71 1c 74 3b dd 4c 1a 2f 90 ba cb f2 56 cb b0 6b e4 e7 51 30 38 1f 1d a2 c8 10 a9 08 f2 Data Ascii: X}(\G[)<yP/E@UI5iqyp;>&"7_;BI^a?UH_^YL1&Ix!!5\|<bv>H1=kE/Br(xB*](K(J8sM]^Fda-VYqt;L/VkQ08

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49796	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	850	OUT	GET /media/wysiwyg/black-friday-2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13388 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "Y/3rRck2WdOwdlcxFr8UhfSGcI2xy9flvI7Q9dc8AUY" Expires: Fri, 24 Oct 2025 16:25:23 GMT Fastly-Io-Info: ifsz=55472 idim=490x490 ifmt=jpeg ofsz=13388 odim=490x490 ofmt=webp Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18017039488a5cb891b56dfe4a19ab67-e03c6f54b43d4014-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 57065 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960023-PAR, cache-dfw-kdfw8210097-DFW X-Cache: HIT, HIT X-Cache-Hits: 11, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 10 df 00 9d 01 2a ea 01 ea 01 3e 6d 34 96 48 a4 22 a2 26 23 75 c9 80 c0 0d 89 67 6e f2 7c d7 0a e2 8f e9 65 a4 16 5d 9c eb cb ff 0d 07 18 ff 4d e7 cb 6e ff 53 fd c7 cd f7 8c dd 1b e6 6b cc 3f 2c df 2f 7f b5 fa aa ff 09 fe 53 d8 1f fc f7 95 97 aa df 31 1f b9 7f b2 5e ec ff f7 3d 5c 7a 07 7e cc 7a d7 fa b1 ff 6c f5 49 f2 e5 fd d0 f8 6b fd c0 fd ba f6 99 ff ed ac 31 d9 df 4c 3f 37 fd bb fc 87 f7 7f 20 fc 8d 79 ff f6 0f db ff ed ff 36 bf 71 7f a9 e4 97 ae 3f df fa 1d fc 97 ee 17 e9 7f b5 fe e7 7e 6b fd f8 fe 6f fe 47 f8 8f 21 7e 21 ff 77 ea 0b f9 2f f3 ff f2 3f 9a bf dc 7c ee 7b 95 2d d7 a0 2f b4 ff 5b ff 39 fe 27 fc 77 fe af f2 df 16 3f 31 ff 33 f3 23 dd 0f b0 bf f6 bd c0 7f a0 ff 59 ff 55 fd f7 f7 Data Ascii: RIFFD4WEBPVP8 84*>m4H"&#ugn\|e]MnSk?,/S1^=\z~zlIk1L?7 y6q?~koG!~!w/?\|{-/[9'w?13#YU
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 0b f5 9c 6f 0a a4 25 96 18 12 74 06 ce 61 bf 79 69 f9 c8 bf 04 cc 1c e7 13 4a a7 82 e1 6f da 68 27 07 88 ea 14 02 0f d5 25 03 41 ff a0 4a 68 77 95 fa 7c 62 0e 3f 5b 0d 0b 08 56 74 1f c9 3b a6 8b dd 26 5d e7 a3 81 26 a8 9e ed 58 32 bc 0a 59 fd e5 31 35 09 0d fc bf 74 b8 65 f4 b6 50 1b 23 2a 21 cd f1 1a 3d 54 18 83 bd 7f e7 db 4d ea f5 ac 01 51 07 b1 92 ba f4 87 1e 9b fc 05 c9 3e 07 ff bc 7e bb 5c c1 3e ba 2c 13 de b9 6e 71 56 9e 33 4d bd 44 87 e0 74 af bc 50 ba c1 69 a8 9e 2b 5f 45 9d da c3 c5 60 0e b5 9a fb 37 7d cc 2f ff 66 94 6c bd 4a b1 e4 9e 1c 72 2c d7 9b 30 71 40 56 98 23 07 4b 08 1f 1c 16 6b 4e 5a bb 5c bd 0d 6a 4c fb a2 6b f3 7c 72 26 38 fb 9a 46 0f a0 ba 5b cc 0e d7 0c 95 f4 dc 56 38 99 87 82 c3 7b 3f 92 5b 97 b7 79 b5 39 c9 e8 3c c8 b7 80 e4 0a Data Ascii: o%tayiJoh'%AJhw\|b?[Vt;&]&X2Y15teP#*!=TMQ>~\>,nqV3MDtPi+_E`7}/flJr,0q@V#KkNZ\jLk\|r&8F[V8{?[y9<
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 3e 9b d6 14 f4 6a 24 e8 9f 47 1c 82 44 f1 e1 6b 04 e4 47 85 c4 3e 00 0d 90 00 e4 84 cf d5 d1 ed 30 cf 53 db 04 e6 e0 6c 95 e4 9f cb 2f e2 f9 74 32 dc 88 cf d8 f5 a3 39 da 91 da b0 9c e9 75 55 e3 d5 2e 05 99 4b 60 17 fd 89 55 89 53 2d a2 49 04 4f a8 12 9b 06 d8 7c 43 b9 9b 20 63 d2 2a 96 be 00 36 26 49 1f 78 4c f6 22 99 b3 22 fe 66 b8 e0 c6 ca d0 7f 8d cf 7e fd 9a d5 0b 0c ce b8 87 bc dc 1f 9b 9c e5 e2 f0 f7 fb 0c 72 c8 69 74 74 a0 e8 51 54 f6 a2 27 80 fa 4e af 70 91 c1 dc 71 68 18 fc 98 db db c2 73 e5 00 59 c0 01 a9 80 9c ce cf f4 71 2b 39 48 ed b8 1c 9e df d5 b6 a5 f5 29 3b 96 06 3b ba 84 64 67 80 cb 54 6c 50 91 87 4c ab e0 f5 48 d8 7b fd 20 ac 2b 14 bb 85 6c eb 97 ca 34 18 1e f4 05 57 27 0a 1a 0c 45 1b 71 60 a7 d5 03 cd d0 c5 25 8d 20 2a fd d2 4b 4b a1 Data Ascii: >j$GDkG>0Sl/t29uU.K`US-IO\|C c6&IxL""f~rittQT'NpqhsYq+9H);;dgTlPLH{ +l4W'Eq`% KK
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 0d 00 e3 eb 26 ac d1 c9 31 13 0b ea e7 1c 41 c5 5e 27 d9 e3 6a 53 66 1a 6c 9a 3e 39 fa 8a e0 4c d5 f6 1c 67 4a 5a e4 21 24 05 e9 d3 7b 78 32 e3 ec d2 a4 f7 41 28 fb e9 11 29 ed 64 18 de 0c bd 3f 15 55 5c bc 5d 3a ac 91 37 a5 2d d9 92 87 fa 8f b3 f5 f2 94 f8 02 84 49 06 dd 4d f8 eb f6 1b 5b c3 17 b0 43 a3 b3 e5 33 ce 98 45 13 35 7f f1 01 50 bf 55 a4 37 7f 39 20 2a d0 87 a2 3a f3 f1 cd 60 b5 9a fb 7a 4e f6 93 c6 8c 97 f0 27 99 e8 c2 92 55 e6 3d 6d d9 7c b7 a0 9a 12 0e 1e 9e f9 a0 57 71 17 4c d3 2e b0 75 9e cc ca 54 f5 05 e9 36 3d 2d 88 77 9e e8 39 c8 22 ae d0 7b 38 04 c3 63 d5 ad 5f e7 1c f7 76 b8 ee 60 ff 22 96 aa ff 2a d4 94 59 b6 11 74 73 c8 b5 f4 11 ac 78 6a b0 32 2f ff ac d7 01 89 71 25 32 b3 e7 99 b5 00 ce 29 55 d8 bf 3b 0b bd e2 b1 2a 41 b2 d4 9f b9 Data Ascii: &1A^'jSfl>9LgJZ!${x2A()d?U\]:7-IM[C3E5PU79 :`zN'U=m\|WqL.uT6=-w9"{8c_v`"Ytsxj2/q%2)U;*A
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 40 bc 3f bc d2 b9 75 2e b5 ba c3 59 83 cb b5 cc 8e 8c 55 a3 8d 9f 4c af f6 9f 8d cf b3 eb 0d 66 b2 9a 35 99 28 23 5f fb b6 85 38 6a b5 59 13 8e 5f 09 9c 43 ed f6 23 5a fd 80 26 0a 91 a2 fa 66 a9 16 de d4 6a ca f9 70 c5 3b bf 67 ed 45 fe f4 4a 77 61 6c e7 bf 2f 8c 37 f6 11 1c ec 7d 01 d5 bc 05 22 8e 3b ac 1b cf f3 e0 64 3a 9c 45 00 95 7d c5 75 c1 be 84 8b 79 3b e0 3e ce 2a 6f 8a 83 b4 76 df bc 54 5f 73 79 1c a4 d7 56 ef 8c 7d 0b d9 13 5d d5 eb ca 68 86 4a c7 1d 6d 47 a6 bc aa cc 35 71 18 90 54 e7 a0 c5 a4 e3 f6 ab d1 69 6e 9d 21 98 10 4b 44 06 61 81 cc 05 1f c8 48 50 d5 37 82 07 bb 4f 6a 3c 07 47 6b 30 01 3c 5b 18 17 a5 26 55 2b e2 d1 b1 8c a2 cf 04 0c 8d ac 3d 3c 9a e0 8f f5 cd ae 62 ca ff 4a e5 a9 b1 a3 f6 42 5a b3 70 a9 c4 55 54 31 7b c1 be 41 d7 7d 64 Data Ascii: @?u.YULf5(#_8jY_C#Z&fjp;gEJwal/7}";d:E}uy;>*ovT_syV}]hJmG5qTin!KDaHP7Oj<Gk0<[&U+=<bJBZpUT1{A}d
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 34 d2 92 36 fd 62 27 e4 ee 89 2f 42 e0 14 fe 5d e6 03 80 76 4e a5 12 ba b6 06 1c a8 18 27 48 87 94 f8 84 be 26 a9 59 03 b7 af 2f f4 48 69 9e 54 6a 39 c4 9c e3 24 6b 79 60 f7 88 ec 04 3b 32 e9 71 5c 18 2b be e8 c3 8a d8 f3 69 68 5c c5 ed 4f fa 03 15 1b 33 19 a2 89 66 67 4a 88 4b 2f 3e f7 65 3c 83 ca 76 8d 93 17 e2 ae 21 8c c1 94 cd ed b0 03 99 17 e7 93 46 81 48 4c 72 ce 78 ec 2e a7 d5 e5 66 62 8e c2 f7 3d 9f ae 84 32 7c cf 20 d7 7a 67 7e c0 da ce 42 63 e9 91 2d bc aa 90 22 dc d7 d4 02 22 b0 b5 27 24 98 6f a2 d2 5b e4 79 c9 8b b8 b6 62 e2 22 71 72 f4 15 36 e4 76 f6 69 54 ba 4f a3 2d 35 5e 97 4e 8e 5c 2c eb 2c 1e 92 66 f4 96 3e 14 a5 ed ab 8b 66 47 74 ec 5f 7e 2d d4 29 ac 55 62 d7 c2 7e a7 ef 18 9a aa 10 1b 7a 39 a4 98 cd 07 99 2c 72 f0 b6 1d 3c 6e 43 36 04 Data Ascii: 46b'/B]vN'H&Y/HiTj9$ky`;2q\+ih\O3fgJK/>e<v!FHLrx.fb=2\| zg~Bc-""'$o[yb"qr6viTO-5^N\,,f>fGt_~-)Ub~z9,r<nC6
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 99 8b 04 a9 f9 10 96 66 68 a4 7c 28 c3 07 9d 34 f6 59 73 a2 89 dd b1 5e 24 53 8a f0 ae a1 d1 1e 47 91 0e 2b 35 60 ba 18 5d 7b 12 e6 23 85 83 5f 3f 50 ce b2 0f 12 77 b6 ad 86 f5 c9 e1 b6 04 bb 9c e7 2c fd a5 3b 06 62 b5 3d a5 1d 2f 9f c6 53 2c b0 19 65 80 6a 0a 2c 4f 66 7b e3 b5 1e c6 79 0f b0 26 c6 69 a3 d7 b3 da f4 a7 c3 8d ea 29 d9 1e 0b 45 a7 2d 42 42 a4 ad 4e 57 19 a0 2b 82 c8 30 76 5d 5e 1a a6 8f 4e 83 76 7b 28 05 66 5b 12 79 4e 6c ee ab 99 de 94 f0 fc a4 93 83 ae 0e 44 66 12 c5 17 41 05 fb f4 36 8a 37 3d aa 67 1d 21 dc f0 0a 08 af 34 a2 61 23 66 5e 76 45 2b 06 2f e1 82 e4 be cd d7 fb 5c 5a 17 b6 86 3e 2b b2 4b 3c 6d b2 94 88 2f 16 0c 56 99 74 d0 94 2d e9 37 5f 89 aa 04 73 20 fd 12 3a 91 b8 3c d5 c1 3c 47 e1 0b 46 56 7d 1c c2 10 46 4f e2 3f 21 f0 9b Data Ascii: fh\|(4Ys^$SG+5`]{#_?Pw,;b=/S,ej,Of{y&i)E-BBNW+0v]^Nv{(f[yNlDfA67=g!4a#f^vE+/\Z>+K<m/Vt-7_s :<<GFV}FO?!
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 6e 19 45 63 e0 46 58 30 59 fd 8e d7 c8 e8 10 8c 5a 55 a6 37 6d 9e cd e0 4c df 39 81 df 26 ec 67 f1 a6 4c be 62 0b 02 87 de 69 20 c1 2c 7d 06 81 5c 1f fb af bd 00 74 36 eb 0a c4 0e ef ed f6 6a 33 0b 31 6a 62 8d 4b b5 61 f6 87 bf b3 6c 2c 26 3b a7 e3 28 71 e9 92 95 fb a7 90 3f ea 95 17 c6 d5 38 b9 8f ed 8a 26 1d 46 63 18 80 9a a5 d4 4b 76 35 fc 85 c2 4a d4 dd ca 68 35 77 f4 98 d6 1f 8f ad 0a eb f5 c1 5e eb da 9b 1b 74 91 41 75 dc d7 55 f2 1b 7f a8 b9 f1 55 1b 5d 2f ce 29 8d c3 18 0a b5 68 92 d7 d9 4d ae 20 10 c3 0c dc 8c b9 ba 82 90 e7 14 f0 dd 8c f6 e8 43 a7 78 bb 35 e4 2a fd a7 59 7e 5c 48 bf 43 cc d2 82 88 0e 94 6c 22 1a 14 83 d6 97 61 ee af 0e 30 c4 2c 00 b7 bb e4 7c 0c 02 5d 06 76 64 b8 00 4c b2 e7 d0 24 6e 75 c2 ec 29 87 1d f0 d9 8d 17 33 1b 91 f0 06 Data Ascii: nEcFX0YZU7mL9&gLbi ,}\t6j31jbKal,&;(q?8&FcKv5Jh5w^tAuUU]/)hM Cx5*Y~\HCl"a0,\|]vdL$nu)3
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 5c f1 f1 f6 3d 80 54 f5 f1 dd c2 ca d0 fc da b7 ea 58 a7 d5 c6 66 e5 6c 25 d3 2a 1b bd 95 91 b4 d0 9b 53 22 af 36 68 99 72 48 7e 0f 37 10 4f b6 3d c1 cd 42 8e 5a 01 41 85 76 e6 a2 e4 ad 17 9d e6 a0 91 a1 f5 54 7f 33 00 a6 10 21 9f 9c 05 74 ff 15 49 0a 1b bb 9a d0 1e 5b 1a be f5 f8 f8 7a e5 f1 7d 47 dc ef 2a ed a1 5d 43 67 11 45 0c 1a ff d4 9b e5 d1 6a 75 18 ec 5f db 4f 1a fe cf 5b 15 42 0a b1 62 4c a6 b1 5b 2b 3b 7a 73 ca f2 5e 43 11 7a f0 4e 5e b4 6e bc ca 61 1c 91 cd a0 01 fd c3 c8 c3 23 49 92 55 51 00 0d b1 38 ea 89 b5 ae d1 a0 84 5a 19 b2 f6 86 54 99 20 20 7b 2a e9 a2 6c c5 68 1c 7d 1f ca 8a 64 e7 91 55 48 60 f6 f1 c3 11 ff 26 80 1a 67 8c 5f 26 b7 d1 3e 0f f6 d9 6b f5 58 de 0f 25 15 fe 48 f5 ad 27 00 f5 74 8a 87 ac 65 59 0b f8 52 b0 f2 54 8b 61 f3 ad Data Ascii: \=TXfl%S"6hrH~7O=BZAvT3!tI[z}G]CgEju_O[BbL[+;zs^CzN^na#IUQ8ZT {*lh}dUH`&g_&>kX%H'teYRTa
2024-10-25 08:16:28 UTC	977	IN	Data Raw: 42 6d 91 6c 2c 1c c4 e7 e7 07 aa 20 0b e4 f1 b0 6f fb 51 6e e1 a4 90 8e 24 c0 c5 f1 38 9d e4 90 d6 bc bc e6 06 8d 90 4a c7 e5 62 08 0e 20 cd 2f 62 88 cb 16 c9 9d 32 86 d6 e3 c5 1a fa da 38 76 0a 13 be 83 b7 4f de e9 2b d0 32 e5 48 1d f8 46 ae aa c3 5b 62 bb e2 88 60 df 17 6c f0 14 3d 46 16 0c 9b c7 51 d5 d9 3d 5e e4 d8 94 a1 ac a1 a9 d5 99 57 a8 16 f0 aa ab b4 fb 76 44 4e af ad 6c 34 2c 4f 3c de b7 e3 09 0f 52 8c 95 69 ca b2 bf fd 8a 1f 98 7b 05 f6 76 68 ed c5 f6 42 8a 92 1d cf 04 57 3e b8 1b be d9 ed 60 f8 79 57 6e a8 50 2d bd 39 b2 79 ac f1 5c 89 38 b8 bd 46 b7 1e e3 79 17 c2 9a 05 6e bf 9e cb 9a f3 23 af a9 58 4a 5c 53 b4 22 41 91 bc 87 56 91 00 7a 0a 10 8b 30 c5 8a 31 18 f8 1c ca 16 c9 f1 9f 98 1a a9 a2 39 68 ba 88 04 12 67 d7 96 9f 1c 4e cd 7f e7 ad Data Ascii: Bml, oQn$8Jb /b28vO+2HF[b`l=FQ=^WvDNl4,O<Ri{vhBW>`yWnP-9y\8Fyn#XJ\S"AVz019hgN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	866	OUT	GET /media/wysiwyg/nouvelles-collections-2024_2_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 47506 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "bjadTngi9VgNyZaPm9lCkudwsA5CR/uOR5i+Bb2Am2o" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=345692 idim=490x490 ifmt=jpeg ofsz=47506 odim=490x490 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e843062c729e9fa8f5444c2e-a0d988822b5b89a5-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960094-PAR, cache-dfw-kdal2120055-DFW X-Cache: HIT, HIT X-Cache-Hits: 12, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 8a b9 00 00 57 45 42 50 56 50 38 20 7e b9 00 00 10 44 02 9d 01 2a ea 01 ea 01 3e 6d 2e 92 46 a4 22 a8 a6 ab 58 7b f9 10 0d 89 65 6c 1c 0a 58 e9 1d 0e 61 0a ee 60 5e 0c 33 a5 6b 41 8a 19 4b a5 ae 4f 73 ca 9f bb ab 5f f1 90 fd bb df 03 cb 6f 9a 7c f6 fe df 5e 9f 2d 5f ec ef 2f dc 7f f3 f9 ea fb 8f 7e 6f fc 5e b4 ff bf 7a 4f 7a 54 f4 e5 e6 f3 cd bf d4 4f f7 6f 48 0f 4b cf 5a 6f f2 3e a8 5e 73 7e b4 1f e4 b7 fd f9 e5 e3 63 a7 fe 18 f9 98 f8 97 bc 5f e3 7d d6 b3 7f db 7f d6 5e a5 7f 3e fc 87 fc 3f f2 3e da bf c3 ff cd e1 ef ec 9f d2 7f e2 fb 8f f9 08 fc e3 fa df fb 9f 55 17 fd f5 ff f0 3d 02 3d cb fb a7 fd bf f3 be af 5f 7f ff 87 d0 cf b5 df f7 fd c0 7f a0 ff 78 ff c3 ea cf fd 9f 08 4f ba 7f c9 fd ab f8 02 fe 7b fd e7 ff 5f f9 8f 78 2f f4 3f fb ff Data Ascii: RIFFWEBPVP8 ~D*>m.F"X{elXa`^3kAKOs_o\|^-_/~o^zOzTOoHKZo>^s~c_}^>?>U==_xO{_x/?
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 80 9a e3 8b b1 23 cc 94 ca a4 3f 52 0b 6e 53 d7 00 b2 19 a4 5e 81 a3 eb fc 8b ab 55 08 a0 52 55 fc ef 1c 54 23 fe a4 63 43 cc 91 de 2a ee a6 98 22 33 79 17 1e 44 76 36 4d 2b d5 84 04 bf 47 77 4a 05 b6 d1 ac 96 44 e6 73 13 7f 8c a2 20 c1 d6 7d 1f 1c c7 98 21 20 cb 3e 61 c5 ae 7e fb b3 56 0e af 51 eb fe da f4 18 cd e5 18 d6 be 0c 77 7c ad ea f7 65 04 7d 30 89 0c 95 1d ca 70 4a 30 41 08 b4 97 e2 d4 cd 1a e3 6e c5 1b a3 a9 07 26 28 5a 77 58 ee 18 be 5d 70 3a 6c 72 d2 43 00 af 6b da 3a 72 46 d6 a7 3d 4f 14 70 83 f0 3b 69 c2 cc 58 1b 56 4b 89 71 1a 25 0e d2 d0 0f 88 c5 64 14 65 66 de 47 0c 54 96 2f 54 3a 0c a8 19 f4 5c d4 c8 64 0d 94 99 d4 f4 aa 24 7b 25 41 bb 46 0f 1c 01 0a df f5 d7 58 1f 99 88 ef d8 fd 36 74 90 af 84 13 17 e3 0d fb 96 35 d4 86 e1 6f 78 7b 73 Data Ascii: #?RnS^URUT#cC*"3yDv6M+GwJDs }! >a~VQw\|e}0pJ0An&(ZwX]p:lrCk:rF=Op;iXVKq%defGT/T:\d${%AFX6t5ox{s
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 58 78 a0 8e d1 9b a4 dd e5 9b a8 82 bc e1 f9 25 ef dd a1 20 e2 ab 03 84 d2 97 a1 92 7d 32 cd 59 06 da 47 7a 83 13 91 73 6f 55 ae fa 6b 33 8f 2a 14 15 93 a0 a2 0e bd 3b 96 73 f7 8a f4 bf a7 ad 4f be a7 41 a2 f2 3c ae ba dd 4f 00 c8 73 e8 6d de 20 55 30 fe 18 30 f4 1f ff 86 be 3c 24 ad ff 93 4c 59 ec a7 93 26 d1 10 e2 bb fc 21 dc 4b ad d6 00 d1 18 f5 4b 96 2d ed 27 39 94 d0 cd 1f df 18 4f f1 6a 08 5b 41 11 94 61 60 fb c0 ab 03 27 fd d3 94 ab b5 97 3a 55 ba 78 69 ef 2a 30 0b 56 39 5b cb 03 20 82 be 15 fb 48 f3 84 13 f1 bd e4 41 80 6b f8 83 b0 d7 d3 43 04 7e bd 0d b6 8c 1a d4 fd 59 77 ee 6d d9 eb 42 e0 8f 7c 78 d8 4b 9c 40 a5 22 8a 8f b6 7c 75 57 f3 17 26 10 0a 65 49 28 f3 83 a1 cb 4c 06 bc c6 e0 4f 08 b1 0d de c7 0a 41 2e d2 1d de 14 87 0d 5a 53 b2 1c 9e 44 Data Ascii: Xx% }2YGzsoUk3;sOA<Osm U00<$LY&!KK-'9Oj[Aa`':Uxi0V9[ HAkC~YwmB\|xK@"\|uW&eI(LOA.ZSD
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 60 75 35 58 40 3a 44 61 e2 66 4b 9b 0d b2 44 5d 4e 70 18 de 3d 01 1f 34 6f 4f 0a 0e fa 47 08 a9 87 74 6c 9f 7e a5 60 6f 4f 07 22 2f a4 3e b0 9c 56 df 8a 61 1d 30 1c fe 3f 36 23 e1 66 f1 e0 58 e7 96 3a c4 4b b8 a8 5a 10 a0 72 0e 88 2b 41 0e ad cc ae 6f 44 13 de d3 46 47 16 19 8d 2c 82 b4 4a dd 6e 56 4e b5 16 4d 40 92 e4 b8 73 92 2d 18 17 f2 33 e8 f0 d7 21 9a f7 45 60 e3 64 41 da 4c ab a6 b8 3e 9e 72 5a 04 ee b3 a4 e0 1c c5 5f 27 78 32 1a d7 ee a4 d1 ce e7 b7 af 94 44 d4 81 43 be 80 0b 95 c4 e6 c9 42 4f 16 70 3e 54 51 ec 01 35 23 b9 01 34 79 f2 1d c0 7f 50 80 a6 89 84 a7 3d 59 62 8d de 3e 5d 20 8c b5 f6 23 29 5c c9 f6 83 a7 d0 99 1c fd ad ec 98 4a 86 a3 0e a5 b6 a2 d7 85 34 9a 9b 05 5a 0c 4c 34 b6 35 e2 6c 3e a3 90 5e 5e d5 e2 87 40 7d 45 43 31 7e 59 c4 7e Data Ascii: `u5X@:DafKD]Np=4oOGtl~`oO"/>Va0?6#fX:KZr+AoDFG,JnVNM@s-3!E`dAL>rZ_'x2DCBOp>TQ5#4yP=Yb>] #)\J4ZL45l>^^@}EC1~Y~
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 23 64 5c 81 e8 01 b5 78 9b ef af 6f 1b 67 ac 17 85 e9 e4 f2 76 1b cf c5 b2 ec e3 88 ab 87 6e 47 c0 1f 04 32 c4 14 dd ec 6a 0e 9d 2a a0 32 bc 81 c1 0e b4 be bb f8 3a dc cd ac ca 4d d3 7d d8 7f 03 a0 f4 01 67 6b 16 83 6b b6 22 8e b7 a6 fa 32 dd 8f 02 c4 ca e3 ca 3f 0f 73 7f 6d f4 83 59 fb 4d 58 be d8 b6 95 38 f7 6c 8e 64 b1 d0 18 a3 4a 19 2e de fb 55 97 a4 ab 88 8e f5 52 a0 32 d8 3d 21 ad c9 99 17 71 4c 10 59 e3 7c 5b 10 a3 0e fd 56 2a 43 42 d5 ac 15 3d a6 e0 cc 97 f2 bc 84 37 ac ad 69 5e 2b ca 90 7f 90 99 dd af bb 74 c2 66 7f 4c bc f4 0f f3 87 63 dd d5 88 90 f5 8b e5 8f c8 5f 43 9e 1e 06 3f 60 e4 b2 d2 aa 69 3e e3 8a 56 4b db 3c 22 b3 ef 68 21 fe 42 8e 46 54 1f df 97 b5 a0 f9 f0 6a 8e f8 05 40 e3 23 2c 89 47 16 9f d2 62 3a 36 79 5c b6 89 bf f4 7f 40 2a dc Data Ascii: #d\xogvnG2j2:M}gkk"2?smYMX8ldJ.UR2=!qLY\|[VCB=7i^+tfLc_C?`i>VK<"h!BFTj@#,Gb:6y\@*
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 5b de 95 ff 0c e5 87 0b de da 5c 1a 49 1a d1 ee 14 26 5b 6e 6b 43 45 5e f4 1a 69 02 ae 8b a5 ed 44 02 e9 16 65 50 01 b5 ff c1 30 86 5f a9 ab d2 39 b0 6c a9 50 66 66 e3 2e 91 be bb a3 0f dd 69 a0 0b 54 66 fb c6 16 d8 3f 81 b3 9a 8e 67 54 6a 96 44 4c 23 43 f0 af 3e 86 6e 06 a3 0e cc ee bb 65 50 4d 9c 63 1d ea dd c9 cb a7 b5 4a da ec 3b c8 80 ea 0b eb 2c 8a 37 3f 98 5b 6b b9 96 2b cc 33 79 56 ea 38 18 7e 21 01 fd 9b ff 1c 15 ba cd f9 c4 21 2a b3 a8 98 d1 2a be 40 eb ad e3 9f 4e e7 83 01 c0 8f 6d 1b f0 42 53 6e 26 53 db 95 74 ac c1 ba d6 7e 3f 62 35 83 f6 23 cf 90 14 b6 30 a8 59 2f 57 c0 c9 a2 01 f5 c3 a9 a6 61 5d 0d cd 18 c2 3a 52 0d a2 31 3f d0 92 7c 91 b1 b1 e1 5b 08 6c 94 f6 2a f4 86 c3 ad de 1e 59 b4 1c 61 32 4e 4f e8 ac b6 36 0d 10 fb e9 d5 42 c3 01 05 Data Ascii: [\I&[nkCE^iDeP0_9lPff.iTf?gTjDL#C>nePMcJ;,7?[k+3yV8~!!*@NmBSn&St~?b5#0Y/Wa]:R1?\|[lYa2NO6B
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 2a 43 7f 1c 5d 9a 2c 97 4c 2b 59 43 e3 fb bb f2 a6 9e aa e8 36 a7 b9 ae ef 3e 77 d1 72 98 85 14 96 0d 74 a4 78 1e 5d 0c 23 eb dd 9b 8b 21 31 1b 5d d9 92 12 13 c6 1a 56 a7 95 c0 48 68 61 a9 a3 6a 19 c4 3f 16 e5 14 f0 89 b1 43 54 25 e4 e9 72 1b e1 12 85 a2 78 e3 e1 50 de 42 c7 d1 d1 6f 99 88 84 7f 07 0d c1 34 16 4e 8e 09 d1 e8 03 8f fe 1a a1 27 0d be e2 08 3c 08 f1 f4 e7 f8 f2 14 38 48 69 c0 3d 89 f1 02 c9 0e b3 66 be c3 3d b9 7f f1 02 dc 38 75 89 b3 c7 97 30 eb e9 5c 51 67 4f 9a 9f a8 d8 0d ae a8 4e 04 d5 28 c1 be 09 ae c8 1a 51 ec 60 ea b8 6d 23 53 ba fd f5 1e 66 35 96 86 7f bb e8 52 f4 5c 5c 3a d2 01 ab 1e 62 f8 38 e0 6c c1 1b 20 70 7c c1 b5 19 4a f6 90 b5 e7 b3 7c 0f 81 9e 1b 6e 82 8e 19 db 47 78 be 89 77 1f cf 95 2e f8 06 4e 63 55 5f 67 97 75 bf 14 ee Data Ascii: *C],L+YC6>wrtx]#!1]VHhaj?CT%rxPBo4N'<8Hi=f=8u0\QgON(Q`m#Sf5R\\:b8l p\|J\|nGxw.NcU_gu
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 6e b8 73 f5 3e 90 cf 45 0f e0 1d 3a ac 88 3a 04 65 99 69 d1 c9 a9 1b 3d 69 b9 90 79 eb 31 5f 31 ca 5b 8a a3 cf e1 87 5d 5e 68 67 8f 3a 71 0e 16 17 84 0c 32 22 d9 55 1b df 7c 54 23 af 18 82 b0 6f df 0c 94 4e ce 30 0f 39 87 dd 23 09 6d 8f 02 9d f8 04 ed 1e ac 07 db 27 46 de 7e 43 d4 e5 96 31 8a 91 cb eb 87 3d 02 d2 b5 73 90 0c bd c5 b0 1b 49 98 00 48 ad 4d da 40 a4 6b cd 18 00 9f 48 78 d0 90 6c e6 e8 e9 60 c1 e5 6c e9 84 82 80 74 3e 14 8b fb 37 40 e2 ff 62 d9 44 57 b2 b7 70 94 96 3f 9f 2f c1 24 83 e1 9b 61 84 47 66 f6 d8 fb 1c be 86 90 0d b3 7c 88 ed eb 24 64 e3 d4 5e 16 99 fc ef 65 4c 93 e9 ca 49 a7 ee fb f4 cb 36 48 c3 79 23 8d d7 28 63 99 78 7c 3a 76 30 9e d3 b4 b2 6c 7a df be 42 98 07 d4 3c 54 32 52 35 dd de ae ff e8 8c 73 ea c3 8b 51 3f cc ce 6b 94 7b Data Ascii: ns>E::ei=iy1_1[]^hg:q2"U\|T#oN09#m'F~C1=sIHM@kHxl`lt>7@bDWp?/$aGf\|$d^eLI6Hy#(cx\|:v0lzB<T2R5sQ?k{
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 51 93 8c 9d f4 dc ba 66 04 03 05 f0 84 53 42 4e e1 8a 4a 56 25 25 9c ca 85 8e 06 76 34 99 20 91 f0 e3 75 07 5f d3 e5 93 a7 c6 f4 4f 32 bd 13 da f2 07 af c9 77 e8 77 43 fc dd ce 82 cb b3 6b 20 9e 31 8e cd 68 d3 e9 51 3b 54 27 d0 7f a2 8d 97 d2 42 5d 48 23 50 7a 52 8b 1c 66 3c eb 7f 06 82 a3 72 cb 4b de 18 a1 f0 b0 32 c6 6a dc d8 54 41 af e6 c2 3d eb 89 0f b6 46 09 34 b5 af 65 16 fe de 0e 91 90 9a 56 73 2b 71 a0 1d 6e 4e 2b 0c fa 71 41 04 55 41 cb d2 40 04 f1 30 69 64 7c 72 81 ae f8 ff f4 69 27 1f 35 be 26 d3 23 a2 88 23 7e cb 8c 05 d6 33 57 db 9d b8 0e 5f 48 3f d0 ac 53 67 e8 3d 07 04 15 6f 0b 63 4d 8b d3 04 a5 27 44 2d 87 b7 a5 dd 04 8c 6d e0 d3 b0 93 68 2e 14 55 bb 6c bf ea 50 eb 4e 85 e2 c8 87 70 0d b3 9f ee 48 a1 27 42 88 c2 3f ff 96 6d af d4 f3 27 d0 Data Ascii: QfSBNJV%%v4 u_O2wwCk 1hQ;T'B]H#PzRf<rK2jTA=F4eVs+qnN+qAUA@0id\|ri'5&##~3W_H?Sg=ocM'D-mh.UlPNpH'B?m'
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 02 ab 63 21 82 b0 2d 52 f2 30 d7 8f c2 75 67 15 fe 68 e8 39 6c 51 f3 77 06 86 bd 4b cf ff 16 4e 85 aa bb 7e d3 78 86 d2 05 24 6b 68 8e 58 80 c2 25 ab 54 9c ae 5e 12 93 6a bd 9d 8d 46 62 8d 85 55 41 dc 9c ed 72 f4 32 ad 4b 3b 03 1e 9d 15 e4 50 83 15 ed d6 32 1f 78 1f 64 f0 63 0a d5 bf 06 d6 08 bb 76 c8 f6 35 ca cb 48 0d 87 51 bb 06 22 96 0f 03 6b af e5 bb c9 39 5c de c2 6f 35 19 f3 fb a1 d5 36 65 58 00 80 af cb cb 4a 00 b1 47 5a cb af e7 a7 fe 29 1b f0 fc 6c c9 e2 ef 1e d3 07 f9 14 6c 9c 89 28 4a ce 8d bc 7a 38 c4 63 6f 12 d3 5e 78 ed fc 20 0b cc 74 56 25 2a 5f 2c 6e 3c d9 d4 75 ba ed e4 a0 d5 3a 2a db 4f de 61 4e e3 cf 78 21 54 e6 50 28 b2 27 74 40 ab 69 d7 ad 1e 10 9e c2 08 f5 db 2f 79 c3 15 ac 5f e2 06 aa 71 de 99 a9 26 15 d7 24 7a 2b 23 70 3d cd 43 8d Data Ascii: c!-R0ugh9lQwKN~x$khX%T^jFbUAr2K;P2xdcv5HQ"k9\o56eXJGZ)ll(Jz8co^x tV%_,n<u:OaNx!TP('t@i/y_q&$z+#p=C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49798	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	945	OUT	GET /media/catalog/product/6/0/602151_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8648 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "hT3x5a+Ngkfj/cQqJoqDLwpTTxVNPW2Q2NILrJzhwJI" Expires: Fri, 24 Oct 2025 12:31:12 GMT Fastly-Io-Info: ifsz=239557 idim=1000x1000 ifmt=jpeg ofsz=8648 odim=200x200 ofmt=webp Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016371c97d9ec9f59287a0c9cba1fe-40bf375dfb083fbe-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71115 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960034-PAR, cache-dfw-kdfw8210102-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 c0 21 00 00 57 45 42 50 56 50 38 20 b4 21 00 00 d0 67 00 9d 01 2a c8 00 c8 00 3e 6d 2a 90 45 a4 22 a1 98 2e ad 34 40 06 c4 b3 b7 7e 3d f7 6a c2 70 e3 2f 98 bb 1f ff 11 e0 4f e4 1f 30 fe 63 fb 7f ee df aa de 0b fd 0b f9 5f 30 ff 9d 7e 0a fe 6f f8 8f 3b bf 65 7c 41 f8 93 f4 6f b0 17 b2 bc d7 3e 97 b0 83 5f ff 39 e8 05 ef 37 de 3b f1 35 08 f0 b7 b0 0f 91 1f f1 bc 03 7e ff ff 6b d8 07 f4 ef ab 27 f8 7f b8 1e 6f be b7 f6 08 fd 8d f4 ed ff ff ee 4b f7 ab ff ff bc 2f ee 7a 58 13 66 f7 2d 26 a6 11 a8 70 4d 22 07 ee 57 1f 75 21 73 3d 79 93 0a 56 10 64 08 c3 9a 59 34 6c 77 8e 0a 20 d9 fe 45 e8 30 c1 02 b1 52 e7 0b ec 8f 2a 85 4b ee f2 32 65 fa 2c 38 f4 ab ff 21 3b 97 a1 0c 4d 4d 9c a8 d8 af f7 af 26 4a 4a 24 79 4b 26 33 1b 08 c7 46 4f 1d 45 65 f6 53 41 Data Ascii: RIFF!WEBPVP8 !g>mE".4@~=jp/O0c_0~o;e\|Ao>_97;5~k'oK/zXf-&pM"Wu!s=yVdY4lw E0R*K2e,8!;MM&JJ$yK&3FOEeSA
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: d1 a9 0f 86 fb 3b e8 dd 2d 1b 34 d9 fa 38 71 4e 0b 9d 50 97 dd dd 8c b1 14 e5 ef bb 8d 81 00 7e 71 61 12 c7 cd 21 f7 84 1b b2 db 8e 92 d1 1e 01 2c 2e 03 ee de d2 88 0d 90 fd 64 3d 77 63 9e 42 21 ee 9c 4a b5 50 24 c2 44 60 18 fc 96 14 87 53 8b 1c 5d a6 f6 cc 4e d4 84 02 7f 03 0d 56 9a ac 87 e1 0b 86 8c 8d 1d 9f 12 09 19 93 17 c6 21 a5 11 c7 de 7f 16 dd ef 93 1c 28 72 8c c8 60 02 b6 56 b9 42 dc ea 7f 33 3f 42 61 a6 2f 18 9d 07 48 bf 47 d6 82 a8 fc dc 25 9b 06 0d ec f5 f1 8f 59 62 ed 15 47 c9 b6 f1 bc 75 4f 0e 90 2c 1f 6e 4e af c3 7b 77 69 e8 83 4a 63 d5 ad af 1f f3 5d 31 bd b9 45 fa c4 fc c3 8e 98 f9 98 ca 0c de 58 11 76 6f 7d 10 5a 43 7c f1 62 f5 92 60 70 49 39 8f cf f4 b1 95 9f 2e a3 e9 57 62 54 dd 7e 9b 65 67 42 d2 47 28 8a c2 d2 88 c9 2e 87 02 e0 47 4c Data Ascii: ;-48qNP~qa!,.d=wcB!JP$D`S]NV!(r`VB3?Ba/HG%YbGuO,nN{wiJc]1EXvo}ZC\|b`pI9.WbT~egBG(.GL
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 63 1e 3a 0f 5f aa 77 3a 52 aa 77 ad c0 7d dd 19 ac a3 d1 c9 ec f3 33 4e 36 ef 18 1e bc 68 5d 2e 55 13 b4 c0 b9 07 30 4b b7 96 13 70 fc f5 78 6c 9e a0 00 ab f7 53 46 6d cb 8a f7 45 6f 1d 16 18 84 4c f9 7e 4c 77 ba 4a b9 39 af 6b d2 79 af 80 0d a6 28 6f 0c 49 ce 9b e8 ea 7c 5b 38 4a 18 b5 56 1d 6d cd 3a db e4 a1 56 20 6a 80 49 12 33 94 78 d4 fe 6e ec 23 9b 6f 81 2b 6c 64 3f 49 97 82 2d cd 68 3b 49 94 d5 1b 54 66 64 df f2 8e ab ec ae e1 bd 7c f3 a8 57 d2 78 1a 0e 75 3d ac 5d 3d 14 f1 4f cc a7 3a 0d 97 16 d0 ce 15 97 1c 41 9d da 71 9f d2 f1 9e 98 55 db 84 f3 65 5e 35 88 ab df 68 d7 5c 2e 46 cb 16 e9 59 9c 17 c5 db bb a9 d8 50 0f 16 d4 1d c1 81 7a fa c4 cd 63 2e 0e 1e 8b c9 08 a8 1d b1 89 75 01 36 33 24 d2 b0 1f 41 8a b6 df b8 2a 41 07 49 cd f4 94 dd f1 56 ad Data Ascii: c:_w:Rw}3N6h].U0KpxlSFmEoL~LwJ9ky(oI\|[8JVm:V jI3xn#o+ld?I-h;ITfd\|Wxu=]=O:AqUe^5h\.FYPzc.u63$A*AIV
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 97 1a 24 ce 97 29 b8 8a 3e 6a 24 8f 8d bd 1d 38 d7 47 8d a8 73 ca 4a 90 8c 56 6a e0 46 f9 c4 3c 2d b8 a6 19 ec 68 e6 7b c3 93 59 cb 17 4f 1e 5d 7f 6e e8 1b 44 97 47 06 6e 85 b3 fb 34 ad a5 81 38 ee 26 ec 64 3f 92 2c a5 f3 db 41 c4 2f 0d 68 e3 eb ff ae 07 e9 38 8f 2b 4d 7b b5 40 22 ad ea a9 17 4a 4a db 5b 6c 8f 05 d3 c8 84 23 a0 f0 46 a9 5c 5f 58 e1 58 76 51 8d 62 b6 04 49 69 ae 7c 04 20 0c a5 d7 7e 9d 2c b7 8f 8e d9 55 cb 93 ef b9 80 46 47 3b 45 df 13 fa 38 e4 58 ba f2 ef 85 79 73 5a e9 a1 0d 09 48 61 ec d8 ee 00 1a 23 3a 3f ed 56 c0 0c 73 aa 6c 9c 81 33 ef e2 36 2b fb c0 04 8f 8c ad 36 cf c0 02 77 78 37 2d 28 d2 2f 35 28 26 d5 e1 8c 5b 03 9c e1 25 eb 48 37 28 f7 15 50 d5 c7 cf 55 f7 cf fb 4f c5 77 46 b8 08 d0 cd 3b c6 8e 6d 49 cd 43 21 09 65 28 2b 76 af Data Ascii: $)>j$8GsJVjF<-h{YO]nDGn48&d?,A/h8+M{@"JJ[l#F\_XXvQbIi\| ~,UFG;E8XysZHa#:?Vsl36+6wx7-(/5(&[%H7(PUOwF;mIC!e(+v
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 8e 37 4e d5 dd 61 dd 3c c1 c9 cd 1a f7 d0 5c 57 7a f1 0d 8c d3 84 a6 17 21 61 57 07 5d 2e 1a a9 ae a5 fc a2 5c e2 36 15 8d ec 3c 72 1e 67 fd 50 0f 4f 9e ab 65 bb cb 55 89 c0 84 78 0d f5 71 27 b1 b8 d0 de bc bd 6c db 5a d7 40 c0 cf c3 d3 54 0d f8 3d 28 c9 54 42 7d 48 d0 d9 76 6a 99 2b 5e ea d4 87 63 91 cf 13 a8 a8 cc 84 c9 10 db cf 61 93 54 88 16 5e c1 08 a1 1c 79 65 95 31 03 e3 1e e4 3b 95 25 8b 9b bc 1e 16 7e 7f ea ea 53 06 07 e9 96 2a 0b c5 90 5b 0e 96 76 9b 39 f0 0c e8 e2 4a eb fb aa dc 54 0f d8 9a 99 c4 f5 f7 b8 f0 ef e9 27 02 92 50 b4 28 6f e8 d9 b3 8d 9a a1 f0 86 0a 29 0e 9e 31 66 11 41 44 2d c9 3c 22 3d d2 8b 81 b6 ae 80 d2 71 46 29 8c 5e 41 78 87 8c db d9 1b 03 4f 14 1f 20 cd 98 fe 30 d4 a3 98 2b ea 79 4b 31 cc f5 65 ef b5 0b b2 93 18 11 0a 15 07 Data Ascii: 7Na<\Wz!aW].\6<rgPOeUxq'lZ@T=(TB}Hvj+^caT^ye1;%~S*[v9JT'P(o)1fAD-<"=qF)^AxO 0+yK1e
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 7a 66 26 b8 39 a4 e6 c1 c6 50 2c d3 e8 60 0d 0e a0 08 b0 b9 09 63 3d 48 fa 73 77 09 b6 14 09 29 d5 a5 9e d0 4f 39 bd a9 06 21 ab 28 29 c8 ae ee 8b 0a 64 26 c4 73 57 8c 04 90 89 e0 28 ce 8e 48 03 9e fa f1 f0 d7 be a0 59 e9 a9 de 5c 6a 1a 75 29 5d f7 9c 84 a2 eb 9c 07 7d 8c 71 69 b5 67 e5 f2 ab 71 cd 87 e9 73 59 19 50 c2 5b 3c c3 c9 07 20 ed 23 1a cf ac a1 ba de 92 c0 6f 45 3e 82 02 e9 e5 c9 47 3f 84 ff 2d bb e2 21 85 9a d1 be c8 87 90 a1 cc fe 7b 9e 05 5c cd 88 bb 0b 69 df 94 c5 d6 e7 6b 81 ab 52 48 79 7c cf a1 82 d8 da 86 59 e3 bb b7 ce 03 6c be 9e fb b1 08 ed 3e ce 79 b6 0b 7d 93 35 75 f4 d6 ae d6 d3 f6 19 6a 52 86 94 3b dd bd 98 5b 6e 73 7f d3 cf 7a 01 06 63 41 41 b6 c1 14 2f 4f b7 d9 4a eb 89 ae 82 87 14 62 f2 2d ed 44 93 5f 60 77 db ac 04 e8 e9 10 93 Data Ascii: zf&9P,`c=Hsw)O9!()d&sW(HY\ju)]}qigqsYP[< #oE>G?-!{\ikRHy\|Yl>y}5ujR;[nszcAA/OJb-D_`w
2024-10-25 08:16:28 UTC	374	IN	Data Raw: 85 67 b5 14 53 c0 2b ce 08 16 48 bb 5b 58 7c 50 d5 f0 c2 af 95 e9 bc 23 07 6f 24 dc 82 0b 63 72 63 cf e9 b7 66 33 c2 14 35 e5 79 5d af 24 ac 7e 13 cc 5f 2c cd 82 95 ab 31 52 16 6c 10 e1 06 75 37 5f 07 f7 45 db c9 96 d2 68 93 d7 2a 81 91 9c 4e 42 75 d4 94 2b 77 e0 9e 24 bb 6a 79 ae 6b 26 23 10 17 b9 62 0c fb fa 20 92 9d 2d e5 e4 d1 98 b8 3e 2c 65 fd 2f 47 f4 91 89 2d fe f0 75 10 19 33 c6 7c 0b 47 be 5a 21 4d 1c d2 b6 d2 d5 d6 bd 0b 12 f6 8d 8f 57 eb 3a c8 b2 b7 0d b3 1e 80 c4 38 34 2f 78 df b8 eb 4c c9 b7 50 e1 06 b1 8d 1d 35 d6 27 5b 8d ed 14 dc f7 0f bf 9a 90 bf ee 2e 8a 5f 87 f0 cb 2d db d1 b4 33 bd 1e f7 0f 8b d4 07 78 56 37 05 0c 01 70 75 90 67 c5 71 88 21 b1 a5 d0 f3 b1 74 b0 2a e4 36 04 59 56 16 34 81 52 cf e7 e4 6d f9 c4 34 52 af 08 66 b1 9d c2 c1 Data Ascii: gS+H[X\|P#o$crcf35y]$~_,1Rlu7_EhNBu+w$jyk&#b ->,e/G-u3\|GZ!MW:84/xLP5'[._-3xV7pugq!t6YV4Rm4Rf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49797	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	945	OUT	GET /media/catalog/product/6/0/602960_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2558 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "I5mj7EWGT19HdAMNABWb7NbU7mc4Q+aiE6drOLR7suc" Expires: Fri, 24 Oct 2025 12:19:52 GMT Fastly-Io-Info: ifsz=87456 idim=1000x1000 ifmt=jpeg ofsz=2558 odim=200x200 ofmt=webp Fastly-Io-Served-By: img06-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162d39026e528c068c5b09f632bb1-4b77957ea6bba507-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71795 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960060-PAR, cache-dfw-kdal2120059-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 f6 09 00 00 57 45 42 50 56 50 38 20 ea 09 00 00 f0 3e 00 9d 01 2a c8 00 c8 00 3e 6d 32 94 47 a4 25 a2 21 28 92 2a a0 b0 0d 89 69 33 6e 93 34 4e 4a db b9 72 3b 03 f0 47 f2 bb 9b 3b 8b 9c 08 3e 99 74 ad 8c 79 af 0c ae 91 67 86 a2 f2 52 b4 dc 90 e1 cf ac aa fa 12 12 92 33 3a 43 9a ae 65 ba 87 bb fc ce bb d8 8a d9 29 b8 a7 cc fa 8c f8 f6 74 de 9b 0f fe cc 5e 4d 29 20 ad 0d 76 4c 43 ab 91 bb 28 52 ad 20 79 16 d0 7e 20 c5 d6 fd 2f 68 85 60 42 96 12 49 6d 85 87 9b ab 29 b7 41 f8 e2 fe 90 7b f2 73 f6 e2 79 f8 ed fe 29 b4 0b a7 15 68 23 a4 6a e4 95 2c eb 58 c3 0c cc e3 76 9e 54 05 f1 8d 5e bd d2 a0 f1 bf 70 1f 58 86 dc 19 2b 2a a0 e5 a8 f5 95 b9 60 88 d8 66 2f 49 6e 72 02 28 9c 92 3f 32 c9 ff d4 ee 2b f7 e9 bb a7 94 10 2b 28 a8 04 f8 87 0e 4b fa b3 34 Data Ascii: RIFFWEBPVP8 >>m2G%!(i3n4NJr;G;>tygR3:Ce)t^M) vLC(R y~ /h`BIm)A{sy)h#j,XvT^pX+*`f/Inr(?2++(K4
2024-10-25 08:16:28 UTC	1179	IN	Data Raw: b7 d9 38 f8 dd 1a 5c f6 a4 31 41 fb 36 36 a4 43 1d 02 a6 9b e8 8d 4f 97 39 6e b4 01 47 7c 59 c6 c4 6f 49 37 ff 22 ae 20 ec 4b 86 79 cf c6 b9 e1 cd 78 2e a9 b4 74 0e ac ff 5a 44 55 c6 e8 15 24 a1 f4 32 fd ca 5e 5f 69 fe b2 db 82 e0 36 9b db d9 b2 47 73 c5 db f6 67 e3 fd 04 cb b6 41 91 86 07 e3 04 95 4e a7 fd 89 da 78 74 01 19 5b 48 b0 59 f7 3c ba 13 8f 60 85 48 bc fc 32 60 30 2b d8 0a e5 4f 39 10 5d 4d d9 d8 e5 37 8c a6 a7 30 64 ff bf b8 d2 09 09 b7 8c 8c 7d 76 6b 47 1d da b5 51 59 ba 36 e1 a9 b6 c0 da 5a 60 e5 d5 2c e6 9d 01 c7 37 4d ba ed c6 08 62 3b 78 36 1b 67 78 07 f4 3d 00 5f 4e d1 00 8e f2 9e 8d 5c 9a 11 19 6f 31 c0 03 af 95 af dd cf 88 05 8f 4a 7a 5f 8e 31 95 a6 d8 d3 f1 6c 0c 10 e0 1c ad b5 92 6d a3 74 35 67 80 84 29 f5 3f 33 eb f4 e0 c8 5b fc 08 Data Ascii: 8\1A66CO9nG\|YoI7" Kyx.tZDU$2^_i6GsgANxt[HY<`H2`0+O9]M70d}vkGQY6Z`,7Mb;x6gx=_N\o1Jz_1lmt5g)?3[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49799	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	945	OUT	GET /media/catalog/product/6/0/603977_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:28 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3390 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "eBKVXezWqvlpnbboTvO0sYhDYlbmji/F1tPtqx6AopE" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=80761 idim=1000x1000 ifmt=jpeg ofsz=3390 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e84e5b654170377779e1309d-e0124d43ed241a43-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:28 GMT X-Served-By: cache-par-lfpg1960037-PAR, cache-dfw-kdal2120077-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 52 49 46 46 36 0d 00 00 57 45 42 50 56 50 38 20 2a 0d 00 00 f0 42 00 9d 01 2a c8 00 c8 00 3e 6d 32 95 48 24 22 a2 21 24 d1 fb c0 80 0d 89 67 6e dd 5f 22 43 be b7 08 f3 b4 6e 07 f3 3d fb 0f ea e5 a6 8d bc f9 fb 71 94 84 d3 bf dc f4 c1 fc 27 db fe 4c fd 7d db f1 3e fd 96 ff 19 e2 04 ed 7e 4e f0 19 ea 77 2a 16 61 1f 6b f5 0b fd 3f eb 17 fe 97 94 ef d9 ff e0 7b 0a 7e be f5 cb f4 5e 32 15 1e e9 62 7d 8e 44 be df 4e 81 1a 46 8a 8f 0f 09 d6 b3 6e be c8 9c a4 92 69 3c c1 32 dc f3 6e be c9 15 e9 56 2b fc 6a 30 dc 82 15 40 48 54 c1 8c 25 d0 ba 63 06 a8 fc 1f 30 e3 f2 2f 0e a1 69 0e a4 be cd 17 a8 36 19 9c 39 d2 b0 33 98 ef cc 41 91 00 19 a5 87 75 89 f5 00 38 92 76 79 3e 6f ea 33 fb cc 8c 2d 2c 82 f1 fb 69 ce 9a b8 e3 d2 f9 1c 99 39 92 8e 58 fe 2e a8 2d 78 08 74 ca Data Ascii: RIFF6WEBPVP8 B>m2H$"!$gn_"Cn=q'L}>~Nw*ak?{~^2b}DNFni<2nV+j0@HT%c0/i693Au8vy>o3-,i9X.-xt
2024-10-25 08:16:28 UTC	1379	IN	Data Raw: 7d 45 f9 68 04 47 d4 7a 3a 0a 7c 14 ad 1f f5 7c 6e 6d 14 fb cd 36 f0 52 eb ae b8 65 e6 8d c9 b5 a7 0c 74 ba 00 c2 7e 25 13 a5 4c 39 4c c7 70 83 3b 94 69 30 e2 e1 df 66 03 e4 33 7b 3c 4a f4 c5 c5 b7 74 fb ed 43 16 40 58 f1 d1 db 50 1c 05 be 8f 23 92 37 b5 30 bd 91 94 df 6b 2f f6 b2 af 51 2e 47 b3 13 e1 c0 78 53 59 58 99 35 ba 80 fd a7 d8 fd de 63 30 37 ce 45 22 fb f3 82 c3 02 da 3d 2d e4 da 81 d8 05 18 15 3f 11 de 47 82 db 45 fb 6f a8 4a 82 7e 19 a9 25 eb ad 08 1c 32 83 0f 8b 4c f2 6d be 1b 92 ca f9 a6 97 d8 db 36 0b 6b 67 db f2 2f 9f ca 76 3b 6c 96 fb 27 66 25 6d c0 96 99 14 cf 21 ee d1 36 6f 23 b6 15 73 c5 51 01 dd f1 44 e2 0a cb 11 ca 2a e1 7c 94 a1 7a cd 5f d8 20 8a c4 b4 42 0e 59 e5 b6 2e 97 86 f7 fd f6 a0 ca d6 a7 22 af 18 88 7f da df bb d6 07 73 bd Data Ascii: }EhGz:\|\|nm6Ret~%L9Lp;i0f3{<JtC@XP#70k/Q.GxSYX5c07E"=-?GEoJ~%2Lm6kg/v;l'f%m!6o#sQD*\|z_ BY."s
2024-10-25 08:16:28 UTC	632	IN	Data Raw: 32 dd 1a 4e 4e bc 68 b2 00 7e 91 3e 2d c1 fc ea 0c e0 66 af 76 81 ad d9 e3 18 f4 e4 7f d4 94 45 33 48 a1 e7 1a d4 57 d9 1d 2d e3 ad 5e 2c a1 bc 9b 3c ce 51 e2 43 be 26 6a 0f 3a b1 c2 b1 a8 11 1e 2e 80 75 a3 31 90 56 4d ea 10 16 4b 7b f6 a5 30 bc 21 88 77 e9 de 2c f9 b7 81 f7 fb 0f 5c 86 ba e9 7e c7 bb f7 9c 76 b1 c7 66 33 a7 55 37 64 40 91 fa 7b d9 21 f3 c7 4f 6d 65 b8 59 2e 34 16 db 15 dc ec cc 42 3a d1 ed 93 96 bf 1e ca e1 30 58 e2 d9 0a f0 e9 09 cc 96 75 ad 29 cf 30 19 77 73 44 11 26 18 fc 71 a4 f2 e4 af 0d a1 59 26 36 c0 7e 4a 8f 10 ca d1 bf c6 d6 13 1d fe e9 86 17 81 09 9d f9 9d 24 05 c0 2d 64 7b ee 06 53 7d 6c 62 16 19 da 2a d8 4c 9c f5 3e 6d 2a 6d b1 05 d5 2d 7f b4 4e 43 7f 96 1e 2f c1 9e 0f b6 7c db 45 ca 63 90 3c f8 78 58 33 6e dc 97 6b d3 bf 0f Data Ascii: 2NNh~>-fvE3HW-^,<QC&j:.u1VMK{0!w,\~vf3U7d@{!OmeY.4B:0Xu)0wsD&qY&6~J$-d{S}lbL>mm-NC/\|Ec<xX3nk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49801	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	638	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-imbattables.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75509 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "5a+UIJYs5Ac8OqrCWYGPWolIG591UdrCoSaJOYJo3Po" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=298142 idim=1920x700 ifmt=jpeg ofsz=75509 odim=1920x700 ofmt=jpeg Fastly-Io-Served-By: img07-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277d44f8334f26334f26a293e71-7d7a04e1e7809415-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960079-PAR, cache-dfw-kdal2120035-DFW X-Cache: HIT, MISS X-Cache-Hits: 8, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 74 aa ae 3b a9 2e f0 7e ab fb 57 99 f9 56 a5 63 52 de b5 4a 55 16 25 17 87 8e cf d1 af 83 3a e1 9b d3 a7 67 37 49 ee f8 ea 90 c1 d6 68 f5 6b d3 c3 7c 1e 7c d1 eb c7 2b 87 b2 21 d7 66 1a 39 5a 30 cd 3a 63 8b 18 21 b6 64 ae b1 0c 8c 1a c0 0d c4 30 30 6b 03 02 dd 23 16 70 30 68 60 8e 98 c3 23 06 b0 54 83 a4 43 09 17 06 92 2e 08 d5 33 81 83 78 18 25 b5 10 c6 0b 83 78 26 05 b5 10 ce 01 bd a3 01 aa 86 30 4c 1c 98 18 23 54 c6 06 0d e0 b8 33 2b 10 e3 c0 c1 c9 82 60 7a 35 4e 3c 0c 1c 98 1b 42 c4 38 f0 30 ce 4d a8 60 2c 43 8b 03 07 2e d1 b5 05 a7 16 01 c9 b5 13 6a 0b 4e 3c 0c 1c 98 43 05 b2 9c 78 26 11 c9 81 b4 59 4e 3c 13 69 c9 82 60 59 4e 3d a3 07 26 09 81 69 4e 36 89 83 93 04 68 b6 cd 38 f0 0d 60 15 29 c6 46 6d a2 72 2d 26 18 66 70 72 13 05 66 61 83 2d 1c 98 32 Data Ascii: t;.~WVcRJU%:g7Ihk\|\|+!f9Z0:c!d00k#p0h`#TC.3x%x&0L#T3+`z5N<B80M`,C.jN<Cx&YN<i`YN=&iN6h8`)Fmr-&fprfa-2
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: a8 97 6d 1a ff 00 ff 00 e3 54 5f 8a 3b 54 ba 03 aa 27 df 4c b9 8f ce 9b 5f 8e 0d 79 3b 7f 06 5f a3 86 5e 2b e1 91 df 8c d3 ff 00 ba 1f 10 43 f4 3a 7e cd ba 9a 72 4b e8 93 4b d5 b8 2f c6 48 e4 97 b2 fe a8 c3 d9 6c a5 2e f8 f1 68 2e 3d 79 a8 58 d1 bb f0 4b 86 7e 35 e1 58 f7 e2 f5 fe 57 3f b3 f3 72 a6 7d 6d d7 45 6b b6 d7 55 ad a5 6b 51 d4 a5 1a 4e 7b 54 65 14 eb 67 6a 4e 0e 49 f6 ee b8 c9 f3 97 16 37 96 d2 71 ad 42 70 6b ba 71 68 ce 5a f3 c7 ef 63 30 e9 a7 8f e0 b8 9f e4 f1 18 65 3e d1 3d 7f 49 71 c2 78 3b d4 ab b5 8e 4f 33 26 d4 8c 4c 5b bc e3 12 fa 5a 37 d2 8e 39 3d 3a 7a b4 d2 fa c7 c6 46 ab 5e 67 22 ae ce 73 ae 25 c7 2d 18 cf a3 ec 25 ab c9 fe 91 d0 af a9 4a 49 fb c7 ce 3b 87 ea 71 4a b3 7e 62 35 c3 31 c3 e3 1e 8f 42 b5 d3 93 79 67 9b 52 ab 79 38 e5 3c Data Ascii: mT_;T'L_y;_^+C:~rKK/Hl.h.=yXK~5XW?r}mEkUkQN{TegjNI7qBpkqhZc0e>=Iqx;O3&L[Z79=:zF^g"s%-%JI;qJ~b51BygRy8<
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ce 0b 83 45 c1 9b 58 86 70 30 6f 05 c1 1a a6 30 30 72 6d 2e 08 d3 8f 05 c1 bc 0c 0b 5a 71 ed 2e d3 93 03 04 57 1e d2 ed 37 80 46 a2 18 da 36 9b 01 6a 5c 7b 46 d3 78 18 16 ac 6d 23 47 26 09 86 16 9c 78 26 0e 5c 0c 06 9c 58 06 f6 8d a2 d2 a1 8c 13 69 c9 b4 98 09 4e 3c 0c 23 58 18 2d ad 31 83 38 39 30 42 da 53 8f 04 c1 c9 82 60 33 4e 2c 19 39 5a 33 82 8e 36 8c 34 72 e0 8d 15 25 c3 83 9e da a5 4a 55 b7 d3 93 8c 94 27 86 bb ac c5 a3 0d 1a a6 bd e7 fb 32 fc 19 62 66 e1 9c f1 89 c7 28 98 b8 98 eb 0f e8 7d 03 40 d3 2e b4 8d 22 bd 6d 32 c9 af 0a 75 65 38 d2 84 6a 4a b2 9c a2 b7 e1 7b cb 0b cd f7 3e 8b f2 3e 9f 15 95 65 6a 96 79 6e 84 1f f6 1c 7d 31 1c 74 d6 95 fc d5 4f f7 b3 3d ac bd ad 63 83 f4 31 11 4f e1 39 4c df 59 97 91 5a 8c 6d e9 d7 70 a3 6b 4e 9c 63 1f 16 Data Ascii: EXp0o00rm.Zq.W7F6j\{Fxm#G&x&\XiN<#X-1890BS`3N,9Z364r%JU'2bf(}@."m2ue8jJ{>>ejyn}1tO=c1O9LYZmpkNc
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: b7 35 e5 ba a5 49 66 4f f7 7e e3 ed 7a 97 4e d4 2a dd ce d6 df 41 84 57 8d ba 15 e8 d3 6f 7c 5e 7e b3 ec bb f2 7c 4d dd a5 7b 3b 9a b6 f5 e1 b6 a5 39 62 4b b9 af 15 9e 23 cf db cd 3b 3c be 7e b7 cd cb cd f2 e6 4e 17 cb e4 c6 b9 79 b9 7d 2a eb f2 7c 77 56 ff 00 93 a8 ff 00 ac 47 fa b2 3f 3d 3f 42 ea df f2 6d 1f f5 88 ff 00 56 47 e7 a8 fb 1e 0f ff 00 05 1f d7 93 f4 7c 17 f2 23 eb 2d 23 48 ca 36 8f a8 f5 34 8d 23 28 d2 20 d2 34 8c a3 68 23 48 d2 32 8d 20 34 8d a3 26 90 46 91 a4 65 1a 40 6d 1a 32 8d 20 34 8d 23 28 d2 03 48 d2 22 34 41 4a 42 81 4a 44 50 8a 52 14 a9 21 48 50 8a 00 2a 00 00 80 00 32 00 0a 28 0c 04 40 01 40 00 10 00 14 40 00 00 40 11 48 68 81 b8 80 c9 b3 2c 42 4e 2c b2 1a c1 54 1b ec 2d ac 75 cc f6 71 b2 1d 95 43 3e 61 db b2 73 43 bc 70 db 6b a6 Data Ascii: 5IfO~zNAWo\|^~\|M{;9bK#;<~Ny}\|wVG?=?BmVG\|#-#H64#( 4h#H2 4&Fe@m2 4#(H"4AJBJDPR!HP*2(@@@@Hh,BN,T-uqC>asCpk
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 54 d4 bf 97 5c 7f 49 2f ef 33 8f 87 78 86 3a fc bc 78 ec a3 0a ae 58 9c ab f4 59 f0 ac 67 2e 69 8d 73 97 bf 2f 57 eb e7 a7 a8 6b 1a 86 a5 1a 11 bb ad e2 2a 29 aa 7e ec 63 84 f1 9f aa 97 a1 f8 6f e5 4d 4b f9 75 c7 f4 92 fe f1 f9 53 52 fe 5d 71 fd 24 bf bc e5 8f 83 71 38 e3 9e 11 c4 c4 63 95 73 44 5d 4d 75 8b 6e 7c 36 66 62 67 2c 6e 3b 4d 76 b7 eb e5 4d a6 9a 78 6b b3 3f 1f fc a9 a9 7f 2e b8 fe 92 5f de 3f 2a 6a 5f cb ae 3f a4 97 f7 98 ff 00 23 db ff 00 3b 1f d2 57 fc bf 3f c7 1f a3 fa 16 9f 58 75 0d 3a 2a 92 bd 6d 25 85 29 42 32 97 de d1 f3 d5 ab 55 af 56 75 6a d4 94 e7 27 99 4a 4f 2d bf 89 f8 df e5 4d 4b f9 75 c7 f4 92 fe f1 f9 53 52 fe 5d 71 fd 24 bf bc ed b7 c2 f8 dd d1 8e 3b 38 c9 ce 31 ed 19 4c cd 7e ac 63 e1 71 84 cc e3 c9 13 3d ea 29 f6 fd 5b fe 4e Data Ascii: T\I/3x:xXYg.is/Wk)~coMKuSR]q$q8csD]Mun\|6fbg,n;MvMxk?._?j_?#;W?Xu:*m%)B2UVuj'JO-MKuSR]q$;81L~cq=)[N
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 7a 56 f6 6e 78 94 97 1e 87 a8 ad a1 15 d8 e5 96 e8 89 7d 1d 1e 15 bb 6e 31 96 5f 0c 4b e6 36 4b d0 ce 0f a7 9d 08 35 cc 51 d2 ab 67 4e 4b 85 87 ea 86 3b a2 4d be 0f b7 18 9e 5c a2 7e 53 d1 b0 01 c5 c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a4 54 44 69 04 69 1a 46 51 a4 11 a4 6d 19 46 91 06 91 a4 65 1a 41 1a 46 d1 94 69 01 a4 69 19 46 d0 46 91 a4 65 1a 40 68 d2 32 69 01 a3 68 c2 34 88 36 8d 19 46 88 29 a3 26 8a 29 48 50 ca 80 0a 4a 94 85 08 00 52 a0 42 93 c8 22 80 02 00 02 a0 00 02 00 0a 80 00 a8 10 a4 08 80 00 00 10 aa d1 51 93 48 cc ba 61 3d 5c 88 8c 89 99 93 32 ef 33 Data Ascii: zVnx}n1_K6K5QgNK;M\~STDiiFQmFeAFiiFFe@h2ih46F)&)HPJRB"QHa=\23
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 2e e6 d6 e9 e8 7d 43 0b 9b ab 76 d4 e9 49 c2 6b 72 fd 09 38 3f 71 fc cf 81 e8 be 81 d4 3a a2 f6 ee 93 ab f4 5a 36 ad 46 bd 49 45 ca 4a 4d b5 b1 47 8c be 39 f4 37 3a 76 46 51 1c bd 67 b3 cb 87 89 f0 79 ea d9 b2 36 d6 3a eb 9a e2 62 62 fb 74 f9 be 04 1f d0 15 3d 91 f4 bd c4 ae 2d ec 7a b2 0e ea 96 77 c1 ba 75 1c 31 dd 4a 31 69 ae c7 e0 55 63 18 54 9c 63 35 35 19 34 a4 b3 89 25 e6 b3 ea 4c f5 e7 85 73 57 5f 9b a7 0d c6 e8 e2 b9 bc a9 ca f1 ab 89 c6 63 bf 6e ef b0 e8 de 8b bc ea cb 8b ca 36 d7 54 68 bb 7a 71 9c 9d 44 de 77 3c 71 83 ce ea 9e 9c b8 e9 cd 5e ae 9b 5e bd 3a b3 84 21 27 38 65 47 df 59 f3 3e d3 d9 46 9b a8 ea 3a 96 a5 4a cf 59 af a7 b8 db c6 53 9d 28 46 4e 69 4b 09 3d df 33 d5 ad d1 95 35 ef 68 ba b6 8d a8 eb 75 ea ce de ce 15 15 d4 a1 1d f3 f7 69 Data Ascii: .}CvIkr8?q:Z6FIEJMG97:vFQgy6:bbt=-zwu1J1iUcTc554%LsW_cn6ThzqDw<q^^:!'8eGY>F:JYS(FNiK=35hui
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 95 3a 92 84 9a ed 98 bc 70 71 a3 ee b4 9e 91 be ea 4d 7f 53 85 29 aa 54 29 5c d4 75 ab 49 36 96 64 f0 92 f3 6f d0 fb 1a de cb 34 ba f0 b9 a3 a6 eb d0 ab 77 47 eb d2 96 d9 61 fa 4d 45 e6 26 23 46 cc a2 67 18 e9 7d 1e 9d 9e 25 c2 6a cb 1c 36 6c ac b9 62 72 a8 99 88 bf 7a ec fc 54 d1 f5 9d 39 d1 da 96 b7 aa dc d8 e5 5b fd 19 b5 73 39 ac f8 6d 3c 63 0b bb ca 3f 40 7e cc ba 7e a5 5a 96 94 3a 92 2e ee 3c 3a 6d d3 94 a2 fe 30 4d 32 63 a3 66 51 71 1d 2f e8 bb fc 47 84 d3 9f 26 7b 3a d5 cd 44 cd 44 fa cd 3f 14 39 68 c6 9c ab 53 8d 5a 8e 10 72 4a 53 4b 73 8a 7d de 38 ce 3d 0d 5c d1 8d 0b 9a f4 63 52 35 15 3a 92 82 9c 7b 49 45 e3 2b e0 cf 53 40 d0 ef 35 dd 4a 95 95 b6 14 a4 9c a7 39 76 84 17 79 3f f8 ee 62 22 67 28 88 8b 9b ec f5 67 b3 0c 75 e5 9e 59 72 e3 18 dc cf Data Ascii: :pqMS)T)\uI6do4wGaME&#Fg}%j6lbrzT9[s9m<c?@~~Z:.<:m0M2cfQq/G&{:DD?9hSZrJSKs}8=\cR5:{IE+S@5J9vy?b"g(guYr
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 97 86 b1 cb 5e a6 fe cd 95 65 d7 b7 6f 9b cf fe 77 a7 9b 44 57 4c a3 f8 93 d7 e1 9f 97 bb f9 38 b9 3e ff 00 a6 ba 12 e3 5c be be 8f d2 3c 2b 4b 6a d2 a5 2a db 73 29 ca 2f b4 57 ae 3b bf 23 eb 6a fb 26 b5 95 d5 28 5b 6b 1b a1 19 62 e2 32 8a 73 82 c3 c3 58 7e be 4c e5 1a 76 65 17 18 be 86 7e 27 c1 ea d9 38 65 b7 ac 45 cf 49 9a 7e 39 69 6f 52 ee ea de da 9b 8a 9d 6a b0 a7 17 2e c9 cd e1 67 19 e3 93 e9 7a 93 a2 f5 4e 9d a1 42 b5 e5 6b 69 c6 ac dc 22 a9 4a 4d a6 96 79 dd 18 9e ce ab d2 f4 7a 6f aa 7a 7e de 9d d4 eb 2a b5 e8 cd ca 51 51 c7 e7 52 c7 07 eb fd 67 d3 51 d7 e8 58 d3 ab 79 1b 6a 34 6a ca 75 2a 3e 5e 1a c2 4b 38 5c 9b c3 45 e3 b2 26 3e 28 98 a7 9f 88 f1 58 c3 77 09 96 39 c7 93 b2 32 9c a6 ba f4 7f 2b 9f 77 d3 bd 0b ac eb 96 1f 4d b4 b8 b4 85 3f 12 50 Data Ascii: ^eowDWL8>\<+Kjs)/W;#j&([kb2sX~Lve~'8eEI~9ioRj.gzNBki"JMyzoz~QQRgQXyj4ju*>^K8\E&>(Xw92+wM?P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49803	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:28 UTC	945	OUT	GET /media/catalog/product/5/0/502760_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5476 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "YPWVc9zHWZZmGftgS3lcrrkoSU8eRkTHoYznfxRLbhI" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=215810 idim=1000x1000 ifmt=jpeg ofsz=5476 odim=200x200 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e85a1cc40aa922b09dbe2a53-b7d5c39ce25c0969-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960093-PAR, cache-dfw-kdfw8210048-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 52 49 46 46 5c 15 00 00 57 45 42 50 56 50 38 20 50 15 00 00 90 57 00 9d 01 2a c8 00 c8 00 3e 6d 34 95 47 a4 23 22 23 a7 d5 1a a0 80 0d 89 63 08 c2 b8 21 d2 cc 0f 5d ea c3 eb ef 3e 07 a8 03 f6 5e f4 af f7 73 bf eb cc 9f ed 3f ea 4f bc 57 a6 7f 40 0f db 1f 5a af 57 5f 40 fe 95 8f ef 9f f6 bd 31 b3 24 7a d4 f8 8f e6 d3 e4 9a 0f 66 cf b3 0d 4b fb f7 ce c7 f6 1d f2 fc bb d4 2f db 1b de 76 ef d0 3b d9 bf b5 79 c4 fd cf 9b 5a 5d ff 73 ff a9 ec 11 fa 67 d1 e3 41 cf 64 7b 08 74 bb f4 8c 5a 87 9d 62 ee d0 c6 79 2a cb f7 3a 7a 3e 55 18 86 7f ec 2f 02 3d 90 5d 10 fc 53 08 57 40 09 8f 35 f5 da e5 a7 a0 50 24 7b 6a a1 27 02 92 e6 13 84 73 5d 4c e5 aa ae de 20 1f c7 0e 80 c0 fb 8e 2d b7 f6 76 86 de e3 f9 88 7f 74 63 54 f5 aa 2b c3 9e 74 65 2b 68 1a cc 3a 21 28 49 ce a1 Data Ascii: RIFF\WEBPVP8 PW>m4G#"#c!]>^s?OW@ZW_@1$zfK/v;yZ]sgAd{tZby:z>U/=]SW@5P${j's]L -vtcT+te+h:!(I
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 27 3e b8 3e 93 ce 0a 51 b8 f9 12 76 a1 f5 26 b0 93 5b 41 1d 91 e6 7a ca 9c 2c e5 ad bd 81 03 e9 bb 11 fa 56 a8 9e b0 73 98 38 71 90 f3 af 00 38 02 bc 53 2a 3a 83 4c f1 6f 6c 86 e7 c1 e8 2e 9c 57 1a ca 54 fd ff 44 21 68 36 eb af f6 b8 e2 b0 e8 4c 1f 59 0e 4f bf 5c 33 4a dc 2e 0d 60 e7 0f 6a ca 7f 9b c0 cc 00 3b 9b 21 31 8f 5f aa 92 4f 5e dc 6c 28 e4 72 77 de 51 86 a7 f8 9d e9 54 e0 38 81 16 4c ca 3d a9 3f dd 77 7c c1 88 fc 8e a2 e8 0d d0 d5 35 af a7 b3 9b 1a 76 7b a6 df d2 8e 4a ac a0 42 22 7b 3d bd a9 f6 3f da b6 bb 1e b5 ba 34 b8 3c c0 6f a8 94 91 39 4e 77 1c 68 47 eb 84 de 7e d3 e7 97 7e 2b fa 20 92 fe 6b 61 6c ef a3 c3 04 99 70 54 aa 87 b2 d8 98 64 e2 12 c4 97 15 8d 12 f2 44 34 1e 27 fd d8 2d 58 27 c6 c1 54 8d ac dd af ec 82 b6 44 76 c4 1f 6e 4e f4 f4 Data Ascii: '>>Qv&[Az,Vs8q8S*:Lol.WTD!h6LYO\3J.`j;!1_O^l(rwQT8L=?w\|5v{JB"{=?4<o9NwhG~~+ kalpTdD4'-X'TDvnN
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 24 9d cb 81 ba bf 25 2e b8 f1 79 90 7e 2d b4 f7 47 fe 4b 84 74 b0 0a b0 3d 0d f1 ae 8e 5a 8d 0c 07 3f 3f 34 49 7c da 70 a9 be 92 f0 d0 5d 8f 5f c5 ea 72 7b 56 13 29 92 f4 4f 10 fd 61 f5 ff 72 8a c1 80 dd 17 8b 41 4e 61 93 8c f9 59 f7 79 b8 47 af 31 fe 2d e1 7b 84 ef 51 cb 7a 09 63 c0 52 3e 1d 5c 75 2f e3 6b 58 42 4f a9 87 7e ba c0 90 c8 7b 1c 6f fc db d1 fb 72 61 66 43 81 fb c8 e5 ba 0e 9d 70 f1 f5 fb 00 78 ce 39 93 a6 82 ce 17 be 44 28 b5 31 c8 91 f7 9a 0c 15 fd 22 10 d7 c5 69 87 e8 0f 33 ef db ef c0 51 1a 2c 57 4d 80 d2 f5 c9 aa ff 34 74 57 30 24 de c1 cb 46 00 60 57 b7 55 10 27 74 9c a0 a4 4c 45 0f 0c a5 77 8d 03 73 c7 67 37 79 18 f4 a4 c9 53 ed 0f 18 bf 2a fd a2 84 84 3e 70 2c e2 76 53 22 ec 3f 86 9f a6 ac 78 e9 75 bd c8 a7 2d 0b 55 81 89 6b b5 8e b0 Data Ascii: $%.y~-GKt=Z??4I\|p]_r{V)OarANaYyG1-{QzcR>\u/kXBO~{orafCpx9D(1"i3Q,WM4tW0$F`WU'tLEwsg7yS*>p,vS"?xu-Uk
2024-10-25 08:16:29 UTC	1339	IN	Data Raw: 63 54 65 11 f0 36 85 97 cb 15 e3 d7 24 ed 76 86 b8 8a 0f 61 71 7c 09 aa dd 89 cc b3 be 82 64 03 5c 0b d6 e3 02 04 ae 59 b5 8f f3 f2 1d 52 51 99 70 4b d3 22 f7 44 43 eb fd f9 cd 0d 64 be 95 28 3a 9c 29 ad 41 51 b9 0e a9 bc e2 a5 d3 07 59 19 83 7c 53 eb 3c 8e 5e 19 63 bd e7 17 bc 6e 04 ff c5 18 31 f8 39 2c 3d c3 27 32 66 f3 e2 db 33 80 e4 45 52 b1 c9 cc 53 41 85 53 05 fb f9 cd 9a 85 3f 82 91 60 78 99 ff b7 7b 9c d1 28 1b e4 7a 3a bf 86 6c 38 fc 5c c3 6b ef c9 f3 ff 3e 7d cf b1 1d 52 5e 6a 15 af 44 b5 10 e5 04 ed 2a a2 1e 41 fc d8 d5 64 a0 c4 ac 0d 4a 6e e0 fd e9 41 31 ec d9 68 db d0 ba a5 1d cd 6a 9e 63 4c 4b 70 01 49 d1 09 0c a4 7f 1b 3e d9 90 b7 89 84 0f 07 1b 1b 93 19 cb b3 6d c1 20 8b e6 53 c5 d0 25 55 5a ab ca 42 85 81 f8 78 1c c2 f3 40 0c c7 8f 7b 10 Data Ascii: cTe6$vaq\|d\YRQpK"DCd(:)AQY\|S<^cn19,='2f3ERSAS?`x{(z:l8\k>}R^jD*AdJnA1hjcLKpI>m S%UZBx@{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49806	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	838	OUT	GET /media/wysiwyg/home/VIDEO_MORPHING_LOGO_FRANCE_compressee-1.mp4 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.retif.eu/ Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96 Range: bytes=0-
2024-10-25 08:16:29 UTC	753	IN	HTTP/1.1 206 Partial Content Connection: close Content-Length: 1881759 Cache-Control: max-age=31536000 Content-Type: video/mp4 Etag: "6704ee5c-1cb69f" Expires: Fri, 24 Oct 2025 12:13:18 GMT Last-Modified: Tue, 08 Oct 2024 08:33:32 GMT Traceresponse: 00-18016277d8ed8b0b8cce9b179c9a1c7d-1e5dd0337f1c743d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72191 Content-Range: bytes 0-1881758/1881759 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960085-PAR, cache-dfw-kdfw8210100-DFW X-Cache: HIT, HIT X-Cache-Hits: 352, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 1c 43 db 6d 64 61 74 00 00 02 d8 06 05 ff ff d4 dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 36 33 20 72 33 30 36 30 20 35 64 62 36 61 61 36 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 32 31 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 32 20 64 65 62 6c 6f 63 6b 3d 31 3a 30 3a 30 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d 65 3d Data Ascii: ftypisomisomiso2avc1mp41freeCmdatEH, #x264 - core 163 r3060 5db6aa6 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=2 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 8c b5 98 cf b7 ba b4 b0 e2 f8 12 df 23 9b 2b 70 9c f5 af 6d 9a 9c 42 04 21 57 03 16 28 66 54 e1 db bb 69 c4 c9 78 30 0e 0b 0b 5c 6a 03 05 d8 b7 ce 74 fb e3 82 95 4e 35 e6 99 26 64 a9 81 a8 ea f8 2a 5b 06 f4 75 7e d3 e3 f5 5f 71 67 c1 54 df 06 e8 f0 a1 99 da 02 a7 02 16 d8 e1 23 ee 63 d2 64 e7 ea f8 2f 7f fb 75 81 b7 8e 6f d6 11 14 7f 90 4e 76 80 53 64 cc 5a 36 9a e5 9e 4b a6 b4 c2 66 e5 83 02 5e fa 10 4a cb c0 c4 b0 7f fc d0 61 80 51 ed a0 0b fd 03 a0 d2 9c 05 2a a7 60 ab 75 13 c5 6d 55 7e 3e 6e ad 25 5f f4 e2 c3 ce fc 61 af 67 b5 ff 51 f3 fa 2e 02 9b c4 dc 73 cb 2b 6b 04 f5 dd 76 e7 58 23 5a be 8b 3c 95 02 4f ba 77 b4 10 bf 42 92 a0 eb 3d dc 70 16 8d d4 b4 2f 2f 4c f5 d0 86 9a d8 dd 77 03 a2 3a 85 13 27 fb 1e 68 c1 6a 89 00 00 03 00 01 5b dc 00 4c 61 76 Data Ascii: #+pmB!W(fTix0\jtN5&d[u~_qgT#cd/uoNvSdZ6Kf^JaQ`umU~>n%_agQ.s+kvX#Z<OwB=p//Lw:'hj[Lav
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 9c f7 1e c3 e4 1f a3 b7 e6 44 38 11 4d 24 af df de dc 29 51 26 4d 45 9b 34 d8 a5 35 53 fc bc 1e 32 d5 59 8c 8f d0 d1 ef ce 69 5e 5f 7f 24 94 a9 1d f3 17 1d f9 bc 20 10 93 88 70 64 f1 37 aa ee 65 f6 f3 bc ae 50 6a 3a 55 39 90 33 21 6c d6 47 4a e3 79 7e 28 d6 d9 06 f1 3b f7 23 0e 6d 9d 7a 65 b9 2a b2 dc 97 42 ce f9 e3 ec 6a 87 90 09 ee c1 0d 57 4f a7 e4 18 d8 95 11 f8 2a 84 f0 75 83 da d9 fe ea e9 f9 a5 40 c4 e2 6c a0 cd 46 98 af cb 8e 71 3e 51 44 b4 17 23 a6 6e 5e 76 95 7b 9f 92 64 1d ae 27 b0 a3 bb ce 5d e7 70 33 38 7b 28 7d 2d 4e 98 af d0 35 73 60 a5 22 49 b3 21 1b 04 68 36 c8 04 8d 7d 93 3f eb 88 44 9c 63 ce 35 fb 23 03 9a 46 cf 62 9a 9d 77 ea 36 a3 b6 74 30 2c a4 11 97 a8 38 ef 5c 29 87 3e 59 cd 71 08 93 8c 79 c6 bf 64 60 73 48 d9 ec 53 53 ae fd 87 14 Data Ascii: D8M$)Q&ME45S2Yi^_$ pd7ePj:U93!lGJy~(;#mzeBjWOu@lFq>QD#n^v{d']p38{(}-N5s`"I!h6}?Dc5#Fbw6t0,8\)>Yqyd`sHSS
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ac 55 bb 13 1b f1 a2 fa 5e 8a bb fc 1f de 65 a8 3a 97 c3 4c 40 d0 4f a7 6e 89 a8 6a 7e 06 33 51 a9 4b d0 87 39 a0 7a 2f 91 7f ac 9a fb 7c a8 8e 28 2f d0 05 b1 e1 53 5c d3 fd 64 f7 33 3f 95 10 b9 69 68 a6 a4 3c 93 33 ee 22 c8 e2 50 6f 3f 86 9d 38 d4 e8 a9 7b fc 82 99 f5 23 56 9c e9 35 fd 7b 20 79 37 31 c2 a9 63 cf d4 7f 03 50 5e 96 20 00 00 03 00 16 51 21 10 04 60 8c 1c 21 10 04 60 8c 1c 00 00 03 1d 41 9a 86 06 3c 0c 40 3e e0 20 20 35 80 56 94 44 f0 9f fe da a6 58 00 00 03 00 02 a6 69 bd 7e d6 5b 84 eb 86 16 d9 fd 86 c0 af 57 3e 27 5d 77 96 2a ad 5a 60 15 f5 bb b1 69 3f fa 91 60 cc 1d 07 dd dd 79 f9 0e 38 7a 3e e3 c5 02 4b 98 d5 f4 4c a7 8f e2 97 d5 74 c7 fc ad 91 3c 61 27 3f 82 1d 23 c8 2d f0 f7 09 95 72 0f 23 7e 2f 5c 95 a6 65 56 3f 22 3e 8d df a4 ca d9 Data Ascii: U^e:L@Onj~3QK9z/\|(/S\d3?ih<3"Po?8{#V5{ y71cP^ Q!`!`A<@> 5VDXi~[W>']w*Z`i?`y8z>KLt<a'?#-r#~/\eV?">
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: cd fb 00 0f e5 35 55 64 3b a3 d7 c0 c9 f8 fe 86 d4 bc 23 5a 9a 2f 80 d8 04 b4 66 f0 69 f3 84 49 bf e5 92 15 62 54 2a 19 fc 98 94 0b 80 66 85 b1 04 74 d3 79 6b 53 9f bc 0f 4a 60 dd fb 57 71 d4 be 92 7c 66 da c6 8d a2 53 cf 8a 34 3f e9 62 13 ab 65 7b 06 19 df de c9 27 73 ae c5 cf e9 b5 52 e8 53 ed 2c ca 75 3c 61 95 7c 90 c7 16 5c 45 f0 59 a4 dd aa 78 c8 f3 65 3f d1 6b c9 07 65 14 c9 8a d4 68 3e 91 d3 9b 00 dd 16 ea 65 d9 7f 6b e6 52 7d c1 c2 5c c6 bd 59 0d 21 6d 8d 59 22 6e 43 db a6 8e dc eb 40 0e 39 4b dd ba 42 4a 62 0e 6e a3 22 c5 2f 39 29 35 98 9d 0b 08 fc 4b 47 70 0b 4d 55 fb 86 6f 9f 6a 37 21 5f 6d 8b eb e2 67 1d a1 af a1 1d 4a a1 3d 26 46 03 dd c5 da b6 cd e3 b8 8b 54 cd 4a 08 dd 06 eb 2b 7e e2 04 0c 11 71 8c d4 f8 4b da 21 53 c6 9e 77 39 b1 fd 3f cf Data Ascii: 5Ud;#Z/fiIbT*ftykSJ`Wq\|fS4?be{'sRS,u<a\|\EYxe?keh>ekR}\Y!mY"nC@9KBJbn"/9)5KGpMUoj7!_mgJ=&FTJ+~qK!Sw9?
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: eb b7 72 18 b8 03 ff fc 86 b6 7d 39 0a 85 3e d8 ae 21 0b 16 b1 e0 73 e0 72 28 25 6a 56 7b 59 29 27 f7 90 eb 5c 0b 15 e3 1f b3 fa 4f af cc 58 9a bc 44 53 8b c5 26 3e c3 bc 1f 6b dc 39 bf 9f cc 0a 3e 8d 7e 9b c9 1c c3 cf a7 e2 9e 26 87 8b cf 8d da c4 a6 11 a8 c7 1a 88 57 e2 e6 28 92 14 13 f0 f3 ed b4 51 8a fa 0c a6 da aa f5 c5 3c 6a 2d 18 e9 67 0f dc e1 d1 b2 0f c4 9b 32 ed dd 13 e0 b4 5b a2 89 4c 7d db 54 cb 09 c3 a4 8c d1 21 3e 79 5c 8c 02 c9 2e 52 35 1b 64 e5 5c bb 3f f0 fc 34 e0 08 8b de 84 61 b3 e7 d7 35 50 b2 80 c4 f9 f0 6a bf 90 e6 c8 58 f9 d5 df 59 5b fc b7 05 af b2 9b c3 2a b6 c7 04 49 33 34 2b 90 43 22 2d 4b 78 8c d6 a1 b8 49 62 fe a2 f6 20 bf 65 53 8d 72 2f d9 e8 6a 55 eb 66 a1 d9 fa f4 14 7e 65 af f7 d0 28 c7 7c a8 04 33 81 00 83 60 e5 60 b8 3f Data Ascii: r}9>!sr(%jV{Y)'\OXDS&>k9>~&W(Q<j-g2[L}T!>y\.R5d\?4a5PjXY[*I34+C"-KxIb eSr/jUf~e(\|3``?
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 00 19 d4 de 03 79 96 26 d3 c8 63 45 53 25 a9 59 09 e6 a2 b2 36 a5 fa 78 cf a0 f8 f6 1e 5e e9 68 ae 0b 96 05 8f b1 3d ff 22 15 de d1 de 63 e4 53 c1 6c 33 8a e9 83 79 ac 00 f3 ff ed 97 39 60 ab 38 1a 66 d8 9b 96 71 29 ea a0 5e a7 e4 c9 ac 59 0d a6 7f 6e 8c 16 04 1e 87 18 ee 05 00 4f 3f f5 0f c0 06 00 4b c4 a9 39 e7 b1 a7 93 a3 80 ea 4b e2 cf 34 64 e4 21 40 21 9f f9 92 48 e8 9e 08 4a 45 8b dc bd 8f 6f 34 91 a1 09 b0 34 68 60 30 ff f3 cb 4a 2f 46 d8 00 10 30 cf b3 0f 01 c8 0a e5 09 27 97 00 b9 ff cf 4f b4 bd 1a 91 b1 a2 4e 30 4b db 1f dd 32 10 84 10 18 ff f5 6e 6d 87 88 44 dc cb ab 01 ee d4 28 fb 74 09 7e 04 c7 fd e5 37 ce 80 23 cb 9a 90 6f 35 e8 50 8e a7 0c 3f 02 19 fe f4 7f 14 94 09 d5 22 6b 98 57 de 54 8e e0 54 80 29 46 c6 b9 b1 0f eb f9 91 9f 85 a8 82 a2 Data Ascii: y&cES%Y6x^h="cSl3y9`8fq)^YnO?K9K4d!@!HJEo44h`0J/F0'ON0K2nmD(t~7#o5P?"kWTT)F
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 97 cb 3a b8 e3 a9 07 e9 82 5f 5b ec 0d f5 54 4b 2c d5 1b c5 7c 7e ec b4 0f 64 8a f0 34 eb 00 da 80 0d f3 98 5d 95 ff 0f c4 47 5b cf 4b d5 2c 95 0e c3 e0 17 2a cd 4e 30 3d d7 21 d0 51 8e 88 85 c4 80 00 b4 4a cd 3a ef 89 d3 b5 54 db 1c 5c 26 f0 1d 29 66 db a6 21 23 b9 24 71 6b 36 42 e1 51 a5 b3 f8 e3 08 80 d7 ef 6f 6b 17 88 a4 cb 3c b2 73 69 c4 68 d1 5c a3 4e 17 df 01 d4 da 9d 76 a9 d1 20 d4 68 a3 d3 85 e0 95 56 b6 40 d1 fe b9 2d 7e 4d b2 6e 83 a0 79 6a e6 a9 0c 98 45 8b 1f 24 ba 7d 42 0d 45 03 87 a5 5f 48 85 95 28 69 73 e9 86 ff 2c d3 bb 45 3d ea 65 38 79 dc c8 00 0d 47 26 65 2d cd 66 d9 7d af 22 2b 28 2d 4a ff 09 27 50 4f fb 78 a6 de f1 8c dd c9 49 b8 a9 2a 39 4e 3f 25 fb ba 88 63 c0 58 0b 1c cf ea 73 ac 00 b7 49 6f 01 f5 75 c0 da f8 40 f4 31 c1 2c e4 82 Data Ascii: :_[TK,\|~d4]G[K,N0=!QJ:T\&)f!#$qk6BQok<sih\Nv hV@-~MnyjE$}BE_H(is,E=e8yG&e-f}"+(-J'POxI9N?%cXsIou@1,
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: fd 08 1f 83 cd 0f 60 41 ec 4f c4 18 0f 4a 85 7b a7 9c 8a 10 fd 22 15 ff 6e aa 76 0d 59 63 b4 d7 5a 8d cf 17 9d 05 ab ae 14 5e ec 7c b6 04 0a a8 14 d5 28 e3 7f 83 fa 99 35 d2 da c6 63 91 e6 46 7e 56 c5 1b 9a db 84 64 b6 6a bf f5 70 40 9f 57 02 e6 d6 aa 71 ea 4c 20 8d dc 47 28 28 15 29 65 3a ea 54 84 7f 0b 4a 3e de fc 6f 2b bf ee 67 c5 50 c9 f0 1c c0 10 c1 81 d8 1d 6c 00 ed 58 f8 b7 56 c4 7a 93 a6 79 26 3e 18 f3 59 86 a0 d6 a2 87 4a a8 b0 fc 11 f5 ec b3 01 e0 e6 67 c3 3e 81 99 c3 fe 02 e8 82 a6 f0 28 2e 22 c4 00 bc 5c f9 cf b7 01 32 0b d6 55 8c 6c d5 ce 76 fb a3 3e 8e 01 46 8c 47 c7 a9 f4 5e 8b 77 20 50 1e 18 7a ed 9e 90 84 14 c6 c7 a4 ac 41 7d 3c 91 91 d3 3a a3 69 d5 7d 8c c1 11 59 9a ea 13 20 ad b1 cf 70 e3 e6 75 b7 1a 12 2e af 2b 4c 05 57 0c fe d9 8a 4b Data Ascii: `AOJ{"nvYcZ^\|(5cF~Vdjp@WqL G(()e:TJ>o+gPlXVzy&>YJg>(."\2Ulv>FG^w PzA}<:i}Y pu.+LWK
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: f4 66 d5 a4 ec 76 c1 22 7f a3 98 8d 0d 1e d9 39 37 d9 34 89 9a 04 98 ff e9 f2 11 49 ca 4b 68 d4 8d 30 7c 5b 24 fa fc f6 39 51 12 39 d5 f2 ef f3 0f 96 14 ea 5d 35 01 06 f7 6a 30 06 69 5e 45 0c 1d 30 a9 9f 51 b2 58 8c ad 7e 04 e6 77 e2 34 94 ca 77 b0 e1 e4 5e 8e 1a c5 c0 08 67 24 8e 0e b8 06 c5 d4 d3 39 81 a1 d1 ae 3e 39 c2 49 e8 e9 b5 36 1d 04 8d bb 5c 43 25 63 3e 4d fd df 77 7b 2f 14 7e 53 ab d4 ac ed 2e ff 9c 7d 40 dd c0 7d f0 7a a3 bd 6a f9 74 c8 4a a3 8a a4 08 84 60 03 3d 88 5f c5 4d 35 b0 fe af 1f f2 51 54 eb 5c 07 63 8f 05 42 eb 6e c1 6f 33 f9 6c cf cf 9e 28 2d 58 98 03 a3 8d 44 ff 6d 78 87 12 44 81 4b f4 c6 86 75 a9 ec 8b c9 83 c5 77 4e 74 31 40 04 b6 75 74 a7 f1 08 de 48 c7 b0 2c 36 91 b7 49 0a 34 14 bb 3c 55 a0 cf 39 6b 76 d2 bb a2 c6 88 97 ca 9b Data Ascii: fv"974IKh0\|[$9Q9]5j0i^E0QX~w4w^g$9>9I6\C%c>Mw{/~S.}@}zjtJ`=_M5QT\cBno3l(-XDmxDKuwNt1@utH,6I4<U9kv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49809	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	1109	OUT	GET /elasticsuite/tracker/hit/image/h.png?page[store_id]=2&page[cms][identifier]=home&page[cms][title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[type][identifier]=cms_index_index&page[type][label]=Page%20d%26%23039%3Baccueil%20CMS&page[locale]=fr_FR&session[uid]=a8d192db-5991-52a6-41a9-76e4bd77e9b0&session[vid]=24d84efb-95be-2629-9e94-c7ebe5f23039&page[site]=www.retif.eu&page[url]=%2F&page[title]=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&page[resolution][x]=1280&page[resolution][y]=984 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	119	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75 Cache-Control: max-age=0, must-revalidate, no-cache, no-store
2024-10-25 08:16:29 UTC	4013	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 66 6f 6e 74 2d 73 72 63 20 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 20 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 2a 20 2a 2e 67 73 74 61 74 69 63 2e 63 6f 6d 20 27 73 65 6c 66 27 20 64 61 74 61 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 66 6f 72 6d 2d 61 63 74 69 6f 6e 20 70 69 6c 6f 74 2d 70 61 79 66 6c 6f 77 6c 69 6e 6b 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 70 61 79 70 61 6c 2e 63 6f 6d 20 77 77 77 2e 73 61 6e Data Ascii: Content-Security-Policy-Report-Only: font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.san
2024-10-25 08:16:29 UTC	484	IN	Data Raw: 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 58 2d 44 65 62 75 67 2d 49 6e 66 6f 3a 20 65 79 4a 79 5a 58 52 79 61 57 56 7a 49 6a 6f 77 66 51 3d 3d 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 33 31 38 38 66 38 61 36 33 66 37 62 32 62 34 33 0d 0a 58 2d 50 6c 61 74 66 6f 72 6d 2d 53 65 72 76 65 72 3a 20 69 2d 30 33 31 38 38 66 38 61 36 33 66 37 62 32 62 34 33 0d 0a 58 2d 58 73 73 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 44 61 74 65 3a 20 46 72 69 2c 20 32 35 20 4f 63 74 20 32 30 32 34 Data Ascii: X-Content-Type-Options: nosniffX-Debug-Info: eyJyZXRyaWVzIjowfQ==X-Frame-Options: SAMEORIGINX-Platform-Server: i-03188f8a63f7b2b43X-Platform-Server: i-03188f8a63f7b2b43X-Xss-Protection: 1; mode=blockAccept-Ranges: bytesDate: Fri, 25 Oct 2024
2024-10-25 08:16:29 UTC	75	IN	Data Raw: eb 0c f0 73 e7 e5 92 e2 62 60 60 e0 f5 f4 70 09 02 d2 8c 20 cc c1 04 24 27 94 07 df 03 52 6c 25 41 7e c1 0c 60 90 b7 8c 7d 22 90 e2 f1 74 71 0c a9 98 93 9c 90 90 00 e4 b1 30 30 7e 13 b7 08 05 c9 7b ba fa b9 ac 73 4a 68 02 00 Data Ascii: sb``p $'Rl%A~`}"tq00~{sJh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49812	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	645	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-imbattables-mobile.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25517 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "89y2jP7gXl0S52NR2+gc9kLlgPMFTSiBpYtqVEKZZ+U" Expires: Fri, 24 Oct 2025 12:13:18 GMT Fastly-Io-Info: ifsz=93878 idim=700x400 ifmt=jpeg ofsz=25517 odim=700x400 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-18016277d4e687400892544f97551de0-4b59dac941ac4067-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960084-PAR, cache-dfw-kdfw8210103-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: cc 05 62 72 d9 0c 2e 70 0b 3f c2 b2 b9 08 e6 91 e8 c3 c2 cf 22 b5 47 2c ac 65 6e 64 63 98 c6 e1 d1 6a 15 54 93 24 f1 4b 1c b4 c9 6e 62 2a 55 95 25 02 89 b9 8b 37 76 f0 57 d3 74 ae d1 42 e8 99 1e 41 36 05 07 8e 78 f7 1f c5 7c 98 1a 59 d9 3b 9b d0 ae 59 31 a9 12 78 14 d1 f6 79 fb 45 a7 c3 19 2c 79 91 de 42 a8 7d e5 7c c3 59 d4 5f 97 3c 92 3d d6 5c 57 29 d9 4f 23 92 b5 5e f2 57 38 62 51 76 75 e1 f8 65 07 7d 4c 0f ea 56 2a 59 0f 2b 63 16 26 be 5f 10 b6 b5 a5 ce 1e c1 77 3e 82 4a 31 6f b1 ae 22 91 c2 c3 1c 47 b0 5b 90 69 59 f3 c7 de 47 8c f2 cf da 3c 0f cd 66 c7 9f 2f 23 26 28 c4 ef 68 2e 02 9a 68 0f 90 0b 33 e5 1a 81 94 39 a0 3d a2 e2 af d9 1d 19 f8 29 b0 73 ca 9d 25 15 49 36 f9 d2 7e db 1c b9 71 e5 85 e5 92 30 b5 de 85 40 6a e8 63 97 4b 14 90 13 60 34 b9 80 Data Ascii: br.p?"G,endcjT$KnbU%7vWtBA6x\|Y;Y1xyE,yB}\|Y_<=\W)O#^W8bQvue}LVY+c&_w>J1o"G[iYG<f/#&(h.h39=)s%I6~q0@jcK`4
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 3a 4e 9e ed 3f 1d ef c4 88 93 18 25 c5 b6 79 5d dc 7c 1c 2c 72 ee e7 1d 8c dc 2c ed e2 e9 72 73 7d 17 d4 f8 7c 47 8f 45 29 42 18 5d a9 55 be 5b 33 e2 b8 b8 59 71 4c 4b e0 7b 69 8e e4 83 57 5e ab 5b 0e db 95 0f 1f 6c 0f c7 85 f7 a9 21 8e 51 4f 8d 85 bb 81 e3 d4 73 f8 2d 77 69 d8 52 72 ec 56 0e 6f 8f 50 a6 b7 5c 8c c3 f6 89 3d 7a f8 6f bd 1a da 5f f9 dc f8 be 34 7b 35 10 da e0 3d c3 ee 5a cd 6a fb 0c ba 0e 9a e1 21 11 6c 79 1e 17 80 2c 1f 55 e6 35 5d 13 13 18 07 32 ac 93 eb c5 29 6d f4 3d b8 7f 68 b8 3d 6d cf 1e 44 dc 62 b9 27 ca cf 12 1a ac 35 66 d9 5d 6a ed dd 3d 9c 47 f0 54 1a b0 f6 3f 4b 83 34 33 e1 86 58 5e 99 2b 56 61 0c 55 b7 d9 66 0c 56 18 b2 d9 dd 1a fb 13 da b6 36 23 6a ce a3 a4 4d 6d a9 6d 5b 3b 51 b1 67 51 d0 d4 da 8d ab 64 b3 d9 49 6a b6 53 58 Data Ascii: :N?%y]\|,r,rs}\|GE)B]U[3YqLK{iW^[l!QOs-wiRrVoP\=zo_4{5=Zj!ly,U5]2)m=h=mDb'5f]j=GT?K43X^+VaUfV6#jMmm[;QgQdIjSX
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 24 0e 9e 7c 27 b6 36 d5 ba c1 af 9d 12 b9 51 35 ee 95 8d 63 37 38 b8 06 b6 ae cf a5 79 a8 e3 24 e9 a6 be 68 dc 32 e2 c9 17 28 4e 32 4b 9b 4d 35 fa 10 85 ed f5 6e cf e5 e4 1c 29 31 34 a7 c3 23 e2 22 68 85 06 07 37 cc 1b f3 f4 5e 29 ec 74 6f 73 1c 29 cd 24 11 ee 15 9e 39 41 ee bf 33 9f 0f c4 e2 e2 23 70 92 be b1 b4 da de ba 10 a0 af 40 de cc eb af 2c db 80 f3 b9 bb 81 b6 d5 7c ed 69 45 a3 6a 73 e6 4b 89 1e 2b cc f1 b4 b9 f1 9a 69 00 50 be 6b d5 34 4d 57 a2 5b f2 d8 2e 27 87 6a 55 9b 1b a5 6f d4 b6 5d d9 c8 2b 11 5e cb 48 d0 67 66 6c 07 50 d2 a7 96 19 63 79 64 6d 70 6b 9c 47 9f d6 6a e5 e6 68 99 ce 7e a1 93 8d 84 f1 8b 0c f2 b4 8d cd 73 a3 0c 77 d5 70 04 9b 03 aa d7 95 3a 4e 9f ca 9d 9c d7 19 c3 bc 8e 1a e3 b2 5e ad 4a 9d ba ae 7c cf 38 56 27 2e c6 56 8f a9 Data Ascii: $\|'6Q5c78y$h2(N2KM5n)14#"h7^)tos)$9A3#p@,\|iEjsK+iPk4MW[.'jUo]+^HgflPcydmpkGjh~swp:N^J\|8V'.V
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 76 db a7 05 f9 a7 b2 e0 0e d1 69 a4 ff 00 5d fc 0a fd 32 74 ed 33 6d 8c 2c 71 d0 ff 00 46 df 5f 92 fb 1e 1f fe 1c ff 00 9b fa 1f cc bf 6e 7f cf f0 bf ec 7f dc ce 84 d1 93 1c c7 83 e1 77 45 9b ba 77 40 d3 f8 2e 66 6e 2e 2b 61 98 8c 68 be ab be c8 0b 64 61 e1 16 ff 00 b3 47 f9 ff 00 aa fa 07 e2 91 bd 04 4f 13 c4 76 9e 1c 3c 97 cc bb 56 c2 3f 47 f9 e4 82 3c 12 f5 f7 98 af a1 43 83 82 67 8b f9 b3 6f 70 e4 17 0f 3f 9a f9 87 69 f0 70 a3 ec 0e 6b db 8c c0 ed 92 38 38 db 88 26 63 c8 2e 26 96 27 f7 25 fc ac f4 f0 7f e7 38 6f f7 61 ff 00 27 e5 d3 d5 49 56 56 32 be 4a 3f a8 4f a9 24 a8 2a ca 82 a9 e7 91 25 24 ca 95 b4 79 e4 cb 6c 8e 63 83 9a 48 23 a1 0b a0 35 6c 90 28 ed 3e f4 b9 45 4a 3c 71 97 34 6f 1f 19 c4 61 b5 8f 24 a3 7c e9 9e a4 2c c1 62 0b 2b 57 91 9d 4f a7 Data Ascii: vi]2t3m,qF_nwEw@.fn.+ahdaGOv<V?G<Cgop?ipk88&c.&'%8oa'IVV2J?O$*%$ylcH#5l(>EJ<q4oa$\|,b+WO
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: b6 e5 7f 7c ff 00 de 56 b9 2f 35 64 9a 14 2c f4 0a 79 4c b9 94 d2 4a 2d 53 6f 9d f3 27 05 c0 cb 86 9c e7 2c 91 93 94 23 1a 50 d3 f7 7f 36 7d a7 53 c3 d5 72 a2 d1 3e 07 27 bb d8 03 a4 6e fd b6 29 bc d0 ea 07 a7 ba 70 4f 04 bd b4 98 44 e0 e3 1e 99 b2 42 3f 6b bc 06 be 74 57 ce 35 be d0 3b 54 8b 01 8d c7 30 9c 66 39 bb 83 f7 6e dc 00 f4 15 d1 79 92 0a ed 2e 26 2a 77 15 6a d3 bb ec 8f 9d 83 c2 32 cb 05 65 9a 84 b4 4e 29 28 a6 d6 a9 5d b6 9e e7 d1 3b 39 a8 66 e5 76 ae 56 cf 93 24 8d 6f 7f b5 ae 71 21 bc d7 84 79 2d fd 16 1c 8c 3d 53 b4 3a 96 44 dd d6 00 c8 9c 3c 38 58 90 87 9e 47 cb f3 e8 be 50 41 58 88 2b 9c 73 d5 5a b6 9b 7c fb 9e cc de 19 ad cf 4c d4 63 3c 71 83 4a 1d 22 ef 6d f9 b3 e8 1d bc c7 cb c8 7e 2e a5 1c dd f6 0b e3 02 32 df ab 19 3e bf da f5 fb 96 Data Ascii: \|V/5d,yLJ-So',#P6}Sr>'n)pODB?ktW5;T0f9ny.&*wj2eN)(];9fvV$oq!y-=S:D<8XGPAX+sZ\|Lc<qJ"m~.2>
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: bd e5 fd 8f 19 17 e8 c7 b1 23 0d 98 d2 e0 4d 2c 8c b2 ec b1 33 a2 9b 67 5f d6 18 e8 12 3c c5 70 bc f6 67 e8 5f b3 93 ed 38 7a e6 a3 8b bf 86 89 99 1e 40 bf 23 c6 d3 47 d5 7d 6d cd 15 1d b1 d4 5d e0 63 bc 2f 7b 87 20 b8 fe d0 f2 37 c8 41 dc f2 69 d6 ea 25 f2 01 b9 ad 1e 61 bd 7f e6 6a e8 b8 8c ab ad fc cf 82 e0 9e f5 f4 d8 fc f3 97 fa 16 ed 0c 7b 8e 0e b5 a5 e4 86 92 08 7f 79 8e e2 7d 39 0f 17 ed 6b ca e5 fe 8e 3b 79 84 37 49 d9 ec 89 59 e4 ec 67 c7 90 0f f8 0d fe 4b f5 26 6c cf c7 c3 13 b7 1d ee 8c 0f 0e d1 bd a0 0f b6 eb bd c0 79 0e b6 b8 f0 64 31 d5 24 52 cc e7 9b 2e 91 8e 21 e1 c7 f6 80 20 df cd 7b 30 cf 24 e3 6d 25 db dc e5 2d 29 d5 9f 91 f2 e1 c9 c1 79 8f 33 1a 7c 67 83 44 4f 13 e2 23 fc 60 72 b1 63 8c 59 62 b7 65 6c 3c de d8 cc ad 3f 7b 4d fc f8 5f Data Ascii: #M,3g_<pg_8z@#G}m]c/{ 7Ai%aj{y}9k;y7IYgK&lyd1$R.! {0$m%-)y3\|gDO#`rcYbel<?{M_
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: bc 63 70 66 d4 bf 47 ee c7 d3 f1 de e7 0c e9 0b 61 e8 f6 b4 4a 4d 1f 70 0f 2b b4 f8 75 c9 3d d4 5b e5 cd a3 e6 e0 f1 49 37 e6 4e 29 47 26 58 2d e7 b4 23 2b 5c ba 55 1f 29 93 07 36 03 10 97 16 66 77 9f d1 ee 61 6e ff 00 ec d8 e7 aa cd 36 9f 9f 8c c0 f9 f0 e7 89 a4 d0 73 e3 73 41 fc 42 fb 86 b2 f9 f1 35 6e c8 96 e1 3f 25 f1 c3 92 0c 4c a2 e1 4c 60 24 5f 16 17 3b b4 90 e5 64 e8 59 99 6d ca cf 6c 63 25 85 d8 79 71 b5 bb 8e f1 4d 65 00 6b 9e 3a da cc b8 64 94 fd 4e e3 ed ed 67 5c 5e 2d 39 be 1a f1 c1 2c 8e af 57 5d 4e 34 ab e4 7c 99 9a 76 a0 61 ef 86 14 e6 2a be f0 46 ed b5 eb 75 54 bd 04 da 56 96 de cf e2 65 c2 fc c7 66 c8 f6 b5 cc 31 bb ba e4 91 e1 76 c0 09 fb d7 d6 5c 73 75 37 bd 8c 7e a5 a6 4a cc 72 0b 1d 1b 0e 3f a7 06 88 27 9f 22 38 5e 76 41 5d 8a d0 05 Data Ascii: cpfGaJMp+u=[I7N)G&X-#+\U)6fwan6ssAB5n?%LL`$_;dYmlc%yqMek:dNg\^-9,W]N4\|va*FuTVef1v\su7~Jr?'"8^vA]
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 63 fb 2c cd c6 b5 d5 64 07 8e 38 2b 72 3c 32 6b 85 34 b3 8c b8 88 ae 6c e2 b7 10 15 9d 98 7e cb d0 47 a7 b8 fd 95 d1 8b 4b 71 f2 55 63 93 e8 79 e7 c7 63 8f f1 1a f0 37 f5 51 df ec 8e 53 2d ab ea ae 26 fe ad 9c fd 90 ad cd 3f 9a dd 2a 3f 1c de ec d7 f3 eb c2 93 5c 7b 2c c5 a2 d6 32 d5 28 a9 98 1d d0 f0 bc 6e b6 09 9f 8f ea db ca f6 4f e8 42 f1 fa c0 71 99 f4 d2 7c 2d 01 58 2d cd 59 eb 3b 05 84 66 d2 f2 dd d6 b3 1e 3f f6 35 7b d6 e9 9f f0 af 37 fa 35 69 1a 2e 65 d5 fc 7b fa 79 7e ad 8b e8 c0 af 5c 78 78 49 29 3e a6 25 c6 65 8f a5 3d 91 f2 6f d2 06 b7 3f 67 74 b6 37 0e 20 ec ec 93 b6 02 e6 db 1a 07 d6 71 f2 24 03 c0 5f 9b e2 99 8c cc 39 1a 9c 33 64 3d ef 2e 9f bc 79 6b a4 3e ef e7 8f e1 c2 fd 83 da ee ca 61 f6 9b 4d 6e 2c ef 7c 6f 8d fb e1 95 86 9c c7 8f 3f Data Ascii: c,d8+r<2k4l~GKqUcyc7QS-&?*?\{,2(nOBq\|-X-Y;f?5{75i.e{y~\xxI)>%e=o?gt7 q$_93d=.yk>aMn,\|o?
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 6f 6b 3c ff 00 0b 85 e7 79 9c 6e 6e 29 6f bf 2e c7 63 4d d6 75 6d 34 b8 e0 e7 cf 8f bb eb 08 de 5a 1d f3 03 82 91 cf ce 7e 50 cb 7e 5c ee c8 0e 0e 13 17 b8 c9 63 cf 75 dd ae 73 56 50 56 6d d5 5b 3a f9 78 f5 39 68 8d b5 4d d6 ec f4 12 76 93 b4 13 3d cf 7e af 9a 5c e6 6c 77 eb 9e 2d be 86 8f 45 ac fd 47 50 9b 16 2c 59 73 27 7c 11 90 59 0b a4 73 98 d2 38 f0 b4 9a 1d 57 35 a5 65 69 47 29 3e 6d 88 e2 c5 1a ac 71 55 ca 91 98 2e 86 56 a1 9f 9c e6 3b 2f 32 79 cb 45 34 cb 23 9e 40 f4 1b 89 5c d0 b2 82 a5 be e6 9c 53 69 b4 ad 72 7d 8e e6 3e bd ad 63 e3 fc 3c 3a 9e 53 21 aa 0c 6c ae 00 0f 41 cf 09 61 ea fa a6 1b 25 66 36 74 f1 36 4e 5e 18 f2 d0 e2 7c cd 79 fb ae 48 2b 20 2a ea 96 de a7 b1 8f 2b 17 ab f7 71 dd db d9 6f f3 3a ff 00 4b ea a5 d0 38 ea 19 45 d0 82 22 3d Data Ascii: ok<ynn)o.cMum4Z~P~\cusVPVm[:x9hMv=~\lw-EGP,Ys'\|Ys8W5eiG)>mqU.V;/2yE4#@\Sir}>c<:S!lAa%f6t6N^\|yH+ *+qo:K8E"=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49802	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	945	OUT	GET /media/catalog/product/5/0/502350_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	813	IN	HTTP/1.1 200 OK Connection: close Content-Length: 908 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "o5zb5xGAlr6bv1oO1bh7BH4lP0bmAa4dIX2ax2TbFOI" Expires: Fri, 24 Oct 2025 12:16:09 GMT Fastly-Io-Info: ifsz=69585 idim=1000x1000 ifmt=jpeg ofsz=908 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-1801629f928166d4235249e4a9bbc914-5655a892e6e22aaa-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72020 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960027-PAR, cache-dfw-kdal2120033-DFW X-Cache: HIT, HIT X-Cache-Hits: 15, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	908	IN	Data Raw: 52 49 46 46 84 03 00 00 57 45 42 50 56 50 38 20 78 03 00 00 50 2d 00 9d 01 2a c8 00 c8 00 3e 6d 36 96 48 a4 2c 2a 26 23 d2 69 f1 80 0d 89 69 6e 74 5f c4 22 9c fb fa 9e f7 e7 39 2f 87 86 80 0e eb 4c fb 28 76 ff 2a 24 0d 30 0b 20 b9 4f 73 45 56 d6 82 55 62 1d 0c e3 eb d8 e3 9d d5 2c fd 39 7d 9e 03 7f 09 00 b7 95 6e 3a 90 ce 4e e8 51 05 db 1c 3a 4f 51 ab ca fd d3 b7 54 b2 4d 3a ca 88 99 21 25 36 6b 40 d7 99 03 71 f9 26 d2 f3 14 18 72 ab 87 00 6d 6a 2e d9 6e a2 34 08 6e 80 f1 49 52 67 86 f4 50 e6 25 ce 27 71 71 cd ec 18 5b a8 ef 1e f7 46 ee 8f 17 a2 e4 74 61 2d 49 15 e8 33 3a 44 92 a9 74 70 02 e6 f6 34 97 2c b0 6c 25 9a 26 7c 23 b5 91 ac 05 0a 63 00 88 f6 c5 22 1a 98 21 d8 1f af 7e a4 ee b8 0f e8 d8 0e 67 87 cf e0 00 63 f5 ef f6 08 9d 9b cc 1d 48 56 05 d5 c4 Data Ascii: RIFFWEBPVP8 xP->m6H,&#iint_"9/L(v*$0 OsEVUb,9}n:NQ:OQTM:!%6k@q&rmj.n4nIRgP%'qq[Fta-I3:Dtp4,l%&\|#c"!~gcHV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49811	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	618	OUT	GET /media//wysiwyg/footer/CharteQ.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11393 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "VXwhYr2dJZ3l9pw0Gb0gyZgVg7Fy7+4WJPaiRXq2O90" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=12366 idim=266x260 ifmt=jpeg ofsz=11393 odim=266x260 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162777797ca4bca65954f03d88117-37da3543f8af60e4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960025-PAR, cache-dfw-kdfw8210112-DFW X-Cache: HIT, MISS X-Cache-Hits: 2, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 0c 00 18 30 06 03 06 29 04 06 30 6c 06 30 64 a0 32 40 c9 03 24 28 e4 89 a9 83 63 04 b5 9a 72 6d 30 06 0c 01 8c 00 18 c0 63 80 d8 0d df d2 f4 0f d1 2d b9 ba 3c a3 3f a7 61 ac f9 ac 7d 3f 29 e5 af d3 aa ed 5e 1d db d5 74 73 a8 e4 85 ab a9 af b3 ad 2d 66 a5 60 c6 0c 01 80 31 83 4c 18 e0 31 85 94 7d 5b 97 a7 4b 57 9b ab c3 6d ba 6d 8d 6e ce 41 92 d3 31 92 32 dd d0 4b 3b fa 39 c2 f4 1c 5d 94 1a 3e a7 e6 5d 18 57 6b 6d 6b 74 f3 ea 4a 32 b1 b1 83 00 63 06 98 31 c0 90 03 19 e9 55 dd 7f 95 79 9e 8e 2e f2 86 5a e5 ce e3 f4 0c b3 1e 76 fd 03 9e bd 28 a7 d4 db d6 7c fe 5d 2d bc a3 c5 7a 27 9e 52 de 85 cb df d1 e5 af 23 ad b7 ab e9 79 fa 72 8c ac 72 52 00 60 30 18 e0 36 03 18 32 50 f6 5f 30 ec 2b bc df 46 df 5f 57 98 9a fa 2d 16 a2 36 6d b8 6d fb d2 f7 3d 05 95 2f 63 Data Ascii: 0)0l0d2@$(crm0c-<?a}?)^ts-f`1L1}[KWmmnA12K;9]>]WkmktJ2c1Uy.Zv(\|]-z'R#yrrR`062P_0+F_W-6mm=/c
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 9d 68 d9 0f 27 97 c2 5c 74 85 99 93 b3 ae 4b 22 ce c8 4c ac 08 2e 92 06 46 ea 51 1d ea 3a f4 f7 1f 62 c8 c5 b4 dc 26 9d aa d1 36 cd 95 e9 c7 77 ae ae 6b a3 92 36 45 cd c5 f0 96 5d 4b 6f f8 ae 53 b9 36 25 bb 1e db ec bc 92 11 b3 64 c6 b1 bf ce 60 6a 23 5e a1 ed d6 b8 c7 3b 9c 79 85 f0 28 79 7f 1d 7a 52 6d 22 35 d6 4b 0a 4c 8b e1 6b 1d d6 9d a5 7f ae a6 3e 96 27 9d 84 6c 88 05 fb 1e e0 21 b2 a6 da b7 36 32 ad c9 44 4e cf ea d7 c9 b8 36 31 c8 ef 20 c6 6f cc 41 99 1c ce 17 c2 43 89 2c 5b 17 61 50 27 44 8a 79 97 db 9c 2f 86 87 b1 24 8b a9 76 3f 5c a3 c6 51 b0 19 cb 97 da 9c 2f 8a ab d6 17 81 b4 09 cf 15 4d 99 db a2 59 e1 29 67 66 88 e7 72 88 65 b7 a9 b3 e8 9c 2f 85 cf 39 e7 3c e7 9c f3 9e 73 ce 79 cf 39 e7 3c e7 9d 59 d5 9d 59 33 85 3f 33 9e 73 ce 79 cf 39 e7 Data Ascii: h'\tK"L.FQ:b&6wk6E]KoS6%d`j#^;y(yzRm"5KLk>'l!62DN61 oAC,[aP'Dy/$v?\Q/MY)gfre/9<sy9<YY3?3sy9
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: c6 e7 8a 75 d4 a5 7f 34 52 e4 00 a0 1d a8 46 e6 24 2a 37 53 41 66 79 03 b2 e3 02 92 d7 50 2c f9 c9 ae 94 bd 2d 3a 78 6a d5 3b 2b 29 8f b5 22 37 95 2b 8d f7 a0 8d e5 b4 e3 7c 52 1b 85 50 3a 7c 50 f9 59 55 c1 04 64 50 00 0c 0f f4 76 91 17 93 8a 37 89 f6 82 6b cc ca 78 88 d7 99 7e f1 1a 17 69 dc 11 4a ea db 83 9f 6e e2 7d 1e 95 fa a9 61 cf ae 66 a4 58 f4 8d 20 7c 5a 34 6e 54 53 c3 a0 93 1b 71 da ad e6 ea 0c 1e 7d a8 47 52 62 c7 b5 48 55 e7 50 4f a4 0a f3 38 e1 7d 39 e6 85 c0 c3 92 3e 9a 69 dc 00 74 76 fc d1 b8 d9 74 8c 93 da ad f7 69 49 15 16 d7 27 1f d7 da 8b d1 33 2b 77 da 96 24 69 9d 71 b0 14 b0 b0 3a 4c 79 df 9c d3 c0 c6 5f fa 9e 69 e2 7d 4f e8 cf e2 84 72 46 55 82 e7 d3 8c 54 7d 60 1b 09 b9 35 0c 5a 32 4e e4 d0 f6 67 83 5e e3 ea a8 a5 e9 b1 d6 30 7f 34 Data Ascii: u4RF$*7SAfyP,-:xj;+)"7+\|RP:\|PYUdPv7kx~iJn}afX \|Z4nTSq}GRbHUPO8}9>itvtiI'3+w$iq:Ly_i}OrFUT}`5Z2Ng^04
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 0c f7 59 8d bb 5e 84 58 48 91 f2 25 8d 95 c9 d5 e2 ac 9d c8 b4 e2 3b 1d ad 2f bd 0a 2d f3 26 33 59 4c 65 30 27 46 c0 8b 9c 64 9e 6c c6 57 1f bb 23 67 11 72 9d 6d ec 6d 1a 82 ab e3 40 b9 8e 10 0e 21 5c d2 61 a1 07 58 b4 f2 9d 6a 9d 92 11 6e 90 0b 78 29 38 35 36 e9 6d 3f 74 1a 68 90 0e 94 d6 32 eb 41 06 86 c9 4e a9 11 9a 72 77 b9 01 a9 bd 8d 8e d6 13 8c 61 52 7f 29 c2 c4 46 d4 69 d8 b8 1c 65 5a 0c b5 ad 12 28 5c 36 aa ac d7 7a aa ed 25 c6 37 a3 58 89 71 2a cd 80 04 2f f8 d1 71 c0 e0 bc 83 d5 43 78 a1 b3 0d a9 ce 38 9e c7 63 4b 3d 90 ac 3b 9c aa 9e e5 57 c6 50 6b db 6a 34 a2 c6 d3 80 53 5f a9 37 36 00 56 48 90 ae a7 72 e5 40 b2 56 7b 38 28 34 c9 0a 29 d3 0d 52 e3 27 b2 07 85 22 f0 71 09 d0 2d 51 3c 42 27 59 fe 81 2d 3d e1 46 0e d4 54 b3 34 fa 2e 84 f7 2b ff Data Ascii: Y^XH%;/-&3YLe0'FdlW#grmm@!\aXjnx)856m?th2ANrwaR)FieZ(\6z%7Xq*/qCx8cK=;WPkj4S_76VHr@V{8(4)R'"q-Q<B'Y-=FT4.+
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 82 b4 16 c1 b2 6f 34 48 b4 8e 9f 9b fa b0 b6 a5 3b cc b3 7a 4c 51 3f 47 b4 1a f0 7b 1f 2c 12 be 57 c4 ed 7f 29 ff 00 1a 7d 4c 8e 23 45 3e e1 5e ff 00 f0 98 d2 3b 60 4b 55 f3 4c 3f 58 ae f8 33 72 21 a3 b8 66 7f c8 da ea d3 21 d5 96 c1 c8 61 f7 8b da 5b ad fe 2c da 7c d5 30 94 1e 78 3e a4 a5 b7 bc 74 65 ed 39 5f b9 e5 f4 e8 fe a1 96 0e 7b 04 16 60 fb 58 c2 19 0b 93 ff 00 33 13 ea 38 42 46 51 75 96 27 80 02 92 67 50 73 59 74 2c c7 66 29 0e ad 98 7a d2 53 fa 61 16 7d 4d 23 96 33 c7 e8 46 ea 77 4d 65 ed 43 06 81 35 13 27 fc 8a 54 94 fe 1a e2 b7 e1 52 ce df ec 47 15 77 8e e5 78 8f 28 35 34 97 ae 5f a6 11 f2 10 f2 22 f6 6a 82 b9 60 41 4a 62 90 e5 ac c3 fc 2c 05 e7 19 8b 35 59 de dc 88 1f 94 8b d1 d1 18 4c 87 95 1c 92 a0 b5 fc f4 8f 79 c1 46 a8 99 45 f3 37 d4 01 Data Ascii: o4H;zLQ?G{,W)}L#E>^;`KUL?X3r!f!a[,\|0x>te9_{`X38BFQu'gPsYt,f)zSa}M#3FwMeC5'TRGwx(54_"j`AJb,5YLyFE7
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 8a 8a 1a c7 98 a9 58 ea ba 5c dc 20 53 e2 d9 4a 99 06 b4 34 d9 21 b5 15 cc 6c 3b 25 47 08 8c 43 68 f1 fb 4b 8b 00 fb 48 de 52 41 00 42 95 d9 d4 10 8d 52 e7 c3 0a 42 6e 5b c1 2f b3 99 f7 86 af 90 5b e1 96 0d 8a 7e 62 c7 fe 36 83 2b 70 53 b6 86 9f 3f 47 fa 96 18 08 8c fd 33 26 5e f8 da b1 dc 4e ad b5 47 25 e3 be 7c 4c 51 36 e7 15 a9 8a 19 cd 42 68 0b b1 7b b0 23 00 79 b7 77 79 5d 4a 7d aa 2e 88 67 c2 59 ce 0c 9d 09 50 00 30 ee 5d 06 b7 78 b6 07 27 7a 5b c1 6a a3 a0 c6 cf c9 26 f1 10 dd cb c1 6d 13 f3 e2 12 c0 7f 30 7b d9 7d fb f1 38 38 07 eb 04 1c ae d9 49 4e 36 f1 7d c3 88 6a 83 62 20 ce 76 39 4e 26 74 5e 0e e7 c5 c4 94 74 58 11 c2 31 c9 8f 51 c5 b2 a7 66 a3 b6 33 50 cb 43 11 57 39 8c 9b 46 b0 85 96 77 50 08 78 e1 e6 7c bd 62 0e 4a 0a 9b 3d 26 59 0c 8c 34 Data Ascii: X\ SJ4!l;%GChKHRABRBn[/[~b6+pS?G3&^NG%\|LQ6Bh{#ywy]J}.gYP0]x'z[j&m0{}88IN6}jb v9N&t^tX1Qf3PCW9FwPx\|bJ=&Y4
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 36 ba b8 a5 65 b5 73 02 dd d5 0a 81 d5 b6 11 aa d3 6a 9f 26 54 1e a2 ed 4b 93 a2 38 47 b3 1e ec 36 98 b1 ea 3d cd 4d 22 87 a8 d1 d0 d8 be ba a1 10 00 55 70 01 ba b1 b2 23 21 d8 46 17 01 40 1a 5a 17 25 a0 a7 50 88 88 16 a0 3d 92 e9 86 64 93 e1 02 a1 5c ac a7 29 e3 0a 80 16 a0 5c 43 cc 76 f2 17 b2 60 4b 87 c2 e6 8b ab 41 58 46 b4 0b a2 55 3a 5c b0 26 42 2b 39 6a 2b 28 30 11 8e 91 34 b9 17 29 0a b8 43 04 f0 27 43 6c 77 59 bb a8 79 57 40 80 66 95 b6 58 86 ae fe e1 41 2a 08 25 6a 4a 8f 78 dc 1d ed 81 04 02 22 20 89 91 1d 91 f4 b3 61 02 cd c1 c9 37 52 8d 59 d0 7d 85 0a 25 c3 90 9b 01 48 38 8e 2a 69 65 72 5c 3e 6f 04 a0 39 f8 26 c4 5f df 71 87 e4 fd a5 da 3e 10 3b bb 28 10 30 22 97 50 09 0e ea 01 de 92 92 12 02 1a 3e 73 c0 1b 42 d1 89 51 75 d1 4b 84 cc 56 8a 2d Data Ascii: 6esj&TK8G6=M"Up#!F@Z%P=d\)\Cv`KAXFU:\&B+9j+(04)C'ClwYyW@fXA%jJx" a7RY}%H8ier\>o9&_q>;(0"P>sBQuKV-
2024-10-25 08:16:29 UTC	361	IN	Data Raw: ca fd c6 47 64 0f 02 08 9c c0 29 2a 60 b1 bb 8b f0 78 10 f0 6c 63 a3 cd 77 c0 94 8b 4f 30 6c ee a9 ce 62 ee 89 7d d4 20 d2 38 61 dc 85 53 4d 86 29 04 23 82 13 06 37 ba 8c 3d 48 e4 c0 05 04 5e 70 54 52 b1 2c a8 d3 67 58 10 ec a3 87 80 02 26 54 2a d6 c7 01 b0 43 86 0d e5 30 84 08 40 81 a5 40 d2 a0 40 81 02 04 4a ee d4 f8 1e ad 4c d8 71 19 17 08 72 4b 29 ae 16 fc bc 91 de dd 1e 6d 57 a4 08 10 20 40 82 04 08 10 25 43 86 1a b9 50 d0 1a 04 08 4a 84 20 40 81 02 04 08 13 1e c3 42 dd 26 c3 dc 8c 50 85 28 16 79 38 84 d3 73 68 2d 7e 15 ed 1f 55 0f 6b f0 04 2d 69 34 88 88 f0 8e 48 10 20 40 82 3e 2c 81 02 04 a8 70 c3 87 42 65 08 42 10 83 08 42 a1 08 41 84 21 08 0d 2b 55 77 c1 c3 0a 3a ac 87 f4 31 68 87 7a 67 e3 50 ea 61 e8 f3 ee 8a d9 cf c1 ef c0 45 53 15 8c 4f da 35 Data Ascii: Gd)`xlcwO0lb} 8aSM)#7=H^pTR,gX&TC0@@@JLqrK)mW @%CPJ @B&P(y8sh-~Uk-i4H @>,pBeBBA!+Uw:1hzgPaESO5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49804	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	945	OUT	GET /media/catalog/product/5/0/501013_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1210 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "gEIEG1ND0PArFsOklNizhEpD4VSRuA+DHI/xL8x9K/w" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=81475 idim=1000x1000 ifmt=jpeg ofsz=1210 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162780d150f3e1a5eb132737cf76f-de7d8c9336dacda9-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72190 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960022-PAR, cache-dfw-kdal2120114-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1210	IN	Data Raw: 52 49 46 46 b2 04 00 00 57 45 42 50 56 50 38 20 a6 04 00 00 b0 25 00 9d 01 2a c8 00 c8 00 3e 6d 36 97 48 a4 23 2c a1 24 d3 38 71 90 0d 89 69 6e be 6b b0 e6 18 6e 49 b7 d7 e9 57 ff 46 22 ae e9 7f ac 67 47 2a d8 5c 04 43 35 42 1a 86 6d 0c da 19 b4 2d d4 fb f1 44 d4 d3 4d cd c6 2c be 8c 69 1b 30 cf 4e e1 ed 40 65 c4 9b eb 32 b4 7a fa d5 33 ec 2b ca 9a 11 8d 7f 7d ad 9a 82 db 71 e8 fb 82 f5 1b 5e a1 ba e5 ba ee 7e 6d 00 bd c1 4d 4d fe 8c c1 fa 2d f4 8c d7 ea 88 db 3c 69 b7 33 bf e8 17 98 03 74 07 4c d3 11 4b aa 36 81 c3 1f 70 1d b4 cd 7e a8 85 cd 2b 94 79 3d 96 84 fc 68 56 6d 45 7e f8 91 44 40 3c f4 de 99 ec 09 e3 b8 69 bc c9 42 f6 fd 45 2f 1f 26 25 41 26 fd 56 41 41 82 e7 9b 4b f5 42 df 02 71 2e 28 79 95 8b b1 0e 5f 0b d5 d8 f7 b4 33 5e 22 a8 16 b6 45 a7 d2 Data Ascii: RIFFWEBPVP8 %>m6H#,$8qinknIWF"gG\C5Bm-DM,i0N@e2z3+}q^~mMM-<i3tLK6p~+y=hVmE~D@<iBE/&%A&VAAKBq.(y_3^"E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49805	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	944	OUT	GET /media/catalog/product/4/9/49963_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1732 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "EYY85ZOGtyNJa131S4zycVlgkiN5CkQ0W63HRuAgcZk" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=68234 idim=1000x1000 ifmt=jpeg ofsz=1732 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162780d353c5aeceb01066ff94b38-07120dbb0373a8dd-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960021-PAR, cache-dfw-kdal2120110-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 52 49 46 46 bc 06 00 00 57 45 42 50 56 50 38 20 b0 06 00 00 30 2b 00 9d 01 2a c8 00 c8 00 3e 6d 32 96 48 24 22 a2 21 28 f0 b9 90 80 0d 89 69 6e e1 73 f0 ec 61 96 6f 35 c9 26 fa e1 0d 9e 5e 0c f1 ed e2 f7 8d 6a f5 ab ec 86 2c a3 0f 9f fa bb 20 a5 26 73 f3 67 f7 6d af a3 8d 53 c1 24 2d e4 63 f0 9e 1a 90 eb 0b 1e 88 f1 b3 cc fc 67 0e 18 8b 54 81 64 75 d6 23 3d 98 b5 8d 80 75 27 2c 54 08 af 2d 7e 6c c9 4c 44 ef fa db c0 9b ef 49 a3 6d 05 f4 78 00 25 59 69 9e 6e fc ad 77 ee 9f 2b 31 86 26 fd 8f 85 40 70 14 23 58 89 0a 15 91 d9 27 34 a1 40 73 43 c6 ad 7b 14 2f df 2f 64 f0 8c 37 52 a8 20 90 ef 9c 33 7a a0 1b 70 94 72 ac 01 fb d7 f5 74 d3 c8 02 72 c8 30 99 5e c2 b6 d8 f2 7a de 2d 76 4e c0 4a c6 51 dc 4f 4b 8a 53 91 0a 10 c8 b6 29 72 08 b7 6a 5c 65 11 4f 63 5f 88 Data Ascii: RIFFWEBPVP8 0+*>m2H$"!(insao5&^j, &sgmS$-cgTdu#=u',T-~lLDImx%Yinw+1&@p#X'4@sC{//d7R 3zprtr0^z-vNJQOKS)rj\eOc_
2024-10-25 08:16:29 UTC	353	IN	Data Raw: 6d 6d 83 26 bc 90 a7 cb 23 08 91 3b db ee 8d 38 99 fd 54 78 91 a1 06 05 cd 41 54 b5 b6 57 c1 1c 2b cf 56 5d 67 8c 05 44 76 20 3f 09 e6 77 3c 04 a5 d5 9f 17 d8 ff 26 cc 01 0b eb a3 cb e2 cb 4d 82 a4 4e 50 47 40 25 d7 64 8c 89 15 67 7f 4e 50 42 fd aa cd 68 ce 4b d3 bd 07 00 4c 9f 16 27 d0 38 32 34 d7 a2 86 91 22 ce ec 5e 14 a5 20 3e e4 eb c5 fe 2e d9 a5 c5 8d 8d 7c 6d 87 06 4b fc 41 99 5b 0b 84 64 96 7c 00 f8 8f a6 f4 97 cd 03 ad ee cf 44 19 8a 9d 3f 21 c5 18 e9 17 ef 9b e6 e5 d7 1f c3 1e db c6 d8 42 c8 7e f6 41 3c da 6a 9c 57 6e 92 d1 86 e9 d2 ae 18 ac 55 2e e2 59 cf 1c c9 4f c7 c2 e8 cc 21 f2 49 d6 c1 2f b1 23 ea 09 62 06 72 ac 62 6d 15 ee 75 e8 b8 8f 33 22 b5 c2 d8 5f 36 15 15 ec b2 cf 45 5c 60 97 78 6d d3 e7 9b 58 f9 57 3f fd a3 16 f0 f0 60 ea 11 a2 37 Data Ascii: mm&#;8TxATW+V]gDv ?w<&MNPG@%dgNPBhKL'824"^ >.\|mKA[d\|D?!B~A<jWnU.YO!I/#brbmu3"_6E\`xmXW?`7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49807	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	944	OUT	GET /media/catalog/product/4/9/49966_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1480 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "YGuJ/5cOZVvPl7/SkAg/y8eFavev4MsUdyP0w7lFkL0" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=41560 idim=1000x1000 ifmt=jpeg ofsz=1480 odim=200x200 ofmt=webp Fastly-Io-Served-By: img07-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627812a0c794397f21238c44e914-956cf4f82f8e35c6-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72189 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-kdal2120100-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 52 49 46 46 c0 05 00 00 57 45 42 50 56 50 38 20 b4 05 00 00 90 25 00 9d 01 2a c8 00 c8 00 3e 6d 36 96 49 24 23 25 21 20 ba aa 58 a0 0d 89 69 6e e1 6e 71 1b f3 cf 63 ef de bf 9b 74 88 78 11 41 1f 89 fd fb bc e7 c2 df 7a 9f 21 f9 9b ff 3f e0 63 fc 07 f3 3e eb ac 47 cc 0b d4 4f 99 ff cd f5 60 98 ef 76 bd 58 fe b3 72 35 c6 87 9e fe 86 be 85 ff c3 fe 07 dc 83 fb 7f fd 6e c4 a2 fa cf 8b 48 2c 8b 53 e1 8b 9b 33 ca 01 90 be d2 bd 29 65 6f e9 aa 98 db 72 fe 4d b9 25 ea 79 5c 56 e1 a7 42 95 26 ad ac 4e cb fb 09 fd 8e c9 43 45 8a 57 8d 94 42 33 48 56 d4 ea 47 58 1c 64 5a 9d 0b b4 68 24 f5 ee 21 02 11 6a 85 3a 24 a7 9f ca ac c2 7e 2d 1f 72 8c d7 ea 7f 58 a3 43 d6 65 a3 f6 f6 b1 6a a4 bb fd 2f f1 16 c5 b2 4a 0c 3d 7e a5 8c 4e cd 3f 7c b8 19 28 9d 50 cd 7d c4 79 9c 14 Data Ascii: RIFFWEBPVP8 %*>m6I$#%! XinnqctxAz!?c>GO`vXr5nH,S3)eorM%y\VB&NCEWB3HVGXdZh$!j:$~-rXCej/J=~N?\|(P}y
2024-10-25 08:16:29 UTC	101	IN	Data Raw: e9 6c 10 a9 d1 50 a4 61 72 84 87 b4 ce c1 5a 70 1d b8 2c 6e cd bb 00 a6 66 de a0 45 e0 c3 0a cc d9 9e 12 50 f9 c5 b4 ae 5f bf 3a de 4f 5f 48 e3 d1 ba 7b 2f 27 ac fe ff 35 27 ca 8f ff a3 d8 f8 9e b9 33 8b 5d 05 e0 bf 15 1d e0 d5 e9 64 fd b8 6a 7c b1 98 18 66 98 f0 4b 22 b9 d1 d4 d4 41 cf 80 00 00 00 00 Data Ascii: lParZp,nfEP_:O_H{/'5'3]dj\|fK"A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49808	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	618	OUT	GET /media/wysiwyg/footer/In-White.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	847	IN	HTTP/1.1 200 OK Connection: close Content-Length: 848 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "+H29OvGVsUyhjHjtqA85yJ+5N42lZ79OkxnF/oMMQ6g" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=848 idim=116x96 ifmt=png ofsz=848 odim=116x96 ofmt=png Fastly-Io-Served-By: vpop-etou8240193 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801627777b737f30c86c3c2aec5f755-3083b16396b066ec-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960061-PAR, cache-dfw-kdal2120115-DFW X-Cache: HIT, MISS X-Cache-Hits: 7, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	848	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 74 00 00 00 60 08 04 00 00 00 66 d4 9e 21 00 00 03 17 49 44 41 54 78 da ed dc 3f 68 13 61 18 c7 f1 a7 fe 29 8d 10 c4 2a 11 c1 a1 82 62 95 40 31 43 23 14 8d 14 94 44 68 37 a1 9b 92 c1 ba 29 a8 93 53 44 b2 b8 28 2d a4 e8 10 74 e8 d2 2e 01 07 a5 9d 2d 88 98 0e b5 b1 43 b1 12 14 11 51 e8 69 6b 5b bc af 43 63 b4 4d 7b 97 6b aa cd fb de fb ae 77 3f ee 3e dc dd 7b cf fb de f1 8a 88 88 08 41 52 e4 b1 50 a1 59 e4 49 11 14 ef 8d 4e 66 50 ad cd d0 e9 9d 69 a3 62 b3 3d 51 09 2a 78 35 ff 5c d5 ea 6f 60 52 a8 dc 52 d5 43 c7 95 86 e6 ab 87 5a 4a 43 ad ea a1 8a 37 03 35 50 03 f5 1b 74 96 59 bd a1 36 c3 74 2f 57 20 04 e9 66 a8 be 0a c6 cd 82 be 23 5a 91 88 d6 53 d1 b8 39 d0 69 42 6b 66 42 4c eb 04 5d 22 bc 6e 2a cc Data Ascii: PNGIHDRt`f!IDATx?ha)b@1C#Dh7)SD(-t.-CQik[CcM{kw?>{ARPYINfPib=Qx5\o`RRCZJC75PtY6t/W f#ZS9iBkfBL]"n*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49810	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	662	OUT	GET /media//wysiwyg/footer/Trophe_e-Prix-Meilleure-Satisfaction-Client-small-1.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:29 UTC	857	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45037 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "57WR2PIqS5jqqSfc6yAAUx5AC5RE0snvGEiybBGwTms" Expires: Fri, 24 Oct 2025 12:13:17 GMT Fastly-Io-Info: ifsz=45895 idim=300x361 ifmt=png ofsz=45037 odim=300x361 ofmt=png Fastly-Io-Served-By: img05-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-180162777056ba3268be89c257e08306-267d1560a874029e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960086-PAR, cache-dfw-kdal2120027-DFW X-Cache: HIT, MISS X-Cache-Hits: 8, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 69 08 06 00 00 00 26 e8 15 aa 00 00 af b4 49 44 41 54 78 da ec 5d 07 60 5b d5 d5 be da 96 65 79 ef 9d 38 c3 49 9c 3d 48 08 23 10 a0 6c 5a 4a 0b 94 51 0a 94 32 4b 5b 66 a1 2d a3 94 d2 c5 28 b4 ac 96 b6 b4 05 ca 4f cb de 1b 32 c8 de 4e 9c 38 de 7b 5b d6 9e ff fd ae 74 95 27 45 92 df 93 97 9c bc 43 55 3b b2 f4 de 7d 77 7c f7 3b e7 9e a1 f0 f9 7c 44 16 59 20 74 2e e8 e9 6c 50 38 9c ee 59 4e b7 bb 40 a1 50 10 bb dd b9 c4 ee f2 54 d2 5f 99 d8 1c ae a5 0e 97 6b aa 52 a1 f4 bf a1 08 f9 41 14 fc 83 fe eb 1d f6 d3 ff ab 8f fd 4e 3f 6b 49 4d d6 bf 43 df f0 d2 77 88 4a a9 30 a5 19 f4 6f 7a e9 07 b4 6a 55 7b 92 56 bb 17 9f 55 2a 95 56 79 74 64 61 f3 4b 06 ac a3 4e 54 6e 8f 37 c3 e3 f1 66 d9 9c ae 59 Data Ascii: PNGIHDR,i&IDATx]`[ey8I=H#lZJQ2K[f-(O2N8{[t'ECU;}w\|;\|DY t.lP8YN@PT_kRAN?kIMCwJ0ozjU{VU*VytdaKNTn7fY
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: f6 e4 b7 75 0f 5e df dd 3f 74 91 d9 ee 98 8e 70 18 85 4a 11 00 29 c5 b8 02 16 73 95 f4 fa 17 95 97 7e 16 c6 7c 35 63 45 6a a2 53 ab 19 00 e9 34 f4 27 7d a9 28 7b 0a 32 a8 44 b3 f9 51 10 73 50 c0 02 70 99 ac 36 e2 72 7a c8 90 cd 4e ec 0e 27 03 0b b7 c7 ed 67 76 70 a0 e5 60 3d 8e 80 15 c0 49 da 4e 0f 7b 25 eb 93 ba a7 14 e5 3f 35 b5 34 ff cf 32 70 c9 80 95 98 40 e5 72 17 b4 f5 98 ae 6d ed 19 b8 96 2e ae 5c 25 05 06 65 00 8c 0e 81 d4 d8 02 96 7f 31 79 03 9f a5 00 45 01 28 99 82 52 12 65 49 86 24 2d 49 a6 cc 49 43 81 4a 93 a0 c0 24 55 5c 94 99 39 5c 2e ca c4 1c c4 6c b1 13 ab c3 41 ac f4 77 b0 35 af 87 02 89 c2 17 cc 30 31 1e 80 c5 ed 6c 5e a6 e6 ba 01 5c 5d 53 8a 0b 9e 9a 5a 92 ff 54 92 4e db 2e af 12 19 b0 12 00 a8 28 a3 ea 19 bc ae ad 7b e0 07 36 a7 2b 2f Data Ascii: u^?tpJ)s~\|5cEjS4'}({2DQsPp6rzN'gvp`=IN{%?542p@rm.\%e1yE(ReI$-IICJ$U\9\.lAw501l^\]SZTN.({6+/
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 56 94 93 91 56 bd 7c c1 ac 1f e6 e7 66 7d 2c 03 d6 11 2e 4d 9d fd 37 d5 34 74 fc 9a ee 58 06 75 d0 19 73 64 80 c5 27 1d bc d1 2b 8a 73 48 9a 41 06 2a 59 08 e9 1f 1c 62 c0 d5 48 55 45 cc 11 6c 66 23 05 2c 96 38 d0 e3 61 ff 5e 36 b7 f2 ae aa 99 53 7e 77 34 25 0d 3c 6a 00 cb ed f1 a6 57 d7 b7 ff b9 b5 6b f0 62 e6 a9 a0 8c ee ad 2e 16 b0 fc 05 3a 29 50 19 f5 a4 2c 3f 93 31 2b 59 64 09 97 96 8e 1e aa 2a 36 93 ee de 01 16 77 aa 0c 86 fd c4 07 58 7e b3 83 3f a9 e1 d4 b2 a2 d7 56 2c 9c fd 63 43 b2 be 41 06 ac 23 44 ac 76 67 e5 e6 7d 4d af 99 ad f6 99 62 bc d5 c5 00 16 0c ea 5a 8d 8a 02 55 16 29 a6 ea 9f 4a 29 87 ce c8 12 5b f6 d7 b7 92 7d 75 4d c4 62 b1 12 95 4a 1d c8 be 11 1f 60 f1 9f 76 a7 93 6e 98 c6 fa 95 4b aa 6e 28 ce cf 79 57 06 ac 49 2e ed 3d a6 ef ec a9 Data Ascii: VV\|f},.M74tXusd'+sHAYbHUElf#,8a^6S~w4%<jWkb.:)P,?1+Yd6wX~?V,cCA#Dvg}MbZU)J)[}uMbJ`vnKn(yWI.=
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 6d bc 24 3f 3b 95 9c bc 28 25 a4 df 67 4f c9 a5 aa aa 89 1c 68 e9 65 a7 af 47 6b 86 d5 dc ec 0c 72 fa 09 cb c8 b6 ea 5a ca b8 1a 88 82 aa 88 f1 f6 04 fa d0 e5 f5 ea df ff 72 d3 5f 07 4d 96 19 cb 16 cc ba 53 06 ac 09 96 7d 8d 9d 0f d5 34 76 de 01 e3 7a 78 31 08 29 c2 8f 98 67 97 17 90 d2 fc 8c 84 7a c6 5d 07 db 49 6b cf 90 68 5f 2f 77 c0 98 5e 9a 97 1e f2 fe 90 cd 41 ba fb cc ac 88 6a 7d 47 9f ff 7a 0a 1f 71 52 c0 69 ec 18 a0 6c 32 3b e4 f3 2e 8f 8f aa 6a 36 c6 82 96 55 96 50 20 f7 db 97 78 26 54 61 29 7a 37 fd 2c 4e 51 fb 86 ac c4 e1 70 87 a8 74 00 2d 18 e1 f5 3a 35 03 27 6d 98 ba 8e 38 39 a8 85 b3 cb 72 c9 f6 03 6d 64 67 6d 3b 65 5c 69 11 4f 05 45 6d 60 94 cd ed a9 ef 24 41 9f bb 61 d5 7f ba 49 51 95 78 6e 45 41 42 8c 37 ec 50 cb e6 57 92 9c cc 34 f2 d5 Data Ascii: m$?;(%gOheGkrZr_MS}4vzx1)gz]Ikh_/w^Aj}GzqRil2;.j6UP x&Ta)z7,NQpt-:5'm89rmdgm;e\iOEm`$AaIQxnEAB7PW4
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ee 60 9e f1 62 6c 58 a1 f6 2e 2f cb a0 b1 72 f1 dc df 24 2a 68 25 a4 4a d8 d5 3f 74 e6 ae da d6 3f a8 55 ca b8 94 6a b0 2a 18 e7 17 cd 2c 91 c1 4a 96 a3 46 f2 b3 33 c9 d7 4e 3c 86 aa 78 3a a6 22 4a 66 2f 08 e3 d1 68 c8 da 4d 3b ef d8 7b a0 f1 7b 32 60 89 90 9e 41 f3 49 1b 76 37 bc 42 a9 ad 21 1e 8f 5e 6f 20 cc 62 d9 ac d2 23 c6 db 59 16 59 c4 4a 5e 56 06 39 73 15 40 4b 1b ac ae 23 15 b4 60 88 ff 78 ed e6 c7 1b 5a da cf 94 01 2b 86 38 9c ee 82 ed fb 5b 9e a6 60 a5 8f 47 0f e7 cc 6a d9 ac 32 92 66 4c 96 67 af 2c 47 a5 e4 50 d0 3a e3 a4 e5 2c 9e d2 13 07 68 61 ed b9 dd 6e c3 1b 1f ac f9 6f 5b 57 cf 71 32 60 45 10 a7 cb 9d bb 76 67 dd fb 83 16 c7 f4 78 52 8b 04 c1 6a 8e 0c 56 b2 c8 92 17 00 ad 78 99 16 d6 a0 d3 ed 4e fa f0 8b 4d cf 5a ac b6 42 19 b0 04 e2 a3 Data Ascii: `blX./r$h%J?t?Uj,JF3N<x:"Jf/hM;{{2`AIv7B!^o b#YYJ^V9s@K#`xZ+8[`Gj2fLg,GP:,hano[Wq2`EvgxRjVxNMZB
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 53 8f 5b c2 8a 89 48 9d 86 3a 3a ef 77 ee ad bd b0 e6 60 f3 85 e3 d5 de 71 d1 ad 1c 4e 77 de a6 ea a6 7f e1 a4 5b ea 77 71 22 58 9a 9f 49 ca 0b 13 27 4d 0c 00 26 3d 3d 9d 98 cd e6 e0 f1 3d 7e 7f ef bd f7 c8 d5 57 5f 3d ec f7 37 6c dc 18 62 d8 e6 2a d9 78 02 57 69 69 29 f9 e3 e3 8f 93 ad 5b b6 b0 83 8c fc fc 7c b2 78 f1 62 79 05 1f 85 32 6b 5a 39 69 eb ea 23 3b f7 ec 3f 6c 5e 8a 61 5a ef 7e ba ee e9 9c ac 33 76 64 a6 a7 ee 3b 22 18 d6 ce da d6 c7 cc 36 47 ae d4 0c 0c 70 0c 4d 4d 49 4a 98 12 e2 5c ec 76 3b 59 b5 6a 15 29 2c 2c 64 f6 20 ce b2 36 51 20 02 53 89 d9 17 3b 77 92 03 fb f7 b3 cf 33 30 77 38 c8 f2 e5 cb 49 4e 4e 4e 5c 91 f5 23 11 dc f3 6b a7 9f 4e ce 3a eb 2c 19 ac 8e 72 41 7e f8 b2 e2 02 e2 74 3a a5 31 1e ba 59 5b 6c b6 b4 0f bf d8 f8 e4 11 c1 b0 Data Ascii: S[H::w`qNw[wq"XI'M&===~W_=7lb*xWii)[\|xby2kZ9i#;?l^aZ~3vd;"6GpMMIJ\v;Yj),,d 6Q S;w30w8INNN\#kN:,rA~t:1Y[l
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ea a0 3b 42 0f 55 63 3e fe e8 23 b6 38 38 8b da b4 69 13 03 d1 d3 4f 3f 3d 61 fa 0d 31 87 7f 7b ee 39 06 44 00 02 ae 72 15 15 15 91 13 57 ad 62 47 e6 56 fa 6f d8 fc a0 4e 81 c9 00 ec f1 bc 50 ff 1e 7d ec b1 09 61 84 7c c3 c1 c1 0b 0e 5d 70 58 01 55 10 6a 3d 67 b1 18 67 80 95 30 48 1c 9f 87 ca 8d 0d 0e b6 59 44 46 7c fc f1 c7 8c 8d 33 30 a6 a0 66 a1 40 06 15 f2 b6 db 6e 9b d0 b1 41 dc e8 69 c7 2f 25 2f bc fe 11 71 7b 3d 44 52 29 18 4a 81 be f8 6a db 83 d3 ca 8b df d2 a8 d5 96 49 01 58 b5 cd dd 3f ea 33 59 2b e3 51 05 67 94 e5 92 dc 0c 23 99 2c 02 95 10 29 66 6a 6a 6a 82 2a 0d 58 0d 98 16 5c 05 82 76 1a aa 0e c2 d6 c2 55 0c 64 7a 58 76 cc 31 41 b6 35 9c e0 bb 08 54 4e 0a a8 70 3c 40 fa fa eb af 27 67 9f 73 4e c8 67 b1 28 ee bb ef be 20 d3 02 48 be f6 ea ab Data Ascii: ;BUc>#88iO?=a1{9DrWbGVoNP}a\|]pXUj=gg0HYDF\|30f@nAi/%/q{=DR)JjIX?3Y+Qg#,)fjjj*X\vUdzXv1A5TNp<@'gsNg( H
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 94 d4 93 10 80 55 d7 da 73 7d af c9 3a 47 8a 93 28 53 69 e8 83 cf 9e e4 aa a0 50 10 bb 86 54 c3 c2 67 84 51 95 2f 70 ec 9e b0 77 2d 5c b8 50 f2 b5 01 86 30 b0 73 81 81 1f 80 88 e3 f5 68 82 c2 19 48 79 83 05 0a 80 c3 69 a6 14 43 7f a4 9d 16 cf 03 bf a8 29 c3 5c 87 ab c5 38 cd 0c 5f 80 88 71 84 cf 12 ae c3 d5 25 d8 e8 e0 83 15 cd 3e 54 77 f0 20 79 e7 ed b7 d9 e2 06 03 49 cf c8 20 df 08 3c 7b b8 ba 8b 7b e3 79 a3 f9 b7 c1 2d 02 63 21 35 33 81 18 c9 a7 e3 2b 34 a2 63 ec 61 cf 84 0f 56 34 d9 be 7d 3b db 8c e0 7b 86 71 85 19 01 2e 28 89 26 2b 97 cc 23 fb 0e 36 12 b3 d9 4a 14 22 35 22 b0 b2 7e 93 39 73 f3 8e 9a 1f 1e 7f cc fc 5f 4c b8 4a e8 70 b9 73 77 1f 6c 7b 40 a5 90 a8 0a 7a bc a4 b2 3c 8f 18 f4 ba 23 06 b0 50 c8 01 69 5b 84 19 1b 84 6c c4 49 17 30 c0 2a 9e Data Ascii: Us}:G(SiPTgQ/pw-\P0shHyiC)\8_q%>Tw yI <{{y-c!53+4caV4};{q.(&+#6J"5"~9s_LJpswl{@z<#Pi[lI0*
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 39 1e ee 24 66 73 f9 f5 43 0f 31 15 d0 4d c7 09 73 c0 21 78 2e de 36 5c 17 7d 02 96 fa 2b fa 6c 13 11 d0 1d 8f 2c 5f 30 3b 98 2d 44 bc 2d 4b 43 36 6f af be de 66 b3 c7 5d 01 59 11 2f 35 de 53 d7 71 ff 8e 03 2d 3f 47 80 b3 1f 7c 14 21 b4 51 b8 db 1c 62 57 1e 32 a5 20 93 2c 9d 5d 3e a9 58 13 4e fe 0e d6 d6 06 8f d2 b1 a0 60 ab 9a 1f a5 78 2a 8c cd 6f be f9 a6 bf 76 62 a0 22 09 ec 4b df 38 ff fc 88 7a 3f 80 07 c1 c9 d6 40 96 4d 1c db e3 08 1c a9 8b 63 f9 6b 21 cd ca e7 9f 7d 46 ea eb eb 83 c6 7d 1e 97 07 b5 04 c0 09 db 48 24 41 78 0c 0c f6 ea 80 9a 88 45 03 87 d6 f0 2c 13 c2 36 a2 1f 60 8f c2 89 1d 57 6b 70 fd 6b af bb 8e 31 1f 21 9b fc 8c b6 0b d9 35 61 b7 e1 9f 05 80 22 58 3b 2f ff f0 93 61 78 ba 23 40 1c f9 ee e1 0a c0 99 08 be 0b a6 02 47 5b b1 69 9c 61 Data Ascii: 9$fsC1Ms!x.6\}+l,_0;-D-KC6of]Y/5Sq-?G\|!QbW2 ,]>XN`x*ovb"K8z?@Mck!}F}H$AxE,6`Wkpk1!5a"X;/ax#@G[ia
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 6a eb 64 d9 46 45 b1 2c ba e9 51 56 76 c5 31 0b e7 3c 4a bf 63 1b 15 c0 32 59 6c 95 9d 7d 43 27 ab 24 64 14 85 3a 88 f4 31 e3 a9 1a a0 ea 8a b0 5a 0c f7 e2 bf e5 96 5b 58 48 86 70 07 44 34 3d 18 d5 5f ff fa 57 46 ef 31 69 f1 79 c4 72 b1 92 f2 8d 8d 2c 0c 63 ac 05 ec 04 f7 d4 0b ea 0d c6 62 27 2c 7e 10 31 71 11 42 7c c6 32 67 3b 98 1c 98 6b b2 a0 60 02 ec 7f 68 2f 82 bd c1 4c 50 74 23 11 2b 4c c7 32 09 08 fb 1e cf 13 2b a3 05 9e 15 6a 70 78 06 59 98 21 50 e9 e6 68 07 2c 30 ab 45 73 2b 49 7d 4b 1b 05 16 95 c8 31 50 91 f6 ae 9e 19 2d 1d 5d cb ca 8b 0b 3e 1f de f6 25 42 ea 5a 7b 7f e0 72 7b 14 62 c1 87 b1 15 9d 86 4c 29 cc 1c b7 ce c2 64 43 ac 96 70 32 c1 be 72 d2 c9 27 93 d3 be f6 b5 88 74 1d b1 6d b7 dc 7a 2b f9 1a fd 3b 77 73 60 25 8a 28 cb f9 f4 b3 cf 12 Data Ascii: jdFE,QVv1<Jc2Yl}C'$d:1Z[XHpD4=_WF1iyr,cb',~1qB\|2g;k`h/LPt#+L2+jpxY!Ph,0Es+I}K1P-]>%BZ{r{bL)dCp2r'tmz+;ws`%(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49814	216.239.32.21	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	1611	OUT	GET /g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_user_logged=0&ep.page_type=home&ep.content_group=home&ep.event_id=780258551.page_view&ep.facebook_pixel=671587811394625&ep.facebook_event=true&tfd=10538&richsstsse HTTP/1.1 Host: t.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.retif.eu Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=event-source;navigation-source Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; _ga=GA1.1.965705703.1729844187
2024-10-25 08:16:30 UTC	672	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:16:30 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; Max-Age=63072000; Domain=retif.eu; Path=/; Secure; HttpOnly set-cookie: FPLC=3FLPsJhHx9AcTm4ZR8zcilv1baeQWcXzP1IRsHrpDkWv7sGzbQBxEWQAn3TcDLe3jvAKveTcWKGI38IxyNkQ4Oq1Q%2BugdRqnRNPYtNAbibb9wI8962aR3MUBlf03Hw%3D%3D; Max-Age=72000; Domain=retif.eu; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.retif.eu access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-25 08:16:30 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49815	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	951	OUT	GET /media/wysiwyg/bg-cadeau-bievenue-3.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:29 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4650 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "UeFmEomKKUzrLIE2ZtIi7viG8m2rCPntrMeMawsW2zU" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=66207 idim=1920x500 ifmt=jpeg ofsz=4650 odim=1920x500 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e9651cec5ea29a11f14df9e5-f56dfc975ca1b6ef-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72191 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960094-PAR, cache-dfw-kdal2120040-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 52 49 46 46 22 12 00 00 57 45 42 50 56 50 38 20 16 12 00 00 b0 01 01 9d 01 2a 80 07 f4 01 3e 6d 36 99 49 a4 22 a2 a1 20 08 00 80 0d 89 69 6e e0 77 4e 2b fc 1f 7f fd ef a7 e7 b0 6f fe f5 3b 8f ff fe bb 1c d5 47 7e ae 63 75 a0 5f ff db ee c1 3f bf 69 ae bc 63 f4 00 b4 b6 4e 43 df 6c 9e 95 02 c6 56 ce 97 6b c5 c9 c8 7b ed 93 90 f7 db 27 2e 82 2a 53 ff de d9 39 10 4d 13 f4 47 57 7e f4 1f b6 4e 44 77 bd f6 c9 c8 7b ed 93 90 f7 db 27 21 bf f5 0a f0 ee 9a c1 39 0f 86 2b 66 70 47 1e 50 33 17 dc a9 c5 d2 c4 fb fc 6b e9 76 ce 00 2d f3 1a 7d b6 ca fa be f6 8f 67 98 66 7c 1f 04 a1 f9 9d fb 76 17 5d d5 55 82 22 0e 15 53 c0 2f b9 3d af 9d 6c a8 b0 3d f6 cc 9e dd 39 1e 59 43 8a 6c c5 bd 0a 9d a8 03 7f d9 62 42 bf 76 2b 0c b9 b4 91 22 45 23 cd 0f b1 ce e8 2c 97 d0 ff fc Data Ascii: RIFF"WEBPVP8 >m6I" inwN+o;G~cu_?icNClVk{'.S9MGW~NDw{'!9+fpGP3kv-}gf\|v]U"S/=l=9YClbBv+"E#,
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: ff 3f ef e9 88 83 c9 b9 d0 ac 75 00 7f 88 a4 e1 d6 17 22 36 35 bb 34 97 b7 1f 88 24 38 87 cf 7e 26 81 83 df ec 5a e8 94 62 ba dc 20 6e 0f fe f7 43 69 0d 29 40 67 93 93 a2 c0 3f c1 36 4f 65 41 14 16 a1 7a 77 75 cb 1f 8d af 85 fc fe 23 97 f7 11 7b 02 10 ae a7 84 3f 53 b6 81 a1 24 db 6b 01 dc b7 b0 81 4f 27 d2 ee e6 a3 38 c2 24 f5 35 10 5d a5 40 b2 5d af 35 a8 f7 8e bf 38 f8 fd bc c8 87 08 7a 63 c6 c5 d8 ad 47 5d 44 ea c9 b4 a9 9c c0 7b a1 b8 43 de 4e 5e 5f 32 e9 5a 84 80 40 92 fd 39 5e 45 a5 40 cf e0 9b 4f 73 3f 8d 9c b7 21 eb 54 ce d2 02 70 b9 94 40 7c 56 7a 52 e5 6e 9d 38 0b f9 e4 3c dc 3a 6c a8 66 3c 92 6d 87 44 09 98 9a 30 41 a8 d9 58 7f 44 ce f1 30 ce ee e4 f8 da 45 b5 f2 1f 05 f9 7e da 9f 58 92 ad f1 4a 5d af 12 25 0f e9 ed 93 90 fa 17 fb 69 50 2c b9 Data Ascii: ?u"654$8~&Zb nCi)@g?6OeAzwu#{?S$kO'8$5]@]58zcG]D{CN^_2Z@9^E@Os?!Tp@\|VzRn8<:lf<mD0AXD0E~XJ]%iP,
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 3b 20 d3 f7 40 34 0b 7f 70 d1 fa fd 94 14 9e e8 89 78 d4 e7 88 9c 42 e1 ad 08 f1 13 3c f5 91 2e 53 52 0a 04 a1 73 a6 39 4c 0a 4a 2b 8a ed 3b 46 b9 7a 9e 16 6d 61 e0 d8 03 1a 08 03 37 28 36 33 72 26 20 06 ca 92 41 2f af e7 f3 84 6f 96 73 43 6e 7a 26 68 92 8f ac ef 83 76 90 61 f3 05 18 1c bb 9d 75 c5 c8 d4 84 9f 79 c6 23 57 86 d7 0e ae 28 cd 04 23 1d a1 49 8c ed 8b ee 11 8c 1b ff f5 8b b0 40 53 72 b1 08 b1 54 c6 9d 45 84 06 34 ee 92 cf 2d 21 94 47 ec 2c 88 e0 ab 11 9b 95 c7 21 ff df 5b 7d c6 27 1c d2 c1 ee 52 c7 a0 1b af bb 52 7d 65 e5 be e3 dd 62 f5 2e 75 18 ac dd de d5 92 81 96 dc db a4 ac 85 46 c8 3b 3c de 8c e8 6d 93 0c fb b3 83 dd ac 1b a4 cf 1e e5 a6 f6 13 a0 bc e6 a7 33 88 81 9f be 29 ab ba 92 34 91 75 3a 2c 27 8b 48 c1 5e ca b6 1c c4 f6 89 19 c6 6c Data Ascii: ; @4pxB<.SRs9LJ+;Fzma7(63r& A/osCnz&hvauy#W(#I@SrTE4-!G,![}'RR}eb.uF;<m3)4u:,'H^l
2024-10-25 08:16:29 UTC	513	IN	Data Raw: 66 7c 11 46 4a c6 37 4c 39 03 f0 63 52 44 36 e3 44 03 ee c2 58 d2 0d 3d 0f 83 85 5b 60 86 b2 e0 55 71 72 35 78 06 8e d3 43 15 02 1c e9 9d 9a 11 91 42 41 4b 21 cb 7d 44 73 56 2c 92 ec 87 7c e1 76 e6 f6 96 b8 22 84 00 6f f0 30 b9 ae e4 35 5c c2 40 d2 58 f8 03 a9 2d 9b c7 d9 34 f7 eb d5 0a 42 6a c5 71 1f 61 30 f5 dc d1 75 ab 4f af 74 f8 b0 36 ba 11 c3 1e 04 7f 24 8e 0b 46 7a 4b af 94 c3 5d bc 38 6f 24 7b 9a 3e 6d 40 87 a5 26 cf 80 8e 8e a4 aa 9d 81 11 9a 05 06 7d 39 38 74 9c 16 99 e7 f5 c3 42 57 56 7a db 89 ff 4b db 1d ff 3a dc ed 6b 0b 2d 1d a1 39 30 58 20 92 c2 e9 8e 1f 71 0e cc 90 6a a6 78 1f 51 b7 64 7c 01 64 3e ad b0 fb 60 80 e5 0e 91 02 a7 40 00 09 ec b6 38 56 7d ab 00 0f 67 ee e9 b9 5a 50 46 c0 1c 26 c4 be 14 f5 c7 8a 03 3a 72 da 8a 90 79 88 10 ca 8e Data Ascii: f\|FJ7L9cRD6DX=[`Uqr5xCBAK!}DsV,\|v"o05\@X-4Bjqa0uOt6$FzK]8o${>m@&}98tBWVzK:k-90X qjxQd\|d>`@8V}gZPF&:ry

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49817	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	950	OUT	GET /media/wysiwyg/perso-push-services.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:29 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25218 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "RBAqSAz0azcss6pE34uQ0HXG7B+o5uLRT3Do9ramjEU" Expires: Fri, 24 Oct 2025 12:13:42 GMT Fastly-Io-Info: ifsz=195883 idim=694x740 ifmt=jpeg ofsz=25218 odim=694x740 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627d7c11d96f4d9cd48e6cfa9491-5045361ac7b0148c-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72167 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960066-PAR, cache-dfw-kdal2120109-DFW X-Cache: HIT, HIT X-Cache-Hits: 8, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 52 49 46 46 7a 62 00 00 57 45 42 50 56 50 38 20 6e 62 00 00 30 f8 01 9d 01 2a b6 02 e4 02 3e 6d 34 96 49 24 22 a7 aa a2 b4 39 89 50 0d 89 67 6e c4 ba 6e 16 e6 db be f9 06 72 9c 61 4c 43 6a 46 f6 c7 2a ec 4b db ee bf e1 fa 18 72 0f 8f 1e e5 f2 9f c5 7e 3c b9 6f cf 6b a2 ff eb fd dd fc f3 fd cb f6 d1 fd 63 fc ff fc 5f ef 9f bf ff 42 3f d6 7f bf 7a e2 ff b5 eb af cc 7f f4 3f f1 bf b6 7e ef 9f f6 7f 74 bd e8 7f 85 ff 61 ec 13 fd db fd 97 ae 47 ab a7 f6 bf fb 3e c4 df c8 bf d7 ff ff f6 a9 ff e1 ed 03 fd c7 fe e7 ee 8f b5 9f ff ff 60 0f ff fe dc bc 1c bd eb 7e e3 78 df d8 4b dd 5f f1 5d 24 22 8f f3 6f c8 df ce ff 21 ed 7f ef 5f c9 1e c7 3f 21 df 96 7f 62 ff 81 c0 d6 02 3f 4a fe db ff 87 fc 6f ab 87 d2 ff e5 f4 b7 ec c7 fe 3f 70 2f cd 9f 63 fc 07 bf 25 ff 77 d8 Data Ascii: RIFFzbWEBPVP8 nb0>m4I$"9PgnnraLCjFKr~<okc_B?z?~taG>`~xK_]$"o!_?!b?Jo?p/c%w
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: d0 99 8f b2 f2 d7 b7 b0 37 dd 29 4c a4 bb 56 f6 39 f6 96 9e 90 a0 00 d7 7a a5 21 4f 15 60 65 3a b4 49 c8 a8 91 68 c5 31 65 80 5b 68 13 a7 b3 e1 94 89 49 c8 c1 fb 31 de 1d eb cd 4e 1c 8a a9 7e c7 d7 d4 c3 47 0c 22 70 67 e1 6c cf f5 87 e6 7f 84 19 c1 93 37 bc 3e 63 10 3e b1 c4 a0 5b bd a2 51 8f 08 09 1b d4 72 05 7f 54 f3 be 56 d6 0c df 93 58 d1 de c6 ed ca 3a 81 6e f6 ca ce 7b e5 1a d1 0a ec 7d 2c 34 00 c8 00 13 ff 99 d9 32 58 0f 0c 3e c6 0f 29 9b 28 cf 0a 48 08 d7 9d 98 f6 c0 4f 25 f8 04 5d 09 84 55 4b f6 40 06 e0 30 d3 e1 71 b2 0f 02 74 66 78 ee 67 0f fc d6 0f 0b 30 52 9a 20 60 4f 66 90 d8 8d e2 e0 91 c2 07 38 dc 91 0c 96 07 cc 05 3d 7d 5e 05 4b 84 d9 0c 7a fe 9d b5 e2 03 eb 9c bf ae 91 f4 0e e1 a1 61 35 65 a8 0d 76 f4 0f a2 6f a5 07 8c 72 59 34 e6 0d 05 Data Ascii: 7)LV9z!O`e:Ih1e[hI1N~G"pgl7>c>[QrTVX:n{},42X>)(HO%]UK@0qtfxg0R `Of8=}^Kza5evorY4
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: eb 44 54 cc a8 48 b8 18 a4 77 09 15 52 fd 90 01 bf b1 ff b0 33 5d 3c af 2c ea 62 3d 04 d0 b0 d6 ff 74 5f c7 53 61 a7 67 71 63 60 f1 c8 3c 9a d5 58 02 d5 6f a5 1c 50 4a 0f 4a ef 22 d6 d0 1f 11 6b 34 23 ac 9e db 18 96 47 6e 64 f8 3f 2b 3d 2a 2c fd bd dc 37 18 5a 65 b6 48 f3 71 a2 47 18 d5 69 c0 0b 60 88 99 74 fa 1c 03 79 fa 88 4e f8 0e 29 7e c8 00 df d9 00 17 40 9d c7 68 e9 b7 59 e1 5b ea 38 7e ef 03 14 af 21 98 20 f0 e9 85 64 ec b5 ef d9 df c2 b1 3f 6f 86 37 53 55 ae f5 23 b7 79 7f 66 e4 51 c4 a4 90 8b ff 08 81 91 58 b3 f7 f5 cf e0 f0 fd 64 21 77 57 d2 1f ac 39 3c 2d 93 cd 5c 27 a3 8a 89 09 bd 22 21 07 68 8b aa b4 d4 f3 a7 06 59 22 2d ed 05 5a a8 df 80 76 ed 3d a2 4d d4 4f 16 af 98 84 a1 31 15 bf e2 da 5f ac d3 50 f9 85 34 89 3f 9f 47 58 70 fc 79 0a 5b cb Data Ascii: DTHwR3]<,b=t_Sagqc`<XoPJJ"k4#Gnd?+=*,7ZeHqGi`tyN)~@hY[8~! d?o7SU#yfQXd!wW9<-\'"!hY"-Zv=MO1_P4?GXpy[
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 40 fc 4d a9 c3 8e d6 70 95 88 0b b8 ee e1 b1 7e 74 96 75 bf 07 8a 77 6f 84 14 68 4f f4 e6 45 56 f1 dd f4 f2 ea 1c c0 d4 f1 46 44 9a 6b a4 29 09 0a fa f0 a5 29 e0 df d5 60 dd a0 de 9d 8a df fa 57 5f 70 bb 3b 1c d3 9a 30 55 f9 2b 46 0f 42 cc d9 89 8c 5a 2e a1 ad da ab f6 b9 39 81 b2 73 87 a3 4b c0 cb b5 bc 8d 8d af 78 1d d2 46 39 fc bf b1 33 d2 10 98 c7 27 7b 7e 7f 9f 95 6f e7 e1 a2 10 0b 6f 98 c8 cb 9b 84 c3 09 c1 28 06 5b 11 d7 b1 dd 78 a8 b2 6a 57 f4 50 69 fc dc 5a 54 25 0d 2a e4 6c 10 24 dd 92 79 75 38 c7 d6 75 23 c6 75 ee 64 37 2e 20 62 02 3f 02 88 60 1a 10 e4 fd 8e fc 04 a7 ce d4 8f a3 19 5d ee a1 45 02 84 1b 31 77 9f 39 df a2 98 a7 c7 5b 95 02 92 b8 69 e7 71 eb d9 13 89 8f 17 e8 12 1b 4c 72 fd e8 72 d6 57 4c b7 bf 4b 5e 8f ff 2b b6 ef af 47 e4 c3 da Data Ascii: @Mp~tuwohOEVFDk))`W_p;0U+FBZ.9sKxF93'{~oo([xjWPiZT%*l$yu8u#ud7. b?`]E1w9[iqLrrWLK^+G
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: cd 01 c8 a7 35 22 d2 9f ec d2 7e 9a ad fd 57 f5 21 d9 2c 88 46 00 35 d5 16 e5 cb 14 7c 19 67 d2 e0 f2 ce e1 7f d2 cc 4f e5 23 96 be d4 81 db 56 0f df af 3b 75 ca 59 48 90 18 76 80 fc b9 16 35 71 92 11 5f 6f 88 1d 31 e8 59 b3 8a b7 00 c2 c7 65 dd cc 92 42 c4 19 43 0c 69 fd da dc 7e 32 dc 01 2a c9 b4 a7 16 03 26 79 26 2b 61 ce d1 8a 8c c7 bc e5 64 77 53 07 02 0f 82 d2 72 3f e7 8d 8f 89 fe e6 b7 88 13 79 63 4e c8 dc a9 0c 41 7c 79 39 e7 46 92 8d c2 5e 1f 5d 5b b3 72 2b 33 19 cb da 62 40 74 20 c3 66 ee d7 a5 b4 81 db b6 31 1a 70 22 a8 08 75 20 d6 ca 0c 51 c9 75 10 5a af b5 6f 69 72 46 29 65 27 99 62 5c 3e 6c f6 d1 d1 63 46 6c 98 4a 88 62 96 e0 0d 31 0e 9e 25 9e 0e 37 31 d4 95 00 53 b4 10 5f 77 38 9b 2e ae 69 80 59 dd d5 3d 3a 68 ed 4a 9b 25 89 4f 9b f7 cf 80 Data Ascii: 5"~W!,F5\|gO#V;uYHv5q_o1YeBCi~2*&y&+adwSr?ycNA\|y9F^][r+3b@t f1p"u QuZoirF)e'b\>lcFlJb1%71S_w8.iY=:hJ%O
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 6a 1a 47 0f 80 67 35 e3 fe 39 2d 39 80 94 ab 90 4a b6 07 2f 46 ac 2d 91 24 2b e8 fc 2a 10 26 e6 b3 22 3e 3b c0 6c 90 b9 57 fa 58 4a 27 33 43 67 0d 3f 87 62 98 8e 1e b0 67 71 5b d5 8f 1d 57 30 13 fc 7c c9 c7 63 b2 67 c2 96 80 41 48 a1 13 29 f0 85 25 c8 20 64 ac 2e bf a4 b1 3d f1 4e 0e 38 33 c3 ce 25 25 da e4 60 38 36 69 9a f4 e8 7b 46 db 5f c7 f3 c9 88 38 23 8d 5f 19 37 2a 66 21 a6 c6 17 47 8d 45 46 27 88 83 5e a5 2e 21 d8 72 6c ac 96 d1 16 3c c6 31 62 69 9a 10 20 27 e3 eb 8d b9 ce 36 a0 9c e9 1a 9e 69 3e 26 8d b4 42 a4 91 13 5e b8 cc df e4 e5 d7 f3 01 48 b5 e3 a5 94 47 22 26 30 7e bf 50 70 d7 80 1f b6 c4 7d 7d bf d6 35 13 3a 50 0d c4 eb 8a 83 36 aa c1 83 95 7e 6c 48 d8 6f 3b 94 a7 3f 70 74 fd 17 e3 58 3e 79 b8 42 fb 9e cc be 32 56 01 21 f0 ad 1a a0 15 41 Data Ascii: jGg59-9J/F-$+&">;lWXJ'3Cg?bgq[W0\|cgAH)% d.=N83%%`86i{F_8#_7f!GEF'^.!rl<1bi '6i>&B^HG"&0~Pp}}5:P6~lHo;?ptX>yB2V!A
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 6b 10 ec 07 ea 3b 4f b1 13 51 4c bb 41 01 79 3d 02 a9 ca 98 8f 2e 15 f5 50 a4 5e b1 7c 6b 66 8e e1 dc 38 d7 45 15 61 82 bc 7e 5f f9 46 a4 8c c1 fe 3e 0a ac 9d 20 12 75 36 0f 92 ba 1e 58 b6 93 55 a5 0a 3b 4b a1 f7 56 cc c9 94 4f f5 fb 56 31 b5 37 3c 5c 0d 7a f9 12 22 3b 41 fb a1 ee 2c ea 41 33 13 7c 32 57 80 00 1f ad 06 33 52 58 fd 3c 3d 09 9e af a8 7f cb 9b d9 98 99 9d fd e4 fb 3b 88 fe 3a 30 39 4b 43 a8 a0 b6 1f b4 8f 26 71 fc 99 aa eb e4 b2 35 9a 2e 6a 24 18 58 3b 01 72 c8 98 1d b9 02 9c 21 8f 9e af 22 27 cb 95 86 69 cc 77 9e cf 22 c5 4d 30 b4 7c 26 d6 4c ce 35 a7 ca c2 98 bf cd 5b bd aa bb e0 86 77 bb b4 7e c5 d2 31 b0 9b d0 90 e9 2c a5 c0 42 f4 90 cf 8f c6 5c c3 65 b5 56 5e fe 8e ee fa bf 62 c9 cd 0a d1 1b 41 34 92 51 6b 5e 22 d3 4c 24 32 58 bf f2 35 Data Ascii: k;OQLAy=.P^\|kf8Ea~_F> u6XU;KVOV17<\z";A,A3\|2W3RX<=;:09KC&q5.j$X;r!"'iw"M0\|&L5[w~1,B\eV^bA4Qk^"L$2X5
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: a2 d0 49 5c d7 57 35 9d c2 0a 27 15 a2 91 9b 5e 8e 90 33 d1 0e 73 04 c1 c1 22 e8 00 c3 44 72 80 85 6b 27 ad b7 77 9f f5 46 b6 e7 5b 65 c9 48 4d d0 f6 ce ef f2 10 05 03 f7 a7 90 de 32 7e 54 31 64 f6 e6 04 bd 53 1c f0 8a 22 d5 32 09 cb 5e 13 d5 af 37 c8 ba 12 43 35 f9 e8 d5 4f bb c6 4d 68 5c 8f 82 0c 36 36 22 97 66 0d 93 a1 ea 6e 32 67 4d 03 ef f7 9f bf d5 f5 21 23 ae ae ae 9b 0a 14 7e 55 35 1f 2f e2 2a 52 7d e0 5c 14 6a f4 32 ed df e6 2d 97 a3 91 27 16 f6 1f db e9 d7 1f 50 6f 44 02 20 e1 b1 79 63 bd 14 5b 77 57 ef 05 df ea 88 eb b7 68 ba bd 06 6f e8 de 72 fc 32 0e 75 da 55 c4 25 8a 4f 07 5f 68 46 65 38 ed 76 f9 42 a8 90 48 74 31 36 ba 6e b7 9c c9 44 f8 b1 fe 01 82 ec 0f bf 30 2d ee 8a 73 64 83 1e 29 c7 fb de 5b c9 4d 69 ab 11 65 3d ca a2 c1 9d b1 65 ca 55 Data Ascii: I\W5'^3s"Drk'wF[eHM2~T1dS"2^7C5OMh\66"fn2gM!#~U5/*R}\j2-'PoD yc[wWhor2uU%O_hFe8vBHt16nD0-sd)[Mie=eU
2024-10-25 08:16:29 UTC	1379	IN	Data Raw: 65 b6 6e 8e cd be 35 27 2f f5 4b 99 78 82 a8 0f 5e 83 5e 3d a3 ba b4 fb 59 b9 7c 4c b6 6a f9 25 89 10 7d ff 7a 14 08 70 7e 03 c4 f7 fc a8 05 74 73 27 f8 db 81 37 9f 41 d6 24 50 43 98 e1 75 9c 1b de e4 a8 ff fc a9 6f 78 17 00 35 6c 50 49 82 10 db b1 11 3f 2e 00 68 9d 84 47 bb df d2 b4 6f 84 9c 5e 48 7d d5 d7 04 4d 07 1b 86 f9 01 c6 bd 2f a9 d6 c6 c2 81 00 cb bd 83 f4 ec a8 68 ed d0 6e 9d 23 81 4d 35 1d 26 70 f8 8c 2f c2 46 8e 86 7c fb c4 e1 5f 88 74 79 57 32 73 d3 0e 8a 8e 7e 7a 41 bf 19 a0 58 04 ae 8b f7 2c 61 e3 ac 5e d3 cb 68 73 5e a9 05 66 a4 1f 2a 8a 2c 91 ed 6f e4 ba 6d 09 fc b4 a0 76 b3 2b c2 37 5f bc 8c 4f 73 27 60 7b b4 42 69 cf df b5 c9 42 e1 08 02 34 0c d8 d8 e8 80 d5 66 03 4d 5c ba 4b e4 84 52 bb 58 0f e8 22 69 15 c3 43 c4 5b bd 59 a8 67 a6 0f Data Ascii: en5'/Kx^^=Y\|Lj%}zp~ts'7A$PCuox5lPI?.hGo^H}M/hn#M5&p/F\|_tyW2s~zAX,a^hs^f*,omv+7_Os'`{BiB4fM\KRX"iC[Yg
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: e0 ce ac 8b 5f e0 fe 0b cc 5e 26 28 b4 d9 79 d0 93 aa cb 66 08 39 3a b8 48 a0 b5 0f 10 28 8f ab 6c c7 c5 3c 25 3b c1 2b e6 02 70 b1 e8 4a c6 d6 62 78 0f 3c ff c3 29 b2 95 2c 45 1b 34 9c 91 10 b8 3d 33 30 a6 fc ee 15 c7 78 65 fb d5 f6 bf b4 c3 fc 40 5b 55 b7 13 2a 63 e8 fe da 48 54 5e 26 1a dc e3 b5 14 04 48 7b da 15 e8 43 b5 6d 3d 9c 40 14 7b 22 12 d7 33 1f d5 7e 15 d7 6f fe 0d f1 3e 1d 34 8a 09 25 69 20 9c 18 70 09 84 a7 2e c6 7e 48 eb 5f 63 0d 54 f4 37 6f 10 03 25 17 45 dc 06 80 4d 99 8f 06 0f e0 09 19 55 bc b3 66 0f a6 2d 17 0b 3c 29 c0 25 99 90 0c bb a7 6e 7a 9a d1 52 10 71 3e e6 37 28 0e d1 f7 4e a3 7d 7f c8 c9 83 e7 d0 25 05 75 07 b1 8b 08 52 d7 a8 2d 98 f8 e2 4a f0 70 7d fd 77 99 98 4d 9a 5d 75 32 46 80 94 d5 a1 14 11 b9 77 cf 92 02 2f 47 b0 f4 f6 Data Ascii: _^&(yf9:H(l<%;+pJbx<),E4=30xe@[U*cHT^&H{Cm=@{"3~o>4%i p.~H_cT7o%EMUf-<)%nzRq>7(N}%uR-Jp}wM]u2Fw/G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49819	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	939	OUT	GET /media/wysiwyg/paiement.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:30 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14972 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "sD5USEzERi3uezolBWMwfDieizf7LaoKqb318Mh9+FQ" Expires: Fri, 24 Oct 2025 12:13:42 GMT Fastly-Io-Info: ifsz=85353 idim=490x490 ifmt=jpeg ofsz=14972 odim=490x490 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-1801627d7c179d615d7cdefcbb3daf68-f2abb87e7b7e0ccb-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72167 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960029-PAR, cache-dfw-kdal2120040-DFW X-Cache: HIT, HIT X-Cache-Hits: 8, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 52 49 46 46 74 3a 00 00 57 45 42 50 56 50 38 20 68 3a 00 00 90 b5 01 9d 01 2a ea 01 ea 01 3e 6d 32 95 48 24 22 b0 ad a4 f0 ab b2 10 0d 89 67 6e 73 c0 bd 71 f9 f9 ca f5 60 d9 d7 a6 8d 0a f2 cb e5 f1 6b ce 1b b9 db ca ff 95 18 a8 fa 48 4e bb b3 b6 ec dd 01 fd cf 8f af f1 1c 4b 7d 3b a9 5d ff 8f 7f 83 b3 89 95 bf 86 f0 7f f2 36 69 7b c9 fc 8b c0 a7 c6 c6 7e 5d 61 31 3e 21 94 70 e7 b5 fe 1d 9b eb b3 2c 43 ff 2c 67 46 77 13 f3 bb 87 92 62 6a 22 93 66 6b c6 ec 8f 55 96 b3 0c 95 e8 20 16 5d 50 1d ca 66 d5 db b6 2a 1e 2a 95 4a 8d a8 a3 00 c8 ef e0 18 50 13 c0 66 13 12 ed 5c e4 34 6a 88 60 f8 d8 f7 74 88 b2 4a c5 86 96 aa df 7a 51 1e 91 c3 98 ef 3f 36 b5 d0 ec b6 99 85 32 bc b0 8a f3 4b 58 b6 28 37 d3 6d eb ac e1 af 65 bf e0 05 d6 2e d2 65 36 8a 18 f7 ef 62 f4 5d Data Ascii: RIFFt:WEBPVP8 h:>m2H$"gnsq`kHNK};]6i{~]a1>!p,C,gFwbj"fkU ]Pf*JPf\4j`tJzQ?62KX(7me.e6b]
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 5d a8 c8 f9 5c 73 9d b8 6f 1a df 0f 5d 4b 65 f2 b6 94 ef b3 c1 3e 08 f2 3c 1d d5 d2 ac da 0f 3a f5 94 7a da 41 b4 71 fb d5 ec d9 9b 9a 5b cf fb 88 1f 44 b2 58 5e c3 f4 0e bc 62 09 9c 7f 90 e8 f2 8a bf 99 bb 4f 49 df 16 bb 56 5f 9e 84 06 a7 bc ec 20 60 7e e4 c3 e4 65 e0 2b be 50 61 9d f1 43 53 04 3a be 41 88 ed e3 d9 75 d1 3b 3b 69 45 a0 e1 d1 3a 1a 68 5d 8e 6a 72 f8 ed 29 7a 48 58 e4 e9 a4 fb 19 90 5e ec 90 36 c8 14 aa c0 f8 55 5e ff 91 cb eb 13 56 bf 83 a8 5b b7 f2 70 02 33 43 ec ba ff 42 98 f9 5b 32 5d ed a8 fb d1 d1 9b 0b 27 13 a5 f2 52 87 57 f0 20 20 0b f7 00 07 53 b9 ea 1b af dd 72 1e b3 ba cb 22 b0 ee 87 37 a0 70 08 0a 92 da ab fe 7e 90 c0 de 4c 75 0a 22 69 a6 5d 53 68 4b 6b 55 b0 bd 14 4c 69 5a 9b 6e fe 06 f6 f4 04 a3 9f 53 2a a9 a4 06 01 8c ff bc Data Ascii: ]\so]Ke><:zAq[DX^bOIV_ `~e+PaCS:Au;;iE:h]jr)zHX^6U^V[p3CB[2]'RW Sr"7p~Lu"i]ShKkULiZnS*
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 4c 24 48 59 f6 a9 86 ec 7b fe af 3b 1d 7e 19 15 5f 38 86 89 01 0e 4a 79 8c 43 a5 1a e9 87 d8 fc 04 d0 e0 6f af b3 62 4f b1 8a 6a a0 48 bf fa 40 4b de 66 6c 3f 6e 62 ae 8c cb 98 e3 db a3 ba 69 c9 a2 58 df 81 7a 8e 60 29 cb 94 7a e5 63 7c ed 72 b2 5f 12 84 ec 3b 45 cd d5 80 62 1a 45 d3 67 56 7f 9e 0a 89 b1 0b 50 c5 80 6e d1 3b 6c fa 3d 12 32 d5 de 37 c0 c2 b7 cf fe a9 58 d8 a5 ec 5e 46 00 84 c6 38 8a 29 2a e2 a7 98 7d 73 22 0a 8c 2f 8d 84 fd 3e 48 a9 15 bb a8 73 13 f8 8a c5 96 a5 b5 95 8f cf 6c db 42 ba e7 c9 06 8a 48 76 57 4f ed 16 bf 5c 9a 93 c7 7a 28 d8 56 17 06 9c a9 64 6f 3a 08 f0 ea 0b e1 46 e0 91 d2 46 6b a7 52 63 57 9c 05 93 15 47 fa d2 e9 43 58 2d 9e 92 2c d8 8c d0 f4 03 c7 7c 7d e1 ef 56 11 08 a1 78 d7 05 9b 9e 1a 70 3a eb a0 15 6b 59 71 d3 6c 3e Data Ascii: L$HY{;~_8JyCobOjH@Kfl?nbiXz`)zc\|r_;EbEgVPn;l=27X^F8)*}s"/>HslBHvWO\z(Vdo:FFkRcWGCX-,\|}Vxp:kYql>
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 45 d8 c8 62 df 2f 15 06 88 c6 95 b6 5b da 66 3b 8f 80 fb c0 99 ec 1d 4c 5f 37 62 74 f1 61 51 8e ab ed d1 c8 65 82 29 5a 80 6b d4 c2 80 02 f8 31 b0 78 8b ee 8c 64 af 24 ab e4 05 4a b9 4d 62 ea 1b d6 6e ac c1 d2 d1 3b 5e 9d c3 ad 61 50 fb 1e c8 f9 80 c2 b7 c2 ee 12 48 90 4b 56 33 23 7f 27 a9 66 5f fa 18 bc 5b 63 09 3e 5c d1 ea 05 77 a4 95 85 bc a2 85 6c d0 3c 50 f3 bf 9f 91 8e 60 07 fd f2 58 90 c3 33 61 5f 3c 25 6e a3 c6 b7 ac 1e 10 b3 47 ba 7c 02 81 ff cc ac c4 dc 76 98 20 c4 eb 57 c5 54 0f f9 33 34 88 ce a9 ce cd c9 43 0e 9e da 79 57 a6 1e 15 23 aa e8 16 20 13 59 d0 83 fb 2a 50 63 c2 80 23 52 e2 d0 6c 58 d6 be 31 2e e2 9e 2e ba ea cd ad e8 2f cc 48 5e 70 e2 a2 9a 8b 31 3e 92 2a 92 d2 bb 11 00 20 a7 a6 a7 a8 3b d3 7a ec 44 6f f8 13 07 c7 58 0d 9a 30 1a ea Data Ascii: Eb/[f;L_7btaQe)Zk1xd$JMbn;^aPHKV3#'f_[c>\wl<P`X3a_<%nG\|v WT34CyW# YPc#RlX1../H^p1> ;zDoX0
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: d4 4f 19 72 9d e8 6e 5a a1 ec ab cf c0 22 3d 63 16 72 4a ff f3 28 22 e4 53 dd 2a 68 da c1 b4 85 9e 73 0f 46 63 88 c7 cc 33 3f 3d cb 6f 3c 53 25 fb 95 d2 5c 08 b3 28 f7 dd cb 25 e1 11 a0 ac 4c b1 98 a0 00 ff b2 8b 29 75 80 4a e6 83 8f 61 39 31 15 e8 13 ef 5f b2 0e 0d 95 0d 32 51 e8 d4 4d 36 f7 2e cb 04 38 6d 37 35 4e c6 8c 6d 3f 4e 48 83 91 1a c8 01 a8 b5 a1 51 5b 61 a2 c8 37 4d 41 46 c4 0e e6 aa bb b0 ba eb c3 1e 69 9d ca 0f f1 74 7e 70 96 fa 24 1d 73 a1 e4 2a ff e7 0b ed 1e 79 79 a7 0d 4a 9c fa 08 96 79 d1 08 94 0d f8 bb 1f 6a 48 fa 50 34 41 01 ee 3f ee 97 1e 80 99 b8 96 91 44 4c 13 b2 3b 11 2b 1c 8a 61 1f d4 bf e3 ae fe d2 c6 c3 b9 71 3c 5f 58 d5 19 5e b3 3a c0 95 c5 d1 c5 65 41 2a 62 71 7d 43 be 4a 34 fa 54 81 f8 39 06 2d 1e be e0 d4 9d 26 d9 29 3f 04 Data Ascii: OrnZ"=crJ("ShsFc3?=o<S%\(%L)uJa91_2QM6.8m75Nm?NHQ[a7MAFit~p$syyJyjHP4A?DL;+aq<_X^:eA*bq}CJ4T9-&)?
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 17 80 0a d2 a8 ce 74 71 22 23 17 e4 19 d2 8d d6 73 a5 96 9d 4a df ad 48 29 bc 44 5b 33 35 cc e1 47 99 75 7d 77 c0 06 f8 ab cc 6b 26 2b da 9a 6c c6 26 74 d6 9c bd bd 4d 62 c3 f7 76 65 c0 f5 06 48 20 54 75 21 59 0d 02 69 1a f8 9f 62 57 ef 44 e3 04 05 18 40 7b 0e aa 15 1d 95 57 8c ab b1 df d3 19 e9 27 d8 3a 35 01 0c d5 5a 05 49 35 57 2e 5b 42 e9 70 40 56 ca 61 df d4 2f b2 c8 7c 3a a6 93 2f dd 85 73 ff 8e 68 4d 47 a0 c1 ce 52 67 4e b4 29 64 5c 25 33 b4 a6 e9 9a 7b 02 94 67 8f 81 af 69 9f 12 0a ff bc 4f ad 77 ae 18 64 78 a9 44 3e 7b d0 8d 8d 0c e1 32 a8 17 cc cd 32 00 b2 62 4a 3b be 1a 1b 77 84 a3 39 d6 32 68 c8 aa d4 83 db eb 83 e4 72 df 18 ad d5 f1 e3 b4 79 74 f2 56 6f 8d 09 11 f3 a4 b6 e6 15 46 ac 8e e1 8c 45 3b ec a0 63 e7 50 57 11 cd 8f 94 d4 bd d4 b7 9a Data Ascii: tq"#sJH)D[35Gu}wk&+l&tMbveH Tu!YibWD@{W':5ZI5W.[Bp@Va/\|:/shMGRgN)d\%3{giOwdxD>{22bJ;w92hrytVoFE;cPW
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 33 88 64 23 4c b3 7f 79 2a 0e ae 22 b4 21 bc 79 51 45 40 0a b3 cd ef 04 bb 05 8d 39 0c bb 6c 00 3e 11 cb fe 34 59 54 4f e4 75 46 a7 33 d0 23 f9 ad 04 ad 9b ea 31 48 a1 b8 e3 73 99 32 64 c4 21 46 06 b2 5c 3d 05 40 de 02 22 80 72 0b 91 7e 6c ee 38 60 72 79 43 40 68 4e e3 16 b3 34 aa c5 c8 c1 54 eb b9 39 23 7a be fc 4e c3 6a 7e 23 00 1e 1c e1 7c fe 32 e0 b3 d6 1e 0b dc 43 67 4a f0 03 b6 b3 91 af 6e 78 5b af 92 f4 d0 c2 c3 e7 b5 b6 fd 83 06 63 e6 04 bf bf 90 1b f5 c7 6b 3d 7c 4a f3 a8 03 0b 0a 41 00 b5 22 8e 64 81 9a 0f b4 0e d4 73 5a 94 32 38 2a c8 b4 54 2e 6c a6 49 1f a8 6b 64 ea 9e 08 fb fb 52 22 6c 01 e4 93 ca 38 b6 bd b1 b2 2d df 10 ba 95 10 b9 0b ca b1 ba 36 b9 0e fd 7d e5 10 50 40 41 4f 49 dc f6 30 27 a0 8b d1 ed df 10 7e 5c 8c f3 0f b7 7c 45 b6 7f 20 Data Ascii: 3d#Ly"!yQE@9l>4YTOuF3#1Hs2d!F\=@"r~l8`ryC@hN4T9#zNj~#\|2CgJnx[ck=\|JA"dsZ28T.lIkdR"l8-6}P@AOI0'~\\|E
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 69 85 e9 45 85 05 e5 4e 17 d1 08 bc 55 a1 21 4d 4a 5b 9d 12 3a 32 26 b5 19 90 ac 31 ca 3e 35 e3 21 23 ed 7f 47 13 5e dd ee dc d5 49 8c 85 7c 8c d9 d3 c2 34 db 68 59 fa e4 1a 99 ab b6 9d ba 2c 30 e9 ea b1 49 a4 00 66 08 b6 08 4c 07 fd e3 a2 0a af 25 4f 08 82 d0 ce e5 71 96 21 48 6b 73 49 56 58 6d 0c 46 20 91 be b4 ca 47 20 82 60 6b a2 bd 91 91 b2 42 17 54 e1 74 67 7d a6 b1 27 5f 3b 40 7a e7 80 2d 72 0e e0 41 2b 43 45 c3 00 1b 0e 3b 9f 6e f5 25 d3 f2 25 fe 9b bf 9f b1 36 68 04 15 40 98 9e 63 c5 01 30 d5 00 6e d2 9c 62 d4 36 2a e6 c8 2a e2 5c f8 20 01 bc 64 e5 0a 68 49 dc 9c c3 63 5e e0 68 d8 49 79 69 31 5a be 0a 56 8f 40 9d 53 bf be 36 5a 7f 55 6e 28 e0 aa 47 f7 a0 d4 e1 1a e6 03 28 b0 c7 00 78 b1 de 22 81 31 c4 51 41 ce a5 ac f6 83 4f da 9f 38 0d da 26 80 Data Ascii: iENU!MJ[:2&1>5!#G^I\|4hY,0IfL%Oq!HksIVXmF G `kBTtg}'_;@z-rA+CE;n%%6h@c0nb6**\ dhIc^hIyi1ZV@S6ZUn(G(x"1QAO8&
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 37 da 10 79 42 ee d1 63 01 e9 d6 32 bf cb 42 e7 ad e5 72 2e bb 27 fa 7c de 19 d8 53 93 d4 74 47 9e 88 44 7b d6 28 e6 5f e5 95 d4 fe 0d 7d 38 36 4e 64 75 8f 6d 9f 7e 03 b9 b0 94 52 95 e1 e2 f0 e3 2c 98 36 95 f6 95 ed de a5 96 c5 62 6a 3f 58 2f 52 66 33 30 2e 8f 07 09 81 ba 45 8a 25 20 e9 b5 de 38 4b 92 d4 c5 f6 88 df 8e 78 ef e7 55 a9 e7 08 bf 74 f6 85 c2 3e ef a4 aa fd be 03 d0 47 ab 0b fb 45 1f 4f 05 9d fd d9 60 d0 eb 09 88 b0 dc 56 90 5b 98 eb 9e b6 0c f2 db 6e bd 0f 1c f8 cc 84 9f e2 fe 79 41 f3 23 f1 0b 6f be 79 7f db 46 d8 f5 db 60 e8 93 07 ed 27 54 70 ee 6e 7d 60 d4 a1 29 93 3a f1 48 ea d4 dc ad f5 8c 58 4a e6 a2 b1 dd f0 42 e4 78 65 6e b8 87 48 a0 84 dc 84 36 22 b2 5a d5 6f 08 ca a9 94 a9 4d 90 50 56 5f 67 b7 4b 52 e7 b4 41 4f c4 51 09 0f 6a 74 35 Data Ascii: 7yBc2Br.'\|StGD{(_}86Ndum~R,6bj?X/Rf30.E% 8KxUt>GEO`V[nyA#oyF`'Tpn}`):HXJBxenH6"ZoMPV_gKRAOQjt5
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: e1 11 f5 e2 99 79 c9 45 47 00 51 a3 76 e1 dd 7a ca ae 59 d4 b1 ed 29 2b bb d5 58 dc 96 f6 82 8e c0 6d 76 dd 54 48 fa bc ef 9b ba 2a 83 8f 3a 82 59 5a 03 d0 10 df 52 8a f9 b4 34 69 78 87 02 2e c6 28 1d 7d aa 16 6c 2f 15 b3 66 ef 87 8f 93 35 99 43 ed 79 70 e3 91 28 77 bc 8d 99 e3 10 02 23 2b 78 a9 33 8e ab 2b e5 7f fb dd 50 fc c8 69 95 d1 50 96 0f 3e 34 89 29 33 6d 2d 8c c3 23 d3 11 1f 8c 4a 86 bd bd c2 29 0a 60 fc 07 6e 56 de 61 7d f6 0a 71 9b 96 be 27 3a 3d 6c 13 89 f6 49 94 64 40 ba 78 42 e2 c4 bb 67 ba cb 15 6e 50 95 fb 0a fa ef c0 a4 7a bc b2 7f 17 1e de 1f 7f f2 3c 8b ff 71 0a a0 42 68 6c c8 26 4b 87 67 78 d3 18 97 5c 34 86 d0 97 0f a3 41 2e 76 72 cb 83 c1 5b 7f a3 30 d7 33 ac fd 0d 35 05 0c 01 bc 01 b3 98 b1 50 6e 15 8a e9 cd 6c 1d be a5 8f 80 16 01 Data Ascii: yEGQvzY)+XmvTH*:YZR4ix.(}l/f5Cyp(w#+x3+PiP>4)3m-#J)`nVa}q':=lId@xBgnPz<qBhl&Kgx\4A.vr[035Pnl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49818	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:29 UTC	944	OUT	GET /media/wysiwyg/fond-commerce.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:30 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 50230 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "+4G0elxnspPfjEYi98UnFFCbkSxPyY9AMC+OE2Rco/s" Expires: Fri, 24 Oct 2025 12:14:02 GMT Fastly-Io-Info: ifsz=199044 idim=490x490 ifmt=jpeg ofsz=50230 odim=490x490 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016281f79f1508468bf7781cb1ae5c-f1baa373a0fc702e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72147 Date: Fri, 25 Oct 2024 08:16:29 GMT X-Served-By: cache-par-lfpg1960097-PAR, cache-dfw-kdal2120035-DFW X-Cache: HIT, HIT X-Cache-Hits: 7, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 52 49 46 46 2e c4 00 00 57 45 42 50 56 50 38 20 22 c4 00 00 90 64 02 9d 01 2a ea 01 ea 01 3e 6d 2e 92 46 a4 22 a1 a3 2b 95 6c e0 80 0d 89 4d 69 34 98 f7 fa 24 ab ac 02 28 03 64 71 57 15 df af 89 bf e1 dd ff 68 7d 38 fb 5f e8 bd 31 f9 7f c8 df b4 fe 1b d7 5a fd 8e bb ff 37 99 af b9 ff 5f ff 93 ef 03 e7 b7 fb ef db 9f 78 9f da 3f d0 fb 05 7f 5c f2 ee fd af f7 99 fe 1f fe e7 a9 5f ea df ec bf 76 fd e6 3f f2 fe df fb e2 ff 31 ff 1f f2 33 e4 2b fa 97 f9 5f 5c 7f 57 af ee 7e a2 5f c6 3f d0 7f dd f6 a8 ff e7 fb c7 f1 0d fe 03 ff 67 ee ef b6 e7 ff ff 60 0f ff fe da 3f c0 3a 39 fd 33 c9 47 d1 7e db 78 5b f9 97 d7 bf 9f ff 0d fe 87 fe 9f f8 bf 99 df db f2 a7 ef 7f de 7f f1 ff 57 ea 57 f3 9f c5 df be ff 17 ed 9f fb 6f fb 7f ea 7c 9f f9 47 fe 4f f9 6f c9 df 90 bf cd Data Ascii: RIFF.WEBPVP8 "d*>m.F"+lMi4$(dqWh}8_1Z7_x?\_v?13+_\W~_?g`?:93G~x[WWo\|GOo
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 13 7d 6f cb 61 75 a3 ab 2d 60 ee e4 7f 9b df 0e 22 7b f9 6c 75 ed 1c d4 d3 16 04 80 20 96 40 2f 08 33 33 5f a2 2e 9a 95 7d c0 0e 82 54 2c 35 33 fe 70 f7 51 aa cd 2a c5 f1 4c 91 88 50 78 da ad 32 1e 06 61 98 59 78 e2 8a 8a 8a a0 21 44 42 f5 1c 1e 39 c9 f2 aa 24 80 d5 2b f1 11 e4 51 5f 7a de 46 dd b7 ac f4 1a da 69 ca 0e 06 16 39 56 68 70 a6 9d bc d6 ac 5f 06 0a 43 c4 e1 17 f4 c5 96 b2 93 93 44 4e 59 65 29 67 37 66 e5 4e 0c f7 c7 63 27 91 bb d7 f3 24 24 ec 32 2e 2a e2 ca 54 c9 4c a4 b1 32 81 bf 19 ad 71 11 98 6a 2e 3c 7c e4 85 71 a4 2c 9c cf 03 83 55 8d 92 4f e3 4c 84 7f a6 f6 a8 2f 2d dd 83 68 2d e9 bd c7 ac 90 14 28 d3 8d 88 f0 81 dc 43 9e 1c 99 f9 ec 09 0d 6f 62 7e 99 95 75 ef b0 7c 4c 68 b5 5e 8b ab 82 b0 02 c3 2d 14 d2 5c 41 7e 01 db 9d 63 e5 a4 60 bc Data Ascii: }oau-`"{lu @/33_.}T,53pQLPx2aYx!DB9$+Q_zFi9Vhp_CDNYe)g7fNc'$$2.TL2qj.<\|q,UOL/-h-(Cob~u\|Lh^-\A~c`
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: bd 67 c9 ef cf 4b 9a 0d c9 8d 69 c1 34 82 5d 1b ad 2d 80 8d 9a fd 60 34 7c 20 4c be e2 b4 b0 ec 66 18 36 69 7e ab 55 49 ad d3 a4 68 bd b8 24 1e f7 ef 79 c1 14 78 eb 20 e4 c3 08 2d 8d ac a5 8c 4b d7 80 9d 8e 60 a6 2d c2 dc 3c 26 9d 36 4c 7c 05 51 0c 16 be 00 67 f0 ee 92 b6 71 20 ce 0e 5a 11 3a 16 b1 53 28 9f 9c 5d 97 e3 e5 47 c7 b4 6e f1 37 67 7e f6 f3 8a ef 47 33 44 fb 1b 9d f7 88 00 b6 ce d8 4d 10 56 31 5e 67 c9 f2 75 3e 8c 41 59 e5 ba 7d 2d c2 c7 7b a2 d3 f4 27 02 95 0f 87 c0 42 86 2f 28 e0 83 e4 73 03 6a d4 7f ab 80 15 5d 19 9f f6 a2 29 5d 31 44 03 65 d6 1b 56 95 8a 5d 6d 4d 0f 80 63 12 bb 01 c8 d0 fd df 4e 93 f4 9a b9 49 62 25 df 18 9f 15 85 4f 1d 12 ca a9 0b 9b 84 15 e3 89 47 10 c3 95 d3 e9 cb e8 75 35 cf d8 df 01 4f ee cc a2 5f 4f 0c ca d7 4e 27 28 Data Ascii: gKi4]-`4\| Lf6i~UIh$yx -K`-<&6L\|Qgq Z:S(]Gn7g~G3DMV1^gu>AY}-{'B/(sj])]1DeV]mMcNIb%OGu5O_ON'(
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 7b 02 1e 78 75 2a 71 e9 ea 17 a1 b0 6f c8 88 38 fa 61 3f 5e 60 05 2a d9 a7 d7 c4 84 c6 bc d9 12 e7 08 80 a1 7e c4 59 35 0f 0a ca 64 21 0a 78 51 fb 10 9d af 8f a3 97 08 ca 31 ea 97 bc 37 16 5f 54 eb f0 47 6f a5 81 89 21 50 c4 66 f3 3a 4f a6 a7 6c 19 31 4e 0e 35 84 f5 1a 7e 15 ab e8 99 95 15 9f b2 da e1 dc 96 0d d2 fd 76 59 75 32 ab 1d fc 37 82 61 f8 7c c5 07 b4 1c 25 54 ba 3f ac 77 fa 6e 83 76 3c 6e 1c a2 6a 5b 35 d8 06 eb eb 2c 28 44 37 a6 bf 4f e2 b0 59 84 18 22 34 bd 1c e8 0a a7 22 10 e7 c2 77 4c ec d8 e0 6e ac 63 da 2b 01 4f 36 ab 62 67 9c 5d 10 d3 b2 6a 84 b0 d4 97 6f 94 b8 fd cd 6a 59 45 0d 48 85 2f 42 0a ab a5 a4 1c 20 c9 5c a8 b5 25 92 0a f6 34 03 94 a9 cb e0 66 88 71 91 d5 f2 7f 7b 92 e6 bb 60 bc ac e4 ea 1c e0 d6 a0 34 f9 1c 25 9e 8a be 96 d8 f6 Data Ascii: {xuqo8a?^`~Y5d!xQ17_TGo!Pf:Ol1N5~vYu27a\|%T?wnv<nj[5,(D7OY"4"wLnc+O6bg]jojYEH/B \%4fq{`4%
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: d1 f7 b4 e8 f0 6a 1f 74 dc ca f9 3b 45 2f 34 3e 16 de 63 42 7a 10 36 f4 0c 92 9c 3a 75 11 be f9 56 17 14 a1 63 4d ed f1 67 a0 da 47 a9 40 94 3e da 4c 89 9e 1f 69 32 eb 6d e3 7c 19 88 1e d3 1c b8 8e f5 57 e2 dd 89 55 b4 ab d6 58 c6 8a 79 02 46 0b 10 1a 4f f2 3b ac 98 90 56 c3 b6 0d d2 89 75 f5 e0 7d c9 1b 48 b0 b4 d5 8e 18 07 d7 8c d8 75 06 13 4c 2b 87 1b 93 32 c8 cc fd 98 f8 cb 01 0d eb 22 47 e6 e9 5b 9f 46 e2 86 39 09 50 ce c2 d4 7c 56 3f 47 a6 a1 5b 50 25 c9 b1 68 56 6d f1 98 73 88 3b 73 3a 71 4d 15 ae 79 cc 2f 4d 34 6f 5d 40 d8 03 a7 f4 0a 39 ac 64 7f 60 80 be 55 2b 2d 6f 5f c2 c6 36 a9 f4 8e 3f a9 5f 50 b8 d2 09 40 05 4a e4 6c c0 b6 5a 09 80 67 14 fd 44 25 b6 96 c5 22 84 20 f7 c4 74 7a df a5 ac 29 97 14 9c 5a b5 83 d3 a2 fa 17 f2 91 fe 6c 7d ac 97 b2 Data Ascii: jt;E/4>cBz6:uVcMgG@>Li2m\|WUXyFO;Vu}HuL+2"G[F9P\|V?G[P%hVms;s:qMy/M4o]@9d`U+-o_6?_P@JlZgD%" tz)Zl}
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: db a6 f3 52 99 60 2c 05 52 8b 92 cc 55 4e 25 9e 93 15 01 ee 9e be 1c 3e fe c8 5c 9e 30 d9 47 a8 8f c3 86 79 c9 b5 4a c0 d2 09 6c 12 4f 96 21 fd 68 31 da 0f c0 a8 ee b0 6a 76 4d 87 7c cf 08 47 c5 a1 55 91 34 5b 01 3b 7d 79 0a d9 f6 7d b3 ba 50 ae 4b 63 2f 9f 9d f6 87 9a 1e 4e 74 5f 87 e4 ed 76 fd ec b7 76 2c 1d 2e 41 e6 af df ac fe 71 96 45 b9 9a 14 c0 c4 3b 4a 66 f8 af ac 23 18 31 52 22 15 70 5a d4 7e 34 fe e6 3b e0 4f b1 1a a7 0f 05 50 f4 e8 0d 2f 51 a8 90 e3 06 2c 1b 1b 44 b1 dd f6 c5 23 a0 bb cf 9f 4f 9a a3 bb c2 78 41 01 1f d1 ec c2 96 a9 5a c6 0a 4d 41 63 de b9 39 31 3c d5 67 cb e3 22 0a 83 60 5e ea 8c 5e e7 b0 4c d2 a2 b3 09 6f e6 1c 29 1d 18 c3 c3 18 1d ff 25 37 61 1b bf cd 1d 7c 67 c3 0f ee 42 dd 83 b4 e8 6c 9a 8d 76 6c d9 f8 ff 03 67 60 4e 0a 82 Data Ascii: R`,RUN%>\0GyJlO!h1jvM\|GU4[;}y}PKc/Nt_vv,.AqE;Jf#1R"pZ~4;OP/Q,D#OxAZMAc91<g"`^^Lo)%7a\|gBlvlg`N
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 71 b6 36 27 87 a1 c1 76 ca 06 64 ec 7b d8 5b 71 ad 6f b0 6b 14 06 43 7a 6b 90 e4 55 0f 36 0d 45 7e bc d5 1a 30 a5 78 07 26 92 a2 51 31 fb 1a 55 0c 59 ef 14 99 1d c0 2d 48 83 a4 a7 6d 9e 0e 69 ed c3 8a 97 55 d6 f6 90 42 2d 07 74 c9 44 01 2e 5a 98 18 41 ca 32 cb 41 95 cd 26 b8 41 b3 21 d4 8b 46 8d a9 f7 1e 95 ce 4b d1 cd c3 b4 bb c9 5e 00 71 73 3b 1c 89 b2 d1 40 e7 fd 44 5a 8d 6e c1 f2 da c7 ec 57 4a 25 09 5a 1e 97 63 f9 b0 4d 38 7b 5f 62 8a 7c 37 7c 45 03 74 ba cc 44 30 2f 61 0f 39 f3 84 7e 42 b8 4d 58 f7 fb f1 d7 3c 9c 8a 92 db cd 9a 64 1d 5c 1c 7f 20 e2 88 35 24 04 c5 dd 1c e4 43 98 12 eb 38 49 f0 a5 bf 21 11 8c c8 1c ab b0 b1 09 d9 46 a9 20 d1 d6 2c e3 63 73 8a f5 76 87 cf c5 db a6 fb fc 76 9f 87 89 65 88 c5 90 bb 16 b1 8f 6a 78 a1 d0 e2 86 df 19 12 47 Data Ascii: q6'vd{[qokCzkU6E~0x&Q1UY-HmiUB-tD.ZA2A&A!FK^qs;@DZnWJ%ZcM8{_b\|7\|EtD0/a9~BMX<d\ 5$C8I!F ,csvvejxG
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: b2 af 56 1a 98 2e fe cc 00 6f 56 ca 43 c9 1d ce 0d 65 a7 81 0d 22 c7 80 51 dc 37 1a 1d 8e 64 14 b4 6e 81 58 f5 78 34 d3 55 8e cc 7f 20 60 12 1e f5 62 f4 2c a1 ed e8 c0 e1 8d 9b 9f 2c 7d a2 05 36 10 db 22 6b e0 60 90 b3 7c 1e 24 53 92 d7 35 0a 42 54 aa 45 07 52 41 0e d0 0c 3f a9 82 8b 96 91 ac fe 56 c3 66 50 8d a5 53 7f ab 63 9f 46 d9 66 c6 b2 0e e2 e5 08 fb d3 8a 21 c3 11 2e ef b9 80 b9 12 7e af 25 ae 64 f9 8c ca b9 50 64 34 d7 55 e9 a2 c0 a6 df cb 50 26 02 51 b8 9f bf 53 dd 5b d0 55 2d 28 e8 eb f4 7d 25 69 d1 59 01 8f 56 c7 a9 fe 7d 8e 81 cc 64 32 c4 ea 9d 4a 71 52 fa 5e 54 75 dd 48 e1 d6 85 75 9a b3 5e 09 34 60 b7 06 5a f0 72 e7 04 3d 5a 72 c3 ca 80 61 13 bd b9 fc 8a 46 66 59 10 56 29 ad 46 69 dd 40 b1 73 4f 05 c1 a6 66 09 5f 40 5c 23 62 fb 97 95 69 73 Data Ascii: V.oVCe"Q7dnXx4U `b,,}6"k`\|$S5BTERA?VfPScFf!.~%dPd4UP&QS[U-(}%iYV}d2JqR^TuHu^4`Zr=ZraFfYV)Fi@sOf_@\#bis
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 83 07 27 7f 43 b5 6f 97 96 18 2a 8c d3 4d f3 9e 69 d6 04 d5 4d 22 48 d5 cf 4a a4 2b 59 17 1d 22 d4 e1 9f a3 12 e7 cc 40 69 35 ce 5f 01 cc 7a 82 c5 30 85 ec fe f4 3c f2 18 05 73 e0 78 62 d4 f9 71 a8 ba 1b ee c3 8b b8 d9 c8 03 8c 3f 22 8b 77 6b be 26 25 95 37 ba be c4 44 99 cc d2 d6 5b 14 e6 a3 3a cf 9f 09 17 ac 0d 77 83 8a b5 b2 2b 2f 61 4a 3f c5 14 5a 36 4c 27 3f b1 cc d5 77 a4 87 30 5c 71 42 02 1c 15 8b d8 1e 71 80 91 d5 00 d8 69 f6 eb 28 dd 96 ac 12 67 a0 e7 ca 8c 05 69 21 54 79 9a 5c 4a 5f 02 7a 43 a2 d4 94 19 68 2b 4e 6a 60 47 e5 66 1a 28 f6 2b c4 37 62 04 0b 61 76 bd cd 19 de 17 8d 57 60 27 68 34 de 55 f9 62 91 f5 54 6b af 97 d2 41 cb 32 70 b8 99 bb 12 89 bc b0 33 6c c8 13 89 9b 2e 5c 3a 4c a4 e6 69 bd 1f 7a f7 20 bc cf 0c da eb e4 31 e3 ae 73 23 6f Data Ascii: 'Co*MiM"HJ+Y"@i5_z0<sxbq?"wk&%7D[:w+/aJ?Z6L'?w0\qBqi(gi!Ty\J_zCh+Nj`Gf(+7bavW`'h4UbTkA2p3l.\:Liz 1s#o
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: e4 8f d1 ee bf 4f 33 e3 df 1c 72 71 35 ae 02 05 02 45 05 84 03 d5 da 1c fd 14 20 78 e2 fa ef 94 8a b5 f6 83 d8 f8 fe d3 88 33 e5 f7 e9 fd 68 ea df 70 4f c1 a3 31 e3 72 e6 25 4f d5 29 c8 b7 fe 63 40 7b cd 28 0e bc d9 7e 92 6e c3 cd db c1 b2 21 30 93 dd 8a 7f d0 d2 66 38 92 86 ae 14 35 31 14 08 6a 5e 14 d5 69 ee 52 1d 5c 00 18 f0 c0 41 4b 49 79 2a 64 02 56 09 8c d5 86 b5 96 5c 7e 75 0b be b1 55 e6 d2 e0 6f fd 6d 46 80 7f bc af ba 31 42 f2 39 4a 9a 7e 49 e7 62 3f 44 28 a0 c0 3d bb 75 f8 c9 18 63 b4 0f 69 87 1a 10 30 f7 2f 41 9a 84 d1 0e a9 b2 f6 11 d2 0c 66 80 13 1b ee f4 90 db 80 b2 0e 69 24 30 60 c3 c3 81 56 11 ec 6b f7 7f 0b fc 33 2f f1 cb a6 05 2b f9 1e 35 54 a9 73 37 27 ef bf 96 eb e0 10 76 75 1c f7 1f 53 fe eb 3a c6 b3 a9 e7 2f 03 56 08 60 52 ba 82 86 Data Ascii: O3rq5E x3hpO1r%O)c@{(~n!0f851j^iR\AKIy*dV\~uUomF1B9J~Ib?D(=uci0/Afi$0`Vk3/+5Ts7'vuS:/V`R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49816	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	939	OUT	GET /media/wysiwyg/conseils.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:30 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22386 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "vWCa6hPZ6ce+O8aY2IAQCkxnxV9+EQL1AX8Y+dUUVbs" Expires: Fri, 24 Oct 2025 12:14:02 GMT Fastly-Io-Info: ifsz=101459 idim=490x490 ifmt=jpeg ofsz=22386 odim=490x490 ofmt=webp Fastly-Io-Served-By: img05-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016281f5b7e985bcb65bba7c308cb6-c1f15b282c4066aa-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72148 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960078-PAR, cache-dfw-kdfw8210128-DFW X-Cache: HIT, HIT X-Cache-Hits: 7, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 52 49 46 46 6a 57 00 00 57 45 42 50 56 50 38 20 5e 57 00 00 70 ae 01 9d 01 2a ea 01 ea 01 3e 6d 32 95 48 24 22 a2 31 26 33 0a fa 20 0d 89 67 2d aa 90 49 2e 6a 87 e5 f8 f3 d2 1a c6 e5 69 73 f8 c7 6d f7 0d f3 fb c6 bf 63 be 1d 4d f8 57 7b ff 54 3b 8a 7c d2 79 a5 fa 85 de 8e f4 13 fd 99 eb 92 c7 e0 98 b7 97 f5 db f9 ff 4c 26 5d fb 81 d4 ef c5 7c fb f7 0f fb 8f 88 ee 49 f6 df f6 9e 62 f7 f9 e1 6f ef 3f ef 7d 81 38 8b e4 db d6 3b fe 9f 34 bf b3 7f d0 f6 1b dd 80 2f 1e a6 10 27 80 0a 21 c7 64 75 41 93 68 1c 4a de 35 e9 38 09 7b fe d8 0f b8 01 86 46 75 6b 75 bb 03 b0 c6 0b 65 e5 51 25 d9 70 41 ba 3f f4 1e d7 96 16 f9 5d ef 1e 62 48 95 74 96 0b 26 a3 f6 f2 c0 ae d1 dd e9 a6 e3 64 f6 a3 89 63 a1 34 bc 9b e9 a2 cc d2 90 48 89 0a ca 0b 9c 74 12 19 dd 69 97 a5 e7 9b Data Ascii: RIFFjWWEBPVP8 ^Wp*>m2H$"1&3 g-I.jismcMW{T;\|yL&]\|Ibo?}8;4/'!duAhJ58{FukueQ%pA?]bHt&dc4Hti
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 7b 8e fb 43 8c b7 11 d5 d5 e3 a5 1b 75 e7 9c 6f e1 86 8b bd 0c 63 eb 8e 2d 3c c1 b8 aa db 56 ec b8 7f 13 12 6f 10 52 45 92 4c 4f 59 88 63 11 8e 12 44 2c 9e 5b 60 51 9f bf 8c 6b 54 04 7b dd e4 f7 c3 bd bc 37 9d 63 99 6f 1a 8e 2a d7 30 d0 8a b6 00 f6 94 c1 fe 15 21 19 b2 e9 3b 9e e8 32 17 62 3e 5b 5b 24 68 f2 0c a3 6d 62 c4 91 de d2 de 1c 95 8f a1 22 c7 00 2b a9 77 05 a5 d6 54 d4 08 4e 93 03 3e d8 0d b7 08 4c b1 91 a8 bc 07 4a 03 69 3b 6f 21 d5 81 76 30 ed 1a 31 ad 06 a7 c9 90 5e 9f f5 36 b2 82 6e 30 05 89 a7 dc 20 8e 2d f4 1d 2f 65 8f e7 4f af 46 23 c6 80 90 bf fc 17 59 2b 91 65 08 b2 4f 38 56 71 49 4c e1 9a 79 f2 80 4c 4e 2c db b0 1a a6 70 29 d9 62 0f 85 e5 54 56 cf b8 7a 66 1f 6d bc be c4 af 1f 79 33 25 bd d7 1d 80 42 fb 84 3a cb 6c 0c 6e 45 01 81 08 e0 Data Ascii: {Cuoc-<VoRELOYcD,[`QkT{7co*0!;2b>[[$hmb"+wTN>LJi;o!v01^6n0 -/eOF#Y+eO8VqILyLN,p)bTVzfmy3%B:lnE
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: eb 84 7f 44 86 84 db 4d 51 5e e5 3a e9 f9 47 18 38 45 9c 2d a8 6f cb ed 44 24 aa 0c 83 fc a4 c7 5d 7d 2d ac 0f 2b 01 b9 7d 69 b5 7b a7 56 04 fa 2e 87 cf 75 61 90 32 cb 7e 34 44 2d fe d2 dd e3 89 2f e7 18 6f 51 cf e4 a8 c7 88 98 73 82 ad 8c 38 35 35 06 2a dd 11 a7 ba 90 58 f2 3b 69 9e de 27 ef d0 49 dc 6e 46 7c 30 c6 4e af e6 16 6e 8a dd 78 ec 74 a0 1c d3 a0 94 82 3b 70 ad fd 42 d1 64 e9 56 4c 40 1a eb 0f 8c 6b a8 b0 be 80 24 ea 81 68 15 af a8 c9 d0 26 0f bf 94 c7 09 90 1a 10 2b 18 e1 c9 2c 21 88 68 ab 18 72 69 18 7f dd cc 2e bc 39 c0 24 a3 14 b3 7d 74 88 20 a4 e7 de 2e 23 00 b3 18 1e 73 1e c3 97 f0 d5 7b 1b 0e 00 93 75 0d 1c b7 de d1 99 b2 e4 b4 80 cb a8 6c 13 0e 94 90 da bb e3 07 d2 e3 85 77 68 24 97 1d 93 02 31 9a 2f 44 21 f9 59 28 4b 0f 0b c8 6c 48 97 Data Ascii: DMQ^:G8E-oD$]}-+}i{V.ua2~4D-/oQs855*X;i'InF\|0Nnxt;pBdVL@k$h&+,!hri.9$}t .#s{ulwh$1/D!Y(KlH
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: ec b4 d8 5f cf 40 42 c8 4f cc 89 c7 67 79 3d 23 75 67 3b 0e 28 fd 12 3b 3c c5 74 e8 00 02 45 63 d1 f5 30 7e 97 dd 9e aa b2 26 75 b7 59 42 86 5c 39 a0 6e 77 a3 9e 02 b2 c3 c5 27 3d 81 11 b5 09 5a dc ca f0 89 87 d6 66 fb 0b 52 21 d1 c0 fb 30 89 ad af 24 51 be 87 f7 f6 76 62 02 8d 55 36 65 b2 e7 56 61 df 30 e0 39 c2 c2 18 8c a7 55 08 0d 99 d0 da 31 e5 b2 b7 11 12 b8 6d 6a c1 55 97 9c fb b8 94 c4 f0 44 5a 10 cb ac 08 e2 4c 88 c1 1f af 97 21 8d bb a4 2d be 2a 49 b5 cd ff e4 fd dc f4 cf eb e5 fc 88 c3 08 db 26 c2 47 4c 44 40 33 a3 35 b8 f5 ae d1 cb b0 3b ee ca 0f db 5e 6a 9e 02 b5 7c ad 22 3c fa 85 39 5b ed 04 5f 59 58 0c 1a 19 3e 07 4a 65 6b 9f 20 1e b3 63 e0 e3 d3 98 ed cf 65 8b ca 3d bb cb b2 f6 fe c2 e1 9f fc be a3 fe 1d 4e 4c c1 d8 e9 29 e0 d6 2e b8 a7 98 Data Ascii: _@BOgy=#ug;(;<tEc0~&uYB\9nw'=ZfR!0$QvbU6eVa09U1mjUDZL!-*I&GLD@35;^j\|"<9[_YX>Jek ce=NL).
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 52 d5 3f 4c c1 a1 95 4e ee 75 45 5f 29 fc 89 99 35 f6 a3 92 24 a7 d8 78 15 7a a2 7d 00 26 7f 98 22 d4 fc 34 b3 98 8f 02 03 7a d6 bc 71 0b 28 1e 6f 09 93 6d 10 ee 4a 84 84 af b4 31 81 f3 31 d6 6c 1c e1 2f db cc 52 6f 35 c8 ac 7f f2 ee f8 fa 0d 11 65 19 ad b8 ac 4b 64 07 3b 22 fe 07 d3 12 93 6a 82 8d 92 ef dd 0e e4 20 d1 c8 5f c1 02 12 c4 5f b3 86 2a ae 82 03 e4 b3 3e 9c 97 87 8b 52 36 33 77 f5 60 91 9c 6d 03 9e fe c6 fe c6 a4 8d da 7d 97 82 f7 78 3e da f6 44 96 51 98 f9 15 0d 8e b2 81 c5 e0 c4 60 d2 f4 6a 28 23 b2 68 5f d5 42 17 6a 17 90 e1 2d 06 d0 63 f9 8f ef f3 62 84 30 55 dc 95 56 fb 6a bb 4b 83 41 96 a4 9a 42 12 e3 fa ef 6e 23 34 01 42 08 59 bf 30 17 fb c0 81 69 e1 26 bb 53 b5 a3 73 48 06 a2 b1 96 aa 55 d1 63 6c 2f bd dc 9e 4c eb 5e 66 c6 bc c8 4e df Data Ascii: R?LNuE_)5$xz}&"4zq(omJ11l/Ro5eKd;"j __*>R63w`m}x>DQ`j(#h_Bj-cb0UVjKABn#4BY0i&SsHUcl/L^fN
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 8f 01 83 61 83 63 32 be 52 e8 37 db 4e 57 32 d1 94 4b 48 f3 ac ae 7a 2a 3b 65 ae 66 8a 31 d7 e1 4c 5e 49 5b 04 5c 2a 29 5b 47 96 1f 1d 4e 4b cc 2d a9 f9 75 c8 af 7d 95 e7 74 c8 f2 04 4a c7 5e 54 ce 83 56 0d cf 1d 14 f4 e6 97 b4 3d 8e e7 ad 24 55 e3 49 3a ec 7a 78 6f 70 54 0f 4a bc fa 72 12 4c 89 49 16 5a 1a 84 23 cb e5 4d a2 23 8a 93 0f 0d f1 34 ad d0 6c 98 79 cf c2 20 cd 5a 67 92 04 6a ee f6 bc f5 7a 58 6c 3c 3d f9 c9 a0 c9 67 e1 f4 1a 7f f7 f4 de 34 d5 78 a1 3a 52 0c 1d d2 52 92 ff 2b 41 6b 8f 80 01 65 62 09 64 ff e9 3b 33 e3 01 7b 54 0a 61 7d ff 71 7a c0 32 86 8f bf c7 2e 13 f4 af 79 1b dc 7c 5b c5 eb 1e 19 3e 80 32 f1 f2 f1 81 69 5b 81 60 49 1e 6c 99 c0 93 9a 32 77 4e 4f b7 cc 1b 4a 4f f6 b2 fc 06 6f 57 dc 37 8a be fc 80 c0 98 9f c4 17 b0 7a db 63 2d Data Ascii: ac2R7NW2KHz;ef1L^I[\)[GNK-u}tJ^TV=$UI:zxopTJrLIZ#M#4ly ZgjzXl<=g4x:RR+Akebd;3{Ta}qz2.y\|[>2i[`Il2wNOJOoW7zc-
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: c9 db b6 35 03 e8 fa 26 92 e1 4f fa 59 d4 80 89 13 67 c0 24 f9 b9 7f f0 81 6a 7d 36 e3 9c 2d 0f 50 27 a8 ed 6b 05 25 b0 94 16 2b a3 de 02 f1 ef d8 68 b2 02 80 ef ff fc c4 89 86 2a bd b4 d9 22 6c 1d 01 74 e2 86 15 0c 51 95 f6 d5 a6 0f e5 83 a2 fa e3 65 86 3f 9d b4 ec dc 8b 18 2f 6f 58 b5 ee d6 0b 6c 4a c6 f5 3d 21 77 3e 41 30 5e ff 9a 9a 26 83 80 cc 3b d0 62 30 11 ea 2d 79 29 05 64 48 1c cc 90 d3 24 28 fb d8 cf 63 51 d6 ac ea 6e b5 b2 04 b2 79 93 6e 13 a8 d3 08 0c 75 26 af 24 d2 6e c8 c0 30 23 9c 91 ef 8a 6f a4 dd 09 e8 07 0f 0f c4 fb 07 d3 c8 c8 5b 36 2c a7 92 d4 32 4a 4e 0e a7 bf ad 76 e4 1a 8b 5f f5 5e d7 b8 6f f4 ae 05 cc 0f 5b 8f 4f b2 08 c5 90 c8 6a 04 c0 9a c3 36 87 80 14 24 a8 c7 84 78 0d dd 5d 87 3d 60 ae c1 7b d1 e5 28 98 0d 86 49 34 3b 6d 36 5c Data Ascii: 5&OYg$j}6-P'k%+h*"ltQe?/oXlJ=!w>A0^&;b0-y)dH$(cQnynu&$n0#o[6,2JNv_^o[Oj6$x]=`{(I4;m6\
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 4a d7 7d 69 be 2d 77 0d 2c e0 7b bf ad 93 f1 b0 8b 64 a9 af 78 6d ca 76 93 9c 16 9c 80 90 3e ce 39 f3 e1 b2 08 df 6b 55 d2 c2 a2 f1 cc b8 9a ef be 1a 9f 2b 5d ca 4f 2b 18 bb 51 48 09 7d 92 0a ad 35 85 07 e1 90 fb 0d 95 95 c0 0f a7 8b 3e 39 ee 79 b9 36 1c d1 f2 6f cb 39 d0 e6 e0 45 94 b4 1c ca 55 06 87 7a 30 33 b3 34 fe 72 77 ab 20 b4 56 fc 64 28 bb ff 7f 22 ac f5 e0 ab 52 c0 7e de e0 13 b0 22 c5 49 0c ec 49 68 09 6c e5 2c 40 2f fd 57 67 e5 22 ca 50 65 33 31 6f 6b 7c 04 bf 16 64 e9 26 38 5d d0 58 6f 96 68 b9 01 f3 ae 98 6d a3 3d 7f ec 70 20 c5 da 41 25 bb 8c 3f 93 54 4e 02 e7 af e0 63 b5 c1 89 96 6b 09 cc bf ec e3 2a 61 90 31 d2 2e 33 dc d0 ec 3a 77 42 0d 5e c2 1a bb 29 3b a8 56 d1 28 09 55 72 fd 2d a4 aa 16 1b c8 d5 89 4d 67 c9 58 80 19 42 18 ff 1a d5 b4 Data Ascii: J}i-w,{dxmv>9kU+]O+QH}5>9y6o9EUz034rw Vd("R~"IIhl,@/Wg"Pe31ok\|d&8]Xohm=p A%?TNck*a1.3:wB^);V(Ur-MgXB
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 84 a6 ce d7 1e 22 30 c3 9b 99 46 26 a6 43 5c ad b8 b9 49 fa 10 15 85 08 03 d1 0b fe 37 38 10 cd 98 d4 fb af eb b3 c0 e0 2d da 60 fe 48 19 3c 8f f1 ba b5 ac bc f3 74 f8 42 22 03 c8 bd a8 24 c1 e6 b0 4c b1 80 b2 57 f8 34 ad 85 b0 71 e9 57 1f 2f f2 35 e2 c8 cb 88 19 35 89 e8 5a c3 36 d4 cf 5a a0 66 69 28 c8 f0 19 51 2b ad 5e d7 c8 16 41 9c d9 b3 c1 97 9a b4 ab 81 d1 d2 3b e3 ca 41 c1 9f 6c 79 07 b2 a0 d7 a4 c6 f8 c4 b9 fb ae 2b 9a 98 4d a8 62 a4 09 0c 9d dc e6 03 79 d1 35 fc d6 88 9d 11 62 cf 05 9c fa 45 51 7b f6 97 b3 f1 b9 88 c3 9a 2a 7d 47 03 71 b2 e0 e2 2a 97 9a 09 5f af 1d 84 f6 02 81 01 de 9f ea 00 11 5f 61 8d 6d b7 17 91 53 56 03 d9 cb b2 4e d8 41 d1 4d a0 1c af 4f 59 ef cd 8b 7a b0 09 17 d1 e6 1e 05 ce e4 cb 9b 5e 92 e6 5e 5c 97 91 77 a0 e6 a7 60 1e Data Ascii: "0F&C\I78-`H<tB"$LW4qW/55Z6Zfi(Q+^A;Aly+Mby5bEQ{}Gq__amSVNAMOYz^^\w`
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 1f 7b 95 e1 13 b2 8d e4 7a dc 1b 40 52 23 ad 73 79 6c cd 07 13 03 31 c4 e7 68 c2 d7 85 e6 92 41 e5 0c 2f 18 84 37 ac d2 8e ce e1 f5 b5 cf 7f d9 11 ef 5e 3f d1 b5 fe 49 82 ef 48 0b 67 ec 84 9f b9 20 41 cf 59 43 60 b4 89 f2 de d0 77 13 02 8b b8 5d 89 98 40 81 62 76 29 e3 d2 cb cc b3 2f 23 be 3b 16 24 31 80 41 3c e3 45 34 c8 73 b2 22 b9 85 e0 72 2a 8f 7b 99 8b c9 6d db 29 d7 24 b4 0d 8a 3a 93 5c 47 07 47 1a 48 90 03 17 8c ff 73 f8 71 88 35 13 9b cd 82 ec b7 b5 aa dd f8 c2 07 1a 47 a3 f8 31 28 b9 0b 82 17 d7 e6 28 92 a9 fa ab 6a 30 37 7c c7 87 65 89 7b 8a 9d 28 d6 39 ff 88 75 34 d9 07 85 8c 42 57 91 6e d1 63 6a 05 47 65 52 0f 64 f5 7c fb a7 71 54 3d 1f ce 15 6a 39 98 41 d9 2e ba c5 e3 99 cb ff 79 c8 ef 1a e2 60 39 6a c4 21 19 37 e6 de 13 38 f5 bb a2 9a be 90 Data Ascii: {z@R#syl1hA/7^?IHg AYC`w]@bv)/#;$1A<E4s"r*{m)$:\GGHsq5G1((j07\|e{(9u4BWncjGeRd\|qT=j9A.y`9j!78

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49820	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	631	OUT	GET /media/wysiwyg/home/semaine-dvlpt-durable_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25297 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "3gNuBeIuaZMYHg0g8xBZeW3PuQJqpEJIn9Som95gbQc" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=103021 idim=490x490 ifmt=jpeg ofsz=25297 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-18016277e898c4a347f5f78c22507b5c-dbb6d2ab1d7cfdf4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:31 GMT X-Served-By: cache-par-lfpg1960044-PAR, cache-dfw-kdal2120085-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 30 9f cd 30 0b ea 8a 3b a6 98 4e 84 09 85 28 6a 0e 11 08 14 e1 75 14 11 43 74 41 44 03 a2 61 09 ee 88 b2 69 13 08 a6 db 92 42 e8 a6 a8 00 08 c2 57 e6 84 75 45 24 63 44 0a 3b 20 30 52 29 4a 6b 89 95 10 84 4a 5b a4 34 48 20 1d 21 01 ca 51 e8 90 84 02 11 48 a4 10 29 e8 9a 65 3a 6c 84 82 80 5a 12 3e 68 14 b4 50 82 6c 86 88 14 41 45 29 94 90 47 52 8a 76 e9 a4 25 ba 07 54 09 2b 25 1c 90 8b a8 0c 59 0d d1 41 02 4a 79 a2 81 d1 01 b0 36 48 04 00 b2 28 1b aa 28 c8 43 9a 05 21 09 ba 12 82 80 cc a5 ea 82 26 e8 a5 74 12 d9 19 45 0d d3 b7 42 51 44 34 ea 9d 01 04 50 6a 44 04 12 29 42 f4 39 91 4d bd d3 e1 02 11 0d 8d d2 48 ec 11 16 50 28 48 9d 82 70 40 80 10 02 9a 9d b2 64 19 51 44 75 41 c7 44 64 25 12 a0 69 16 44 10 91 8d 10 8e 48 11 8b a6 18 46 e8 6a 51 4b d1 02 51 dd Data Ascii: 00;N(juCtADaiBWuE$cD; 0R)JkJ[4H !QH)e:lZ>hPlAE)GRv%T+%YAJy6H((C!&tEBQD4PjD)B9MHP(Hp@dQDuADd%iDHFjQKQ
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 54 31 c0 f3 5a 81 f9 9c 1c 0e a1 49 5a 5f 65 43 9c 78 7d 17 59 84 25 94 f1 58 4a c4 67 a9 87 ef 0b 46 ad 8d 25 72 9c 2d ac 38 ca 6f aa e0 19 4c e6 25 c6 04 05 6f 87 e3 5b 57 8b e2 31 0e aa 00 7b f5 27 f7 4d 92 f3 58 97 80 62 48 6d 46 c9 05 af 31 ea b6 2b 57 2e 7c e5 b1 d1 62 70 ae e1 b8 ec 40 ef 59 90 b8 90 4b 80 df 65 bc 1d 87 7e 77 3e ab 03 1a 2e 41 b9 e4 13 c4 8b 98 3a 95 dc d6 96 10 48 b8 9b 40 53 71 7a 6e 7d 31 54 41 00 0b 8e aa 2c 0b e8 b9 b8 b7 b9 f4 da c1 48 06 8c c0 99 3f 9a 9e 89 7d 4c 03 e9 d5 00 41 25 a7 a1 59 f1 6b c1 9f c3 a8 d3 7b 99 e1 f8 6c 1d b2 e9 19 e2 73 83 8c 18 00 79 73 58 5c 28 77 18 87 34 99 02 72 90 16 f3 aa 30 d4 63 85 5b 13 79 d9 3c 45 da 54 3c 44 b9 ed 37 1b c7 c9 58 6b 41 00 19 9d 63 c9 32 90 6b c3 4e 6d 5d 7b e9 d0 a7 56 64 Data Ascii: T1ZIZ_eCx}Y%XJgF%r-8oL%o[W1{'MXbHmF1+W.\|bp@YKe~w>.A:H@Sqzn}1TA,H?}LA%Yk{lsysX\(w4r0c[y<ET<D7XkAc2kNm]{Vd
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 7a d9 b9 9c ae fa 8d 96 46 27 b0 94 c3 5d f7 7c 73 05 ac 2a 61 9a 47 bb 48 5b 03 b6 9d 98 76 9c 62 81 27 72 1c 3e a1 4b ff 00 14 70 07 b4 86 f1 8c 19 27 93 e3 ea b3 b4 f2 6e 6a 4f cf 3e ef 3a ad d8 ee 33 42 a0 34 e8 70 dc 46 59 b0 75 4a 27 cf 52 b9 ec 5b 78 ae 10 b9 98 8e 05 57 5b 9a 35 dc 47 98 95 ec 23 8b 70 da 85 a6 96 3b 0c e9 d6 2a 36 7e a9 d4 e9 d2 35 1e 5a 43 cb 8e c4 3b e8 b1 63 b4 af 18 a7 da 3c 25 18 15 70 9c 46 91 16 9c e1 df 50 b4 70 dd a5 e1 8e 7b 40 e2 15 d8 3f 7b bd a0 1c 3f f1 32 bd 42 bf 0e c0 d5 0e ef 68 36 20 cf 84 15 c9 e3 7b 27 c3 2a 91 96 9b 5b 37 b2 9d 15 5f 0f c5 78 7b fc 6c e2 98 02 f7 1b 0a 9d e5 38 f7 95 b7 8f c5 bc 61 b8 5e 47 53 ab 52 ae 1c 10 ea 6e cc c8 6d 89 07 97 25 c0 62 fb 28 69 93 dd be 04 98 95 d9 70 4c 01 cd c3 70 95 Data Ascii: zF']\|saGH[vb'r>Kp'njO>:3B4pFYuJ'R[xW[5G#p;6~5ZC;c<%pFPp{@?{?2Bh6 {'*[7_x{l8a^GSRnm%b(ipLp
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: c5 62 60 4c dc 17 9d 98 c6 ed bd ce 8b 94 ac f6 54 c5 d5 7b 1c 5d 4e 9b 45 0a 13 b5 36 72 fe 23 72 bc f9 5e de a4 9e 0f af a7 8f fb 7e 13 2c b6 f9 ac df eb 7a 18 75 29 4a 28 2e ef 92 12 92 16 48 99 28 02 50 88 37 84 89 ba 01 e4 92 5e 48 a0 60 52 34 a6 c2 52 50 7a 0f 61 71 c4 d6 c7 f0 c7 90 69 d7 c3 56 7d 30 74 15 32 16 98 e5 36 f6 5c af 16 a6 19 8a cc 1a 03 5c 5c 2d b9 61 ca 4f c9 47 c1 b1 a3 05 c5 b0 38 97 4e 5a 75 46 60 37 6b bc 27 ea b7 3b 47 46 9b 30 f8 20 d6 65 7d 3a 72 e3 33 9c 3d c4 ca e3 7e 5d 4c 7d 5e ec 3f 13 82 d4 c7 ad c2 ef 3d 9c c8 24 41 06 08 d0 ad fa 4f a5 89 c3 d3 0f 9f d6 87 53 a8 36 0e 69 cd 98 7a 1d 17 38 15 ec 1d 51 9d b4 9d 53 25 37 bc 4b bf 0b b4 0e fe 6a e7 8e f8 f2 eb 3a 39 70 9a b3 4f 53 6c bb 99 72 ca 78 73 52 ad 4d d4 aa be 9b Data Ascii: b`LT{]NE6r#r^~,zu)J(.H(P7^H`R4RPzaqiV}0t26\\\-aOG8NZuF`7k';GF0 e}:r3=~]L}^?=$AOS6iz8QS%7Kj:9pOSlrxsRM
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 03 ee b1 78 56 12 9e 37 89 61 a8 d5 fd 8c 9a 95 bf f8 a9 0c ef f7 02 13 38 be 2a be 2b 1f 8f c5 57 23 be af 58 b9 ec 16 6d 30 d1 02 98 e8 d1 65 cb 3e 79 63 8f ab dd c2 fc 9a 5a da be 58 ed 3d ea 0e 37 89 8e 0d c0 b0 62 73 bc d5 ab e5 9d fa fb 05 44 9f 19 5a 1c 76 8b 5b 89 e1 00 99 ff 00 93 a2 d0 39 06 89 3e e4 ac e9 b9 53 4f ae 7e ed f1 7c b4 b8 7c 7f 87 fb 44 a0 ca 47 54 d0 95 d7 57 80 46 a9 fc 93 01 4a 50 38 81 29 6e 84 25 36 40 89 40 94 0c a0 4d 93 60 76 4b 44 02 2a 05 36 5d b7 65 9f 4f f4 6f 15 6b e9 b9 e1 af 65 42 d6 89 27 c3 0d 1d 06 6d 4a e2 4e 8b af ec b3 6a 3f 05 da 2a 4c 2d 0e a9 86 a2 d6 b8 fe ec d4 bb bc 80 07 d5 63 52 6f 85 7a 78 4b b7 11 87 d7 f4 72 d8 86 b9 b8 aa ed 26 48 a8 6f cd 34 4c ab 38 f1 18 ea de 12 2e 2c 75 16 df aa ab 69 56 73 c6 Data Ascii: xV7a8+W#Xm0e>ycZX=7bsDZv[9>SO~\|\|DGTWFJP8)n%6@@M`vKD6]eOokeB'mJNj?*L-cRozxKr&Ho4L8.,uiVs
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 2d 2e 05 b0 49 36 11 bc d9 15 d9 71 27 9c 37 00 ec ee 08 40 26 91 c4 d6 b7 fd c2 5e c6 9f 3f 88 fa 2e 25 e6 41 9d f5 5e 83 da e6 8a 14 70 34 33 07 39 b4 04 b9 bf 08 d0 1f 53 1a 72 85 e7 d5 3e 17 79 2e 5a 5c fb 57 ce bd bc 67 cb f0 b4 ff 00 2e 1f e3 fb 34 3b 46 1d fa 7e 76 2c 69 f3 96 ee b2 d9 cd 6d f6 9d b1 c6 e8 ba 20 77 54 c7 f9 9c c9 58 81 4d 1e ed 6f 8f ef e1 ed 52 4a 50 80 4a 57 57 cf 3f 9a 6d 92 40 20 49 59 2d 90 d9 14 b5 28 24 12 36 28 87 48 4d ba 3a f9 a1 aa 04 0f 35 d4 70 57 32 97 09 e3 d5 9c 62 29 d1 0d e4 5c 09 21 be 64 c4 05 cc 45 d7 59 d9 dc 3b aa 60 78 c5 40 40 ee bb a7 09 19 b2 93 23 30 1c c6 dd 57 3d 4e e5 7a b8 3f f9 1a 7f 5f d1 cf e3 bc 38 82 d3 a8 63 41 3d 40 55 84 42 b1 8e 76 6c 65 62 1b 96 1d 10 6f 10 21 55 95 ac 7b b3 da 39 6b 59 75 Data Ascii: -.I6q'7@&^?.%A^p439Sr>y.Z\Wg.4;F~v,im wTXMoRJPJWW?m@ IY-($6(HM:5pW2b)\!dEY;`x@@#0W=Nz?_8cA=@UBvlebo!U{9kYu
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 7a ff 00 54 be f4 05 ac a2 c8 f1 ab a1 b2 21 c9 ab d4 fc f8 91 b9 4a 2e 88 80 02 6c 89 b2 03 29 b2 02 33 7b 26 b9 40 e3 7b a4 3a 84 ad 6d d0 24 22 97 24 ee 89 a2 e8 a8 82 7c 92 d0 20 94 a0 5a a4 35 4b c9 22 50 2f 20 9b 70 51 06 f0 52 2a 00 4d 93 49 94 4e 82 e9 a5 14 49 b2 00 a3 a2 6a 8a 76 b0 17 61 d8 ca 41 fc 4f 12 e7 8f d5 b7 07 53 bd 3b 06 18 99 f3 88 5c 7b 44 99 5d e7 62 8b 69 33 b4 18 a7 bd ac 6d 0e 1e 1c 4b 84 8f 8a d6 dc ce 83 73 0b 19 f7 6b b7 0d 25 e2 34 fd dc 9f 11 a8 f7 d7 2e 74 cb 86 63 3a f8 8c ac a7 9b 2b b8 ce fb be 77 7d 3d e9 00 d4 04 c9 0e 37 8f 4d 15 07 94 d3 9f 2e 3e c7 11 77 d7 d5 bf c5 5b 78 f0 6b 61 b8 36 21 c6 7b bc 1b 69 81 fe 2c e4 0f 90 ba c2 02 e7 cc ad c7 9a 8f e0 3c 3e c0 06 e2 aa 34 bb 90 b6 be eb 11 c3 2d 47 8f f1 15 30 eb Data Ascii: zT!J.l)3{&@{:m$"$\| Z5K"P/ pQR*MINIjvaAOS;\{D]bi3mKsk%4.tc:+w}=7M.>w[xka6!{i,<>4-G0
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 9c c7 00 29 33 33 cb 44 08 81 26 39 4a e3 fb 23 4b ef 5c 3b 8a d5 ad 46 9b d9 8c c5 12 f6 91 20 81 78 be c2 56 b7 69 71 bf a3 fb 3d c4 ab 31 c7 bd aa d1 46 9c 6a 5d 53 5f 60 13 fb 3d 40 61 38 07 0d a6 e0 73 3a 90 7b f9 97 3e eb 9f 5d 49 e9 1b 9f b3 be b5 a5 4b 09 83 15 69 3c e1 28 13 4d b9 19 34 db 61 d2 c9 f4 f8 57 0a a7 4e 85 26 f0 ec 36 5a 35 7b ca 7f ab 06 1d cd 34 bd d9 84 5a db ab 8c 7f c3 33 a6 8b a3 9d c6 79 29 3b 0f 43 0e da bf 77 a2 ca 45 f5 33 bf 23 40 92 79 ff 00 25 e7 3d b8 a0 e7 60 5b 54 53 9a 9d fb 19 4c e9 2e a8 64 c4 f9 49 8d 97 a5 56 88 22 6d 2b cd bb 5f 90 e2 b8 7d 12 09 7d 4a cc 60 33 f0 31 ce 00 9e 84 91 16 d5 73 d4 e9 3d dd 74 fa fd 1e 8b 4a a0 ee c0 c8 c0 fe e9 ad 3e 1d 40 0a 86 21 ee a8 43 6a 35 8e 60 6e 5c a4 5a 0f 45 69 d9 49 70 Data Ascii: )33D&9J#K\;F xViq=1Fj]S_`=@a8s:{>]IKi<(M4aWN&6Z5{4Z3y);CwE3#@y%=`[TSL.dIV"m+_}}J`31s=tJ>@!Cj5`n\ZEiIp
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 2c 08 ba 65 46 dc 79 2a 8a d5 48 ca 04 88 06 c7 9a 8c bf 2c 37 aa 7e 5d 06 bd 50 20 34 c5 ae 79 28 bb a5 cd 61 13 ce 13 db 56 d2 01 3d 55 5e f0 07 41 20 45 bd 53 81 f1 9f 5b aa 26 75 68 b0 09 93 3b ff 00 7c d3 06 52 2e 2e 99 52 5c e6 c5 ad 10 a0 79 81 20 5a 53 2a 19 ca 23 4d 50 0e 6b 9c 5b ca 00 4d 7b 60 b9 d7 81 08 ac fa c4 0a d0 d2 62 4a b3 4c 80 db 72 59 c6 d5 01 b9 95 a1 4c 00 d9 23 53 30 a4 2a 3a 85 b0 61 fe 4b 3a b3 b4 98 1e 7b ab b8 83 90 1b 0e 7f d1 54 20 10 5a 48 20 c4 25 21 94 41 68 a8 48 04 c0 81 a5 e5 46 ea 7e 23 2f 13 37 81 65 23 dc d6 54 31 00 c5 fc 82 a5 de 93 cf dc 28 d4 79 54 04 2f 29 12 61 2d 97 ad f9 e2 f3 b2 06 e9 4a 36 85 00 4e 6c ca 6e e9 c0 99 40 e2 81 8d 12 29 5d 44 28 e4 91 94 74 02 c9 6a 81 6c 86 a1 12 92 8b b1 b2 12 3d 12 48 6e Data Ascii: ,eFyH,7~]P 4y(aV=U^A ES[&uh;\|R..R\y ZS#MPk[M{`bJLrYL#S0*:aK:{T ZH %!AhHF~#/7e#T1(yT/)a-J6Nln@)]D(tjl=Hn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49821	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	712	OUT	GET /media/catalog/product/6/0/602960_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4758 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "13yo0uVGSy4HjItd37Jh0Y1OFE4CZW4wkK1fXXLM1Cc" Expires: Fri, 24 Oct 2025 12:19:52 GMT Fastly-Io-Info: ifsz=87456 idim=1000x1000 ifmt=jpeg ofsz=4758 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img06-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162d39026e528c068c5b09f632bb1-4b77957ea6bba507-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71798 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960060-PAR, cache-dfw-kdal2120144-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 56 cb 64 e2 a7 2a ab dc ff 00 44 a0 90 cd 31 ed e0 cf 3c 95 95 95 95 b2 dd 74 9d 3a 8b d1 e3 c8 01 a2 53 ef e3 9f 01 2b 2b 64 64 5b 65 36 19 5c 9b 45 36 45 0b 14 71 b2 31 69 7b 3f c7 94 6c 7e 24 77 70 57 a7 b4 1e 73 8f 72 cf 88 d8 a7 64 a7 0e ff 00 ba 48 f4 87 95 40 f6 78 07 0e c9 cb e1 1f b4 2c ea 4b cc 8c 8b 9e d6 d9 6c b2 b3 c3 08 a7 65 67 0b d3 dd f9 fc 12 8c 3e c5 1c ac e6 dd ad fa b9 52 15 fb a4 3a cd e0 a8 fb 59 cb ba a7 8f 77 e8 c5 d3 62 d1 8a 5e cf b9 4f 23 20 28 bb 3b c1 51 73 68 2a 35 6b 24 6b ef 52 de dc 08 58 c3 c2 8f e9 ce 71 98 d1 b1 4f 7b 9a c8 7a ae 36 20 10 46 ae b1 44 27 8f 73 55 3b b6 8b 9c df e7 85 aa d1 18 d4 74 d0 b8 0e dc 2a 19 c0 a7 b7 2a 2f 86 3c b5 32 60 79 cd f4 b3 df a3 1b 38 7c 2d 93 66 45 20 91 b7 23 29 ed d5 d6 d1 06 ad 57 Data Ascii: VdD1<t:S++dd[e6\E6Eq1i{?l~$wpWsrdH@x,Kleg>R:Ywb^O# (;Qsh5k$kRXqO{z6 FD'sU;t**/<2`y8\|-fE #)W
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 33 89 ec 76 56 1a 87 25 c2 82 04 d5 49 49 38 6d b7 99 e9 bd a5 9f 52 28 b1 01 17 49 11 6b c1 3e f3 6a b9 43 db 87 fb 16 02 4b fc 27 b2 71 e6 70 23 fb 8c 87 a0 7a f1 5d d9 2a 0d f3 8e 48 44 f6 9a 2b 0b c8 24 b4 5f c4 7f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 38 f3 cf 32 ef 9d f1 c7 cf 2d 00 ae 18 4c f2 e3 62 cc 2f f7 8b 2b 0d d8 e2 1b 32 8c 8b bd 9e 3f d9 73 25 43 65 33 e5 d7 23 fd 7b 85 45 7c f3 c4 d5 36 a8 85 7f 52 9c f3 cf 2b b7 c0 44 be 03 41 d3 cf 3c f8 ff 00 c8 f1 4b 9f 85 ef 3c f2 a7 4e f3 cb b6 bb 6b f4 f3 cb 1d bc df 3c 76 71 4b 73 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 ff c4 00 1e 11 00 02 02 03 01 00 03 00 00 00 00 00 00 00 00 00 01 11 00 20 10 30 31 40 21 41 51 ff da 00 08 01 03 01 01 Data Ascii: 3vV%II8mR(Ik>jCK'qp#z]*HD+$_<<<82-Lb/+2?s%Ce3#{E\|6R+DA<K<Nk<vqKs<<<<<<< 01@!AQ
2024-10-25 08:16:31 UTC	621	IN	Data Raw: 1a fa ff 00 90 a1 da 66 05 e6 c3 3e 2e 07 8c 65 e1 4e 3c fe ce 23 a5 01 5d ca 16 9a 94 b6 8d 7f 0c a6 96 63 c5 ab 1c 5a 0b 71 e3 b8 21 cd fa 92 c2 ec 1e fd cb 69 a2 9f 78 e8 29 25 89 c8 8d 19 38 a0 84 45 49 9e 0d d5 5c 58 17 01 99 48 ce d1 66 e8 78 96 a5 6d 4b 04 29 26 b5 a7 ec 89 9c fd ad 4c eb 17 1a 44 d6 fe 65 8a 0c 17 2e c0 59 df 04 ab 43 bd ed e0 f7 8a 5a 1e d3 fa 3c 12 20 27 8c 1d 68 98 34 8c b3 27 fe c6 52 5e 65 17 3a ea 13 78 16 7b 79 8b a0 6d a5 bd 3e 9a 8c a1 58 7d a5 df 32 ab c5 c1 10 4d 3f b1 9f 0d 36 be f0 45 e0 af 98 aa 78 7e d0 e4 dd e6 80 ec 9c 0b b6 e5 92 ed 6e 96 ed 79 8a 1b 10 b5 61 3f 53 a3 de cf 11 60 94 dc d8 74 77 01 9c bc 7f 33 01 58 d8 54 06 65 45 38 2b c6 66 27 74 2a b8 0a 16 fa 34 77 7e 91 58 ab 5f f8 fd 81 4f 24 3e d1 9c b7 8e Data Ascii: f>.eN<#]cZq!ix)%8EI\XHfxmK)&LDe.YCZ< 'h4'R^e:x{ym>X}2M?6Ex~nya?S`tw3XTeE8+f't*4w~X_O$>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49828	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	960	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Retif_AtomicDesign/vendor/swiper/swiper-bundle.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:30 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 143707 Content-Type: application/javascript Etag: "671a1fb0-9ae4" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016277f54ae9c39150e6a5904e595e-02c9c02b94145bef-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960057-PAR, cache-dfw-kdfw8210024-DFW X-Cache: HIT, HIT X-Cache-Hits: 79, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 38 2e 34 2e 35 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 32 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 32 31 2c 20 32 30 32 32 0a 20 2a 2f Data Ascii: /** * Swiper 8.4.5 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2022 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 21, 2022 */
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 3a 22 22 2c 70 72 6f 74 6f 63 6f 6c 3a 22 22 2c 73 65 61 72 63 68 3a 22 22 7d 2c 68 69 73 74 6f 72 79 3a 7b 72 65 70 6c 61 63 65 53 74 61 74 65 28 29 7b 7d 2c 70 75 73 68 53 74 61 74 65 28 29 7b 7d 2c 67 6f 28 29 7b 7d 2c 62 61 63 6b 28 29 7b 7d 7d 2c 43 75 73 74 6f 6d 45 76 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 29 7b 7d 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 29 7b 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 28 29 3d 3e 28 7b 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 3a 28 29 3d 3e 22 22 7d 29 2c 49 6d 61 67 65 28 29 7b 7d 2c 44 61 74 65 28 29 7b 7d 2c 73 63 72 65 65 6e 3a 7b 7d 2c 73 65 74 54 69 6d 65 6f 75 74 28 29 Data Ascii: :"",protocol:"",search:""},history:{replaceState(){},pushState(){},go(){},back(){}},CustomEvent:function(){return this},addEventListener(){},removeEventListener(){},getComputedStyle:()=>({getPropertyValue:()=>""}),Image(){},Date(){},screen:{},setTimeout()
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 73 65 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 5b 65 5d 3b 63 6f 6e 73 74 20 73 3d 5b 5d 2c 61 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 73 2e 70 75 73 68 28 61 5b 65 5d 29 3b 72 65 74 75 72 6e 20 73 7d 28 65 2e 74 72 69 6d 28 29 2c 74 7c 7c 69 29 7d 65 6c 73 65 20 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 65 3d 3d 3d 73 7c 7c 65 3d 3d 3d 69 29 6c 2e 70 75 73 68 28 65 29 3b 65 6c 73 65 20 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 65 3b 6c 3d 65 7d 72 65 74 Data Ascii: se l=function(e,t){if("string"!=typeof e)return[e];const s=[],a=t.querySelectorAll(e);for(let e=0;e<a.length;e+=1)s.push(a[e]);return s}(e.trim(),t\|\|i)}else if(e.nodeType\|\|e===s\|\|e===i)l.push(e);else if(Array.isArray(e)){if(e instanceof n)return e;l=e}ret
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 73 5b 73 5d 5b 74 5d 3d 65 5b 74 5d 2c 74 68 69 73 5b 73 5d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 65 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 74 68 69 73 5b 74 5d 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 74 72 61 6e 73 66 6f 72 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 74 2b 3d 31 29 74 68 69 73 5b 74 5d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 3d 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e Data Ascii: s[s][t]=e[t],this[s].setAttribute(t,e[t]);return this},removeAttr:function(e){for(let t=0;t<this.length;t+=1)this[t].removeAttribute(e);return this},transform:function(e){for(let t=0;t<this.length;t+=1)this[t].style.transform=e;return this},transition:fun
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 73 3d 30 3b 73 3c 65 3b 73 2b 2b 29 74 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 6c 65 74 5b 61 2c 69 2c 72 2c 6e 5d 3d 74 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 5b 31 5d 26 26 28 5b 61 2c 72 2c 6e 5d 3d 74 2c 69 3d 76 6f 69 64 20 30 29 2c 6e 7c 7c 28 6e 3d 21 31 29 3b 63 6f 6e 73 74 20 6c 3d 61 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 6c 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 7b 63 6f 6e 73 74 20 74 3d 6c 5b 65 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 7b 63 6f 6e 73 Data Ascii: f:function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];let[a,i,r,n]=t;"function"==typeof t[1]&&([a,r,n]=t,i=void 0),n\|\|(n=!1);const l=a.split(" ");for(let e=0;e<l.length;e+=1){const t=l[e];for(let e=0;e<this.length;e+=1){cons
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 57 69 64 74 68 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 6f 75 74 65 72 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 29 7b 69 66 28 65 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 73 74 79 6c 65 73 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 22 Data Ascii: pertyValue("margin-left"))}return this[0].offsetWidth}return null},outerHeight:function(e){if(this.length>0){if(e){const e=this.styles();return this[0].offsetHeight+parseFloat(e.getPropertyValue("margin-top"))+parseFloat(e.getPropertyValue("margin-bottom"
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 6f 6e 73 74 20 74 3d 72 28 29 2c 73 3d 61 28 29 2c 69 3d 74 68 69 73 5b 30 5d 3b 6c 65 74 20 6c 2c 6f 3b 69 66 28 21 69 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 69 2e 6d 61 74 63 68 65 73 29 72 65 74 75 72 6e 20 69 2e 6d 61 74 63 68 65 73 28 65 29 3b 69 66 28 69 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 72 65 74 75 72 6e 20 69 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 65 29 3b 69 66 28 69 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 72 65 74 75 72 6e 20 69 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 65 29 3b 66 6f 72 28 6c 3d 64 28 65 29 2c 6f 3d 30 3b 6f 3c 6c 2e 6c 65 6e 67 Data Ascii: onst t=r(),s=a(),i=this[0];let l,o;if(!i\|\|void 0===e)return!1;if("string"==typeof e){if(i.matches)return i.matches(e);if(i.webkitMatchesSelector)return i.webkitMatchesSelector(e);if(i.msMatchesSelector)return i.msMatchesSelector(e);for(l=d(e),o=0;o<l.leng
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 3d 31 29 74 68 69 73 5b 73 5d 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 5b 69 5d 2c 74 68 69 73 5b 73 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3b 65 6c 73 65 20 74 68 69 73 5b 73 5d 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 5b 73 5d 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 3e 30 3f 65 3f 74 68 69 73 5b 30 5d 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 26 26 64 28 74 68 69 73 5b 30 5d 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 29 2e 69 73 28 65 29 3f 64 28 5b 74 68 69 73 5b 30 5d 2e 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 5d 29 3a 64 28 5b Data Ascii: =1)this[s].insertBefore(e[i],this[s].childNodes[0]);else this[s].insertBefore(e,this[s].childNodes[0]);return this},next:function(e){return this.length>0?e?this[0].nextElementSibling&&d(this[0].nextElementSibling).is(e)?d([this[0].nextElementSibling]):d([
2024-10-25 08:16:30 UTC	1379	IN	Data Raw: 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 5b 73 5d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 74 2e 70 75 73 68 28 61 5b 65 5d 29 7d 72 65 74 75 72 6e 20 64 28 74 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 7b 63 6f 6e 73 74 20 61 3d 74 68 69 73 5b 73 5d 2e 63 68 69 6c 64 72 65 6e 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 61 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 65 26 26 21 64 28 61 5b 73 5d 29 2e 69 73 28 65 Data Ascii: for(let s=0;s<this.length;s+=1){const a=this[s].querySelectorAll(e);for(let e=0;e<a.length;e+=1)t.push(a[e])}return d(t)},children:function(e){const t=[];for(let s=0;s<this.length;s+=1){const a=this[s].children;for(let s=0;s<a.length;s+=1)e&&!d(a[s]).is(e
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 3f 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 3a 65 26 26 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 63 6f 6e 73 74 20 65 3d 4f 62 6a 65 63 74 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 30 3f 76 6f 69 64 20 30 3a 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 2c 74 3d 5b 22 5f 5f 70 72 6f 74 6f 5f 5f 22 2c 22 63 6f 6e Data Ascii: toString.call(e).slice(8,-1)}function f(e){return"undefined"!=typeof window&&void 0!==window.HTMLElement?e instanceof HTMLElement:e&&(1===e.nodeType\|\|11===e.nodeType)}function g(){const e=Object(arguments.length<=0?void 0:arguments[0]),t=["__proto__","con

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49822	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	712	OUT	GET /media/catalog/product/6/0/603977_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5853 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "ShDtOQ5RIfxgO75o3jOnT2lWhOiUlUCHXPU36vwMKTk" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=80761 idim=1000x1000 ifmt=jpeg ofsz=5853 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e84e5b654170377779e1309d-e0124d43ed241a43-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960037-PAR, cache-dfw-ktki8620034-DFW X-Cache: HIT, MISS X-Cache-Hits: 6, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: d5 67 88 8b 56 cf eb 7e 4a 90 82 88 88 0e 55 be 88 ff 00 97 44 49 ff 00 b6 78 db e6 ab 15 51 f2 6f 8c 70 31 30 fc 42 b2 e1 ee be 1c cb 1d cd 70 df 6d c8 0d 92 22 28 50 a0 e2 7f 77 56 7b 17 f7 29 ca 0e 27 f7 75 67 b1 7f 72 02 70 dc 3b 11 06 e1 d8 88 02 22 20 08 88 80 e0 dc 03 61 73 6d ca a3 8e b7 94 6b 4c 80 46 2e 49 69 22 ce b0 dc ad ea a9 b4 ac 6c 70 c7 39 bb 88 92 f6 dd a0 1b 82 c6 7f 6b 2a dc b0 d2 3d a6 26 b4 31 cd ca 00 d4 59 4a 5f 1e 56 18 c0 0e 91 8d b0 e2 40 5c 78 55 37 ed e3 fe 20 aa 21 f7 45 c3 5c d7 0b b5 c0 8e ad 57 2a 80 88 88 02 85 88 9b 51 4e 7d 15 35 47 ab 8b 95 a6 95 97 de d3 f2 d5 01 5f c1 80 15 12 bc 9d 1b 19 24 ad 64 f2 72 b3 49 27 9c e2 57 d6 19 0b 20 a8 b1 d5 c1 ad f7 13 72 a2 aa 40 88 88 09 d5 87 33 29 5e 37 18 40 f7 b7 45 b7 c2 09 Data Ascii: gV~JUDIxQop10Bpm"(PwV{)'ugrp;" asmkLF.Ii"lp9k=&1YJ_V@\xU7 !E\WQN}5G_$drI'W r@3)^7@E
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: d6 a3 6a 5d 03 c4 10 49 23 5b ca 45 20 b1 20 1b 3a cd b8 1e f5 5b 9f 6a 71 ba 5a 68 69 69 30 f6 06 c5 13 58 26 d6 5c d9 45 b3 00 2c 02 d5 dc 94 e5 73 2b 3e d4 76 aa a1 e3 72 c5 26 22 c3 1c 8d 78 02 c7 29 06 c4 0d da 71 5d 71 5d 8a 63 35 84 f8 6d 55 43 9a 41 e6 ea c6 5f a2 c2 c1 6f 70 98 4c 34 b0 e6 61 6e 69 1c e0 0e 86 c4 5b 55 8d 49 a6 ac 58 ac 9a 7d 9d 92 5a 2d a4 af aa 01 a6 d2 96 81 c4 82 e3 70 bb 80 6d 1e 1b 94 17 19 1b da c3 f9 2e a0 7c 94 f4 15 55 73 4f 51 1b 58 65 cc 33 69 6b 13 c6 fa ef 5a c9 b6 db 0b 9a 56 d3 c1 ca 48 49 f2 98 de 6d c7 6a c9 49 24 b2 46 9d d9 db 98 b6 d9 e1 34 f4 55 06 19 1d 24 d9 08 63 32 11 ce 22 c2 e4 ee 0b a9 76 2a a2 9a 93 68 69 a4 a8 99 91 c6 21 95 a5 ee 36 17 2d b0 1a a8 53 56 b2 a8 38 18 e5 00 f4 b1 46 95 b4 f6 bd c8 ed Data Ascii: j]I#[E :[jqZhii0X&\E,s+>vr&"x)q]q]c5mUCA_opL4ani[UIX}Z-pm.\|UsOQXe3ikZVHImjI$F4U$c2"v*hi!6-SV8F
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 08 53 74 a3 15 9b 36 d9 5b c7 1e 0c b0 b3 88 69 3f 1f f8 50 70 e8 f9 4a c8 47 00 73 1f 72 cf 14 7e 6a d9 3d 1b 0f 80 53 30 38 ef 24 d2 74 00 d1 ef 5d 7c 1e 5f 26 f6 a1 b9 e0 95 b6 de c2 3e 4a 8a bb 01 50 e5 00 4b 20 1b 83 88 f9 a2 0c b5 e1 46 f4 31 75 5c 7c d4 e9 3e cd fa 7e 13 c2 fd cb 5d 83 9f f0 4d f5 9d de b6 32 7d 9b fd 53 fd e8 a1 4c d1 11 00 50 71 3f bb ab 3d 8b fb 94 e5 07 13 fb ba b3 d8 bf b9 01 57 fa 42 c3 8e 21 b1 f8 a4 6d 6d df 1c 42 66 76 c4 73 77 05 e3 f5 ef 37 b1 92 44 e6 3d a1 cd 73 48 70 3b 88 22 c4 2f 13 6d 1e 11 26 0d 8d e2 18 7b c1 b4 33 10 c2 78 b0 ea d3 f0 2b 87 57 1c c6 5f a3 ea 3e 9d ae ad 5a 8b 7c f7 2f f0 cd 19 58 bb f0 f6 85 91 58 9d d7 ec 5c 67 d3 3e 42 e2 eb 22 17 16 54 b6 38 ba c5 cd 0e b0 3d 37 59 d9 2c ad c9 6b a6 99 1e 36 Data Ascii: St6[i?PpJGsr~j=S08$t]\|_&>JPK F1u\\|>~]M2}SLPq?=WB!mmBfvsw7D=sHp;"/m&{3x+W_>Z\|/XX\g>B"T8=7Y,k6
2024-10-25 08:16:31 UTC	337	IN	Data Raw: ca e2 1f a8 d2 f1 92 35 71 1a 17 6e 56 98 29 e1 a7 8c 47 13 03 5b 7b f4 92 4e f2 49 de 4f 4a fb 00 00 b0 45 bc f2 c2 89 5b 52 29 e9 dc fb f3 8e 8d 1d 24 a9 6b 51 89 d0 cf 52 e8 cc 6e 6d 9a 0e 84 db 7a 03 43 45 1c b2 54 c7 91 a4 96 b8 38 f5 0b ea ae ab 59 86 d0 ba 95 8f 2f 20 b9 c4 6e e0 02 d9 a0 38 73 73 35 cd e9 04 2a 2c 6f 74 33 35 c3 7b 1f dc af 6a ad 36 15 56 66 90 b1 8d 2d 2e 24 1b 81 a1 2a 90 b3 47 23 64 8d af 69 d1 c2 e1 24 fb 37 fa a7 fb d1 7c e9 61 30 d3 c5 19 37 2d 6d 8a ce 72 e1 0c 85 ac 2e 21 86 cd 06 c4 9b 6e 50 a7 d1 17 0d 24 b4 5c 58 db 50 88 0e 51 11 00 51 6a 68 e0 aa c9 ca 87 9c 84 91 95 ee 6e fd 35 ca 45 d1 10 11 fe a8 a2 f3 64 fe 6c 9f a9 3e a8 a2 f3 64 fe 6c 9f a9 11 01 c1 c2 28 4e 85 b2 7f 36 4f d4 87 08 a1 3b db 21 ff 00 cb 27 ea 44 Data Ascii: 5qnV)G[{NIOJE[R)$kQRnmzCET8Y/ n8ss5,ot35{j6Vf-.$G#di$7\|a07-mr.!nP$\XPQQjhn5Edl>dl(N6O;!'D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49825	216.239.32.21	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	1603	OUT	GET /g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=21&tfd=11068&richsstsse HTTP/1.1 Host: t.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.retif.eu Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:31 UTC	686	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:16:31 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; Max-Age=63072000; Domain=retif.eu; Path=/; Secure; HttpOnly set-cookie: FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; Max-Age=72000; Domain=retif.eu; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff access-control-allow-origin: https://www.retif.eu access-control-allow-credentials: true Via: 1.1 google Connection: close
2024-10-25 08:16:31 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49827	157.240.27.27	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	1369	OUT	GET /signals/config/671587811394625?v=2.9.174&r=stable&domain=www.retif.eu&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:31 UTC	1514	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-iPZrkx6S' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-25 08:16:31 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-25 08:16:31 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-25 08:16:31 UTC	1491	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-10-25 08:16:31 UTC	14893	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 Data Ascii: );return Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue
2024-10-25 08:16:31 UTC	1500	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-10-25 08:16:31 UTC	14884	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 70 65 6e 64 28 22 65 69 64 Data Ascii: function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.append("eid
2024-10-25 08:16:31 UTC	1500	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi
2024-10-25 08:16:31 UTC	1482	IN	Data Raw: 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 Data Ascii: led correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbe
2024-10-25 08:16:31 UTC	13402	IN	Data Raw: 3a 6a 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 6c 61 73 74 65 78 74 65 72 6e 61 6c 72 65 66 65 72 72 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 56 61 6c 69 64 55 72 6c Data Ascii: :j}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.lastexternalreferrer",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsGetValidUrl
2024-10-25 08:16:31 UTC	1500	IN	Data Raw: 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 64 65 6e 74 69 74 79 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 61 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 2c 20 7b 22 73 65 6c 65 63 74 65 64 4d 61 74 63 68 4b 65 79 73 22 3a 5b 22 65 6d 22 2c 22 66 6e 22 2c 22 6c 6e 22 2c 22 70 Data Ascii: ctor":null,"disableRestrictedData":false});fbq.loadPlugin("inferredevents");fbq.loadPlugin("identity");instance.optIn("671587811394625", "InferredEvents", true);config.set("671587811394625", "automaticMatching", {"selectedMatchKeys":["em","fn","ln","p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49826	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	712	OUT	GET /media/catalog/product/6/0/602151_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9847 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "OW2I/ukuMROd7Sxw1F59WDghuDmIrXZKGoAhB/GUoZU" Expires: Fri, 24 Oct 2025 12:31:12 GMT Fastly-Io-Info: ifsz=239557 idim=1000x1000 ifmt=jpeg ofsz=9847 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016371c97d9ec9f59287a0c9cba1fe-40bf375dfb083fbe-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71118 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960034-PAR, cache-dfw-kdfw8210032-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 04 11 12 13 05 10 21 22 20 30 14 23 50 31 32 33 40 43 ff da 00 08 01 01 00 01 05 02 fe 08 ba 8a fc b8 76 7b 95 03 f3 23 d8 5e c4 4c 53 ac 95 9f f4 64 ba 86 33 2d cc 4e 93 5c 1c 86 2d 4f bb 83 bd 24 8c 16 3b 86 a8 6f fc 45 79 93 1c a9 27 dd 73 36 16 69 15 a9 e5 e3 3c b4 32 69 a5 35 b6 ce ba d3 6b b6 4c 6c b2 9d ad ee ca 30 be d9 a2 b8 8d cf d5 7f 78 c0 99 9c d2 ea 6a e2 18 a5 1a 8d 95 36 0e bf a9 48 14 ac 0d 1d 44 61 b9 1e 0f 01 d2 44 a5 72 10 4a 63 11 48 0a 7d 17 92 b2 c7 34 bb 9d bc ab 13 51 82 56 44 92 32 92 20 a6 45 91 52 34 07 4d 4c be 62 10 e2 93 6c 32 09 42 13 ab b1 e2 b5 ba d0 45 2a c8 bf 29 a7 58 96 e2 ef 66 52 ac 65 81 25 a8 61 91 a9 39 00 9c e5 38 55 29 ae 3c 64 47 57 19 55 8c 2d 4b a8 1a e6 41 11 0b 1e af 52 82 86 23 56 d2 f1 52 3e e3 e3 d4 0f Data Ascii: !" 0#P123@Cv{#^LSd3-N\-O$;oEy's6i<2i5kLl0xj6HDaDrJcH}4QVD2 ER4MLbl2BE*)XfRe%a98U)<dGWU-KAR#VR>
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ba 30 63 ec a0 1e be 19 6c c0 e4 9c 1c e9 9c 90 95 ce f2 4e f4 54 63 44 f9 ad bd 53 4a 1b fd 91 ed 35 08 bb d9 74 4d 71 10 5e 9d ad 26 e7 3b 26 dd c7 82 43 68 fd 95 a8 42 ad 4e 1e 2e 69 c5 db e9 92 69 9d 91 11 4a e4 94 3e 89 fc 52 72 40 34 f3 57 9c 2c 56 21 b4 13 9c 5f a2 05 a6 23 dc aa ad e5 51 f8 e4 a7 61 75 4a e3 be 88 c5 14 ec b8 4c 14 18 65 40 03 40 8b c1 c8 7c d0 18 01 d5 04 d8 dd 0b c9 08 cc f2 40 4c 52 71 c5 30 0c ab 02 d6 11 6a 15 dc 9d a4 fc 7c 46 b4 55 9a 1c 54 8e d6 a1 a3 f9 4d 69 d2 d4 c2 39 58 e9 68 b5 ce c2 7e a1 06 ce 59 14 0c ff 00 d7 73 9c ea b8 bb 33 fb d9 1a a0 8e 9b 2d 49 fd 28 9d 9c 69 70 ed 06 d4 48 99 c9 08 c9 0c 40 06 fa 7c 25 a1 d6 9c 4f 70 e1 05 4b 4d 13 11 9c 29 31 1f 85 0e e7 6b 04 5e 9c d0 2f 69 f4 99 69 58 80 bf 81 a0 f6 2d Data Ascii: 0clNTcDSJ5tMq^&;&ChBN.iiJ>Rr@4W,V!_#QauJLe@@\|@LRq0j\|FUTMi9Xh~Ys3-I(ipH@\|%OpKM)1k^/iiX-
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 00 80 d3 ed 2d c8 ba b1 c0 fe d1 8e 8d b6 db c1 2e 98 8f cf 76 0f 52 d9 81 f4 5c ad ad 14 74 3e 79 96 0a 19 bb af fb 16 38 e1 2e ac f1 29 20 4d 3e 23 e8 44 2f ce ee 14 45 2c aa e4 53 88 58 80 1b 5d 1a d4 c0 0a 0b 5e 9a bb f5 15 3c 29 a1 79 d4 ad a1 1d 47 7a a4 cf 24 95 a0 f1 3e 7e 60 a1 0e d2 f1 34 95 4c 8b 2e f5 36 3d cc 02 c3 89 88 b5 54 02 ff 00 c2 15 87 7a bb fc cf 89 2f 3e 13 19 83 e1 cd fb 85 0b 66 46 df 88 ff 00 23 06 76 c3 c1 02 2f 0e 63 57 70 ba b7 41 6e 1e a6 49 c3 93 68 08 1c 96 6c c2 93 8a d8 2e 5d e7 eb 18 6b ba 38 06 44 2c ad 4d 5a ef c4 0d d3 18 37 5e e5 1c f0 3d ff 00 d9 8d 6e 60 1e 75 72 94 69 b0 b7 5c 43 2a 5e 34 6d 52 98 7e 4a 63 07 0c dd 9a 98 ce 23 93 d0 8a 5d f3 7c c1 b0 7f 20 a1 d7 75 c4 67 ad bc f5 2b 75 aa 71 72 ca 5c ed 77 9c ee Data Ascii: -.vR\t>y8.) M>#D/E,SX]^<)yGz$>~`4L.6=Tz/>fF#v/cWpAnIhl.]k8D,MZ7^=n`uri\C*^4mR~Jc#]\| ug+uqr\w
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 4e 40 fb 1e a5 ac 72 5b 39 22 d0 5f d4 18 4d 69 a7 a1 b6 5a 41 66 62 2e 4c f6 78 8b 5b 95 a7 76 75 1f 15 0c d7 d6 54 06 1a 79 ea 56 2a 5b 58 15 f9 c8 82 8b d3 3e a5 19 7e 3c 58 7b e2 20 b8 30 22 35 41 42 8a d1 2d 39 c1 87 d8 47 40 5f a0 e4 73 0a 22 c8 73 f7 a8 5f 3d b2 d6 1b e3 3d 4c 77 21 6d 9e cb 61 b5 90 ce 91 a1 c5 c9 cf f8 cf 00 e2 df 4b 83 18 51 b1 8a cd 6f 63 9e a1 fe 03 35 83 8e 25 b5 2c 9e 1a d7 da 50 98 ab 9c bd a1 f4 01 e3 f4 51 38 8b b9 43 18 c6 1d 4b b7 2b 7c 7c cd 10 61 77 03 29 1d 25 57 c4 42 14 a6 8d 0e 4f 71 0a 56 9a d5 b3 31 3e aa 2e 31 9c 42 70 29 df 87 53 b8 09 8b f7 b9 42 56 c6 4b ba 9b 30 3f c5 cd 4d 35 57 9d 42 0a 58 07 e7 57 f3 2f c4 70 ab cc c2 91 77 5f a6 67 63 72 dd ab 1f 24 aa 16 9b aa fb 42 16 73 b7 f1 03 47 2e 04 b9 1a 2d 83 Data Ascii: N@r[9"_MiZAfb.Lx[vuTyV*[X>~<X{ 0"5AB-9G@_s"s_==Lw!maKQoc5%,PQ8CK+\|\|aw)%WBOqV1>.1Bp)SBVK0?M5WBXW/pw_gcr$BsG.-
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 63 a0 95 83 e5 d8 e2 cc 1e 62 20 d3 00 28 d0 8c 8f 8f 88 dc 19 e6 6c 50 81 6f b3 63 d5 c7 24 8a c3 61 c2 77 75 9d 8e e5 a9 ba 3b 74 0b 31 f6 8a c4 12 a4 d4 da b7 53 2c f4 16 06 8e 06 dd 77 e7 26 e8 15 69 47 47 7f e3 30 ea 43 5e 45 f9 3f 38 e2 14 80 30 49 cd 38 db 80 43 1c 6f 22 67 e3 09 dd 82 76 2d 52 a1 c6 3b 90 00 24 10 28 05 ae b3 47 88 b9 00 c1 c9 37 8d 4c bc a6 68 a9 3a 66 01 d2 2b ec 4d a2 a4 93 fe 70 5e d7 e2 9d a8 bb f1 df 38 4a 85 ba 13 5f b0 9c 7b c6 82 da c6 8b c0 e9 92 79 c5 09 a0 02 b2 02 68 0e c5 c1 0f c2 d4 29 c3 55 01 e3 14 77 01 e4 34 76 07 bc 44 4e 64 81 d3 7d b0 eb 02 02 48 0c 71 9c c3 eb 78 35 c1 5c 69 d0 55 d7 b4 f8 ca cc a4 de 9f df f7 60 a2 8c ad a8 5f fa c6 71 58 82 aa 20 fd 9c 9c 60 40 b0 2d 9f 94 6b f6 c2 54 52 0d 1b e5 3a 7b 30 Data Ascii: cb (lPoc$awu;t1S,w&iGG0C^E?80I8Co"gv-R;$(G7Lh:f+Mp^8J_{yh)Uw4vDNd}Hqx5\iU`_qX `@-kTR:{0
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: f0 0f 84 31 0c 23 15 ca 50 9b f6 c9 fe a1 52 9e ce 15 c2 ec 73 56 d1 1a d1 07 90 c8 b4 b7 44 ad 68 2c fa e0 c4 0d 42 bb 8b b8 ad d6 fb de 70 98 8a 41 e1 8c a7 f1 bf 12 92 9c e0 11 48 81 67 83 a9 3c 4f bc 35 5a 5c 0a f0 20 74 7d e3 9d 49 6c 80 9c 28 1a 7d 65 16 00 89 7a 29 5c 1c 18 90 01 1e c9 f9 60 bb f2 f3 ef 18 23 25 c7 c2 2d 42 61 c4 10 8a 34 72 bd e9 f5 89 02 d6 c8 23 67 c2 af f8 0a 4c 24 20 7e 5e b0 5c 21 7c 29 46 0d 0f 5a c0 cc f0 13 70 50 fb cd 00 a1 c0 0f 0e 9a a3 ab 33 8c 51 58 43 50 6c 43 8c 64 bc e4 31 8e af 51 7e f7 8a a9 2b 4a dd a4 6c 66 f9 df 58 b6 66 21 a1 1b e0 4d 7d 3f cc a6 a3 2a a1 d3 b3 d6 8c 16 ec 52 41 ed 27 1e b0 29 a4 44 55 bd 6e 47 d1 8a d3 74 b7 2a de 6a 4f 58 1c 5d 1c 85 de 88 20 f1 9b ae 44 20 a9 cd 17 9c dc 68 49 2a 1c 13 4f Data Ascii: 1#PRsVDh,BpAHg<O5Z\ t}Il(}ez)\`#%-Ba4r#gL$ ~^\!\|)FZpP3QXCPlCd1Q~+JlfXf!M}?RA')DUnGtjOX] D hI*O
2024-10-25 08:16:31 UTC	194	IN	Data Raw: cb c6 6e 6d ea d8 0d ed 6b 6f 18 40 4f 78 56 dd 9e bc b8 9d 7a bd 58 34 47 a9 7e 8c f7 13 c2 81 b3 8d 43 1b 3e 43 e4 86 df 9e 8f 06 5e 20 14 d8 2d e6 45 f1 88 04 38 5a 6c a6 72 af 39 76 60 28 88 d2 c7 80 38 32 8c 05 a3 50 e5 4e f3 6d 12 14 41 59 1f 17 9c da d1 4b 32 3c f6 f3 86 90 ee 01 46 9e a1 cb 88 16 38 95 63 e9 7f d5 d0 51 22 66 be 57 10 16 f2 7f f3 2c bb 93 60 58 2b e9 c6 26 68 40 76 5e 8f 1c e0 c7 b9 83 74 80 7c af 39 32 12 61 54 62 9b c9 d6 17 09 49 c8 06 9f 83 28 66 dc 1d 8e 3e 0c 77 40 87 6f 13 c6 3c 48 08 46 a8 a2 f9 db 85 ce 02 01 e3 00 70 07 fe 24 3c 7f a7 ff d9 Data Ascii: nmko@OxVzX4G~C>C^ -E8Zlr9v`(82PNmAYK2<F8cQ"fW,`X+&h@v^t\|92aTbI(f>w@o<HFp$<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49830	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	617	OUT	GET /media/wysiwyg/black-friday-2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20345 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "OSK5jcS6GG+YwIrpY8//Jxv9ecfLPXKEJ043mKAeDuk" Expires: Fri, 24 Oct 2025 16:25:23 GMT Fastly-Io-Info: ifsz=55472 idim=490x490 ifmt=jpeg ofsz=20345 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18017039488a5cb891b56dfe4a19ab67-e03c6f54b43d4014-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 57068 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960023-PAR, cache-dfw-kdfw8210173-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 40 44 44 04 44 41 ee b7 db 2e 37 3a 91 4d 41 47 35 4c c4 13 d9 c4 c2 f7 60 77 e0 77 0f 15 eb b8 e9 db fd ad a1 d5 f6 9a ca 66 92 40 74 b0 b9 ad 24 78 12 30 54 c7 c1 fa 53 4d 64 d5 77 63 09 0e 2c 8a 9a 09 bb c1 39 74 8d 07 de d2 57 6b 4f a9 2f 74 bb 32 ad ee 68 1b 35 de b6 7e 2b 93 37 15 4c 37 8a da b3 3b 8d f4 74 e1 e1 ad 96 93 68 98 8d 4e Data Ascii: D@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDD@DDDA.7:MAG5L`wwf@t$x0TSMdwc,9tWkO/t2h5~+7L7;thN
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ec 94 b7 1d 7d 5d 89 23 c0 05 33 cf 49 6b d0 ba 2d 91 d5 c6 c9 5b 4e 1a 65 80 38 34 57 57 49 bf 23 be b4 71 8e ef 00 b9 ce 1e eb ca bb e5 e6 6a 1a 9a 1a 08 6a 3d 19 f2 50 cb 4f 07 64 5a f8 87 37 66 ee 5e ac 20 6e 3c 96 3b 5d 43 e7 54 52 07 12 ed 76 fb 6e a6 3e 85 0f 63 1d 55 2c 35 4e 87 39 11 be 61 97 35 be 5d f8 51 fa a8 22 22 a0 88 88 08 88 80 88 88 08 88 80 a4 6e 13 d3 c5 3e be b3 76 ac 0e 64 66 69 70 7b 8c 71 39 cd 3e e2 01 51 ca 97 f8 41 03 1b 71 bf 57 b9 b9 34 d6 b7 88 cf d5 7c ae 0d 07 e1 95 8d a7 96 b3 3e 50 ca b1 bb 44 79 cb bd aa 99 d2 d4 4e f3 d5 cf 71 39 f3 39 5e 52 4e 7a 67 3b 75 ea b2 02 e3 cc 49 db c5 50 b4 1e f5 f3 73 3b 99 97 d0 44 74 88 61 24 e7 07 db 84 cf 77 89 f8 2b ce 1c 40 38 18 c7 bd 55 c1 a0 1d fd 55 14 2e 68 c3 73 d7 1b ad 95 aa Data Ascii: }]#3Ik-[Ne84WWI#qjj=POdZ7f^ n<;]CTRvn>cU,5N9a5]Q""n>vdfip{q9>QAqW4\|>PDyNq99^RNzg;uIPs;Dta$w+@8UU.hs
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: f4 18 e9 1e 3c 46 cc 69 fb 0a d9 38 69 6b e0 ac d6 22 d3 13 cf 11 d3 a4 35 c6 5b 56 99 a6 2d 33 58 98 8a cc a5 1b 45 da 96 ef 45 15 65 28 93 b2 7b 8b 7d 71 ca 72 d3 b8 c6 eb 66 1b d7 23 a7 45 ce 69 6a 2f 42 d3 f6 c8 79 70 7b 06 bd c0 f7 3a 4f 58 fd eb 26 a6 bc 9b 5d 9e 49 e3 7b 44 b2 3d b0 c3 9f ad 21 eb ee 19 2b 8e 69 13 96 69 4f bd a8 75 c5 b5 8e 2d 7f bb b9 74 98 e5 cf 72 b0 0c 60 9f 77 8f da a3 0d 0f 77 b9 56 6a 5b e5 3c d5 92 c9 0c 7d a9 8e 37 bc bc 33 e7 30 03 73 dc 02 ed af ba 82 dd 63 a5 ed ea de 7d 67 61 91 b7 77 bd c3 ae 01 f0 ef 2a e4 c3 7a e4 e4 8f 6a 7a 6b 5f 14 a6 5a da 93 79 e9 1d 7b b7 45 bb e4 78 6c b1 b8 38 8d f1 d7 de a3 fa 4e 24 5a 65 a7 35 13 d2 cf 04 5d bb 62 04 e1 f9 c8 2e 24 81 dc dc 6f ed 5d ec 53 45 3d 3c 75 10 ca d7 44 f6 73 b5 Data Ascii: <Fi8ik"5[V-3XEEe({}qrf#Eij/Byp{:OX&]I{D=!+iiOu-tr`wwVj[<}730sc}gaw*zjzk_Zy{Exl8N$Ze5]b.$o]SE=<uDs
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: df 34 7e 1a ff 00 9f fc 73 b7 fa d3 43 63 b9 55 07 00 e6 53 3f 90 f8 38 8c 37 ed 2a 25 e1 95 a2 0a d9 6e b2 d4 40 d9 22 10 b2 2e 57 80 5a 79 cf 31 d8 f8 72 85 22 eb 4b 75 ce e1 61 92 8e 86 20 f9 25 96 32 f6 97 06 fa 8d f5 b6 c9 f1 01 47 b6 ea 8d 51 a5 2d 91 d3 41 66 73 e4 a9 32 4a f7 3a 37 3f 91 c0 f2 34 7a bb 1c 01 9c 79 ae 9c 11 be 1e f5 ad a3 9e d6 f3 d7 48 68 cd d3 3d 2d 6a cf 2d 63 cb 7d 65 8f 4c d4 ba d9 ae ea ad d4 6f 77 a1 cb 53 3c 46 3c 92 dc 33 25 a7 7e f1 8e be 0b c1 ac 5c eb ae b8 14 60 e5 ad 92 0a 66 e3 7c 0d b9 be 05 c5 74 9a 03 4c 5c 29 eb e6 bb dc a3 74 3c b1 bf b3 6c a0 87 97 3b e9 3c 83 d0 01 e2 b9 7d 21 23 2e 1a cc d7 ce e6 31 a2 49 aa 5c 5c 40 00 bc e0 0d fc dd b2 e8 89 af ad c9 78 98 9e 4c 7a 99 f3 97 3e ad ea f1 d2 7a 73 e4 dc 47 94 Data Ascii: 4~sCcUS?87*%n@".WZy1r"Kua %2GQ-Afs2J:7?4zyHh=-j-c}eLowS<F<3%~\`f\|tL\)t<l;<}!#.1I\\@xLz>zsG
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 97 a3 c0 57 a5 ed f2 84 6f c5 0a a6 b2 c1 4f 0b 4e f3 55 b7 e0 c6 92 7e d2 16 4d 1a 61 b5 e8 67 d6 4d 80 d2 27 98 e7 bf f1 40 f7 e1 6f f5 36 97 a4 d4 11 d3 32 a2 a6 66 76 05 e5 86 3e 52 09 7e 33 cc 0f 5e 8b 92 af e1 b4 f5 46 06 c5 78 73 29 d9 0c 6c 11 ba 23 ea f2 37 04 e0 3b 04 93 92 b4 e3 be 19 c1 4c 76 bf 2c f3 73 4f 4d b7 5e 99 63 35 af 14 e6 8e 5d 47 56 83 85 c1 f1 d6 5d ea 4f e0 a2 a4 1c fb e0 64 9e 60 7e 0d 2b c7 c3 a8 cd 66 ab 92 a9 e7 d6 8e 19 a6 cf 9b cf 2f fa ca 4c 66 9e 86 cf a6 6e 56 fb 6b 5d 35 44 d0 bf d6 24 07 bd ee 1c bb e7 00 01 dc 14 6d a7 9f 78 d2 6d ad aa 96 cf 2c 92 bd f1 c6 1a 41 d9 80 38 b8 e5 a0 f7 e3 75 be 32 57 2c 71 13 49 8d db 55 ac 4c ea 5a bd 55 e9 38 22 d5 9d 57 76 9d 46 df 55 58 0b 69 ec f7 ca a2 d0 1c 21 6c 6c 7e 3e b6 72 Data Ascii: WoONU~MagM'@o62fv>R~3^Fxs)l#7;Lv,sOM^c5]GV]Od`~+f/LfnVk]5D$mxm,A8u2W,qIULZU8"WvFUXi!ll~>r
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: db 65 d2 da 66 93 d1 d8 6e 95 d0 fc a1 55 31 dd ec 86 4c 88 63 1e 00 8c 97 0f 10 b8 1c a0 b9 55 6f ee 1a 6e ba dd 64 b4 5d 6a 5f 13 63 b8 99 4d 34 79 26 42 c8 8e 0b c8 c6 00 dc 61 68 42 0a 81 b2 f5 52 d3 cd 53 51 05 3c 2c 2f 92 59 1a c6 34 77 b9 c7 00 7b d7 9b a2 91 b8 4f 42 ca dd 79 65 6c 80 16 44 f7 cd 82 3b e2 61 73 7e 0e 01 49 58 7a 78 a5 2c 34 b7 7a 0d 3b 4d 8f 45 b2 d1 c7 03 4f 7b e4 91 a2 49 1e 71 de 49 df cd 46 a0 2d a5 fa e2 db a5 fa ed 70 6b 5c d6 d4 d6 cd 33 5a e3 92 d6 bd e5 c0 1f 60 38 5a c5 09 4f dc 31 a6 34 da 27 50 d6 97 8c 55 d6 c5 4e d6 f7 83 0b 79 89 f7 f3 ad b0 39 c0 c7 b5 67 d3 f0 b2 93 86 da 6d 9d 97 23 ea 26 9e 79 07 42 f3 ce e0 d7 1f f3 71 85 8d d8 ce c3 63 ee 5e 2f 1d 6d e7 98 f2 88 8f f6 f5 f8 2a eb 0c 4f 9c cc b9 09 ae b7 3a aa Data Ascii: efnU1LcUond]j_cM4y&BahBRSQ<,/Y4w{OByelD;as~IXzx,4z;MEO{IqIF-pk\3Z`8ZO14'PUNy9gm#&yBqc^/m*O:
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ea 87 2f 6c af 9e d6 29 0d 1e 8e 65 04 73 b9 b1 c7 5f 74 89 f5 4e 24 9c 07 66 56 88 5b 8e a7 0c c8 5d 5e 90 bc 32 9e ff 00 a0 ef b2 72 96 d4 c4 fb 45 63 88 07 12 c1 88 e3 7b 89 e8 4b 1c c3 9f 22 ba aa db 65 45 45 36 a9 d2 75 7a d0 5d 6f 55 c5 be 8f 45 3f 6a 19 0f 60 ee db 01 c4 16 f6 8e 68 e8 30 16 2c 90 96 b3 76 a5 82 f9 59 6d be dc 66 aa 9e 92 40 dc 3a 47 3a 30 0b 43 9a 63 69 c0 68 20 82 30 02 ea e8 f4 03 6e fa 06 86 ef 6f 78 37 26 9a b7 3e 97 39 75 44 30 bf 05 cc 1f 59 99 df c4 61 6e 6f 9a 52 fb ae a8 b4 cd f6 d5 4c d9 a5 96 df e8 d7 27 99 19 1b 63 9a 91 dd 99 91 e5 c4 7d 20 7b b2 70 16 ea d9 72 b7 d9 2d da 36 db 49 49 25 db 50 5b ea 6e 02 3a 7a 1a ae 56 35 ce 94 f3 3a 42 d0 79 9a 5a 36 1b 02 dc e5 4d f4 47 1f a8 9b 33 f8 5b a3 65 b7 b9 c6 81 93 55 36 Data Ascii: /l)es_tN$fV[]^2rEc{K"eEE6uz]oUE?j`h0,vYmf@:G:0Ccih 0nox7&>9uD0YanoRL'c} {pr-6II%P[n:zV5:ByZ6MG3[eU6
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 9e f3 ef 59 7b 52 79 58 00 24 90 07 b5 5e 77 db ae 16 c6 c9 48 2a 6e d4 71 63 21 d3 34 9c 0c ec dd d6 55 af 34 c4 47 8c e9 e2 64 c9 6b 4d f2 5e 66 66 77 6b 4c f8 ca 39 e3 15 68 f9 66 d5 69 63 dc 5b 6f a0 60 7b 4e c0 4b 37 ae ec 7b 5b ca a1 f5 d3 eb 3b a7 ca da ae f5 5a 1e 5c d9 2a e4 11 93 fc 5b 0f 23 3f a2 02 d0 d1 d1 d5 d7 54 c5 4b 4b 04 93 4f 2b b9 63 8d 80 b9 ce 3e 40 2f a5 ac 45 6b 11 e5 0f 9c 99 dc cc f9 cb cc 8a 67 a7 e1 01 6c 4d 8e e3 a8 e9 69 2b 9c d0 7d 18 44 e9 5a c2 7f 16 49 01 01 a7 c7 aa 8d 35 0e 9d ba e9 db 94 94 17 18 79 25 68 0e 6b 81 cb 24 61 e8 f6 1e f0 54 ae 4a 5a 6d 15 b4 4c c4 f5 88 9e df 35 9a 5e b1 13 35 98 89 ed b8 ee d1 a2 22 cd 88 88 bd b1 5b ae 13 63 b2 a2 9d ff 00 93 1b 9d f7 04 1e 24 5b 0a ab 4d d6 8e 31 25 55 be aa 16 13 80 Data Ascii: Y{RyX$^wHnqc!4U4GdkM^ffwkL9hfic[o`{NK7{[;Z\[#?TKKO+c>@/EkglMi+}DZI5y%hk$aTJZmL5^5"[c$[M1%U
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 24 ac 77 2f 31 fa 1c be ab 5b 86 8e 56 81 80 36 0e c1 ea 39 ca f4 9e 7b ad 04 11 90 72 16 09 a9 69 aa 0b 0c d0 47 21 61 25 bc ed 0e e5 24 60 e3 3d 36 5a 4b 3d ba b6 85 92 76 ce 63 e5 92 a5 cf 7c 8c ce 3b 37 65 fc 81 ae fa 2d 6b 9c 43 40 ee dd 74 5c de 45 07 2f 2e 8d d3 b2 76 7c b4 5d 98 61 71 02 37 b9 80 f3 78 80 70 71 dd e0 b4 13 70 f8 37 90 53 dc df ca 18 e0 e6 cb 1b 5c e7 3b f1 4f 33 39 40 f3 d9 48 fc de 45 39 bc 8a d5 6c 18 6f ef 52 3f 46 ca e6 cb 5e d7 94 31 36 8f bf c0 59 fc 1e 29 be 68 b9 ee 8a 40 40 70 fc 50 1f ca 49 3d db 2d 0d 4d 2d 64 03 9a a2 8e 78 7e 67 b5 77 69 19 00 30 1c 12 7b 86 3b fc 17 d0 bc c7 c0 aa 12 3b c2 e7 b7 01 86 7d d9 b4 7e ed f5 e3 72 c7 78 89 fd 9f 37 f3 b4 8e 60 e0 41 ef 1f f8 2b 81 d8 ed d3 c7 65 3b d6 69 fb 25 77 68 6a 2d Data Ascii: $w/1[V69{riG!a%$`=6ZK=vc\|;7e-kC@t\E/.v\|]aq7xpqp7S\;O39@HE9loR?F^16Y)h@@pPI=-M-dx~gwi0{;;}~rx7`A+e;i%whj-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49831	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	943	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Magento_PageBuilder/js/glider.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340
2024-10-25 08:16:31 UTC	678	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8327 Content-Type: application/javascript Etag: "671a1fb0-bb5" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016277f73093aec2ddb6f46d0af75d-9511c3cce289ad84-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:31 GMT X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-ktki8620071-DFW X-Cache: HIT, MISS X-Cache-Hits: 47, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 20 20 20 5f 5f 5f 5f 5f 20 5f 5f 20 5f 20 20 20 20 20 5f 5f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 0a 20 20 20 2f 20 5f 5f 5f 2f 2f 20 2f 28 5f 29 5f 5f 5f 2f 20 2f 5f 5f 5f 20 20 5f 5f 5f 5f 20 20 20 20 20 20 28 5f 29 5f 5f 5f 0a 20 20 2f 20 28 5f 20 2f 2f 20 2f 2f 20 2f 2f 20 5f 20 20 2f 2f 20 2d 5f 29 2f 20 5f 5f 2f 5f 20 20 20 20 2f 20 2f 28 5f 2d 3c 0a 20 20 5c 5f 5f 5f 2f 2f 5f 2f 2f 5f 2f 20 5c 5f 2c 5f 2f 20 5c 5f 5f 2f 2f 5f 2f 20 20 28 5f 29 5f 5f 2f 20 2f 2f 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 5f 2f 0a 0a 20 20 56 65 72 73 69 6f 6e 3a 20 31 2e 37 2e 34 0a 20 20 41 75 74 68 6f 72 3a 20 4e 69 63 6b 20 50 69 73 63 69 Data Ascii: /* @preserve _____ __ _ __ _ / ___// /(_)___/ /___ ____ (_)___ / (_ // // // _ // -_)/ __/_ / /(_-< \___//_//_/ \_,_/ \__//_/ (_)__/ //___/ \|___/ Version: 1.7.4 Author: Nick Pisci
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 65 2c 74 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 67 6c 69 64 65 72 2d 73 6c 69 64 65 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 73 6c 69 64 65 22 2c 74 29 7d 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3d 69 2e 65 6c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 76 61 72 20 73 2c 6c 3d 69 2e 73 65 74 74 69 6e 67 73 42 72 65 61 6b 70 6f 69 6e 74 28 29 3b 74 3d 74 7c 7c 6c 2c 22 61 75 74 6f 22 21 3d 3d 69 2e 6f 70 74 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 76 6f 69 64 20 30 3d 3d 3d 69 2e 6f 70 74 2e 5f 61 75 74 6f 53 6c 69 64 65 7c 7c 28 73 3d 69 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 2f 69 2e 6f 70 74 2e 69 74 65 6d 57 69 64 74 68 2c 69 2e 6f 70 74 2e 5f 61 75 74 6f 53 6c 69 64 65 3d 69 2e Data Ascii: e,t){e.classList.add("glider-slide"),e.setAttribute("data-gslide",t)}),i.containerWidth=i.ele.clientWidth;var s,l=i.settingsBreakpoint();t=t\|\|l,"auto"!==i.opt.slidesToShow&&void 0===i.opt._autoSlide\|\|(s=i.containerWidth/i.opt.itemWidth,i.opt._autoSlide=i.
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 2c 22 61 64 64 22 2c 65 29 7d 2c 74 2e 62 75 69 6c 64 44 6f 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 65 2e 6f 70 74 2e 64 6f 74 73 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 70 74 2e 64 6f 74 73 3f 65 2e 64 6f 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 2e 6f 70 74 2e 64 6f 74 73 29 3a 65 2e 64 6f 74 73 3d 65 2e 6f 70 74 2e 64 6f 74 73 2c 65 2e 64 6f 74 73 29 7b 65 2e 64 6f 74 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 65 2e 64 6f 74 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 67 6c 69 64 65 72 2d 64 6f 74 73 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 4d 61 74 68 2e 63 65 69 6c 28 65 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2f Data Ascii: ,"add",e)},t.buildDots=function(){var e=this;if(e.opt.dots){if("string"==typeof e.opt.dots?e.dots=document.querySelector(e.opt.dots):e.dots=e.opt.dots,e.dots){e.dots.innerHTML="",e.dots.classList.add("glider-dots");for(var t=0;t<Math.ceil(e.slides.length/
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 74 68 29 3e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6e 2e 74 72 61 63 6b 57 69 64 74 68 29 7c 7c 74 29 2c 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 3f 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 21 30 29 3a 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 21 31 29 29 29 2c 6e 2e 73 6c 69 64 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 2f 6e 2e 69 74 65 6d 57 69 64 74 68 29 2c 6e 2e 70 61 67 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c Data Ascii: th)>=Math.floor(n.trackWidth)\|\|t),n.arrows.next.classList.contains("disabled")?n.arrows.next.setAttribute("aria-disabled",!0):n.arrows.next.setAttribute("aria-disabled",!1))),n.slide=Math.round(n.ele.scrollLeft/n.itemWidth),n.page=Math.round(n.ele.scrollL
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 7d 2c 6e 2e 6f 70 74 2e 73 63 72 6f 6c 6c 4c 6f 63 6b 44 65 6c 61 79 7c 7c 32 35 30 29 29 7d 2c 74 2e 67 65 74 43 75 72 72 65 6e 74 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 72 6f 75 6e 64 28 65 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 2f 65 2e 69 74 65 6d 57 69 64 74 68 29 7d 2c 74 2e 73 63 72 6f 6c 6c 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 6f 2c 72 3d 74 68 69 73 2c 73 3d 65 3b 72 65 74 75 72 6e 2b 2b 72 2e 61 6e 69 6d 61 74 65 5f 69 64 2c 65 3d 21 30 3d 3d 3d 74 3f 28 65 2a 3d 72 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 72 2e 69 74 65 Data Ascii: },n.opt.scrollLockDelay\|\|250))},t.getCurrentSlide=function(){var e=this;return e.round(e.ele.scrollLeft/e.itemWidth)},t.scrollItem=function(e,t,i){i&&i.preventDefault();var o,r=this,s=e;return++r.animate_id,e=!0===t?(e*=r.containerWidth,Math.round(e/r.ite
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 69 6d 61 74 65 5f 69 64 3f 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6e 29 3a 28 72 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 74 2c 6f 26 26 6f 2e 63 61 6c 6c 28 72 29 29 7d 3b 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6e 29 7d 2c 74 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 74 2e 74 72 61 63 6b 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2e 73 6c 69 64 65 73 5b 65 5d 29 2c 74 2e 72 65 66 72 65 73 68 28 21 30 29 2c 74 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 22 29 29 7d 2c 74 2e 61 64 64 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 74 72 61 63 6b 2e 61 70 70 Data Ascii: imate_id?a.requestAnimationFrame(n):(r.ele.scrollLeft=t,o&&o.call(r))};a.requestAnimationFrame(n)},t.removeItem=function(e){var t=this;t.slides.length&&(t.track.removeChild(t.slides[e]),t.refresh(!0),t.emit("remove"))},t.addItem=function(e){this.track.app
2024-10-25 08:16:31 UTC	53	IN	Data Raw: 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 65 2c 69 5b 65 5d 29 7d 29 7d 2c 65 7d 29 3b 0a Data Ascii: Object.keys(i).forEach(function(e){o(e,i[e])})},e});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49829	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:30 UTC	630	OUT	GET /media/wysiwyg/home/decoration-halloween_2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 33903 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "F+H+ZyWiCiiAXCwXHxmK/bnhAXtsE9igmhkaA8fhxCA" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=104856 idim=490x490 ifmt=jpeg ofsz=33903 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277eb7285c6b7c1cfff0577180e-8820b9e3eab228ce-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72192 Date: Fri, 25 Oct 2024 08:16:30 GMT X-Served-By: cache-par-lfpg1960060-PAR, cache-dfw-kdal2120136-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ec 05 4b 1e 7d a6 0b e1 a4 7f e1 ee b7 44 aa 83 b9 b9 e9 19 18 8a 3b fb 80 ee 94 6c 5e a6 56 97 6c 67 48 ff 00 c4 25 4d 66 fb 46 bc c1 aa b0 65 dd 9f 8b 93 c3 05 3f 2c ef c6 a3 cc 6c 1c 3b cb e4 56 74 c3 93 cc c9 e7 2e 2a e6 d8 e2 e2 15 c1 1d de c6 0d 09 39 b5 80 57 66 2b 22 a7 4b 2c 2a cd f3 14 91 e7 8f cc 71 d2 5e b6 ad ab ee 2d 53 21 1b d7 04 fa c5 b6 56 59 dc 6f bb 64 f3 ef 0f c3 6a 28 af e5 ab 76 9d f8 1e bf 61 35 94 78 1b 91 1f 59 c3 ae b3 72 a5 80 e8 fd 2c 3f f7 88 46 55 aa 00 ee f0 35 e2 3f eb c6 da 6d 09 5a 76 ab 7e bd f8 04 fe 26 54 a3 ec ff 00 31 65 47 19 65 f2 35 74 20 13 c6 f1 24 04 f1 c7 12 c0 47 d4 f9 8e 2a f0 22 7a 7c c7 15 78 10 19 28 25 7d 27 ad 3d 5f 33 d6 80 82 3c 43 0e c6 f3 17 83 a8 6e 33 73 25 9d 91 f0 fe 91 99 cc 9f ea cd 1a 7d 55 Data Ascii: K}D;l^VlgH%MfFe?,l;Vt.9Wf+"K,q^-S!VYodj(va5xYr,?FU5?mZv~&T1eGe5t $G*"z\|x(%}'=_3<Cn3s%}U
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 25 3d 23 13 17 a1 f4 ea fa ef 50 ac 3e 45 bb ff 00 a6 e2 b0 f2 7f fc d7 1e c3 d3 ef 33 6d 95 91 93 91 76 46 4d a6 cb ad 62 ce e7 c9 26 35 62 31 ce 32 d8 0f d4 f1 e0 3a eb ef ca c8 7c 9c 9b 4d b7 37 96 3e 9f 60 3d 04 5b 9a 3c 43 10 ee 0d 9b e2 21 b6 d8 cc 24 b0 85 95 f9 30 81 07 a8 f2 61 00 c0 60 9a 5f 87 d3 1c b9 36 92 0e f8 33 5b 8b 49 1d 52 ce cd a8 ed e0 1f 5f bc c4 f4 7b 3b 6c 27 5b d7 91 36 d7 f5 30 32 71 2d 50 3b 4a eb f1 15 2c e4 4c bb 0d 0b 95 5b 64 5a e0 1e df 4f 71 33 ce 7b ac 66 d6 b6 7c 47 57 5e b6 57 67 7d 85 49 f1 10 fc d5 d9 1b 96 a8 5e 9e 81 2c 27 42 0e d9 f5 63 ba 51 95 ce 2d 9c 12 3c d6 c7 fb 97 ed ee 25 81 d5 8e b7 e9 33 9d 52 d1 95 40 35 b2 aa d4 db 72 dc 78 f6 96 77 60 94 47 aa 74 6c 8c 5c da 95 07 7a b7 d5 5b f9 52 a7 fb 84 72 b8 dd Data Ascii: %=#P>E3mvFMb&5b12:\|M7>`=[<C!$0a`_63[IR_{;l'[602q-P;J,L[dZOq3{f\|GW^Wg}I^,'BcQ-<%3R@5rxw`Gtl\z[Rr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: dc c2 72 b2 07 af 1f 4a 83 fb 4c 2b 08 6d f1 80 71 c9 58 10 9a 86 a0 e2 19 50 e2 2d 84 90 5a 13 b8 2e 69 e2 10 b0 3c c3 00 96 2a 1c 6c 9f 12 ea de bf 25 58 8f 71 2b a6 93 91 7a 55 cf 3e 63 7c ee 99 fc 18 1d ae 75 ae 47 a4 7d 75 e5 65 89 94 b9 c1 3c 0c 8e 81 fc 42 26 71 be ba 98 80 6c 4d 12 bf 73 bf 49 d4 ab e8 58 78 9d 38 e5 f4 de af 46 76 23 6b b8 03 db 62 03 ee 0c e1 cb 5b dc fd a8 bb 63 e0 4b 3b f3 7a 55 c4 21 ec 63 fa 97 7f f3 3a 4e ac ed 6b 90 5a cf 93 7b 96 54 5c 55 4f d3 2b 53 17 61 de d9 18 e9 6b 7e a3 e6 1e a7 99 29 60 e4 83 10 49 35 7b 07 f1 3e 49 e5 ef db 5b 69 49 24 71 a3 ad 7d e0 4f 0a 2c 94 26 55 25 b6 01 07 7c 7b 08 33 bf d6 db 23 c9 f4 96 3b 3d 96 76 f7 0d 03 b1 3c 26 ad 9e 2c ff 00 32 81 06 36 0f 68 8c 71 71 2d ca b4 25 63 d7 93 ed 3a 27 Data Ascii: rJL+mqXP-Z.i<*l%Xq+zU>c\|uG}ue<B&qlMsIXx8Fv#kb[cK;zU!c:NkZ{T\UO+Sak~)`I5{>I[iI$q}O,&U%\|{3#;=v<&,26hqq-%c:'
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: fc d2 17 9e 67 6e 8c fa f1 d9 33 a2 ca f0 e4 bb 2f cc b1 8d 5b df 99 0c 55 e0 4b 1e a7 b6 a0 35 35 1d 1f a1 2e 4d 44 b5 80 68 43 8a 8f 80 5d 53 9a c2 46 6f 27 fa 46 65 17 fa e6 74 3e a1 d3 c5 76 7c b5 3b 10 2a 7a 4d 01 bb 99 62 e7 a8 ae 1c 37 c8 ca f4 17 4b db 02 2d 0e c1 2a e2 6b 0e 16 31 e3 62 5c 9d 1f 1e de 06 a0 7e aa bf b8 7f e5 d7 7d 8c 59 92 43 35 59 9f 09 e5 0a cd 94 f2 35 bd 4c b3 57 65 4e 52 c5 21 87 a1 8e 52 4d 65 15 65 5c a0 da 65 39 1f a0 c4 a3 7f 30 fe 63 9b 88 d4 50 3f 59 fc c6 43 b1 32 ec 33 d0 4d 5e 09 38 9f 07 f5 6b d4 e9 f2 b2 6a a0 1f fb 51 b6 df f3 33 0a 3e 9f da 69 ba 9f f2 3e 1a f8 7b 1f d6 db 6e bd bf 0c 06 bf e2 58 82 e5 fe 05 4b c1 98 29 ad 0f 69 53 03 0a 3c ee 54 e3 88 1e 43 40 fa 03 f5 b0 02 58 99 b5 d6 3b 51 7f 73 e6 2c bb 64 Data Ascii: gn3/[UK55.MDhC]SFo'Fet>v\|;zMb7K-k1b\~}YC5Y5LWeNR!RMee\e90cP?YC23M^8kjQ3>i>{nXK)iS<TC@X;Qs,d
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 59 f2 d8 0e 48 9d b8 4b fc 39 b6 a6 ee e7 ea 10 de 9f f2 2b c9 a3 e7 11 f2 ec 5e d6 fb 13 0c 18 fd 94 59 5a 9e 1a 67 fe 53 36 4f 63 12 3b 61 43 51 4e d5 67 b7 68 bf 2f 87 5e a5 b1 f9 f2 0f f1 3f c2 e2 a4 b3 23 1c f7 72 48 1f 63 31 55 e1 65 10 3f 94 df e2 76 4a ab ef ac 23 92 57 5e b0 c4 c0 c6 61 fd 30 3f 69 4e ef 8a c7 3f b7 5e 17 93 42 9f 84 4a 31 5b e6 71 fa ba 56 5b 8e 10 89 77 fd 13 38 7f 64 eb 6d d3 ea 1e 38 8b ed a6 fa 4e c2 ec 44 2f 89 ce 4f 09 0e ff 00 2c ab 1d 9c cf fe 9d 99 5f ea a8 cf 6b 04 38 04 11 3a 20 cb a6 cd ab d6 36 3d e5 36 60 e1 df c8 50 0c 74 7e 20 d6 37 c3 f9 13 3f 86 70 f6 4f 2c c9 8d 7c b3 33 59 7f d4 9b ec 9e 93 62 29 f9 7c cc 36 7d 36 d5 61 0e a4 73 34 29 ba bb 17 0f f8 33 6e d3 d9 5f d4 8a 31 ff 00 a8 26 b6 85 fe 52 cc 96 38 fa Data Ascii: YHK9+^YZgS6Oc;aCQNgh/^?#rHc1Ue?vJ#W^a0?iN?^BJ1[qV[w8dm8ND/O,_k8: 6=6`Pt~ 7?pO,\|3Yb)\|6}6as4)3n_1&R8
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 80 d1 97 28 93 08 0f 3a 89 63 05 59 c7 e8 33 3c 4e da 6a 33 2b 1a 23 53 3b 65 7d ac 60 09 9a 2a 3c 08 56 03 05 c8 5d c1 0c b6 86 0b 6a 98 33 e6 0f f0 4e 9d ed be b7 f7 3a 46 13 03 62 cd 05 ad c0 98 cc 3c 8d 14 6f c4 d1 dd 79 35 83 bf 49 89 64 71 69 ec ea 92 6d 35 ec 43 2d 8f 60 1f 78 e7 a7 b9 15 af 33 2b 75 c4 ac 75 83 7f d0 bc c9 d5 fa a3 1f c0 d9 2f f9 37 15 5b aa 0f e2 64 7a b3 77 12 61 ef 97 db 4f 06 67 33 ae 66 53 b3 06 99 66 0a 22 21 0d ad bc f6 28 a1 bb 6f 33 79 d2 6f 01 7c fa 4e 64 97 15 ca 1b 33 55 8d 98 6a 00 fa 6a 58 93 6b 1f 81 90 5b a3 24 6a 72 2e dd bb 11 2e 73 92 ac 65 7f c6 86 e7 71 6e 5e 49 6d f3 c4 a1 28 37 63 e0 54 96 30 63 3a b3 12 e4 fd e6 a7 a3 b9 38 4a 66 3b aa 5a 36 44 7d d1 ed 63 8a bc cd 36 bf 65 7e 04 d2 ff 00 75 8f ad 6d 03 33 Data Ascii: (:cY3<Nj3+#S;e}`*<V]j3N:Fb<oy5Idqim5C-`x3+uu/7[dzwaOg3fSf"!(o3yo\|Nd3UjjXk[$jr..seqn^Im(7cT0c:8Jf;Z6D}c6e~um3
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: d0 3e bf 69 6e 86 dc 9f b0 ab 7a 43 b2 d8 58 98 ea ec 07 7f 69 ee 1a f1 30 19 99 e6 fc 83 62 ae 80 e0 4b ba 9f 50 7c 9b 5b 47 4a 0e 87 de 2a 01 01 3b 6f 48 e9 cb 3c 0b 48 67 d1 d2 d6 ca ba d0 85 80 ad 8f 8d 81 c4 19 8e f4 4f ac 2e ae a1 7e 3d 15 a5 4d da 08 d9 e3 cf e6 78 b9 77 5d 60 02 9a b7 f8 d4 8c ac 22 46 5d 2e 82 5c 7d 3b 9b 83 80 eb 40 60 83 91 ed 32 58 b4 75 a2 47 c9 aa ae 3d 8c 63 75 1f 14 3a 0e e5 d2 8f 63 0d 75 d3 17 2f c8 a7 aa 63 14 df 70 00 fe 26 6d 8a 83 ad c7 59 0f 94 1b 57 f7 92 3d e0 df c4 d2 a7 fa 2a 7f 22 2e c0 a2 07 43 05 70 41 9a 5a 72 f5 51 5e e1 a2 39 88 2c cc d9 fa 2a 40 7f 12 da 9f a8 3f e8 ae b3 fb 09 46 da e3 2e d8 d4 35 17 1f f5 01 12 e5 b7 7b b1 1b fb f1 08 6a ba b1 e5 85 6a 0f af 68 82 59 89 98 ad dc f6 81 bf 51 13 18 57 17 Data Ascii: >inzCXi0bKP\|[GJ;oH<HgO.~=Mxw]`"F].\};@`2XuG=cu:cu/cp&mYW=".CpAZrQ^9,*@?F.5{jjhYQW
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 4e 19 7c 3f 63 3e da e5 09 b8 b4 77 3c e4 47 51 65 6d dc 3e d3 21 94 a5 33 31 bf f5 88 d2 8c b7 c4 6f 96 ff 00 55 6d fe d0 6e ad 5a 37 c9 be b3 b0 1c 4f 3f 42 d9 34 7a ab 64 a7 0c a3 a8 e1 6c a5 7f 81 23 96 07 7c b3 a5 29 7a 11 bc fd 23 fe 24 b3 13 eb d8 9a 1a 98 fa 33 f6 26 89 7a 90 ab 80 d3 d6 20 8d 4f 5b 41 bc 4f 9d 47 04 4f 3d 62 f5 16 d8 25 a0 ea 0f fd c0 7d a1 b6 03 a8 23 70 77 22 2c af 22 b2 39 95 e4 d6 56 ad fa 4b 5c e8 6e 09 9d 98 17 14 f3 e0 71 2e 53 24 b1 ee 03 78 4c c3 75 3b 5a ec 96 24 78 1a 99 6a c7 6e 61 df bc d0 b3 17 b1 9c fa 98 82 d1 ac cf de 6b 56 f2 9a fb 19 b3 7e b5 8f 73 a2 74 eb 42 d2 0c 66 5c 5f 55 88 c3 c8 88 7a 7b 6b 14 9f 68 ce 87 f1 a9 4e 69 a7 9f 66 68 49 29 47 1e e8 c5 5c 0d 77 3a 1f 42 60 19 2d b0 63 de bf 51 ae e5 b5 7c 1f Data Ascii: N\|?c>w<GQem>!31oUmnZ7O?B4zdl#\|)z#$3&z O[AOGO=b%}#pw","9VK\nq.S$xLu;Z$xjnakV~stBf\_Uz{khNifhI)G\w:B`-cQ\|
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 50 6b 8b 5a 9f 79 31 26 42 9a 00 5b 86 fd 65 f9 20 6e 54 47 d6 07 a8 32 fb 87 d3 b8 68 00 4a dc 78 8c 50 7d 22 2c 51 f4 93 19 63 37 7d 7a 31 2f b6 1a 2f 6e d3 5b 68 f2 22 97 3c 18 d5 eb 02 b6 00 79 12 bc 3a 11 eb 60 c0 6e 73 e1 00 c5 06 40 f8 85 64 56 b5 b9 02 08 67 44 e1 8e 3e fe 59 e7 d2 78 9c b8 91 c6 3f 41 fc 4b 69 1b 70 07 92 75 19 05 ea 47 37 e9 34 16 13 4f 4a 2b bf ea 1d ea 64 2c fa 9c cd 7f 5b 2b 55 18 f5 fa f6 6e 63 98 33 fd 2a 3e a6 3a 5f c9 96 6c e1 60 54 3b c9 b6 f8 3b a7 2b 3d fd 46 c1 c5 7f 4d 7f 73 ef 34 8d dd 6d c4 98 56 26 22 e0 74 bc 6c 75 1e 14 16 fb b1 1b 8a 7a 9e 4b 63 54 d4 d4 7f 9c e0 16 3f e8 07 d2 64 e5 d9 73 e7 8e 8f 49 a6 82 a6 8c cb b7 c8 27 50 ea 49 4b 7c ba 80 67 1c 6f d0 4d 2e 0a 33 25 67 5f 51 50 49 9c e6 a5 36 e4 57 5a 9d Data Ascii: PkZy1&B[e nTG2hJxP}",Qc7}z1//n[h"<y:`ns@dVgD>Yx?AKipuG74OJ+d,[+Unc3*>:_l`T;;+=FMs4mV&"tluzKcT?dsI'PIK\|goM.3%g_QPI6WZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49832	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:31 UTC	1196	OUT	GET /media/wysiwyg/home/VIDEO_MORPHING_LOGO_FRANCE_compressee-1.mp4 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://www.retif.eu/ Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=3FLPsJhHx9AcTm4ZR8zcilv1baeQWcXzP1IRsHrpDkWv7sGzbQBxEWQAn3TcDLe3jvAKveTcWKGI38IxyNkQ4Oq1Q%2BugdRqnRNPYtNAbibb9wI8962aR3MUBlf03Hw%3D%3D Range: bytes=1835008-1881758 If-Range: "6704ee5c-1cb69f"
2024-10-25 08:16:31 UTC	757	IN	HTTP/1.1 206 Partial Content Connection: close Content-Length: 46751 Cache-Control: max-age=31536000 Content-Type: video/mp4 Etag: "6704ee5c-1cb69f" Expires: Fri, 24 Oct 2025 12:13:18 GMT Last-Modified: Tue, 08 Oct 2024 08:33:32 GMT Traceresponse: 00-18016277d8ed8b0b8cce9b179c9a1c7d-1e5dd0337f1c743d-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72193 Content-Range: bytes 1835008-1881758/1881759 Date: Fri, 25 Oct 2024 08:16:31 GMT X-Served-By: cache-par-lfpg1960085-PAR, cache-dfw-kdal2120134-DFW X-Cache: HIT, HIT X-Cache-Hits: 352, 0 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: c7 97 f0 fd 88 f3 46 b6 ce 38 00 68 5d 3f 1c df e6 17 7a 27 7e 60 00 1c 70 21 10 04 60 8c 1c 21 10 04 60 8c 1c 00 00 01 61 41 9e e8 45 15 2c 27 ff 00 00 03 00 00 03 00 00 03 00 00 03 03 0c 4e 9a 45 14 9f ed 9e 56 f9 e8 e6 cb 39 a4 13 cc 46 6a 99 6a fb a7 3a 1f 4a 0a c0 74 a2 ba e1 4e 2c b2 f4 06 71 eb c8 99 63 d8 22 14 b7 6a 8c c7 6b d2 f5 a8 74 09 b3 e6 52 83 70 4d b9 58 f8 f2 35 ca 37 47 34 6c 21 3d 34 fa a7 5c 04 62 e8 06 be 0b 05 8d 47 67 ab 53 8c 71 51 c0 69 1c 51 71 7f 0a af de 67 fc e3 85 35 c3 95 2c 05 52 bf 39 3a 2d a3 e4 35 7c 01 12 f2 58 12 f0 4a 44 2f 6b 0e d1 ec 31 9e ff 2c ab 68 07 6a 9b 74 bc f7 7b aa 6d b2 45 a0 ae aa 61 ed 47 5d cd 3e 1d 11 70 fd 1b 5d 76 6f a8 7f 61 e7 5d 86 42 be 78 f1 4c 5f ec a7 af b7 e0 75 4f 69 52 d7 1a 2e b2 3d b3 Data Ascii: F8h]?z'~`p!`!`aAE,'NEV9Fjj:JtN,qc"jktRpMX57G4l!=4\bGgSqQiQqg5,R9:-5\|XJD/k1,hjt{mEaG]>p]voa]BxL_uOiR.=
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 95 08 2b b2 0d e2 b0 96 63 81 a8 92 95 d2 a2 1f 78 8a cf 66 f0 22 f7 f2 b2 0a d6 03 fd d0 c6 51 cf 5e c2 be 87 fc 44 c6 66 f1 19 19 77 a1 09 7a 9b 54 6a 57 14 5e bf 23 9b f7 fb c2 72 8a e2 ab ba bd bd 73 4e 6f 94 4b d9 64 08 2c 04 0d b7 d3 da 01 8c 0c 5d 2c 94 1b a0 7d 56 9f 1e b1 af 81 8c 98 2b 66 39 a1 5e cc 4e b7 0c 3c df 8d 58 4f af 2a 59 9b d5 b9 8b dc ff 34 09 e2 a3 1f 48 18 cb 82 78 ce 2d 0c 4b 4d ac 6e 95 ba 7e 15 67 37 0f 60 37 ab bc dd ba 91 13 ac ee d1 5d ba 66 c4 30 bd 96 2b 09 ca 39 6d 78 0d 7b 37 54 10 ff f2 0d a3 de a1 fd cd f7 59 5f e0 17 1b 13 82 93 ed ed bd e6 3d 3b 16 83 63 77 73 82 8a d4 11 4b 6d 10 c1 99 a0 c7 e0 f9 e1 42 12 e9 56 ba 4e c4 a9 67 c6 3c f1 47 9b 4d 71 2d 2a 3a f9 ff 22 dc 93 33 e9 9c c0 9b 3e 32 65 fd 74 0f b9 dd 57 6a Data Ascii: +cxf"Q^DfwzTjW^#rsNoKd,],}V+f9^N<XOY4Hx-KMn~g7`7]f0+9mx{7TY_=;cwsKmBVNg<GMq-:"3>2etWj
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 7a f9 e2 76 0e 2b 8e 2a a0 f7 50 8d 28 ac 76 ac 3f 61 29 c4 1d ab 0b 96 22 19 13 d6 2d 65 17 69 b9 c3 a1 d8 ec 3c 2c a0 a6 9f 7b d9 ec 17 85 78 19 d0 39 fc 0e e0 9a bc 20 71 6c 52 3e b5 cb 6f ec f8 c4 2d a0 e4 ca 55 3c 6a ed c0 b9 87 a6 73 58 b6 1f 2b 20 bc 66 98 70 cd 29 90 b9 7c 7a 60 a1 9a 3a 9f 84 fc d8 3e 49 c9 1d 56 08 08 3c 50 f0 28 e9 e7 c9 65 21 19 3a ea 6e 26 0c 10 2f 45 4b 57 2e 56 34 c2 6b 8c 86 ed f8 47 ca d2 01 58 f5 4b e5 77 c7 34 90 7f 9a 9f 48 f1 4b ea d9 ea 80 7a cd 03 3a 9d 76 66 68 e5 0c 79 2f 83 39 ad 07 ba 54 40 68 06 35 0e e8 ff 89 ec 1b 58 23 f1 10 33 e6 0e dc 30 69 63 82 a5 cc e7 1c 56 38 34 fd bc 9e 02 ba b2 13 7b 47 1e c2 da db cc 00 02 c1 21 08 12 52 9a 2c aa 98 6e 75 35 9c c2 c8 52 aa 4f 9d 19 4a a7 69 8b 49 07 12 13 97 d3 6e Data Ascii: zv+*P(v?a)"-ei<,{x9 qlR>o-U<jsX+ fp)\|z`:>IV<P(e!:n&/EKW.V4kGXKw4HKz:vfhy/9T@h5X#30icV84{G!R,nu5ROJiIn
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: d2 bb f8 f4 be cf 2b 62 cb 34 de 86 0a 53 08 60 eb 26 72 f4 ff b5 b8 c3 87 55 b0 45 c4 a8 bf 51 b3 98 79 9a a2 2f a0 7d 9f 3f c4 d4 0f 71 62 8e 55 ce fa d5 fd d3 92 98 e1 54 48 37 4b cc 1a 63 05 39 41 9b 2d 05 e4 01 cb b7 cb bd 20 26 6f 09 16 a4 75 8b 83 b7 8c 51 32 f1 0f 65 a2 17 1c 7f 06 bd 2f 24 99 06 ec 85 98 cd fe 55 c1 6b b3 fb af b4 9b ff 4e 5f 04 ff 5f 4f c1 93 59 27 8c 00 00 3d 21 21 10 04 60 8c 1c 21 10 04 60 8c 1c 00 00 04 64 41 9b 96 34 a4 c1 09 ff fe da a6 58 00 00 03 00 00 03 00 00 03 00 12 07 9b 7c f7 93 08 e7 71 be 3b 73 89 d7 ee 0f 8f 45 28 5a fa cd ef 41 64 f4 58 00 c2 e7 65 e2 92 4d 22 fb 1f db 56 bf 83 4c 60 dd 8c 83 5d d2 82 42 d4 b7 ea ca 28 a9 d3 d5 7c b8 ec 5b 44 77 78 ff a0 89 09 62 83 a0 ae 33 8d 8b 25 2c e1 ca b3 b7 ad 78 32 0e Data Ascii: +b4S`&rUEQy/}?qbUTH7Kc9A- &ouQ2e/$UkN__OY'=!!`!`dA4X\|q;sE(ZAdXeM"VL`]B(\|[Dwxb3%,x2
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 19 5d b7 2d 5d ed 5b f9 71 8b b0 03 10 8d fe 09 e6 6b fd 7d c9 79 4b 7f a0 52 a5 0b 18 7a b2 2f 23 d1 d9 92 35 8e 07 64 96 54 fd 08 79 10 f0 32 b4 92 90 46 07 b6 16 29 55 da b4 b0 5f 62 df 51 4b 6e c4 04 09 a0 6c e9 de 94 7e 16 ad f1 2b cf e0 3a 70 f6 d7 18 1e 7e eb 1c d9 4d c6 bb 87 f9 6a 9c 85 3f f6 e2 b6 9b 12 12 c9 f7 80 be c2 a8 93 c2 f3 f6 ab 14 da fc ca c5 73 74 ee e2 ea a9 a0 a5 db fc f2 83 18 0e e2 e7 5c 09 1d b3 ac e7 e5 b0 55 2c 00 88 24 75 51 dd c1 f7 c1 5b 8c 5f e5 d3 7f f6 d8 50 b7 f1 b3 b6 57 86 09 80 00 15 30 21 10 04 60 8c 1c 00 00 00 e5 01 9f d3 74 42 7f 00 00 03 00 00 03 00 00 03 00 00 03 02 d3 95 e1 07 c4 2b df 0c 88 69 7c 7f 4a 66 f6 4f fb eb 16 a1 38 0b b1 40 00 81 fd 0b 1d a5 b2 19 a1 da d8 c5 7f 4e db 6d 1b fd 3a b4 37 68 dd 90 34 Data Ascii: ]-][qk}yKRz/#5dTy2F)U_bQKnl~+:p~Mj?st\U,$uQ[_PW0!`tB+i\|JfO8@Nm:7h4
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 28 35 a4 6d 11 5b cc 71 c6 c3 82 10 8b b0 68 22 7a 6d 2e 69 2d 75 9e 57 42 03 2d a0 d2 96 8d 19 6f e8 e1 cb 33 34 88 fa 7c be 7b 90 26 28 3c a9 c4 b7 d7 d1 f3 5c 18 96 f8 1e e4 90 29 ff df 13 10 53 c1 90 45 d3 75 53 37 11 1b c5 1f 7d 61 f2 b2 d3 c6 14 05 b4 65 77 f2 bb 12 0d a3 bd c3 bf 05 03 9c 5a bf 90 98 2e b0 de e1 4b 62 8e 49 6b f6 61 f5 c3 a9 4c b3 7b 61 f4 b1 57 0f a8 02 ca ac a1 00 39 db 78 16 ce 94 85 d1 53 f6 32 b8 01 10 17 79 53 7b 5e a8 a6 6e 09 cf 32 66 00 08 c9 b5 45 60 a4 5a e2 39 3d c7 11 30 71 1c 83 13 5f 03 45 c6 c3 69 81 82 f9 84 27 53 c0 90 b5 0e 9c b2 51 8f 50 cf 0e f1 6b c6 7a 7f 90 8b 8c bf bd 87 b4 50 5e 60 0d 4d ce cd cb 4f 02 66 a6 b4 0f ab 43 3a 5e bd 8c 23 f9 01 7e a6 76 a3 44 ed 9d 38 eb 13 de b2 8e 25 e4 f8 cc 2d 9c c5 b4 89 Data Ascii: (5m[qh"zm.i-uWB-o34\|{&(<\)SEuS7}aewZ.KbIkaL{aW9xS2yS{^n2fE`Z9=0q_Ei'SQPkzP^`MOfC:^#~vD8%-
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 9f 76 3c 69 24 8d 70 1b 22 64 ec db b8 20 ae 32 c5 57 c2 37 32 ea e1 11 50 9d 4f 7d 00 b6 0e b3 41 22 4f aa 68 87 ad d7 7a 7a 25 d8 56 0e b9 b7 f0 b0 fd 1b b3 7b c6 ef 12 2f db d8 bc fb b6 36 50 3a 26 3e 8b e9 d0 8d 09 7a 0c 16 cb 16 a6 ee 05 c5 a9 91 b2 e9 b6 9c 0b 80 ad ad a8 b0 b6 d7 84 f6 d6 0b 9e 43 91 98 bb a8 28 09 5e 82 cb f8 93 aa 14 20 43 f7 fd 6e 78 cc 84 30 6d 21 40 b1 cf 45 1f a5 96 0c 1d f9 08 e1 93 00 bb aa f5 45 cd 05 43 70 e3 f8 eb a5 93 36 4d 72 9a c2 2e ea 04 b1 aa be 5a b7 42 fe 27 5a 1b 00 72 49 0f 59 ba dc 4d 70 84 5d cf ce e1 f4 5c 70 c8 b7 75 76 2b d6 5a e6 70 a8 22 64 a5 fb 0a e3 88 c9 df fb 1b 47 12 c9 c2 6d b1 65 2e d3 f9 d5 3f a2 55 14 5a b8 e4 77 a1 32 1e a3 52 db 52 d9 c8 f6 0d c6 d5 c8 29 2e 04 ca 37 2d 8e 82 e9 a4 15 ab 67 Data Ascii: v<i$p"d 2W72PO}A"Ohzz%V{/6P:&>zC(^ Cnx0m!@EECp6Mr.ZB'ZrIYMp]\puv+Zp"dGme.?UZw2RR).7-g
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: c3 6e fe 77 f2 fc 54 fe de 42 93 7d 03 5f db 23 e9 2b 6f 1f 52 6f e7 ab a2 b3 65 e6 d0 e6 99 40 de cd ba fc ee 8a 17 51 0b 4a 0b a9 65 56 fd 0c 88 af 26 2b 01 80 69 68 56 8a 01 86 cf 6f a2 3a 24 24 bd 05 98 60 b4 9c f2 4e 78 2d c1 b8 f7 27 52 7c fe d8 9e 2e 30 db 1b f4 77 87 6c 05 37 30 e9 a0 5f b3 2e e2 fc 62 6e 13 ff d0 80 00 03 7f 21 10 04 60 8c 1c 21 10 04 60 8c 1c 00 00 00 f3 01 9e 5d 44 27 ff 00 00 03 00 00 03 00 00 03 00 00 03 02 9d 96 f0 ef 6c 84 5d 52 85 be aa 29 0b 95 a5 99 75 60 e6 db 2e 01 d9 ab 43 e5 f2 2f e3 cf 11 cf 30 55 5b 36 55 02 fc e4 ce 33 12 de 1b 73 31 6d 65 59 9d 9c 19 96 19 b1 47 41 66 e0 53 45 e0 21 5e d3 89 cf a1 42 5b 6f cf d0 a2 da 30 08 da 33 e8 51 f1 1d b8 b5 0c 0e 67 15 44 52 45 a6 5f 12 f5 bd 90 16 99 d9 b3 a7 7f e5 81 6e Data Ascii: nwTB}_#+oRoe@QJeV&+ihVo:$$`Nx-'R\|.0wl70_.bn!`!`]D'l]R)u`.C/0U[6U3s1meYGAfSE!^B[o03QgDRE_n
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 20 73 59 f0 bf b8 03 21 11 1f e0 38 5a 1d a5 9b 50 0c bd 7b 1d 0a 6d 68 5b 4b 2a c0 00 0c a9 21 10 04 60 8c 1c 21 10 04 60 8c 1c 00 00 01 b6 41 9e 60 45 15 2c 27 ff 00 00 03 00 00 03 00 00 03 00 00 03 02 86 53 14 a7 a6 b3 d4 89 93 4c e3 db f4 ad 64 bf c9 34 ff 51 8e ae ce e1 45 73 cf f8 81 59 c1 6d 78 f0 97 30 02 53 e4 10 a6 48 e8 83 58 67 87 8c 5c f4 e4 ef 6a 89 c8 de b0 62 98 f9 29 8a 5f fc c2 85 96 e7 e3 2d 70 25 cd 62 5e 49 f1 9d 52 26 7d ae 2e 29 8f 74 f9 34 04 37 0c 98 c6 cf 94 eb 8b 5c 3d 2f 60 85 99 2d 0c cf a4 82 36 3a ec 55 4b 5b 69 c2 1a 3d 1a 5b d8 5b 87 f2 9a 59 eb ec 8a 2a 1c ee a4 9e 2f e5 50 73 a7 75 49 91 41 ce 98 72 cb 9d 6d c3 c3 ad 36 e1 86 e8 83 f0 08 46 d3 4b 0c 8e ef 71 2b 72 e3 13 2a 05 0f f4 d3 9d 9d 96 e2 e6 3e 09 e4 4f fe 16 bb Data Ascii: sY!8ZP{mh[K!`!`A`E,'SLd4QEsYmx0SHXg\jb)_-p%b^IR&}.)t47\=/`-6:UK[i=[[Y/PsuIArm6FKq+r*>O
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 8b 7f 78 e6 d2 f9 34 9e a7 38 91 f3 45 c7 12 73 63 fa 70 10 1c 75 a2 7a 1a 1c 29 68 3f 34 a8 61 41 65 30 59 cf 4f 1e c8 5c 6e 5f 50 38 dc 37 58 39 16 8e d7 e1 80 62 eb 25 ee 14 7d 12 6f 55 d6 79 0f b8 56 e9 5c aa 61 ad 79 e7 96 6a 4b 85 c5 e9 48 39 a4 d8 bd ae 93 9e 13 cc ae b5 f7 fc 7f fc f1 00 7d e3 75 48 d8 54 70 a8 6d 42 da bb d8 b2 55 df 8e e4 bc fb 23 db 26 a7 42 6e 39 ec ce 2a 91 f7 ff 59 98 ee 12 7d 85 ba 46 94 46 a8 5c a6 60 22 33 02 c0 03 d6 cf 31 ea 14 5b d2 39 ac a5 66 0d ee e4 5c cc 5a c7 c6 01 cd f1 9d b1 e0 48 e5 78 8c 03 f9 3c f7 af d1 e9 02 7e d8 da 4e 06 55 43 0b 97 95 93 d8 ee 2e c7 7e 84 fe 64 a9 91 9d da b5 03 95 40 e8 9b f6 67 f7 1a 01 b3 57 26 15 8c 14 19 04 a1 bf 41 bb d1 dd e0 24 09 26 55 23 9d 10 b8 7c 55 e5 f9 d3 bc 0b f9 70 44 Data Ascii: x48Escpuz)h?4aAe0YO\n_P87X9b%}oUyV\ayjKH9}uHTpmBU#&Bn9*Y}FF\`"31[9f\ZHx<~NUC.~d@gW&A$&U#\|UpD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49833	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:31 UTC	633	OUT	GET /media/wysiwyg/nouvelles-collections-2024_2_1.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96
2024-10-25 08:16:31 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54818 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "or9v+ai0iBEFFMzQIQMq5hsyuq6A6EmL3T6Y/Rwzq4U" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=345692 idim=490x490 ifmt=jpeg ofsz=54818 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e843062c729e9fa8f5444c2e-a0d988822b5b89a5-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:31 GMT X-Served-By: cache-par-lfpg1960094-PAR, cache-dfw-kdal2120068-DFW X-Cache: HIT, MISS X-Cache-Hits: 6, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 0c 8f 90 62 81 71 c9 a9 39 45 02 cb c9 a8 b0 94 06 32 89 93 5c 95 40 e9 44 2a e0 1a 6d d6 94 8d a3 75 90 37 d1 66 e7 4c 6f e8 5d 31 3f 58 9d 7f 8d 1c 56 87 be 3f e3 16 09 91 96 98 91 fe ea 93 47 62 a5 52 87 85 f8 82 90 46 2b c7 1b 69 f2 99 a4 3a d0 a3 3a e0 f8 ae 62 88 89 41 9e 2c e3 ef a8 e7 91 d6 b3 1b bd 5b 53 8b 50 b9 b7 b7 bf dc 91 cc f1 42 ed ea 25 50 95 e4 01 86 27 dc d4 f2 36 85 04 8d ae a5 71 a1 72 40 3c 0b 96 3d 77 56 b1 8c 3e 94 d3 b4 13 4b 16 5a 7f dc 42 d8 2a af d4 ed 23 a9 1c 8c f4 e2 a2 9f 49 bc 93 44 d2 92 f8 88 2d ed 27 9c b4 e1 83 27 91 26 d7 dc ac b9 c9 24 e1 40 c9 26 a3 e4 d6 f5 59 fc 44 d6 a9 2d a5 ab 6d 01 ae 23 8d 37 88 91 47 98 64 2d 93 e8 03 91 9a 9e 9f 54 b2 6d 27 4e 0d 34 91 db dd 4b 39 49 27 8c 5c 9c c0 76 8f 31 5b fa 7b b3 c7 Data Ascii: bq9E2\@Dmu7fLo]1?XV?GbRF+i::bA,[SPB%P'6qr@<=wV>KZB#ID-''&$@&YD-m#7Gd-Tm'N4K9I'\v1[{
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 32 6f 8d 3e 55 60 5a f2 15 77 3f 31 b2 6c c6 3a a3 8a ac 78 a3 02 cc 03 ef 56 85 38 aa 8f 89 4f 99 0f 1d 8d 59 68 32 fc c4 4b 27 ed 29 fa 4f fa 6c 7f d4 93 fb 06 8e 52 37 1f 9d 46 e9 67 17 d1 8f f5 25 fe c1 a2 d5 c6 ff 00 ad 7a 87 e9 1f 26 48 0f 59 f8 13 59 b3 6f f1 5b 7f f6 49 fa 51 9b ea 3e c9 bf c4 ed bf d9 27 e9 4f ee e6 a7 22 46 f0 9d dc 52 37 f1 4d 96 e0 d3 4e e0 2d 75 ce a9 c9 1f 9a e2 4c c8 41 53 82 28 76 6a 48 34 b6 6e 35 4b 76 9f aa ee da 8e 79 c5 58 56 60 c3 ad 50 2e 63 f2 ec f4 e9 94 e0 b2 48 0f fb ae 79 fc e8 8b 1d 54 a9 da e6 b4 ae 52 08 0d d8 7e b2 0d 8e c5 8e e6 5d 89 07 34 c3 50 b6 f7 29 27 21 a8 b1 82 2a f7 72 55 50 69 17 34 29 5e 7a 54 83 ae 69 82 98 a5 22 30 30 62 b5 56 d6 3c 4f a7 69 b7 29 69 e5 dc 5d 5d 1e 4d b5 ac 7e 6c 8a 31 bb 2c Data Ascii: 2o>U`Zw?1l:xV8OYh2K')OlR7Fg%z&HYYo[IQ>'O"FR7MN-uLAS(vjH4n5KvyXV`P.cHyTR~]4P)'!*rUPi4)^zTi"00bV<Oi)i]]M~l1,
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 5a d6 7c cb 5b 59 6e 63 0f be e2 58 ca c8 e7 6c 4a db 7a e0 0c 65 87 fe 95 93 e9 8b bb c5 0d d7 ff 00 d3 49 04 12 08 22 50 41 04 74 23 de b5 db 4f b4 5d c8 9e 74 3e 64 05 7d 52 b8 09 22 1c 67 ef 2e 03 0c f1 8c 7c 6a f8 f7 0a 07 d4 54 44 c9 b3 31 3c 59 b9 40 f1 90 ff 00 fd 76 f4 fb 18 bf fb 82 b1 0c d6 e5 e3 2c 0f 0e ea 38 39 1f b3 e7 ff 00 9a b5 84 93 47 c3 7d 0d fe 53 b2 7d 43 e2 3b be a4 ac 24 c4 e8 7e 22 a1 73 46 5a c9 b6 45 3f 1a a6 41 68 7e 23 e1 34 e2 6e fa 2c b8 81 4d 59 d2 71 8a cf 74 0b b0 61 00 9a b7 24 bc 75 af 01 cb 2b 19 bf 22 02 6e 49 b5 c1 e7 15 5c d6 1c 1b 76 cd 48 99 46 3a d5 63 5b bb 02 22 33 4d 8c b3 38 81 56 a5 77 4f 93 1a 8a 0f f5 65 fe c1 a7 16 5f 5f d6 a3 34 e9 3f c7 e3 3f ea c9 fd 83 4e 07 f5 fd 6b de d3 e8 59 8c 9f e6 34 db 2c 1f Data Ascii: Z\|[YncXlJzeI"PAt#O]t>d}R"g.\|jTD1<Y@v,89G}S}C;$~"sFZE?Ah~#4n,MYqta$u+"nI\vHF:c["3M8VwOe__4??NkY4,
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: eb 7b 0e fb 4a 1f 8c 79 f0 e6 a1 f2 8f ff 00 b8 b5 83 31 ad fb c6 18 7d 03 52 21 70 0a a9 c7 b7 ac 1c 57 cf f8 aa 78 6f a1 bf ca 2e 5e 47 c4 f0 34 ec 6f 86 06 99 26 b8 0f 35 72 2c 44 53 46 68 1a 2d f0 40 39 ed 57 58 b5 15 da 3d 55 91 59 5c 18 cf 5a b1 47 7f e9 1c d7 95 9f c3 9d 64 89 eb e3 c8 ac 82 e5 f2 4d 41 76 9f 55 54 b5 6b cd e3 19 ef 42 35 ff 00 a4 f3 50 f3 ce 64 6a 7f 0f e1 c8 60 48 8b 97 22 aa 9a 92 5a 73 e2 f2 12 7f a3 27 f6 0d 10 ad ea fa d0 36 0d 8b a8 7e 4f fd 93 4f ab 73 f5 af 49 be 91 3c d5 36 c6 6d 5a 73 a9 d3 ac 87 7f b3 c7 fd 91 44 92 73 51 9a 69 ff 00 27 d9 7f dd e3 fe c8 a9 25 39 ac 07 93 1e 71 8d 23 34 a7 eb 5c 45 66 60 00 e4 9c 01 f1 34 27 42 20 89 e4 27 68 e9 d4 f6 15 26 96 51 95 1e 63 b1 3f ea f0 3f 3c d7 52 31 12 04 07 3d cf c4 fb Data Ascii: {Jy1}R!pWxo.^G4o&5r,DSFh-@9WX=UY\ZGdMAvUTkB5Pdj`H"Zs'6~OOsI<6mZsDsQi'%9q#4\Ef`4'B 'h&Qc??<R1=
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 32 74 f8 88 26 93 5e af 56 99 28 54 6c 40 a3 92 56 c0 e6 a3 93 b5 10 0f 14 a5 41 e9 2c ae 40 87 f9 ac 47 5a e0 39 34 32 9a 7a 33 cd 10 a0 40 ef 72 4e dd 8a cd 11 f8 37 e9 4f 2b 73 51 d2 3e c2 87 3e ff 00 9d 3d 13 e4 0a 2d c0 8a 9c 99 ba 69 7c e9 b6 3f f7 68 bf b2 2a 51 56 a3 34 91 fe 4c d3 ff 00 ee b1 7f 64 54 9e ee 2b cf 3c 99 49 d2 01 a2 6d 54 19 73 8e 80 d0 5b c7 4a 3e cf 92 e7 e5 44 40 78 86 b7 5a 57 6a 49 ea 29 5d a8 c4 87 d9 31 17 30 e3 bd 48 5d bc 69 79 6f 23 3a a3 fa a3 52 d9 23 0c 37 11 c1 1c fa 7a d4 55 bf 13 41 8f e9 51 9a c1 89 5a 13 22 33 2e fc fa 7b 70 79 cd 6b c6 6b 1d f6 69 9d c7 af ed 33 8f 07 38 8b 5f f1 4d b2 64 2c 77 f2 60 73 8e 1d 97 e5 9e 2a 7a e9 04 73 c8 a3 a0 3c 0f 81 e4 55 5f c1 f6 a5 fc 4b e2 7b a5 00 46 2f 26 45 56 c3 3a e2 46 Data Ascii: 2t&^V(Tl@VA,@GZ942z3@rN7O+sQ>>=-i\|?hQV4LdT+<ImTs[J>D@xZWjI)]10H]iyo#:R#7zUAQZ"3.{pykki38_Md,w`szs<U_K{F/&EV:F
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 38 14 91 4e a0 c9 1e c2 9e 4e 3f 07 fa 4c 2b 9e 83 26 95 7f e5 4f aa 5b c1 2b 03 17 90 c2 58 c8 e1 84 be 91 fa 1a 62 09 0f da b7 55 0b c6 de 22 4f b3 dc 5b db cd 27 9d 34 89 1c 0d 14 6e ad b5 08 2f 87 c0 cf 3c 7a 49 c8 22 ae ae 17 1f ff 00 ae 22 79 6c d9 00 1d b9 80 7f 25 d6 cd 15 a6 ab 74 18 ed 63 1c 44 76 ca 0d d9 f9 fa aa dd 72 fb e6 76 f8 fe 95 1d a1 45 fc dd a2 db 41 e5 88 e4 d9 ba 45 07 24 16 f5 60 9c 9c f2 7a d3 db f7 66 b3 b3 02 00 ed 2e 47 ad 9b b9 da 74 1e 69 f4 3c 8a 10 92 31 4a 57 35 38 64 96 72 29 86 eb 49 49 39 a5 35 71 37 3a 7b 79 02 8d b6 ba 21 80 a8 dc d7 54 ed 6c 83 5c 18 83 38 ad cb 7c 73 82 05 11 bf 3c d5 66 1b 82 06 09 a9 08 ae 33 c6 6b 4a e4 b1 20 52 4c 86 18 ae 11 43 2c 83 1d 69 c3 27 15 40 44 4a 8a 63 d2 bc fd 05 36 5b 38 a7 b1 95 Data Ascii: 8NN?L+&O[+XbU"O['4n/<zI""yl%tcDvrvEAE$`zf.Gti<1JW58dr)II95q7:{y!Tl\8\|s<f3kJ RLC,i'@DJc6[8
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 12 86 93 7c 85 8b 01 9e dc 0e 78 03 f8 d1 30 97 42 ec 8d 83 82 33 f0 23 9a f4 ca 12 20 c4 65 b1 c9 f8 e4 8a 70 36 b1 f7 8a 4e f5 3c d0 4d 31 32 07 66 2a 83 39 e7 0a 38 1d 7b 0e 94 24 80 a8 20 8e 41 e6 a5 ac e7 78 16 72 ad c3 db ca 8d f1 04 50 17 41 44 f3 2a 9e 01 c0 fa 71 4c e0 69 0d 7b f5 8a a7 7a e9 23 59 a9 3b db de 92 c7 06 93 9a 8c ac a2 6e 0b a9 e9 44 ff 00 f1 44 7e 31 38 ad 16 09 20 36 b0 25 d4 37 1b 63 41 08 9e 2c 11 b1 47 1b b3 ce e1 f0 ce 7a d6 61 78 c5 2f b4 83 9f fd e1 18 fc 43 0a d6 61 91 2d ec 61 9e 1b 74 72 c0 34 92 b2 17 da 54 9f 46 17 90 57 f5 ab 63 1e 90 76 aa de c5 f5 83 29 f5 7b d8 ae 9d 24 3f 89 21 78 ec 35 44 66 de 4d ac a7 76 00 dd b9 0f 3c 57 cd 58 af a5 b5 7d f2 d9 df 6f 7d ec d0 c8 0b 7b fa 48 e2 be 6d 02 82 91 a9 eb 8b 95 c4 84 Data Ascii: \|x0B3# ep6N<M12f98{$ AxrPADqLi{z#Y;nDD~18 6%7cA,Gzax/Ca-atr4TFWcv){$?!x5DfMv<WX}o}{Hm
2024-10-25 08:16:31 UTC	1379	IN	Data Raw: 02 23 8e 32 23 f9 d0 c4 60 d1 ca 32 d1 7f 5a 84 90 61 8f ce 9c f0 22 56 e6 6d fa 06 3f 99 ec 0f fd 82 d4 be 70 0d 43 e8 5c 69 16 03 fe c1 3f 4a 96 27 8a f3 9b ea 3f 32 c3 81 3d 8c d7 14 6d ef 49 ce 69 59 a5 86 77 77 35 d2 78 a6 4f 5c d3 8a 78 ae 86 36 46 6b a2 96 71 4d ee 19 a1 3a 2c 1c 57 ab 86 94 31 5d 3a 29 47 14 b5 eb 9a 46 42 82 49 c0 1d ea 95 e2 0f 13 bc 28 60 d3 48 69 f9 0e 59 18 6c 18 e0 ae ec 02 7d ba 8a e0 a5 8d 09 d2 e5 a8 47 0d cd 8d d5 b4 92 05 12 46 cb 9e a4 64 70 71 df 1e d5 55 d1 6c 56 d5 ae 34 db a2 a1 a5 08 55 94 ed 57 23 95 d8 c4 73 9c f0 4f 19 18 35 50 d1 bc 45 e2 03 70 a5 d8 dd 47 23 22 08 9e 34 54 90 31 3c 16 4c 10 72 bc 7e 3c 11 56 2d 42 c2 1b f4 92 ee 29 64 b6 ba b3 8f 64 c2 6c 01 1f 7f da 0e f1 36 73 b8 70 33 f8 b3 8c 98 ce 9b 15 Data Ascii: #2#`2Za"Vm?pC\i?J'?2=mIiYww5xO\x6FkqM:,W1]:)GFBI(`HiYl}GFdpqUlV4UW#sO5PEpG#"4T1<Lr~<V-B)ddl6sp3
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: cb 08 23 3b 52 39 77 b9 c3 6d 3d 42 81 8f 9d 09 93 ff 00 3c 7e b4 51 38 ea 8a 7e 63 ad 37 b9 bd 97 f0 a9 1f 2c f7 12 80 30 ec 66 75 ae 32 a4 96 84 b0 05 6f a2 60 3b f0 ff 00 f1 ad 62 d1 e1 b6 b1 79 e4 8d 5c b4 84 0d cd e8 50 ab d5 87 b8 cf 7e d5 90 f8 91 a3 6b 39 66 52 ad b2 65 2a c3 9c 7a c6 70 6b 56 b0 96 78 84 a9 1c 49 32 bb 06 68 59 49 2c d8 c6 e0 c3 38 e0 0c f0 6b 4e 22 02 af 43 ea 00 d5 d1 da 4b 28 25 8f c2 92 38 ef 3b 3c cf 2b ef 72 a4 8e 06 df ba 00 ec b8 ed 5f 35 38 e7 15 f4 f6 a1 6d 1c 3e 4b 2a ec 32 20 66 88 9c ed 3f 3f 6a f9 aa 58 c8 76 1e c4 d2 1b 57 70 c7 79 5c 04 15 b1 c4 08 ad 23 1c d1 45 69 a2 28 83 28 c4 c5 01 c0 a5 62 bb 8e 05 2c 2d 59 4c 89 9d 02 95 5e ed 5c 1d 6a 82 21 85 42 3d 71 67 fa 54 2c a3 d4 df 3a 32 3f f3 90 ff 00 5a 85 9b ef Data Ascii: #;R9wm=B<~Q8~c7,0fu2o`;by\P~k9fRezpkVxI2hYI,8kN"CK(%8;<+r_58m>K2 f??jXvWpy\#Ei((b,-YL^\j!B=qgT,:2?Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49840	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1042	OUT	GET /media/catalog/product/5/0/502760_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8234 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "igclxv6gQllC7qoHB9sAdEpfu0GqqVSfoSVX2COrSD0" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=215810 idim=1000x1000 ifmt=jpeg ofsz=8234 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e85a1cc40aa922b09dbe2a53-b7d5c39ce25c0969-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72194 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960093-PAR, cache-dfw-kdal2120077-DFW X-Cache: HIT, MISS X-Cache-Hits: 2, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 27 57 86 3d a7 b8 0c a4 0f 0b 5f e6 ae ae b3 8f 8e 48 9e cb 8c ae 1a 8b ee 14 af 4f 90 58 64 69 ea 49 2a 10 c8 92 49 a0 2e 10 aa c5 7d f7 67 d0 d9 38 57 0f 86 7e bf f6 53 f3 22 2a 1d 5a 72 16 3d a4 87 10 5a 48 d0 d8 85 13 0f 70 15 b2 8e 6f 81 a4 7f 91 c6 ff 00 d4 9b 51 3f 6c ee 96 d8 2e 54 64 fa d2 31 ff 00 c4 97 fa d8 ab 4d 3c 96 86 68 91 7b 26 dc a4 57 8a 85 25 35 08 40 c1 22 10 90 02 10 91 00 2a 12 21 00 25 d2 a6 21 00 3d 09 97 4b 74 58 0e ba 2e 9b 75 d6 26 17 bb b8 6e 93 69 2b 60 95 9d e0 8f 4c c4 78 29 04 6f a2 78 66 da 68 90 8b 1d 48 59 64 dc 9d 97 2a 5c 1c ec 00 b9 b5 86 a5 47 cd 43 3b c3 43 a0 91 fd 98 78 00 b5 c7 21 3a 3b c0 f5 52 b2 dd a4 11 71 6d 41 d5 34 31 ad 20 b5 8d 1a 06 e8 2d a0 d8 78 28 58 ce 72 d3 53 4b fc d8 9a e3 de a3 3b 09 a0 23 48 Data Ascii: 'W=_HOXdiII.}g8W~S"Zr=ZHpoQ?l.Td1M<h{&W%5@"!%!=KtX.u&ni+`Lx)oxfhHYd\GC;Cx!:;RqmA41 -x(XrSK;#H
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 49 49 5a fb a3 ce 6a 61 97 4d 93 6b a6 9f 31 97 aa 3c ff 00 0d c4 a4 a6 a8 8a 78 49 0f 63 ae 35 f2 2b ea 3e 11 e2 18 b1 8c 3e 33 7f e2 34 58 8b ea 2d b8 3e 1c bb 97 83 d5 60 74 75 0e cc 01 8d ff 00 99 9a 15 3f 0a 6e 2d c3 55 ac a8 19 a5 a7 b8 cc f6 6b 61 c8 96 f2 21 4a f6 4b 72 e9 dd 16 43 24 35 38 fc b9 34 a6 be 57 d3 9f 4f b9 f4 ba 6a 8b 41 59 1d 6d 15 3d 4c 64 16 ca c0 e1 6d be 4a 52 d4 a9 a3 13 4d 36 9a a6 84 42 42 84 c4 72 42 10 a2 04 ba 10 0d 54 77 00 80 09 b7 32 6d a5 96 85 c5 a4 db 6e e5 90 3d a7 69 16 49 c4 2e 19 8e 72 6c 34 6e df 35 ca 2c 4a bc 34 da 7b 9b ea 5c d0 ed d6 7c bf 31 25 24 8d a5 9b bd f4 0b 8d de 65 73 4b 0e 5b 02 d7 5c 10 7a f8 15 9b 7e 33 56 4b 6d 1c 4d 03 71 a9 27 f4 b2 92 cc 6d 99 1c 64 81 ed 70 f7 43 4e 6b 9f 2b 2a c9 5a f5 2e Data Ascii: IIZjaMk1<xIc5+>>34X->`tu?n-Uka!JKrC$584WOjAYm=LdmJRM6BBrBTw2mn=iI.rl4n5,J4{\\|1%$esK[\z~3VKmMq'mdpCNk+*Z.
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 4a 43 0b 4c 94 a6 19 6a 22 64 86 3b 1b b4 8b 83 a1 db aa cd f1 8d 44 b2 55 53 34 93 6b 97 11 df b2 31 f3 45 3a 8a 8a 92 be 8e 8d fd 03 af 4e 0f 53 75 31 67 b8 62 77 4f 84 42 e2 6e 41 23 be c3 af 7a bf 25 69 8f ca bd 88 01 28 4d 25 0a 41 63 2e 9d 74 c0 1f f9 4f d1 38 35 df 94 a4 33 cb fe d5 ff 00 f4 7c 37 fc 69 ff 00 4d ca 74 78 8c d0 60 38 7c f1 39 ae 2e 64 62 e6 e4 10 47 7e aa 0f da b0 70 c1 f0 db 82 3f b6 9f f4 ca 87 13 1b 4b c2 58 6c 6f 73 4e 50 c7 99 03 ae db 1b 9d fc 16 6d 4b 6b 1c 9a 7c d7 05 be 1d 0c 79 3c 5b 04 32 24 e0 e5 1d c9 f4 a2 f2 b7 89 c6 19 83 51 56 cd 24 b0 89 6a 08 77 a3 8b 92 ed 6f 7c c7 62 02 99 80 f1 69 c5 db 3b 68 71 29 24 7c 40 17 76 b1 b9 ae 6b 0e e7 a1 75 f6 3b 2c 57 12 e1 d5 f8 9f 09 61 8c a1 a7 74 ee 6d 41 90 86 5a f9 6c e1 7d Data Ascii: JCLj"d;DUS4k1E:NSu1gbwOBnA#z%i(M%Ac.tO853\|7iMtx`8\|9.dbG~p?KXlosNPmKk\|y<[2$QV$jwo\|bi;hq)$\|@vku;,WatmAZl}
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 5b 5f fb 8d be 0f 39 4d 6b ef b6 96 65 ae 3d 2c af c3 9e e7 b4 b4 7a 50 ca 09 dc 01 6b 8f 15 5c ec 28 e2 fc 30 da 41 30 88 ba 77 3c 3a d9 bd d7 5e dc 94 fe 21 7f f6 28 c5 ff 00 19 a7 f5 59 cc 5e a6 a2 9b 83 99 2c 13 49 13 c5 59 01 d1 9b 3b 57 a8 b4 ff 00 93 14 9f 34 b9 1e 26 bf d3 d6 d7 1f c8 7c 7d 85 e1 8e 0e ad c2 31 d8 6a df 55 04 91 88 e4 6f b3 98 3a ee 16 1a 10 b2 bc 49 c2 58 fd 56 3f 88 d6 41 46 65 86 59 73 30 b1 cd 24 8c a0 6a 09 16 d9 5a f0 3e 3d 8b d6 63 91 53 54 d6 4d 2c 46 29 1d 69 32 9b 16 8b 8b 10 02 e9 8a f1 ae 29 87 e3 15 b4 8c a7 82 48 a2 97 2b 73 07 03 6b 03 b8 2b 57 c6 59 5f 46 f6 fe 8e 3f c2 78 97 54 b7 7e cb 6a 6a 3a aa 7e 1a c1 e9 e5 89 cc 95 af 7e 66 38 80 47 d5 4c 9b 0c 91 d4 c2 36 4e c7 38 0b ec d0 2d dc 46 b6 5c aa 6b 3d 63 84 e1 Data Ascii: [_9Mke=,zPk\(0A0w<:^!(Y^,IY;W4&\|}1jUo:IXV?AFeYs0$jZ>=cSTM,F)i2)H+sk+WY_F?xT~jj:~~f8GL6N8-F\k=c
2024-10-25 08:16:33 UTC	1339	IN	Data Raw: d2 39 d9 bb 52 7d a0 c0 2c 18 e1 b3 47 3e a5 21 a6 34 f6 68 9e 39 09 6b 9e 72 12 40 b7 23 7e 7d ca b2 49 81 61 1d a1 3a ea 2d 96 eb 5e 1b dc a8 e4 e1 df 06 bf a5 5f b9 e9 74 93 54 4d 45 25 44 d8 8c 15 0e 6e 7f 65 96 cc 00 69 23 31 16 e9 a0 e4 16 67 07 93 37 0c 52 92 03 2f 59 21 b0 d8 69 6e 69 b4 38 f3 8d 31 a1 14 51 47 18 8e 77 02 cc d9 b3 18 cd dc ec c4 e8 b9 61 8e cb c3 54 3d f5 32 9f 20 b2 eb 22 e2 a5 6a ad a7 fe 4f 63 e0 4d 4b 55 8b 9f f9 7e a8 94 e7 82 0e a4 ec 15 5f 11 3b 3f 0a 62 31 b8 36 de 91 4d cb a9 3f ec a5 ca f6 0c 85 8f cf 76 b4 ba c3 67 1d c7 c9 4d a7 c1 e3 c6 f0 ea da 39 65 74 4d ed a1 7b 88 d4 fb 17 d1 61 c4 d2 c9 06 fb 3b 3d 37 8a a5 2f 0f cc 97 7a 4b 8a ef 44 89 22 12 51 e1 ef 80 97 be 1a 68 0b ec 35 8c 90 2c 47 e6 04 6e 16 6e b0 e5 a6 Data Ascii: 9R},G>!4h9kr@#~}Ia:-^_tTME%Dnei#1g7R/Y!ini81QGwaT=2 "jOcMKU~_;?b16M?vgM9etM{a;=7/zKD"Qh5,Gnn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49835	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1237	OUT	GET /media/wysiwyg/home/emballage-alimentaire-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:32 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95306 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "3Fj+6FUk2e/T21fBKgs68v8+w177ot6s7QFHy/+RUfc" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=146698 idim=400x400 ifmt=png ofsz=95306 odim=400x400 ofmt=webp Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627807041641e8493ad64f6b5c04-51b8018a37110183-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960064-PAR, cache-dfw-kdfw8210074-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 49 46 46 42 74 01 00 57 45 42 50 56 50 38 4c 36 74 01 00 2f 8f c1 63 10 4d 50 72 23 49 92 24 41 d5 4c 5d dd dc c3 ff ff 60 f7 58 b2 66 39 47 f4 7f 02 f0 7f 7c 9e 66 fe 99 50 2d cf 21 29 f3 6f 84 a4 8a 72 29 ec 3f 11 4b 55 a3 bc 95 d5 f2 0b 1f 22 0e ac d2 da aa a4 0a a9 5a be 4b 00 24 32 0f 55 92 46 95 a4 aa d2 7e 8a 38 30 b1 27 d8 32 f3 54 92 54 d2 a8 aa b1 5d 5b dc e1 c6 ce 6c 99 a0 7d aa 2a a9 aa 24 11 71 3c 64 e6 06 20 13 6c 2d a7 69 4a 9a a3 46 8c b2 b7 78 84 cc cc 03 a0 39 31 9d ec c4 d4 9c 73 2e d0 92 e2 fe 04 dc d1 68 74 66 ef 9c 9e 73 4e cc 35 51 a5 08 e4 8b fb e5 19 57 4d b7 9c 76 17 ec 42 60 46 6c f9 2c 36 63 5f d6 c4 ba 0a f4 6c 8c c0 44 44 54 00 5f 1c 5b c3 ed c4 7e a1 22 c4 d8 f2 09 0f 92 b5 26 76 63 6f 00 10 11 25 92 00 1e c5 a1 4b 22 d7 Data Ascii: RIFFBtWEBPVP8L6t/cMPr#I$AL]`Xf9G\|fP-!)or)?KU"ZK$2UF~80'2TT][l}*$q<d l-iJFx91s.htfsN5QWMvB`Fl,6c_lDDT_[~"&vco%K"
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 0f 0a ab eb b3 26 96 57 c9 be b4 73 6a a3 ad 8f f6 b5 1e eb dd f1 c5 b3 4b 7e b1 e7 2f 52 1d e7 65 5c 16 97 cc 0e 9e 5a 72 31 b1 81 b3 33 9c cc 37 4d 44 24 48 4a 02 e3 9d 9d 5e bf 86 63 92 10 cb f1 e1 c2 96 97 fd 9a 16 c7 02 f9 b3 d5 65 fa 85 7e 7a 77 2a 16 47 22 61 ea 76 de b6 10 19 50 94 4a 0f 8c a1 6b 63 94 69 04 42 7a e8 42 36 a1 23 7b ed 9f f4 ae 25 9d cc 3b 63 23 61 48 a4 4b 39 3b 05 00 13 06 00 80 21 84 68 18 a2 20 32 81 44 4b 76 90 14 0c 21 17 3b 2b c3 96 2d 93 90 1c b2 c2 c0 1b 01 c2 86 11 34 a5 29 50 0a 02 88 aa 17 bd e2 54 82 c0 54 db 4a fc 2c 35 93 a9 0c 61 88 31 18 43 4c 2d 26 84 4e da 15 00 1a 3b 95 aa 57 1a 66 1b 6c 2f 88 8c 90 48 e0 52 c0 96 f9 1d 3e 43 17 7a e3 06 c2 2d bc 18 3d 85 9d c6 15 28 55 56 f7 a0 d7 3e 87 df 38 42 c8 9a ce bb df Data Ascii: &WsjK~/Re\Zr137MD$HJ^ce~zw*G"avPJkciBzB6#{%;c#aHK9;!h 2DKv!;+-4)PTTJ,5a1CL-&N;Wfl/HR>Cz-=(UV>8B
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 9e 24 49 92 6d db b6 23 11 f5 b9 cf cf d3 fa ff 00 8a 68 e5 39 17 39 fa 82 66 e5 79 8e 7b ef 3b 6b 9a d0 01 04 80 60 24 cd d9 b6 6d db b6 6d df bd 59 d9 76 e7 d2 aa 6c 9f cd 75 bc b6 6d 58 90 24 29 aa 72 70 78 da 38 6b df ba 6d 6b 53 24 49 92 be 9f 44 54 d5 cc dd 93 7a 98 19 de ff 66 9e a1 99 99 93 22 29 d2 c1 4c 45 e4 87 e1 99 ca 5e 35 19 73 e7 49 b6 6d d9 b6 6d b7 a9 b5 f6 75 fe fd 1f be 8f 64 20 4f c8 03 b2 81 14 20 75 08 7d df f7 ef 5e a3 f9 96 24 c9 92 24 c9 b6 88 58 d4 f2 02 fd 76 7f bb 3e d6 ff ff 4b ff 48 5d 3a d3 4d 85 e5 40 02 40 80 cd c7 49 6d 9b a3 46 db b6 6d db b6 ed 4e 18 6d db b6 6d c7 f6 29 6c db b6 e1 03 99 1d 37 78 1c 00 40 71 1a ed ff 77 36 33 3b eb 1b 17 12 82 96 40 95 da d5 7b da ab 9e 3f ee ee ee ee ee ee ee cf 73 ee 77 6d ef 9e b6 Data Ascii: $Im#h99fy{;k`$mmYvlumX$)rpx8kmkS$IDTzf")LE^5sImmud O u}^$$Xv>KH]:M@@ImFmNmm)l7x@qw63;@{?swm
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: f6 bf fb f8 e3 2f 05 bf e4 e7 fc 6f 78 c7 12 8b 7e 2d 76 c5 21 76 a5 02 75 2c f0 ae b7 cf 61 5c 41 64 b7 7b 67 8d 63 69 77 0c 6a 1f 87 89 3a 4b 40 29 37 16 50 ca c0 44 ab 61 bb 1a 83 92 0f 0c 8a 82 c1 c5 05 4d 98 2e 01 48 bb 10 a2 1c 6a 88 89 b2 ca 9a 0e 8e ed 3d 46 af bb 25 00 04 13 2c c4 28 b1 88 5d 80 eb 8e 12 2c 51 2b 0c 1d 24 91 e2 22 3e fb e0 33 af 9f 66 f9 7b 8f 6f 7f de e1 df f3 f6 2f b1 dd 90 44 46 7b 20 c5 aa 44 0a 2e aa 21 05 2b 51 a0 31 04 0c 94 38 29 49 01 95 5d d3 51 40 84 4e 2c 68 22 a3 36 33 f5 0d 0e 20 85 98 f6 26 02 e1 a2 e3 79 39 12 1c d2 f4 13 80 1b 40 61 4c 43 84 29 3b 6d 82 d5 8d a8 03 ac 52 10 a7 b3 e5 14 1d d2 54 d8 d4 81 c2 9d 11 f2 d2 3b d8 d9 4b ee 2c a5 e8 33 b3 fb 83 ce af ff 7d ba 7d 41 e7 7d cf cd 53 f7 b1 05 dd eb ee 35 43 Data Ascii: /ox~-v!vu,a\Ad{gciwj:K@)7PDaM.Hj=F%,(],Q+$">3f{o/DF{ D.!+Q18)I]Q@N,h"63 &y9@aLC);mRT;K,3}}A}S5C
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 2f c2 9a 01 e2 b6 38 47 e7 8f e3 e1 cf bb eb e9 8a db 70 1b ae 45 c2 28 13 1f 6f 7c fb 4b 95 50 75 16 4a c9 51 39 37 31 35 d9 70 8f 0d 20 93 26 51 4a d1 a9 5b cf 7c f1 f2 a2 a5 2b cd f0 d8 17 76 ce 66 7a 22 b4 53 0e a6 f1 9e dc 47 9b d3 b8 a7 52 22 02 ba cb 2f fc c0 bb 7c 57 ee 25 94 51 22 0c 19 23 d3 66 7c 84 c2 d7 05 d7 84 f2 f9 e9 b3 07 3d 0a b7 c5 8f 6f 0c 50 57 2e c8 a2 e4 61 2f 12 a5 b3 81 a3 cd d7 9e e5 49 a3 09 56 50 48 1b 22 75 08 4a 81 0c cd 07 fc f2 04 5f 6d 12 b4 b4 a9 51 8c 82 1f 1e c2 cb 4b d8 47 f7 de 06 24 fd 6c bb 9e 78 dc 81 7b 70 27 1a 8d 33 f2 31 fd b5 78 e8 2b 66 54 9d cc 88 22 69 02 87 b9 d3 49 a4 0c 36 45 84 4c 06 4c 44 ba 1b 6e 1d 1e 7d 87 36 31 15 ec 61 d2 25 d8 97 a7 96 4b 9e 3b 96 05 41 ba c9 1e 01 cb 28 56 81 e5 b0 85 18 83 12 Data Ascii: /8GpE(o\|KPuJQ9715p &QJ[\|+vfz"SGR"/\|W%Q"#f\|=oPW.a/IVPH"uJ_mQKG$lx{p'31x+fT"iI6ELLDn}61a%K;A(V
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 86 2b a8 b1 73 bd 3f 61 7a ee b9 8c 28 26 0e 09 b9 9c e1 4c 4c 4e 27 ec c4 a6 9a 63 f8 c6 a5 cc 70 4c 61 b0 22 15 46 05 09 69 dc 3b ce a2 54 01 06 da 21 81 51 35 b6 a2 f1 d8 19 24 b2 52 c3 08 b2 4c d0 8d 02 0b ad e4 57 b7 c3 b6 2b d1 6b 47 0a b3 38 85 43 02 14 41 41 61 74 d4 d7 4d f7 a6 a6 1a 0a 52 82 bc e7 04 95 f7 66 b0 ee e1 c1 d1 8a ef 38 72 e3 df fc 3b b7 02 ae bd 6d 5c 4f 1b 7c 84 17 10 3f dc 54 83 f7 e1 77 ec e2 96 c0 d0 4a 82 4c da 64 50 e7 4c 02 a5 f0 4c 33 5e 34 68 07 61 87 06 3d 6d 08 11 ae b2 ba e3 02 48 38 08 24 0d 73 4c 70 17 52 5c c4 71 68 95 3d 2b b0 79 33 dd e1 43 3c 34 d4 d2 03 e9 bd e7 22 92 3d a3 e7 32 0c b9 d4 74 92 c0 1b 04 a5 94 50 43 45 a8 51 c4 aa 11 1d 15 48 a5 0c b2 28 51 28 d4 d5 e5 a0 45 35 20 ba 08 e2 ce a1 00 c0 91 04 4d 50 Data Ascii: +s?az(&LLN'cpLa"Fi;T!Q5$RLW+kG8CAAatMRf8r;m\O\|?TwJLdPLL3^4ha=mH8$sLpR\qh=+y3C<4"=2tPCEQH(Q(E5 MP
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 6b fd 89 95 ee 41 82 c3 e4 14 81 1e 13 2e 08 14 0a 92 8d 0b 07 c1 49 dd 24 39 c1 07 ee 8b 12 1b 92 6f e9 88 d0 9d a5 6a 69 d7 3c ab 5e 80 91 89 28 fc 57 fb 8c 64 bc 87 87 e6 34 39 fc a1 e7 2f 87 2f 81 07 1f 40 12 85 0d ee 12 50 20 40 85 b0 60 61 45 89 e5 0c 08 6c 0e d5 40 13 27 1c 08 6a 08 17 a1 a8 5f 7e fe 1e d2 07 7c ee ec e9 dc 73 27 02 5c 8c 8e 37 74 41 41 14 1b 42 0c 41 28 d8 8d 27 a5 da d0 54 d3 a4 4d 02 8b ca 74 ce c3 69 d0 0e 2b 2c 31 82 63 05 7c 2e f8 53 41 05 a7 ee 39 3d 22 a5 e3 31 e5 45 7d 64 73 9c f6 f5 10 05 ba 60 34 8d 24 08 1c 94 a9 db 11 5d f7 f1 4a 9e 98 4c ab e4 0b a6 22 0c ae 65 f8 84 27 21 e0 21 94 78 f2 32 76 0a 0e 71 ca 46 61 1e b8 81 c4 a4 e9 0d dd 88 98 18 29 ea aa 42 aa bf 8f a2 e3 ab ea ef ff 21 e7 00 07 ff 9f e0 f7 6d d8 ad 43 Data Ascii: kA.I$9oji<^(Wd49//@P @`aEl@'j_~\|s'\7tAABA('TMti+,1c\|.SA9="1E}ds`4$]JL"e'!!x2vqFa)B!mC
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: c1 e0 d2 21 40 e4 54 a9 00 9e 2b a0 34 6d 0f 4a 5e 50 5a 9a 94 ec 34 a0 04 85 8f 6a 56 27 40 cd 36 3e 29 8c a1 d3 81 2e da 13 c9 f7 f4 03 43 1c ba 78 bf bc 1d 8e bc 08 a1 83 ef 91 c3 80 c2 49 a6 12 69 85 3b 70 1f 3f e4 bb 88 c7 10 10 70 11 1e 47 34 4c e4 d0 bc 1b 93 03 3d 5c c2 49 e2 a2 70 a5 49 2c 98 da 28 a8 76 47 e7 18 86 1f bc f1 60 5f cb 71 79 98 a0 02 00 29 c5 0b 9a 27 ac 4d 85 34 01 a6 1e c6 94 46 a7 11 c4 8b 03 82 06 09 6a 74 04 74 f7 41 02 2d 63 b0 e3 e9 cb ef c7 33 71 4a 48 a8 e1 0c be 47 46 88 d3 35 5b 1a 8c 4a 55 17 5b d0 42 a7 a4 5f c6 10 53 a6 5c 3e 26 c8 4c 84 4a d5 3c d2 98 2a a9 b5 39 d8 38 09 6e 71 1a 8e 2e 91 8e b9 37 9d 00 5c c6 00 2e 4e bc 2a b4 08 18 77 e3 74 1d d0 f0 a2 43 84 93 76 bf 80 1c ca d3 e6 d0 f3 3e 08 1e 26 b5 ca 43 53 64 Data Ascii: !@T+4mJ^PZ4jV'@6>).CxIi;p?pG4L=\IpI,(vG`_qy)'M4FjttA-c3qJHGF5[JU[B_S\>&LJ<98nq.7\.NwtCv>&CSd
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 17 54 71 50 79 04 2f 28 d7 34 a1 0a 05 e9 45 67 58 53 77 ae a9 de 73 76 e6 7e a4 43 0a 0a 42 53 09 51 94 22 77 ea d6 c9 41 54 32 cb 73 c1 45 41 73 2a 8a 74 1a 0d b1 7c 0a 25 85 20 e7 87 ef e9 1b 6f d5 44 53 2d 63 f4 98 0e 42 c1 48 06 29 27 86 18 14 2d 3a 6a 59 be b8 47 4d 04 85 19 ae 22 10 e5 05 69 7d 58 1f e2 34 3c 1e 4e d9 c3 29 74 c6 f4 5c 40 84 31 64 e3 b2 3c 36 8f 8b 29 45 f3 e8 e9 5e 4d d1 95 8a b6 f8 a1 8f de 94 1f a4 92 23 d9 39 27 52 22 1c 05 a8 42 1d 74 b1 59 23 5d fc e1 d3 77 2f fc 9d f8 87 fb d9 f8 87 ae ff 97 94 a0 0a 46 f3 0f 31 6d 6d e7 c6 d9 f9 0a 34 30 af fe 74 37 d7 9e 0c dd 29 30 21 c5 29 c0 e1 10 4e 5c 1c ea 9e bd 20 84 27 42 1c 6a ea 13 4e b1 49 88 c9 74 cc c3 93 a2 66 6c aa 54 8a e2 3d 3d e9 80 84 3b f6 f8 c4 25 12 37 eb b0 1b 89 93 Data Ascii: TqPy/(4EgXSwsv~CBSQ"wAT2sEAs*t\|% oDS-cBH)'-:jYGM"i}X4<N)t\@1d<6)E^M#9'R"BtY#]w/F1mm40t7)0!)N\ 'BjNItflT==;%7
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 85 7b 4f 6d c8 66 8f cb 75 0c 54 af c4 d4 c7 db f8 f9 2a 2a 93 9b a6 16 4e 28 23 0d aa cd f1 60 a8 69 f5 f1 1c b8 58 1c a9 22 b5 3d 0e 46 7c 0a 06 0a 04 88 a8 86 eb 24 30 28 eb 32 3e b0 af be ac 1e 6c d0 d9 d3 a6 03 cb 69 30 b0 44 b8 00 3d d3 a3 ce 9e 0a 48 71 f0 a1 3e 04 5c e1 da cc c9 54 70 35 6b 71 ae d2 9a 54 14 14 bc 72 83 02 ea 29 a7 b7 fb 9a c9 9b 6d ea 22 ad b4 48 d9 8d 75 f0 42 1a 09 7e bc 75 72 bd 0d 9b eb 69 73 f9 a7 f4 eb fd 2c 3b 63 c8 bf e3 fc 7c c6 7d a3 01 74 fe 78 eb ff 7a cb ce fb 3a 50 81 64 13 4d 06 83 1b 97 a6 71 42 d8 53 26 c9 3e f4 14 a0 83 21 0d ca ba 71 e2 a9 c5 9b 11 10 f6 65 97 82 a6 33 dc 66 37 26 9f 82 10 70 41 39 7b 70 40 18 84 43 85 22 24 14 37 0a 34 5d 1a 2a 85 e7 69 96 73 1b df e8 40 8a 61 d0 a0 1f 61 34 eb 09 1d 5d 32 74 Data Ascii: {OmfuT*N(#`iX"=F\|$0(2>li0D=Hq>\Tp5kqTr)m"HuB~uris,;c\|}txz:PdMqBS&>!qe3f7&pA9{p@C"$74]is@aa4]2t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49844	216.239.32.21	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1577	OUT	GET /g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=1&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=page_view&_fv=1&_nsi=1&_ss=1&ep.event_user_logged=0&ep.page_type=home&ep.content_group=home&ep.event_id=780258551.page_view&ep.facebook_pixel=671587811394625&ep.facebook_event=true&tfd=10538&richsstsse HTTP/1.1 Host: t.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	597	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:16:33 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; Max-Age=63072000; Domain=retif.eu; Path=/; Secure; HttpOnly set-cookie: FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D; Max-Age=72000; Domain=retif.eu; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-25 08:16:33 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49845	216.239.32.21	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1582	OUT	GET /g/collect?v=2&tid=G-6VQ11F71ZK&gtm=45je4al0v879128510z89101093033za200zb9101093033&_p=1729844181429&gcs=G101&gcd=13p3t3p3p5l1&npa=1&dma_cps=-&dma=0&tag_exp=101533421~101686685~101823848&cid=965705703.1729844187&ecid=1241677340&ul=en-us&sr=1280x1024&_fplc=0&ir=1&ur=US&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&frm=0&pscdl=denied&ec_mode=c&_eu=EA&sst.rnd=2113363896.1729844187&sst.tft=1729844181429&sst.ude=0&_s=2&dl=https%3A%2F%2Fwww.retif.eu%2F&sid=1729844186&sct=1&seg=0&dt=RETIF%20%3A%20La%20passion%20du%20commerce%20depuis%201965&en=view_promotion&ep.page_type=home&ep.content_group=home&ep.event_user_logged=0&ep.promotion_name=Nos%20solutions%20pour%20une%20foire%20aux%20vins%20r%C3%A9ussie&ep.gtm_tag_id=379&_et=21&tfd=11068&richsstsse HTTP/1.1 Host: t.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	595	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:16:33 GMT Content-Type: text/plain Transfer-Encoding: chunked Vary: Accept-Encoding set-cookie: FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; Max-Age=63072000; Domain=retif.eu; Path=/; Secure; HttpOnly set-cookie: FPLC=JzXxoVQ4FSBTm2xHdYa7Jgy82k5kyVYEbQZxFwN62dQa%2BSP2rq3LoKLOTmlbVL%2BT3oKjnXj%2B98lGklB226hNIsRDGLthPh3ZaBFwmTy%2F%2B2Nqd9%2BPPC%2BT5JU%2F5Ep1HA%3D%3D; Max-Age=72000; Domain=retif.eu; Path=/; Secure cache-control: no-cache x-content-type-options: nosniff Via: 1.1 google Connection: close
2024-10-25 08:16:33 UTC	76	IN	Data Raw: 34 31 0d 0a 65 76 65 6e 74 3a 20 6d 65 73 73 61 67 65 0a 64 61 74 61 3a 20 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 22 22 7d 7d 0a 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: 41event: messagedata: {"response":{"status_code":200,"body":""}}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49834	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1234	OUT	GET /media/wysiwyg/home/agencement-magasin-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:32 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 67808 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "h7Vs7UpMwrjyD9wm0OBLMaoIjIwNqZP+sOu7o/+uXnc" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=101507 idim=400x400 ifmt=png ofsz=67808 odim=400x400 ofmt=webp Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-1801627809ff39e3cd433c1184a5ae01-e7d43c49436f5459-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960025-PAR, cache-dfw-ktki8620023-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 49 46 46 d8 08 01 00 57 45 42 50 56 50 38 4c cb 08 01 00 2f 8f c1 63 10 4d 38 72 db 46 92 10 97 3d 9b 93 ff 3f b8 d6 ae d3 1c 23 fa 3f 01 f1 4f 6f ed ba 76 5f 7b 82 87 da 13 f5 22 4f b4 47 16 b9 d4 fa 8c 45 6f 65 ba 5f 69 43 b8 6a 32 4e db 69 ac ee 19 80 54 11 36 e0 4c 1c 5c 68 4b b6 f1 e0 1e 20 49 55 37 60 c1 52 95 6f 68 0b 92 74 07 a6 c6 5b 42 d9 cf a1 4d 12 05 c0 b3 7c e2 e6 23 12 74 97 80 aa 02 7c 11 24 41 32 6e 2a 49 ef ba aa aa 24 18 17 a5 aa a0 aa 51 5e 31 94 26 fb 79 48 00 ae 88 85 77 07 9d ea 0f b8 ba 47 0f bc 01 a0 ae 88 59 5f 55 a7 ec cc 33 6f a1 f3 9e ed 5c 8a 11 81 b7 84 93 76 44 e4 19 f2 fd c6 7b c7 76 f4 b9 13 03 90 7c 0b b5 64 c7 38 f7 82 1d 40 62 d1 76 cc f3 08 07 20 df 03 db b1 9a 47 82 1c 80 04 6c c7 66 9b 6e 04 c9 0e 64 6c b7 3c 15 Data Ascii: RIFFWEBPVP8L/cM8rF=?#?Oov_{"OGEoe_iCj2NiT6L\hK IU7`Roht[BM\|#t\|$A2n*I$Q^1&yHwGY_U3o\vD{v\|d8@bv Glfndl<
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 92 74 27 41 c5 13 65 05 c5 6b 2b 28 5c b8 fb b6 04 87 07 17 51 f4 78 6d 80 20 37 15 15 6f ba a2 a2 0f 82 88 0a 88 b2 a5 08 37 15 0f 41 85 0d 04 01 b1 51 51 01 54 00 7b 41 44 3d 38 54 10 af e8 6b 43 41 01 15 54 50 45 64 09 15 6e 78 03 51 14 7d 5b 50 44 7d 02 11 45 51 78 2d 80 c0 4d b1 1b 11 11 c4 25 f0 ca d1 0d 2a 8a 9f 86 a0 dd 00 0f 82 6e 08 be 17 1f 1e 77 50 6e 80 a8 87 0a 82 f4 06 1c f8 0c 70 08 a0 af 0d 11 af ad 80 ef 04 d0 05 01 1f 10 04 04 f0 de 0b 08 02 a2 07 a2 78 c5 4e 16 04 54 00 15 4f bc 76 92 da 4c 23 80 b7 bb 9a 24 33 b5 9b 06 3f 9c 64 ce da 9e c8 fb 92 64 66 ea 33 6a 22 c2 41 92 cc 59 55 53 9f 38 01 b1 93 64 1e ab a6 3e 75 d2 26 99 c7 9a 99 a9 ed b9 95 49 66 66 ea a8 a9 a9 2f e8 5c ab 6a 66 ea cb 5e e6 6b 55 65 ce fa d2 33 f5 df f5 65 db b6 Data Ascii: t'Aek+(\Qxm 7o7AQQT{AD=8TkCATPEdnxQ}[PD}EQx-M%*nwPnpxNTOvL#$3?ddf3j"AYUS8d>u&Iff/\jf^kUe3e
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 3a 5b f5 c4 3e f4 07 f3 11 7e 63 1f d4 cb 66 ab 0e 38 74 10 63 36 11 b0 1d 3e 4b 66 ab a6 d8 8f 89 f3 ea e4 16 12 6f b0 0b e1 eb dd b3 c6 21 2c 86 2e 98 99 00 22 dc c4 7e 64 ac f5 ec 16 a6 63 1f cc c1 ec 84 52 1c c5 69 54 ac 13 0c c4 8a f9 b9 00 00 00 90 84 75 78 b3 ca b3 f0 58 8a e6 60 96 c2 0f ac 41 c4 02 d9 4a 0f 53 d3 76 e6 d2 cf 96 e1 08 0e 43 b3 3a d0 0e 93 61 08 e6 2a 84 63 11 dc d7 76 32 1e d3 d0 02 4c 57 50 70 19 db 17 d6 c0 12 3d 31 16 2a 30 63 21 05 cb f0 69 51 6c 55 1b 93 e1 0c 66 2d 3c c0 4a 14 af 08 34 43 2f 30 71 21 01 33 e1 be 9e f3 8e 18 7c 46 e8 dc ea 09 70 18 07 16 73 de 12 f6 18 0c 5d 30 7b c1 1d b3 10 bf 12 d0 1d ad c1 02 84 62 ac c2 fd 75 5c 2c 82 be a8 0b d6 20 5c c7 ea 45 5c c2 02 5b b4 07 cb 10 bc 31 11 29 2b 00 4d d0 00 2c 44 c8 Data Ascii: :[>~cf8tc6>Kfo!,."~dcRiTuxX`AJSvC:acv2LWPp=10c!iQlUf-<J4C/0q!3\|Fps]0{bu\, \E\[1)+M,D
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 8c c6 4a 45 64 bb 31 66 41 ad 44 2b 95 60 d4 90 86 11 37 fe e0 12 29 ff 64 a5 ec ad 73 3c 20 49 7d 60 74 a8 9d 7a f5 60 18 a0 1a 60 01 20 a1 48 5f 30 86 5b 80 af b5 6b 43 b4 0f 94 52 7b 57 87 bc 38 6e 15 a5 95 14 ac 1a 50 a0 a0 20 a0 b0 c5 c3 d1 2d 6f 06 e3 c4 68 32 ac 1b 72 4d 49 51 d3 d6 41 83 68 59 c9 52 78 a8 94 64 9c 33 18 dc b7 f6 d0 7e 1a ab 6e 66 c3 d3 00 3e 4b ea ab cf fe 1a 19 b7 a3 8c db 1e f5 3e 12 dd 5e e8 cc ec e3 ff 70 a2 22 1f 39 f9 3f 79 0b 04 98 4c 25 03 75 2a c0 40 7b 70 2f ee 39 6e 53 ff 73 de bc 47 3f 77 3f 95 59 5e 4c 41 f1 c1 6b e1 40 85 77 d5 09 9f 50 82 91 53 42 ec 2a 2c 0b d8 98 e3 85 00 c6 44 c1 88 04 01 4b aa 41 9f 61 08 30 1c 17 4c e4 9e c9 33 d8 d8 9b d0 28 70 dd 96 05 b4 ad 86 01 18 bb 54 75 70 32 99 33 8c ff c8 7f 12 37 c2 Data Ascii: JEd1fAD+`7)ds< I}`tz`` H_0[kCR{W8nP -oh2rMIQAhYRxd3~nf>K>^p"9?yL%u@{p/9nSsG?w?Y^LAk@wPSB,DKAa0L3(pTup237
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 5a 6c db 00 02 32 4b 4b cb 0b 58 6c f0 40 1c a9 14 91 01 44 d0 8d e8 24 f3 06 47 64 d0 7c 37 c8 f7 16 7e 27 80 e4 7f 5e b0 c1 14 ae 0d 27 99 71 88 8b 80 f8 93 ba 74 33 20 42 46 5a f0 c7 de ff c4 9f fc de db bd fe 9a af ed 9e ff dc fe bb f7 fb 7f fa fd c9 3f 73 dd 3a fb d9 0d c4 7f c6 3b 3b fe e9 4b 3b b1 76 fe b8 2a 96 46 e8 e5 a3 85 24 52 42 8e 96 5d 08 a6 25 84 2e 24 20 6c d2 76 d5 ba 2b 42 fd a8 75 3a b0 99 e1 b2 d7 6c d9 ec ce f5 73 58 8c cd 3b de c4 d2 5c 44 81 0f 37 93 a6 83 35 96 71 c8 b4 c6 d0 b6 77 9d 81 2e 04 50 fa 36 76 6c 82 98 ed 5c 69 67 96 4d 6b 83 01 ad 61 91 78 c6 fb 88 2e df 6a 7d 64 18 a6 de 6c 61 51 e0 af 09 24 0b 75 f8 94 2a c8 00 85 a8 8b 06 6a 48 52 30 31 f9 4a 96 d5 a7 5d 4d 03 08 17 27 4b 26 57 e8 02 45 1e 4a 10 10 05 03 0a 59 d1 Data Ascii: Zl2KKXl@D$Gd\|7~'^'qt3 BFZ?s:;;K;vF$RB]%.$ lv+Bu:lsX;\D75qw.P6vl\igMkax.j}dlaQ$ujHR01J]M'K&WEJY
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 70 a2 81 56 ef ad 42 c9 6a 6d d9 d9 ca d9 f7 e1 3e f9 54 d1 fc 31 61 06 18 83 38 14 0c b7 4c 7e 06 e0 b5 ff 63 be 77 fd f7 7d af f7 ff 96 d6 7f bb 98 e7 f4 f7 7c ff f9 f5 e8 3f d2 fb bf 73 f7 fd af ff ff ff ab 93 4f fd fa 12 19 9d 32 6a b1 fa cd c6 df 5f b7 2f 8b 39 b1 dc 2c 09 51 66 8d e6 b0 e1 d7 80 7b 00 e6 24 a0 30 6d fa b9 29 b3 31 02 00 40 8a 88 08 ac 42 01 8a 8a 10 42 cc 00 a0 01 46 58 f0 02 2a 80 40 44 2c 49 a0 80 22 14 d2 ca e4 15 2a 2f 4f bc bb 8a eb 53 bf d1 0f ee 59 2b 53 d1 a6 fb 7d 91 26 70 7d f4 93 93 5d 34 be 8b 37 d0 40 66 8a c1 5f 57 0c 52 83 91 2e 24 26 f8 2a f5 11 9b 60 c5 6c 8b 6c 1a 66 99 d0 25 91 2a 85 04 80 35 28 ac b0 22 47 39 12 48 21 00 0a 88 88 28 02 10 52 be 45 96 96 18 02 82 62 80 40 60 11 08 82 75 86 3a 13 a3 26 39 43 0b e8 Data Ascii: pVBjm>T1a8L~cw}\|?sO2j_/9,Qf{$0m)1@BBFX@D,I"/OSY+S}&p}]47@f_WR.$&`llf%5("G9H!(REb@`u:&9C
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 5b 68 ad 2b a7 0a b2 00 b8 75 57 88 aa ad 15 b0 9e bb b6 58 31 be e7 3d 37 21 28 0b b8 0a 5c a9 7d 3c a8 02 a0 5c ec 30 24 15 ee 24 88 c7 8c 02 44 fc c5 e0 f8 03 4e 44 b0 7f 7d 9e 29 ec 56 97 03 5c 90 ff 48 bb b0 b6 9b 9d 77 de c7 a7 86 77 2c 18 8c 92 71 48 7e ae eb f3 51 f2 0b fb b2 b7 05 37 3d 00 66 10 90 9c a5 6b 08 36 69 52 12 a0 6c 23 0d ee e8 8d 5d 10 8c 2e 0e 3d 4e d4 54 ec aa e3 19 47 c6 8e 98 c0 c8 ba 06 6f 37 de 32 f1 d6 eb e5 ea fa 57 4f 88 35 99 97 75 44 a6 10 82 84 21 1b a0 e2 b1 23 00 5c 9d 5c 82 76 88 00 9a 2c 9a 3e 98 d8 9d db 40 09 16 3b 7b 47 ee e6 93 3f 3c c7 c9 08 2c 2c bc d9 39 45 ad b3 bd 9e 90 85 05 44 5c 81 53 6c 94 0a 31 18 a4 09 73 13 37 6f 01 49 63 40 5a 66 c9 69 38 46 35 e8 0c ab c3 f0 6e 86 a9 61 b3 d4 c7 69 c4 26 eb e6 4f 3e Data Ascii: [h+uWX1=7!(\}<\0$$DND})V\Hww,qH~Q7=fk6iRl#].=NTGo72WO5uD!#\\v,>@;{G?<,,9ED\Sl1s7oIc@Zfi8F5nai&O>
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 00 a8 00 ee c9 9e 7c c0 da 10 b1 37 6e 52 b9 d5 00 1e 55 36 ec f9 b0 38 ef 75 f5 f8 27 e2 d3 cb 90 90 9c 7c 94 2e 1d 43 b4 f1 f7 ee 0f 3a 30 c8 89 12 c7 1d 00 47 c9 06 0f 4f 3e 29 8d 49 ba cb 97 5d b7 18 00 4c 59 ae 62 8d 14 22 b1 58 a9 e6 e5 b7 28 d8 bf e5 6f e8 b4 f3 af d3 de bd df 8f 2d 66 f5 a3 df e3 1e b7 ba fa 0f de ee 05 9b d1 cb 7e f4 2e 0b c2 6e ee 9b 76 f1 53 d8 fc bc 4e 00 dc d1 80 56 07 a9 5d 28 e9 29 9c 83 d5 5c 26 d0 22 46 5e 86 12 53 b1 0b 3c c2 0d 1c c9 6b 21 26 5b d0 15 3c e8 b3 44 35 54 b8 2c 21 27 f2 62 6e 5d a6 ce 9a b3 f6 a0 03 b6 d4 05 5e 3a 4b 91 44 02 5f 58 45 90 d1 98 28 36 71 46 3b 22 12 ee 41 46 24 8d 5d 02 b8 3d e4 b5 6f 7a 6e ef 47 68 42 68 c9 ad 68 84 69 fb fb f0 7d 7f f8 83 5f ff c3 af e5 0c b2 22 d9 fe ba f7 bf fb fd 6f ff Data Ascii: \|7nRU68u'\|.C:0GO>)I]LYb"X(o-f~.nvSNV]()\&"F^S<k!&[<D5T,!'bn]^:KD_XE(6qF;"AF$]=oznGhBhhi}_"o
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 38 83 8d 44 55 1d 7c 9f c9 60 10 83 9f e0 6c 08 d0 1b 0a 4d 96 85 95 bb 16 f0 bd 61 6e 6b bb 00 24 91 52 89 1b ad 58 4b 6b 69 21 95 2e e3 b6 0e 0f 43 d1 be 34 c6 72 a5 0f 78 c4 c4 94 62 61 9d de fe e7 bd eb 01 f3 81 13 88 a1 1a 46 72 24 19 60 c1 0a e7 a5 37 c2 44 d6 90 62 ad 1a 74 10 96 05 da 41 e0 48 71 b2 d9 84 78 57 0e 21 22 58 4a 48 22 05 05 f8 87 e7 ee 87 1f c3 9f bb 98 a5 b4 7a 55 d5 22 d2 0c ae 0a 75 76 bd 6c b6 40 31 32 30 4d 81 ca 54 5c c5 32 70 d3 ff 7a 30 19 4c 60 9b 0f 00 6b 96 51 c2 c5 6c 0d 8a 40 07 4b 80 b0 29 36 03 61 3a 42 42 74 cb 6e 6b 50 71 ff ae 6f 90 84 b7 4b 11 4f 1c 5c 04 8a 25 f4 eb ee 8f 7f df 12 13 b5 59 20 ab af 4a f2 e9 0f b6 d2 c7 da 8a 6f ac 05 91 68 d7 ed 1a 4e 10 c8 3b c8 8e 77 7a df bf dd ff f3 c2 6f ea cd fd 5a 40 69 e9 Data Ascii: 8DU\|`lMank$RXKki!.C4rxbaFr$`7DbtAHqxW!"XJH"zU"uvl@120MT\2pz0L`kQl@K)6a:BBtnkPqoKO\%Y JohN;wzoZ@i
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 75 44 a7 12 2a 29 f5 06 55 d5 e1 96 cd 71 ff f2 a6 09 cd c5 2f 24 92 af be b2 6c 7a cb b6 ef 13 d1 ef c1 fa fd cd ce b4 b7 b0 0d b4 72 df d6 2d c0 cb 7e eb 63 07 78 7f e3 9d f6 93 90 21 03 4b 22 9f 5e 1d f6 5b 89 27 b8 dc 79 d7 85 52 31 d4 40 36 a2 02 8e 58 36 48 fd c9 ce 88 6b b5 76 34 af ba 7e 66 e7 ef 07 88 be 5d 65 a7 d9 9d ff de bf b6 9f 40 db 69 c2 ac e9 9d c9 9a 5b 63 85 e5 c2 dc 0a 2b 08 67 d3 16 c8 0f c2 ad c6 0a d0 ac d6 94 35 ba 5d 99 20 b6 28 f4 4a 31 a9 7b 31 c1 62 92 c5 40 c4 b6 9c c0 23 d0 01 31 c0 54 35 ba d0 92 ca 28 b2 c3 c3 60 00 69 34 6a 1d b7 6d 57 2b 40 58 48 a5 02 d2 6c 42 11 0a 62 3e 92 52 e2 84 f8 9c bc d8 2d 7a 6e 83 5b 85 d1 bc bd e7 ef 3e 7f 6f 5c b6 78 b9 54 a5 db 65 2f 1e fb 28 9f 3e cf c8 17 de d4 9a 0a 34 54 19 30 d4 89 0e Data Ascii: uD*)Uq/$lzr-~cx!K"^['yR1@6X6Hkv4~f]e@i[c+g5] (J1{1b@#1T5(`i4jmW+@XHlBb>R-zn[>o\xTe/(>4T0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49852	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1224	OUT	GET /media/wysiwyg/home/vitrines-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:32 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 39982 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "vqHEqO0Q8LKzArpJTY4MBdj8NO2IU3h15oJbi0ftkWQ" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=64048 idim=400x400 ifmt=png ofsz=39982 odim=400x400 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-1801627807767e191c6a1909846b44d4-ff9198196dea74ac-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960023-PAR, cache-dfw-kdal2120117-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 49 46 46 26 9c 00 00 57 45 42 50 56 50 38 4c 19 9c 00 00 2f 8f c1 63 10 4d d0 b2 6d 3b 6e 1b ad 7b 80 94 9b 73 35 ff 01 03 04 29 55 f7 1b d1 ff 09 c8 bf 7a af e6 fb 6c d2 a4 ec 88 bc ef 8b 17 7e 15 4d 22 7e 84 e2 da e4 8b f5 6d 50 bb d1 0a 28 6f 19 63 2c 58 ea ca 9a 77 8e 8d a2 68 54 a1 6f 19 9b a2 9b 2d b0 cc f9 cc d8 36 69 d3 66 ad d5 25 73 3e 31 0e 92 b6 31 5a b9 c8 9c f7 c6 25 af 57 db c2 a2 c0 2e f7 c6 41 45 e5 c5 c2 d1 7c ce 7d dd 62 2f 32 e7 d9 38 2a 6a 61 01 b9 ca 63 05 b5 54 ad a5 47 f3 64 1c 99 36 69 62 62 db 1e e4 b1 04 9b 6a 92 aa be 4f 85 d6 36 d5 02 27 e1 8a 23 b4 d4 4b 9e 3b 57 a9 f4 83 5c 63 e9 e7 a0 36 da 8b 7e 80 89 c6 6b cc fb 80 ab c4 28 1f a0 10 28 8d eb 67 a8 00 ad 0a 9f d2 fa 45 cb bd 3e e3 cb 6d b1 a5 d0 67 72 a6 f8 65 5b b5 e2 Data Ascii: RIFF&WEBPVP8L/cMm;n{s5)Uzl~M"~mP(oc,XwhTo-6if%s>11Z%W.AE\|}b/28*jacTGd6ibbjO6'#K;W\c6~k((gE>mgre[
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 9f 1b 77 77 97 d6 61 e1 ee b6 5a b8 6b dc 5a 0b 77 77 88 37 71 77 3d 45 b9 6d 24 49 50 6a 1a 9b fc 13 c5 7b 60 19 b4 6d 23 c8 cb 1d 7f 4e 0f ec 6f b2 60 db 36 ed 68 df d8 b6 6d db c6 9f 6d bb 6d db b6 6d c7 b6 6d f3 e1 26 ad c7 58 37 ef 4c 80 9d 0d 00 4d c9 92 ce 39 d7 f7 16 ba ea d5 ab 7e d5 3d 3d b6 6d db b6 67 a2 59 44 66 ba a1 6d 33 b2 6d 9b cf 56 77 57 a3 ba ea d6 d5 b9 f7 ac d5 a3 f0 2c fe c0 ee 3f b0 6d 0c a3 e5 1f b0 7d 93 f5 76 be 36 47 6b db de cc b6 86 d1 7c df 5d 66 b6 6d 9b fd cd 2f 98 6f 33 ef 76 ba ea 3f b0 6f 33 1b 91 19 be 5f 30 df 66 13 ad 15 d6 2a 33 32 2b b3 cd 84 62 23 49 8e 24 c9 3d ab fb 99 fe 8a 72 da 95 ee 5b 92 24 4b 92 24 db 22 62 51 8b 4b 5d fb ff bf f2 7e 89 72 57 61 39 da b6 ad 95 72 e7 e4 97 24 e3 ee d3 4e 37 f8 22 60 11 ac Data Ascii: wwaZkZww7qw=Em$IPj{`m#No`6hmmmmm&X7LM9~==mgYDfm3mVwW,?m}v6Gk\|]fm/o3v?o3_0f*32+b#I$=r[$K$"bQK]~rWa9r$N7"`
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 22 20 73 60 d9 92 83 d0 12 0f a0 15 99 90 46 cc 2c 2e 64 18 8a 45 2c f1 7e 48 a1 c4 06 5b 50 58 bd 14 01 b8 30 4e c1 81 cd f2 a6 03 01 16 04 b5 21 62 0f c0 72 c4 74 7b 05 c4 43 11 e5 81 56 b5 0d 2c c1 02 6e a5 53 69 eb da 48 04 5c fc 83 f8 02 b1 a6 e5 f6 ad 01 d7 a6 b6 36 b2 ea 39 0d 8e 70 da 90 92 47 1d 16 89 51 ca d0 42 6a 61 70 5d 33 97 ae fe 99 c7 d7 f2 9b a3 57 fb b0 5e 1b f0 47 83 25 7f d2 7f dd 56 b2 2e 89 67 de c3 76 bd 20 0e 04 fd 67 c9 d4 cc ac 41 4e cf 66 2d 32 61 86 74 33 ab c7 c0 5e 93 a1 c9 04 9f 4e be 5d d5 64 85 87 e6 da a6 82 07 c8 f2 a6 ef 24 2a 1d f2 f6 37 24 d9 3e 97 11 a0 78 34 a7 a4 ae 20 06 99 f8 78 82 f6 ff 6d 6f 32 0f 86 8b 5f 92 ec 24 41 cc d1 09 27 93 a9 0b c9 04 b1 ac 7d cc 5c 97 c8 3f ea bd 15 17 57 b5 5c f1 38 ad 9c 08 57 5d Data Ascii: " s`F,.dE,~H[PX0N!brt{CV,nSiH\69pGQBjap]3W^G%V.gv gANf-2at3^N]d$*7$>x4 xmo2_$A'}\?W\8W]
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 82 c0 c8 20 bf c1 82 fd ad 33 45 ab ce 81 e6 98 f9 c0 47 63 aa 1b c1 23 d2 78 52 b5 43 e1 91 dd b2 2a 66 61 fa 64 0a c6 18 d1 8b ba 5d 69 95 5d 7d 2f 25 ec f0 00 34 63 5f d6 04 13 d4 22 63 7e d6 8c 00 f9 80 45 3d ec 87 fb 7a 5c 76 c4 16 56 7c 23 7a d0 10 2c 8b 18 10 75 b0 78 f6 9b bf 3d d4 2c 87 ab 65 6b 08 1d 6e 70 37 3b c4 a8 99 88 d4 1d c3 2e 3a a4 db ed d2 24 b9 53 8e 87 c7 b4 8d 2b 11 25 69 98 d4 f1 28 3b b9 0b 5c 41 94 83 5d d7 9d f9 5e bf d8 83 d5 d2 06 ae 92 20 17 9e 68 63 21 6f 60 34 1d ac 0e 20 9c 63 b3 f3 81 db 8a b2 7e 35 e4 bf ff 66 6c 7f 55 54 8f ef 10 8c 0e 8e 06 31 20 90 c0 3a a9 4d a0 7e 28 bd 01 b9 bc 99 5d 9b 38 a2 07 0b 62 78 90 75 c2 bf 89 ac 20 6b fb a2 2c 61 ba 57 9b 8a 75 d3 51 73 ca ad bd ca ad 82 27 8e 2f 2f 18 e5 23 55 44 c7 b6 Data Ascii: 3EGc#xRC*fad]i]}/%4c_"c~E=z\vV\|#z,ux=,eknp7;.:$S+%i(;\A]^ hc!o`4 c~5flUT1 :M~(]8bxu k,aWuQs'//#UD
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 3d da ba 9e 30 01 85 33 e1 12 e8 fa db bf 0b 75 e0 1e c6 1c d0 38 c3 d6 18 c8 71 0d 77 1c 56 a6 b3 5c 1f 41 d0 62 b4 c4 07 13 6e 75 4a a9 a8 2a 09 cc 0c 68 05 65 8c b9 32 c1 03 42 f0 16 b0 ac d8 1b f4 38 6c f4 48 e0 cf 64 93 3e ea 86 19 f9 9a f4 d3 88 71 0b ae 6c 0f 4a fb 69 77 c6 40 6b 0e 3a f7 03 d1 89 9d 2f 2c c4 48 f7 78 6f 09 9d 89 74 92 20 2b 80 59 c2 33 ca 7c ee f7 98 d7 37 52 04 e4 25 4a 69 cd cd 30 ba 5d 85 95 40 75 b2 dd 23 e7 c5 ff 33 eb 1b 31 d7 94 c7 c9 8d 98 53 9c 0c b7 8d 05 74 a0 00 32 10 65 0a 65 84 25 2b 48 bf 1c 66 ff a7 37 0f 3d f5 1e 7c 43 7b ab 24 93 28 f3 26 07 e0 9a ef 92 9b f4 c4 8a 63 a6 86 92 63 20 06 f3 38 2f 81 e6 1f 15 a3 84 10 26 80 b3 c5 70 92 ef 98 e1 a1 ce ad b3 db 60 18 8f 66 62 22 32 8c 27 77 d2 1f 55 e0 8c a8 bb 0a 50 Data Ascii: =03u8qwV\AbnuJ*he2B8lHd>qlJiw@k:/,Hxot +Y3\|7R%Ji0]@u#31St2ee%+Hf7=\|C{$(&cc 8/&p`fb"2'wUP
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: d2 0f 55 e4 4d b4 f2 6d bb 75 3f eb e3 b6 5e ac c5 45 e1 0f af 06 3b 45 91 24 49 90 14 34 22 c2 b2 f7 bb 2e d2 75 dd 04 40 66 13 56 1f 05 7c 18 00 e4 54 ac 7a 46 ff ac 03 07 cc 40 18 a8 4e 87 ea a5 ab 32 a1 62 0c 50 45 10 39 0e 0c 14 52 9a 65 e0 19 03 8f ff da 1e 4b 1f 9f f5 62 20 ce 89 30 81 01 bf 82 bf ec ab ea 3d 23 09 84 00 08 4a 04 82 08 b1 f6 21 78 98 ed cc dc 6a 92 43 fa c9 9c 1c ad 3f a6 12 e3 14 80 40 05 f9 4a 84 2a f6 49 6c 89 c0 4e 5f 55 17 02 6d 91 c3 3b 2f 57 b7 ec e9 76 c5 4a 03 54 3b 70 f9 0c 03 5b 0c bc f2 e6 7d 77 18 38 32 fb ea 45 42 ec 14 c1 4b f4 5f fc 6c d2 af cf 7a 02 5d d7 11 02 2b 7e da af cf 3d e1 83 10 a7 a2 99 70 3a 5c ce ed 6e 4e cd 97 ec 10 e1 ce 1d 7b 88 b1 2a cd 40 f2 c1 45 73 80 b8 12 5e 83 3b e0 ce 62 1b b7 da 6b cf de 01 Data Ascii: UMmu?^E;E$I4".u@fV\|TzF@N2bPE9ReKb 0=#J!xjC?@JIlN_Um;/WvJT;p[}w82EBK_lz]+~=p:\nN{@Es^;bk
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: c5 d7 17 ef 66 0d bd f0 0b 0f 21 ce 08 13 71 7d e6 c1 17 19 38 44 96 33 a7 e5 0a 2a 11 b9 1f 0c 13 58 be 8c 97 59 36 ed 9c 25 9b 54 59 fe 88 3c 26 7d 28 0b da ca 93 34 19 38 65 78 b9 66 d9 79 98 35 29 73 c1 40 3c 13 bb c4 c6 ec 40 28 09 2b 46 7a e0 30 4c 30 62 24 c3 a9 2a 0c 07 30 ec 73 c0 ac 13 89 22 a1 02 51 b1 c2 1a 76 23 10 76 95 51 77 96 f1 0c 13 a7 7c c5 13 2e d8 b4 2f 4a cd 60 26 03 06 b6 d7 cf 08 c2 b1 59 8c 33 eb 1a 5b 34 45 4a 50 09 09 8f 3e 02 88 ce 5b 16 f8 6c 40 e8 0b 6d 46 fb 2b bc 93 62 d4 b6 55 87 da a0 54 44 64 62 c5 6e 06 f2 42 15 9c 48 85 4e 7c 7d 07 d4 e5 ff 18 45 2e 23 48 e2 a8 9d 52 66 94 f8 5c 7f 79 78 dd 03 ec dc 74 cb 48 51 0e 72 d0 af 81 52 22 22 a0 83 2c 42 83 61 32 1e 12 66 37 9a 87 ef 7f 76 b3 d9 9c 04 a0 e4 d4 32 ee 91 40 d0 Data Ascii: f!q}8D3XY6%TY<&}(48exfy5)s@<@(+Fz0L0b$0s"Qv#vQw\|./J`&Y3[4EJP>[l@mF+bUTDdbnBHN\|}E.#HRf\yxtHQrR"",Ba2f7v2@
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: f1 b6 7c 52 ea 69 2f c9 81 d5 9b 77 1b 4c 4f 01 4f ae b9 ef 45 cb ce dc 5b 3f c9 85 5c 9e 1d ab fe 83 0d 6c b8 ec b3 06 8f 9d dd ea f9 f6 13 ba bb b7 41 24 92 20 c4 3a d5 86 48 03 1b 66 6d 26 05 7e 95 f8 d5 2e 4a e3 58 7d c4 3f a4 97 f9 e3 17 b7 8d 63 c5 db be 24 d3 4f 7f 5e b8 87 74 3a fe b4 f3 54 69 cd e9 b9 6f c3 ff 9a 3b 73 75 f4 9b 87 74 13 8b f0 e1 cb 46 c2 f8 dc 14 0f 09 8f ce 2d 10 f7 90 8f 0f 49 36 7b cb e9 9d 3b ce 04 19 f0 ea 8b 27 7f 27 af 08 a3 9e 79 d6 28 1f c2 ed 7c c3 72 2a 7f f5 f6 19 92 89 5e d9 4f 81 5f 40 b3 1f 5c 1f f5 c2 a2 f8 b8 9d f9 db f7 ea e8 20 04 ba f1 e9 58 ba db e7 c0 84 a8 b4 0d 44 46 ef 6f 5d eb 1c e4 ae ea 7c c4 ad 04 73 db 9d e2 54 70 20 81 a9 97 05 bc ac 38 9c 59 1c e7 19 c5 60 6e 93 58 5e 4e 21 b1 4a c5 1f f0 b5 8e a9 Data Ascii: \|Ri/wLOOE[?\lA$ :Hfm&~.JX}?c$O^t:Tio;sutF-I6{;''y(\|r*^O_@\ XDFo]\|sTp 8Y`nX^N!J
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 62 fc e8 bc 28 33 9f c1 68 b2 11 10 b1 d3 16 77 cc 8d 4f f8 04 a0 46 db 31 20 3f d0 de 9c fd 04 71 aa 52 b5 8f d0 05 f6 01 46 a5 82 4e 30 0c 02 10 a8 a5 ae e3 04 40 49 86 ac 65 14 68 72 da 3c 06 b8 88 f8 97 24 82 29 68 d4 33 1c 93 f7 69 db 59 4d 12 49 28 84 4f 11 0a 67 40 20 14 10 8a a0 ac 58 f3 5a 1e 94 a3 dc a8 c4 55 d0 d2 9f 73 9f 43 1c 5b 01 e4 54 00 80 94 61 e6 15 79 93 01 5d 2e 24 62 75 22 02 c8 80 a3 01 ef 07 6a 31 0e 18 a6 dd 8e 56 82 02 2a 09 cb f2 23 9c be 56 ad 43 8a 8a bc f2 e8 1c 50 cb 72 f2 58 e0 b3 77 9e 20 bf 2c 18 d4 b4 2f 39 9f f0 98 43 a5 c2 06 bb 86 09 49 2a 80 b1 af e5 be a0 96 14 5c f8 4b a0 2a 67 78 82 86 90 67 5c 01 e7 c8 8d 48 3b e5 93 93 a7 51 80 0e 94 46 48 14 46 5e 79 24 2b 0f a0 79 df ca 03 04 7c 02 80 52 09 cc a0 46 08 21 00 Data Ascii: b(3hwOF1 ?qRFN0@Iehr<$)h3iYMI(Og@ XZUsC[Tay].$bu"j1V#VCPrXw ,/9CI\K*gxg\H;QFHF^y$+y\|RF!
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: c7 ef eb 3a ce 3e 91 b7 87 75 ea 99 b8 99 2d 2c 1b 71 2c 2b df 7f 49 c5 84 91 ea d4 4f 22 56 da 52 85 e5 86 2f 1d 77 cf 99 11 40 45 41 7f 8c 7d f3 c0 63 fe 29 be a2 c1 ae fc 76 18 1c fb 76 62 0f 9b 37 ec 83 e3 62 15 a1 5b 54 dd fd ae 43 0f 6f c6 89 dc 3f 58 fa c1 ac 63 25 2b 14 59 42 f1 fe 68 1b 88 15 72 5f 2e 35 f4 05 a6 91 41 fa 24 49 c2 dd 45 54 e7 51 80 d8 17 63 06 14 bc 8f 8f 3d 44 d1 07 37 97 f8 20 90 83 9c e9 e6 d4 34 0d d9 90 38 2f 8f a4 85 85 12 41 d0 f9 e1 e7 9e 3e c8 54 8f 79 fa dd f6 e2 14 6d fb 5e b2 c8 dd 80 7d f3 45 26 76 ca 9e fe b6 e6 69 76 66 0f f7 68 e1 22 3a c0 aa 01 88 28 c8 c3 ca 11 44 5c 38 48 44 84 08 f8 b1 a4 07 84 1d 7f 06 d6 6c fe c4 f9 56 5c 70 ca b8 33 7a ec 09 24 3e 35 d6 e5 ff 1c 8b 7a f8 45 b5 62 18 61 d4 30 42 3a 47 0c 35 Data Ascii: :>u-,q,+IO"VR/w@EA}c)vvb7b[TCo?Xc%+YBhr_.5A$IETQc=D7 48/A>Tym^}E&vivfh":(D\8HDlV\p3z$>5zEba0B:G5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49854	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1042	OUT	GET /media/catalog/product/5/0/502350_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2568 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "OlQIGoH8LH83vWVSd9Sr4jNhCN96DkXTpNXUaf49llo" Expires: Fri, 24 Oct 2025 12:16:09 GMT Fastly-Io-Info: ifsz=69585 idim=1000x1000 ifmt=jpeg ofsz=2568 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-1801629f928166d4235249e4a9bbc914-5655a892e6e22aaa-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72023 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960027-PAR, cache-dfw-kdal2120080-DFW X-Cache: HIT, MISS X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1189	IN	Data Raw: 0f 24 63 f9 5a 19 19 c2 5b 49 30 86 81 28 2d d6 e5 d5 6c ca 73 a5 a8 19 f5 8c b4 18 9f 92 a7 c8 59 23 71 b5 ba ff 00 05 20 a9 c8 cd d1 53 55 52 ec 91 60 04 90 a6 8d 12 42 64 80 5d 10 b6 40 8d d4 99 54 02 9a 0d 48 2a ca 69 f7 41 12 80 4b 94 e3 f9 46 d7 68 b8 e4 84 b9 1b 42 67 8a 2f 55 a3 01 84 46 56 b2 43 f5 da 0e 39 bf 92 51 a3 46 53 8a 60 a9 c5 86 9a 65 03 e0 80 78 90 e0 a8 0c af 09 16 29 2e 4d 45 d0 18 72 42 4e 2d 33 22 47 5d c5 33 9d 9a 1e 19 1f 4f 52 68 28 65 9c 79 bf d9 a5 35 25 aa 31 23 76 2a a1 82 45 38 e8 c0 71 a7 46 8f 1d 4a c9 1d 13 28 15 ac 1a 10 98 db a4 2a 4b ef 7e c2 19 ba 16 c6 c3 66 0b 40 26 88 3e 18 ed 90 29 5a 04 98 a5 2b e4 bb 28 72 96 a3 54 8c b6 12 7d 31 06 a5 45 d1 9d 4d ad c6 29 a2 02 68 44 f0 a7 aa d1 9a 2d 17 40 60 6a 70 df 54 14 Data Ascii: $cZ[I0(-lsY#q SUR`Bd]@THiAKFhBg/UFVC9QFS`ex).MErBN-3"G]3ORh(ey5%1#vE8qFJ(*K~f@&>)Z+(rT}1EM)hD-@`jpT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49853	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1230	OUT	GET /media/wysiwyg/home/agencemnent-magasin.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:32 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66476 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "WE7CxxoU+vypFwnDRFLij2rAjQkPUnq9rO7onpZJf3Y" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=104873 idim=400x400 ifmt=png ofsz=66476 odim=400x400 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-1801627807299e9decef24c7eab5025a-ed0c1fc279171ad6-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960073-PAR, cache-dfw-kdal2120110-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 49 46 46 a4 03 01 00 57 45 42 50 56 50 38 4c 98 03 01 00 2f 8f c1 63 10 4d d0 92 24 b9 6e 24 59 16 90 96 d3 ca ca fb 1f 18 20 08 cd cc 3e 3e 23 fa 3f 01 f8 3f 7d 8c df 6e fc 01 40 5f 9b 97 8c 9b f5 80 39 6f 8c b2 39 c6 38 b3 37 13 c0 9c ef c6 a8 72 fd 54 99 0a a4 ac 86 12 a9 00 e0 dd 58 b6 a6 24 06 ab 01 1b f6 f2 fe a4 b4 94 c8 c8 a4 d6 28 4e cd b3 71 e1 47 94 4d 52 22 29 ea 4a 77 c3 dd 5e 54 d2 47 24 45 29 fa 91 92 9a f3 64 6c bc 17 17 ea f0 c3 48 51 d5 bb da da 06 6c d3 0f 25 91 0a f3 a2 8e 4d 25 29 49 8a a4 24 4a 62 c3 35 eb a9 c6 51 51 0c dd 80 01 d8 b0 0d af 55 27 2f 25 46 8e 24 92 94 48 32 24 eb 9e 25 45 26 49 91 a4 24 91 a4 6e 18 40 a3 4d 49 2a 52 0c 19 92 3b 5e f2 4a 9a 2c 51 a4 c4 9d 2e 3d 36 6c c0 92 44 52 a2 56 56 7c af b2 da 36 60 c0 6d 18 Data Ascii: RIFFWEBPVP8L/cM$n$Y >>#??}n@_9o987rTX$(NqGMR")Jw^TG$E)dlHQl%M%)I$Jb5QQU'/%F$H2$%E&I$n@MI*R;^J,Q.=6lDRVV\|6`m
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 1f f8 b2 ab 92 54 55 62 4c ac 72 d3 cf 52 95 54 8e d9 7c 9d 4a a5 52 eb 24 f1 33 cc 39 40 cf 2f b2 84 00 e8 00 a1 af 1f a8 20 2a 2a c8 4d bd 40 51 40 45 c4 ba 27 93 95 8a 87 20 8f ca c4 55 38 c0 09 7a b7 65 21 ec 26 ce 67 59 82 8a 0a 88 20 dd 27 fd 06 51 8e bb fb e0 72 23 ce 08 22 2e 3f c2 89 2a 0b 5e a0 22 2b 27 aa 51 54 7c 92 94 55 2b 86 a8 88 fb ab 2d 3b 00 45 06 0a 5c e5 86 a7 57 db cd f4 10 fc 22 6b 15 45 0e d4 2f 58 ac 19 c2 13 10 84 2c 51 41 15 15 7c 94 aa 24 6c d8 4c 00 ad d7 84 24 38 a2 22 b2 fe 60 f2 d2 ba cf 8d a8 a2 a8 a8 3c d8 6e 54 44 01 41 b1 1f e4 06 50 51 50 94 be ae a9 9a a5 8a 93 85 9c d4 75 60 b0 1e 2e 38 38 ad 2a b5 41 2d 71 1c 76 7d ab ca 52 ad 1f ed 1f f8 8f d8 8b fe a3 fe 9b e3 4b 92 24 47 b2 6d db 12 8d 1a 63 ce 05 37 3e e7 fc 63 Data Ascii: TUbLrRT\|JR$39@/ *M@Q@E' U8ze!&gY 'Qr#".?^"+'QT\|U+-;E\W"kE/X,QA\|$lL$8"`<nTDAPQPu`.88*A-qv}RK$Gmc7>c
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: c0 b5 12 1c 83 4f 60 db 73 2b 8c 87 37 e0 2a 70 b9 04 35 30 06 fe 7c 62 15 2c e1 6e 78 1e 42 c1 15 13 24 c1 17 b0 fa 49 e1 f5 34 86 57 a1 1b b8 6a 82 99 f0 35 14 3e 23 c0 15 70 0f b8 70 82 f3 f0 36 6c 7b 3e e5 8e f0 e8 11 a6 d7 a6 27 80 7e d0 fb c9 94 5b 42 27 78 14 c2 c1 d5 13 6c 83 77 e0 dc 33 01 dc 09 d7 82 27 40 50 08 df c0 8c e7 d1 58 04 ee 87 a6 e0 39 10 4c 80 6f 9f 44 13 16 e8 00 37 82 a7 41 b0 0b 5e 86 a4 67 00 b8 0c 2e 02 4f 84 20 0b 5e 87 e8 cb c7 2b 21 f0 2b f4 85 30 f0 4c 08 82 70 d3 d5 bf 28 f2 f5 d4 87 29 f0 3a 78 32 04 61 70 2b 34 bc f6 aa a7 b0 1c 6e 06 cf 87 e0 62 68 76 e1 78 3d d7 c3 4a e8 04 9e 11 41 1b 68 7b d9 78 3d 4f c2 7c 68 04 9e 13 41 d3 ab be bb 5f cf 87 30 1e c2 c1 b3 22 a8 07 ed af 14 6f fd 98 c9 af de 4e e5 c1 b3 2f fd 12 68 Data Ascii: O`s+7*p50\|b,nxB$I4Wj5>#pp6l{>'~[B'xlw3'@PX9LoD7A^g.O ^+!+0Lp():x2ap+4nbhvx=JAh{x=O\|hA_0"oN/h
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 00 80 c0 4f 5b 14 f8 79 84 44 20 f4 47 aa 08 18 00 00 44 8c c8 8f c4 41 10 10 be a2 a7 53 6b 5e 21 f3 bf d7 07 fe 0e 00 80 09 e0 4f 68 d6 cb 00 10 22 82 00 00 3f 62 7f 10 29 00 21 84 00 25 06 20 00 93 df 5c 84 3f 20 1a 00 20 04 7e bf fc 71 64 10 24 80 65 20 40 22 00 60 91 08 10 27 04 03 50 20 00 04 80 1f 68 fc e6 08 08 85 1f 64 85 00 80 12 68 08 10 43 62 0c 30 81 d8 9f 8d 29 c2 ff 8b d3 fd ae 2f fb b3 ee 8e d2 a4 d0 b3 44 06 00 e0 3f 00 40 08 4c db 9b f6 7f bb 33 15 40 10 22 c2 e0 67 94 0b 50 70 69 26 82 20 04 06 bf 21 c6 44 21 60 0c 7e 44 69 e4 4f c6 15 31 10 41 22 4a 04 2c c4 10 01 00 a2 01 30 10 02 0a 42 e0 0f bf 03 bf 91 08 fc fc c5 80 10 00 02 80 00 04 84 88 91 09 10 19 ff 0b e1 ff 0b a3 84 af e9 09 6b b2 42 f0 ea 6a 11 c2 84 5c ad 18 f1 61 01 c0 20 Data Ascii: O[yD GDASk^!Oh"?b)!% \? ~qd$e @"`'P hdhCb0)/D?@L3@"gPpi& !D!`~DiO1A"J,0BkBj\a
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 61 61 41 9a ac ff c0 03 f9 b8 c8 37 08 45 fb 81 a6 6a 67 20 a4 14 0e 83 17 c8 c7 fd 58 c7 e7 f7 bb 7d dc ba 27 c5 db 31 33 aa 00 eb 58 a0 8f c9 e4 c7 fa cb c8 75 f2 55 92 74 b1 2b cf 8f 27 cd db fc eb 11 27 1e b7 f5 91 ed b3 fb 7e be e7 bb 3e 7a 7f 7e e3 c7 d7 7a f9 fb 5f af bd fe 03 f6 22 9c be 9c 46 d9 b0 73 71 e1 53 c0 5b 1e d6 2b a7 01 98 13 5a 42 00 86 10 a0 50 10 85 42 64 db a9 14 05 d5 41 b0 27 2c 14 99 c2 85 ef e3 99 3b 86 97 0f 02 dc 23 cf 40 44 48 ca 88 82 40 29 77 06 62 70 72 1e 61 20 23 c1 c7 73 46 2f 85 75 76 9e 5e 0e 3c b0 be a0 33 52 d8 b3 99 d8 88 b9 b5 c5 03 b4 cc 93 68 25 1a 49 c6 45 0b e7 08 55 4a ba 5a 67 f5 7c 2f 0f 86 52 c8 2e 67 e1 48 25 12 40 c1 47 4b 40 aa 0d b8 ae 54 05 d2 87 36 aa 0f 9c 04 4e 55 fa ae 62 d4 4f 75 30 7c d3 88 7f Data Ascii: aaA7Ejg X}'13XuUt+''~>z~z_"FsqS[+ZBPBdA',;#@DH@)wbpra #sF/uv^<3Rh%IEUJZg\|/R.gH%@GK@T6NUbOu0\|
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 7a 20 10 12 44 da a4 90 03 00 e2 e2 03 9e 14 16 04 a0 64 1c 1c 24 22 20 1b ca c1 3d a7 01 bf 1a 92 21 ad 10 89 e2 20 92 0d d4 06 0b 88 c4 c2 a9 39 24 5a 81 56 b2 2a 49 8c ac 1f d3 87 5b ef c5 db 08 71 22 ff 1f 7e 16 d4 fe 80 22 d8 7a 0d ca cb 7b 6f 57 09 38 bc 73 17 f3 12 b4 cb 5f 00 00 0c 08 20 1c 00 18 42 0c 88 21 42 14 0c 8f 71 c7 bb e1 8e 3c 1d 7f fd 77 7e 26 a2 bc e1 c0 f4 43 ee d0 31 6f e3 8f 9c 79 61 0b 16 7b 28 a5 23 40 f4 c5 97 39 b3 2d 05 06 55 e1 27 43 a0 f3 6d 73 5e 06 41 03 9f 12 00 b4 a4 26 02 4a 51 e4 a2 62 89 b2 03 ca a6 48 42 35 55 46 49 10 25 65 52 28 56 b5 88 41 b1 96 b4 1c a8 55 80 d2 90 5c 71 78 91 62 4d 6a 94 40 cb c4 d0 c0 c2 af 91 30 84 21 ba fc c1 e6 a6 d1 66 9b 00 d9 8a 15 b7 0e fd e2 6f 60 d7 2c 03 91 ad 10 0f 86 b5 44 4b 88 dd Data Ascii: z Dd$" =! 9$ZV*I[q"~"z{oW8s_ B!Bq<w~&C1oya{(#@9-U'Cms^A&JQbHB5UFI%eR(VAU\qxbMj@0!fo`,DK
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 9e 3a 7b 96 c0 ab 97 2b 8f 7e ed 73 35 5f a5 16 b6 bd e5 fd 10 01 f7 f8 eb f1 33 77 33 3b 62 f2 d3 3d 80 a0 00 5a ad bb 82 00 0a 1b 51 51 51 28 11 80 fb 88 5e 7d fb c7 d1 ef 0f bd 9c 01 07 40 d1 02 10 41 95 00 d9 83 9f be 55 90 62 2c 13 c9 8d 93 cf 48 3d 19 78 71 11 30 f4 78 90 de 40 d8 55 d2 14 10 34 05 df ef fe e5 fb 9f f6 a3 df 8f 31 37 8a 5f e2 c8 a9 81 97 23 fe 91 07 ee f3 d7 ef e7 bf 3d df 74 df 9f cf c7 97 77 3f fd 2e 2e 3f c2 ef a2 89 23 37 8e c8 83 da 1f fd 0f 3c e6 3f d1 73 fc a9 fd d6 ff 4b ed 69 3f 79 be f9 56 f7 fa f2 db 86 05 85 30 8b 38 c2 8a 71 ec c2 ee 25 14 c5 96 b4 7e 6e 73 5b a8 28 05 a8 ae 8a 29 2d 4a 86 ad b3 6b 05 11 b8 6c bb cc 31 6a d0 ff c3 9f ff 96 7f 6b df f3 77 dd fd 81 f9 f1 5b 7b 4b f4 f9 99 4b fa f5 9b 3b 82 9b f4 4e 9b 00 Data Ascii: :{+~s5_3w3;b=ZQQQ(^}@AUb,H=xq0x@U417_#=tw?..?#7<?sKi?yV08q%~ns[()-Jkl1jkw[{KK;N
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 7a 07 f4 d0 7f 2a e9 33 de 44 38 0d 3b 52 db d5 ba a9 98 ca 05 61 c5 fa bc 60 d9 87 89 47 9f 36 16 5c 36 51 10 78 f9 72 3c 96 ed d2 22 4d 90 38 0c 92 68 24 05 56 2a 05 66 bf b1 97 9d 1c 0b c5 f2 54 15 75 66 96 01 84 e8 1b e1 e8 b7 88 e2 00 a2 69 08 04 f8 84 4e 46 30 87 e2 ab ef 2b 45 cf 11 29 75 76 15 fa 09 e4 c6 e9 6f b8 89 26 32 a2 9c ea c5 c5 7d 07 73 0e 77 2c 11 05 b6 3b 01 01 8a d9 22 11 51 87 20 a7 f0 47 c3 bc fd fd b8 8c bf 2b e2 01 5c ac be ef be b7 5e 20 04 fc 70 aa d6 d2 67 42 23 b1 c9 2e 5f 93 1a 42 0d 04 0e ee 9e b5 88 3b 20 20 c4 32 93 2c dc f3 5e c1 32 14 a3 29 0f 09 23 8a cc d5 81 37 fd 66 16 76 a7 ab fb b0 88 62 f0 86 57 ea e4 ef f6 a7 07 bf 30 9f a9 5b 37 df c6 a0 d4 f5 53 21 da 65 99 7b 3a fd 00 94 cf 3d 78 39 99 bf 6d c7 7e e4 b3 c0 2d Data Ascii: z3D8;Ra`G6\6Qxr<"M8h$VfTufiNF0+E)uvo&2}sw,;"Q G+\^ pgB#._B; 2,^2)#7fvbW0[7S!e{:=x9m~-
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 19 08 20 68 40 04 0f e0 80 61 40 87 12 02 18 02 99 88 02 43 72 00 cc e8 89 5c 40 04 a7 04 0d 06 12 01 38 00 d2 3e 0d 1f 9e 3a 17 b8 cd ee bf ec a0 06 3b 1c e6 82 0e 81 58 ac 98 07 d6 15 69 76 d4 13 95 4c 56 64 9f ac f7 a0 bd 10 14 a1 ac 1b d6 58 30 81 39 44 e8 6e 08 c9 63 52 c3 94 72 da dd 99 a9 9c 1a d3 4d 8d 26 0b 98 06 0e 93 76 74 84 a6 96 69 40 6a 98 d0 8c a7 e5 4e 5d cf 5c a3 fc d4 a7 89 8f 81 46 27 ef 52 c9 3d 8a 2e 63 cf 96 b2 9e 44 75 87 6a e0 d4 61 88 59 f6 cd cc fd 17 bb 97 65 a4 e8 4a c5 3a 8b 90 5e 0c 15 40 98 85 3e f4 6d 0b 11 50 ec 20 a4 78 12 65 6e c7 29 e7 4d e6 5a 7f c5 f9 9f dd 64 c0 c4 47 ab 39 01 b3 c1 9b 61 30 78 bc 41 69 26 ba d6 6c f6 ca 68 a7 55 5a 95 2f 50 10 60 04 60 01 03 a8 a0 dc b6 b8 8a 3e 17 8b 81 e4 d1 5c 2a b8 81 00 04 27 Data Ascii: h@a@Cr\@8>:;XivLVdX09DncRrM&vti@jN]\F'R=.cDujaYeJ:^@>mP xen)MZdG9a0xAi&lhUZ/P``>\*'
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 58 b1 ec 81 b5 bb 26 92 28 2f 65 26 14 e4 44 ba 4d 41 1e 4b cc 30 ad cb f6 1c 6e a0 5d d9 87 0e 1d 33 7b 63 e3 bd 4c aa 3f 2a bc 72 e6 be d1 32 37 93 66 d9 ba 67 71 1b 3f c9 2c 05 a6 db 55 a1 d2 ea 8f 4c 6b 57 82 1b 24 04 50 03 3a 9d 65 6d 16 dd ec 6b 62 82 b4 c3 a3 37 7a 1e e0 be ba c3 0d 39 f9 3d 10 07 db 1f 07 d0 e7 5d 75 96 15 c6 9b 16 c1 08 40 37 13 42 01 a2 ab 97 7b 30 2d 14 2a 0a 80 91 a5 7f 03 a2 c5 66 5d 5d b5 30 cd f3 81 24 f3 b8 3d df 27 2b 08 6f 88 80 24 35 1f 01 0f 30 b6 85 44 71 22 52 06 01 c8 dc 8f c4 a1 e2 74 5a 22 00 15 7c a3 1b c8 14 e9 4a ea 04 ee 73 5f 4a de 3c 00 be cd 2d d9 55 5c 40 4f 4d d7 19 8f a4 2c f4 cd 6d 9a bd 58 53 cb 26 72 00 10 5b 18 8b 42 84 02 99 e5 35 65 c9 a0 47 ed 22 e5 67 d8 4d 5f f8 2e 25 54 6e e5 01 a4 bd bb a8 34 Data Ascii: X&(/e&DMAK0n]3{cL?r27fgq?,ULkW$P:emkb7z9=]u@7B{0-f]]0$='+o$50Dq"RtZ"\|Js_J<-U\@OM,mXS&r[B5eG"gM_.%Tn4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49850	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1191	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:32 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54072 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "v+24gJ1SP58WTjId76s8NXVJG7Bj31mbo+4+W5N9uHw" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=324994 idim=1920x700 ifmt=jpeg ofsz=54072 odim=1920x700 ofmt=webp Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162780542e59f9e6534603fb85a9f-aa36438e29bfd124-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:32 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120091-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 49 46 46 30 d3 00 00 57 45 42 50 56 50 38 20 24 d3 00 00 10 23 04 9d 01 2a 80 07 bc 02 3e 6d 36 97 49 24 22 a2 aa a1 d4 89 19 50 0d 89 67 6e dc c8 63 7f 5a 69 bd 0a 96 99 d5 56 d7 7c 96 79 fa 7e 6f 1c ba f9 9d 0f 39 e6 7b cf fd 9e a7 bc b4 76 e8 ef aa 53 ff a2 fe b7 fd e7 7f ab a7 ff 81 fe 37 d4 9b 97 fc 78 f9 ff e1 3d 6d 7f d5 e2 e7 b9 ff d6 f2 fe e7 5f d3 7e da bf df fa ca fe fb fe fb d8 23 fb 87 a5 8f fd 9e ad 7f c3 fa 14 fd c7 f5 7c ff b3 fb c3 ef 2f fb 0f a8 7f f7 1f 4a df fe 3e cf 9f e5 ff f7 fb 21 ff 3c f4 a0 ff eb ed 25 fe 1b ff 7f ac f7 a0 07 ff ff 6d ae 92 fe 5d 7a 8b f9 b7 f5 3f f0 3c 4f f3 a1 f2 7f e0 bf 75 fe 2c bf 66 d0 5f bf ff 89 ff ab d0 ef e8 1f 8f 7f 99 fe 47 da df f8 3f f8 ff d3 78 fb fb 4f f4 9e 81 1e d8 ff 99 e3 47 f6 cf fd 1f 8c Data Ascii: RIFF0WEBPVP8 $#*>m6I$"PgncZiV\|y~o9{vS7x=m_~#\|/J>!<%m]z?<Ou,f_G?xOG
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: ce f7 bb 9c d3 9b b4 f6 be fa 3b 1c dd 56 78 ea 4a 4a 41 a5 47 03 a2 f3 5e de f1 c9 bb 8a 72 7d 0f 84 60 c9 24 4a 8e 77 2b e4 66 09 fd 13 ae 64 70 4b a6 e5 5c ac b9 08 28 1c 64 ae 05 19 30 74 32 e1 0e 90 ac 25 ac 75 33 63 fb d6 b9 2f 69 0f 74 33 de e0 96 6b 00 a4 52 67 a4 bb 83 33 28 e5 d1 4a 6c 8c 0c fb 21 6d dd 96 bd 6d af 3a 3e 9b bd 74 ae d7 e3 22 7b d2 6f da 09 6a 01 a6 00 59 e9 12 d7 ec 60 b0 70 5c 16 80 d8 19 e2 34 a2 80 ff 22 f0 b3 62 60 b3 8d de 60 49 c5 ae 49 f5 6d bd fb a9 4f da f0 6a 84 4c 68 1c d0 81 44 ef b9 9b 32 fd 62 e9 ba 80 a8 94 07 48 f0 8c 97 7d 2e 2e ca e1 5f fc 46 e0 17 08 76 61 aa 9a ef ad d7 50 63 8a cb 39 45 36 45 73 0e 38 b8 14 5e 48 d0 22 73 d1 ce 68 ee b1 ea 01 5b 3d 6a ca 12 47 c0 91 fa 2a d8 22 36 22 4a b8 22 0e 83 4d de 5b Data Ascii: ;VxJJAG^r}`$Jw+fdpK\(d0t2%u3c/it3kRg3(Jl!mm:>t"{ojY`p\4"b``IImOjLhD2bH}.._FvaPc9E6Es8^H"sh[=jG*"6"J"M[
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 8b 4a 00 a4 57 13 da 7f 9d 0f ab 14 84 82 23 73 ad 36 df 0b ef 89 70 cb eb 50 39 18 eb 25 09 0d 6b 64 cd 39 4b 32 ea 03 51 e1 42 f3 83 c9 ad e9 5b b1 5f 38 14 5f 97 47 b4 23 04 e8 79 dc 76 78 70 93 ae 35 a6 fe ec 28 7e a7 c9 88 04 b1 e4 e5 64 c1 00 15 41 ca 4c 20 11 60 39 b4 ad 56 95 7b b3 be 71 93 15 6d 1c d9 44 a8 cb f9 e2 1c 95 7d bb 14 96 ee 71 e4 6d e3 65 01 42 c4 e3 47 01 78 71 0c ae ed 25 2e e8 e4 9e 75 48 9c 54 5b 66 8a fe 7c 4d 8f 78 88 c0 55 7b 61 f7 4a 0c db cf c1 86 36 30 02 0e a2 d1 4b 73 b0 f5 00 de 56 5a 24 e5 3d eb c6 db 94 83 5e f2 b2 f8 9a a2 d3 3d 75 37 f0 26 26 f2 e2 c7 aa b5 1e 5b 39 1c c3 ff 99 40 12 d0 16 12 8f b0 68 b1 68 65 c8 3f 44 ae 3d 19 b4 ae c6 dd 0d ed d1 34 0d aa 9d eb 0a ac 1a 38 eb 94 b1 c4 6c 7d 39 ab 38 33 5b 20 2e e8 Data Ascii: JW#s6pP9%kd9K2QB[_8_G#yvxp5(~dAL `9V{qmD}qmeBGxq%.uHT[f\|MxU{aJ60KsVZ$=^=u7&&[9@hhe?D=48l}983[ .
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: d1 15 58 cc 34 5a 8f c1 67 56 b7 36 89 09 55 d2 b0 4a ae 95 ee 41 2e f9 69 56 e5 e3 c7 5f 75 36 30 75 5a f9 78 60 c6 b6 27 a0 4b 32 ad 29 4e 4b c3 c2 29 7d 3b 6d 15 8e 42 b2 91 aa 50 f6 da 9f 64 c3 ec 6b f6 b6 a5 01 50 59 aa bb 36 68 ed e4 56 fa ae 76 81 0b 2f d9 4e ba c3 bb 40 e4 6b 26 75 a3 03 21 52 3a af 4c 55 6e dc 2b 85 31 8a 47 99 58 79 65 06 14 50 43 bd 26 a7 ef 4e 10 70 0f fd f9 a6 65 ac a9 bf dc 74 0b c7 f8 2f aa 9e bd 8a a4 37 88 7d d4 c9 07 d7 f9 3c 71 58 cf 6b 6c 71 46 cd cc 7d 34 96 13 28 9b e8 c6 cf da 9f 80 95 76 e1 58 bf 5f 8b d2 21 ae 4d 21 00 ee c5 b4 8d e8 2f 53 75 db 40 d9 01 27 65 0e e6 9b e1 df b8 e1 19 8e ab cb 3b 8a 66 7a 2c c3 31 df 04 25 5e 66 7c 3d b7 7c 6a 91 70 99 5a 51 be a7 14 de 2b 6d d2 90 f9 70 9e 25 38 9a f7 2a bb 4a 58 Data Ascii: X4ZgV6UJA.iV_u60uZx`'K2)NK)};mBPdkPY6hVv/N@k&u!R:LUn+1GXyePC&Npet/7}<qXklqF}4(vX_!M!/Su@'e;fz,1%^f\|=\|jpZQ+mp%8*JX
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: cb 50 51 68 59 b3 b5 52 f6 82 33 85 6b 39 4c 2a 49 4d dd e8 81 a2 b0 e2 68 db 33 ce 1e c0 4c 16 7a ff 46 da 41 7f a7 1d 75 4d fd 51 07 12 17 fc d0 c4 44 cd 00 be 6c e7 c9 c0 ec af 2b 10 cb 94 82 10 2b 78 70 d0 f9 fd 05 f3 02 fd 8f 1a e7 80 5c 8a 6f ea c8 61 e7 6d 17 c6 c8 6d 44 71 de 4f a5 a0 00 18 8d a0 5b c1 b3 50 8d 42 58 46 bb 5f b3 61 95 69 13 25 95 64 f7 54 0d 46 b5 7c 96 33 fe 48 15 17 93 ba 38 85 a2 04 cc d0 23 f7 35 e1 32 61 66 74 94 c2 27 3d 35 37 87 11 75 ae e8 8e ff 39 83 37 d4 4e 4d 32 d1 24 dc 51 9c 51 b2 12 2b a0 25 e1 7c 1c f6 e0 94 07 a7 a5 73 a4 74 32 cc 78 a6 5a 7c 30 74 b0 29 e7 29 af 22 13 9f 05 4c 55 f0 45 9f f8 0e 26 95 38 43 e1 af 78 5e 0a 26 92 83 76 f6 f5 5f fb c2 44 19 1b b4 b5 5a f7 a3 08 4b 1b 0e b7 09 08 c6 f7 e4 01 93 51 a3 Data Ascii: PQhYR3k9L*IMh3LzFAuMQDl++xp\oammDqO[PBXF_ai%dTF\|3H8#52aft'=57u97NM2$QQ+%\|st2xZ\|0t))"LUE&8Cx^&v_DZKQ
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 10 c8 19 bc 23 b9 06 9a a7 fe 8a 94 f6 f6 10 34 23 89 be ba ac bb 77 b1 60 ef a9 51 38 fd b9 30 4c 0f 46 f8 70 b0 7f 6c 98 2e fd 08 25 9d 44 02 46 74 a9 2c 7b d3 ae c4 0e 6b 48 bc b4 93 13 86 dc d6 e0 1d 58 dd c9 2c 3b e6 09 26 5f cf ff 29 4e 67 c6 8e 32 05 dc 16 8f b3 b4 8c c7 53 b8 8b e4 94 5f 89 09 ee f5 b2 ae 19 bf dc 6c 82 c5 71 b2 bf 4f 76 b8 28 89 78 20 38 d0 01 16 89 16 af 04 fd 4d 52 4a 3d 0e 60 09 ab 67 15 26 33 d0 7f 86 b4 dc 75 ef a4 ae c6 5a 77 d5 3c 2c fb 9c 19 c7 c3 5b 2f db 45 d5 c0 74 06 f4 12 4a 4f f6 c7 87 f5 03 d3 5f 84 c7 c0 1f 2d 1c 0a 09 19 8c b0 d8 1f fe bf 04 d2 62 11 9b d1 c9 fd 6a c7 0d f5 31 09 35 e8 a0 05 68 de 2a 80 ff 81 e7 20 cb 48 24 dc e4 86 11 1e e0 e1 48 f1 5f e2 2d fc be 87 a8 57 19 ca e3 ec 9a 15 1b 91 d4 19 52 07 50 Data Ascii: #4#w`Q80LFpl.%DFt,{kHX,;&_)Ng2S_lqOv(x 8MRJ=`g&3uZw<,[/EtJO_-bj15h* H$H_-WRP
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 52 f2 24 5f e3 8a a3 90 d5 55 8a 94 44 ca 97 24 77 0a e4 35 f0 bf 2c 77 ca 27 c1 43 63 e9 e0 0b 7c 6c 46 0f ec 0e 28 70 74 e7 4c e2 de b4 26 ca 9e fa d5 03 e2 c2 d0 18 94 74 a3 a5 df 3f 70 d5 82 7c 60 e7 9a 03 ca 91 e7 79 7c 00 c4 9b 9d 6b bf 6b 0e 63 60 bf 7d 30 a6 8f cd ec 14 5e 05 13 e1 a5 9d f6 82 fa b3 ac b6 be 43 e5 69 5f d2 4d 20 c7 5f ba f3 bc 63 bc 77 f8 fd 58 46 c6 64 ad fe 3e 2f a7 f8 fd 73 13 6e a0 a9 aa e7 1a 25 35 d0 d3 d9 2d 3b 07 fc d8 20 a1 95 bb 91 86 0a 13 fb c4 2f a4 61 21 1c 86 98 c1 e2 ed f1 9d a3 f7 58 ec de d1 76 98 20 55 48 1a 4d a4 b2 69 b9 1a 00 a5 06 d7 07 16 65 c6 77 ec 81 56 61 6b 45 e0 50 9a 94 7c da 37 d6 07 34 35 01 ff e5 56 1f 9d df 7a 20 00 fe f3 a7 54 b1 4e 60 6b 79 52 14 c8 87 bd 1d 32 60 22 f1 44 cf 9d e7 b2 0a af 0b Data Ascii: R$_UD$w5,w'Cc\|lF(ptL&t?p\|`y\|kkc`}0^Ci_M _cwXFd>/sn%5-; /a!Xv UHMiewVakEP\|745Vz TN`kyR2`"D
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: 7f 85 20 2f 12 e4 52 20 11 47 99 d4 58 d0 bc b0 bc 11 6c d3 1e 1b ab 29 9f fc f9 9c 06 f2 7e 3e 22 e8 5d e7 79 a9 31 41 69 ea d8 41 b0 7c 60 0b a0 af 3f 05 48 9c 3e 2d 97 69 98 2c fc 61 89 31 1d aa 85 fe 0e 27 e3 51 2e 07 9d ae 7e d6 55 c1 c9 f1 6b 0a b0 8f 05 6c 28 75 c7 f5 e1 8a 57 cd 56 31 fa bd 88 c0 ac ce 6b b7 f9 07 92 66 2c a1 0a 35 82 75 c5 5b 7e db 0c 0f 9e 19 85 3e 4e af 9b 53 b8 85 34 8f 3f e8 86 ee fc 49 bb 75 41 84 74 ff 00 bd 9a b7 ac 0d f6 26 10 f7 c0 58 db 61 11 5a fd 20 f9 da 01 64 75 66 77 29 90 61 39 36 f2 e2 0e 79 63 7f a2 fb 9a b3 18 07 e7 1b b7 5b 03 11 d4 11 72 a1 bd 32 6b d6 9b e2 dd 75 89 30 2b d9 16 d9 90 5e 96 47 eb 5b d9 14 31 e6 5c f6 2d c1 bc d1 8f 5a bc 69 37 68 a0 f5 4d c9 3a 6b e1 ff 8c 98 9c 44 14 88 83 be 2d 4f 23 79 56 Data Ascii: /R GXl)~>"]y1AiA\|`?H>-i,a1'Q.~Ukl(uWV1kf,5u[~>NS4?IuAt&XaZ dufw)a96yc[r2ku0+^G[1\-Zi7hM:kD-O#yV
2024-10-25 08:16:32 UTC	1379	IN	Data Raw: d3 3b 45 3c ab b5 5a 93 dc 7a 02 3a df a7 55 61 c7 5e 7a 6c 5f a5 f7 92 0f 46 62 3c 4d 98 38 13 54 2a 5a 18 95 45 d6 6d bc 7f 79 f3 c8 f4 54 11 45 c7 24 e1 a2 d0 14 19 42 9d fd 73 78 e6 99 c0 e4 11 74 9e 57 d6 6b 62 fd c2 69 bd e4 fa d5 95 94 b0 94 a5 e4 3a 54 87 fe 57 4c d0 7e af 67 81 f2 e1 28 e8 25 e5 ea f0 44 ab 15 fe 87 e8 e2 28 e4 db 79 dc 33 09 92 a2 76 69 13 8f 02 33 e4 d9 d8 8a a0 27 4b a3 74 09 01 da 8d 72 7b a7 7e 3a ed bd 0d 69 6b fd 45 70 2a 16 bd f7 0b c5 de 1f d3 2f 76 08 26 4a b1 14 be fd ed 05 07 84 4d 79 b4 84 ec 88 cd 12 db a8 7b 2c 7f a1 21 58 20 e3 6a 43 a8 a7 3b 1a 8a 21 98 42 a3 78 22 e9 3e e2 1d b5 f9 c8 40 37 f6 56 08 63 a7 45 9b e9 22 60 14 8c 61 ba 26 c6 73 a2 a4 3e f2 29 36 d1 56 b7 31 f7 a1 bc 52 08 47 3a 54 88 7b b7 c4 6a c8 Data Ascii: ;E<Zz:Ua^zl_Fb<M8TZEmyTE$BsxtWkbi:TWL~g(%D(y3vi3'Ktr{~:ikEp/v&JMy{,!X jC;!Bx">@7VcE"`a&s>)6V1RG:T{j
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 8d 08 a1 53 a5 9c 34 bf 58 7d 7e bd 84 de f9 d8 3f 1f 3c 08 7f 34 f9 45 c5 47 f5 3c 7b 07 e0 bd 06 ba 8c 3b c6 e3 36 b6 a6 47 ce af 3b a1 59 3e 6f bf 12 7a 02 6a 15 c8 a0 0f 21 98 df b6 e4 85 c9 be e0 84 5b b4 52 1c f4 6f da 13 64 59 da e3 7d fb eb c3 6d cf d5 65 60 78 bb d0 a9 30 cf 5a 06 71 db 83 49 0d 50 b2 7f ee 99 dd 83 59 29 a1 7e 06 98 b6 eb f1 d7 f1 cc ed 50 77 79 ba 92 5c 1a b9 cb 0f ef da 59 a4 18 e0 97 3c cc 2d 3c 4f 67 66 1e ba 1f 53 3c eb 2c 69 19 e1 d5 bc 34 c2 4d 70 50 f2 26 bb 30 e7 90 9e 6e 61 ac 43 df e9 5b 60 40 aa 5d 9e 85 e7 db ca 1e 63 88 d3 2a 51 0f 14 d3 3d 0c fa 03 d5 13 38 dc aa 13 7c 0c 39 03 74 99 35 17 18 52 0e 86 5b 8a b2 b1 55 f3 59 4d 19 27 ff ff 4d 2e d7 77 0f 7f e1 28 4c ec 30 81 af 1b fd 8d 3e 8b 83 eb 85 a7 1f b2 ed ee Data Ascii: S4X}~?<4EG<{;6G;Y>ozj![RodY}me`x0ZqIPY)~Pwy\Y<-<OgfS<,i4MpP&0naC[`@]c*Q=8\|9t5R[UYM'M.w(L0>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49838	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1042	OUT	GET /media/catalog/product/5/0/501013_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3011 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "ZCrMAa56yFyVQoRziprXzUz21yhtNx3kDMcpzkTAVhg" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=81475 idim=1000x1000 ifmt=jpeg ofsz=3011 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162780d150f3e1a5eb132737cf76f-de7d8c9336dacda9-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960022-PAR, cache-dfw-ktki8620033-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 01 49 2b c5 ae a8 a8 03 91 26 e5 0c 72 51 bf b3 3b 35 cb 8d 8f a0 a3 24 b4 5d 0f 13 32 a5 b9 9b 56 56 b2 8e 26 4b d2 6d 1e ad 27 ee b3 0e 98 f5 77 6d 4e 89 dc df 7c d7 81 4a b5 1e a9 ae 5a 16 49 fd f7 0b 59 22 da ce f2 91 36 42 5a 0d 2f 0b 90 ce a3 bd b9 26 5f 16 d2 5e 06 2f e2 95 df 80 88 dc 26 ef 1e f5 ed e5 62 ab 7a ed ff 00 ba 96 47 92 6b fd 45 d7 77 b7 33 9b 25 15 57 79 a5 f0 3a 57 26 8e e6 53 97 c7 f8 6a 7f da 8e 66 a8 db 9f 13 a7 f2 e5 bb 97 e0 d7 4a 14 d7 f4 a2 f6 4e 37 d5 da 14 b3 7c a9 ef 2c c0 01 7d 48 00 00 00 00 00 00 00 00 00 00 00 00 00 01 ca 99 f2 ee 76 83 1b 17 c1 63 6a 69 e7 37 fe 4c 8a 2d 59 79 15 da c8 2a 7b 53 98 a7 2f de db 4b cd a7 f5 2c a2 f4 5e 46 2d ad 56 24 7f 66 c4 6f a6 8e c9 67 fb 47 af 0b 16 c9 de ed f5 d0 bd 38 a9 37 6b 96 Data Ascii: I+&rQ;5$]2VV&Km'wmN\|JZIY"6BZ/&_^/&bzGkEw3%Wy:W&SjfJN7\|,}Hvcji7L-Yy*{S/K,^F-V$fogG87k
2024-10-25 08:16:33 UTC	253	IN	Data Raw: 61 46 b4 25 cc f9 8c 2c 14 52 b1 ea c2 56 3d a9 8b 45 a3 92 b5 5b e6 65 eb 03 0e 35 2c 4c aa 9d 5d cd 93 02 c5 34 cb ee 89 40 00 00 00 02 97 2a 58 54 0b 81 69 50 2a 0a 14 b8 17 5c b6 53 48 b1 b2 09 c8 0c 5c 6d 47 3a 72 8f 26 8f 89 c4 60 62 a4 dc 51 f6 15 95 ee 79 55 69 dd bd 09 b3 b8 9b 3e 65 d0 68 b9 52 3d 89 51 5d 08 fb 9f 02 2c ef 69 e7 aa 44 d1 a4 65 aa 4c be 34 9f 42 2c 8d a9 43 08 19 74 e1 a9 74 69 19 30 a6 2c 89 94 d4 95 8c c8 5c 86 10 32 a3 11 67 29 15 c9 52 29 18 92 24 2c 85 52 24 57 28 8b 93 25 0a dd 95 b9 40 05 6e 0a 68 00 ad ca 80 48 14 b8 00 52 e5 1b 00 58 46 c8 a4 01 23 1a 71 31 65 4d 3e 40 04 a1 74 57 42 ce e1 74 00 94 9d ca 2f 54 40 22 c5 e5 7a a4 4d 1a 60 11 64 27 8c 49 a2 80 12 26 45 e8 02 10 a9 50 09 b6 f0 17 00 9b 0a 00 00 ff d9 Data Ascii: aF%,RV=E[e5,L]4@XTiP\SH\mG:r&`bQyUi>ehR=Q],iDeL4B,Ctti0,\2g)R)$,R$W(%@nhHRXF#q1eM>@tWBt/T@"zM`d'I&EP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49841	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1041	OUT	GET /media/catalog/product/4/9/49963_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3841 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "jNoJww3ucuzEpX7vaG7nI0mvAMcYmMwR6xouq6898gc" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=68234 idim=1000x1000 ifmt=jpeg ofsz=3841 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162780d353c5aeceb01066ff94b38-07120dbb0373a8dd-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72194 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960021-PAR, cache-dfw-kdfw8210138-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 17 f4 e8 bf 55 23 90 6d eb 50 aa bc 5a 81 d5 f8 53 44 ce cd c7 62 21 bc 14 80 d8 5e fb 5a a5 32 62 74 5a f8 c7 ed f8 a9 3f d5 6b 46 65 90 05 83 df 4a 1f 8d 77 dd 49 fe aa a1 89 d0 fc 63 fe ea 4f f5 41 9c b0 fe 13 3f 60 dd e5 53 df 3a 2f 8c 77 dd 49 fe ab 14 e2 74 22 a2 63 c3 1f 61 6f bd bf 9c f4 25 19 00 6a bd 97 cc 6f a4 b0 db 88 d1 5f d9 bf c1 ff 00 b2 b7 2e 31 85 5d b1 71 c6 70 99 bc cb 3b 36 cb ec b2 9a 36 6d 36 0a cc c2 f5 18 6f d3 a1 fd 55 96 57 52 1f 7d 3f 76 ff 00 d9 1b 59 49 51 55 40 c8 a6 0e 73 6b a2 cc 00 3a 68 74 37 1a 2b 4d 9f 6e 82 88 11 60 11 11 01 11 10 11 11 01 11 10 11 11 01 11 10 17 3f 11 b0 62 15 ae 0d 68 26 67 5c 81 62 75 e5 2b a0 28 19 f6 f5 67 6c ed ea f1 18 18 88 1c 6b 0b 71 da 2b a1 b1 fa ca 93 c9 7b 9d 4a 8c e2 43 c7 61 a7 e7 d0 Data Ascii: U#mPZSDb!^Z2btZ?kFeJwIcOA?`S:/wIt"cao%jo_.1]qp;66m6oUWR}?vYIQU@sk:ht7+Mn`?bh&g\bu+(glkq+{JCa
2024-10-25 08:16:33 UTC	1083	IN	Data Raw: dc ee 37 2d af ec 31 fa ce 44 b5 bd ce ad 4a 0b c4 7e 91 dc b1 c4 96 da 6d d6 b1 67 92 8e 37 c7 2c 93 31 87 36 d7 3f 28 d9 d2 51 9d 65 3e e1 55 4e 7c ba 8b b6 1b 8a d7 3f 12 a0 3e 6d 64 2e 3c cd 76 73 fe 37 55 61 f5 d0 d4 e2 14 62 32 f3 96 a0 5e ec 73 79 0f f1 00 ad cc 27 6e 8e 88 8b 8b 62 22 20 22 22 02 22 20 22 22 02 22 20 22 22 02 e6 98 c8 82 4c 5a b6 29 5a d7 34 b9 a6 c4 74 0d 7a 0a e9 6b 9f e2 54 06 6c 5a ae 40 fb 6a de 4e 60 16 b8 cd ab 10 dc 61 d5 50 52 b5 b1 48 26 88 cb 0f 83 23 ac f6 78 c6 ec 77 ba 1d 7a f4 a9 54 b5 35 ee 73 ad 0d 38 d4 ed 98 df f0 69 5a 8c 6a 86 48 e8 8b 88 04 09 22 b9 1d a3 54 99 ec 6e 67 58 0d ab 73 8f 69 71 ae 6f 7c 5c 01 e1 a9 9b d1 91 ce fc 73 35 57 c0 d5 9d 5d 5d 6e 86 c4 db 7f 95 d6 5e 43 6f a9 59 78 b6 8a e2 78 61 49 4d Data Ascii: 7-1DJ~mg7,16?(Qe>UN\|?>md.<vs7Uab2^sy'nb" """ """ ""LZ)Z4tzkTlZ@jN`aPRH&#xwzT5s8iZjH"TngXsiqo\|\s5W]]n^CoYxxaIM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49836	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1041	OUT	GET /media/catalog/product/4/9/49966_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3288 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "u/AOANWeBRj0RckL3YxcUtXGVKDdxUAmpph320TY/ak" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=41560 idim=1000x1000 ifmt=jpeg ofsz=3288 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img07-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627812a0c794397f21238c44e914-956cf4f82f8e35c6-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-ktki8620041-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: f5 1c 1c f9 29 56 84 df 2a d9 37 b4 5b ea eb 25 08 a0 00 00 00 00 00 00 00 0a 1f 8d 2b f0 a7 0f 1e dd 99 ea 7e 28 17 c1 43 f1 b7 aa eb 41 4b bb 3d 4f eb 89 7c 00 00 00 00 00 00 00 1b 20 00 00 00 fc 4e 9d 3a 8b 69 c2 32 5d cd 6f f5 91 95 b0 18 3a ff 00 e7 62 6c aa 7e 95 08 4b eb 44 b0 03 c8 5c e8 1d 1b 73 bf 95 c0 59 3d fb a9 a8 f8 76 2a ee 26 f0 f3 47 62 b4 7e 53 23 63 88 a7 46 e6 94 61 e4 e7 19 cf 64 e5 34 9f 53 6d 76 1a 00 ae b8 b3 15 2e 1f 67 93 5b fd ea 1b 7f 11 16 5b b3 da 59 31 d4 d0 1a 07 4e 61 68 d8 66 6c 68 55 a7 75 73 8d a4 aa ef 56 52 83 f2 91 8c df c1 7d 9d 68 b4 08 cc 24 54 70 d8 c8 a5 b2 56 94 52 5e c8 22 4c 8a 00 00 00 00 00 00 00 00 a1 f8 e2 f9 7e e2 25 dd 9e a5 fd 8b e0 a1 78 ed 52 14 ed b4 7c e5 24 b9 73 b4 a5 bb f5 24 b7 6c be 80 00 00 Data Ascii: )V7[%+~(CAK=O\| N:i2]o:bl~KD\sY=v&Gb~S#cFad4Smv.g[[Y1NahflhUusVR}h$TpVR^"L~%xR\|$s$l
2024-10-25 08:16:33 UTC	530	IN	Data Raw: 54 da 03 09 f1 3e 54 6e 32 16 d7 cd 52 a1 91 95 7b 8a 77 74 21 d5 e4 ea 50 a9 b4 77 8f 6f 5c 5a 69 f6 32 c4 a3 c5 8e 29 e4 29 5a d1 c5 e0 ec af 2a 4a da 9d 49 d4 b6 84 eb b8 f3 6e be f8 94 b6 84 9e db ec cb fa ae 0b 03 79 3b 85 75 85 b6 af 56 ad 37 09 55 95 28 3a 8e 2d 6d b7 3b 5b af ec 52 3c 37 d3 75 34 ad 8e 73 51 db 65 a9 d6 b6 9a 9c 1c 29 51 75 a6 a9 d1 9b e6 ea 52 fc 75 ff 00 d2 0e ba bb e9 17 93 ea 85 b4 6d 22 fd 7c b4 29 6d fb cd b3 f4 b4 07 1c b2 6b fc 6e ae 56 e9 f6 a5 75 34 ff 00 a3 13 44 e0 bc e9 e2 ed 6a 55 c8 2b e7 56 1e 52 37 3c 8a 0a 70 a9 f0 a2 d2 8f 56 db 3e a2 63 6a 9e b9 25 ec 45 19 86 1d 1f f3 d7 af 9b 2b ad 6a d4 ef 4a 9c ea ef f3 ce 6b ea 26 ad 7a 38 e9 68 34 ee b2 f9 1a cf d7 cb e4 e9 a7 f4 5b fe 66 85 e5 7f 94 ce 79 50 15 05 a7 03 Data Ascii: T>Tn2R{wt!Pwo\Zi2))Z*JIny;uV7U(:-m;[R<7u4sQe)QuRum"\|)mknVu4DjU+VR7<pV>cj%E+jJk&z8h4[fyP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49839	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	953	OUT	GET /media/wysiwyg/bg-cadeau-bievenue-3.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9982 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "zJChqdaCmkm9H0/oB5x+tsKYX0jCe8uQHqN1YLSCC0c" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=66207 idim=1920x500 ifmt=jpeg ofsz=9982 odim=1920x500 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016277e9651cec5ea29a11f14df9e5-f56dfc975ca1b6ef-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960094-PAR, cache-dfw-kdfw8210036-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 0a 8a a6 8a 8a 22 98 28 0a 8a 20 d3 2d 00 a8 a2 0b 88 a2 0a 8a 0f 32 28 f1 3b 09 05 01 08 a2 88 45 20 88 2c 01 00 00 05 00 01 00 01 14 10 00 56 45 04 41 40 41 50 00 00 00 00 14 00 00 05 00 00 05 11 05 88 00 0a 0d 32 d0 80 00 00 03 2d 00 c8 a8 b4 55 65 41 44 aa 00 00 06 2a 20 02 86 08 d0 00 28 b8 a9 8a 26 86 04 05 05 c5 00 51 05 45 10 50 50 14 03 01 44 05 00 30 c5 01 40 41 45 01 45 01 40 45 54 54 05 14 00 50 14 00 16 09 55 21 14 41 20 a0 20 a8 00 20 a2 28 2b 29 ad 26 a0 ce 80 2a 00 2a 26 aa 00 08 00 88 0a 80 28 15 2a 8d 22 52 a2 46 86 56 82 d1 29 42 28 82 8d 0c 80 d0 94 05 12 94 46 92 a5 04 5a b5 9a 28 d0 cd 15 1a 19 50 51 00 51 05 45 10 05 10 11 44 15 14 10 14 45 00 00 00 11 51 40 45 08 06 28 00 a0 02 80 80 02 8a 00 03 48 80 0a 00 a0 00 00 00 00 20 00 a0 Data Ascii: "( -2(;E ,VEA@AP2-UeAD* (&QEPPD0@AEE@ETTPU!A (+)&*&("RFV)B(FZ(PQQEDEQ@E(H
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 02 11 40 48 28 08 a0 00 10 00 04 89 08 a0 22 34 80 83 48 a8 82 a0 80 00 00 a8 00 00 0a 8a ac b4 00 03 26 2a 29 a8 00 0a 22 aa 00 02 ab 2b 41 55 01 1c 64 69 97 85 da 41 51 51 05 41 12 23 48 a8 80 00 8a 08 88 a6 ae 08 00 00 02 23 4c 88 00 06 a2 90 10 00 00 50 01 40 04 80 02 08 2a 28 00 a2 a0 08 00 28 8a 03 22 a0 00 00 00 00 00 00 00 00 a8 08 b5 00 15 51 42 00 60 28 0a 82 a6 28 2a a2 82 89 8a 22 aa 28 0a 18 0a a8 aa 28 62 88 28 02 aa 28 28 02 28 00 b8 00 8a a0 00 00 aa 8a 03 4c a8 2a a0 22 88 02 80 00 00 00 2c 01 2a 11 52 88 0a 88 00 82 0a 20 82 88 32 02 08 8a 20 80 20 c8 aa 88 00 22 02 a0 88 29 59 a5 51 68 c8 0b 4a 80 2d 2a 00 b4 a8 28 d0 ca 88 a2 2a 8a 22 88 2a 2b 49 a3 4c a9 88 a0 2a 2a a2 89 aa 02 a2 aa 28 82 a2 aa 2a a6 28 82 8a a1 8a 8a 88 28 aa 89 14 Data Ascii: @H("4H&)"+AUdiAQQA#H#LP@(("QB`(("((b((((L",R 2 ")YQhJ-("+IL*(((
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: a0 a2 2a a2 88 ab 88 2a 2a a2 a8 08 ab 88 aa 83 49 8a a8 aa 8a 22 a8 aa 84 51 46 55 51 55 15 4c 51 05 14 41 45 10 51 40 51 40 05 00 8a 20 28 a8 a9 14 58 00 28 a8 a2 a2 a2 8a 28 0a 82 28 0a 0b 04 54 22 80 0a 20 00 2a 82 02 80 00 27 54 54 14 19 1a 41 10 05 10 54 d3 11 05 45 04 d5 4d 11 3d 45 f5 15 04 54 01 15 15 04 05 40 10 14 40 40 00 16 a0 a2 88 08 a2 28 00 08 00 00 00 f8 51 53 5c f7 67 51 14 54 44 50 10 01 19 15 15 10 54 51 05 41 11 1a 01 91 51 50 00 10 50 44 4d 50 10 54 50 45 00 04 04 1a 41 10 05 00 14 a2 28 2a 0a 24 44 00 00 00 00 00 14 12 28 2c 41 41 10 21 00 00 00 8a 00 00 00 20 00 aa 00 0a 8a ac aa a2 98 0b 88 b8 02 e2 00 ad 32 a0 a0 02 ab 2a 0a a8 a2 0a 80 28 95 68 28 82 d1 55 95 a0 b4 40 45 56 40 68 65 41 69 50 05 11 01 a1 92 82 d2 a5 40 69 10 05 Data Ascii: **I"QFUQULQAEQ@Q@ (X(((T" 'TTATEM=ET@@@(QS\gQTDPTQAQPPDMPTPEA($D(,AA! 2(h(U@EV@heAiP@i
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 4a 02 88 02 89 40 52 a0 0d 54 a8 02 95 2a 88 14 40 5a 21 41 44 a0 28 95 28 34 56 69 42 28 c8 2c 5a 54 00 0a 80 a8 25 05 4a 00 02 02 88 00 80 00 00 08 28 02 c0 41 44 08 00 80 0a 02 80 0a 2a 00 aa 00 08 34 8a a8 a0 08 a0 aa 8a 0a 20 a2 e2 82 e2 2a b2 aa 8d 60 82 a3 42 0d 22 88 ad 22 88 a1 8b 82 2a a6 2e 02 aa 34 21 8a 2e 00 b8 8b 82 aa 80 2a 8a c8 18 28 a0 08 2e 00 2a a8 0a 98 a9 8a 8a 00 28 00 b8 00 00 0c a8 22 80 00 a0 20 28 85 05 11 01 4a 95 14 69 04 10 04 50 10 10 40 54 10 00 41 15 04 11 50 40 54 10 a8 22 a0 8a 2a 00 00 80 2a 00 a8 02 0a 01 00 00 54 01 42 80 2a 00 f8 c0 73 dd 75 40 10 00 00 00 01 40 00 00 10 45 45 00 f0 13 51 1a 45 11 1a 41 11 14 11 11 45 11 14 54 64 54 00 fc 0d 04 01 50 45 45 00 00 04 d0 50 01 11 a0 00 01 90 04 00 0c 00 14 84 01 34 00 Data Ascii: J@RT@Z!AD((4ViB(,ZT%J(AD4 `B"".4!.(.(" (JiP@TAP@T"*TBsu@@EEQEAETdTPEEP4
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 00 00 01 00 00 00 00 00 80 02 0a 8a 00 a0 80 00 02 02 1a 28 00 08 8a 80 a0 88 00 00 00 02 00 a8 00 00 00 00 00 00 00 00 00 00 00 a0 00 00 02 82 00 0a 20 02 80 2e 01 8a 22 8a 00 82 80 00 2a 0a 28 82 82 82 a2 88 02 aa 00 aa 0a 02 0a 8a 22 82 88 62 a2 a8 a0 08 aa 8a 22 aa 62 88 ab 88 b8 22 9f a2 89 a2 a2 88 aa 8a 2a aa 2e 02 ab 2a 0a a8 a0 a2 2a 0a ac a8 28 00 a2 2a 2a 95 01 54 42 a0 a2 14 8b 80 85 45 51 2a 03 48 88 2a 89 4a 0b 52 a1 45 52 b2 54 16 88 94 82 d2 a1 45 51 9a 50 52 a5 45 1a 19 01 68 cd 28 8d 54 40 16 a2 15 45 12 a0 8b 44 00 04 51 50 45 15 28 82 28 94 05 12 80 2a 70 e0 0a 02 02 28 a1 05 00 00 50 01 55 14 05 45 42 0a 2c 45 72 ea b2 af 23 a0 aa 82 0a ac a8 2a d4 a0 34 32 a0 aa 80 28 82 8a 22 80 25 15 15 04 05 10 10 40 d0 35 01 50 d4 05 44 d4 00 01 Data Ascii: ( ."("b"b".(TBEQHJRERTEQPREh(T@EDQPE((p(PUEB,Er#42("%@5PD
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 00 d1 50 a0 d5 10 11 44 02 29 50 51 6a 20 41 44 04 00 00 4a 81 a0 0a 82 00 02 00 02 28 a8 20 2a 02 a0 05 00 00 00 00 00 15 05 45 56 54 15 51 40 01 71 17 03 00 15 14 05 01 00 50 00 00 00 00 01 14 04 4d 54 04 00 0f 51 50 00 01 34 34 14 65 a6 40 00 03 44 40 01 40 00 00 40 00 00 00 00 00 14 00 00 00 15 15 4d 00 44 00 5c 17 15 15 40 01 03 05 00 05 40 00 55 c4 68 40 45 53 45 45 10 01 70 50 c0 45 f0 15 50 03 44 15 31 41 40 13 45 45 51 40 13 54 00 50 01 71 51 46 4c 54 50 00 05 00 45 56 54 14 40 1a 10 05 54 01 44 01 56 b2 03 54 66 80 a2 08 aa 27 00 51 01 54 a8 94 14 44 a2 aa 08 91 56 a2 04 16 a2 54 15 68 82 0a 82 0a b5 10 15 44 a9 41 44 00 a5 42 82 89 41 54 44 06 86 40 68 65 41 44 01 4a 00 b4 40 45 54 02 28 00 d0 8a 0a 0a 50 51 50 82 e0 a1 05 1a 45 46 a0 a0 2c 15 Data Ascii: PD)PQj ADJ( *EVTQ@qPMTQP44e@D@@@MD\@@Uh@ESEEpPEPD1A@EEQ@TPqQFLTPEVT@TDVTf'QTDVThDADBATD@heADJ@ET(PQPEF,
2024-10-25 08:16:33 UTC	329	IN	Data Raw: 20 28 80 14 00 04 01 50 41 54 40 00 10 02 94 01 29 41 42 80 2a 02 aa a2 88 a2 62 82 ae 22 e0 aa b8 98 d6 20 b8 d6 32 d0 2b 49 8b 88 aa de 26 35 88 43 1b cc 4c 6a 20 b8 a6 2e 62 2a ae 61 98 d2 2c 23 58 29 41 57 16 22 a3 50 52 82 91 50 80 a0 10 52 0a 41 44 1e 24 01 a0 00 50 00 01 14 50 54 00 00 00 00 00 05 00 00 00 00 00 00 00 04 00 00 00 10 17 00 00 00 11 14 17 87 00 10 00 68 14 00 00 00 0c 4d 50 15 17 14 00 50 5d 00 01 40 10 50 01 40 00 00 00 00 01 10 00 00 0d 40 38 a2 00 08 08 20 00 80 00 80 00 02 e0 02 28 00 00 00 00 00 00 02 80 03 20 00 a0 2f 40 00 5c 00 41 70 14 14 14 00 13 54 05 45 00 05 01 14 00 31 41 50 00 14 00 00 54 00 05 50 50 30 01 40 10 50 10 34 00 00 00 03 00 00 00 1a 00 04 00 00 00 00 00 02 a0 00 00 28 00 00 00 02 a0 08 a0 0a 08 08 00 21 a0 Data Ascii: (PAT@)ABb" 2+I&5CLj .ba,#X)AW"PRPRAD$PPThMPP]@P@@8 ( /@\ApTE1APTPP0@P4(!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49851	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	1202	OUT	GET /media/wysiwyg/campaign/Slider/bonnes-affaires-noel.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:33 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 30638 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "hlJ1kx+Zr4JxxVuCSy6LD3SgDJ4wjCQrWy64Py7hx2w" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=171186 idim=1920x700 ifmt=jpeg ofsz=30638 odim=1920x700 ofmt=webp Fastly-Io-Served-By: img01-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627804fbd5d48c3185087c3eb14f-6f0c262247737db9-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72193 Date: Fri, 25 Oct 2024 08:16:33 GMT X-Served-By: cache-par-lfpg1960026-PAR, cache-dfw-ktki8620056-DFW X-Cache: HIT, HIT X-Cache-Hits: 24, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 52 49 46 46 a6 77 00 00 57 45 42 50 56 50 38 20 9a 77 00 00 50 b1 02 9d 01 2a 80 07 bc 02 3e 6d 36 98 49 24 22 aa ac a1 b4 68 81 90 0d 89 67 6e ff e1 ea 03 ea 74 2e 62 5e 15 65 b6 9b a4 33 93 7f ba ef 67 8e fd dd fb 5f f3 3f b6 ff e1 7f 6e fe 7d 38 f7 b8 3f 56 78 db f2 c3 e6 7f fd 6f b6 6f 5f bb 1b e9 27 e0 87 cf 7f 6e ff 77 fe 63 f2 2b e6 6f fb 5f f8 1f dd bf 17 3e 9a fe b8 ff bf ee 0b fa b1 fe bb fb a7 fa af d9 ef 8d 5f 59 ff ba ff 89 3f 01 bf a6 ff 81 ff bd fe 53 f7 ff ff a7 d4 67 fb ef f8 ff f2 7d e5 7f 70 fc 86 f8 04 fe 69 fd a7 ff 4f ae 3f b2 0f ef 27 b0 37 f5 0f f3 df fc bd 78 3f 6e fe 15 bf ae ff c4 fd b7 f8 23 fd 96 ff ed ec 01 ff ef db 0b f8 07 ff 0e af fe ce 7f 92 f4 c3 e4 5f ec bf 30 3d 1d f3 85 ef df de bf 76 fd 8a b3 af d9 fe a7 df 36 fc 2d Data Ascii: RIFFwWEBPVP8 wP*>m6I$"hgnt.b^e3g_?n}8?Vxoo_'nwc+o_>_Y?Sg}piO?'7x?n#_0=v6-
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: d5 19 bb 53 8f d1 b4 41 88 ee e6 dd f2 00 42 66 ec 22 0f ba cc e8 42 2a 5a 3a 48 27 bf aa f7 80 a1 4d 62 bc 29 48 0a 52 02 94 80 a5 1e 3d 56 bd c9 6c 24 9f bc 39 89 1e d0 8a a9 9d b6 7e 75 8f 8a 8a f1 96 6c d0 a6 f8 7a 38 a9 ee 26 81 fa 92 23 23 ce 3c 30 14 28 40 9f 62 aa 25 09 02 d0 39 8f a2 b4 23 be 0e 6f c0 d0 53 39 00 64 67 ab f1 7d 29 77 91 23 42 99 4a 3b 9b a4 e2 0a 60 d4 f1 65 01 74 5f d2 98 dc d5 8b 6e 7d 4f b5 6b 29 4d f1 55 40 1d 2e b4 72 b2 63 f1 26 1c 74 b6 fe 83 92 8d 96 3d f3 46 4b 2d 5e 3e 1b d5 da b7 d6 14 a0 20 12 56 08 39 e7 67 90 6e 7c f6 b0 b9 8c 9e 63 27 98 c9 df 48 02 98 26 32 1a b9 5d 80 f6 f4 0b 69 41 01 5b bb c6 16 28 c9 f8 05 da f0 21 fd e3 cd 0e 87 b2 69 02 e9 ae da 46 d2 4f c3 05 3c d5 5d 93 42 76 f4 48 d1 dc 2f d8 ea 74 d4 20 Data Ascii: SABf"B*Z:H'Mb)HR=Vl$9~ulz8&##<0(@b%9#oS9dg})w#BJ;`et_n}Ok)MU@.rc&t=FK-^> V9gn\|c'H&2]iA[(!iFO<]BvH/t
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 24 4a 9d 6c dc cf bc ba 40 48 0d db 34 d3 a8 7e 97 f4 ee 54 59 00 f1 c0 45 71 36 70 46 07 5f 4e 81 c7 21 2e 78 77 74 31 b9 cd 4a 9f a6 71 03 a3 df 0f 46 f2 2d 28 9d 85 18 27 58 53 26 26 7c 91 5b 69 26 cc c5 74 37 8e 08 9a ff 6a 08 5f ef 89 32 f3 7b 46 42 8d 67 53 b5 11 14 d2 01 89 bc e9 c2 06 72 f9 c3 e4 ef 0a 52 02 94 80 a5 20 29 48 00 2a 6a d9 27 bb 56 45 36 33 37 55 b8 07 47 0a 9d 0a af 83 61 e2 68 ee ec eb 67 f2 e7 0f 46 94 39 b0 7c 9a bf b5 18 af 14 37 c9 e6 32 79 8c 9e 63 27 80 88 00 bf 23 6b 59 89 7b 10 4b 6c 8b ea 47 81 25 de 4c 12 5e cb 59 0d cd 9d 39 1c 4e b0 82 be 39 5d 3e bf d2 25 af cb cb 17 69 b7 70 22 4c 86 55 a0 2a 48 16 c1 92 d2 c1 85 58 5e 44 3b cd 8c 26 56 cf 8d 48 b4 9c 00 d8 b7 f6 e2 76 99 1a 67 00 56 4a 7f 33 5a 94 aa 7a 28 da 84 8c Data Ascii: $Jl@H4~TYEq6pF_N!.xwt1JqF-('XS&&\|[i&t7j_2{FBgSrR )Hj'VE637UGahgF9\|72yc'#kY{KlG%L^Y9N9]>%ip"LUHX^D;&VHvgVJ3Zz(
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 67 df 9b 74 e6 c1 f1 b6 02 81 76 36 1d 42 39 9f 7e 67 df 99 f7 e6 7d fa 4b 9e 65 71 9b c6 2b c2 66 f6 03 0a f7 07 2f 3e e5 d6 90 cf 12 10 1a cb bc 92 49 c8 0b fa 9e 0a 7e 7c 8f 2f f2 11 10 c0 ae 03 35 46 30 76 ef d0 3f 07 c6 c1 f1 b0 7c 6c 1f 1b 07 c6 c1 f2 53 b0 7c 6c 21 85 30 fb f3 51 57 29 f7 e6 7d f9 9f 7e 67 df 99 f7 e6 87 77 20 29 48 0a 51 02 18 79 34 9d 05 b3 50 53 43 cf 63 05 05 3b 87 83 47 68 1e bd c7 38 d0 cd 03 27 4a cc d9 69 d6 37 b2 af d8 d8 3e 36 0f 8d 83 e3 60 f8 d8 3e 37 be 0f 8d 83 e9 68 50 a7 df ee fb a9 4f bf 33 ef cc fb f3 3f 00 e2 4f 3d 11 93 cc 64 f3 1a 3a 2e ed f6 ee f4 e9 57 3f 8b a2 b9 a1 f5 3e 7f e3 f3 5e e5 ea 6a 7a 47 fc 8e 4b 45 1c de 84 38 c5 78 58 87 bc d3 02 e9 cd 16 d5 bc 4b 29 f7 34 cd 33 4c d3 34 ca 6d 2f ec 09 09 da d9 Data Ascii: gtv6B9~g}Keq+f/>I~\|/5F0v?\|lS\|l!0QW)}~gw )HQy4PSCc;Gh8'Ji7>6`>7hPO3?O=d:.W?>^jzGKE8xXK)43L4m/
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: fb f3 3e fc cf bf 33 ef cc fb f3 3f 03 ad 06 28 4e 63 27 98 c9 e6 3d c4 62 ba 00 00 fe ff 79 a2 a5 35 83 e0 80 02 a2 5a 8e d8 61 31 00 4a cb e9 6b 30 ed 86 13 09 08 8a f8 8b fc 70 2f a3 3a 5a ff e3 68 6f 99 87 f9 17 ce 99 89 77 f1 64 37 ac 5a 27 2a 0f f9 89 96 8c b1 af d6 f7 99 8f 55 b8 b7 c5 b8 46 f0 f6 81 99 13 6c b8 93 ee c3 cd f3 e8 c9 4d 9b d8 89 67 91 7a 75 38 84 f9 f5 87 b2 d7 80 e4 93 0b 31 53 b9 e9 e5 8b 99 93 37 08 80 a9 b5 fd 86 83 46 c1 d7 a3 f9 6f d8 91 a3 2f 3e 55 29 dd 64 d2 eb a3 bd 4b 45 b0 71 c7 23 71 1e f8 15 d7 e2 9a 75 87 15 fc ba 19 29 c1 dc 4a d9 72 48 a3 d2 57 f9 60 8f 56 21 a5 0c 59 86 06 18 7f 97 5f 79 c2 23 c8 5c 3f c3 96 01 06 42 b4 30 98 18 97 29 68 93 62 b3 d5 b1 8c 28 92 c1 7c 06 d8 b9 8a 8a 24 16 da 0d 70 21 72 b5 0e 8a 19 Data Ascii: >3?(Nc'=by5Za1Jk0p/:Zhowd7Z'*UFlMgzu81S7Fo/>U)dKEq#qu)JrHW`V!Y_y#\?B0)hb(\|$p!r
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 8d 70 c8 95 2b 8e 25 56 e7 0a 95 1c 9c 3e fa 88 aa a9 3d 71 78 70 e5 7f 70 bd 16 4a 21 c7 ac 1a 26 f6 7e 55 b6 fe ce 0e 9d 62 84 1c 3d 2d 6b 17 a6 72 c6 3d 95 bf 68 41 fb 3a d1 b6 28 ec 13 c6 da 1b c8 74 8f cf f0 50 cc e2 c3 1e 7e 68 a2 8c 6e 76 18 fc 86 fe fb e5 8d 99 5b df 2a 6a 3e c4 e9 31 c0 11 4b a8 55 29 18 a4 a5 82 57 ce c0 f9 ad d2 01 3f c8 98 7e e9 ea 3d 75 a5 0e 9a c8 b6 07 d8 b7 ca 34 9c fb 97 f8 c3 5a db af 5e 7b 75 c0 47 02 6e 76 03 d3 83 8d c3 9c 6c 0f 55 4a a0 a0 93 77 c8 42 a6 f7 bf 08 89 b7 29 9e 1f 34 ae 13 79 61 55 30 0a 33 30 05 69 a7 eb 5d 68 90 02 00 58 76 e6 61 6d c6 5c 71 62 fe 48 f3 2b bc ab 08 dd 6e d1 3a 31 d0 05 f3 8b 7a 01 67 a0 9f 9e d9 2e d5 d2 39 cc de b2 63 9a 82 ac 7c 03 d3 d8 26 67 78 c2 21 a0 b5 36 ef 73 c1 c6 53 85 a4 Data Ascii: p+%V>=qxppJ!&~Ub=-kr=hA:(tP~hnv[*j>1KU)W?~=u4Z^{uGnvlUJwB)4yaU030i]hXvam\qbH+n:1zg.9c\|&gx!6sS
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 1e 7e 55 2d b2 fd 77 9c 1d cf 3c 17 4a 44 fd 8e 80 cc 34 bd b1 ad f8 8b d3 6d 70 72 18 ad cd ce 76 04 96 83 38 f7 5d a6 ad f1 7a d1 9a da 8a fe 3c a4 08 e5 98 5a 87 37 a3 0b b6 b0 85 9a 01 cd e9 fc 09 72 43 3f f1 2c 55 57 31 e9 84 1c 66 3e d2 f0 e0 ba cc 5e 8b 8a 73 fa c2 01 77 66 d2 1f 74 c1 ca 68 1d ea b8 47 e2 30 05 57 69 f8 f5 5c 0a f2 88 92 bd aa 09 f0 a3 81 d9 91 38 80 b6 c2 2a 95 0e 8b e6 72 19 a9 2c e1 e0 92 47 4c 44 30 ef 05 5a e1 85 60 6e 69 1b 62 a4 2a b0 d1 d9 cf 30 8e 28 c1 fe d7 74 ee c9 f4 b4 d8 33 5f 6d bc 6c 3c 56 59 3f 2f 66 26 ba 7d 13 7e a3 85 e8 9f e3 74 79 84 93 b9 2b 77 eb fa 38 c8 c1 ac 90 7f 15 42 d6 02 0b 8c 5d dd 86 81 58 ac 78 c5 f6 39 fc 07 ae f2 9d b1 86 3b 42 54 b7 6f 8f 20 4b b0 71 4c d5 b6 30 34 53 9b b9 33 fd 1c 0f a8 90 Data Ascii: ~U-w<JD4mprv8]z<Z7rC?,UW1f>^swfthG0Wi\8r,GLD0Z`nib0(t3_ml<VY?/f&}~ty+w8B]Xx9;BTo KqL04S3
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 06 3a 93 2e 1b 80 6b 8d 04 f0 ff 2c ea cd 0a 21 f7 85 85 79 62 60 36 30 82 f2 aa 2c 0c 09 a4 52 0f ee 3a 6a db c3 f0 7c cc 49 b5 a7 14 94 e9 52 1a d7 45 78 22 88 8f 55 b9 b4 fd 96 e9 3d 03 51 b4 53 bd db 58 61 88 da a1 eb 03 29 2e 9d cf 73 f2 51 60 43 b2 10 09 1d 04 4c 78 21 1c e2 27 20 ef 19 02 7c 34 ee 74 b0 fa dd 72 fe d1 b3 36 62 a8 84 c7 89 46 2d ba b3 37 4d 93 97 9b 3b d5 12 6f 7b 15 d9 f7 c6 1c b6 e4 ed 4f 9c f3 cd 57 50 dd fb 4d 26 c1 99 43 7f dd eb 1b 26 c5 71 7a e2 fd 2e 31 02 d9 e7 97 50 9a 63 6b d0 1e cc ed 7b 20 ef 1d 22 7f 16 61 17 69 af 09 e0 6c ae 68 8d a8 74 72 0b b9 cf ed 30 a6 e3 12 c7 d6 d3 0c d1 dc d2 e8 40 d0 fe f2 c8 b8 b6 d8 f3 78 04 c2 4b 3b c8 8a bb 74 51 fd ef 9a ba 90 b4 2a 28 5e cc 5b 80 bf cd 5c 77 e2 1e 8c 6e 2a e1 95 6f 8a Data Ascii: :.k,!yb`60,R:j\|IREx"U=QSXa).sQ`CLx!' \|4tr6bF-7M;o{OWPM&C&qz.1Pck{ "ailhtr0@xK;tQ(^[\wno
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: 8a 58 69 12 8f 61 a8 ef 9c 7d 53 31 8f b0 82 90 58 03 11 bc 95 a0 86 5d 3f b4 96 54 81 96 31 69 1b aa 3f 75 91 1d 97 f3 79 87 c8 4c 60 a7 83 9f 96 2f 1c 16 7e 66 b4 6f 8d ea e4 4e 7c 0d e4 02 27 06 88 fd 8a d1 94 f8 f5 1e db 26 d9 ff 4b 9b 56 63 26 2e f3 e1 41 fe 51 c8 63 fb a0 94 9c 7d a2 16 40 4a b0 1e c3 6f a1 99 6d 6f 05 bf d7 e0 8e 50 57 6c ae 3a 54 32 20 03 73 1f 73 4f 4a 91 56 3e 43 5c 36 d8 51 b7 f4 e1 c9 06 90 a9 f1 86 87 2c 50 5d 69 e5 80 5e 25 2d 72 de 47 09 81 bf 7d e5 74 41 9a ae 37 6f b8 3e e9 c2 d9 b1 60 df cc ef f5 15 92 ca fc f7 9f 6a 1e ad 1a bc fe d0 f0 2b 69 3c 5a b7 49 bd 82 81 24 52 83 98 d8 ad d0 00 98 61 79 d4 11 d3 c2 65 55 ee 98 3c 64 73 3a 91 0f 5f 70 ec 2d 88 57 93 7b 80 5b 32 d2 49 d3 80 52 66 6f 51 b5 9c 53 b2 9a 3f 1e 3c dc Data Ascii: Xia}S1X]?T1i?uyL`/~foN\|'&KVc&.AQc}@JomoPWl:T2 ssOJV>C\6Q,P]i^%-rG}tA7o>`j+i<ZI$RayeU<ds:_p-W{[2IRfoQS?<
2024-10-25 08:16:33 UTC	1379	IN	Data Raw: bd 33 7f 72 a5 81 d2 2f 1f ff 5c 72 bf c0 e2 32 77 94 ab 4c 4e 4b 89 a3 03 8b 1e 63 6b ec 1c 38 45 8e 78 00 95 48 dd 34 c0 38 d0 be 9d 44 7c 2c 21 03 33 8d e6 fe af 27 94 97 f9 b2 15 54 6d cd 41 ba d4 b8 89 af 15 22 56 f7 9f 63 a0 23 dc d2 14 47 30 59 dc 04 9d 8e 45 9f e1 f1 8f a7 c9 69 ee e0 05 f8 83 61 d0 1a f8 c9 09 e9 50 36 9d 11 f8 ac 55 81 86 1c 1d 64 9c c7 c5 62 f3 2d 9a 9c 25 7c 08 34 66 5a 5c d5 67 5a f2 1e d1 1b 74 60 ae b8 67 51 0c 6b 82 8f cc 38 34 2d 8c d6 13 5d 18 1d e5 ee b2 b3 84 a8 d0 50 7b 8c a6 51 8c 7b 1f 98 fb bf fc f6 e3 03 09 1f 56 8e 9c 60 da d8 58 16 f1 4a 1a a2 5e 3f 1c d0 b5 83 21 73 81 4b 8f ad 39 b4 21 41 26 03 b1 f5 19 28 cf b9 3a 52 82 da 91 85 69 5d 51 3f 72 8e a2 83 0e bb dd 75 10 f8 66 5e f7 51 38 e0 7e 5e 30 33 b3 85 ba Data Ascii: 3r/\r2wLNKck8ExH48D\|,!3'TmA"Vc#G0YEiaP6Udb-%\|4fZ\gZt`gQk84-]P{Q{V`XJ^?!sK9!A&(:Ri]Q?ruf^Q8~^03

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49842	163.70.128.23	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:32 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-25 08:16:33 UTC	1695	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-25 08:16:33 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-25 08:16:33 UTC	14657	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 Data Ascii: ?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"u
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d Data Ascii: rn function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.num
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 Data Ascii: "),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(type
2024-10-25 08:16:33 UTC	1726	IN	Data Raw: 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e Data Ascii: a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function
2024-10-25 08:16:33 UTC	14658	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e Data Ascii: b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 Data Ascii: =="object"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49849	157.240.247.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:33 UTC	840	OUT	GET /tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190869&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=121, rtx=0, c=10, mss=1380, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 25 Oct 2024 08:16:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49848	157.240.247.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:33 UTC	950	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190869&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	1000	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7429624236865985098", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7429624236865985098"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-25 08:16:33 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-25 08:16:33 UTC	1754	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-25 08:16:33 UTC	4	IN	Data Raw: 34 33 0d 0a Data Ascii: 43
2024-10-25 08:16:33 UTC	74	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49843	163.70.128.23	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:33 UTC	1197	OUT	GET /signals/config/671587811394625?v=2.9.174&r=stable&domain=www.retif.eu&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-25 08:16:33 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-25 08:16:33 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-25 08:16:33 UTC	1491	IN	Data Raw: 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 62 26 26 28 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 62 3a 61 Data Ascii: ion g(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function h(a,b){if(!a)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return b&&(typeof b==="object"\|\|typeof b==="function")?b:a
2024-10-25 08:16:33 UTC	14893	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 63 2e 76 61 6c 75 65 73 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 61 2c 62 29 7b 61 3d 67 28 61 2c 62 29 3b 76 61 72 20 64 3d 22 22 3b 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6a 28 61 29 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 2e 6c 6f 63 61 6c 65 43 6f 6d 70 61 72 65 28 62 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 71 75 65 72 79 29 7d 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 70 72 65 66 69 78 2c 65 3d 61 2e 70 61 72 61 6d 43 6f 6e 66 69 67 2e 65 62 70 5f 70 61 74 68 3b 61 3d 61 2e 70 61 72 61 6d 56 61 6c 75 65 Data Ascii: );return Array.from(c.values())}function h(a,b){a=g(a,b);var d="";b=[].concat(j(a)).sort(function(a,b){return a.paramConfig.query.localeCompare(b.paramConfig.query)});b.forEach(function(a){var b=a.paramConfig.prefix,e=a.paramConfig.ebp_path;a=a.paramValue
2024-10-25 08:16:33 UTC	1500	IN	Data Raw: 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 Data Ascii: on(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded
2024-10-25 08:16:33 UTC	14884	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 6f 28 61 2e 69 64 29 3f 7b 7d 3a 7b 69 61 62 3a 31 7d 7d 29 3b 67 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 21 6f 28 62 29 29 72 65 74 75 72 6e 3b 62 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 2b 22 5f 22 2b 44 61 74 65 2e 6e 6f 77 28 29 2b 22 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 62 3d 6c 28 62 29 3b 76 61 72 20 64 3d 63 2e 67 65 74 28 22 65 69 64 22 29 3b 69 66 28 64 21 3d 6e 75 6c 6c 26 26 64 21 3d 3d 22 22 7c 7c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 63 2e 61 70 70 65 6e 64 28 22 61 70 63 6d 5f 65 69 64 22 2c 22 31 22 29 3b 64 3d 22 70 63 6d 5f 70 6c 75 67 69 6e 2d 73 65 74 5f 22 2b 62 3b 63 2e 61 70 70 65 6e 64 28 22 65 69 64 Data Ascii: function(a,b){return!o(a.id)?{}:{iab:1}});g.listen(function(b,c){if(!o(b))return;b=a.location.origin+"_"+Date.now()+"_"+Math.random();b=l(b);var d=c.get("eid");if(d!=null&&d!==""\|\|b==null)return;c.append("apcm_eid","1");d="pcm_plugin-set_"+b;c.append("eid
2024-10-25 08:16:33 UTC	1500	IN	Data Raw: 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 29 7b 66 3d 21 30 2c 67 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 65 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 26 26 68 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 66 29 74 68 72 6f 77 20 67 7d 7d 75 2e 73 65 74 28 71 2c 53 74 72 69 6e 67 28 62 29 29 3b 78 28 64 2c 75 2c 73 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 65 73 73 61 67 65 3d 22 5b 43 6c 69 65 6e 74 48 69 6e 74 20 45 72 72 6f 72 5d 22 2b 61 2e 6d 65 73 73 61 67 65 2c 6a 28 61 29 7d 29 3b 68 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 3d 64 2e 67 65 74 50 69 78 65 6c 28 62 29 3b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 62 3d 64 2e 70 6c 75 67 69 Data Ascii: version)}catch(a){f=!0,g=a}finally{try{!e&&h["return"]&&h["return"]()}finally{if(f)throw g}}u.set(q,String(b));x(d,u,s)})["catch"](function(a){a.message="[ClientHint Error]"+a.message,j(a)});h.listen(function(b){b=d.getPixel(b);if(b==null)return;b=d.plugi
2024-10-25 08:16:33 UTC	14884	IN	Data Raw: 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 Data Ascii: led correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbe
2024-10-25 08:16:33 UTC	1500	IN	Data Raw: 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 64 69 73 61 62 6c 65 52 65 73 74 72 69 63 74 65 64 44 61 74 61 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 64 65 6e 74 69 74 79 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 49 6e 66 65 72 72 65 64 45 76 65 6e 74 73 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 61 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 2c 20 7b 22 73 65 6c 65 63 74 65 64 4d 61 74 63 68 4b 65 79 73 22 3a 5b 22 65 6d 22 2c 22 66 6e 22 2c 22 6c 6e 22 2c 22 70 Data Ascii: ctor":null,"disableRestrictedData":false});fbq.loadPlugin("inferredevents");fbq.loadPlugin("identity");instance.optIn("671587811394625", "InferredEvents", true);config.set("671587811394625", "automaticMatching", {"selectedMatchKeys":["em","fn","ln","p
2024-10-25 08:16:33 UTC	1804	IN	Data Raw: 75 67 69 6e 28 22 75 6e 77 61 6e 74 65 64 64 61 74 61 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 55 6e 77 61 6e 74 65 64 44 61 74 61 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 2e 73 65 74 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 49 41 42 50 43 4d 41 45 42 72 69 64 67 65 22 2c 20 7b 22 65 6e 61 62 6c 65 41 75 74 6f 45 76 65 6e 74 49 64 22 3a 74 72 75 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 69 61 62 70 63 6d 61 65 62 72 69 64 67 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 36 37 31 35 38 37 38 31 31 33 39 34 36 32 35 22 2c 20 22 49 41 42 50 43 4d 41 45 42 72 69 64 67 65 22 2c 20 74 72 75 65 29 3b 0a 63 6f 6e 66 69 67 Data Ascii: ugin("unwanteddata");instance.optIn("671587811394625", "UnwantedData", true);config.set("671587811394625", "IABPCMAEBridge", {"enableAutoEventId":true});fbq.loadPlugin("iabpcmaebridge");instance.optIn("671587811394625", "IABPCMAEBridge", true);config

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49847	157.240.247.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:33 UTC	965	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190871&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&eid=780258551.page_view&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	795	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7429624236734560730", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7429624236734560730"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-25 08:16:33 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-25 08:16:33 UTC	1674	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c
2024-10-25 08:16:33 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49846	157.240.247.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:33 UTC	873	OUT	GET /tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190871&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&eid=780258551.page_view&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:33 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=116, rtx=0, c=10, mss=1380, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 25 Oct 2024 08:16:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49862	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	952	OUT	GET /media/wysiwyg/perso-push-services.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:34 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41406 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "NEAP25FqYTZ/Omxnt72sBJid5EmVI5CnqrvuGJJKXuY" Expires: Fri, 24 Oct 2025 12:13:42 GMT Fastly-Io-Info: ifsz=195883 idim=694x740 ifmt=jpeg ofsz=41406 odim=694x740 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240197 Fastly-Stats: io=1 Traceresponse: 00-1801627d7c11d96f4d9cd48e6cfa9491-5045361ac7b0148c-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72172 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960066-PAR, cache-dfw-ktki8620045-DFW X-Cache: HIT, MISS X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 95 31 c8 ba 9c d7 13 8e 58 1c 2c b5 a4 97 4c be 87 d0 6c 75 9b 5b ea 8e 9d 38 ce 33 4b 38 92 5b af 2c 36 74 a7 b2 3c 67 66 29 f1 5d d7 a9 f7 29 63 e7 27 fe 87 aa bd ab dd 5a d7 a9 f7 69 c9 af a1 b4 64 dc 6e cf 1b 11 42 14 f1 3d 9d 3b db 2f 99 f3 f7 3e f6 e6 e2 af df ab 27 f5 65 8c 34 53 54 d1 97 a1 c1 27 79 33 f4 0c 2c 3b 2c 34 3f 89 86 6f 73 af d9 8a 3e 91 af e9 f4 f1 b2 ab 97 f2 38 b2 3d cf d9 d5 af 7d ac ca b3 5b 53 83 79 2d a4 5f 43 c8 c7 55 dd a7 51 f9 33 ee e0 03 03 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1f 26 01 f8 43 ed 5a ef d2 bb 75 ac 4b 39 e0 a8 a9 ff 00 91 60 e5 f6 22 9f 16 Data Ascii: 1X,Llu[83K8[,6t<gf)])c'ZidnB=;/>'e4ST'y3,;,4?os>8=}[Sy-_CUQ3&CZuK9`"
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: a5 3e ea d6 85 3f bb 4e 2b e8 85 47 a2 3e 63 6b 4b bb 4a 3c db 66 c0 00 c8 f1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c a0 00 23 23 20 12 08 c8 c8 04 82 32 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e7 9f 6a b7 3d c7 60 f5 a7 9c 39 53 84 57 ce 68 fa 19 f1 bf b7 1b be e7 b1 8e 96 77 ad 73 08 fc 96 5f e8 5a 1e 25 d4 89 68 cf c6 3e 27 dc 7b 39 4f bb d1 f4 f8 e3 f8 31 7f e6 f5 bf 53 e1 c9 67 0b c5 9f a0 2c 29 f7 54 68 d3 5c a1 4e 31 ff 00 2a c1 d1 53 c2 cf 5b 61 47 fd d3 97 2b 2f 73 7e ac b8 69 b3 9e d9 b1 77 2d a3 1f 99 ab cc ce 9a b4 4f a3 da 33 de af 65 fb 62 97 a9 f4 dd 1a 1d de 9d 6b 1f ec 67 fc cf 3f a9 ad da 3a 98 b0 84 7e f5 58 fe 09 b3 ab 42 1d dd Data Ascii: >?N+G>ckKJ<f## 2Hj=`9SWhws_Z%h>'{9O1Sg,)Th\N1*S[aG+/s~iw-O3ebkg?:~XB
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: f8 b0 6b 1f 0b e8 75 68 67 28 f6 3a 3e b9 7d a7 35 c1 2e 3a 4f 9d 39 6e be 5e 07 8d b7 de 47 72 0b 62 92 93 4f 26 69 43 0f 4a bc 25 0a 90 52 8b d5 33 ec 76 ba e5 95 fd b3 95 29 f0 d4 4b d6 a7 2d a4 9f ea bc ce 47 13 ad 5e 29 72 ce c7 ca 6e ea b8 25 c2 da 79 e6 b9 a3 b9 d9 fe d1 dd da d5 4e e3 35 e9 ad b7 f6 d7 c1 f5 f9 9b 42 aa dd bc 91 f3 b8 dd 89 28 d6 92 c2 cb 79 70 8b d7 a2 67 b8 d4 34 3d 36 f1 66 70 70 a8 bd fa 78 4f e7 d1 99 e9 58 5a 53 b3 a5 67 46 2d 28 4b 29 bd db cf 36 df 99 34 6e ed af 94 aa da 55 e2 5d 60 f6 94 5f 9a 37 2d 7d 5e 39 4d 6f 13 58 a8 f8 95 ba 9e 3d 6a b8 b8 c7 f2 f5 65 34 a2 fc 12 e0 fd 4e 27 6b ab c6 d7 42 74 63 b7 7b 56 10 f9 2f 5b f4 3e 27 51 b9 d5 79 e8 7d 23 b7 57 4e 72 b2 a3 9e 4a 73 6b e3 84 bf 53 e7 10 8b 72 cf 8b 30 a8 fb Data Ascii: kuhg(:>}5.:O9n^GrbO&iCJ%R3v)K-G^)rn%yN5B(ypg4=6fppxOXZSgF-(K)64nU]`_7-}^9MoX=je4N'kBtc{V/[>'Qy}#WNrJskSr0
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 70 bf f5 29 ac 52 ef 34 fa cd 2c ca 09 4e 3f 18 bc 99 6e 13 57 96 b3 e8 f8 a0 fe 69 b5 f9 1b b2 8a 94 25 16 b2 9a c1 92 8e f4 6a 47 cd af 75 7f b9 a5 f7 5d 39 79 2f 96 45 28 c9 4a 11 69 e5 34 9f d4 ce 70 f4 47 c3 67 dd 36 dc a9 55 a9 09 67 ca 59 5f 83 3b 88 bc 25 bd 18 cb 9a b9 59 47 76 4e 3c 9d 80 00 b1 50 00 00 00 00 00 00 00 00 02 24 f1 16 fc 11 fc ed ed 65 cf a5 76 8f 56 af f7 ee 66 ff 00 13 fa 0d a8 d6 54 34 fb ca ad e1 42 84 e5 f4 8b 67 f3 7e ee a3 ab 73 5e a3 e7 29 b7 f8 9b 51 e2 ca 4f 81 f4 2e c3 d2 e1 b4 ba a9 8d e5 55 47 fc ab fd 4f 70 b0 79 5e c8 41 43 47 a7 2e b3 a9 37 f8 e3 f4 3d 42 c9 67 a9 f4 d8 38 ee e1 a8 af ed bf be 66 44 8f 6f d9 68 62 85 cc fc 66 97 f9 56 7f 53 c4 23 e8 5d 9b 87 0e 99 19 7d fa 92 7f 4d bf 43 4a 5e 33 1d a7 2b 61 5a e7 Data Ascii: p)R4,N?nWi%jGu]9y/E(Ji4pGg6UgY_;%YGvN<P$evVfT4Bg~s^)QO.UGOpy^ACG.7=Bg8fDohbfVS#]}MCJ^3+aZ
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: b3 f8 3e 4c bb 96 3e 87 d6 a8 52 a7 56 3c 15 21 19 45 f3 8c 96 56 3e 67 3a bf 64 34 d9 dc aa d4 ea 54 85 35 2c ca 92 f5 93 c7 44 de e9 19 4e 8b be 47 b5 81 db b4 23 16 ab c1 c6 49 64 d6 69 9d 8a 34 fb 9b 4b 4a 1d 61 46 29 fc 52 47 95 ed 95 5e 0b 2b 5a 5f d6 56 72 f9 41 7f a9 ec fd a9 65 f8 e4 f9 df 6d aa a7 7d 6b 49 72 85 07 2f f3 cb 1f f4 9a 55 ee d3 7e c7 93 b2 20 eb ed 4a 6e 5c e5 37 ec 78 c6 f0 8d 6a 92 cb 32 4e 58 46 b2 dd 9c 68 fb ba cf 48 a2 fe 3f 03 eb 9f 66 96 f8 a3 7b 5d ae 6e 31 4f f1 3e 46 b9 33 ef 9d 84 b6 ee 74 2a 72 c6 1d 49 39 12 78 bb 71 a8 60 52 e3 29 a5 f7 3d 98 00 83 e3 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 4a 93 8d 38 ca 52 78 49 65 b2 e6 86 a4 f1 63 70 f3 ee 32 24 ed 16 f9 22 d1 57 92 5c Data Ascii: >L>RV<!EV>g:d4T5,DNG#Idi4KJaF)RG^+Z_VrAem}kIr/U~ Jn\7xj2NXFhH?f{]n1O>F3t*rI9xq`R)=@J8RxIecp2$"W\
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 67 91 89 d8 54 6a bb d0 97 67 2e 5a c7 fe 0f bf 41 75 3e 47 da ca ea a6 b9 72 93 da 11 84 17 ca 29 bf c5 98 e8 f6 bf 5b a5 06 9d c4 67 fd e8 45 b5 f4 c1 e6 ee ae aa 57 ab 3a 95 26 e5 39 c9 ca 52 f1 6c ad 4a 8a 71 49 5f 53 5d 93 b2 6b e0 b1 15 2a d5 94 1a dc dd 8e eb 7c 5f 99 8a a4 f2 44 30 61 72 4d 99 63 8c 18 9e ec 62 e5 3b 99 a2 b2 d2 f1 67 e9 8d 0a 87 71 a4 58 d3 c7 2a 31 7f 5d cf cd d6 34 5d 7b cb 7a 4b 9c aa 24 7e a3 a5 05 4e 94 20 b9 46 29 2f 91 07 cf fe 25 96 ea c3 53 e7 bd 27 f4 32 00 01 f2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e7 ea 9f f8 1a ff 00 dd 3a 07 37 55 ff 00 c0 d6 f8 2f cc a5 4f d3 9f 46 5e 1e 38 f5 47 87 a9 28 b8 f0 ac 2d fa 04 b3 8f 04 8a c6 39 cb 7c 8c 99 5c b1 b2 3c 73 d4 27 1b a7 2e 49 Data Ascii: gTjg.ZAu>Gr)[gEW:&9RlJqI_S]k\|_D0arMcb;gqX1]4]{zK$~N F)/%S'2:7U/OF^8G(-9\|\<s'.I
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: c2 8e 4a a8 47 3c 8c d0 87 d4 92 1d 8a d4 fd dc b3 b8 4b 14 e3 9f 04 64 aa 92 a5 8f 31 bb 4b 3c 89 b6 7e 84 70 f5 23 7c 2f 81 0e 7c 29 2f 99 2d e4 c6 d2 6c 04 83 91 68 a6 f7 0a 26 44 b1 12 09 b9 49 61 2c 14 8f 37 9e 88 99 bd 8a c1 ed f1 1c 49 e0 1b cc b1 e4 5b 2c c7 3d 99 6d c8 04 e4 b2 f6 8c 7b ec 64 58 5f 12 43 2e df 43 1b 7b 92 d9 0f 08 32 11 49 74 30 4b 6e a6 69 72 30 48 86 58 f3 5a a3 6a e9 af ec 23 f3 8e af 3e 2d 56 fe 5c b3 75 55 fd 64 cf d1 1a c3 c5 f4 b3 fd 5c 4f ce 5a a3 ce a5 7d ff 00 cc 54 ff 00 dc ce cc 07 ea 54 e8 8f 57 67 ac df 44 6b 41 b6 74 2c e2 e5 50 e6 c3 63 ab 64 a5 eb 34 9e 71 b6 c7 a7 27 93 3e 97 67 52 df c6 53 5c b3 39 fa 94 d4 af aa b4 f6 58 5f 34 8f a7 76 12 dd c2 ca e6 bb e7 3a 8a 2b fc 2b 3f a9 f2 59 cd ce bc e4 f9 b9 36 7d d7 Data Ascii: JG<Kd1K<~p#\|/\|)/-lh&DIa,7I[,=m{dX_C.C{2It0Knir0HXZj#>-V\uUd\OZ}TTWgDkAt,Pcd4q'>gRS\9X_4v:++?Y6}
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 55 a0 ba 26 ff 00 c1 fa 0e 55 a9 52 59 ab 52 30 49 73 93 51 5f 89 cb af da 3d 12 8e 78 ef e9 37 e1 06 e7 ff 00 b7 27 c1 25 52 52 7b c9 bc f8 ef 96 67 82 69 6f cd f3 21 d4 7c 8e b8 7e 1d a4 92 75 31 12 7e 51 49 7f 93 ec 95 3b 67 a2 47 95 4a b3 fe ec 1f eb 83 42 af 6e 34 e5 95 0b 7b 89 79 b5 14 bf 36 7c b8 86 f7 2b da 48 de 3b 0f 03 1e 13 7d 65 fe 0f a2 4b b7 14 9b f5 6c 25 8f 17 53 fd 0b 47 b7 d5 a0 d3 8d 84 56 fd 6a 37 fa 1f 3a 46 55 e6 55 ce 5c cd e1 b1 f6 7f fd 0b ff 00 f2 7f e4 fa 33 fb 47 b9 ff 00 f4 ea 6f cf bc 7f c8 2f b4 6a 89 3c e9 91 6d ff 00 c5 6b fe 96 7c dd ee 8a 32 bb d2 e6 75 43 62 6c c9 2c f0 cb ff 00 29 7f 93 a7 ab ea b5 f5 6b d9 dd 56 8c 62 da 4a 31 8f 28 a5 c9 23 90 f7 2f 9f c8 ac b9 95 be 67 d0 61 a9 42 9c 63 08 45 28 c5 24 97 24 59 22 Data Ascii: U&URYR0IsQ_=x7'%RR{gio!\|~u1~QI;gGJBn4{y6\|+H;}eKl%SGVj7:FUU\3Go/j<mk\|2uCbl,)kVbJ1(#/gaBcE($$Y"
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 78 49 65 bd 8e 56 a5 42 e2 f6 d2 85 4b 1a ef 8d 38 d6 a2 a2 d7 0d 64 d6 d8 7c b3 e1 9d 9f 26 01 ab 72 ae 75 4b 0b 8e ee 9c 15 1a 8a 9b b6 a7 53 67 5d 42 6a 6d d4 7e ec 6a 63 11 5e 1b b3 62 a5 ed f5 c4 d2 a5 61 56 12 df 8e 77 7f b3 8c 3f b3 1e 0e 27 3d fc 36 3c b6 99 ab 56 b8 85 be 9c ee 23 42 93 6e 0a e2 2f 13 e1 8b e1 56 f1 7e ec 9b f5 54 de eb d9 e7 83 bb a9 5d 5a 69 56 f4 a1 2b d5 61 1a 30 e2 92 ee 95 58 d3 a2 96 33 52 32 dd 2c ed 1d f8 9c b9 64 5b 3b 12 6f d2 d4 28 c6 d2 ea bd df 0d a2 b5 6d 5c f7 93 4e 14 f0 b8 94 94 ba c6 49 e6 2f 9f 43 91 0b 59 f6 92 3d f6 a1 46 ad 2d 21 ac db d9 49 ba 75 2e bc 2b 57 c6 f1 87 58 43 e6 cd 4d 33 48 b9 d4 ea 53 d4 35 7a 75 55 ba ad df da d8 d6 4b 8e 75 1a da e2 e6 2b 65 24 97 ec e9 72 82 f3 3d 26 af ac 50 d3 68 d2 a9 Data Ascii: xIeVBK8d\|&ruKSg]Bjm~jc^baVw?'=6<V#Bn/V~T]ZiV+a0X3R2,d[;o(m\NI/CY=F-!Iu.+WXCM3HS5zuUKu+e$r=&Ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49855	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1221	OUT	GET /media/wysiwyg/home/Etiquetage.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:34 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 58030 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "hjz6GEvIpEkn23nKXCN/HuUz02g9v39pjE/O/SsyMYQ" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=109218 idim=400x400 ifmt=png ofsz=58030 odim=400x400 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278073112101016641d02926221-190a55b873657221-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72195 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960093-PAR, cache-dfw-kdal2120056-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 a6 e2 00 00 57 45 42 50 56 50 38 4c 99 e2 00 00 2f 8f c1 63 10 4d d0 b6 6d bb 6e db 70 ad 03 10 62 36 f2 ff 1f 0c 88 a2 9c f4 f2 18 d1 ff 09 e0 ff f4 aa 1f 57 35 7f 5a 95 21 73 e9 1f b5 87 6a 4c 0f f5 0a 04 18 b7 68 ed 91 31 93 0c 2b aa 84 f5 7c 47 6b 9f 15 7b b5 a8 24 41 d6 b9 e3 b3 aa 3e 49 00 22 c8 ed d6 36 ed 33 27 51 24 60 46 62 4c c4 b3 b9 d0 da bd 7a 37 14 43 00 92 9d b6 85 07 44 07 3a 4c 61 67 9b 90 a8 9b 76 a7 6e 28 12 89 52 67 17 75 bc e1 19 87 bc 3f 3d 59 c3 23 6e d1 d4 fc 4d 13 e4 05 9d 02 3c 94 f3 b5 f8 ce da 35 a8 df 6d b4 d6 94 c0 55 55 89 5e 29 ce f3 84 3b 7b b6 cd b8 58 68 69 65 a9 e2 6c 8f e1 34 0a a0 57 55 45 37 70 3e 97 6c 72 a9 57 95 4b 52 55 f5 9c 46 25 d7 50 2f 36 55 95 e7 5c 10 e8 a8 de cb 73 83 21 57 ae 53 fb 6b 97 aa Data Ascii: RIFFWEBPVP8L/cMmnpb6W5Z!sjLh1+\|Gk{$A>I"63'Q$`FbLz7CD:Lagvn(Rgu?=Y#nM<5mUU^);{Xhiel4WUE7p>lrWKRUF%P/6U\s!WSk
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 31 09 92 c0 0f 48 e3 18 87 6d db 08 0e 95 c1 8b 5b bc 6f c6 6d db 06 a2 3a f9 f5 96 be df 99 02 20 00 04 db e8 8a ff b6 f3 f6 c6 f0 b6 6d db b6 6d db b3 6d db de 6a b7 b3 6d e4 57 db 46 64 41 b6 55 b5 d2 da a2 84 a0 78 87 98 f0 12 d1 f9 83 1d d9 b6 69 6b 1e 9f 73 ed fb 65 eb 21 ef 97 8d 6d eb 1a db fb f9 a4 e0 c0 6d db 48 a2 32 c7 bb 17 fb ed 99 dd 38 70 db 36 8c 64 77 f7 ef 1a 7b f6 2e b1 9b c8 b6 dd 66 95 fb 58 8b 81 3a b1 51 2f 08 66 e0 32 67 03 31 19 43 c8 d9 25 d1 b4 4d aa a7 f7 03 9d 5b db 13 49 ce a3 ea de de 61 66 e6 c9 cc 8e 98 99 29 de d0 76 c8 8c 39 fe 82 cd d7 8e 28 63 e6 88 99 d9 83 c5 a5 52 e9 3b de 56 0d 9f 72 0a b1 6d 1b 41 12 95 bf eb bf e0 ff 1f 43 6c db 48 92 44 d5 7d f9 a7 bb bb 37 96 02 08 00 01 38 f7 b6 6d fb b3 fd 53 52 b4 bd e4 ad Data Ascii: 1Hm[om: mmmjmWFdAUxikse!mmH28p6dw{.fX:Q/f2g1C%M[Iaf)v9(cR;VrmAClHD}78mSR
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 5c 86 bb 60 e1 c2 71 bc f9 7a 36 f9 b8 2f 0c 0f f7 70 5d 5b 39 01 fa a2 d7 8b a9 b7 c4 b9 78 18 e1 b0 7a 61 1d de c2 b1 57 02 6e c7 d5 f0 02 84 4a 7c 85 99 af e3 64 11 dc 8b 8e f0 1a 84 89 f8 fa 45 9c c2 82 b3 71 3d 9c c9 66 02 d0 a2 60 20 04 34 90 04 80 00 08 c0 42 85 4d 78 11 59 af 00 5c 82 0b a0 01 f9 07 9f 2d 53 b5 15 b6 d7 9e 71 ad ea dd f7 f0 b7 1f 5f fe c2 70 cb 3c 01 b7 4f 7c 1a 01 b0 50 af 28 c2 ab 48 59 3e 8f 13 82 6b 9a a7 b4 59 be 31 fe df 44 16 14 71 48 ab 30 fe be 81 87 64 0a a3 c5 86 6a 86 e1 6c 50 5d 28 cd ba 71 51 e3 54 0a 05 49 11 6f 95 0a fc c5 0d 08 59 3c 88 c4 b5 cd 36 2b cc b7 f2 ec c9 42 f4 c0 aa 5a 44 83 68 7b 6f 98 d2 6e c5 86 29 5a 28 a0 06 99 78 6b 5a 3b 45 d9 18 72 2c da 09 50 53 82 06 0a 18 2c 32 6f 81 41 11 86 9b d1 76 e9 a0 Data Ascii: \`qz6/p][9xzaWnJ\|dEq=f` 4BMxY\-Sq_p<O\|P(HY>kY1DqH0djlP](qQTIoY<6+BZDh{on)Z(xkZ;Er,PS,2oAv
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 68 91 f6 7d 4d 04 c4 5b 6e 1f 6e dd dd 60 73 1e 73 47 03 06 f2 ff 74 88 22 6c 95 6f 22 d8 fc e7 89 c8 01 23 99 d8 fd b3 cf 7e 9d f3 81 0b a2 4c 6c b1 75 6e ce bd b2 7a af d5 0f fd f6 07 22 0c 00 fc fd f7 c6 a4 37 fe 9a de 64 24 36 a2 67 e2 f4 b9 af ed 2f c0 47 93 77 51 d4 81 5b ee 45 aa cf 29 26 a7 82 85 82 ac e3 1e 29 09 c3 8f 00 81 0c 8e 44 1a 61 bb 4c 4b e3 a1 ce bf f8 fa cb bc 75 3f 00 f0 23 73 fe a4 75 75 23 99 60 58 22 1d 0c 8d 25 c3 d8 2d a4 f1 d6 91 cc 18 f7 fb 86 a9 58 1f 95 ac 7e 47 cc aa 89 28 48 d7 70 c3 78 d6 31 b7 e5 c1 80 e1 81 fc cf 37 44 17 09 9a 51 0f 0d 12 c4 96 48 10 ee f3 ee db ef df ff fa fd e5 c2 20 f8 00 ea 9d bb 9a d9 64 e3 ed 7a e7 f8 f9 03 e8 fc 06 9a f7 bc f4 d7 8b c7 e7 f1 99 4c 9b 06 01 53 66 3d b7 0d e0 13 fc 49 1f e8 81 00 Data Ascii: h}M[nn`ssGt"lo"#~Llunz"7d$6g/GwQ[E)&)DaLKu?#suu#`X"%-X~G(Hpx17DQH dzLSf=I
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 7d 28 0e 43 0a dc a9 44 40 39 78 a8 cd 76 3f 00 30 d5 40 e4 a9 e9 50 77 22 cd 97 f4 98 ab a5 c8 1b b2 61 49 e4 82 8e 22 bc 34 d2 66 93 e9 ee 7b cd 79 0d 22 7f ed c7 3d f2 6d d2 71 5e 9f 1d 28 01 00 45 c7 80 ff 25 71 e9 6e d0 a2 f6 4b bb ec 9d dd d4 7e 99 bf 29 8e 07 56 2c b9 85 4f 36 a7 ca 1b 00 d6 dd 9b dc af 99 20 37 b8 48 e4 70 4e 08 4a f2 19 72 9d 7d 32 de 28 a0 53 7c 8e dd d5 12 a7 4b 56 bf ec 5f a7 9f f5 4c 62 ed 4b ef 79 3e f5 5a e3 06 85 0c f1 67 ad 5b 2c a6 b3 a8 5f be 2b 7a ae af 9d bf fd ab 5e be 8f 93 fb e8 f6 4f a1 b4 87 24 b4 1f 33 7b f9 cf 5f fe bf 0c 39 20 30 e9 60 89 03 16 00 40 fe 99 12 30 2c 12 d1 a1 99 89 7f ce 9c 34 95 41 a4 52 65 f4 11 56 b5 d6 8c ea 42 9d 1c aa f4 ad f5 31 f9 92 ee d9 e2 22 26 36 95 2f 35 24 c6 6c 35 00 30 45 48 1a Data Ascii: }(CD@9xv?0@Pw"aI"4f{y"=mq^(E%qnK~)V,O6 7HpNJr}2(S\|KV_LbKy>Zg[,_+z^O$3{_9 0`@0,4AReVB1"&6/5$l50EH
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: a7 dd ed 7b d3 4d df e1 fc e4 df 17 bf a7 aa 8d 06 44 b1 37 9b 13 0e 2f e7 a4 ec 63 3d e3 22 96 46 d8 c4 ca b2 51 b2 45 60 41 c5 b6 4a 45 61 23 39 f0 e5 7a 6e db e4 2f f9 27 fa 6f ec 86 5a d5 f8 f3 2e af ab 53 83 cd b6 da 9e e9 79 fb fe 9e cd c1 32 6a bf 91 f7 cc 3d fa 2c 1f 77 be 9d f8 56 f6 e1 62 f4 06 4e f4 ea 84 89 52 8b 89 a1 a5 45 97 ec c3 20 be 65 2d f7 03 cc 86 98 5c 47 26 5a b9 c6 44 59 4d 8f 56 92 35 f4 c5 22 20 b0 f7 c5 4f 60 6b 54 52 c7 5d 38 49 99 9b 69 0c d3 8e 45 8d 18 e3 b4 7f db 2d c9 f7 9e 1c e3 3c c9 df d8 e5 70 ca 8c 70 49 4b a7 5b 93 65 01 69 59 90 f2 00 02 82 73 18 16 33 28 c5 cc bc c1 24 c3 40 ce 3c 11 0c 90 4f 6f 4f 44 dc b2 8d d3 5d ed d2 af 87 c7 cd 00 2d 7f c5 f3 c4 9e b7 95 db b8 02 12 0c 0d b4 dc 06 95 7b 93 55 63 de fc ac 25 Data Ascii: {MD7/c="FQE`AJEa#9zn/'oZ.Sy2j=,wVbNRE e-\G&ZDYMV5" O`kTR]8IiE-<ppIK[eiYs3($@<OoOD]-{Uc%
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 9e 4f bd f0 f3 47 ed 2b c5 61 bd d3 49 6d 70 4f a2 77 db d7 08 ed a7 2c 26 4e 42 de ae 3d e7 37 36 3d 8b 07 3a 75 98 99 99 7e ac 07 9b f6 7a 53 ff 45 fe c0 df a8 94 af e5 07 3e d0 d2 16 bf da 67 df 03 bb f4 fd d7 6e b4 72 a1 64 52 81 44 ca 4a 52 55 9c 59 62 b1 39 1e cd 29 7d d2 85 4d 24 33 7c 23 5c d7 2f 34 a1 99 d9 c2 e7 15 0f bf fe b6 47 ee df 28 99 01 b9 9f 35 27 f4 c0 79 a0 95 9d fd e2 6a 06 72 af 5f dd a1 e8 36 3f fc 26 8f a2 51 b4 02 87 c2 21 e8 56 4b 09 5e 26 5a 43 4a 4e 38 30 73 4e cb b3 5c 27 34 eb f0 8c 53 c2 26 21 df f0 ef be da c1 4d 7f 59 15 d7 bd 25 b6 4b 12 df 95 0a c5 5a f0 70 4b 0c bd 96 df 8b 35 de 0a bb 7d 58 df c6 33 6c 57 96 0c 6a 08 04 e0 93 07 21 6d 11 c0 89 1d 9e 84 9c 00 12 89 44 20 88 8b 0d 25 1f dd 5f 63 c6 d1 c6 53 ba bd 2e ed Data Ascii: OG+aImpOw,&NB=76=:u~zSE>gnrdRDJRUYb9)}M$3\|#\/4G(5'yjr_6?&Q!VK^&ZCJN80sN\'4S&!MY%KZpK5}X3lWj!mD %_cS.
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: e0 0e 4b d2 22 6c 42 23 8e d9 e0 27 85 26 0d 5c df 82 3e 45 4b 20 25 08 90 b2 86 96 13 47 28 2a ec 18 10 6c ce 04 77 7a 98 87 ee 6e eb 26 77 99 d5 c3 ca 2e 3a 19 1c 6a d5 e9 06 2d 74 35 fb 45 b4 1a 05 cb 8d d3 49 11 56 5e d3 23 fe 0e c7 59 ba 0b 2c 0f 85 21 4d d6 9d 1f 7e bd 7c cc da e6 42 4e 20 8c 19 c6 89 8c 04 01 a4 a3 b3 3b ab ff 1c d3 57 ed da db 1a 1f 31 92 ff ab 55 03 7b 26 07 95 48 bd 92 7c 08 34 5e ee 8a d5 13 b0 61 65 6f 31 7b f0 41 28 17 82 ad 85 fa ac a8 e9 59 ee ca 76 b5 03 5b fe 00 53 ee d4 07 d9 fe d7 4b 08 ed ca 6f f5 a0 e2 62 7c ac b5 11 e5 98 85 16 bf d9 5f ef e3 83 56 fe f6 fc 0b a7 13 79 a3 fc 27 ed b4 25 32 8b c9 81 88 48 b8 86 b0 55 fe d9 e3 8f 7e 7d 7f 83 9a 6a 3f 24 cb 91 0f 59 22 e7 73 5c 30 b7 d7 fd d5 7e 99 97 5d e4 85 be d2 52 Data Ascii: K"lB#'&\>EK %G(*lwzn&w.:j-t5EIV^#Y,!M~\|BN ;W1U{&H\|4^aeo1{A(Yv[SKob\|_Vy'%2HU~}j?$Y"s\0~]R
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 48 26 87 87 10 10 70 4b 41 ce 89 01 00 96 10 86 49 4d fc e5 ea 75 39 73 7a f2 db fb d1 77 72 99 f9 79 1d 24 e4 78 7e 0f 33 e6 ce 5b 3e 73 35 07 1a 48 08 e3 50 88 16 00 0f 0c a2 c7 cd a0 5c e8 05 0e 01 23 6e 96 9d 6d c8 cf f2 97 23 0d 31 34 5f d8 53 17 22 6e 36 d9 b9 bd 35 92 51 6c 16 d4 34 ed c6 2d 05 e0 23 14 36 0c ad 65 e5 38 e3 0b c7 62 be 4a 0c 5b e0 8c c5 b3 96 1c 16 b4 99 bf 5b 1f 76 a4 21 6d 49 4c f4 ab 0a 5a b7 e0 04 27 09 08 64 c6 47 a6 9d 83 c5 81 a7 7c 4b 6f 69 98 91 f4 36 63 f6 fb 1d 2a f9 d7 a9 ff 9e 08 61 49 57 5a a3 8b 5e 87 fb 84 b9 72 58 77 7a cd 81 d4 c4 2a 83 68 75 66 bd 9d d5 ed f2 4d 75 93 c9 34 3a 4b 21 81 b7 3b 4d 5b 8a 9e d3 be e6 2b aa 33 4c 30 48 de 69 3f 0f c7 00 aa c2 f2 28 ba 00 55 4a ed 54 b6 40 e5 b2 61 28 3b 81 59 ce c6 16 Data Ascii: H&pKAIMu9szwry$x~3[>s5HP\#nm#14_S"n65Ql4-#6e8bJ[[v!mILZ'dG\|Koi6caIWZ^rXwzhufMu4:K!;M[+3L0Hi?(UJT@a(;Y
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: fe 61 6b fa 19 2f fc d7 fa 1a 98 0a f0 66 ee a6 1f 03 e0 f9 77 8c 9b 10 c4 e1 f8 e5 75 0e 6f 26 0e af 4c f1 14 30 90 03 d0 81 15 17 3d c5 31 bf 9f bc 9f fd cd 7f 31 91 c7 6f 4e 4f ae a8 bc ff 42 53 a2 f6 f3 1b a2 b0 4c 9e bc b7 7d 8f 19 f1 ac a7 bd d1 b8 1b 28 f1 71 6b 89 38 21 ed 32 c9 d7 6e 4e 45 82 d9 b3 50 65 1e 3b f8 db f1 bc 0f 6c 3f d4 eb 9a fe 6c 17 5d 3e 19 e2 cb ff 55 ac 3c 62 e0 bb f5 b9 bf aa c5 9c 11 35 b2 90 10 3e f0 c8 d2 b6 b6 ab 74 a1 85 9d b7 b1 d8 a5 8e 1f ab a5 a4 71 63 a4 38 1c 3f 51 ee ea cc 3d b8 db b1 9e 4b cb 10 02 83 03 82 37 73 e8 e9 a0 e8 48 e0 37 38 0a 68 91 68 b2 ba 98 85 ce 51 e7 74 36 9d eb d1 4c 9e 8c 69 8d 93 32 c7 dd 09 a2 ce 2c e6 d3 db b9 b4 dd 6e 26 6e 4e e4 ac 61 cf 3a 5d 2f c7 b3 7b a2 a8 26 81 3a 74 ea da 6b ba e8 Data Ascii: ak/fwuo&L0=11oNOBSL}(qk8!2nNEPe;l?l]>U<b5>tqc8?Q=K7sH78hhQt6Li2,n&nNa:]/{&:tk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49859	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1235	OUT	GET /media/wysiwyg/home/emballage-transport-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:34 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75684 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "F7w7pm++JYtpWbLCx+sm+a/XVdBBd2PO0VJN5i1yJH4" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=115084 idim=400x400 ifmt=png ofsz=75684 odim=400x400 ofmt=webp Fastly-Io-Served-By: img09-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278071f31f6c304d5567f29552e-762975288dc7155a-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72195 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960079-PAR, cache-dfw-kdfw8210058-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 9c 27 01 00 57 45 42 50 56 50 38 4c 8f 27 01 00 2f 8f c1 63 10 4d 50 72 1b 49 90 24 41 1e e1 65 99 e5 6e ff 7f 70 44 56 45 cd cc ee 39 a2 ff 13 c0 7f 7f c7 1f 27 fd 51 4a d0 1f 54 25 29 b5 fe 09 e5 42 1f fb fa d9 a8 d4 fd 90 7a 83 7c fd 68 2c b9 b9 d1 9a 75 c5 4f c6 20 52 f9 7a a5 a5 6b a9 ac dc cc 43 63 0c 67 4a 52 66 4a b5 e9 88 00 98 f3 c4 58 f4 61 a6 a4 f4 1d de 30 e7 77 63 8d e5 f5 4e a5 24 81 ed d4 8e ef c6 27 8f 60 bb 5b 72 6c 98 e7 d2 02 f3 38 35 f5 34 3f 1b 5b 36 00 dd 0d 54 37 ed 79 dd 1b 0e 39 15 b8 bb 67 37 74 77 63 cd 78 98 9f 8c a7 4a e5 dd 8e 97 66 a8 1b 35 65 47 6c 38 93 b7 32 33 e2 92 a6 da d0 0d f8 3a 10 7b 2a 53 e1 8c e8 49 c9 60 00 e9 ba 76 f1 14 e3 21 2a d5 40 75 db 5e 6c ad d7 b5 f0 c9 23 11 a9 78 bf 55 05 0d a0 44 d2 2d Data Ascii: RIFF'WEBPVP8L'/cMPrI$AenpDVE9'QJT%)Bz\|h,uO RzkCcgJRfJXa0wcN$'`[rl854?[6T7y9g7twcxJf5eGl823:{SI`v!@u^l#xUD-
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: bb 46 3a 6b 40 64 93 e0 0f 16 80 37 10 01 12 91 84 e1 00 00 9a 41 04 ce e6 8f d9 43 24 80 33 84 c9 6f 07 78 e0 0a c0 0c 66 20 00 20 70 10 b8 57 68 d8 41 b2 17 06 00 90 03 01 01 18 ae 33 9e a3 40 a5 03 03 69 5a e0 00 00 01 08 83 80 49 7c e1 85 17 7e 02 a7 22 b0 ce f3 80 0e a2 a2 2a d2 c1 e9 1e 02 12 31 00 91 c5 62 ed b0 83 85 9d 1b a1 da c1 ea 1e 36 6c b0 be 33 bc 6c 00 c6 4a 01 00 00 04 02 16 0f 04 82 12 14 14 00 02 ac eb 1c fd 82 2f 80 ff 6a 75 48 72 db 48 90 a4 50 d8 fe ff a3 33 2a 2b b3 66 66 f7 1a 11 13 50 7f 3b eb 97 58 2d 3e ad f9 33 b6 2d 79 a8 fb 60 4b 92 35 93 0f 58 b3 27 03 d7 f4 d2 32 c0 1d cb de 92 ed 24 b9 11 eb a5 0d d4 dd 0d 4f 32 98 f1 18 5b 1e 41 19 fb 94 6c 5b 96 1f 49 02 75 55 92 37 21 a9 24 64 3e e4 67 48 20 64 ac 9b d8 b2 4d 92 00 79 Data Ascii: F:k@d7AC$3oxf pWhA3@iZI\|~"1b6l3lJ/juHrHP3+ffP;X->3-y`K5X'2$O2[Al[IuU7!$d>gH dMy
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 89 d6 2a 50 2f 81 d1 33 39 66 39 6d a4 7b ca 7c d0 04 9a 44 f3 47 53 08 77 54 a2 c1 55 e9 1e 37 10 77 ad 0e f7 94 79 d0 95 68 ad 36 5a 63 ca 34 d2 1c 55 4e b9 61 1e 34 99 6e 98 8f db f5 02 90 81 be 2e aa 9c bb 56 8c 99 4e 1b 9d e6 1d 33 dc 3a 6e a3 1f 77 ae 37 b8 69 14 ca 0d a3 dd c4 0c 34 55 e6 5c f3 41 d3 61 a2 e1 b8 8d 39 02 35 22 d1 b4 53 46 b9 b8 81 a6 cd 44 c3 76 db f5 2d 49 92 25 49 92 6d 11 b1 7a f6 ed a9 ff ff 03 6f 33 ef 7d cb 70 21 df 92 24 59 92 24 d9 16 11 ab 47 df bb ff ff 73 2e df d4 73 cd 74 a1 98 00 bd 17 00 ac 96 e4 29 9f dc fb 5e 55 75 d7 d8 ba 6f 8a fc ff 31 87 d0 21 5a 77 97 9f f4 cc 74 55 bd 77 ef f7 7d b8 f4 5f f0 05 d8 c3 59 df 7d c1 fa ee a4 9d cc 39 3f dc f5 e1 3c fc 25 d8 c3 69 fc 26 6b 75 0e 0e 6b 85 ac 4b 58 58 9f 53 83 37 b2 Data Ascii: *P/39f9m{\|DGSwTU7wyh6Zc4UNa4n.VN3:nw7i4U\Aa95"SFDv-I%Imzo3}p!$Y$Gs.st)^Uuo1!ZwtUw}_Y}9?<%i&kukKXXS7
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 26 a9 92 1b 63 3f 97 2f 5f ec 1b 23 6e e3 4b 85 8a f0 c2 e6 12 c0 b3 cb c0 c7 90 0e 5b eb 8e 8f 59 9e ed a5 44 f6 a3 76 c3 fd e9 72 36 29 44 df 50 f0 fb 84 7b 91 68 0e 2e 1a c1 7b 51 bd 08 cb 48 d0 00 30 c1 a1 a2 72 a6 60 21 8c 3a c1 46 0e 63 5f cc 8d c8 3c f2 a8 a0 1f a2 46 aa 18 9b eb 0a 29 c6 58 35 22 80 11 e5 0c 85 e1 9b b1 d9 ab 7b 36 60 cd 77 b8 9a 1b ff 1a 49 f0 52 1b fe 78 59 6b e3 2f 2b 9b c0 3a 66 c4 4a 0a 53 08 05 73 e2 db 82 d7 93 c0 82 3a 06 28 08 d1 41 1c cc a0 0d 90 75 14 30 81 82 69 60 b1 51 c0 40 e0 c2 40 95 45 6e df 2c 41 69 20 3b ce 6e e5 77 df d6 eb c0 65 60 a0 54 00 1c 21 04 21 93 b3 90 80 71 23 a1 03 d5 46 7b 36 9b e3 7b f9 88 49 d8 e4 ec b3 ad 41 83 ba 2c e6 ed 24 88 af ae c8 6a 47 4a c6 7e 77 2c 1a 85 20 bc b1 52 25 12 3a 8d b7 4e Data Ascii: &c?/_#nK[YDvr6)DP{h.{QH0r`!:Fc_<F)X5"{6`wIRxYk/+:fJSs:(Au0i`Q@@En,Ai ;nwe`T!!q#F{6{IA,$jGJ~w, R%:N
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 19 53 0a 29 5e f5 d8 dd d5 ce 21 60 b1 b2 d1 ba d5 22 01 31 ca 12 29 55 03 49 51 36 55 3d af 99 56 a9 98 ed 7e 20 fc f1 4b 69 67 c6 83 6c bb cf 29 d2 51 bf a9 bc 59 7b 87 a2 f0 ae db db df 8b 85 26 c5 6b b3 49 b1 0d e7 2b f4 7a a7 c4 53 ea d9 29 12 73 1a aa 30 63 e6 cd 16 97 40 87 92 75 fa f3 c1 16 d3 f3 be ed b9 3a 9f de fa 72 a2 53 1c 29 07 e0 10 68 c4 b4 65 78 4a 7a 0b 98 00 02 16 e9 31 2e 23 4f 6f e8 44 d8 c4 78 56 b7 23 0b dd ad 29 7a 50 4f b2 83 d9 0b e4 92 49 f4 c6 a5 ad 5f 15 73 65 3d 54 aa 6f 44 ef df 59 1f 4f 72 b8 9e 8a a7 cc 46 c5 90 64 96 64 1d 15 73 4d 04 26 c0 c4 ee c0 51 0c 33 3b 01 82 06 5e 3f fe d9 2b 6d 1f 1a c0 86 2d 01 b3 91 3e 19 e3 11 17 40 7f f6 6b 3d f4 6b 6d 80 52 e0 14 1d 1b 1c cf c1 cd fa 71 18 85 f2 84 56 52 1b a7 3a 0f 45 89 Data Ascii: S)^!`"1)UIQ6U=V~ Kigl)QY{&kI+zS)s0c@u:rS)hexJz1.#OoDxV#)zPOI_se=ToDYOrFddsM&Q3;^?+m->@k=kmRqVR:E
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: df f3 7d 96 db 1b 7d 11 11 27 96 50 a7 21 14 89 40 5e b0 5b c1 b2 48 5c c9 56 60 7b fc 27 2e 5a 48 69 4b c4 38 f7 8e 40 0b d0 a5 1e f6 39 9b ab 59 46 19 03 14 8a 82 2c 51 24 54 8c f0 5b 9c 37 9d e1 a8 09 20 ef 09 99 06 72 d8 b6 76 72 e8 59 29 35 1c 87 cc db dd 37 d1 4a e2 69 32 b1 bc 0d 7b 13 08 1c 5b d7 ad ac 78 67 fa 97 e5 88 1b 0f dc a5 f8 eb 56 60 d2 41 37 04 d6 65 c7 1b 4d 89 7d cd 9d 4d 02 ec aa f0 18 da 72 da 3c cb 63 c4 ff 0d ee fd 81 45 74 ed c4 1c 58 11 2f f7 5b 5b 5a 98 1b 39 7c 91 3c 1e 03 aa 3e cf 38 20 c1 d3 c3 fd b4 01 b8 6a d7 4f f2 7d 82 d0 90 55 12 80 f4 a4 65 ee a2 00 17 9b fa 12 b5 51 a7 92 8d e3 c7 4d 1f 28 99 c1 52 86 fc 95 ad 1d ba 4d 79 f5 fb b7 7d ee 3c c0 54 cc 86 93 9d 19 88 f8 72 9f fd 23 ce 6e f7 e5 07 d6 09 81 e5 7b 13 14 33 Data Ascii: }}'P!@^[H\V`{'.ZHiK8@9YF,Q$T[7 rvrY)57Ji2{[xgV`A7eM}Mr<cEtX/[[Z9\|<>8 jO}UeQM(RMy}<Tr#n{3
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 95 e1 f3 c8 b2 3c 86 13 8d 54 85 e0 30 59 da 0a 2b 25 56 68 c2 dd fd 59 41 cc 16 00 c7 9f 85 c9 8c af 3a 5b 70 fb 42 4b 35 c3 3c 9d ce 05 10 46 73 13 8c 51 4d 97 45 5d 64 73 77 b8 60 0b 85 26 82 87 f0 60 a2 bc e3 47 b7 ef 1a 80 3a 0b 71 71 e0 10 ee d8 ef 5b 74 68 9b 0b ce d5 8c c2 ed 04 93 9a fd dd 13 ab ca dd e4 f3 76 fb ad a8 61 28 50 ff ea 7a ce 25 28 d3 64 26 fb cc e0 e2 9c da c4 cc 7c 8f 32 77 f0 3c 3d 6f 83 10 ca 19 c0 44 19 9a 40 db 71 50 75 6a 6e 7d 74 14 2e 2c 36 bd 9e 6e 2c 8d 80 48 5c 70 dd 80 63 83 ed 8a e3 e4 27 ee 3d 1d b6 b9 67 87 80 8d bb 3d f6 58 60 4b bb 7a 29 3d 3b af 78 ca 32 e2 65 b6 5d 26 05 82 21 0b 85 f4 6f d8 0f 0d b9 a6 12 8a b0 19 c0 29 00 41 cb 72 65 33 fd c0 1c 4a b7 09 a4 c0 28 37 0d 5e e8 45 87 a3 e6 54 2c 27 8a e5 7d 5e 3c Data Ascii: <T0Y+%VhYA:[pBK5<FsQME]dsw`&`G:qq[thva(Pz%(d&\|2w<=oD@qPujn}t.,6n,H\pc'=g=X`Kz)=;x2e]&!o)Are3J(7^ET,'}^<
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 02 cb e8 84 bf 0c 1b 4d 71 2a 79 d8 2d 49 0a 34 a4 93 e0 e9 ab e7 1c 96 2a b4 0f 12 7c 39 fc 37 f3 01 e8 83 bb aa 9f 4f 2d 5b 81 14 d0 4d ed 06 2c e5 54 a0 ca 20 01 9a 6a fc 36 b4 14 c3 09 7e 27 00 5f e6 09 c6 58 2d 8a ee a7 08 69 5e 19 b2 c8 8c 3f 91 83 eb b5 73 5c 16 2b 34 6a 71 71 7f 96 80 1c 32 e7 b2 63 98 93 04 b3 17 13 0a e4 b8 98 0d 95 64 da 92 2c 71 01 ed d0 52 47 88 7a 97 2e ec c3 49 6b af 9b 93 40 db 66 cd e6 07 ee 3e 2f c2 d6 24 81 c6 03 11 19 66 dd 48 8c ef 4d ff 3a 99 c6 65 af 5b c6 66 e3 c2 5e b4 17 82 16 58 07 94 3c 00 36 60 a1 fe dc 04 1f f4 db e0 1b 5f 99 6d 95 b6 7c ac 6c cc 0d 22 66 da 5d c0 05 c5 2c a6 37 dc d8 ed 50 63 e9 a5 6c f5 03 b6 ff 72 21 e1 f8 7e e4 06 02 1d 4d f8 4c 28 2e aa 68 24 da 35 70 ac b0 2d f9 64 d6 23 2e 02 83 a9 2c Data Ascii: Mqy-I4\|97O-[M,T j6~'_X-i^?s\+4jqq2cd,qRGz.Ik@f>/$fHM:e[f^X<6`_m\|l"f],7Pclr!~ML(.h$5p-d#.,
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 67 2c 4a 23 92 b4 bb 2b 70 9f 80 db 0c a4 56 30 82 6b 80 52 ab 12 f8 63 ab c6 c5 e7 4a 6f 9d 8d b1 b6 a6 10 e3 6e 81 89 f9 91 57 35 9b 0b 9b 63 c5 92 0e 49 38 c8 b5 64 b0 ad 89 a0 60 28 0e 29 64 67 67 e4 b3 f3 51 57 c7 d3 16 0d 3a f3 10 03 9c 65 2c a4 28 27 55 47 b6 f7 8b bd d2 3d bd 57 0e b7 cb cb d8 99 e0 f5 db 8c a9 58 a0 5a 18 6f b1 73 5e 5a 2f c8 d4 ed 42 1b 8a d9 ec f8 3e 10 69 84 fd ce 4a bb 29 00 a2 72 fa f4 5d 19 ab 5b 23 74 85 0c d2 af 09 1b d0 95 a9 27 45 2b cd 33 0e 72 48 5e fa e0 4a 3a aa 1c c8 84 1a 63 b3 09 36 78 06 92 2e 01 87 41 92 56 ad 23 55 e3 90 70 72 7c f7 e7 d3 ee 88 9b 2c 89 af ae f6 da 3b c4 91 4c 98 c9 c1 27 9a 2d 29 60 0a 76 77 1f 96 62 2a b2 32 99 02 9a 2e 67 64 c5 24 63 6d 0b a6 e1 90 ed 83 28 66 76 df b2 eb d9 3b 1d b1 59 01 Data Ascii: g,J#+pV0kRcJonW5cI8d`()dggQW:e,('UG=WXZos^Z/B>iJ)r][#t'E+3rH^J:c6x.AV#Upr\|,;L'-)`vwb*2.gd$cm(fv;Y
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: ef 95 15 6b 24 bd ba 10 51 0e 10 b9 3b e6 c2 32 89 dc 06 ba d3 e1 fa ba 0d 1c 83 25 87 75 4f 59 59 c4 e8 a8 e8 8c 5b 44 9b de f5 d6 95 8d ba db b4 ea 02 ec d3 cb 43 de e6 c0 c4 53 02 6f 07 77 66 41 de 7a 23 9c 35 64 58 b0 da 52 0c da 09 57 dd 5a 28 dc 0a 1c cb b0 33 98 61 e9 3d 0b c2 b1 ba b9 20 e8 f0 5c 32 0e 8c d6 e8 c1 c9 ab 2c 06 5c 78 3d 89 5d 9a ec e5 da eb ce da 42 bd 04 58 20 4a 14 6c 96 c4 c0 35 28 19 92 d3 26 89 e0 34 51 3d 71 ba 7b 95 69 b3 e6 70 e7 3a 6a 6a 3a de 40 12 7b ef 82 1b 87 56 6a 7a 9a 56 f1 06 67 f9 92 ed f1 36 ac 42 db 00 8c 49 e1 ac c9 b6 88 bd a5 ac 2f 33 b0 7f 70 45 ac 7c 7b 9b 99 6c 28 b9 1b ef 1a 11 ae 49 19 c1 d1 70 62 29 a3 d0 dc 9c b7 83 db da 09 26 59 5d 6b 00 a7 77 c9 5b 55 3c e4 76 99 01 d0 de 99 65 02 8b 18 96 a3 f2 cc Data Ascii: k$Q;2%uOYY[DCSowfAz#5dXRWZ(3a= \2,\x=]BX Jl5(&4Q=q{ip:jj:@{VjzVg6BI/3pE\|{l(Ipb)&Y]kw[U<ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49861	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	941	OUT	GET /media/wysiwyg/paiement.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:34 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25610 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "RsK1upY41zAMwGvhkqk7WxHEMrC/+F74uwuqDkeNst4" Expires: Fri, 24 Oct 2025 12:13:42 GMT Fastly-Io-Info: ifsz=85353 idim=490x490 ifmt=jpeg ofsz=25610 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-1801627d7c179d615d7cdefcbb3daf68-f2abb87e7b7e0ccb-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72172 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960029-PAR, cache-dfw-kdal2120064-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 41 26 c0 82 aa 6e 49 50 cf 18 2a c3 3b 33 95 0f 33 39 50 31 86 4a 42 23 c4 cf 75 1e ec 82 b8 24 c2 40 1a e7 65 0c f1 95 ef 11 24 b9 03 04 91 b8 4c 94 63 f0 41 42 1d 8a 86 52 3b 1b b0 ec 29 48 b7 0a 25 bc 85 2f 07 e9 0a a2 26 3b a1 0b 33 70 a4 36 c2 12 7c 61 36 24 47 94 82 94 4a e2 92 c4 10 b8 94 92 42 43 3b 94 a0 52 17 42 00 51 29 b2 94 9b 71 40 0d 94 d9 4e 14 d9 50 ca 42 57 12 b2 90 4a 92 8f 14 e4 0e d3 20 4c 92 bc 0e 08 28 5d 83 56 a8 d0 ed 72 e4 0d d5 be 03 96 ac f2 d3 37 e9 dd 5e a9 5f 96 85 d7 06 72 c9 09 aa 67 2a b9 52 ce 55 b2 a1 b9 6e 55 72 a9 9c a2 48 11 5c 98 72 81 72 92 9d bb 95 1e f0 b3 65 21 85 c4 a2 b8 91 67 97 17 57 90 07 92 c2 4a 50 40 87 1a 9f 69 43 84 f3 55 22 18 5c 65 1d 13 94 73 0a 2a 32 9a 11 31 13 d1 ac 7e ca 22 37 a3 18 f5 48 44 88 Data Ascii: A&nIP;339P1JB#u$@e$LcABR;)H%/&;3p6\|a6$GJBC;RBQ)q@NPBWJ L(]Vr7^_rgRUnUrH\rre!gWJP@iCU"\es*21~"7HD
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 6c b6 c6 cc 32 c6 d1 95 d5 33 95 5e a8 66 e5 5b 2a a3 c1 2a bf 50 ce 56 ad 1c e8 af 48 dd ca 15 c1 49 4a ce 50 2f 0a 18 d0 31 0b 89 64 2e 61 22 8f 04 a0 bd 84 ac 26 23 a0 27 02 48 4b 01 02 16 13 cd 4d 84 eb 53 10 fb 11 0c 43 b5 10 d4 c0 25 a9 f0 87 61 4f b5 31 0e 84 b0 12 02 74 04 00 a0 12 c3 32 ba d0 88 6b 53 a0 07 f0 92 c4 1e c8 d6 46 88 6c 69 d0 59 1c 20 f6 4f b2 9f d9 48 08 82 79 b1 84 50 80 9b 4f ec 9f f8 74 6b 23 09 fd 21 3a 03 51 95 aa 32 66 a9 89 42 8f 95 ab e4 d9 f7 51 64 14 cc e5 45 cc de 54 fc ac 51 73 31 49 65 7a 78 c1 ce ca 16 a2 0e 55 96 66 72 a2 66 6f 2b 58 ba 31 9c 53 2a 55 34 fc ec a0 6a 29 f9 57 49 e3 07 3b 28 4a 88 79 d9 75 63 ca d1 c1 9b 02 77 a2 9f 2c 28 27 37 0a c7 3c 3c ec a2 66 8b 95 e8 63 c8 9a 3c 8c b8 5c 5e 91 1a 52 53 ae 69 09 Data Ascii: l23^f[*PVHIJP/1d.a"&#'HKMSC%aO1t2kSFliY OHyPOtk#!:Q2fBQdETQs1IezxUfrfo+X1SU4j)WI;(Jyucw,('7<<fc<\^RSi
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: c2 d6 c8 e7 35 cc b6 3a 8e 2a 80 d9 1a 63 da 3c b8 64 e0 8d b9 ec a6 39 14 ae bd 17 3c 32 8d 72 d5 90 36 cb 2e 74 f9 55 ee 86 c6 d0 06 5a a0 69 ee 15 b4 f8 d0 f8 e4 1e 8f 60 ff 00 31 85 64 b7 f5 74 11 4b 1b 2b a9 7c 26 13 87 4a c3 90 df 7c 14 3b f8 12 84 7e 49 ea 7b 43 1b 8c 31 58 29 2d 2e 38 f2 e1 3b 6c b9 da ab 03 5d 0d 4c 6e 6b 8e 18 ec 80 0f fe 55 b2 2d 0c 1c 2c 32 66 e2 ea b6 76 e1 f1 94 92 93 7a 64 7c 16 bd 20 6c a4 e2 a1 6b 51 02 41 85 d1 28 27 0b 9d e4 93 ed b3 a5 63 8a 5a 8a 3a da 56 a7 db 4c cf 44 eb 38 09 e6 aa 57 f2 67 27 5e 84 36 16 37 80 95 a7 75 d7 3c 04 c9 98 64 27 68 94 a4 c7 8b 40 0a 06 e5 59 a1 85 ac 38 c8 dc a7 eb 2e 4c 8c 39 b9 df 0a 87 75 ad 9a 40 e0 d7 2c 72 e4 49 34 bb 3b 3c 6f 1e 4e 49 cb af c9 57 bf 5c 35 39 cd 61 ce 15 0e 57 bc Data Ascii: 5:*c<d9<2r6.tUZi`1dtK+\|&J\|;~I{C1X)-.8;l]LnkU-,2fvzd\| lkQA('cZ:VLD8Wg'^67u<d'h@Y8.L9u@,rI4;<oNIW\59aW
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 31 39 26 53 e4 a6 07 3e 55 1c f8 b4 e4 2b 6c f0 96 34 e4 7d 95 72 a8 10 e3 90 9d 99 34 44 48 c0 55 97 a6 ea f2 c9 a8 64 3c e5 f1 fd 7b 85 5c 78 dc a4 c5 24 90 4d 1c d1 9c 39 8e 04 2d f0 64 e1 91 3f 5e ce 5f 23 12 c9 8e 51 f7 da 26 ee b4 e5 af 27 0a af 3b 16 81 5b e1 d6 52 b2 a2 31 b3 db 9f a1 ee 15 26 a1 84 12 17 bb 17 68 f9 a9 aa 93 20 e4 62 15 cd 52 6f 6a 0d ed 43 10 03 82 69 c8 b7 35 30 e0 90 c1 1c 13 45 10 e0 87 70 48 06 ca e8 5c 5d 08 01 e6 a2 98 85 6a 95 a0 a4 7d 4c ed 8c 03 8c ee 86 d2 56 c6 93 93 49 76 c5 c1 04 b2 9c 31 84 ab 0d 1f 4f d5 4c 46 5a 40 5a 15 8b a7 1a 23 61 31 f6 f4 57 ca 7b 33 18 06 18 17 1e 4f 2a b5 14 7a b8 7f a7 c6 93 9b fe 0c ee d9 d2 ac 6e 92 f6 65 5f a8 2c 71 c6 06 18 15 86 0a 26 33 1b 29 36 46 d6 f6 5c 72 cb 39 76 ce e8 e2 c7 Data Ascii: 19&S>U+l4}r4DHUd<{\x$M9-d?^_#Q&';[R1&h bRojCi50EpH\]j}LVIv1OLFZ@Z#a1W{3O*zne_,q&3)6F\r9v
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: df 70 8b 8e 90 7a 2c d6 36 d9 b4 b3 45 22 04 53 94 fb 69 09 ec ac 2c a3 6f a2 2d 94 cd 1d 96 b1 c0 61 2f 26 8a cb 6d e4 f2 14 84 36 d6 ed e5 53 82 16 8e c9 d0 d0 16 d1 c3 14 61 3f 26 4c 12 1a 58 d9 d8 22 1c 74 8d 97 1e 7d d3 1a 9c ae eb a3 2d cb 6c 6d f5 2e 0e c2 5f 8b 90 99 91 b9 df 08 72 d7 f6 0b 3e 52 4c db 8c 5a 5e 87 65 98 00 77 40 3e 71 8c e5 72 78 9f 8c 92 a1 e7 6c b8 3a 4a ca 52 97 c1 bc 21 17 ec 93 6d 5b 32 46 51 d0 ca 1f dd 66 d5 15 b3 c1 30 d6 08 1e aa c1 69 b9 36 57 e8 d4 a2 19 37 46 99 30 54 6d 17 76 bb 29 41 03 1b f2 71 94 6b 4a e9 8b b3 8e 51 a1 2f 2e 51 15 87 ca 40 6e ea 5d fc 15 1d 38 ca 52 da 2a 1a 69 99 c7 50 50 fc 45 3c 91 b9 b9 69 e4 15 82 5c fa 6a 28 e7 73 9a 34 6f d9 7d 27 75 6b f0 5a c0 34 f2 49 59 cd 75 ad f5 2e 71 63 4b fd c0 d9 Data Ascii: pz,6E"Si,o-a/&m6Sa?&LX"t}-lm._r>RLZ^ew@>qrxl:JR!m[2FQf0i6W7F0Tmv)AqkJQ/.Q@n]8R*iPPE<i\j(s4o}'ukZ4IYu.qcK
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 04 ec f2 33 63 e3 36 92 a3 e0 f6 be 58 f2 01 2b 55 e8 1e aa 31 35 d6 da 87 ed cc 64 fa 7a 2d 5e fd fc 30 b3 5c 03 9f 1c 62 37 9f 99 9b 15 8c 5e 3f 86 9d 41 6a 97 c7 a3 77 8a 18 72 de ce 18 44 e1 ca 34 2c 53 78 a6 a5 fe cd 52 e3 58 1f 1f 90 aa c3 e7 27 23 28 1b 75 65 49 a0 88 55 31 cd 97 18 90 38 60 82 13 93 4a c0 df 29 dd 79 d2 8d 36 7b b0 c8 a5 04 d7 42 1e ed fd bb af 00 49 1b 21 f5 84 44 45 a9 03 63 a5 bb 7f a2 40 c6 79 4b 7b c0 19 42 87 ef b0 d9 0d 09 34 16 2a 63 85 a4 3c f9 5c 31 f7 08 57 49 1b bf 4b 82 86 bf f8 e6 da 5d 08 25 ed 78 38 1b 9c 2a f5 13 ef 6f c6 9a 29 88 ff 00 a5 7a be 26 54 b1 45 37 d6 8f 03 cf c3 2f ee 1b 8a 6e d2 65 d4 a6 5c 13 54 b4 f7 87 81 aa 8d ea 48 5b ae 24 6f 4a f5 d8 b2 41 ff 00 92 ff 00 67 0f d1 ca bf f5 cb fd 11 0f 6a d3 ba Data Ascii: 3c6X+U15dz-^0\b7^?AjwrD4,SxRX'#(ueIU18`J)y6{BI!DEc@yK{B4c<\1WIK]%x8o)z&TE7/ne\TH[$oJAgj
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 74 e1 c7 2e fa 06 a9 a8 6e a3 ba 14 10 f2 9b f0 5d 9c 94 44 4c 00 85 9a 3a 18 e3 20 cf 64 fb 29 c0 4f b3 01 10 31 84 32 46 3c 21 8e 13 7e 12 2b 94 9d 21 40 ec b3 c7 22 2d 8f ca 82 8e 6f 74 7c 32 e7 0b 74 ce 69 22 7e 0e ca 51 9c 05 0f 4c e0 70 a5 5a ed 96 f0 39 32 0f 13 84 d3 9f 8e eb b9 43 49 90 b4 b3 14 82 98 ec ae bd c5 0d 13 93 a4 e5 3b 07 1d 9e 49 0d ca f2 58 08 ec 76 31 33 32 14 64 d4 ed 23 85 2b 23 86 14 7c 8f df 0b 39 24 6b 8d b2 a5 75 b3 43 53 1b 9a e6 8d c2 c6 2e 0d af e9 8b 80 a8 88 93 01 77 98 2f a1 e5 6e a0 55 23 a8 ad 11 d6 d3 49 1b 87 20 ae 69 2a dd 1e 8e 19 b7 ab 25 ba 6b a9 29 ae 54 ac 7b 24 04 e3 8c ab 9c 75 01 dd d7 c6 0c af b9 f4 cd d1 f1 c6 f7 06 87 64 34 f0 42 dc ba 57 af 68 ee 4c 6b 24 7e 89 86 c5 a4 e3 2b 55 26 92 7e be 4c 72 63 8c Data Ascii: t.n]DL: d)O12F<!~+!@"-ot\|2ti"~QLpZ92CI;IXv132d#+#\|9$kuCS.w/nU#I i*%k)T{$ud4BWhLk$~+U&~Lrc
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: a1 95 92 37 96 9f ca e9 69 4e 28 e4 52 78 e6 d7 a3 e9 6b 4d 76 a8 c1 cf 23 1e ea c4 66 60 69 7f ea f4 59 57 4f dc da f8 23 73 5c 30 46 e3 d1 5e a1 9d b2 06 e4 e4 61 60 9b 8e 8e 96 94 b6 22 a6 57 cc e2 5c 32 09 d8 67 03 03 ff 00 bc aa fd 50 6b 33 90 d1 9e 00 1c ff 00 ba b0 ce 5e fd a3 21 a3 7c b8 f6 18 ed f4 51 93 44 e6 b7 2c 6e c4 ec ec 6a 7b 8f b2 43 2a 75 00 bb 24 b7 63 ea 71 fd 14 54 98 cf 01 4f d5 52 4c 5f a0 9d fb 86 8d 44 7d 4f 0a 34 d3 69 24 17 38 fd 80 42 24 82 ab a7 8e a2 27 c6 e1 96 b8 60 ff 00 ba cd 6a 69 e4 a6 9e 48 64 1e 66 9c 7d 47 aa d6 e5 63 40 d9 ca ab d4 16 ff 00 1e 11 3b 1b fc c8 87 9b dd 9f f8 5b 63 95 68 c7 2c 6d 5f c1 4a 6e 13 e8 71 90 9f 61 ca d5 98 a6 17 04 a5 84 10 a7 a9 ea 41 68 c8 c8 55 9e 11 90 48 41 d8 a9 68 d2 13 a2 df 4c f6 Data Ascii: 7iN(RxkMv#f`iYWO#s\0F^a`"W\2gPk3^!\|QD,nj{C*u$cqTORL_D}O4i$8B$'`jiHdf}Gc@;[ch,m_JnqaAhUHAhL
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 14 0c 02 38 5a 3e ca c2 d8 da d1 80 13 b8 5e c2 d5 52 e9 1c ce 52 93 b6 ec 4e 17 70 95 85 e4 58 81 66 1b 28 0a a9 08 24 2b 2c 8d cb 55 76 be 9d c7 24 2e 6c f1 6d 5a 3b bc 49 c5 3a 65 7a 79 37 2a 2e 49 0a 3e 66 b8 13 90 a3 64 6e 4a e0 68 f5 55 02 c8 f7 14 38 0e 25 19 e1 e5 78 b0 34 6e 8e 36 1c a8 05 e3 4f 2b ad 0d 7e d9 dd 46 dd 6b 99 14 6e c1 0a b5 43 d4 91 3a 5d 25 db 82 a9 45 b1 39 a4 5c 64 8c 8c 0c 2e 88 4e 9e 13 71 5c 60 97 19 21 4c c4 61 7b 76 21 3e 20 e4 57 9f 0b b7 d9 0a 58 41 56 3a 96 31 a3 62 37 40 1a 6c ee 02 40 e8 8f 6c 59 29 cf 0b d9 1c d8 71 d9 2c c4 82 40 5b 16 17 70 3d 11 6e 6e 02 6f 4a 41 44 a3 d8 86 73 14 9b 98 86 73 17 a4 99 e5 34 46 3e 20 7b 21 d8 c3 14 cd 91 bd 8a 94 73 13 2e 8f 3d 95 11 54 5c ad b5 c1 d1 b4 67 b2 91 7c 99 54 6a 49 1f Data Ascii: 8Z>^RRNpXf($+,Uv$.lmZ;I:ezy7*.I>fdnJhU8%x4n6O+~FknC:]%E9\d.Nq\`!La{v!> WXAV:1b7@l@lY)q,@[p=nnoJADss4F> {!s.=T\g\|TjI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49857	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1222	OUT	GET /media/wysiwyg/home/marche-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:34 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 97372 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "k2UVlRrzFHs0Bz5PlnxNRG/hZl+cY5AU/PtJ0N7x1Ps" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=155283 idim=400x400 ifmt=png ofsz=97372 odim=400x400 ofmt=webp Fastly-Io-Served-By: img01-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162780707575490580e21aa62fb13-987e0c32d7ca843e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72195 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120104-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 54 7c 01 00 57 45 42 50 56 50 38 4c 47 7c 01 00 2f 8f c1 63 10 4d c8 92 c0 b6 6e a3 01 20 06 56 41 df ff c0 96 e5 24 fb fc 8c e8 ff 04 e0 7f 78 e7 fb 34 f3 35 5c 91 c4 b7 29 78 ae 40 6f c9 2a 92 e7 83 17 2a ba 71 55 3d 53 82 fb 2c 00 04 1f 0d 9e 26 0f 42 00 02 c6 ce 1b 9f 20 58 8e b1 27 ed 5d b9 73 ff 4b 8c 1d 7e 88 a4 00 8c 3d 7d 08 01 80 89 b9 45 f2 5d 5c 00 41 02 82 77 d4 3b 82 e0 c4 18 40 72 41 b0 4d 3e 33 9a 61 06 18 04 8b 87 3b 3e 17 59 02 b8 6c ce e2 3b ae 69 00 01 90 00 dd 77 35 f9 88 97 04 00 82 04 c1 76 01 c2 e4 9e d0 3a b1 b9 15 18 90 c0 63 ce 9d ee 00 40 c7 9d c5 e6 ab 52 e6 0f 95 41 7b 07 18 17 04 08 92 dc 69 56 85 66 18 22 ae bd 75 72 06 08 ae 55 73 ce c9 84 74 28 29 35 77 5e af 15 80 60 7d bc 12 4c 9b 3c cd 63 48 a4 b9 01 da af Data Ascii: RIFFT\|WEBPVP8LG\|/cMn VA$x45\)x@o**qU=S,&B X']sK~=}E]\Aw;@rAM>3a;>Yl;iw5v:c@RA{iVf"urUst()5w^`}L<cH
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 0d 64 e8 ed 2d 8b cd d8 fb ba 53 ba eb 1b c3 75 ae d7 e6 d5 bc ba de cc be b3 5f 7b 2d 75 2e 39 de e4 32 d5 38 79 df 9a 6e da ac 9b 78 7c d7 bd b8 e3 3d c3 72 45 22 29 f7 c6 a8 9e 71 c7 bd f1 8c 81 90 de 5f 13 00 ac e6 de 57 e6 f7 98 be 4f 5f e6 ed 95 57 5c d1 03 7a da f5 b0 33 5c d7 f3 54 ff 50 0b 33 b7 95 ba 78 58 e9 6e 79 cf 8b f6 c4 52 b2 54 a9 a2 52 8d 6a 14 a3 1a d5 a8 ee 8d f9 5e 20 bd bf 26 dd 4a b7 62 2f 10 57 ca ea b2 ce e5 32 6c de 76 6e c3 7a 31 76 d0 cf a3 4f cc 99 2d b5 95 58 e9 f9 4d 6f 64 65 65 25 b5 06 06 06 52 25 21 19 d5 cb 8c 78 7f 8d 95 1a 23 60 c4 07 f1 41 7c 11 1f 44 f7 5a cc 18 3b d8 3a b6 ee 79 eb 5e b6 f4 c1 b7 77 d4 65 a3 1a d5 a8 46 55 36 10 32 24 55 24 9d f2 bd 51 8d ea 8e 51 0d 0c 64 75 6f ae 01 29 91 5a 18 81 40 de 8b bd 6e Data Ascii: d-Su_{-u.928ynx\|=rE")q_WO_W\z3\TP3xXnyRTRj^ &Jb/W2lvnz1vO-XModee%R%!x#`A\|DZ;:y^weFU62$U$QQduo)Z@n
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 8d d2 e9 dc de b1 6d 3b a9 6c 5b a5 6d b3 34 bb bc 52 fa 29 d8 b6 d1 9e 32 76 52 3a a5 55 db 66 97 da 76 65 95 79 0c b6 cd d2 b6 6d db 66 c9 36 ad 6d db c9 03 70 cb 06 93 00 48 8a 24 49 12 11 35 73 f7 88 c8 cc a2 65 66 de d3 fe 8d 19 be b4 8f 60 3e 33 36 56 f6 64 64 46 b8 9b a9 0a 66 db b6 14 49 92 74 ef 7d 4f 44 d4 c0 c3 3d 12 9a 99 61 c6 fd 6d cc ff d4 d3 9e 31 33 73 27 54 40 ba bb 81 aa 8a c8 7b 70 6c 01 40 90 7c ba b9 03 13 1b 07 e8 18 7b 85 5b 30 72 0a ee d1 8d ba b7 8e 3e 6f e0 de ad 4b f8 b9 ff 5f b5 6e db 56 6a 6d fd 19 73 ae b5 e5 ba 4b 74 2f 2e 39 a9 5b e8 ce 4b f0 88 9c d7 00 19 2f 80 58 5f 00 2f 81 88 88 f0 ba 6d 5b 73 8e de 6a b0 f6 3e b6 9f bd e2 1f 4e c7 39 85 88 51 0a 2e bb 10 9d eb f7 ae 8c cc 1a 4e cb a8 38 d4 f4 84 15 87 81 65 3a 71 27 Data Ascii: m;l[m4R)2vR:Ufveymf6mpH$I5sef`>36VddFfIt}OD=am13s'T@{pl@\|{[0r>oK_nVjmsKt/.9[K/X_/m[sj>N9Q.N8e:q'
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 11 f6 77 df 5e 7d 8f d0 bc 58 66 65 24 02 80 bb 99 88 27 49 92 24 db b6 25 89 88 c5 6c ed 53 dd fb ee fd df eb 6a 08 de f5 29 fa d0 7c 1a de af dd 6f b1 cf 5a 4b 85 63 02 f4 68 00 80 da 92 a6 1c f7 73 dd e5 b9 4b 3d ab ea b2 96 aa 6a ab ae f6 ea fe dd 75 dc dd dd fd 77 77 eb fe bb ab bd da ca 5d 5e d9 7b af 9e fb 7d d7 fd dc 73 ce 3d 72 cf 39 33 c3 2f 5b 78 38 ff 02 d0 90 8f 2d f8 06 c8 2c 73 52 77 1d 8b 58 c0 90 12 11 79 4e 4e 34 21 ee ce 06 74 03 a4 be 00 52 09 dd 25 64 05 bd 03 22 b7 65 b8 85 6e 2b 70 87 15 fc 29 2c c0 6d 01 44 a4 a4 6e a1 bb 2c 80 1d 4c 8a 86 33 e9 84 b8 bb a6 90 92 b9 bb 2c c1 59 80 43 46 44 e4 b1 6e 00 42 df 02 c4 e4 9e 12 bb ec c0 22 5b 83 5b 0a 19 93 e1 ba 02 77 77 d7 91 15 e0 db b6 6d d3 b6 ad 6d 2b a8 68 e8 ad 75 0c ce 39 e6 32 Data Ascii: w^}Xfe$'I$%lSj)\|oZKchsK=juww]^{}s=r93/[x8-,sRwXyNN4!tR%d"en+p),mDn,L3,YCFDnB"[[wwmm+hu92
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: d1 de e6 9a db 58 8b 03 6a 46 cd 58 38 06 6a ae 2d 1c 6a ba 38 ac 73 b4 70 87 d0 06 36 66 d4 8e 6b e7 bd 34 9e c8 b3 a7 9e 54 cc fa 2d fd 8c de 16 52 da 7a 4e cf 5a ac 55 e8 d6 43 01 85 9d 32 5c 6e 32 1a 74 9d 61 05 36 a0 47 5a 89 86 8c bf e2 ad 81 c3 de c1 d6 60 43 75 73 51 63 11 2c ea 04 db 37 17 ea 95 25 b9 8d 1e a8 f5 01 77 c3 28 2c 8b 43 99 69 11 99 89 4c 67 aa 46 a2 90 94 b3 c3 d3 fe ac 56 e4 ca 65 29 86 31 ec 0d 57 61 34 5d a5 b3 32 14 cd ab 57 c3 13 29 16 74 9b 3c 9e d5 49 01 0a 4f 6b b9 96 de c6 56 39 b5 11 d3 89 35 1b 27 5a 8a a8 11 51 83 01 d4 60 a0 e6 1a 00 d7 dc f8 58 33 6a 30 6a 46 cd a8 19 b5 f4 00 6a a6 bb 8c 1a d2 03 14 c1 c0 5b a1 66 00 35 d7 0c 34 6e e1 6a 30 6a ae b9 66 a0 86 05 10 2d 6e 03 80 45 df c0 43 d4 e8 a2 70 ab 8a 09 c9 c3 69 Data Ascii: XjFX8j-j8sp6fk4T-RzNZUC2\n2ta6GZ`CusQc,7%w(,CiLgFVe)1Wa4]2W)t<IOkV95'ZQ`X3j0jFj[f54nj0jf-nECpi
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: e5 e0 3a 01 fc 4c 7c b4 de 6d f5 45 df bc ba f5 2b d1 49 13 74 53 57 b9 33 a0 e1 d5 d3 60 bd d4 4a 4c 20 60 62 4a 44 13 23 d7 e0 da 06 a0 66 00 35 18 a8 f9 66 cf 33 9e 31 e1 b8 66 d4 60 d4 8c 1a 5c 73 8d 1c 19 35 83 02 50 a3 09 c0 cd 1e 0c a0 66 a0 66 00 35 d7 60 34 1e 46 6a 06 6a 80 01 a0 e6 43 f0 5d 0b 44 00 16 08 04 2f 33 70 eb 01 5f 43 65 5c c4 f8 22 e7 fd c7 75 36 8b b7 50 31 54 d9 a6 47 a8 23 fc 59 98 19 28 0b 46 47 a8 32 d4 ad a6 32 d2 6a aa 68 bd 2d 60 4e dd b9 24 9e 96 90 a2 c6 38 0a f3 fa 3b 5a c5 dd 12 24 a9 a2 9d 25 21 4c 4a 78 d2 3e c8 46 41 79 62 e7 02 12 7f 61 5a 9b fd 99 69 ed e4 a9 8c 0d 2a 2f f9 8a 95 f7 41 1e 2a b5 28 54 72 82 0d 39 7b 66 7c 21 86 d4 9b f4 63 2d 9d 62 70 40 34 02 1b 97 c4 67 30 c9 84 6d 1a d7 ba b0 27 aa 0c de c8 58 d4 Data Ascii: :L\|mE+ItSW3`JL `bJD#f5f31f`\s5Pff5`4FjjC]D/3p_Ce\"u6P1TG#Y(FG22jh-`N$8;Z$%!LJx>FAybaZi/A(Tr9{f\|!c-bp@4g0m'X
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 74 9f d2 5e 57 7a d3 5b c9 64 69 b4 aa 65 af 3c 7a ad 7e bd fb 06 30 ce 6a ab 31 a9 6b d3 8c d0 77 56 98 c9 ee c5 6a 3c 7f b7 26 df bd 6a b5 c9 8a 94 78 54 78 01 2f 21 e9 8c 55 84 0f 2a d5 2d ea 5f 5d 43 6b 24 19 e9 93 47 70 34 d9 95 f2 42 9b b4 bd 44 fc d3 d5 29 7b 54 cb c2 30 82 54 f2 80 94 13 24 20 34 4b 33 aa 4f 7b e2 c2 1e 33 61 05 02 88 08 35 86 29 42 d8 53 52 f4 bd cc cb a1 7a 1c 50 9e b2 d7 8d de f7 5c 3a e1 07 ed 3d 95 fe 5f e3 57 dd 55 a3 c3 f6 2d 37 9f fd 36 a6 18 4f e6 a0 a0 d6 8b 7a 80 95 3e 9c da d9 1f 33 cd 17 83 4a 7b 1d 75 3a fd 6c cb bb 36 7d b6 ab 0d ab cb d5 cd bb 4d 28 1f 15 fb ea c3 dc af 5d 88 87 91 eb 87 91 ff a4 ab 67 0b 78 ef 74 d2 14 0f f6 cc d7 b0 c4 26 1c 9e 79 7a ef f9 5d bc f7 6c fa 39 69 ef 34 d5 4d 3f 4a d5 c9 54 35 ef 5e Data Ascii: t^Wz[die<z~0j1kwVj<&jxTx/!U*-_]Ck$Gp4BD){T0T$ 4K3O{3a5)BSRzP\:=_WU-76Oz>3J{u:l6}M(]gxt&yz]l9i4M?JT5^
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 0f 7f 2a 40 88 58 db 98 9f ba f2 eb 1d 01 23 af 77 38 ac 01 00 15 62 81 8b 9a 89 ad 89 76 b8 36 7c 06 42 d4 e2 aa f5 33 22 68 1d 93 e1 d0 20 4f c3 80 d4 0a 98 aa 0d 86 7e 83 64 7f b2 b6 47 d5 1c 13 f1 10 ef 61 c2 52 3c 1e 45 13 44 79 f5 fa 2e 5c 65 24 a2 89 1e 4e b7 42 bf 33 4c 71 73 e9 7c 3f e4 b6 78 ae 63 d4 f0 7f 89 a9 4c 88 c8 bc 55 33 8e d8 0f 16 6b a8 fd d3 d3 9f 51 5b 12 83 dc e3 e7 5e 84 de 78 fa 3a 25 24 ae 8e ea a9 d5 94 1a 18 56 84 10 d3 9c d2 72 ef 33 bb 8e 68 b3 29 24 ea e4 d4 86 da b3 4c f9 2f a5 ba 53 5d 75 0a e1 6f 16 04 cc 91 e3 5f 18 a4 25 5e 29 0d 22 1f 82 9e fe 06 6f 5e 7e c1 f2 f1 45 f3 75 a2 32 d3 8d a9 d5 90 ba 63 df b8 3d d1 3d c5 e7 8c 2f 57 7b 16 98 9f 9b ae 41 7b 36 ca 29 37 3d 76 4b 68 4f bc 13 0e c7 84 3d 55 b7 f1 22 90 8c 6d Data Ascii: *@X#w8bv6\|B3"h O~dGaR<EDy.\e$NB3Lqs\|?xcLU3kQ[^x:%$Vr3h)$L/S]uo_%^)"o^~Eu2c==/W{A{6)7=vKhO=U"m
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 70 85 e4 c1 76 2e 7d 1c 1b 76 1e 28 f1 a7 f0 00 28 04 69 59 be b9 23 91 a0 eb c5 44 82 15 49 ef f8 ea 80 9f fa 3d 7e 59 94 17 0f 6f 5e 87 b8 41 1c 2a cd 73 c7 c2 2d 94 6c f2 62 bd 0c 84 d8 c6 80 42 9c 99 02 11 02 85 48 cb 29 58 03 d3 4a 59 e4 16 98 b2 bb b0 26 cb e6 a4 3e 96 eb 67 e9 3e 64 02 7e 10 00 c2 a2 76 f9 57 f4 c8 97 d9 b5 0b 39 c4 ec 88 37 32 12 c6 1e 9e 2e 35 f0 8c 6d f0 33 01 0b a0 82 1d 8f 22 c3 22 0b ac ac 80 36 40 23 02 0f 24 a9 81 85 5e cb 34 60 e2 18 64 aa d1 13 13 24 73 69 f2 fc 04 da d1 b5 12 aa cd 2b e3 a1 e6 b6 a5 1b c3 22 ac e1 02 c5 36 26 04 aa e8 3d 1d 72 70 67 73 1b 18 b1 a1 d1 a0 ab e5 46 b1 67 1a bd a1 89 29 4b f5 e2 b3 b5 e2 67 38 76 55 9c 59 2b ab 79 f8 c4 4b 4d 9f 48 c9 f4 85 2b 5c 18 fe 1d 72 6b 8d 31 ce bc 90 59 83 6d 3c 23 Data Ascii: pv.}v((iY#DI=~Yo^A*s-lbBH)XJY&>g>d~vW972.5m3""6@#$^4`d$si+"6&=rpgsFg)Kg8vUY+yKMH+\rk1Ym<#
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 91 07 fd 76 13 1a 82 d8 13 61 ab fb ca 78 b3 53 96 74 c7 9c 41 48 04 c2 c3 d7 59 5b f2 10 4b 86 bc e0 b9 8c cd 41 99 61 99 69 66 98 27 d3 43 93 bd 5e 8c cb e0 75 e1 fe fc 9b 73 fb e5 ff 0a ee 7f d8 aa 94 cd 8e 6d 43 ca 85 7a 3d 6c 9b 66 fb 78 ca 43 a7 06 df 96 9e 6e 7d de 56 7b 5e a2 6f ea 5a 49 3e f1 ae b4 40 40 29 5d 04 e2 aa e5 d0 0a 7a b2 46 b2 f6 8d 61 5b a4 b6 7b e7 b3 82 f3 00 fb 64 df 66 11 6e 91 3c b3 dc f5 0b 9e a7 9b 3f 37 ed 9f 73 66 64 5b 02 7b f1 22 23 11 32 6e 3c 94 b5 4d 40 3d 03 b2 9c 11 22 3b 1d fb 61 4b ef 7b dd 74 2f f6 60 5d 25 8a 09 9c 08 16 80 c5 03 07 4f 46 76 94 9e 5b eb e4 5e 85 5d 2b 4e 09 9e 31 83 46 b7 ec d5 bb c4 90 3f f4 38 90 74 31 d0 e5 58 18 46 0a 56 16 bc c7 e0 3b 4e 8f 1f 0b 2b ff 3f 20 42 7b 49 f3 ad 97 3f 24 3d 10 b8 Data Ascii: vaxStAHY[KAaif'C^usmCz=lfxCn}V{^oZI>@@)]zFa[{dfn<?7sfd[{"#2n<M@=";aK{t/`]%OFv[^]+N1F?8t1XFV;N+? B{I?$=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49858	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1315	OUT	GET /media/catalog/product/6/0/603033_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:34 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2704 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "c1Vhr4oEI5vM99H1zjYXyQhl3wV4+bu/Nq1J9SlfO8o" Expires: Fri, 24 Oct 2025 12:20:54 GMT Fastly-Io-Info: ifsz=66981 idim=1000x1000 ifmt=jpeg ofsz=2704 odim=200x200 ofmt=webp Fastly-Io-Served-By: img03-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162e1fe8b19872f2738e4dda5e0d4-1f62279795a9ff99-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71740 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960057-PAR, cache-dfw-kdal2120063-DFW X-Cache: HIT, HIT X-Cache-Hits: 16, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 88 0a 00 00 57 45 42 50 56 50 38 20 7c 0a 00 00 f0 38 00 9d 01 2a c8 00 c8 00 3e 6d 32 95 48 a4 22 a2 21 23 53 cb 90 80 0d 89 69 6e f2 9f d2 17 ff df 8c 62 89 a6 7a e5 b8 e0 3d 00 2c a3 7c d7 d9 b7 3e 6f a8 3d b8 e4 f7 12 ff 94 fe 04 fd 7f af bf ba 6f 08 f8 01 3a ef 92 9e 81 16 99 ea 35 df df f8 5e 8a 9f e5 3d 53 f0 56 fa 87 a8 27 f2 bf ed bf f6 ff b2 7b 30 68 c5 ea 9f 60 ee 95 3e 89 e5 7f e1 6c 82 fe 88 5f 8c a4 10 4f 08 97 18 2a eb 45 39 16 2d ed 92 0f b6 7c 1a 1f 57 0f 1b e5 07 17 7c 47 07 d8 9b 8f 08 1b 25 72 73 40 dd db 0d 7c c4 06 7b 91 33 79 55 11 a2 c8 00 0d 1f b8 27 bd a7 5b c0 9a 4a a8 6d 2b e4 b6 5d ba 84 6c 65 b6 4e 5b f2 82 8f 72 ab 33 89 80 01 2a 96 65 ef 40 2e 24 b4 9f 3b 1e 7e ef 89 29 2f 1f 1c 4a 59 71 a3 b9 0c 4f a4 dd 29 97 Data Ascii: RIFFWEBPVP8 \|8>m2H"!#Sinbz=,\|>o=o:5^=SV'{0h`>l_OE9-\|W\|G%rs@\|{3yU'[Jm+]leN[r3*e@.$;~)/JYqO)
2024-10-25 08:16:34 UTC	1325	IN	Data Raw: 53 4f 8f e7 31 4b fc 25 d8 43 f8 7e 47 b7 75 a8 6e a5 ce 30 34 fe 1f ff 94 cd 8b fa e5 55 8f 51 62 2e 6e e7 ad f5 d8 93 33 7f 37 a8 56 b2 9e 2b 02 7f 3d b1 6f 55 f0 d3 42 03 5d cc 80 b5 ac dd fe 57 06 20 97 6f de 2c 5f 3c ae 96 cb 45 c5 11 c2 ba df ff f7 aa 18 f2 3a 21 19 01 5d 52 b9 7c f7 17 d1 89 5f cc f1 04 10 bb 89 f4 3a b4 11 59 75 d8 10 9c 99 17 f5 4b d1 4e 44 0c 92 9b 2a 1e 2d 78 f4 e3 0e 4e 0e c9 d6 3b 12 bc 2d 30 40 95 07 15 e9 f5 30 77 14 8b ae f2 2f bd 81 f9 29 e8 0a 6a 90 18 b4 e0 29 57 c7 ef 34 56 60 fd 87 dd 05 56 77 3e 20 31 34 cc 82 81 a6 29 6a 78 1e e7 78 ee 6b a0 88 13 20 43 a3 19 b1 bc 23 72 50 2d 7d c2 d5 8b 6a ce e7 98 58 87 e2 80 ce 83 3c 95 cc 0e 10 39 30 95 79 3d 09 dc a0 09 3b 8e e8 d9 33 14 41 ed 0a 32 ca 1d 92 19 d3 51 65 94 dd Data Ascii: SO1K%C~Gun04UQb.n37V+=oUB]W o,_<E:!]R\|_:YuKND*-xN;-0@0w/)j)W4V`Vw> 14)jxxk C#rP-}jX<90y=;3A2Qe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49860	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	946	OUT	GET /media/wysiwyg/fond-commerce.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:35 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63006 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "oPKtmYZcH2GHD0Dw0mXQT979CVvgamwSsx0bKs/s1Ho" Expires: Fri, 24 Oct 2025 12:14:02 GMT Fastly-Io-Info: ifsz=199044 idim=490x490 ifmt=jpeg ofsz=63006 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-18016281f79f1508468bf7781cb1ae5c-f1baa373a0fc702e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72153 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960097-PAR, cache-dfw-kdal2120033-DFW X-Cache: HIT, MISS X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 3e fa c9 53 b5 54 2b 94 c9 81 f1 1f 4a 4c a2 b1 07 19 14 f5 97 38 35 a3 46 32 2a a1 5c a6 26 25 24 ec 3a 53 19 ac a3 93 99 59 43 02 3d 92 33 d6 a6 19 18 1e 99 a4 c6 32 d8 f7 50 c2 20 50 0d e7 0c 43 28 2d 03 76 6c 7e e1 dc 13 fc a8 46 f3 49 bc b3 76 12 c4 40 1f 78 6e bf 5a ba 1e 10 49 34 ca 68 01 4c 36 0e 7c 08 a5 9a 63 65 93 5b 54 ed b8 54 a1 27 7c d2 8b 2c 67 69 36 03 a1 02 ac 1b ee 1d b3 98 96 4c c4 fe e1 b7 d2 84 2f b4 5b db 40 59 94 32 67 1c cb d3 e7 e5 4b 20 8d 45 b7 a6 b5 cd 3d d3 7d c5 27 15 dc d1 63 91 c9 5c 67 0d b6 d5 29 1d f4 33 0e 57 1c a7 c8 f4 34 31 97 51 8c 12 31 8c 52 b1 c8 0b 90 e0 f2 9c e3 dd f3 a5 96 02 24 26 36 a1 06 0a 27 b6 17 56 37 4b 79 a6 5e 4d 6b 70 bd 1e 26 2b 91 e4 7c 08 f7 1d a8 be d3 8d 2d e4 95 4e af 68 f6 77 20 93 fa 46 c1 Data Ascii: >ST+JL85F2*\&%$:SYC=32P PC(-vl~FIv@xnZI4hL6\|ce[TT'\|,gi6L/[@Y2gK E=}'c\g)3W41Q1R$&6'V7Ky^Mkp&+\|-Nhw F
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: f2 e7 61 73 18 ff 00 88 55 18 51 18 95 65 28 c3 a8 35 b4 5e b3 6b 3c 53 db c8 c9 2c 4e af 1c 88 70 c8 ca 72 18 79 11 5d 0a 18 8e ac e9 63 a8 d4 15 8a b5 01 51 a4 5b 86 c2 17 5d ea 5c 25 c0 fc 51 35 c4 17 56 11 43 a8 45 bc c6 df ec 27 4c f8 b0 03 0c 37 ea 41 1e fa ab 35 9f 42 ba e5 8b 3c da 16 a4 97 4a 0e d0 c9 f6 33 63 e3 ec b1 fa 55 99 c0 7c 65 67 c6 16 78 ba 44 4d 66 ce 31 db 85 ee 34 91 83 fa d8 c8 df 94 9f 69 7a 03 56 4f 51 9a e8 1a 74 2b 34 38 37 55 cb 15 71 14 1c 5a 5d 31 b0 ae 22 bd 7d 5b 49 b9 f5 6d 6b 4c 9a 09 01 c7 7d 0a 31 f8 1e 87 e4 69 e5 9d e4 4e c1 ad 6e b0 e3 c0 9e 57 fa d7 64 dd da 5a de db b5 b5 dd bc 57 10 b0 de 29 50 3a 9f 91 aa a3 5e f4 31 c3 57 fc f2 e9 92 cb a6 ce 77 0a bf 6b 06 7f 84 f7 97 e4 6b 15 4c 09 17 61 5b a9 74 83 4d 9e 23 Data Ascii: asUQe(5^k<S,Npry]cQ[]\%Q5VCE'L7A5B<J3cU\|egxDMf14izVOQt+487UqZ]1"}[ImkL}1iNnWdZW)P:^1WwkkLa[tM#
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 13 46 c4 00 d9 e9 44 0f 0c 4f 03 73 20 20 78 11 40 8f 68 56 52 d0 4c d1 9e 72 40 1b 81 bf 95 32 9b c6 84 21 7b 4e a0 f9 a3 c5 73 86 52 30 10 0c d4 37 12 dc 24 1a 6a 3c ae 11 7b 6c 12 4f 98 e9 f3 a6 d0 6a d3 47 21 79 50 0e 61 ca dd 48 f8 8c 6f 52 17 ad a5 6a 10 27 69 d9 ce aa f8 0a c3 a1 3f 7b 07 c6 b2 62 1a 4b 08 df b5 69 a0 e6 87 82 76 6c 53 87 18 8b de a3 f2 ac 10 46 31 e3 5e 53 d9 72 44 cd cd c8 02 e7 e1 49 dc 48 54 37 67 8e 6c 6d fe 34 d6 e8 10 3b 55 1b 75 23 dc cc f0 82 15 17 af bf de 6a b2 78 2c 3f 42 cf 1e a3 19 b8 82 17 76 88 31 cb c6 14 f7 8a 1f 0c f8 d1 f6 ae cb 65 60 39 5c 87 77 56 2d e2 30 72 4f ca a2 6c df 49 99 64 59 54 10 ea 40 90 78 06 ea 32 3c e8 6b 07 75 94 9e dc bd 99 b1 b4 ca 6d 07 d3 6b 2a b1 f3 2f 8e d0 00 96 c7 35 58 59 e8 af 35 b8 Data Ascii: FDOs x@hVRLr@2!{NsR07$j<{lOjG!yPaHoRj'i?{bKivlSF1^SrDIHT7glm4;Uu#jx,?Bv1e`9\wV-0rOlIdYT@x2<kumk*/5XY5
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 01 b8 53 e2 77 c5 72 9c ce ae b8 27 dd f5 ab ca f6 e6 f6 da c2 e6 de f6 c8 08 8d b1 58 ae a2 3c d1 e3 97 65 94 1d d0 e3 c7 a5 68 00 3a 9c 10 b1 54 fb c9 06 24 a3 13 ad 5f e9 d6 8b fa 66 cd 25 b5 9c 03 0d fd b1 0e 8c 47 bc 1e 53 9f 76 f4 43 6d 3c 37 31 3d ce 9b 76 b2 46 31 82 87 71 b7 46 53 5c e5 a5 ea b7 da 31 66 d2 b5 d8 20 56 c8 92 de 47 12 43 20 3d 43 c6 c0 a9 cf d6 88 ad 38 97 45 1f e7 26 63 a4 df a6 58 49 65 cf 35 b4 ad e4 63 3d e8 f3 e4 09 5f 75 2b 29 d9 27 9d 8a 23 20 ea 0f 2b 8f ec ba 02 d3 52 32 31 59 63 e5 2a 70 cc 3c 3e 22 a6 50 a1 40 ca 54 83 d4 e7 61 f1 f2 ae 6e b5 f4 b1 7c b1 5c c7 36 93 0c cf 27 f4 cd 27 65 b0 eb 90 06 32 6a d0 d2 ae 9b 56 d3 6d ee 26 b3 9a dd e7 40 26 b7 7d e2 91 1c 65 5e 29 06 ce 84 78 f5 07 ad 5e 57 01 30 ab 30 d0 6a 9b Data Ascii: Swr'X<eh:T$_f%GSvCm<71=vF1qFS\1f VGC =C8E&cXIe5c=_u+)'# +R21Yc*p<>"P@Tan\|\6''e2jVm&@&}e^)x^W00j
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 7b ab 6b 85 b8 b2 b9 40 f0 ca bd 0a 9f c8 8e 84 75 06 9f 83 ca 79 49 ca 9e 87 ce ba 31 60 45 c1 d0 ef 5c bd b0 6c 46 ab 72 b5 a9 53 5b 03 cb b1 e9 e0 69 4c 03 43 24 29 09 00 4e 7a fc 7f c4 56 e0 90 7a fd 2b 62 98 ff 00 1a d7 6c 7c ea 48 2a 28 5d 6f 86 f4 1d 7a 23 1e a9 a6 5b dc e4 6d 23 2e 25 5f e1 75 c3 0a a7 f5 8f 42 5d 9b 3c fc 37 ac 3c 2d d4 5b 5c 9c a9 3e 42 45 fe 62 af ae 95 9e 9e 34 b7 52 63 85 c0 4d 65 7a 8c d1 c7 91 5c 6b ab e9 fc 4f c3 ee 57 5d d1 25 44 f0 ba 88 65 0f bf 9d 72 bf 5a d2 c3 54 42 c1 ec af 70 de 0a 4f 23 7f 81 ae ce 38 64 64 38 2a c3 bc a4 65 48 3e 04 74 35 5c eb de 8a f8 33 5a 67 93 d4 8d 94 ed fd 35 a1 11 8c f9 b2 7b 27 f0 ac 6f c1 0d 58 61 6f a7 d2 03 4a 8d b2 aa 6d 78 8e e1 02 ad d4 5c c4 8d cf b2 7f c0 d4 f4 1a 95 95 c8 01 25 Data Ascii: {k@uyI1`E\lFrS[iLC$)NzVz+bl\|H(]oz#[m#.%_uB]<7<-[\>BEb4RcMez\kOW]%DerZTBpO#8dd8eH>t5\3Zg5{'oXaoJmx\%
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: f3 31 f2 c9 f0 a2 e8 95 3d 46 dd 3a 0e c5 47 cb 15 16 74 c4 27 0b 29 1e 59 15 b6 81 19 1b 9b 70 48 aa 25 ce cb bc a1 f6 57 4c f2 e0 fe 14 d5 92 46 21 b1 f2 c5 10 5c 69 b3 c7 b8 c3 0f 75 30 68 e4 53 82 a4 1f 85 3f 23 1d a1 49 cc f6 ec 51 4f 1b 13 be 31 49 9c f7 46 01 a9 42 b9 ce 6b 45 b7 67 75 55 19 62 70 28 1d 44 ec 28 85 41 b5 27 a7 5b 2b ce ce c9 95 4e 9b 7d e3 44 4d 17 d8 23 0c 93 bf 53 9a 66 bd b5 98 55 92 d8 85 1e 23 7c 9f 3a 79 15 ed b4 b1 aa f3 72 91 d4 30 c5 64 7b 1f 24 e5 b7 05 a1 af 6c 01 37 e2 b5 cc 9c 9c cc c7 c8 63 71 5a 73 af fa c5 ff 00 80 d3 c5 8e 32 bc b8 db a8 c6 f4 df b0 4f 0c d0 5f 7a 65 b7 21 ae 20 e2 59 35 9b 91 06 89 04 8c 07 b7 79 2c 66 38 e3 18 c0 c0 6c 16 35 03 6f a2 d9 da 2c ae 54 4f 3b 02 64 9e 51 cc ec 7e 7d 07 ba 8c af ae 1e Data Ascii: 1=F:Gt')YpH%WLF!\iu0hS?#IQO1IFBkEguUbp(D(A'[+N}DM#SfU#\|:yr0d{$l7cqZs2O_ze! Y5y,f8l5o,TO;dQ~}
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 23 66 46 19 57 5f 22 b4 9d bd 94 77 b3 46 96 f2 0e 67 60 aa d9 c1 ce 28 82 d0 ea 16 76 86 0b 19 e1 be d3 d8 f3 36 9d 76 bd ac 07 3f b1 e2 87 de a4 1a 61 26 9d a2 de 4c 3d 42 e1 f4 8b de a6 ca f9 c9 81 8f 94 17 1e 1e e1 20 f9 d5 82 1d dd 3e 07 54 a7 53 73 35 10 37 8d 3f b2 1f 1a 7c d6 0f 71 1b c4 c5 d1 fb e7 fa 45 3e 47 1d 71 53 dc 2a 96 f7 57 12 47 7d 73 66 8b 24 4c b1 b5 da 48 c8 8e c7 0a 79 a2 c1 46 1d 41 3b 79 d2 13 4b 77 a6 5c 49 69 ac 58 cf 6d 34 a3 98 3b ae ec 3c 0a 9e 8c a7 c4 8c d4 d6 87 88 22 17 36 f6 f2 cb 72 25 63 6c d1 2f 31 e7 51 90 d8 c7 40 3c 37 a1 2e 2d 89 69 37 49 a8 5d 96 c2 49 22 12 9a 2d dc 92 6b 76 51 c1 6b 21 77 8f b3 b8 8e 2c b2 5c 32 92 39 f7 04 28 3d 4b 55 91 a7 5f a0 be b9 b7 ec 23 95 16 64 8b 12 f3 2f 6a 4f 50 31 bf 73 38 da 87 Data Ascii: #fFW_"wFg`(v6v?a&L=B >TSs57?\|qE>GqS*WG}sf$LHyFA;yKw\IiXm4;<"6r%cl/1Q@<7.-i7I]I"-kvQk!w,\29(=KU_#d/jOP1s8
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: d5 1b f0 b4 9f dd 96 9f 45 71 b2 10 7a 52 4c 80 ee 47 5a 0b b1 d7 2f 11 01 59 12 e2 3f 71 c9 ff 00 11 44 16 fa e5 8d c1 01 9b b2 6c 74 6e 99 f8 d6 aa 78 8a 6f db 07 71 58 df 86 a8 cd 92 37 84 fd a3 3d 3a ed 49 15 1b 8a 7a 30 57 20 e4 1e 84 57 99 01 04 53 e1 22 53 02 a4 63 14 9b 46 37 38 f1 a7 a6 3e 98 eb 49 95 38 c1 14 25 aa c1 4c 5a 3c e4 63 34 93 c6 af d7 7d ba 54 81 51 bf 8d 6a d1 82 77 f0 14 30 88 15 11 25 a4 6e 39 4a 82 31 bf 8d 0d 5e f0 cd a4 d9 28 0c 2d be e3 d9 3f 2a 37 e4 23 1b e7 6a d0 a2 b6 01 14 25 a0 ea 11 b5 ee 1a 15 4d de 68 97 f6 64 b7 27 32 8e 8e 9b 8f f9 54 3a 9e 47 05 97 3e 1b 55 e8 f6 b1 b6 32 83 c7 34 35 7d c3 b6 b7 19 3c bc 87 f6 d4 75 f8 8a 51 61 1a 27 0a 80 c4 db 88 55 e5 a5 ed cd bf 33 c1 3f 67 8e ab d4 1f 95 10 45 af db 5d 46 20 Data Ascii: EqzRLGZ/Y?qDltnxoqX7=:Iz0W WS"ScF78>I8%LZ<c4}TQjw0%n9J1^(-?*7#j%Mhd'2T:G>U245}<uQa'U3?gE]F
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 8b 3f 57 bb 75 4d 62 da 3c c9 8e e8 b8 8c 6d da 2f 91 fd a1 e0 77 ab 3e 09 fb 7d ba 4c bf 2c e3 f9 d7 0e 5b 3d fe 99 7d 6f 77 6c f2 5b dc 40 e1 e3 7c 74 3f cc 1f 11 e2 2b a9 b8 4f 8a ed b8 8a c1 2e 13 96 2b c8 8a ac f1 67 d8 7f 0c 7e eb 7d d3 f2 ae fe 0b 12 dc 43 7a b7 1e d8 16 e4 b8 38 ec 1b a8 3b ac 68 9a 64 df 81 56 39 ef 8e 61 b3 8a 51 5b 9c 13 8c 30 f6 87 9d 33 82 7e d8 73 0d a4 5f 69 7f 9d 38 f6 be d1 36 61 d4 53 9c d2 0c 1b 42 c6 0c a5 76 23 dd 48 82 62 6c 1c 94 3d 7d de f1 4b 2b 06 1c cb f3 15 92 03 0e 99 06 86 62 c4 59 5c 4e 8b 53 f5 f1 db c7 e1 5e f1 da 93 07 b2 3c 8c 7b 87 a1 fd 93 fe 14 a9 07 ca a1 b2 8b 18 ad b1 58 e9 5b 03 54 54 58 1b 1a c3 64 02 54 ed e2 3c ab 7d ab 00 0c d5 4a b4 8f 36 7a 8c d4 2f 11 e9 b7 1a a6 8b 77 69 6b 22 a5 c1 e5 92 Data Ascii: ?WuMb<m/w>}L,[=}owl[@\|t?+O.+g~}Cz8;hdV9aQ[03~s_i86aSBv#Hbl=}K+bY\NS^<{X[TTXdT<}J6z/wik"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49856	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1315	OUT	GET /media/catalog/product/6/0/602511_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D; _fbp=fb.1.1729844190867.97636512878267
2024-10-25 08:16:34 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6132 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "3EnE6rUu8X7vLLec2rZRtEmOEbhuFsm+HoEtqlm9kJw" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=181135 idim=1000x1000 ifmt=jpeg ofsz=6132 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-18016277e84c685fb5d0b3f63a1f2d17-e482a5c81f0848d4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960083-PAR, cache-dfw-kdal2120020-DFW X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 ec 17 00 00 57 45 42 50 56 50 38 20 e0 17 00 00 d0 5d 00 9d 01 2a c8 00 c8 00 3e 6d 30 94 47 24 23 22 21 28 54 bc 38 80 0d 89 63 6e dd 5d e6 0d f5 eb d0 21 80 60 13 ef ec b9 e8 ff fb 7e ec ff 34 df 70 1e ed de 98 3f b3 7a 40 75 45 fa 15 f4 ba 7f 68 ff c3 e9 77 ab 11 29 ee 3f e2 9b a6 9f 89 49 01 c4 5d 46 bb a7 fd f7 ae 5f ef bc 09 e0 16 f4 3b 44 7b e7 e6 d7 f7 9e 6f fd a3 f6 00 fd 60 f4 cf c2 8e 80 bf a8 fd 62 3f dd f2 cd fb 47 a8 af 4d 63 bf 18 31 96 73 1c 3b cb f8 8c a0 ad 37 d7 1f bf a0 70 55 76 a2 f9 29 bb eb 41 34 6f 75 58 e7 bf b1 f4 ba b4 03 bb 30 a8 f2 02 66 e9 24 72 e3 1a 7d 00 cf 55 20 5b 11 67 09 42 42 8f 3f 11 11 6b 03 46 b0 e7 bb 0f 27 b5 51 0f 96 7b 30 43 03 a6 00 67 ed 3a b7 50 42 c4 da 31 05 4b 44 57 3d a4 98 62 93 d6 aa 5b 1e Data Ascii: RIFFWEBPVP8 ]*>m0G$#"!(T8cn]!`~4p?z@uEhw)?I]F_;D{o`b?GMc1s;7pUv)A4ouX0f$r}U [gBB?kF'Q{0Cg:PB1KDW=b[
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: f0 90 24 62 ab 38 15 f6 7a 77 b4 f5 5c 30 0a e9 84 7b 42 6a 41 7b d8 9b 71 e5 3e 8d a4 99 9a 82 93 60 79 c3 06 91 b0 b8 bd 03 53 aa eb 72 6f ed 1c 49 35 16 07 ef 26 a5 4b da e1 55 ca ec 6d fd fa 34 4e 31 fe b7 96 64 d8 2e 8a 61 fa db 6a f7 f5 93 e8 60 54 0c 30 e4 4b b7 cc 38 4e 70 03 88 e4 42 83 e1 c5 fa 93 9c 7b 30 6c 51 26 a6 63 ff bb 06 96 ca 5f f0 21 f3 87 f5 46 d2 d1 25 2b bd 11 c7 e4 6b ae 89 19 1a 48 9c 90 8e 04 89 ce 81 0a 03 38 01 e0 d1 59 a8 ad 60 7f 07 80 2c 61 c5 a3 e6 15 0d 51 87 49 43 78 8b 1b c2 fc 09 5c 6d 36 ca 29 82 3a a8 ef 0c 0a 8e 4e 7c 5f e4 0b 03 2f e2 c4 3d f6 e7 ad 26 98 66 ab f7 08 ea b7 93 6a 7d f3 89 d2 c1 11 58 db cd b3 5a c6 dd 67 4a 63 f1 7f 82 6b 84 ca a3 d3 b4 70 3f 45 c3 b4 ae cb 40 d2 90 ba 97 ce e1 2e e2 bd f5 52 ef e5 Data Ascii: $b8zw\0{BjA{q>`ySroI5&KUm4N1d.aj`T0K8NpB{0lQ&c_!F%+kH8Y`,aQICx\m6):N\|_/=&fj}XZgJckp?E@.R
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: ee bf 62 65 3f ea 77 03 7b 21 f6 6b b8 96 dc 3f 15 c9 8a 2b a4 3d 56 17 3f 19 e5 c4 ca b7 d2 b4 e4 6d 8c d1 ef 5b a8 6e cc fd b5 d7 74 fc 22 8a b5 9e 2f fb 52 ff fb 28 b2 d7 69 62 16 58 96 37 42 a8 cc e7 3c 81 44 fa 6d 88 0e ba a8 97 42 99 07 fe 70 84 72 2c 49 11 17 d1 59 ef 27 c6 f6 13 f9 5d 34 5e ae 70 f3 78 87 6a 24 32 57 ff c7 65 a5 19 fc 8e be b6 7e 37 04 a0 c3 d9 ad e6 39 34 ec 4f a3 0d f0 e3 cf 56 e6 41 d2 3f ae 21 d8 75 7b 61 69 d2 66 4a 63 06 21 30 d3 8f 15 bd 48 05 df f9 dc 8f 37 42 88 09 01 7e 87 2f 31 4a fa 5d e7 e0 70 7f 03 28 4e 19 b3 38 d9 20 e6 d1 98 bf be 43 6d a6 85 f5 11 97 8f be 38 3f 88 2f 14 20 48 62 e6 9c 54 33 fc 0b 04 1c b4 86 45 54 cc 40 c2 4b cb a3 6d bc a1 92 48 91 72 83 13 e0 bc 31 be 17 3e a3 7a 85 69 9e 6f 89 a7 0c ce 0f a1 Data Ascii: be?w{!k?+=V?m[nt"/R(ibX7B<DmBpr,IY']4^pxj$2We~794OVA?!u{aifJc!0H7B~/1J]p(N8 Cm8?/ HbT3ET@KmHr1>zio
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: d9 fa d0 f2 01 ab c9 97 3d 4e e5 ef d2 a3 4d 19 52 79 09 6f 04 01 68 17 06 b8 07 c3 55 7c 09 58 74 57 c4 2d cf e4 37 39 49 2a 57 d3 4f 8c 64 80 b0 6e 7a 58 d2 52 1e bc 27 12 84 b2 df a7 16 c3 a7 3c 1f 7e bc 5b 71 06 68 f1 96 8a 79 99 9c 18 41 b9 5f ad e4 b7 79 6a 8b c8 67 b7 5a c3 c0 67 6b 0f f8 a9 8e 07 17 45 f4 ff 39 74 26 0b 56 11 9d b5 b5 2f b6 1a 8d 8b a5 c8 38 cb c9 ae e5 c5 38 f4 87 9a 33 34 70 5b e9 9f 71 2f 2f fa bc 7a da 9a b7 34 5f 80 f5 b5 03 5b 6f e6 1a 84 b6 b1 45 ad b0 f9 f2 66 c8 1c 22 aa f1 bc a6 33 af 06 a4 6a f9 34 30 c5 a5 8c 7e 54 09 45 50 be 37 6f 08 7d 8a f2 2b 47 52 7c ab 69 87 d4 b4 5d 0e c7 45 d9 77 9e 89 dc 19 87 82 9a 0c 25 40 9d 7a f5 2a 09 38 e0 3d ab 76 66 c7 c5 38 d9 f9 56 67 a6 1f 2c ac 94 0d ee da 38 1b c5 d3 80 cb 94 3a Data Ascii: =NMRyohU\|XtW-79IWOdnzXR'<~[qhyA_yjgZgkE9t&V/8834p[q//z4_[oEf"3j40~TEP7o}+GR\|i]Ew%@z8=vf8Vg,8:
2024-10-25 08:16:34 UTC	616	IN	Data Raw: 91 b9 03 a3 6d 32 6a 2c 8c 1c 39 f4 b7 4b a5 1f 17 f6 fa 1f 32 5b 20 79 15 0d 63 97 02 47 be 76 21 1d 5e 82 6b a9 f2 7e 64 d0 6c 1d 3a 33 2a ee c8 1f a7 ac 81 8b 1d 97 cd d0 4d 6f 42 a0 4a 55 22 c7 c4 3d 27 02 6a 10 b6 ee 63 db 18 d1 d6 5a 8e 87 5a 18 0d 7f 3d 60 08 93 1e 2b 61 53 e1 22 9e 66 18 6e cd 54 07 0d 8b a1 ac ef c0 d9 f9 99 d5 55 50 96 a9 e2 89 06 d2 d9 e1 e9 78 3b 99 97 d4 1e 7b 78 aa 6c bc 2f 6c 2d ab 6e f4 38 99 d9 12 23 d8 e2 df 94 60 16 6a 3b 5d d5 72 db c1 fd 2c 71 75 ff cc e3 37 ce f5 5c 60 c5 c6 25 c2 a5 ce ea 98 73 4b 47 82 20 fc 55 f7 f5 64 22 fc 95 c6 66 f5 d4 5d ab dc 54 10 7d de 2f 06 11 09 1b be 79 31 0f ae a4 76 de 7b 6d 8c 4b d6 fa 43 54 55 df 6f 59 7b 45 c9 3d 87 6a 8c 1f 3f bf b9 02 5f cc 30 ba aa 37 2b 4c 61 77 f9 9a 38 f4 e8 Data Ascii: m2j,9K2[ ycGv!^k~dl:3*MoBJU"='jcZZ=`+aS"fnTUPx;{xl/l-n8#`j;]r,qu7\`%sKG Ud"f]T}/y1v{mKCTUoY{E=j?_07+Law8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49865	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	941	OUT	GET /media/wysiwyg/conseils.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:35 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 32464 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "CAEZDGVBNvqewBmutUqldTwgnlQIemBVot6LwDFCJdk" Expires: Fri, 24 Oct 2025 12:14:02 GMT Fastly-Io-Info: ifsz=101459 idim=490x490 ifmt=jpeg ofsz=32464 odim=490x490 ofmt=jpeg Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016281f5b7e985bcb65bba7c308cb6-c1f15b282c4066aa-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72153 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960078-PAR, cache-dfw-kdal2120076-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 60 8b c4 f1 21 7d f4 21 a7 37 a8 59 dc 53 17 14 51 4a d7 9b 5f cb 98 6a 6f 6b 8b 7a a0 0b 59 9c c6 b4 b9 ce 00 75 2a 9a 5a ca 40 40 32 b4 5c d8 12 6c b9 7e 33 c6 35 cd 63 d9 13 db e3 3c 96 92 0f c3 6e 61 62 9f 24 b5 0d 74 8f 9a 79 24 bd dc e7 1d 14 b9 22 94 19 e8 17 b3 52 47 35 1c b4 df 65 c6 f0 fe 2d c4 69 62 74 1e 38 78 16 c9 9e ee f6 d3 92 93 27 1b d7 87 e9 1b 2e 40 36 19 94 36 56 86 75 b0 2c 54 96 15 c9 61 e3 ca c6 58 be 95 84 73 f3 1f e8 af 29 38 fb 0f 7b 83 6a 23 31 75 70 37 b2 13 40 e1 23 a5 31 db 29 f1 bb 65 92 a2 e2 1c 16 aa c2 2a f8 ef d1 da 1f 75 a7 81 c1 e0 39 ae 0e 07 98 37 0b 44 d3 33 69 a2 e6 22 a6 b5 57 42 54 e6 9d 15 08 7d 18 e4 91 7d 12 81 d5 00 4b 6e c9 0f 4b 69 d1 36 f2 90 ca da 9f 84 aa 6b ea ad ea 8f 94 aa 32 fd 4a 01 72 2d ca 24 85 Data Ascii: `!}!7YSQJ_jokzYuZ@@2\l~35c<nab$ty$"RG5e-ibt8x'.@66Vu,TaXs)8{j#1up7@#1)eu97D3i"WBT}}KnKi6k2Jr-$
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 2c 13 12 56 43 9b c9 6d f7 b5 ca 66 a0 c7 9c 30 e6 7b 9a d0 0d b4 17 b5 f7 29 9d 47 dd 68 07 ba 28 56 3f f5 91 c8 5b d0 59 38 da a6 80 03 c3 87 7b a8 79 99 cd ac 3e a9 41 ed db 2b 81 fe 1e 5e c8 a4 1a 99 3d b3 31 da b1 e4 db 5d 0e a1 3e 1c f0 43 ac d7 69 f7 b4 23 d1 57 65 16 bb b3 02 3a 58 1f f5 4e b1 d2 b4 0f 0e a5 ae 1f 86 46 a5 45 26 5b 47 24 64 5c b1 ac 70 d0 58 6c 7a 8b 6c a5 34 c8 d0 4e 6b b4 6c 5d 62 3e 6a b6 39 5a 1c df 14 18 4e c1 db b5 ca c5 b1 d4 b4 66 0c 32 46 77 92 13 cb a6 54 a8 76 89 71 3c 1f e1 70 d4 b9 a0 86 eb d5 4e 64 cf 69 cc e6 69 c9 c3 f5 3c 8a 89 10 8a a0 bf 2f 95 c7 ef 37 4b 7a f4 28 84 2f 82 ce 2e 39 76 12 b4 1d 0f f1 0e 68 1a f6 2d f2 32 40 cf 3b a3 76 f1 c8 3c ae 61 ea 3b 2d 6e 03 f4 8b 88 61 d3 36 8f 19 05 f1 07 65 15 00 6a 07 Data Ascii: ,VCmf0{)Gh(V?[Y8{y>A+^=1]>Ci#We:XNFE&[G$d\pXlzl4Nkl]b>j9ZNf2FwTvq<pNdii</7Kz(/.9vh-2@;v<a;-na6ej
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 02 81 8c bd 43 93 9a 96 f5 0e 44 08 81 28 50 9d 72 74 2a c1 e1 42 2c d6 e4 90 2f 7b 75 48 0c 4f 17 d7 36 93 09 a8 76 7b 38 82 d0 ee 77 3c 87 aa f3 f1 76 57 0b 90 5c 4d cd f6 07 f7 2b a2 fd 21 62 8c 35 ac a3 6b cb 9d 13 8c 92 0b e8 1d b3 5a 7d 17 2c be b7 71 d2 fa 0b ea e2 56 4f 76 74 43 68 92 3c 47 48 4b 5a e2 1a 4e a7 aa 51 2d 8c 35 80 58 0d 4b 41 d4 f7 71 40 82 c0 06 ef b6 8c 6f 20 8d b1 36 de 67 02 4f 33 a0 ff 00 55 55 b0 01 92 4c 48 0d 16 6b 85 fc a2 c3 dc f3 52 a0 a3 88 d4 30 b8 b4 b5 c7 cd 7d 7f 54 88 ef e4 bd c6 52 6c 2f b8 e9 d0 2b 1a 78 b3 39 8e 71 20 83 a1 be 81 4b 63 4b 73 41 fd 9a d7 d3 c0 63 b1 b6 62 1d cc 00 6d 6e f6 e8 b3 58 84 41 f3 bd b0 47 e2 10 2e e2 39 7a 9f d5 6e b0 d7 32 58 a4 80 b4 87 48 db 35 ce 04 58 9e 9c 94 5a cc 3e 28 d8 e8 8d Data Ascii: CD(Prt*B,/{uHO6v{8w<vW\M+!b5kZ},qVOvtCh<GHKZNQ-5XKAq@o 6gO3UULHkR0}TRl/+x9q KcKsAcbmnXAG.9zn2XH5XZ>(
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 93 2c 50 7c a3 cb b5 58 6d 45 37 96 76 38 8e 52 0d 08 51 db e3 40 01 cc 1c cb 0b 38 6c 6d d7 a1 5e 86 c4 f8 6e 29 d8 ef 23 7f 96 d6 f9 2e 61 8a f0 bc f4 86 47 42 d2 2c 35 61 17 b8 1f d1 75 e2 ea 53 da 47 1e 5e 97 6b 89 96 85 ec 77 da c7 60 75 2f 37 b0 77 67 27 44 82 29 33 46 0e 66 9b 10 4e b6 e5 73 df 91 f9 a8 a2 17 19 9d e1 5d b3 81 77 c7 c9 c3 ad 93 d1 b8 3b cd 96 c5 ac b1 69 1f 08 1f ab 4f cc 2e cd 9a 38 b7 4e 99 66 ca 88 64 65 e3 7b 88 1a 9f c4 c2 3b 1e 9d 13 f9 0d 44 39 5c f6 87 37 cc d7 34 da e3 ab 7d 3a 2a a6 b8 09 0b 9a 00 73 b2 e6 04 f9 4f 40 ef 5e 4e f9 ab 18 de dc d6 6b 9c db 38 e6 6b 85 b2 95 2c a4 ec 37 40 d7 81 2b 5c 5b 33 0e 76 bd 80 b6 ee 03 5b 7a f3 1d 15 e5 1c d1 56 d2 ca 08 0c 98 0f 33 79 66 3c c7 63 c8 a8 71 97 3b 30 68 ca e2 35 b9 b7 Data Ascii: ,P\|XmE7v8RQ@8lm^n)#.aGB,5auSG^kw`u/7wg'D)3FfNs]w;iO.8Nfde{;D9\74}:*sO@^Nk8k,7@+\[3v[zV3yf<cq;0h5
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: b3 13 d9 02 22 4b 6f 0e 5b 1b 59 a6 c7 d7 4b af 32 7d 22 33 37 11 40 03 5c d6 f8 27 4e 5a 1b 5d 7a 5a ac 13 11 1c 8e 9e cb cd 9f 49 13 38 71 05 46 a0 86 b0 35 9d 83 82 99 70 5e 3e 4e 75 57 2e 6c ce ff 00 9e 81 36 76 6b 3b dc 9f 40 9a 90 92 23 1d 5e 13 8c d6 60 2d 73 7d bd 56 7c 23 6e 59 d0 f8 5e 98 3d a5 c5 a2 c0 80 ba 6d 34 41 8d 6e 9c 96 57 87 a9 3c 0a 36 12 06 67 00 5c 6d cc f2 0b 63 00 f2 0b 7b af 2b 34 ae 4c f6 b0 c6 a1 1f 82 c6 1e c0 05 33 5b 74 50 58 6c 46 8a 58 b9 1b ac 93 36 64 d8 dc 5c 05 cf e4 a5 47 70 2d 7f c9 40 88 96 9d bd ae ac 59 6b 6e 98 85 3c 1b 6c 4f e4 a4 c0 7c b6 ba 68 8f 2a 28 5d b8 4d 10 c9 0d 75 c9 01 2f 40 05 ca 65 84 87 14 a3 a9 17 37 59 ca 45 a4 4a 88 8b a9 80 d8 05 12 20 06 e7 d9 3a 65 d7 6b 22 2e 90 a4 ad 8f 34 5c ee 9d 36 ec Data Ascii: "Ko[YK2}"37@\'NZ]zZI8qF5p^>NuW.l6vk;@#^`-s}V\|#nY^=m4AnW<6g\mc{+4L3[tPXlFX6d\Gp-@Ykn<lO\|h*(]Mu/@e7YEJ :ek".4\6
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: da 33 3d a0 dc 0d ad d1 7a 98 eb 93 c9 c9 77 47 a3 3e 8f a4 2e c0 e8 0f e1 2e 1f 9a e7 b8 a3 0f f6 9d 74 45 c1 af 65 4c 82 37 75 04 df 29 ec 56 f3 e8 ef 4c 16 11 d2 67 fe ab 9a f1 0c 86 0e 28 c5 e0 7b 81 6b a6 2f 16 3a 86 bb 5f 62 16 d9 1d c5 18 e2 55 26 57 3d ce 82 a5 95 0d f2 b5 ce 2d 95 9d 0a de e1 93 00 61 7b 40 2d be a7 b1 d0 8f 45 91 96 31 57 4d 21 ff 00 11 8d f3 81 f7 db f8 87 70 a5 f0 fd 51 07 c1 91 da 01 bf a8 dd 73 4d 5a b3 b7 1b a7 5d 99 df 38 76 67 b0 cd 49 23 89 30 9f 29 ea c7 6d f2 5b 06 ae 67 85 d4 96 55 50 d4 87 03 9d be 0b db e9 b1 5d 26 27 83 cf 5e 8b 5c 6e e2 72 66 8d 48 94 d4 f3 53 2d 4e b5 68 64 87 02 34 48 d0 30 d0 44 8f a2 00 34 61 25 29 00 29 1a 20 8d 02 10 53 44 27 8a 41 09 88 8e 42 46 5f 45 20 b5 27 2a 09 a1 f4 11 20 91 60 41 04 Data Ascii: 3=zwG>..tEeL7u)VLg({k/:_bU&W=-a{@-E1WM!pQsMZ]8vgI#0)m[gUP]&'^\nrfHS-Nhd4H0D4a%)) SD'ABF_E '* `A
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: d1 d7 3b d9 4a 3d 4a 85 3b ac 0b b9 35 02 33 7c 47 58 68 f0 aa c9 9a 7c cc 88 80 7b 95 e6 3a 29 cc b5 12 e6 37 2e 79 3f f1 2e d7 f4 8f 88 18 30 51 08 f8 e7 78 bf a2 f3 ec 75 1e 0d 63 3a 3b f6 d9 4d ee 68 96 c3 d8 e5 39 0f 12 0e 40 02 a3 f0 cb 5c ec 4e 50 de 74 f2 fe 8b 4f 88 53 b6 78 5e 2d a4 8c d3 dc 5d 51 70 6b 07 f6 dd 33 5d cc b9 ae 1e a0 85 39 95 46 4f d8 d3 16 f3 8a f7 3b b5 1b cc 70 40 db 0f ee db a0 e5 a2 6a b3 18 34 f2 18 18 e6 19 03 33 bc b8 d9 91 37 f1 38 f7 e4 39 a4 ca 7c 08 8e 5f ba db 37 a0 b0 e7 d9 72 6a 96 55 56 54 48 d2 f7 16 39 f9 a5 94 13 e7 e9 a2 f3 21 8d 4e 4d b7 b2 3d 89 e4 70 82 a5 6d 9b 3a ce 2b 86 d2 fd 56 39 6b 9d 15 8c af 78 c9 0b 01 d3 40 3f 2e aa 8a 6c 47 1d 95 82 63 4d 46 d6 0b b9 ad 79 6b 5c 5a 7e e9 d7 5b 72 e6 b6 38 7c 9c Data Ascii: ;J=J;53\|GXh\|{:)7.y?.0Qxuc:;Mh9@\NPtOSx^-]Qpk3]9FO;p@j43789\|_7rjUVTH9!NM=pm:+V9kx@?.lGcMFyk\Z~[r8\|
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: ef c9 ec b7 18 43 3c c1 d6 ff 00 a2 c3 51 34 89 9b 75 d0 68 06 50 00 f9 a9 6f 82 92 d9 9a 96 92 47 b0 49 97 25 b5 42 17 79 46 fb 25 98 43 b5 3c d5 ee 61 5b 90 25 7c 64 1b 85 51 24 8d 69 20 0d 2c ad aa 21 89 ad b9 b9 54 4f 96 90 b8 80 eb 1e 77 59 ca 5f a9 ac 23 e2 c6 25 78 76 de ca 11 b3 8e 8a c3 c1 6b 87 94 e8 91 e0 e5 e4 a4 d3 81 96 c7 b5 82 9a c8 f6 b7 54 86 37 51 ba 9b 10 1b fb 26 95 b1 36 4b 85 bd 54 e6 34 11 a0 d9 35 13 06 8a 73 1b a2 de 95 1c f2 7b 88 1a 39 22 43 e5 3e a9 d7 0c ae fd 53 2f 1f 10 ea 16 6c 17 28 f2 37 12 48 e3 c5 b8 a5 fe ec e4 75 dd 52 62 2d b0 84 ff 00 18 fc d5 cf 16 31 d0 f1 9e 30 c7 0b 5e 60 47 7b 8d d5 36 25 61 18 23 93 9a 57 b1 85 ff 00 2e 3f ed 47 8f 97 fc c9 7f b9 9d 3f 81 1e df aa 55 82 40 ca f0 7e 61 74 8c 3c 39 e1 8f 02 cd Data Ascii: C<Q4uhPoGI%ByF%C<a[%\|dQ$i ,!TOwY_#%xvkT7Q&6KT45s{9"C>S/l(7HuRb-10^`G{6%a#W.?G?U@~at<9
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 3e 41 18 91 a4 58 f8 79 ba df 92 aa 82 66 b6 af 43 a3 c1 53 6b c7 87 58 e8 88 bd e2 70 bf aa cd 46 f7 32 46 c8 76 bf ea 14 bd d1 a2 75 24 77 df a3 ec 5c 45 3c f8 7c 86 ed 90 78 8c f5 b6 ab b0 47 e5 68 ca e5 e5 dc 02 b9 f0 d4 d2 54 31 e5 ae 6b da 0b 80 e4 74 5e 8e c3 ab 7c 78 cb 64 68 6b c6 e2 ff 00 22 ab 0c b9 8b 33 ea 21 ba 92 ee 5f 35 f7 09 cc ca 13 5d b1 f9 a7 b3 2d ce 42 46 64 33 28 f9 91 e6 4c 2c 7f 32 19 93 39 90 cc 81 58 f8 72 50 72 8d 99 2b 32 07 64 80 e4 ac ca 36 64 ac c9 05 92 33 21 99 31 99 0c c8 1d 97 97 45 74 9b a2 25 58 0a ba 49 29 24 a4 17 20 05 17 26 8b 92 4b 93 4e 72 60 1b 9c a3 b9 c8 dc e5 1d ce 40 82 7b 94 77 39 1b 9c 99 71 4c 45 be 1e eb b4 8e ea da ea 8b 0e 77 99 c1 5d df 45 9c b9 2f b2 21 d5 9f b3 72 a0 74 cc 8d af 73 dd 66 8d 49 2a Data Ascii: >AXyfCSkXpF2Fvu$w\E<\|xGhT1kt^\|xdhk"3!_5]-BFd3(L,29XrPr+2d6d3!1Et%XI)$ &KNr`@{w9qLEw]E/!rtsfI*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49863	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1022	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Retif_AtomicDesign/vendor/swiper/swiper-bundle.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:34 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 143707 Content-Type: application/javascript Etag: "671a1fb0-9ae4" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016277f54ae9c39150e6a5904e595e-02c9c02b94145bef-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:34 GMT Age: 72196 X-Served-By: cache-par-lfpg1960057-PAR, cache-dfw-kdal2120113-DFW X-Cache: HIT, HIT X-Cache-Hits: 79, 1 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 77 69 70 65 72 20 38 2e 34 2e 35 0a 20 2a 20 4d 6f 73 74 20 6d 6f 64 65 72 6e 20 6d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 77 69 70 65 72 6a 73 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2d 32 30 32 32 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 6f 6e 3a 20 4e 6f 76 65 6d 62 65 72 20 32 31 2c 20 32 30 32 32 0a 20 2a 2f Data Ascii: /** * Swiper 8.4.5 * Most modern mobile touch slider and framework with hardware accelerated transitions * https://swiperjs.com * * Copyright 2014-2022 Vladimir Kharlampidi * * Released under the MIT License * * Released on: November 21, 2022 */
2024-10-25 08:16:34 UTC	16384	IN	Data Raw: 72 73 7c 7c 73 2e 64 65 73 74 72 6f 79 65 64 3f 73 3a 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 3f 28 65 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 76 6f 69 64 20 30 3d 3d 3d 74 3f 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 3d 5b 5d 3a 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 66 6f 72 45 61 63 68 28 28 28 61 2c 69 29 3d 3e 7b 28 61 3d 3d 3d 74 7c 7c 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 26 26 61 2e 5f 5f 65 6d 69 74 74 65 72 50 72 6f 78 79 3d 3d 3d 74 29 26 26 73 2e 65 76 65 6e 74 73 4c 69 73 74 65 6e 65 72 73 5b 65 5d 2e 73 70 6c 69 63 65 28 69 2c 31 29 7d 29 29 7d 29 29 2c 73 29 3a 73 7d 2c 65 6d 69 Data Ascii: rs\|\|s.destroyed?s:s.eventsListeners?(e.split(" ").forEach((e=>{void 0===t?s.eventsListeners[e]=[]:s.eventsListeners[e]&&s.eventsListeners[e].forEach(((a,i)=>{(a===t\|\|a.__emitterProxy&&a.__emitterProxy===t)&&s.eventsListeners[e].splice(i,1)}))})),s):s},emi
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 2c 72 2e 74 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 2c 62 29 29 7d 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 2c 72 2e 24 77 72 61 70 70 65 72 45 6c 5b 30 5d 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 72 2e 6f 6e 53 6c 69 64 65 54 6f 57 72 61 70 70 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 29 29 2c 21 30 7d 2c 73 6c 69 64 65 54 6f 4c 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 2c 61 29 7b 69 66 28 76 Data Ascii: oWrapperTransitionEnd,r.transitionEnd(s,b))}),r.$wrapperEl[0].addEventListener("transitionend",r.onSlideToWrapperTransitionEnd),r.$wrapperEl[0].addEventListener("webkitTransitionEnd",r.onSlideToWrapperTransitionEnd)),!0},slideToLoop:function(e,t,s,a){if(v
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 65 72 4d 6f 64 69 66 69 65 72 43 6c 61 73 73 29 3b 74 2e 70 75 73 68 28 2e 2e 2e 6c 29 2c 69 2e 61 64 64 43 6c 61 73 73 28 5b 2e 2e 2e 74 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 65 2e 65 6d 69 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 65 73 28 29 7d 2c 72 65 6d 6f 76 65 43 6c 61 73 73 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 7b 24 65 6c 3a 65 2c 63 6c 61 73 73 4e 61 6d 65 73 3a 74 7d 3d 74 68 69 73 3b 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 74 68 69 73 2e 65 6d 69 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 65 73 28 29 7d 7d 3b 76 61 72 20 57 3d 7b 69 6e 69 74 3a 21 30 2c 64 69 72 65 63 74 69 6f 6e 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 6f 75 63 68 45 76 65 6e 74 73 54 61 72 67 65 74 3a 22 Data Ascii: erModifierClass);t.push(...l),i.addClass([...t].join(" ")),e.emitContainerClasses()},removeClasses:function(){const{$el:e,classNames:t}=this;e.removeClass(t.join(" ")),this.emitContainerClasses()}};var W={init:!0,direction:"horizontal",touchEventsTarget:"
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 69 64 65 73 2e 6c 65 6e 67 74 68 3b 73 2b 3d 31 29 74 2e 70 75 73 68 28 73 29 3b 65 2e 72 65 6d 6f 76 65 53 6c 69 64 65 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 29 7b 63 6f 6e 73 74 7b 65 66 66 65 63 74 3a 74 2c 73 77 69 70 65 72 3a 73 2c 6f 6e 3a 61 2c 73 65 74 54 72 61 6e 73 6c 61 74 65 3a 69 2c 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 3a 72 2c 6f 76 65 72 77 72 69 74 65 50 61 72 61 6d 73 3a 6e 2c 70 65 72 73 70 65 63 74 69 76 65 3a 6c 2c 72 65 63 72 65 61 74 65 53 68 61 64 6f 77 73 3a 6f 2c 67 65 74 45 66 66 65 63 74 50 61 72 61 6d 73 3a 64 7d 3d 65 3b 6c 65 74 20 63 3b 61 28 22 62 65 66 6f 72 65 49 6e 69 74 22 2c 28 28 29 3d 3e 7b 69 66 28 73 2e 70 61 72 61 6d 73 2e 65 66 66 65 63 74 21 3d 3d 74 29 72 65 74 75 72 6e 3b 73 2e 63 6c 61 73 73 4e Data Ascii: ides.length;s+=1)t.push(s);e.removeSlide(t)}function te(e){const{effect:t,swiper:s,on:a,setTranslate:i,setTransition:r,overwriteParams:n,perspective:l,recreateShadows:o,getEffectParams:d}=e;let c;a("beforeInit",(()=>{if(s.params.effect!==t)return;s.classN
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 2e 6e 61 76 69 67 61 74 69 6f 6e 44 69 73 61 62 6c 65 64 43 6c 61 73 73 29 2c 70 28 29 2c 6c 28 29 7d 2c 64 69 73 61 62 6c 65 3a 68 2c 75 70 64 61 74 65 3a 6c 2c 69 6e 69 74 3a 70 2c 64 65 73 74 72 6f 79 3a 75 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 7b 73 77 69 70 65 72 3a 74 2c 65 78 74 65 6e 64 50 61 72 61 6d 73 3a 73 2c 6f 6e 3a 61 2c 65 6d 69 74 3a 69 7d 3d 65 3b 63 6f 6e 73 74 20 72 3d 22 73 77 69 70 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 22 3b 6c 65 74 20 6e 3b 73 28 7b 70 61 67 69 6e 61 74 69 6f 6e 3a 7b 65 6c 3a 6e 75 6c 6c 2c 62 75 6c 6c 65 74 45 6c 65 6d 65 6e 74 3a 22 73 70 61 6e 22 2c 63 6c 69 63 6b 61 62 6c 65 3a 21 31 2c 68 69 64 65 4f 6e 43 6c 69 63 6b 3a 21 31 2c 72 65 6e 64 65 72 42 75 6c 6c 65 74 3a 6e 75 6c 6c 2c 72 65 Data Ascii: .navigationDisabledClass),p(),l()},disable:h,update:l,init:p,destroy:u})},function(e){let{swiper:t,extendParams:s,on:a,emit:i}=e;const r="swiper-pagination";let n;s({pagination:{el:null,bulletElement:"span",clickable:!1,hideOnClick:!1,renderBullet:null,re
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 6d 69 6e 52 61 74 69 6f 2d 69 2e 73 63 61 6c 65 2b 31 29 2a 2a 2e 35 29 2c 6d 2e 24 69 6d 61 67 65 45 6c 2e 74 72 61 6e 73 66 6f 72 6d 28 60 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 20 73 63 61 6c 65 28 24 7b 69 2e 73 63 61 6c 65 7d 29 60 29 29 3a 22 67 65 73 74 75 72 65 63 68 61 6e 67 65 22 3d 3d 3d 65 2e 74 79 70 65 26 26 62 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 63 6f 6e 73 74 20 73 3d 74 2e 64 65 76 69 63 65 2c 61 3d 74 2e 73 75 70 70 6f 72 74 2c 69 3d 74 2e 70 61 72 61 6d 73 2e 7a 6f 6f 6d 2c 72 3d 74 2e 7a 6f 6f 6d 3b 69 66 28 21 61 2e 67 65 73 74 75 72 65 73 29 7b 69 66 28 21 6f 7c 7c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 22 74 6f 75 63 68 65 6e 64 22 21 3d 3d 65 2e 74 79 70 65 7c 7c 22 74 6f 75 63 68 65 6e 64 22 3d 3d Data Ascii: minRatio-i.scale+1)**.5),m.$imageEl.transform(`translate3d(0,0,0) scale(${i.scale})`)):"gesturechange"===e.type&&b(e)}function y(e){const s=t.device,a=t.support,i=t.params.zoom,r=t.zoom;if(!a.gestures){if(!o\|\|!c)return;if("touchend"!==e.type\|\|"touchend"==
2024-10-25 08:16:35 UTC	16384	IN	Data Raw: 73 61 67 65 29 3a 72 28 73 2e 6e 65 78 74 53 6c 69 64 65 4d 65 73 73 61 67 65 29 29 2c 74 2e 6e 61 76 69 67 61 74 69 6f 6e 26 26 74 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 24 70 72 65 76 45 6c 26 26 61 2e 69 73 28 74 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 24 70 72 65 76 45 6c 29 26 26 28 74 2e 69 73 42 65 67 69 6e 6e 69 6e 67 26 26 21 74 2e 70 61 72 61 6d 73 2e 6c 6f 6f 70 7c 7c 74 2e 73 6c 69 64 65 50 72 65 76 28 29 2c 74 2e 69 73 42 65 67 69 6e 6e 69 6e 67 3f 72 28 73 2e 66 69 72 73 74 53 6c 69 64 65 4d 65 73 73 61 67 65 29 3a 72 28 73 2e 70 72 65 76 53 6c 69 64 65 4d 65 73 73 61 67 65 29 29 2c 74 2e 70 61 67 69 6e 61 74 69 6f 6e 26 26 61 2e 69 73 28 55 28 74 2e 70 61 72 61 6d 73 2e 70 61 67 69 6e 61 74 69 6f 6e 2e 62 75 6c 6c 65 74 43 6c 61 73 73 29 29 26 26 Data Ascii: sage):r(s.nextSlideMessage)),t.navigation&&t.navigation.$prevEl&&a.is(t.navigation.$prevEl)&&(t.isBeginning&&!t.params.loop\|\|t.slidePrev(),t.isBeginning?r(s.firstSlideMessage):r(s.prevSlideMessage)),t.pagination&&a.is(U(t.params.pagination.bulletClass))&&
2024-10-25 08:16:35 UTC	12635	IN	Data Raw: 54 6f 43 6c 6f 73 65 73 74 28 29 3b 72 2e 66 72 65 65 4d 6f 64 65 26 26 61 28 22 5f 66 72 65 65 4d 6f 64 65 4e 6f 4d 6f 6d 65 6e 74 75 6d 52 65 6c 65 61 73 65 22 29 7d 28 21 72 2e 66 72 65 65 4d 6f 64 65 2e 6d 6f 6d 65 6e 74 75 6d 7c 7c 63 3e 3d 72 2e 6c 6f 6e 67 53 77 69 70 65 73 4d 73 29 26 26 28 74 2e 75 70 64 61 74 65 50 72 6f 67 72 65 73 73 28 29 2c 74 2e 75 70 64 61 74 65 41 63 74 69 76 65 49 6e 64 65 78 28 29 2c 74 2e 75 70 64 61 74 65 53 6c 69 64 65 73 43 6c 61 73 73 65 73 28 29 29 7d 7d 7d 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 2c 73 2c 61 2c 7b 73 77 69 70 65 72 3a 69 2c 65 78 74 65 6e 64 50 61 72 61 6d 73 3a 72 7d 3d 65 3b 72 28 7b 67 72 69 64 3a 7b 72 6f 77 73 3a 31 2c 66 69 6c 6c 3a 22 63 6f 6c 75 6d 6e 22 7d 7d 29 2c Data Ascii: ToClosest();r.freeMode&&a("_freeModeNoMomentumRelease")}(!r.freeMode.momentum\|\|c>=r.longSwipesMs)&&(t.updateProgress(),t.updateActiveIndex(),t.updateSlidesClasses())}}}})},function(e){let t,s,a,{swiper:i,extendParams:r}=e;r({grid:{rows:1,fill:"column"}}),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49866	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1317	OUT	GET /media/catalog/product/6/0/602991_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:34 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2542 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "PrOA0OwTmIFCgys7+lVAD8Z/LEuKo49pLNxN8jbNaVg" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=81031 idim=1000x1000 ifmt=jpeg ofsz=2542 odim=200x200 ofmt=webp Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e870004b09dd0352b659aa21-598ff798c9f0d2c2-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:34 GMT X-Served-By: cache-par-lfpg1960030-PAR, cache-dfw-kdal2120050-DFW X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 52 49 46 46 e6 09 00 00 57 45 42 50 56 50 38 20 da 09 00 00 d0 33 00 9d 01 2a c8 00 c8 00 3e 6d 36 95 48 a4 22 a4 a1 22 91 4b 90 90 0d 89 69 6e ee 7e 90 72 f0 0d 4e 45 c6 a9 97 d5 fe 3a bb 4c ec c9 d8 df ee 5e 20 4e c3 b4 0a d3 9d 53 65 39 ca a3 77 ff b7 7a 86 79 70 7b 35 26 15 ef 69 60 a9 43 81 95 7a 1e 55 6b a7 79 aa df c9 ae 4c fb 56 4e db 60 6d 1f 1a 4f d3 1b 61 4c 74 1a 97 b5 e3 84 84 76 cd f8 55 6f 10 e0 46 9e d0 fe ad 71 02 07 f1 25 d3 2b c4 39 c8 21 ca 94 3c b2 51 fe 7f e9 44 35 c6 fe a5 b1 56 32 11 6f 3b 5e 31 f9 05 f1 a1 0e 40 7a 10 30 73 3e 2e 2c 19 01 d3 ea 3a 3c 19 9e 81 35 a7 56 1b a1 55 3f 6b 59 d2 f8 ab 27 64 84 f0 0b 50 f1 32 83 96 a6 cf 1c 54 ab 48 43 f8 b3 af d9 e1 7c 7e 58 34 1a ac 12 70 2d 38 b3 fa e1 8f 90 ec b6 28 cf db d5 a5 91 cf Data Ascii: RIFFWEBPVP8 3*>m6H""Kin~rNE:L^ NSe9wzyp{5&i`CzUkyLVN`mOaLtvUoFq%+9!<QD5V2o;^1@z0s>.,:<5VU?kY'dP2THC\|~X4p-8(
2024-10-25 08:16:34 UTC	1163	IN	Data Raw: 22 43 91 f7 cf 76 6a b6 62 13 b5 c5 40 42 4d f9 8b ef d6 80 ad f7 6f e2 b9 3d 20 6a f2 ed 31 03 8f c2 9d a1 ad 9c aa 2a ee 0f 98 0d 7a 65 ce d4 ba ee 40 0f 92 99 99 84 8b ab e7 b0 12 a8 0c b0 3d 7e c4 f7 62 c4 c6 49 a3 b4 8d 55 08 bf 8b e6 0f c0 de 4f fb 18 92 e7 2a 54 27 74 b0 4a 14 59 d9 54 23 36 36 4b 1a 9a 69 8d fc a3 42 0e 0b e1 55 5e 56 f3 be bc d9 79 b7 86 d8 62 08 77 51 72 38 08 62 7f 09 9c ba ee d5 9d 18 88 7b 94 65 48 4f a3 1a 0c 19 1f b4 f2 b6 bc 65 23 9a 0f a4 ae a8 3d ac 2a 9d 4a 69 6c 4c 72 48 ea 73 62 e7 3b c7 fd f9 70 e2 14 c6 9e fb 9e a2 33 78 63 81 a7 9a a9 40 91 2a 8a 35 69 3c aa 12 24 53 4a 0c 7d 3b 6e af a1 d6 83 4a 55 bd 4c 22 d6 d1 40 90 59 f6 31 76 80 75 a6 96 a6 50 56 23 5e f0 e8 3c 92 3a 2a 35 aa 7f 2b d3 6e b8 a2 18 f3 71 24 f3 Data Ascii: "Cvjb@BMo= j1ze@=~bIUOT'tJYT#66KiBU^VybwQr8b{eHOe#=JilLrHsb;p3xc@5i<$SJ};nJUL"@Y1vuPV#^<:*5+nq$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49864	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:34 UTC	1005	OUT	GET /static/version1729765264/frontend/Retif/default/fr_FR/Magento_PageBuilder/js/glider.min.js HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; FPLC=M20%2F5%2Fi9qAVy0Jr%2F3QsiAl4FCLS403WCaAMmNphk5ex9a8c%2F4heR3q3qq%2FPE%2BvjVpcMjwkhZq%2F102SPgoDEWozM2VHslDf%2F4olvNGbgKCqZ6gCnslIk8INILEBrdpw%3D%3D
2024-10-25 08:16:34 UTC	677	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8327 Content-Type: application/javascript Etag: "671a1fb0-bb5" Last-Modified: Thu, 24 Oct 2024 10:21:36 GMT Traceresponse: 00-18016277f73093aec2ddb6f46d0af75d-9511c3cce289ad84-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:34 GMT Age: 72196 X-Served-By: cache-par-lfpg1960069-PAR, cache-dfw-ktki8620048-DFW X-Cache: HIT, HIT X-Cache-Hits: 47, 1 Vary: Accept-Encoding country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 2f 2a 20 40 70 72 65 73 65 72 76 65 0a 20 20 20 20 5f 5f 5f 5f 5f 20 5f 5f 20 5f 20 20 20 20 20 5f 5f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 0a 20 20 20 2f 20 5f 5f 5f 2f 2f 20 2f 28 5f 29 5f 5f 5f 2f 20 2f 5f 5f 5f 20 20 5f 5f 5f 5f 20 20 20 20 20 20 28 5f 29 5f 5f 5f 0a 20 20 2f 20 28 5f 20 2f 2f 20 2f 2f 20 2f 2f 20 5f 20 20 2f 2f 20 2d 5f 29 2f 20 5f 5f 2f 5f 20 20 20 20 2f 20 2f 28 5f 2d 3c 0a 20 20 5c 5f 5f 5f 2f 2f 5f 2f 2f 5f 2f 20 5c 5f 2c 5f 2f 20 5c 5f 5f 2f 2f 5f 2f 20 20 28 5f 29 5f 5f 2f 20 2f 2f 5f 5f 5f 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 5f 2f 0a 0a 20 20 56 65 72 73 69 6f 6e 3a 20 31 2e 37 2e 34 0a 20 20 41 75 74 68 6f 72 3a 20 4e 69 63 6b 20 50 69 73 63 69 Data Ascii: /* @preserve _____ __ _ __ _ / ___// /(_)___/ /___ ____ (_)___ / (_ // // // _ // -_)/ __/_ / /(_-< \___//_//_/ \_,_/ \__//_/ (_)__/ //___/ \|___/ Version: 1.7.4 Author: Nick Pisci
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 65 2c 74 29 7b 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 67 6c 69 64 65 72 2d 73 6c 69 64 65 22 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 73 6c 69 64 65 22 2c 74 29 7d 29 2c 69 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3d 69 2e 65 6c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 76 61 72 20 73 2c 6c 3d 69 2e 73 65 74 74 69 6e 67 73 42 72 65 61 6b 70 6f 69 6e 74 28 29 3b 74 3d 74 7c 7c 6c 2c 22 61 75 74 6f 22 21 3d 3d 69 2e 6f 70 74 2e 73 6c 69 64 65 73 54 6f 53 68 6f 77 26 26 76 6f 69 64 20 30 3d 3d 3d 69 2e 6f 70 74 2e 5f 61 75 74 6f 53 6c 69 64 65 7c 7c 28 73 3d 69 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 2f 69 2e 6f 70 74 2e 69 74 65 6d 57 69 64 74 68 2c 69 2e 6f 70 74 2e 5f 61 75 74 6f 53 6c 69 64 65 3d 69 2e Data Ascii: e,t){e.classList.add("glider-slide"),e.setAttribute("data-gslide",t)}),i.containerWidth=i.ele.clientWidth;var s,l=i.settingsBreakpoint();t=t\|\|l,"auto"!==i.opt.slidesToShow&&void 0===i.opt._autoSlide\|\|(s=i.containerWidth/i.opt.itemWidth,i.opt._autoSlide=i.
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 2c 22 61 64 64 22 2c 65 29 7d 2c 74 2e 62 75 69 6c 64 44 6f 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 65 2e 6f 70 74 2e 64 6f 74 73 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 70 74 2e 64 6f 74 73 3f 65 2e 64 6f 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 65 2e 6f 70 74 2e 64 6f 74 73 29 3a 65 2e 64 6f 74 73 3d 65 2e 6f 70 74 2e 64 6f 74 73 2c 65 2e 64 6f 74 73 29 7b 65 2e 64 6f 74 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 65 2e 64 6f 74 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 67 6c 69 64 65 72 2d 64 6f 74 73 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 4d 61 74 68 2e 63 65 69 6c 28 65 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2f Data Ascii: ,"add",e)},t.buildDots=function(){var e=this;if(e.opt.dots){if("string"==typeof e.opt.dots?e.dots=document.querySelector(e.opt.dots):e.dots=e.opt.dots,e.dots){e.dots.innerHTML="",e.dots.classList.add("glider-dots");for(var t=0;t<Math.ceil(e.slides.length/
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 74 68 29 3e 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6e 2e 74 72 61 63 6b 57 69 64 74 68 29 7c 7c 74 29 2c 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 3f 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 21 30 29 3a 6e 2e 61 72 72 6f 77 73 2e 6e 65 78 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 21 31 29 29 29 2c 6e 2e 73 6c 69 64 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 2f 6e 2e 69 74 65 6d 57 69 64 74 68 29 2c 6e 2e 70 61 67 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 6e 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c Data Ascii: th)>=Math.floor(n.trackWidth)\|\|t),n.arrows.next.classList.contains("disabled")?n.arrows.next.setAttribute("aria-disabled",!0):n.arrows.next.setAttribute("aria-disabled",!1))),n.slide=Math.round(n.ele.scrollLeft/n.itemWidth),n.page=Math.round(n.ele.scrollL
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 7d 2c 6e 2e 6f 70 74 2e 73 63 72 6f 6c 6c 4c 6f 63 6b 44 65 6c 61 79 7c 7c 32 35 30 29 29 7d 2c 74 2e 67 65 74 43 75 72 72 65 6e 74 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 72 6f 75 6e 64 28 65 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 2f 65 2e 69 74 65 6d 57 69 64 74 68 29 7d 2c 74 2e 73 63 72 6f 6c 6c 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 6f 2c 72 3d 74 68 69 73 2c 73 3d 65 3b 72 65 74 75 72 6e 2b 2b 72 2e 61 6e 69 6d 61 74 65 5f 69 64 2c 65 3d 21 30 3d 3d 3d 74 3f 28 65 2a 3d 72 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 72 2e 69 74 65 Data Ascii: },n.opt.scrollLockDelay\|\|250))},t.getCurrentSlide=function(){var e=this;return e.round(e.ele.scrollLeft/e.itemWidth)},t.scrollItem=function(e,t,i){i&&i.preventDefault();var o,r=this,s=e;return++r.animate_id,e=!0===t?(e*=r.containerWidth,Math.round(e/r.ite
2024-10-25 08:16:34 UTC	1379	IN	Data Raw: 69 6d 61 74 65 5f 69 64 3f 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6e 29 3a 28 72 2e 65 6c 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 74 2c 6f 26 26 6f 2e 63 61 6c 6c 28 72 29 29 7d 3b 61 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6e 29 7d 2c 74 2e 72 65 6d 6f 76 65 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 74 2e 74 72 61 63 6b 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2e 73 6c 69 64 65 73 5b 65 5d 29 2c 74 2e 72 65 66 72 65 73 68 28 21 30 29 2c 74 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 22 29 29 7d 2c 74 2e 61 64 64 49 74 65 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 74 72 61 63 6b 2e 61 70 70 Data Ascii: imate_id?a.requestAnimationFrame(n):(r.ele.scrollLeft=t,o&&o.call(r))};a.requestAnimationFrame(n)},t.removeItem=function(e){var t=this;t.slides.length&&(t.track.removeChild(t.slides[e]),t.refresh(!0),t.emit("remove"))},t.addItem=function(e){this.track.app
2024-10-25 08:16:34 UTC	53	IN	Data Raw: 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 65 2c 69 5b 65 5d 29 7d 29 7d 2c 65 7d 29 3b 0a Data Ascii: Object.keys(i).forEach(function(e){o(e,i[e])})},e});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49871	157.240.201.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	678	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190871&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&eid=780258551.page_view&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:35 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7429624245094207896", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7429624245094207896"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-25 08:16:35 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-25 08:16:35 UTC	1707	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49870	157.240.201.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	645	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190869&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:35 UTC	747	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7429624245504240400", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7429624245504240400"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-10-25 08:16:35 UTC	1859	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-10-25 08:16:35 UTC	1707	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 3d 28 73 65 6c 66 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), browsing-topics=(self), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49869	157.240.201.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	641	OUT	GET /tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190871&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmSimo-GTM-WebTemplate&ec=1&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&eid=780258551.page_view&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:35 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 25 Oct 2024 08:16:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49868	157.240.201.35	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	608	OUT	GET /tr/?id=671587811394625&ev=PageView&dl=https%3A%2F%2Fwww.retif.eu%2F&rl=&if=false&ts=1729844190869&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.1.1729844190867.97636512878267&ler=empty&cdl=API_unavailable&it=1729844188415&coo=false&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:16:35 UTC	465	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=118, rtx=0, c=10, mss=1380, tbw=3437, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Fri, 25 Oct 2024 08:16:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49873	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	1317	OUT	GET /media/catalog/product/6/0/603908_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:35 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3616 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "xbHetnb8uJ3QR5xrEQ+zKvDriv9FEDvQike/3kPoZ9c" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=89291 idim=1000x1000 ifmt=jpeg ofsz=3616 odim=200x200 ofmt=webp Fastly-Io-Served-By: img07-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162780aafdb9577c67ed8081ca587-d33f22a6a4c3d7c7-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960062-PAR, cache-dfw-kdfw8210151-DFW X-Cache: HIT, HIT X-Cache-Hits: 28, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 52 49 46 46 18 0e 00 00 57 45 42 50 56 50 38 20 0c 0e 00 00 10 47 00 9d 01 2a c8 00 c8 00 3e 6d 2e 93 46 a4 22 a1 a1 2b d3 ac 88 80 0d 89 69 2f 7c 24 1c e9 32 bf 33 d8 5c 1d 6f 47 4d 22 21 4d 9e 7e 7f ac ef 9f f7 4f 10 8f db f6 d8 c0 27 71 cf d6 f9 99 c7 47 fd 1f 10 2f c2 ff c6 f5 42 f3 a8 d2 67 ed 1e 8f bd 51 51 91 d3 84 38 ab 58 41 64 de 85 57 ce 5b 37 ba 88 f2 07 e2 39 af 4a a1 d5 9b 3d f5 91 42 47 62 9c bf 5f 8f 55 a7 b3 c6 6f 9d d2 12 de a0 cf fa fc aa 52 b7 87 15 06 a7 d0 ae 9c 7c da 2e 84 e4 23 a7 ab 1b 6d c6 4d 4e 7f 77 e5 4c 74 2d f1 aa 6f 6a 46 c6 9b 4b ba 08 81 3d dc db bc ea a2 63 76 f7 e2 16 84 c6 cb e2 7f 6c 3d 94 a1 c5 91 3e 71 e7 c8 36 31 5e d2 db ab 14 c8 2f 32 24 74 22 d0 11 65 f0 0f 41 0a 1e 99 21 a2 e6 f1 e5 25 29 e4 92 8d 6a 88 23 86 Data Ascii: RIFFWEBPVP8 G*>m.F"+i/\|$23\oGM"!M~O'qG/BgQQ8XAdW[79J=BGb_UoR\|.#mMNwLt-ojFK=cvl=>q61^/2$t"eA!%)j#
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 63 ca 01 1c 5a 92 a0 82 fd e0 98 07 56 56 d6 e0 2d 0a 41 8b 57 de 67 59 62 ee 5e 12 c6 f8 ba 66 38 2c 86 65 63 8d 55 fe c0 f3 a1 1f f1 75 b0 bf e6 56 e3 b7 4e d4 a0 df 88 10 47 01 9c 19 60 5b 73 f3 de a5 32 03 70 62 5c 0a 1d 88 1e e1 20 3f 89 f9 0e 86 32 22 2d 1b 70 0b f9 cb 74 3e 9b f8 09 8c be 69 01 07 23 da 04 9f e4 9b 64 98 a4 39 23 ad f9 26 4d aa ca 66 5c a5 92 fe a7 b7 00 af b7 0b 86 0c 14 be ba c6 22 41 70 88 a3 56 93 29 80 9f 03 b1 e2 3b a6 a5 78 bc 7b e5 33 ed 26 e7 5a 7e 3f 4f fe 68 76 65 bf 68 e5 df 50 40 c8 61 35 68 ca 59 f8 a6 d5 5a 0d 71 da 6a a6 1f 48 48 ff 92 52 8c e3 68 89 8f bb b2 80 0c 2e 1c 2f 0c 79 a7 7d 2a b3 77 8d 50 02 07 a6 28 46 b1 22 71 66 bd 5a 1a 88 81 cc ce 76 0e 7e 64 78 e2 19 8a bc 4f b4 18 69 00 f7 31 70 4e 2a 45 f0 47 44 Data Ascii: cZVV-AWgYb^f8,ecUuVNG`[s2pb\ ?2"-pt>i#d9#&Mf\"ApV);x{3&Z~?OhvehP@a5hYZqjHHRh./y}wP(F"qfZv~dxOi1pNEGD
2024-10-25 08:16:35 UTC	858	IN	Data Raw: 95 6a 48 9d 7f de f2 54 87 91 df bb 09 f3 3d de e0 a0 b2 c2 d8 be 11 57 c3 23 aa cf aa 0e 42 bc e1 a9 c8 ae fd 16 66 16 08 ed 90 9f ab 3c 97 b5 a2 47 90 c2 ca aa 3f b7 0a 22 d0 9a 55 d2 74 fb e2 1a 00 94 5b f2 9c b1 a4 1a 40 3c 57 27 d8 c1 77 5b 83 8a 18 21 16 29 17 a6 88 c0 4e 76 d6 a1 02 0a 06 82 9e 54 f0 a1 48 5d a1 c3 4e 87 d3 5c 85 c7 7d ec 40 23 bf c3 24 7b cf 8e 00 d1 66 70 2b 7b 7d d6 c0 23 9a f4 e1 b5 ce 59 6d fe a9 63 4f ac c1 af 63 d0 1f de ef e9 92 72 26 b7 99 60 31 37 39 5b 3a d4 d2 ff 5d a5 54 f9 38 91 0a d6 2e d5 00 2d 00 91 28 00 7f 23 c1 3a 1e d1 7d e5 3a d1 34 69 1a a0 4b 4a 28 d0 0a 9a 6b be 10 3d a6 45 db ce e7 28 ca 64 39 0d f3 a6 0b 34 ca c5 58 91 a7 06 23 57 45 b5 92 be 9a cd 89 b0 9c 00 e9 3e 86 a0 92 ba 6a ea 7e df 4b 00 c1 02 33 Data Ascii: jHT=W#Bf<G?"Ut[@<W'w[!)NvTH]N\}@#${fp+{}#YmcOcr&`179[:]T8.-(#:}:4iKJ(k=E(d94X#WE>j~K3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49872	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	1317	OUT	GET /media/catalog/product/5/0/502885_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:35 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8474 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "GWIEgQgrgRH0m0Ld/V4otyec+i638IurO/uuS2wHZM0" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=164249 idim=1000x1000 ifmt=jpeg ofsz=8474 odim=200x200 ofmt=webp Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278098228c577471f700e0c0e0d-89c4ae6c423ca03f-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960058-PAR, cache-dfw-kdfw8210100-DFW X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 52 49 46 46 12 21 00 00 57 45 42 50 56 50 38 20 06 21 00 00 d0 69 00 9d 01 2a c8 00 c8 00 3e 6d 2e 91 46 24 22 a1 a1 2d 1d 39 e8 80 0d 89 65 6e dd 5f a8 5d 17 be aa 7e fd d0 77 aa 0f 8f ef df c4 4f a7 7f f0 9b bd f9 e6 7d 33 7f 7a df 9f e8 a7 f5 b1 ff 4d 92 ca a3 be 0a fe 2f f2 ff e3 7f bb 7e eb 7f 77 f6 b5 c9 7f 51 1f 46 fa 8d fc af ef 4f ef ff c0 7a 05 ff 63 fc 17 8a bf 16 3e 77 f6 05 fc 8b fa 3f fb 8f eb 9e a7 3f 41 fe fb b7 43 61 ff 03 ff 97 fd 27 b0 2f b4 3f 50 ff 99 fe 03 c5 3f fc ff ef fe a5 fd 72 ff b7 ee 01 fc e7 fa 7f fd af 51 7f d5 78 11 7d b3 fd f7 b0 0f f3 ef f0 bf b5 7e eb 1f d9 7f f2 ff 61 fe c7 d2 cf d3 7f fa 7f d6 7c 03 ff 3c fe e7 e9 dd ec 57 f7 97 ff ff bb b1 e9 fe d4 d0 c7 21 25 d8 56 5b 7d 79 48 61 7e 12 1e 99 91 0d dd bd 1a 7f 31 e9 Data Ascii: RIFF!WEBPVP8 !i*>m.F$"-9en_]~wO}3zM/~wQFOzc>w??ACa'/?P?rQx}~a\|<W!%V[}yHa~1
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 84 99 33 c8 bc a8 1d 0a cb f6 cf 6d 29 43 dd 22 0b b6 a0 55 04 9a 20 5b aa 02 bc 44 47 38 53 77 a1 b2 cb 91 da 12 55 af 87 fc cb a7 05 0e 45 d5 54 19 ca 97 d7 51 fe 46 d3 6e db 91 97 a1 76 61 fa d1 2f f0 a2 72 fa 91 87 dc dc 64 ea fa 24 9d c4 ef 5f 7a 14 c1 72 6d 8e ed 4a 5e 0b e8 39 b5 11 bd 9a bb 5b cc 89 6f c7 b4 92 97 f1 9b ec 0d 8a 09 a3 0d bd 1a e1 a1 30 c6 ce 81 31 99 8c 74 d1 78 7b bf c4 75 7c ac c5 64 2f 10 a2 98 22 b8 ae 99 75 6d 2e 06 4b 9e a1 f4 2a 02 c5 4d 5a 86 36 ac dc e6 b7 17 ec b3 ef cb 30 de 50 2b ed 8a 95 62 ff 60 1a 29 7b fd 2c 59 52 0b ea 9b 33 2e a0 a6 63 4c ae 91 84 22 f1 78 83 99 20 a8 4d 57 58 5e ad 52 73 cc 32 70 42 a9 fd 66 8c a2 92 59 8f 03 eb 35 b5 62 e9 0a 55 6c 06 f1 bc b5 58 fe b1 2d ab 54 d4 88 ca f9 d6 9f 1e ea df 33 10 Data Ascii: 3m)C"U [DG8SwUETQFnva/rd$_zrmJ^9[o01tx{u\|d/"um.K*MZ60P+b`){,YR3.cL"x MWX^Rs2pBfY5bUlX-T3
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 05 e8 50 56 14 bd 79 dc 14 39 ca 81 d8 ac ae 24 68 ec 22 ea be 68 3b 8a 8a 22 6e 34 0a ba 8a bd 4a dd e8 e0 3b d3 27 31 6c 2f 38 d9 1f c0 6b b2 d6 a5 a5 ff da 80 d7 15 1b 59 a7 87 e8 ef 47 5e 2b d6 b3 2b 5b a0 de 0b 73 90 95 44 b8 92 8e d3 4a 5d c4 c3 26 2a 8c e4 f9 5d 2e 86 d6 72 a8 81 ad 04 fe 95 a5 af a8 fe a2 5f 2f 76 c5 da bb b8 36 71 d3 c5 77 d7 03 f4 7c d2 1c 7f 66 41 a3 35 00 42 70 4c 0f 34 7f 6f cc 55 de a9 0e cb 34 e6 4c 9f 77 fd dc cd 77 fa 60 2d aa bc 24 8e dd 5b fa a8 ad d7 d5 8a e4 24 f8 ed 79 9b 0e 1b c7 a9 94 f1 55 b6 04 b2 3a 99 6d 20 eb 11 e5 67 73 34 4b 3e d2 34 50 68 e9 5c 21 33 d1 71 e8 e4 b1 97 67 39 b1 14 df f7 ab cc da 95 17 2d c2 6c 70 61 ec 94 e9 be 1d f6 c9 8d 34 e4 f3 e8 87 b7 3e 25 a6 f0 1a 16 fa 7a 82 8e 21 77 7c ab d6 da 0c Data Ascii: PVy9$h"h;"n4J;'1l/8kYG^++[sDJ]&*].r_/v6qw\|fA5BpL4oU4Lww`-$[$yU:m gs4K>4Ph\!3qg9-lpa4>%z!w\|
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 7f 51 cb 90 b4 ba 57 fe 74 bb 26 a2 56 f2 c1 ea 6d 52 73 cf 0a 36 27 c7 04 07 75 f8 06 a0 f3 9c 56 14 62 01 3c 6e 5c 4b 2d 0e 55 6a 39 8d a8 29 86 3e 00 a5 28 4e 22 5d 40 35 2e 70 7e bc ba 36 86 12 a0 53 c9 3c 3c 3e b3 dc 1e d0 7e 2f 2c fb 17 fa ad 48 b4 a6 6a 38 66 76 0c 22 77 b2 36 ce ee 13 e4 d3 20 a8 b1 24 f7 6f 99 8c 56 e6 bb 97 f0 a0 74 0d 46 62 02 8f b4 63 51 9a e4 89 7d 61 bc 3e 62 c7 ae 7e d9 68 84 b1 58 41 a4 d4 93 ed 7b 60 79 1e c8 8e ee b8 d2 31 81 5a 1a ce 5d d9 89 83 1e 79 09 51 39 9c de d1 72 26 00 c5 b0 08 87 e0 34 a1 1b 48 32 cd 6a 54 79 43 fd 55 3c bb 44 8d f5 ca e8 2c 2f e5 04 51 6c 9c 71 52 1e 2b ca 51 16 6e 4d 89 44 db 50 3c 4c 9a 73 02 7a 83 16 a5 d7 83 32 1c 56 24 ed fd 2c 2e 3c a4 27 02 9f bd 17 60 c0 89 33 98 5e 1a bc f8 fd 1e d2 Data Ascii: QWt&VmRs6'uVb<n\K-Uj9)>(N"]@5.p~6S<<>~/,Hj8fv"w6 $oVtFbcQ}a>b~hXA{`y1Z]yQ9r&4H2jTyCU<D,/QlqR+QnMDP<Lsz2V$,.<'`3^
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 16 70 c1 ba bd cd cf c2 7c 90 b9 6d 2e a8 1a ec 2f ff d7 82 3a 10 90 49 9c 68 e8 38 80 bc fe 68 f4 bb 04 f1 50 3a 5c 79 ed c2 6d c0 2e 74 4d e1 a0 7e ef 08 07 38 d0 56 c3 b6 4e e6 3d d0 db ad 1a f3 cd ec 95 00 d9 d5 9d bb 29 7c 42 34 df ec 9d 32 9f d7 6e f9 5f b5 03 a7 b9 4e 5a a7 0d f7 48 2d f6 99 c7 9e 09 aa 2b 89 08 a7 24 86 c2 80 44 72 e5 33 6d b1 c4 55 5d 2b 93 7c 0c 5b a0 f8 fd aa 65 e6 1a bf 1c e4 f3 48 8c 60 98 86 ac ed 19 af cc 5e 4d 87 e0 42 72 85 18 35 45 30 7c 20 ca 03 7f 4e e6 09 1b 8a 60 04 48 8c d4 ae 92 4e cf 4d 2a 8b 5d bd 4e aa ac c9 2a 0c d9 74 f0 bc c5 b4 de c7 21 76 99 26 17 d2 50 b7 7a b8 76 0d cb 3a a7 a0 65 f5 22 49 06 bf 49 2b d7 23 54 0a f1 f1 0f 10 39 87 e8 28 cd 7e 94 a8 15 bd 21 35 39 ce c0 32 b4 7c 83 95 bd 7f 5e 87 d6 5f 23 Data Ascii: p\|m./:Ih8hP:\ym.tM~8VN=)\|B42n_NZH-+$Dr3mU]+\|[eH`^MBr5E0\| N`HNM]Nt!v&Pzv:e"II+#T9(~!592\|^_#
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 41 5b ad fe 1e 2e 1e d0 85 15 75 8d d3 14 53 e1 f4 be b0 f8 51 88 5c 53 da 71 72 93 26 74 d3 3a a3 92 91 93 35 5d 97 80 22 61 a6 08 17 97 28 93 b4 67 3f 65 fe bb 46 3b 6e 61 78 c5 3e cb 2b 5c 8e 93 2a 50 9d 96 39 40 b6 91 55 a1 25 9c 13 82 b0 23 ce ef a2 6a b7 58 f1 c4 45 ff 73 37 2d c3 87 80 c5 9f ae 9f b4 3e 19 5c 8f 81 da 9a 1a 5c b7 9d 76 f5 4f 12 8c 60 43 00 ef d3 94 6d 1c 55 37 53 2e 29 6a 33 4b 03 48 58 0b a3 33 96 6e 17 53 9e 90 01 4f 8e d8 75 fa 6b 60 0c b9 b6 5e 37 be fe 18 83 f6 ec 92 e8 81 0e 8a 8a 34 91 09 02 a6 c0 cf 7e 42 a9 19 90 d4 ae 48 c8 ad a7 54 43 b2 11 85 1b a5 0b 5a 93 a1 e3 d9 ea 3a c3 d9 7d 70 0c a0 23 f8 a2 7e 79 aa b1 9a 83 29 44 5e 75 86 8e b3 d0 de 5d f0 63 cb 15 ba ba d5 d7 d3 27 8f 39 5e 92 8d e3 5a 65 cd 80 93 46 0c e3 eb Data Ascii: A[.uSQ\Sqr&t:5]"a(g?eF;nax>+\*P9@U%#jXEs7->\\vO`CmU7S.)j3KHX3nSOuk`^74~BHTCZ:}p#~y)D^u]c'9^ZeF
2024-10-25 08:16:35 UTC	200	IN	Data Raw: 05 22 ba 2f 80 45 af f2 12 5d 00 92 40 4a 50 6f a5 25 8f c3 d9 95 f2 1d f2 f4 83 11 18 de 99 4c af da d2 75 5c c7 a0 6f 1c da 20 cc 33 37 0d ce 61 ad ed 63 13 1d d2 ae fe 7c 7d f3 d8 95 cf b1 e1 42 7b 4d fc e8 02 ce 43 c3 89 ea b9 2c 0a ab 23 7c 02 92 98 87 cb 43 c4 a4 21 4a 44 a8 c9 9e 56 c0 52 7c 67 ec 1e 96 bc f6 ef dd 25 00 8f a7 4f cd 87 48 8b f6 b4 13 20 16 d1 90 5a cc 40 47 ab 72 00 d4 4e 35 f7 86 8c 00 b9 21 3d e5 a7 cd fa 4f 19 9d ca e1 e1 40 02 bb ab 5a 2e 62 09 c0 61 2f 01 95 55 00 70 08 f8 c0 d2 0f 8b c6 9c 2c e5 5b 63 7c d9 4c 64 b8 48 02 9d eb 9f b0 6f 15 ad c9 b0 00 27 80 00 00 Data Ascii: "/E]@JPo%Lu\o 37ac\|}B{MC,#\|C!JDVR\|g%OH Z@GrN5!=O@Z.ba/Up,[c\|LdHo'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49874	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	1317	OUT	GET /media/catalog/product/5/0/502809_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:35 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1428 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "Ff80lK6qG+7SPYpaadbGB78MNrmkQXMl/tcpEXRgCjg" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=90655 idim=1000x1000 ifmt=jpeg ofsz=1428 odim=200x200 ofmt=webp Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278098acdce98211e8db46000a8-5969e80a5b28f781-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdfw8210143-DFW X-Cache: HIT, HIT X-Cache-Hits: 26, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 52 49 46 46 8c 05 00 00 57 45 42 50 56 50 38 20 80 05 00 00 d0 2b 00 9d 01 2a c8 00 c8 00 3e 6d 36 94 47 a4 23 24 a1 27 d7 09 50 90 0d 89 69 6e e0 46 1e 54 67 f7 4f cc 2f 52 77 dd 7f 27 d5 ce 7f 23 e7 66 9b c9 e6 7f c9 11 e7 7d 16 f6 01 27 a2 95 5d 7a 60 c6 03 15 2f c1 26 6c f8 b2 81 83 c9 ef 06 8b 31 1e 45 94 e5 fd 51 ae a2 c8 f0 c8 0b 1a 6a 25 38 e1 47 7d d1 40 6e c5 63 db c7 0d 68 e4 91 7b 31 31 17 6f cb d8 f9 20 7d 6d e2 6b 3b 93 41 e5 91 b0 7b fe 96 1c 8d 11 a9 32 5a e9 b9 af 46 de d2 a4 31 48 fc a5 6f 07 c9 be d1 7d ff 84 ca e5 27 a1 e1 06 e0 85 79 24 f3 6c 4a aa ec 4d 32 0f 95 00 ee f7 e8 52 fb 5d d1 af 4c 53 f2 eb 70 b4 4e 50 aa 69 ce c3 4d 9c 29 52 01 f9 df c3 48 a5 56 c5 55 60 0e b3 21 dc 2a df 9e 7f 7a ba c9 66 a8 9f a1 a6 bf 30 39 6e ae 6a cc Data Ascii: RIFFWEBPVP8 +>m6G#$'PinFTgO/Rw'#f}']z`/&l1EQj%8G}@nch{11o }mk;A{2ZF1Ho}'y$lJM2R]LSpNPiM)RHVU`!zf09nj
2024-10-25 08:16:35 UTC	49	IN	Data Raw: 4b 12 eb fe 60 93 ba 41 5f 73 29 48 bf 2a 3e 1e 30 06 99 84 52 2e 46 f2 89 1f 7e 92 80 33 20 9e 11 a3 c6 0f 7c 4f 16 aa ba a1 2a e5 83 e7 59 c0 00 Data Ascii: K`A_s)H>0R.F~3 \|OY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49878	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	1317	OUT	GET /media/catalog/product/6/0/603883_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:35 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3978 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "Yt699VaL2gSgqyQ6LgT14BkSYeVtqGYNKnYtAr0Ij0I" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=111888 idim=1000x1000 ifmt=jpeg ofsz=3978 odim=200x200 ofmt=webp Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278098edad633d3882fe5f7bedc-9ed81b7633db436c-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960063-PAR, cache-dfw-ktki8620077-DFW X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: 52 49 46 46 82 0f 00 00 57 45 42 50 56 50 38 20 76 0f 00 00 10 3f 00 9d 01 2a c8 00 c8 00 3e 6d 34 95 48 24 22 a2 21 26 d9 59 18 80 0d 89 4d dc 2e bf 39 af f4 be 69 f6 37 f5 7b 68 95 97 93 bb e2 7a 1a f3 09 e7 6f e6 27 f6 47 f6 ab de 17 fd 8f ec 07 bc 2f ed de a0 1f dd ba 8c fd 03 7c b9 3d 96 bf bb ff d3 f4 b8 d5 96 64 9f d8 fc 0f f1 c5 ed 9c ee f1 27 d7 76 a2 9d bd fe db f3 1b d9 1f f8 3e 0f fc 5b d4 3b d9 7f ec bd 2b 1f 09 d1 1f a8 f4 02 f7 2f eb 3e 71 3f 15 e6 5f d9 1f 60 0f d6 1f f9 9c 6b 54 08 fd 23 e8 97 9e b7 ac 3d 84 3f 5d bd 36 7d 9a 7a 3e 11 48 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 32 3a 6a 5d ce e4 83 77 77 77 77 68 22 4c 21 ba ac 64 8b 9a 6a 22 95 01 c8 37 2b 8c 54 9c 50 7b 6b 27 23 49 5e 01 48 8b 2b 63 22 04 29 38 d1 f3 Data Ascii: RIFFWEBPVP8 v?*>m4H$"!&YM.9i7{hzo'G/\|=d'v>[;+/>q?_`kT#=?]6}z>H2:j]wwwwh"L!dj"7+TP{k'#I^H+c")8
2024-10-25 08:16:35 UTC	1379	IN	Data Raw: af d2 64 54 bc 3f 04 f1 be c6 0a 7c d0 6f 7d 3a 1f f4 63 d8 d9 86 62 6e 35 72 df 1b f8 40 cd 6e b2 74 3a 15 e7 ec 8c 9c fe f0 40 72 cb 2f 9b 59 2f a4 d6 2c 12 fd 2a 1b 07 22 a2 15 2f 77 58 3d a3 39 5f 26 23 b9 ae 83 26 69 d9 22 fb 50 36 30 19 d1 9c fb fe 76 13 27 9b b6 1a af 8c 0c 29 9d a7 7e 59 4b 4f 6a c0 24 47 a9 64 29 23 e8 77 97 7f 63 be d0 83 c2 bf 44 8b 72 7c 37 75 f9 a1 84 96 db 4c 4c e6 66 73 28 36 ae 15 df 5a e4 56 28 d4 09 4c f6 8d a6 98 73 3e 8f 71 be 2a 76 1d 01 e1 f8 20 87 30 ae be ca b4 ae bd 53 c2 9b f6 fc 8b 4b 61 24 8c 8d af d9 e2 32 ba e3 8a 2a 4e 93 bf 42 73 f3 48 fd d7 5e 92 2c da 07 06 cb a0 70 51 75 4f d7 ed 1d 38 a9 8d 42 a2 ba 8a 04 12 70 13 ff 7d 96 89 5e 47 35 e5 4a d9 bf 7b d2 23 ea 0e 3b 6a a6 5c bf 3b 99 b4 a7 29 8c 03 16 a9 Data Ascii: dT?\|o}:cbn5r@nt:@r/Y/,"/wX=9_&#&i"P60v')~YKOj$Gd)#wcDr\|7uLLfs(6ZV(Ls>qv 0SKa$2*NBsH^,pQuO8Bp}^G5J{#;j\;)
2024-10-25 08:16:35 UTC	1220	IN	Data Raw: f7 db d6 47 db c5 ba 77 fc db 0d 05 c6 1f a7 a2 91 90 7a ca e5 68 0d 3b 07 4d b3 0b 19 25 b5 ce 80 35 b9 42 78 2f 2c f9 c5 9a 8d 5c 1c 1f 7c db ec b5 8b 1c ad d2 8b 87 0f 6b e7 05 0c b0 13 fd f5 3a 9f 6b 10 7f 2b 30 e0 cb 8c a6 1e 18 ed 54 69 e6 a2 f7 46 25 5c 66 53 37 18 f3 98 9e 02 81 c8 6f 8f df 74 18 a2 01 2a c3 1c 89 e1 ed 34 87 c1 b8 dc 70 06 48 04 01 bb 4e 5d 35 e1 07 9c 5c 6a 5b c3 bc d4 99 5c 97 ea 5a db ae 57 2e 3c 4e f0 ce cf 1a 2f d6 86 3f 47 99 1a 19 8b 31 6d 0e 98 bf 4e 45 ff a5 10 bd ea 8c 74 ed 00 0c 78 cd 11 bc 1b cf b1 dc c6 0c fe f8 29 56 9f c0 a5 0c 8e bb bf 58 36 7e c3 ae 06 9d 87 43 2d 9d 28 b4 16 49 e6 bd 82 ae ae 2a 7e a1 fa 21 35 f4 f5 8e ec 34 88 73 24 f2 d2 46 9a 37 96 15 87 71 a8 83 8e c1 6e 01 77 1f 6b 5f d3 8d f4 dc 32 d4 70 Data Ascii: Gwzh;M%5Bx/,\\|k:k+0TiF%\fS7ot4pHN]5\j[\ZW.<N/?G1mNEtx)VX6~C-(I~!54s$F7qnwk_2p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49876	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	993	OUT	GET /media/wysiwyg/home/vitrines-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	855	IN	HTTP/1.1 200 OK Connection: close Content-Length: 64048 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "p8TSNC2xiWHySJ/K5qnaCAiSSLYRCKyOhNEdFWTp1Vs" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=64048 idim=400x400 ifmt=png ofsz=64048 odim=400x400 ofmt=png Fastly-Io-Served-By: vpop-etou8240193 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801627807767e191c6a1909846b44d4-ff9198196dea74ac-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960023-PAR, cache-dfw-kdal2120052-DFW X-Cache: HIT, MISS X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 7b 9c 65 d9 55 df f7 5d 7b 9f 73 1f f5 ea ee ea c7 74 f7 cc f4 3c 85 c4 48 02 69 46 0f 34 16 08 89 91 11 92 c1 01 24 0b 21 1c 27 0e 26 60 30 38 31 98 57 1c 20 38 31 10 1e 0e 36 b6 71 02 e1 e9 24 24 10 4c 20 01 23 90 90 04 92 18 64 8d 9e a3 d1 68 46 a3 d1 3c 7a 66 7a 66 ba eb 75 5f 67 ef 95 3f f6 de e7 9c 7b eb 56 75 55 77 75 57 55 d7 f9 d5 e7 f4 ad 3a f7 9c 7d f6 39 f7 f6 5a 7b ad f5 5b 6b 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 Data Ascii: PNGIHDR6 IDATx{eU]{st<HiF4$!'&`081W 816q$$L #dhF<zfzfu_g?{VuUwuWU:}9Z{[kA4hA4hA4hA4hA4hA4hA4hA4hA4h
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: c6 80 90 61 73 e1 a1 87 3e c3 7f bc ef 23 7c f0 2f ef e5 ae 57 bc 92 37 bd e9 6b 18 15 8e 0f 7d f0 43 cc cd cc 72 cb ad b7 b1 7c 61 89 d5 95 35 d6 7a 6b 2c ad 2c 33 18 ac d1 9d ed ae dd 7c d3 2d 7f 76 d3 8d 67 de 37 7b ec e8 7f 78 e9 6d b7 7d 78 57 be 64 0d f6 24 1a 05 72 40 71 ef bd f7 de fa d1 cf 7c e2 eb 9d ea 91 d9 ce dc 93 88 3f f1 d4 d3 4f bd b0 d3 ee ac 15 a3 91 1b 0c 87 79 af d7 cb fb 6b ab f9 5a 6f 2d 57 35 33 ab 6b fd b9 5e bf 37 23 99 cd 86 83 61 36 1c 0e c9 b2 8c fe f2 ca b1 7e af 77 b4 d5 6a c9 70 38 64 34 1c 91 89 c1 1a 61 38 1a 31 2c 0a ac b1 88 35 a8 73 64 c6 92 59 cb cc cc 0c 87 0e 1d a6 d5 6a 91 65 19 a0 c1 a5 63 0c 9d 6e 87 76 bb 83 b5 06 89 82 b4 dd ee b0 30 3f 4f ab dd c2 1a 4b bb d3 21 cf db 18 63 b1 26 23 cb 2c c6 58 da ed 16 ce 8d Data Ascii: as>#\|/W7k}Cr\|a5zk,,3\|-vg7{xm}xWd$r@q\|?OykZo-W53k^7#a6~wjp8d4a81,5sdYjecnv0?OK!c&#,X
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e8 e4 5d 8a a1 a7 d3 6e 71 f6 a9 a7 f8 cb 0f de cb eb bf ea 0d 1c 3a 7c 98 d5 d5 d5 78 b9 60 05 10 95 a1 70 b1 55 57 98 43 30 22 d2 91 d3 ce 08 4a 23 b9 c5 ea 48 16 48 fa dd 8f 1c a8 67 34 2a 10 11 b2 3c b8 fb 54 eb 8a 5a 10 81 5e bf 87 c9 0c 79 9e a3 0a 96 0c 29 c0 b9 82 ac 63 59 5b 1b f2 cc d3 e7 b8 e5 cc 0d dc 73 cf 3d 7c f2 13 9f e4 81 fb 1f e2 e5 77 dd 89 7a 18 b9 11 40 a5 f0 35 28 90 51 bf cf 53 8f 3f 4e 2b 53 9e 7c fc f3 38 b5 dc f5 f2 d7 b2 bc fc 14 a3 51 41 af 37 bc fe cc 99 b9 fb db ad f6 85 95 95 e5 f6 56 be 7b 0d f6 3f 1a 05 72 c0 51 14 c5 6c 96 67 fa ae 77 bd 8b 87 1f 7e 88 e1 70 48 2b ba a5 1e 7d e4 51 4e 9f ba 99 97 bc f8 25 f4 fa 03 3a dd 2e 85 3a fa fd 3e a3 d1 88 d1 72 41 96 b7 10 0c ad 56 8b 56 2b c7 f9 11 59 96 23 19 d8 18 2f 28 fa 03 Data Ascii: ]nq:\|x`pUWC0"J#HHg4*<TZ^y)cY[s=\|wz@5(QS?N+S\|8QA7V{?rQlgw~pH+}QN%:.:>rAVV+Y#/(
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 76 fc 18 59 96 97 d6 c5 c5 a0 d1 fa 88 3a 01 75 3a b6 1f 18 57 18 d1 b2 49 ea c2 98 40 2c 98 84 44 ab a2 d3 e9 50 f8 82 62 e4 10 89 f7 1e 15 98 7a 4f 0e e4 ed 16 b6 95 c7 eb 7a 44 02 4b 2d 28 17 8f 58 18 0c 06 8c 8a 02 6b 33 9c f7 14 45 70 39 46 93 2a 12 05 c2 73 56 11 30 26 58 4f 5a a0 de f3 d7 fe fa d7 f0 b9 cf 3f cc bf fa c5 9f e7 1f ff e3 1f c7 b9 36 23 3f 60 4e 66 8d b5 b6 a1 f4 1e 30 34 0a e4 80 23 58 05 56 5b 79 4e 96 65 ac ad f6 b8 e9 cc 2d 64 59 8b 76 bb c3 f2 d2 32 f3 f3 87 e9 f5 fa 41 74 1b c1 aa e0 30 54 01 8a 90 68 a7 ea 51 0d 0c 21 e7 3d 21 4f 4e c9 b3 8c c3 87 0e 53 b8 02 e7 1c c3 e1 00 51 e1 fa 3b 5f c1 b3 cf 3e 83 98 1e ae f8 3c ad 2c a7 d3 69 e3 55 38 34 3f 1f 5c 3c 51 65 a8 fa e8 eb 4f cc a3 90 1b 02 e0 bd e2 09 94 d9 62 14 2c 1e 6b 05 Data Ascii: vY:u:WI@,DPbzOzDK-(Xk3Ep9F*sV0&XOZ?6#?`Nf04#XV[yNe-dYv2At0ThQ!=!ONSQ;_><,iU84?\<QeOb,k
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: de 9c 3e 25 c1 58 8b 18 8b 68 b0 6e 24 cb 10 63 ca 82 8f 46 42 f5 e1 e4 36 54 ef 63 9c 29 22 96 7e 09 16 6a 7a 3a 89 9b d7 e0 20 a1 51 20 07 1c bd d5 25 6f 8c 75 45 11 cb 83 94 ec 9d 0a 65 a0 d8 54 81 d6 c0 cd 09 08 34 57 53 06 84 4b fa a8 0a aa 9e c1 b0 5f b1 7c 22 83 68 e4 63 a9 12 81 76 67 86 3b ef 7c 35 77 7f d9 eb c3 2a b9 18 c5 3a 57 5b 83 0d 17 45 53 9c c6 08 59 2b c3 3b c7 9b df fc 66 8e 1e 3d ca b1 d3 27 79 cd 57 7c 05 bf f3 7f fc 36 8f 3f f6 18 de 29 36 cb c9 b2 9c 3c 6f d3 6a 75 6a ab fe ab b3 90 ae ea 61 4d be 41 29 8a cb 67 9c 68 bf 1e 46 3e b0 e0 c4 98 48 0d 4e c7 8e 0f 64 8c a0 31 63 df 18 83 73 0e e7 1d 59 66 4b 97 58 49 85 28 95 4f b2 fc 2a 05 92 ac 23 d1 f0 8e 31 06 f1 3e 90 0c aa 30 91 63 bd e6 6d 70 8d a3 51 20 0d 30 46 34 95 16 af 02 Data Ascii: >%Xhn$cFB6Tc)"~jz: Q %ouEeT4WSK_\|"hcvg;\|5w:W[ESY+;f='yW\|6?)6<ojujaMA)ghF>HNd1csYfKXI(O#1>0cmpQ 0F4
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 86 73 e7 ce 51 38 cf e1 b9 79 ba dd 6e ec 19 e2 b1 91 79 a5 de 40 ac 29 e6 5d 41 96 85 2a 00 e1 d9 83 d5 a0 54 89 7d e7 93 0b b3 e4 60 99 e0 c6 22 b6 c6 15 0f 55 be 60 20 4c 84 4a 04 d2 a5 29 65 72 e0 d0 ac 1a 1a 94 95 60 43 f2 1e d4 dd 1e 26 66 25 c3 b8 a0 9e ca 3f d2 fa 99 17 c3 b8 2b 6b 9a 4f ff 72 21 91 c5 94 2e 27 e9 5e d4 b1 f7 5d 2e b5 27 1b 4d ac 2c 8b eb bd 64 35 45 4a b4 73 ae 6c 4c e5 63 45 5d 4c 2c ac 58 a3 4f 17 ae c0 ab c3 5a 83 28 64 99 2d 7f bf e8 54 08 89 8b 56 62 0b 5d a4 7a 84 e1 3b 33 23 22 4d 27 c2 03 86 c6 02 69 00 54 41 e5 d2 02 48 d6 80 28 b8 aa 6d 6a c2 d4 95 87 4a 62 75 6e 09 29 60 1b c6 35 91 8e 4b 2d 07 e1 f2 30 ce 6c 8a 53 24 2a 96 3d ee 71 99 a6 4c 53 df 73 55 8f f7 8e cc 64 41 a8 47 f6 5a 8a e1 a4 84 4f 15 1b eb 68 51 f6 4d Data Ascii: sQ8yny@)]AT}`"U` LJ)er`C&f%?+kOr!.'^].'M,d5EJslLcE]L,XOZ(d-TVb]z;3#"M'iTAH(mjJbun)`5K-0lS$=qLSsUdAGZOhQM
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: fe 54 c8 ce c4 0c 6a c3 4d 8c b7 a1 39 34 7e 9e b2 63 f5 65 65 83 eb ad 7b 1e 13 db e4 cf 46 48 65 49 92 85 95 62 54 25 5d 59 18 2f 64 b9 7e 22 63 e3 57 9f d9 06 f1 ac da 71 00 c6 c8 22 f0 67 c0 1f 03 af dc da 53 69 b0 df d1 28 90 83 83 17 01 bf 05 dc 0b 7c 75 fd 0d 9b 05 6e ad 48 b9 5c 05 21 96 c3 a8 e8 ae 01 53 84 c9 c4 2e 59 b7 4b c6 76 56 b9 1e 5a 3b a3 7e be 94 4a e4 72 e4 b7 4a 58 91 07 6f 7f b2 0a 08 f7 9a fe 8e 16 ce d4 9e 1c b5 9b 48 7d 3b a6 1e b7 09 36 63 78 a5 71 37 7a 76 32 75 07 51 b1 33 c6 6c 2b ef 4d cb 9b 8c 87 fa f0 b9 4a 88 75 39 f5 b5 b2 f9 db ba 93 89 49 d6 af a1 f5 26 60 f7 00 1f 02 7e 1b b8 63 bb 57 69 b0 bf d0 28 90 6b 1f 87 81 5f 00 3e 0e bc 8d 29 a2 c3 1a 03 38 42 72 58 bd cc 47 8c 80 ac b3 18 36 5e 91 6e 0a 49 09 68 91 6d 55 bf Data Ascii: TjM94~cee{FHeIbT%]Y/d~"cWq"gSi(\|unH\!S.YKvVZ;~JrJXoH};6cxq7zv2uQ3l+MJu9I&`~cWi(k_>)8BrXG6^nIhmU
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 68 f9 1a 57 a6 aa 53 ce 8a c7 68 3d 20 e2 4b b6 55 c5 4a 4a de f8 ed b8 44 26 8e 95 c0 ad 0a 97 f0 d1 25 07 62 2e af 24 ca 76 70 39 96 c6 46 08 5e a3 58 0c 51 04 35 e3 89 96 a5 95 53 3f 3e bc 83 88 c1 39 8f f7 c9 65 19 29 5b 31 b4 75 91 84 f3 31 c4 e2 36 a5 7f 50 a4 6a 9d 7b 99 b8 11 f8 7d e0 d7 80 85 9d 18 b0 c1 95 45 c3 c2 da 3f 78 15 f0 9b 04 a6 d5 8e 42 c4 e0 5d 14 e4 d1 5d e1 7d 62 de 54 f2 3e 55 cc f5 f8 c0 fd 8f 5a c7 27 f9 a8 89 9d 44 8d 5d 14 29 54 12 ce 49 ae a5 d4 9b 5c d5 95 09 70 9e 6a 20 f1 2e 30 84 92 a0 1b ab b1 35 79 03 3e cc b3 e6 2a b3 18 f0 a1 16 95 15 13 d9 51 52 c6 73 2e 42 3b bd e8 8a 3a 10 84 37 1e 63 f2 bd 8d fa 75 68 ca d3 98 3a 46 7c e6 f5 6c 73 11 ea 19 f1 1a 15 80 29 ab e8 a6 da 58 a1 d7 b9 88 06 1e 5a 54 20 82 21 cb 5a 25 71 Data Ascii: hWSh= KUJJD&%b.$vp9F^XQ5S?>9e)[1u16Pj{}E?xB]]}bT>UZ'D])TI\pj .05y>*QRs.B;:7cuh:F\|ls)XZT !Z%q
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: cc 2b e5 de 24 57 22 eb 3f df f1 3a 5e 1a 36 a9 8a 6e 52 9e 33 fd bb 73 15 f1 56 42 3d ad 1b 76 73 12 07 11 8d 02 d9 1d bc 8c d0 37 fa aa c7 3b a6 c1 1a 8b 47 77 84 49 23 7e dc 9d e1 b7 c1 c4 4d 98 b6 ae 9e 24 06 8d 0f 39 d9 e3 ef 62 e3 ef 7b f3 83 a8 a2 d9 f8 7e 6b cf 24 29 5f 1f 89 10 5b b8 7f 2d 4b c0 d4 e3 44 7b 23 6f 66 03 a4 ff 53 77 ed f6 44 0e 12 1a 05 72 f5 f1 66 f6 e0 6a 49 7d 15 84 36 31 b0 ba c9 d1 e3 7f d6 94 c4 a4 68 92 ba 6c af 1f 5f fe ba de 1d 16 22 32 a9 0b 5f 0a 36 6f 86 9a 9f bf 9c 8b d6 e2 e3 75 fa 56 08 17 ef 96 cf 65 27 20 04 12 80 6a 62 93 8d 39 99 22 d6 c7 3e bc 0b 31 a1 0d db d9 c6 0f cf 6b a8 8e 1c 92 05 a5 e6 32 ac 33 c0 6a a7 28 7b 45 92 9c 26 24 1d 6e bb 27 4e 83 4b c3 de f8 d8 0f 0e fe 2e f0 ef d9 83 fe da b4 32 15 a9 ba f4 Data Ascii: +$W"?:^6nR3sVB=vs7;GwI#~M$9b{~k$)_[-KD{#ofSwDrfjI}61hl_"2_6ouVe' jb9">1k23j({E&$n'NK.2
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 08 a8 57 5a ed 0e 9d 4e 1b bb 16 e2 39 0b 0b 73 b4 3b 6d b4 ef e8 76 67 18 8d 0a 46 a3 51 3c c7 e2 5c 2c e2 a8 1a e7 43 74 c1 79 5c b4 98 a4 bc 66 98 17 f1 58 e7 5c 2d 18 ed f1 de e1 0a 1f 3b 2c a6 fb 70 14 45 11 86 55 4f 51 38 54 29 85 b7 73 0e ef 7c 19 23 f2 ce 33 2a 42 e0 db fb 30 ce 60 30 64 30 18 d0 6a b7 c2 1c 35 5d cf 97 34 dc c2 85 e7 6c ad 8d ae 25 cf fc a1 39 de ff fe f7 72 e1 c2 05 7e f7 ff fe f7 1c 3d 7c 14 63 32 56 7b 3d e6 16 e6 38 ba b8 c8 c2 c2 02 0b 0b b3 e4 79 0b 63 0c dd 6e 97 2c cb c8 b2 9c 2c cb 83 3e 73 4a 31 2a 18 0e 86 f4 86 3d 9e 3b ff 2c ab 2b cb 64 d9 be 11 25 af 25 fc 1f 7d 13 8d 12 b9 6c ec 9b 4f 7d 1f a0 45 c8 f1 d8 77 ca 43 c4 d0 ef f7 f9 b3 3f 7b 37 ef f9 b3 f7 d2 5a 9c a3 35 d3 41 3d ac ae ad e2 a2 90 5c 7e ee 79 8c 08 59 Data Ascii: WZN9s;mvgFQ<\,Cty\fX\-;,pEUOQ8T)s\|#3B0`0d0j5]4l%9r~=\|c2V{=8ycn,,>sJ1=;,+d%%}lO}EwC?{7Z5A=\~yY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49875	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:35 UTC	999	OUT	GET /media/wysiwyg/home/agencemnent-magasin.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	858	IN	HTTP/1.1 200 OK Connection: close Content-Length: 104873 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "OKuvgawi9PlpvFuIN6P8vzWcwRCSUZMozbBZChzuUT8" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=104873 idim=400x400 ifmt=png ofsz=104873 odim=400x400 ofmt=png Fastly-Io-Served-By: vpop-etou8240196 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801627807299e9decef24c7eab5025a-ed0c1fc279171ad6-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:35 GMT X-Served-By: cache-par-lfpg1960073-PAR, cache-dfw-kdal2120110-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 7b b0 2d db 77 d7 f5 19 63 ce ee b5 f6 e3 dc 7b 7f 6f f2 23 81 40 7e 01 43 88 18 1e 81 c4 84 68 04 0c 8f 02 79 89 14 28 12 09 a5 a0 25 56 49 f1 b4 00 45 0b 53 0a 5a 80 20 2a 8a 08 2a 08 02 82 22 14 55 2a 49 00 41 41 83 5a 24 02 f1 07 84 d7 ef 77 5f e7 ec 7d d6 ea 9e 73 0e ff 18 a3 7b ad bd cf 3e af 7b cf bd fb 3c e6 b7 ce 3e 6b ef b5 7a 75 cf ee 5e 6b 7e e7 18 df f1 80 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e 8e Data Ascii: PNGIHDR6 IDATx{-wc{o#@~Chy(%VIESZ *"UIAAZ$w_}s{>{<>kzu^k~
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 8d b8 bb ea 97 d0 ef 61 c7 8b 0f 05 fe 45 e0 ff 02 7e e2 2d 8f a5 e3 29 d0 27 9f 17 0b 77 80 df 89 8b e4 5f 7c bb 43 e9 e8 78 e6 f8 22 e0 8f 02 ff 39 f0 da 2d 8f a5 e3 09 d0 09 e4 c5 c1 57 e1 05 0f 7f fe 6d 0f a4 a3 e3 03 c6 3f 8d 8b ec 5f 73 db 03 e9 78 34 3a 81 3c ff 48 78 84 d5 b7 e1 61 ba 1d 1d af 02 be 1f 5e 5b eb d7 d1 93 60 9f 5b f4 28 ac e7 1b df 17 6f e0 d3 cb 65 77 bc ca f8 76 dc 2a f9 6b b7 3d 90 e7 05 3d 0a ab e3 71 f8 d9 78 36 79 27 8f 8e 57 1d 5f 03 fc 45 e0 9f b9 ed 81 74 5c 45 27 90 e7 0f 1b e0 3f 04 7e 2f f0 7c 2c 33 3a 3a 6e 1f af 01 bf 0b ff 6e 6c 6e 79 2c 1d 81 4e 20 cf 17 be 1f f0 ad c0 2f bc ed 81 74 74 3c a7 f8 85 78 03 ab 2f ba ed 81 74 74 02 79 9e f0 8d c0 ff 06 fc f0 db 1e 48 47 c7 73 8e af c2 bf 2b bd 21 da 2d a3 13 c8 ed 43 80 Data Ascii: aE~-)'w_\|Cx"9-Wm?_sx4:<Hxa^[`[(oewv*k==qx6y'W_Et\E'?~/\|,3::nnlny,N /tt<x/ttyHGs+!-C
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: d0 70 43 19 58 a3 35 f3 79 5b 2a 6a 3e f9 58 ec ab 2d 9a 49 53 40 68 b8 15 24 cd 47 55 6d b1 28 0a 16 ae ab 66 ac 04 22 cd 09 61 36 5f 87 2b 16 c3 5c 56 e9 8d 4a 03 53 14 05 51 5a 2b a8 aa 5b 5b 76 e4 79 43 b0 04 62 72 65 22 74 a2 85 21 0f b4 26 48 4e 40 09 9a 54 24 05 f5 69 22 2f 4b 75 ff 87 aa 4f d3 cb f9 2e 7b 15 d1 50 7f 32 c9 94 ac 4e 20 ee 13 33 94 e6 84 66 19 34 21 54 54 cc b9 56 0f 04 ab ea d7 da 9a 5b 7b ee 28 f4 eb 64 08 26 8a 99 b8 f5 25 2d bc 83 7e 9d 57 fd a8 81 b6 70 4d a6 58 5c 98 ba d5 25 41 3c 41 b6 60 6e d9 34 80 84 89 d0 14 52 12 0e 67 d7 f1 04 f8 71 c0 7f 8f b7 cc bd b8 e5 b1 bc 34 e8 04 f2 4c 20 e1 aa f2 39 fc f8 6b 2d e2 13 b8 2c 2e 1a 8e 08 43 ae 4f 01 76 f4 e8 c4 b0 b8 8a d6 2d 56 97 57 03 35 d2 c2 30 0b 41 34 b7 0a 16 2d c4 e2 8f Data Ascii: pCX5y[*j>X-IS@h$GUm(f"a6_+\VJSQZ+[[vyCbre"t!&HN@T$i"/KuO.{P2N 3f4!TTV[{(d&%-~WpMX\%A<A`n4Rgq4L 9k-,.COv-VW50A4-
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 93 e5 f8 c7 04 71 6c 9d 1d 13 ca f5 63 5f 7f df f1 35 5c df b7 90 c6 31 61 dd 44 9a 0b 01 fb c6 87 ed 6e d0 65 00 ea 7a ae 9d 49 9e 11 7e 06 f0 db f1 76 b9 fd a2 3e 05 3a 81 bc 77 fc 72 e0 5f 3a fc d9 42 8c b5 83 08 7c cd 12 b9 e9 93 f9 28 6d e3 69 88 a5 d9 cd 04 73 9d 30 8e 9f bb ee 8a ba 4e 1e 8f d3 3a 6a 6d ab 25 70 a3 18 7f 34 19 df 64 e9 c0 41 04 3f bc ff ba 04 71 d5 5f 73 65 82 3e 9e d4 45 ae 4c c0 d7 ad 8a e3 ed 15 0d eb e6 41 1d e6 26 12 bb e9 98 37 3d 7f 4c 42 0f bb 9f 8b db cc 8e ac 8c e3 f7 5f 21 da 6b fb 3c 86 e8 c1 ca ea 78 26 f8 05 c0 e7 80 5f 71 db 03 79 91 d0 09 e4 bd e1 e7 00 ff d6 f2 87 7f c9 1f ed 98 5e 63 fc 9f 60 e7 4f 42 1c d7 5d 2d 72 c3 fb ae 6b 1c 37 69 16 cb fb 17 f7 13 47 d6 ca b1 d0 7e d5 6d 15 ef e3 aa 1b eb 78 46 3b 26 94 ab Data Ascii: qlc_5\1aDnezI~v>:wr_:B\|(mis0N:jm%p4dA?q_se>ELA&7=LB_!k<x&_qy^c`OB]-rk7iG~mxF;&
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e6 f4 9c d7 3f f9 49 86 cf 7d 8e ed 38 00 89 96 32 ad 98 5b 11 ea a1 bb 29 65 44 94 d6 40 93 5c 69 22 a5 35 a1 28 26 30 97 42 c3 13 e6 86 9c 51 85 da cc ad 94 66 48 0a eb 86 28 dd 6e 4a 35 68 52 30 ad a4 34 20 92 c3 42 f0 9e 27 49 13 49 85 d9 4a 14 6a f4 19 5a 34 91 42 10 f7 fb 92 11 53 ef f3 b1 e4 db 88 5b 26 49 13 aa ca 5c 0a 98 a1 39 9a 6f 61 b4 e8 47 52 24 2a 9d 69 8e e8 a9 a5 ca b0 61 56 69 ea d7 c0 a4 d1 62 f2 2c 16 d6 52 f5 7d 26 15 4a 33 4c 14 c5 7b b2 08 7a 28 b3 af 6e 95 28 07 bd 86 b0 75 a4 84 03 50 dd f2 41 8c b9 35 86 d5 cd b6 24 49 e6 e5 dd ae e7 88 20 54 12 4a 4a cb 3e 2d 88 51 18 06 41 b5 52 a7 8a d9 04 32 3a 61 47 ba 7f c3 28 35 ae 0d 90 c4 49 f1 64 10 92 3a 69 a5 04 aa 99 d2 1a 56 0b 39 0b a6 09 ab 15 1a 34 ab e4 c1 ef 53 ab 8d d2 84 5a Data Ascii: ?I}82[)eD@\i"5(&0BQfH(nJ5hR04 B'IIJjZ4BS[&I\9oaGR$*iaVib,R}&J3L{z(n(uPA5$I TJJ>-QAR2:aG(5Id:iV94SZ
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: c4 a2 aa f8 34 6d cc e6 84 92 65 b1 ba f0 89 3e 8e 53 22 b9 50 23 20 a0 6a b8 78 42 db b0 1a 9d 0d 53 f2 ae 90 e2 b9 2b b5 15 2c 29 89 cc 90 dc b0 49 48 b8 da a2 4d 6f 44 9b 21 c2 1c 04 38 66 6f 95 5c 6b a3 4e 4b cf 77 1f 43 b1 44 0d 9d 5c 15 46 cd 8c e3 10 ae bf 86 35 45 50 52 6a 08 1e 24 41 f3 68 3c 4b 80 1a 52 67 1a 42 4a 21 ce 9b 62 6a 88 54 df b7 25 24 27 92 36 50 25 95 44 09 42 8e 5b f9 3c e2 75 7c 41 f9 35 74 51 7d 45 27 90 9b f1 1b f1 0f ca 93 e1 19 7c e0 1f 70 23 3d 09 79 88 5c 21 90 eb 22 fa 31 8e f5 8f 16 c5 0d 1f 24 8f ab 96 8b 70 b0 26 f6 f3 e4 93 53 84 d7 52 2b 8a 52 5b f5 f7 b6 82 e6 14 49 7d f8 8a bc 35 c4 6c cd cd 68 ad 32 4d b1 e2 04 d7 39 c2 6d b4 b4 ca 5d a2 9c e2 b0 88 19 c5 1a 05 21 35 59 27 3e 27 39 90 24 2e e0 86 20 5e 6b 71 d2 52 Data Ascii: 4me>S"P# jxBS+,)IHMoD!8fo\kNKwCD\F5EPRj$Ah<KRgBJ!bjT%$'6P%DB[<u\|A5tQ}E'\|p#=y\!"1$p&SR+R[I}5lh2M9m]!5Y'>'9$. ^kqR
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e8 21 9e c4 24 f8 e8 15 d4 d3 44 5d 3d fa a0 57 49 64 f9 fd 41 0b e4 e8 2d ad c5 ea f2 c1 bc 8f e3 6d 3c 8b 38 4a b5 9b 47 c7 b8 2b 4b 29 73 f1 88 26 cf 6a c3 54 c9 c9 43 40 0b 4e 34 42 82 25 e4 36 65 72 c8 df 60 64 5f 6a 7b 87 c1 20 5b 6d 1a d1 5f 80 aa bb 5c e0 a0 9f 24 77 cd b4 1a fe 7f 89 28 af 25 89 dc 96 b2 f2 5e 8c b1 99 af 8c db 42 18 21 a8 34 96 b2 65 6d bd 7e 12 22 fc ea 82 8c cc ed 65 95 6e 51 9e bf 9a 5b 26 16 3f 8b bf a9 e1 56 46 8b 7c 19 4d ee 6a 73 f2 01 29 1e 42 ac ea 24 65 76 90 e9 9d 10 22 ef 45 84 56 4b 64 a8 bb 6b 4c c4 22 02 ab ad d6 84 2d b7 3e 1d 95 0d 36 bf 37 49 94 66 6d 2d 2f a2 26 31 c6 25 cc d8 05 75 41 68 9a 68 e2 ae 23 35 09 d7 93 60 12 b9 22 d9 03 21 54 35 02 0d 94 66 c5 af 87 cd e1 da 32 6a 13 a4 3a 29 78 de 7f 10 51 15 92 Data Ascii: !$D]=WIdA-m<8JG+K)s&jTC@N4B%6er`d_j{ [m_\$w(%^B!4em~"enQ[&?VF\|Mjs)B$ev"EVKdkL"->67Ifm-/&1%uAhh#5`"!T5f2j:)xQ
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: a4 01 52 f2 04 44 83 ac 82 7e 6c 20 7f e6 7b 73 71 ef 5d 6a 33 de f8 07 7f a0 93 07 30 37 68 4d 39 d9 6e d9 df bf cf be ec b0 56 38 3b fb 34 29 65 2e 2e 2f 18 c7 cf 90 24 31 cd 13 e3 f6 c4 cb cd 37 a1 96 4a 99 76 58 9b d9 97 89 71 1c 3d ac 5a 40 f2 40 69 7e 8f 74 c9 ac 8f 6a c5 b5 79 85 5b 49 ea f5 c7 0c d0 44 ce a3 67 de 37 c5 a2 52 72 4a 71 9d 9b 6b 11 8b 1e 24 a2 a1 64 84 cb ac e1 64 b5 f4 a7 5f f6 2b 07 8d c4 2d ef 86 d9 c8 3b 77 ef 52 cb 9e 56 8c 8f 7e ec 13 0c 9b 2d 2d 6a 9b 19 cd 2b 15 47 7a be 49 63 de 4d d4 d6 d8 ca c4 5f fb 3f ff 02 f3 3c d1 8a b1 dd 6e a9 f3 cc b8 dd a2 c3 78 d0 ad 04 2f 89 92 d2 c1 75 1a ba cf d2 79 52 d4 cb f3 4f 97 17 5c 5e dc 65 1c 37 5c 5c dc e3 13 5f f8 45 a4 3c ac 9f 11 4c a9 65 e6 dd 37 df f4 b6 04 39 f3 b1 4f 7d 01 4b Data Ascii: RD~l {sq]j307hM9nV8;4)e../$17JvXq=Z@@i~tjy[IDg7RrJqk$dd_+-;wRV~--j+GzIcM_?<nx/uyRO\^e7\\_E<Le79O}K
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: b7 44 84 d0 71 ab da eb a1 bd d7 4b 99 ac 7f 07 43 58 ad 98 15 52 f2 32 20 34 57 79 a6 88 9c d2 e4 4d 8a 0c 5b bb fb 79 81 bf 16 ba 90 86 c0 ee a5 47 52 84 33 55 4f b2 f0 fc 87 06 9a 07 d7 18 68 ae 65 18 d4 d2 28 4b 65 d9 50 97 dc 2b 16 65 c0 3d 17 9b 22 e0 f9 7b 4b 40 ac 5f 83 c5 cd e4 fa 7e 5b 6b 50 7d e4 23 af 73 ef fe 77 f3 fa d9 18 ab d4 c6 54 67 c6 ac 68 ca 4c 73 61 33 8e 4c bb 89 7b f7 ee 31 8c 23 1f 19 df c0 10 3e ff f6 9b 9c 6c b7 10 93 ea 66 eb 93 5d 99 0b e7 67 e7 94 79 e6 f2 e2 2e 67 a7 77 d8 9e 9c fb 8a b8 cc 58 11 c8 4a 1e 84 5a 0b bb 69 c7 36 6d 68 6d 76 57 52 4e 64 46 98 15 50 e6 b9 30 d7 42 ca a3 eb 1a 15 6a 85 21 ab 77 67 c4 bb 21 96 d9 93 f4 c6 e1 c4 83 11 c2 42 49 29 93 f3 76 b5 3e 44 2b ad cc cc d3 84 99 a2 3a 52 0b a4 14 85 1c ab b1 Data Ascii: DqKCXR2 4WyM[yGR3UOhe(KeP+e="{K@_~[kP}#swTghLsa3L{1#>lf]gy.gwXJZi6mhmvWRNdFP0Bj!wg!BI)v>D+:R
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: c9 52 10 f1 f8 f5 c3 f6 07 2b e3 6a 48 2f 0f ec 33 e7 4c d6 c1 2d 03 d1 e8 95 e1 b9 02 83 86 95 a0 ea 7d b1 55 48 59 d9 a4 81 41 7d 62 23 85 a8 ae 89 0a 5e d6 db bc bc bb 45 15 df 85 76 9b 79 b2 61 2b 8d b9 54 6a 31 b7 0c aa 97 20 29 ad 46 e5 58 ef ed d1 4c a8 4d 8e 26 41 0b 91 5e d7 49 d8 a3 c4 16 77 87 9f e3 17 7c ea 93 24 6d 9c 8c 90 93 8f 67 c8 83 b7 b5 9d 67 6a ab a4 9c 39 3b bd 43 2d b0 db 4f 11 ce eb a2 69 6d 8d 3b 77 5e 77 17 52 29 8c e3 86 cd 66 c3 76 7b 12 ab 67 f3 e6 4b db 13 74 c8 cc b5 44 c0 91 47 07 d5 a8 6f b5 19 33 d3 bc 63 bf 9f c8 69 8c c2 84 19 91 44 2d ee 1e da 6e 4f 18 c6 81 fb bb 1d 29 25 86 21 87 6b 30 12 0b ad 79 4d ab b8 67 a5 16 5a 6d e4 3c 7a ae c7 e8 fd 3a e6 ea 44 37 ed e6 f5 f8 cb 67 76 aa 85 b9 79 9e 48 29 95 cb 10 ae 2d b9 Data Ascii: R+jH/3L-}UHYA}b#^Evya+Tj1 )FXLM&A^Iw\|$mggj9;C-Oim;w^wR)fv{gKtDGo3ciD-nO)%!k0yMgZm<z:D7gvyH)-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49884	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1000	OUT	GET /media/wysiwyg/campaign/Slider/noel-24-2.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89824 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "6JzfGJcmV8MLJGlmiT186mZaCOA6fPtOChh6/t8bwS8" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=324994 idim=1920x700 ifmt=jpeg ofsz=89824 odim=1920x700 ofmt=jpeg Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162780542e59f9e6534603fb85a9f-aa36438e29bfd124-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72196 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdfw8210028-DFW X-Cache: HIT, MISS X-Cache-Hits: 6, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 60 ab 4c 13 b9 09 fa 4a fd ec 64 2a 12 dc 89 2b 8e f6 95 bc 82 f7 48 28 4f 66 0f 93 57 12 76 6d 18 f1 15 e8 61 b0 f8 8c 45 7a 8a 14 68 d3 95 4a 93 7c a3 08 2d 4d bf 24 88 32 39 5b a5 ce 1f 33 93 a9 98 64 98 75 88 54 9c eb d6 9b 8b 57 73 54 e8 b5 b7 9c 5c af b9 c8 e0 f1 18 7c 5e 1e 8e 27 0f 5a 15 a8 56 a6 aa 53 a9 07 78 ce 32 dd 35 e4 4c ee f3 2c 3a 5f 37 6a 14 2a ca 4a 56 75 96 a6 a2 9c 3b 45 f2 93 f6 1c cf 69 19 a8 54 f1 30 f4 e4 aa ba 92 8a 70 a9 37 1d 2d ce 1e 8c ae 9f 2d d1 91 ef cc 6a 4d ca ac 65 52 f7 b4 a3 1b 72 5e ab df ae e8 4c 94 ed a5 94 34 ba 1a 94 20 e8 d5 c4 42 18 78 c2 94 a5 e2 c6 4a 57 73 9d 4f c6 5e 2f 95 9f bb 73 65 a5 73 5e bd 2f c2 e1 ab d3 a2 a7 38 4d c1 c9 cf 4e 8a 55 3d 69 3e 8e cd 2d 8b 3e 12 8d 84 d3 2e c6 37 74 ec 5a 67 43 5f 10 Data Ascii: `LJd+H(OfWvmaEzhJ\|-M$29[3duTWsT\\|^'ZVSx25L,:_7jJVu;EiT0p7--jMeRr^L4 BxJWsO^/ses^/8MNU=i>->.7tZgC_
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: a5 66 41 51 6a c0 56 dd 81 b0 0b 80 20 ea 31 01 49 96 88 45 dc 07 62 2e d1 57 26 e0 50 d1 17 1a 60 64 b8 ac 2b 85 c8 0b 09 a1 dc 0a 26 c4 d8 b6 2b a0 22 c2 b1 61 d4 08 18 da 00 10 99 49 89 84 49 c0 71 6e 2f 1d 83 e1 7c eb 13 82 a9 e1 e2 69 61 65 2a 75 2d 77 07 74 9c 95 fa a4 f6 39 f3 0e 27 0b 0c 66 17 13 84 9f ab 5e 8c e9 3f eb ab 10 69 f0 e6 65 f4 ae 43 95 63 ae dc ab e1 a0 e7 df c4 5e 8c be d4 73 38 7a d4 31 0a 33 a5 56 9d 48 6a 71 72 84 94 a3 78 bb 49 5d 75 4f 9a e8 79 4f c9 26 3a 6f 26 cc b2 ca 8d f8 b9 7e 3a 4b 7e 76 a9 cf e1 24 ce 8d c5 f9 9e 79 f2 7f c5 19 9c b2 87 4d 60 33 9a 6f 12 a8 d5 8b 9d 38 d6 7e 8d 59 41 26 ad 24 f7 f3 4c 2b b7 7c 92 62 67 99 62 78 e3 39 95 bf 96 67 6e 31 7d 74 53 4d c5 7b 12 91 ec c9 ec 78 ff 00 c8 96 1b c0 e0 55 2d 36 f1 Data Ascii: fAQjV 1IEb.W&P`d+&+"aIIqn/\|iae*u-wt9'f^?ieCc^s8z13VHjqrxI]uOyO&:o&~:K~v$yM`3o8~YA&$L+\|bgbx9gn1}tSM{xU-6
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 18 ac 14 00 00 42 40 02 01 dc 04 01 4e e3 24 64 0c 04 32 86 51 23 20 a1 88 60 30 01 80 80 60 41 20 3b 08 04 26 31 14 20 60 00 21 32 ac 26 02 01 d8 00 9b 0e c3 02 00 60 00 08 62 18 0c 62 19 40 31 0c 81 8c 91 80 c0 43 02 91 44 a1 80 c0 00 29 80 00 40 30 00 a0 62 18 0c 00 00 00 e2 31 f9 d6 07 03 56 34 aa b9 39 38 de d1 57 b2 f3 32 e0 33 4a 18 fd 6e 8d 3a ba 63 ce 52 56 57 ed cc cf d2 e2 9b f2 45 e3 9b cb c5 d7 25 f9 79 b9 67 5e 6e 48 00 0d 1c 98 00 00 c4 00 00 31 00 0c 04 00 30 10 00 c6 20 01 80 20 00 11 42 01 31 0c 2c 02 1a 01 00 c4 00 00 4b 28 40 20 00 00 15 86 c4 00 00 05 05 85 60 04 00 16 01 a0 20 65 32 58 12 f7 21 ec 58 69 02 13 29 a6 52 49 74 1e ae c0 63 b9 4a e5 a0 7b 84 49 3e f1 b6 27 60 a4 c8 b9 62 b1 40 90 c6 00 00 00 01 ef 01 0e e0 31 00 98 0c 2e Data Ascii: B@N$d2Q# `0`A ;&1 `!2&`bb@1CD)@0b1V498W23Jn:cRVWE%yg^nH10 B1,K(@ ` e2X!Xi)RItcJ{I>'`b@1.
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ae c3 e6 4f 41 a4 ec 50 a5 3a 70 8c e7 52 6a 10 84 5c a7 27 ca 31 8a bb 6f d8 8f 95 f8 e3 8b 31 5c 4b 8a 9a d5 3a 79 6d 19 37 87 a1 d1 a4 ec aa d4 5d 67 2e 9d ba 1f 41 71 a3 9c 78 47 3e d2 ec de 12 cd ae ce 49 33 e5 6c 4b 8c 69 be ce ae 1d 3f 35 cc f3 67 bc c4 d6 b0 ea b1 1d dc 16 2e 94 69 2a f7 8a 52 a3 15 29 db 92 93 5e 8a f6 2b 9c 76 0a 09 2a 8d ab f8 69 ca de 53 be df 61 c8 e6 92 b5 0c f2 77 dd e2 61 1f 72 d4 ff 00 71 a3 87 9b 85 5c c1 35 ea e1 92 5e db 2f e2 2b f7 73 f2 27 bb d3 78 6f 13 5f 28 c6 cf 1b 81 aa a9 ce 9d 48 c2 fd 24 a6 94 94 65 1f ad 19 5f 97 24 7d 37 93 66 b4 73 6c ba 8e 32 94 54 75 5e 35 20 9d f4 4d 73 49 f6 ea bc 8f 90 30 b5 66 a5 07 7b 28 47 08 ed df 7b 5c fa 0b e4 c2 ac a7 86 cd a3 f5 14 e9 34 bc ef 25 f7 19 61 b5 ab 9f 5b f5 6d 1d Data Ascii: OAP:pRj\'1o1\K:ym7]g.AqxG>I3lKi?5g.iR)^+viSawarq\5^/+s'xo_(H$e_$}7fsl2Tu^5 MsI0f{(G{\4%a[m
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 7a 37 e8 75 1f a7 f3 7f ce e5 f0 8f f0 35 bf 1d 8a 94 c7 69 ad b5 78 99 8e de 0e 2b c3 de d6 b4 44 c7 ab dd ea 43 3c b3 e9 ec df f3 b9 7c 23 fc 03 e9 ec df f3 b9 7c 23 fc 0c bf c4 f0 7e 0b ff 00 6f f9 77 fc 26 4f 3a bd 4e c2 3a d7 0d 63 b1 78 ca 78 97 88 aa e6 e3 28 e9 ba 4a d7 bf 63 b3 1e ec 59 2b 97 1d 6f 11 3a 9e db 79 ef 49 a5 a6 b3 e0 40 44 db 50 9b 5c d4 59 e6 1f 4f 66 ff 00 9d cb e1 1f e0 65 c4 71 54 c1 cb cd 16 9e 6d eb 5e e7 78 b0 db 26 f5 31 d3 cd ea 42 67 97 7d 3d 9b fe 77 2f 84 7f 80 7d 3d 9b 7e 77 2f 84 7f 81 e6 ff 00 13 c1 f8 2f fa 43 5f e1 32 79 d5 ea 02 3c bf e9 ec db f3 b9 7c 23 fc 0f 47 ad 8b a5 87 c3 78 f5 a7 68 a8 a6 df 56 fb 2f 33 d1 83 8b c5 9a 2f 31 13 11 58 89 9d b2 c9 82 f8 f9 77 31 3b ed a6 c3 68 11 e7 b8 de 25 c6 d6 93 54 2d 4a Data Ascii: z7u5ix+DC<\|#\|#~ow&O:N:cxx(JcY+o:yI@DP\YOfeqTm^x&1Bg}=w/}=~w//C_2y<\|#GxhV/3/1Xw1;h%T-J
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 7e 96 47 53 e0 9e 1c af c3 d9 05 2c 26 2a b3 ad 8d af 56 78 ac 7d 56 f5 39 e2 2b 6f 2d fa da d6 bf 53 b7 e8 a5 52 32 a7 52 2a 50 9c 5c 67 17 c9 c6 5b 34 c4 f6 46 49 f3 7e d2 55 ee 60 c2 ca a4 b0 f4 fc 48 d3 8d 48 ad 13 8d 39 6a 8c 65 1d ac bd dd 0c f2 2c 76 11 27 7b a3 5e 92 51 96 22 36 aa ef 3f 11 ce 5b c7 d3 db 4c 7b 25 6e 46 67 77 cd 74 b3 21 a4 aa d3 bc aa 35 26 e3 a2 3c 9b 97 27 25 d9 5b 99 27 cc 5c 1d b6 66 44 63 d3 66 5a 28 9a 93 54 d4 6a ca ac 21 18 49 6b 94 97 d5 97 a3 64 fa 3b b4 65 9c 6c fc c8 9c 3c 48 4a 1e 8d e5 16 96 a5 a9 26 f9 36 9f 3b 11 87 aa ea d0 a5 39 54 a7 39 e9 b5 49 53 77 87 89 1f 46 56 f7 a2 78 8c a9 98 75 35 88 a9 09 4e 8a 53 82 9d 38 2d a6 ed e8 cd be ea f6 dc 72 6d 33 5f 10 e7 4e 30 af 15 42 f4 a5 79 ce b7 a3 a6 93 da a3 8c ba Data Ascii: ~GS,&Vx}V9+o-SR2RP\g[4FI~U`HH9je,v'{^Q"6?[L{%nFgwt!5&<'%['\fDcfZ(Tj!Ikd;el<HJ&6;9T9ISwFVxu5NS8-rm3_N0By
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: b5 4a 33 5e 94 24 e2 fd c7 a2 f0 d6 36 78 9c bf 44 dd e5 46 5a 2f fa 3d 3f 81 d3 b8 83 4f d3 18 bd 3c af 1f 8e 95 73 9b e0 fd 5a b1 dd ad 4e ff 00 69 f3 38 49 9c 7c 6c d2 27 a6 ed 5f d1 eb cf eb 70 f1 69 ef a8 9f d5 c5 71 37 f3 bd 6f d5 87 dc 72 fc 1d ff 00 7f ff 00 85 ff 00 51 c4 71 2f f3 bd 6f d4 87 dc 72 fc 1d ff 00 7f ff 00 85 ff 00 51 70 ff 00 fb 94 fe 7b fd 24 bf f9 58 fc b5 77 63 cb b8 8f f9 e7 15 fd 4f d8 47 a8 9e 5d c4 7f cf 38 af ea 7e c2 3d 7f 69 7d c5 7f 3c 7d 25 8f 09 f7 96 fc bf bb 9f e0 ff 00 c5 63 3f 5a 1f 73 38 9e 27 c0 fc df 1d e3 45 7a 15 d6 af 64 97 3f 8f 33 96 e0 ff 00 c5 63 3f 5e 1f 73 39 bc ef 03 f3 dc be ac 12 bd 48 7a 70 f6 ae 9e f3 3a e1 f4 bf 67 d2 22 3a c4 4c c7 ca 5d 4d f9 38 ab 4f 84 ea 25 d5 78 53 1d e1 62 a7 86 93 f4 6a ab Data Ascii: J3^$6xDFZ/=?O<sZNi8I\|l'_piq7orQq/orQp{$XwcOG]8~=i}<}%c?Zs8'Ezd?3c?^s9Hzp:g":L]M8O%xSbj
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 45 4a 58 68 46 71 d3 69 25 de 49 1d 16 9a 4e a4 13 e4 e4 8f 4a e2 1b 7d 0f 8a fe a7 ed a3 cd a9 7e 36 9f eb 2f bc f3 7d a1 5a d7 88 a4 56 b1 11 c9 1d a3 df 2d 78 69 99 c5 69 99 99 f5 a5 e9 9f 44 65 97 ff 00 33 a7 f0 33 7c d7 0f 86 c3 57 8d 1a 4a 11 71 93 69 77 b1 bf 64 62 af 6f 02 b7 ea 4b ee 3e d7 a3 c7 58 99 8a 56 27 5e 10 f0 f3 5a 66 22 6d 33 f3 78 f9 e9 f8 4c 06 02 58 5c 3b 96 12 83 6e 94 5b 6e 9c 6f cb d8 79 81 99 7c e6 ca de 25 ba 73 3f 3d c2 e7 ae 19 bc ce 3e 7d c4 7c 9f 4f 36 39 bc 46 ad cb a7 a6 fc c3 2e 4e cf 05 43 fb b8 ff 00 03 66 94 29 52 8a 85 38 46 11 fc 98 a4 96 fe c3 ca bf 94 ff 00 b4 fb 4f 4b c0 53 9b c0 e1 2e f7 f0 29 f3 e7 ea a3 eb f0 bc 45 73 5a d1 18 79 35 1d de 2c d8 a6 91 1b be f7 2d db 87 b0 c6 ef 17 66 d6 fd 0c 8a 37 4a fb 1e e7 Data Ascii: EJXhFqi%INJ}~6/}ZV-xiiDe33\|WJqiwdboK>XV'^Zf"m3xLX\;n[noy\|%s?=>}\|O69F.NCf)R8FOKS.)EsZy5,-f7J
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 95 cc 49 a8 d4 70 9d 5a ad d4 5f 83 a7 6b c2 3a 39 db b5 d1 c4 f8 48 cd 17 d0 a3 1a e6 65 45 0b a1 d4 f8 df 2a fa 4b 86 f1 6a 31 bd 6c 2f f2 9a 56 e6 f4 7a d1 5e d8 9d b4 12 8b 76 9a bc 5a 6a 4b bc 5e cc 96 ac 5a b3 13 e3 04 77 7c 4d 8b 84 54 a9 c1 fa be 25 19 2f ea b7 17 f6 34 71 99 64 5b 8d 2b f4 a5 42 3d ed a7 54 d9 da f8 9f 2d fa 3b 31 cc 30 72 d9 e1 eb 4e 9f f5 53 6d 7d 96 38 6c 9f 0d 2a b3 a3 08 ab b9 ca 31 4b ce 5b 2f 69 e2 89 98 c5 6d ff 00 e6 9d ff 00 53 e8 af 92 dc 99 61 72 ac 46 65 52 36 a9 89 97 87 4f ca 9c 3d 66 bd af ee 3d 40 d5 c1 60 e9 e0 30 58 4c 1d 35 e8 e1 e8 c2 9a f6 a5 bf da 6c a3 d7 8e bc b4 ac 7b ba fc 5c cc ee 65 42 dc 68 19 da 04 ee 04 59 96 00 00 04 00 86 20 01 0c 41 50 32 0a 34 66 63 10 10 50 c9 b8 ee 14 c0 57 00 18 5c 40 03 19 Data Ascii: IpZ_k:9HeEKj1l/Vz^vZjK^Zw\|MT%/4qd[+B=T-;10rNSm}8l1K[/imSarFeR6O=f=@`0XL5l{\eBhY AP24fcPW\@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49877	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1003	OUT	GET /media/wysiwyg/home/agencement-magasin-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	858	IN	HTTP/1.1 200 OK Connection: close Content-Length: 101507 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "A7E/V+0RsZml2UUfrAHRF51J4u0dSFWv6kEY1Qnuoyk" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=101507 idim=400x400 ifmt=png ofsz=101507 odim=400x400 ofmt=png Fastly-Io-Served-By: vpop-etou8240194 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801627809ff39e3cd433c1184a5ae01-e7d43c49436f5459-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960025-PAR, cache-dfw-kdal2120076-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 b0 ed d9 55 df f7 59 7b ef df ef 0c 77 7a ef f5 a0 09 0d 48 62 90 10 20 0c 88 60 8b c1 02 82 00 63 c7 03 b1 b1 2b 49 41 62 92 c2 71 c5 a9 4a 82 e3 a4 2a 49 c5 a9 c4 ae b2 9d 8a 43 1c 27 c6 38 b8 3c 61 88 0d 89 81 80 81 30 09 63 8c c1 48 98 49 42 8d 26 ba d5 ad 37 dd 7b cf 39 bf df 1e 56 fe 58 fb f7 3b b7 e5 17 a1 a1 bb cf eb 7e fb db 75 fb de 77 87 73 f6 6f 5a c3 77 7d d7 da d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 d0 Data Ascii: PNGIHDR6 IDATxyUY{wzHb `c+IAbqJ*IC'8<a0cHIB&7{9VX;~uwsoZw}
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ad 18 5d f5 a7 68 d7 b0 e1 f9 0f 07 fc 87 c0 2f 01 5f 73 e0 b5 34 7c 0c 68 c6 e7 f9 85 13 e0 af 63 45 f2 57 1d 76 29 0d 0d cf 38 5e 0e fc df c0 77 00 a7 07 5e 4b c3 47 81 e6 40 9e 3f 78 13 36 f0 f0 1b 0e bd 90 86 86 67 19 ff 16 56 64 ff 9d 87 5e 48 c3 47 46 73 20 f7 3f 3c a6 b0 fa 29 4c a6 db d0 f0 20 e0 93 b1 d9 5a ff 0d ad 09 f6 be 45 53 61 dd df 78 25 b6 81 4f 1b 97 dd f0 20 e3 6d 58 56 f2 1b 87 5e c8 fd 84 a6 c2 6a f8 48 f8 7a ac 9b bc 39 8f 86 07 1d bf 13 f8 79 e0 df 3e f4 42 1a 9e 8e e6 40 ee 3f 2c 80 bf 0a fc 6d e0 f0 21 46 43 c3 fd 81 53 e0 ff c0 9e 8d c5 81 d7 d2 50 d1 1c c8 fd 85 4f 06 7e 12 f8 a6 43 2f a4 a1 e1 3e c5 37 61 1b 58 bd fc d0 0b 69 68 0e e4 7e c2 5b 81 9f 03 3e ef d0 0b 69 68 b8 cf f1 26 ec 59 69 1b a2 1d 18 cd 81 1c 1e 02 7c 0b a6 Data Ascii: ]h/_s4\|hcEWv)8^w^KG@?x6gVd^HGFs ?<)L ZESax%O mXV^jHz9y>B@?,m!FCSPO~C/>7aXih~[>ih&Yi\|
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 9b 73 29 35 db d0 fa 3a e2 64 fe 1d 27 02 08 45 94 82 a2 ae 3a 14 04 2f 0e 29 8a 2b 6a 5f 3b 05 31 d7 93 ec 1d aa 03 33 e7 93 63 a6 94 82 13 87 3a 97 0b 72 d7 2f 96 1f 5c ac 4f de bf 5a 9f 3d d5 77 cb 5b c7 c7 27 b7 fb e5 fa f1 93 eb 8f bc eb e8 ec 91 77 1f 9d 9c dd 3a bd 76 b2 ed fa c5 b0 58 ae c7 31 4a 7c f6 6f 92 7f 15 cd 81 dc 03 cf 13 07 f2 c7 b0 11 25 f7 dd f9 6b 38 2c 54 8d 1e 2a b9 a0 5a 48 71 20 8d 03 39 25 62 1c d9 6e 2e b8 bc f5 14 bb cb 3b 8c e3 8e cb cb bb 6c 2f 2f 28 69 47 1e 2e 19 2e cf c9 e3 60 4e 24 8e a8 66 14 a5 50 70 5e f0 c1 23 40 90 40 90 de 22 6f f1 88 77 38 f1 58 e0 6e ee c3 8a 0d 66 d4 4b 29 66 d0 05 72 2e 88 80 82 99 77 15 b4 18 2d a4 9a 10 67 99 81 57 33 ee d9 43 11 a9 c7 66 2f 1b 9c 27 88 d8 ca 54 51 51 70 ae be a6 fd 1f 1c d5 Data Ascii: s)5:d'E:/)+j_;13c:r/\OZ=w['w:vX1J\|o%k8,T*ZHq 9%bn.;l//(iG..`N$fPp^#@@"ow8XnfK)fr.w-gW3Cf/'TQQp
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 6e ba f5 c9 13 37 5e f4 e8 bb 8e 4e cf 7e ed f8 fa f5 27 fa e5 f1 ed a3 93 d3 8b 6e 71 74 f3 f4 f8 65 8f 9f dc 78 f8 a0 f2 e3 e6 40 3e 3a ac 81 1f 01 be e0 d0 0b 79 41 a1 1a 90 98 06 e2 b8 43 14 52 8a 0c bb 0d 63 95 8b 0e c3 86 dd f6 92 dd e6 9c 8b 5b 4f f1 a1 c7 3f c0 e5 ed 9b 88 16 d0 8c e6 01 cd a3 45 ad e2 2a 15 e4 08 0e 72 8c e4 0c fd a2 c3 87 40 2a 8a e0 8c 32 09 a6 dc 71 2e a0 e2 50 51 33 ce c6 db 20 e2 ed 73 31 4e 5d a4 58 84 cd c4 5e b8 f9 e1 a9 b6 72 76 00 53 16 31 51 42 a6 30 92 89 dc af 05 61 d9 bf 56 a5 9c 8a 6a fd fd a7 33 1a aa 57 52 95 ca f5 ef bf 5f 8b cd 62 d4 4b e7 c2 ec 6c c4 b9 6a 5e cd b8 aa 59 50 a3 c3 c4 ea 0a 4e 6a 9e 52 cf 9d 38 57 ff d8 be 5f 54 91 62 e7 a6 cc c5 6e 57 0d 78 9c 0f 72 a2 95 26 bf 38 1d 43 51 bd 52 24 b7 1f 7a 04 Data Ascii: n7^N~'nqtex@>:yACRc[O?Er@2q.PQ3 s1N]X^rvS1QB0aVj3WR_bKlj^YPNjR8W_TbnWxr&8CQR$z
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 3c 82 48 37 53 3b 4c 2a a8 9a 31 4c 54 8d 14 40 73 35 b0 66 9c 52 4e 26 4b 75 53 c4 3c 15 c7 b5 52 54 5a bf 5f a0 e4 b9 80 ac 45 49 75 bd e2 3c f8 29 f2 ae 7e 52 84 20 ae da fa 3a 4e a4 5e 1f e6 0c c8 55 43 6d 45 f4 a9 87 43 ae c8 6f 05 ab a5 50 8f eb c3 0d b4 fd bc 16 cd 6b 96 31 25 67 ce ed cf 96 73 42 a7 42 ce fb 6b 30 71 74 b3 ec 96 49 80 30 95 e1 af b8 f9 89 2e ac f7 86 9b 33 c5 a9 e3 5e e7 73 6d 34 98 ee 9d 60 29 f6 9e ce e1 82 a3 73 53 16 e8 f1 35 ab 01 c5 8b 10 7c a5 3a 55 ec bd 34 a2 25 53 9c 92 c5 9c b7 a5 20 81 88 90 70 14 35 c1 86 f3 53 c0 e3 ea da 92 d5 6b 14 42 ed cd 59 f6 67 64 bf 63 cc 17 14 11 c6 9c f1 bb c2 22 2b 1f ec 05 3a c7 51 f2 14 81 e0 3b f0 85 d1 8b 24 2d 1f 16 05 3c b7 68 0e e4 ff 1f 2f c3 06 24 76 87 5e c8 55 a8 16 34 67 72 8a Data Ascii: <H7S;L*1LT@s5fRN&KuS<RTZ_EIu<)~R :N^UCmECoPk1%gsBBk0qtI0.3^sm4`)sS5\|:U4%S p5SkBYgdc"+:Q;$-<h/$v^U4gr
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 54 c4 d5 b1 21 16 74 38 07 de 5b d1 df 55 87 ac 35 28 f1 e8 3e 1b a9 fd 17 4a ed 18 2f a0 59 e7 ac 6a 2a a4 78 e7 71 c1 ce 5b e7 3d 0e a3 f0 9c f7 50 03 05 71 9e e0 7c 75 34 05 e6 9e 0f a3 40 ed d8 f7 7d 24 9a f7 f7 1f 52 c8 35 f3 43 ad 83 3e c6 84 aa d2 77 01 bc 35 06 86 45 47 d7 9f 30 de ba 8b cb 99 12 8c 8e 0a 5e 10 59 f3 d4 5d 21 13 39 ed 04 4d 89 1c 95 d0 05 ee 9e 6f f8 81 7f fc f3 3c fa f0 43 bc e5 f3 3f ad d2 b5 81 a5 44 ee 6c b7 7c ef cf be 97 d7 bf e2 25 7c de 67 bd 96 b1 46 5b ab ae c3 e1 78 6a 54 46 3c 47 3e 90 54 29 c1 3e bb 4e 38 3e bd 8e f8 25 5e 21 88 32 e8 48 2e 11 65 f9 89 19 94 67 00 cd 81 fc ab f8 63 c0 9f 38 f4 22 ee 05 55 4b d5 09 9e 21 17 5c 49 b8 e0 48 b9 1a 14 2f d6 d9 6c 21 3a 54 1d 7c 8c 89 18 23 52 9b cb 2c a2 af 35 04 27 56 18 Data Ascii: T!t8[U5(>J/Yj*xq[=Pq\|u4@}$R5C>w5EG0^Y]!9Mo<C?Dl\|%\|gF[xjTF<G>T)>N8>%^!2H.egc8"UK!\IH/l!:T\|#R,5'V
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 9e aa 83 62 81 09 c5 d3 b9 05 a8 5d 67 34 55 96 d4 41 70 24 20 4f 8e bc d2 5f e6 dc ed b8 52 bd 2f ac af 24 d0 85 8e e5 72 c1 38 46 b6 bb 0d 52 cc 68 96 14 f1 45 19 92 f2 f8 dd 0d 9d ef b8 ee 03 39 3b ba 70 8a 57 73 82 6f fb d9 77 f2 73 6f 7f 8c df fd e6 4f e7 55 2f 5b 9b 73 97 8e 45 d7 71 fb 62 cb 3f fc e1 b7 f3 b2 17 3f c4 ef 7a e3 2b 29 29 11 c4 e1 bd 9d cb d0 ad e9 fa 53 44 15 5f 8c 5a d3 92 71 e2 e8 83 b0 5e 79 72 ca f5 7b 1e 2a dd 2a b9 40 09 38 55 bc 26 bb 65 73 a9 99 fc e4 50 ea fd ad 55 40 50 b3 c7 49 34 a2 a5 90 72 26 c7 c4 a5 98 82 72 da 7b d1 87 29 6b 9e fb 71 e6 76 9b 43 a1 39 90 3d fe 5b e0 f3 0e bd 88 8f 04 a5 10 93 45 53 c1 39 fa ae 23 fa 84 b7 3b 8f 5c 12 9a 53 55 a3 14 4a 11 0b 4c 73 21 67 e3 be 45 05 ef 82 51 32 c1 48 f1 e4 a7 22 b5 33 Data Ascii: b]g4UAp$ O_R/$r8FRhE9;pWsowsoOU/[sEqb??z+))SD_Zq^yr{**@8U&esPU@PI4r&r{)kqvC9=[ES9#;\SUJLs!gEQ2H"3
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e1 43 20 d5 42 b2 0b 9e c5 22 d0 67 18 c6 52 c7 91 18 05 e5 bb 05 e2 17 ac 57 27 5c 6e 95 21 ef 90 ce 76 26 74 b1 98 74 77 e1 78 fb 7b 6e f1 cf de f1 0b 7c c6 6b 5e ca e7 7f c6 ab 2d fb f5 d6 cd bd 58 2e 78 df 07 3f c0 df f8 ae 9f e0 2b df f2 46 3e f7 33 3f 1d d5 0d 82 35 8d 6a 1e 29 49 48 fd 92 5d c8 20 89 2e 18 55 94 c7 88 4f 99 45 70 2c 96 2b 3a a7 f8 92 c8 c5 ae 63 d7 f5 2c f0 b8 ec e6 9a dd 7a b9 b2 f3 a3 d6 c4 97 d2 58 f5 75 56 af d1 da 73 53 4a c1 95 bd 45 4e 31 32 56 21 c9 4c 37 e6 89 66 35 e9 6f ce 56 8b 52 2c 5e f1 98 1c 5b eb 5c f9 d9 ef 4f af 5b 65 c7 d3 60 cb a2 57 ba ee 75 ff de d3 1e 2d 29 d5 f0 4b 4c e8 90 4b 41 c4 e3 9c 35 15 f2 f4 d8 eb 39 47 73 20 f0 3f 02 af 3a f4 22 3e 1a d8 50 b7 1e 97 07 4a ca b8 60 7a f8 92 33 be 1a e3 69 32 ec dc Data Ascii: C B"gRW'\n!v&ttwx{n\|k^-X.x?+F>3?5j)IH] .UOEp,+:c,zXuVsSJEN12V!L7f5oVR,^[\O[e`Wu-)KLKA59Gs ?:">PJ`z3i2
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: eb 82 cb f3 0d 29 d5 83 77 0e 5c 67 4e 23 97 4a 3a 4e af e7 e8 57 3d 5d 70 f4 c1 c6 b9 3b e7 38 3f df f1 6b bf f9 04 77 36 e7 ac 1f 3d e3 a1 87 03 25 8e c6 63 b3 2f 2a bb 3a 31 76 9a 9d d4 f5 81 a3 d5 ca bc c4 d4 cc c6 a4 7a b2 8c c3 89 92 4a aa 51 70 55 4f 39 88 29 52 34 e3 eb 30 c7 54 22 49 23 ae 0c b3 04 ba 64 25 66 18 34 e3 d4 1a d2 52 ce ec 36 b1 ca 9b ed d8 42 a8 eb 0b 9e f5 d2 93 53 e1 b2 36 8c 6a 32 da 4a 05 5c d7 b3 1b 94 9b 1f b8 83 63 e0 ec da 11 e2 bc d5 cb bc 39 e1 a3 d5 29 4f 7c d0 f1 57 ff ce 8f f2 d0 23 3d df f0 07 df cc e9 42 88 69 47 5e ad 10 d7 11 c2 82 db b7 37 3c f6 81 5b bc 21 be 92 c5 72 39 d7 31 16 8b 1e 97 0b 8e c2 d9 b5 53 6e 8e 42 d6 82 e4 82 64 21 8b fd cc ab 7d 38 2d d6 17 e2 6d 8d aa 56 b3 31 1a d6 db 6c 34 cd 88 46 bc f3 a0 Data Ascii: )w\gN#J:NW=]p;8?kw6=%c/*:1vzJQpUO9)R40T"I#d%f4R6BS6j2J\c9)O\|W#=BiG^7<[!r91SnBd!}8-mV1l4F
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 12 35 b5 a2 5a 16 eb 9c 63 72 63 05 c8 ae 8e ac af c5 f6 5c 32 c5 65 34 d8 33 e9 5d 67 9d fa 3a 60 fb cf 64 40 72 73 20 cf 3d 16 c0 ff ca 81 d5 0b 1f 1f 94 22 b6 6b de a4 1c 9a 1f e4 59 59 b4 8f 70 a6 14 99 fa 7b d4 5e 09 8b fa 4c 25 55 ea a6 41 5e 8c 8b 4f 39 19 dd 25 42 ae f5 81 5c f7 05 e9 9c af b5 0d 8b 2f 8d 63 ae fb 54 a8 8d 02 71 96 81 e3 a7 f1 20 55 c2 38 8e 23 aa 42 c8 46 17 79 df e1 fd 12 27 83 71 cd a1 63 1a 69 e2 6b 21 9a 3a a8 91 4e b8 71 74 8d de 05 1b ef ae 85 a4 99 94 b7 c4 b8 63 4c d6 48 39 45 87 bd eb c0 3b 1b c6 a7 d0 69 a0 f7 81 a1 6c 18 a2 71 d9 92 99 e7 72 89 5a 5d 25 c7 01 a2 d1 04 ae ef 70 d3 bc a6 5a 88 f5 de 91 92 51 4f eb a5 63 1d d6 6c c7 cc 66 17 71 8b 0e f1 8e 18 23 5e 1c dd a2 27 8e 99 9f ff d5 df e4 fc 7c cb eb 3e fd 35 dc Data Ascii: 5Zcrc\2e43]g:`d@rs ="kYYp{^L%UA^O9%B\/cTq U8#BFy'qcik!:NqtcLH9E;ilqrZ]%pZQOclfq#^'\|>5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49883	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1006	OUT	GET /media/wysiwyg/home/emballage-alimentaire-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 146698 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "lC8orlVp+OUrc98L/YPvsNSKrvcTQ0MVgxd4jcp4lm4" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=146698 idim=400x400 ifmt=png ofsz=146698 odim=400x400 ofmt=png Fastly-Io-Served-By: img02-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-1801627807041641e8493ad64f6b5c04-51b8018a37110183-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960064-PAR, cache-dfw-kdfw8210106-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 cc 66 79 56 df f7 39 bf e5 de fb 2c ef 52 d5 5d d3 b3 0f b3 c2 cc f4 30 0c 30 c3 0c 66 00 23 c7 90 40 02 b6 09 32 09 96 15 cb 58 24 11 48 89 c0 4e 82 1d 1b e2 28 7f 84 48 51 12 29 b2 64 29 52 62 cb 89 92 08 21 16 d9 91 91 d9 02 84 f1 f4 2c dd b3 74 4f af d3 7b 2d 6f d5 fb be cf 72 ef fd 2d 27 7f 9c 5b 35 08 81 0d 4c 77 bf bd dc af 54 aa ea ae aa a7 9e e5 3e f7 fc ce 39 df 05 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc 98 31 63 c6 8c 19 33 66 cc Data Ascii: PNGIHDR6 IDATxyfyV9,R]00f#@2X$HN(HQ)d)Rb!,tO{-or-'[5LwT>9f1c3f1c3f1c3f1c3f1c3f1c3f1c3f1c3f1c3f
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 1e f1 dd 01 aa 62 dd 46 71 48 08 d4 71 a0 96 11 1f 1b 6a 2d 28 10 da 25 61 b1 a2 0c 3d 65 1c c0 39 5c 98 7e bf 64 24 b6 68 e9 a9 e3 96 5a 93 8d b6 f6 3b 6a 4a f6 3a 4a a6 8e 3b 5c b7 c6 05 4f 19 36 90 7a 62 d3 12 ba 05 55 2b 59 2a de 3b 54 2a e2 80 d0 a0 2a 34 ab 05 b5 16 da f5 9a cd ad 13 1e bd ff 53 bf 00 bc eb 62 3f b9 19 7f 14 e6 0e 64 c6 8c 17 19 8f 3e f4 d0 5d d7 9e 7d e2 ef 9e 5c 7b f6 c7 11 25 8a e2 1c 50 0a a5 8c 36 46 42 09 cb cb 54 94 b2 3d c5 c5 48 2d 95 d0 34 a0 89 bc db a0 b5 22 ed 9a 78 f0 3a 44 94 7c f3 19 b4 56 5c db da be 42 15 cd 99 92 46 24 04 5c 6c 28 e3 80 a6 84 c4 80 6f 96 38 11 4a 4e d3 38 aa 22 08 8a 8d a3 c0 e1 7c 44 6b c6 79 0f 08 25 0d 88 08 e2 3d 35 67 b4 16 bc 0f 88 40 1e 7b 72 1a 88 cb 4b b8 ee 98 3a 9c 92 f7 a7 88 f7 80 43 Data Ascii: bFqHqj-(%a=e9\~d$hZ;jJ:J;\O6zbU+Y;T*4Sb?d>]}\{%P6FBT=H-4"x:D\|V\BF$\l(o8JN8"\|Dky%=5g@{rK:C
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 0b a4 cd 19 0e 70 a1 31 66 57 b1 d7 1c 56 47 20 9e bc d9 83 c3 d6 44 ce 23 d3 02 c5 09 a8 44 1e ff c2 fd ff a8 59 2d 7f e3 75 f7 bc f3 c9 17 e7 92 99 f1 27 c1 3c c2 9a f1 4a 46 0b bc 1b a3 79 be 63 fa f9 6b 80 b7 02 6f c1 8a c2 8b 86 f3 d3 9b 3c fa c0 bf e4 ec e4 19 28 05 1f 17 84 e5 6a 12 df 99 96 a2 4e 4b f3 8a a3 f4 7b fc f2 88 d8 2d 28 db 9b 94 5c f0 0b fb f3 02 10 02 65 7f 8e c4 06 17 5a c6 b3 ab a4 ed 39 ea 3c ed fa 08 1f 1a 6a 55 63 5e 79 4f 68 02 3a ee 6c 69 ae 02 ae 41 9d 8d 88 ca 68 e3 2a 13 23 3a 24 34 93 9a dc 96 ee b6 7c 9f f6 25 e2 10 e7 71 cd c2 68 be 69 07 e2 91 d8 50 d3 80 d4 44 19 13 3e 7a 9c 0b 8c e3 48 58 df 05 35 a3 e3 0e 54 c9 63 0f b7 39 5d 22 b6 38 af 15 09 11 17 1a b3 5b c9 09 77 7b 7c e7 1b 72 bf a3 8c 23 2e 36 b8 10 d1 9a c8 fd Data Ascii: p1fWVG D#DY-u'<JFycko<(jNK{-(\eZ9<jUc^yOh:liAh*#:$4\|%qhiPD>zHX5Tc9]"8[w{\|r#.6
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 7b 70 05 89 0b a4 16 9c 77 d4 3c 52 53 4f 68 0f 90 10 d1 dd c6 d8 52 08 a1 5b e2 43 60 dc 9e 92 f7 e7 b8 d8 51 b5 e2 9a 35 7e 79 84 0b 01 ed cf c9 9b 9b e4 94 91 76 69 85 ac e4 c9 a6 7d 20 6f 6f e1 96 c7 48 0c 04 0e 8c ee 3b 6c a9 a5 47 7c 03 59 8c be ab 4a b3 3a c2 fb 86 aa 99 32 ee 71 e2 f0 31 9a 4e 45 85 dc 6f ad f3 51 a3 fa a6 7e 8b 0b ad 8d ad c4 d1 6f 36 e4 94 88 cb 03 9a d5 11 5a 0b 9a 06 a4 64 c2 e2 00 7c 40 10 63 8c 21 f8 b8 c0 39 87 22 66 f8 e8 02 ea cc aa de 4f 2c ad 32 a9 e1 5d d3 81 77 16 a6 25 ca 93 0f 3d f8 dd cb c3 5f fb cf df 79 ef 77 fe 37 17 7d cd bc 16 31 ef 40 66 bc 58 78 23 f0 17 80 ef 07 be 03 68 2e f6 e9 fc f1 b0 dd 6c 78 ea 91 cf f3 fc 63 0f a0 5a 89 21 22 aa 10 2c 1b 43 6b b5 13 b8 6f 6c 71 9c 13 de 79 c4 d9 b8 4a b5 de b1 48 b7 Data Ascii: {pw<RSOhR[C`Q5~yvi} ooH;lG\|YJ:2q1NEoQ~o6Zd\|@c!9"fO,2]w%=_yw7}1@fXx#h.lxcZ!",CkolqyJH
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: a4 cd 4d a6 15 01 8a 1a 6b 2a 98 f8 cf c7 96 9a 93 9d ca c5 4d 9d 40 87 96 01 74 5a 4e bb 80 0b ad 8d db c6 9d 09 05 29 b6 47 b0 07 b5 71 5a b3 44 46 d3 83 94 d4 93 fa 33 7c b4 f3 80 6f 96 78 1f 18 6f 3d 47 de de 24 ae 8e 28 77 94 ef 8e 3c 0c 88 56 6a 6c c0 79 9a d5 da 08 06 b5 12 56 77 51 f6 67 46 c1 3d b8 0b 72 6f 85 2b 65 7c 6c 11 1f a9 69 3b 85 54 99 bd 7d 1d 13 00 61 7d 19 df ad d0 b1 b7 2e 4b 65 32 5f 4c 20 85 b8 58 03 1e 11 eb 7a ca fe 8c a6 69 19 5d cb 53 0f 3f fc bf ae 8f 8f 7f f5 ca 1b de fb cc 4b 7e 61 bd 06 31 17 90 19 ff 3a 78 e0 df 04 fe 3a f0 7d d3 7f bf 22 b1 db 6e 79 ea e1 cf f2 e4 17 3f 45 55 58 1c 5c c6 3b 21 f5 a7 a8 62 73 f8 92 8c c1 54 93 a9 bc 5b 33 06 2c c3 0e 52 6f 4a f0 ee 10 42 83 47 a8 fb 9b 94 7e 43 58 5e 42 5c 24 57 bb 09 fa Data Ascii: Mk*M@tZN)GqZDF3\|oxo=G$(w<VjlyVwQgF=ro+e\|li;T}a}.Ke2_L Xzi]S?K~a1:x:}"ny?EUX\;!bsT[3,RoJBG~CX^B\$W
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 8b 16 48 14 5b 73 a6 55 2c 30 29 8d 88 ea 14 96 e4 10 e7 a8 63 a2 d6 6c d9 e2 0a 32 25 00 6a 11 d2 f9 0d 63 1f c5 16 9d 8c 0b 11 a3 9d da 09 7f 31 d9 74 6c 20 ef d1 3c 10 96 47 a6 05 19 7b d3 6f b4 2d 0e 63 22 e5 b4 23 a5 84 96 4a 11 2c 2d b0 5d 81 16 9c 07 a4 21 8f 1b c4 79 d3 58 44 cb cc 20 b4 e4 61 47 c9 99 b0 ba 6c e6 8a 9b 9b a8 66 6a 0e 10 5a 7b 3d e8 94 02 08 61 71 04 3e e0 8a bd be 34 ee a1 64 e2 ea 98 b0 58 a0 7d 4f 4d 03 dd fa 12 7e 71 80 8c 7b ca 68 fa 0a 17 22 e9 fc 0c ef 2b 69 7b 42 e9 b7 c4 c3 2b b8 10 19 37 57 71 cd 82 b0 3e b2 b8 5a 04 29 a3 c5 f4 d6 4c d3 ae cc 5d 78 7b d3 6c de ab de 51 2c 8b 16 eb d0 86 73 6a a9 48 08 84 f6 12 a1 59 50 d3 ce ba 97 66 6d 64 81 d0 da fb 5e cc 68 32 2c 0e d0 94 18 a7 a5 bf 38 6f 2a f7 9a 8c 18 50 2c b4 cb Data Ascii: H[sU,0)cl2%jc1tl <G{o-c"#J,-]!yXD aGlfjZ{=aq>4dX}OM~q{h"+i{B+7Wq>Z)L]x{lQ,sjHYPfmd^h2,8o*P,
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e5 cf 7f e6 9f de f3 fa 77 bd e6 53 0c 5f 68 bc 6c 6e 24 2f 44 07 b2 db f7 ef 2e a5 fe 80 d6 fc 3d 39 a7 ef b2 0c 03 41 98 ac 1f 54 4d 51 2c c1 66 dc 28 5a 2d 0d 4e d5 3a 13 ad 16 f5 e9 7d 30 fe 7f 1e a9 75 f2 fb 51 45 f0 28 56 8c bc 6f 2c 40 47 f5 49 e0 e1 34 f4 a7 e2 fc 97 9b b6 fb 4d 71 e1 21 84 a7 0f 57 cd 8d af fa 85 7d 75 38 c6 3a 8e bf c1 ab ec c0 70 ed b9 e7 f8 d4 3f ff 3f 58 1c 5d 22 0f 66 e8 d7 44 53 5f 97 52 a6 45 78 c0 b7 96 3b 81 aa b1 7b 2c 2d c9 7c a2 9c 33 86 55 1a 51 e7 4d 51 5e 8b ed 24 5c b0 1d 49 49 4c ea bc c9 75 b7 b5 53 b8 34 f8 6e c9 70 e3 c9 e9 46 d7 4c 49 80 c1 fe ce 64 4f e2 16 87 84 c3 d7 93 b7 27 68 7f 86 ef d6 76 dd e4 84 38 a8 39 4d ea 75 a6 eb 2e 50 d3 60 de 52 d5 04 10 3e b6 66 d8 98 47 98 e8 b6 ba db 50 15 58 1c 42 19 d1 Data Ascii: wS_hln$/D.=9ATMQ,f(Z-N:}0uQE(Vo,@GI4Mq!W}u8:p??X]"fDS_REx;{,-\|3UQMQ^$\IILuS4npFLIdO'hv89Mu.P`R>fGPXB
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ff 6e cb 38 c8 b7 2d b5 cb f5 1b fb a7 73 4a d7 b5 a4 27 9b 6e f5 69 1f 9a 4f a2 e5 99 e3 e3 83 4f fe 31 de a2 77 01 3f 87 65 70 bc aa 71 e3 ea b3 8c 9b 6b 84 d8 d8 5c fe f6 68 a5 69 71 ce 13 da 15 00 65 e8 2d c6 35 27 52 ca 84 b6 bd 43 01 15 df 1a eb 28 34 d3 ec 3f 92 77 3b ec 04 e2 2c 1e 16 99 42 a2 6c 79 ec a6 54 40 9b d5 07 53 a5 4f 87 8d 3c 98 59 21 69 6b 3b 80 d5 25 f0 91 bc b9 65 16 57 25 9b 4a 3d 36 94 d4 a3 29 d1 2c 57 68 1e cc 38 30 04 3c 4b c4 37 88 e6 c9 fa c3 6c 42 44 d4 dc 70 9d a3 e4 11 8d 0b a4 3b 44 05 cb 12 d7 0d 12 1a 34 27 ca ee 26 b5 98 6e a5 a6 d1 3a 31 dc 9d 71 5c 35 96 80 89 fb 5c c0 07 d0 31 53 c6 2d 21 34 04 df 91 c6 1e 2d 85 82 5a 8c ac 38 7c b7 c6 85 49 22 d4 b4 c4 d8 20 60 9a 15 20 76 cb 69 04 96 a6 4e 6a 40 71 c4 c3 7b 70 54 Data Ascii: n8-sJ'niOO1w?epqk\hiqe-5'RC(4?w;,BlyT@SO<Y!ik;%eW%J=6),Wh80<K7lBDp;D4'&n:1q\5\1S-!4-Z8\|I" ` viNj@q{pT
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 31 ae 96 52 a7 ce c2 76 2e b5 5a c8 8e f3 01 71 82 e0 71 2e 58 86 83 d6 69 66 ad e6 09 84 2d 1f 4b b1 6e ab 5b ae 51 ad 8c fb 9b 3f f9 fc b3 c3 77 1e 1c dd fd 63 cb a5 ff 11 e0 27 78 85 85 38 7d b5 78 ee b1 07 29 79 64 71 f7 1b 71 2e 90 77 37 26 72 84 19 f2 89 56 ca 7e 63 37 32 84 66 b9 9e 2c 3c 04 09 81 46 94 b0 68 ee bc df 22 93 1a bd 64 54 e4 2b 63 49 b0 4e 40 04 1d cf 27 1d 49 a0 96 4c c9 e6 60 5b 4a 42 45 f0 dd 0a ea e4 5b e5 17 34 dd 9a 92 b6 d4 71 63 86 80 b9 00 82 6f 17 84 c6 52 03 87 34 e2 82 9f 58 4a 95 d0 1e a0 ae 52 93 12 d6 57 90 18 29 e7 d7 a0 0c 88 44 3b b4 a8 d1 56 9d 80 0e 1b ea 70 66 8e be 8b 43 b4 8c 68 ea 4d 9c b8 ba 8c 6f 3a c6 cd 09 69 d3 e3 bc b9 fb ba 66 cd 78 76 9d aa 99 b0 58 1a 03 b1 2a be 69 29 a9 98 7e a3 5b a3 e2 18 f6 e6 7f Data Ascii: 1Rv.Zqq.Xif-Kn[Q?wc'x8}x)ydqq.w7&rV~c72f,<Fh"dT+cIN@'IL`[JBE[4qcoR4XJRW)D;VpfChMo:ifxvX*i)~[
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: d4 c3 1f ba ff d7 ff af 5f f1 f5 f1 07 de ff ed df fb bd 2f c6 bf f1 92 09 09 6f dc b8 f1 0d b5 d4 bf a8 c8 5f 04 de 5f 26 55 6f 3b 75 1b 69 1c 6d 5f 30 2d 25 51 a5 d4 44 2d 15 27 c2 d4 12 50 ab 5a 47 22 20 54 1b 3d e1 a8 b7 47 11 65 9c 5e 99 b7 d6 36 8f 93 4e aa 99 c4 58 9e 71 7f 6e 45 23 67 eb 02 a6 11 96 d9 52 a7 49 64 25 93 45 04 77 be 68 12 3a fb 22 96 de 6e 56 04 3b 09 d5 71 fa 42 d9 88 cb bb 68 8b 79 e7 ed c6 56 ec b4 76 7b a1 ee 7c c0 c7 48 7f 7e 4a 29 e3 a4 57 69 51 2d a4 61 3f 9d a6 bc dd c8 b4 da d8 4c 02 29 19 59 c0 58 44 0e 54 a6 3d cc 82 e3 bb 2e 4f 63 bb 57 37 3e fb db ff 9c d3 ab 8f 99 47 52 ea 09 8b 23 c2 e2 98 74 fe 3c 79 bf e1 8e e8 6e f2 c1 92 89 bc 50 52 b2 f7 bf aa 79 36 85 06 ad 89 dc ef d0 49 03 e1 e2 92 bc bd 61 f3 76 a3 5b e3 9c Data Ascii: _/o__&Uo;uim_0-%QD-'PZG" T=Ge^6NXqnE#gRId%Ewh:"nV;qBhyVv{\|H~J)WiQ-a?L)YXDT=.OcW7>GR#t<ynPRy6Iav[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49880	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1317	OUT	GET /media/catalog/product/6/0/601788_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2090 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "XhYeG4j/JKBWqYrNQyrVx1IkZEkSpM9XWGVUPIQ4rVw" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=41404 idim=1000x1000 ifmt=jpeg ofsz=2090 odim=200x200 ofmt=webp Fastly-Io-Served-By: img06-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627809bba4c081fe5b939f412378-bc243e64eaac63b3-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960045-PAR, cache-dfw-kdal2120025-DFW X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 52 49 46 46 22 08 00 00 57 45 42 50 56 50 38 20 16 08 00 00 10 2a 00 9d 01 2a c8 00 c8 00 3e 6d 36 97 49 24 23 22 21 22 b8 09 20 80 0d 89 65 6e fc 7c 99 8e 0c 0d d9 9e 0f c9 da a1 e2 a1 62 1f 53 7b 6c 7c c8 7e d3 fa b3 7a 55 ff 63 ea 19 fe 03 a8 ef d0 97 cb a3 d9 43 ca 5f 56 e5 8a 7f a7 f0 9f c6 37 a8 e4 2c 70 7f 45 64 12 7c 2d ee 90 01 d5 9b a9 f7 80 bc cf 7d 0d f0 2c 90 6f 46 cc f6 ea 0f d2 c0 4e 02 7f 2c a1 0b cc 67 c9 fe 86 5d f3 32 97 db ab 48 2b 31 26 6a 2a ff 43 2f 18 e7 24 7d 88 fa ea 4c 6e bc a4 f9 5c cf 5b 07 43 38 a1 5f f1 6b dc 21 38 3a 74 2e e1 3f d0 c5 eb f3 c4 4b 75 7e 5a 0c 17 ef c8 7d e4 c7 3c e0 ad ec 31 7a bf d8 6e cd d6 13 fd 07 88 ae c2 60 16 10 09 2d 8c 4d 89 e1 96 92 0d a2 6b 6f f9 f2 e0 a3 0c 19 aa 22 54 5d 4b f5 28 f5 89 d0 27 8d Data Ascii: RIFF"WEBPVP8 *>m6I$#"!" en\|bS{l\|~zUcC_V7,pEd\|-},oFN,g]2H+1&jC/$}Ln\[C8_k!8:t.?Ku~Z}<1zn`-Mko"T]K('
2024-10-25 08:16:36 UTC	711	IN	Data Raw: 21 0d ed 96 4a 47 4c db 7b d5 24 fe a2 48 5e 16 b1 fc d3 26 19 69 32 d3 ce 68 5b 7f 37 4d cb 2d 11 41 52 64 d1 78 c7 fa 96 27 e1 b3 63 33 50 be 6a 54 61 cb 71 22 3a 35 46 b9 84 b3 8a 26 06 d0 33 81 e7 b9 cb d2 13 5a cc 38 6f 5d 93 50 0a a7 4c 02 ce bd 37 bc 25 26 83 cb a7 6d b6 fa ff ea 3f 6b a9 50 1c 2b 2a e1 c5 69 38 9b 7a 6a 4d 81 4c 72 35 7b c3 5b 61 0c 0e 69 99 44 f9 13 25 10 68 2d d2 b5 b6 15 b5 70 40 68 00 67 95 3a 9d e5 99 ab 3b 3f 5c 50 17 c0 c1 45 37 e2 6b 48 59 03 81 91 0b fc ba 4b 98 1d c9 18 fd 76 16 df f5 58 1f af ad 35 b4 d2 2c cc 8b e2 b7 7e 2b 64 37 43 30 1f e1 1a 4f d0 2e 68 ec 9c 76 0c 43 ce fe d6 2c 75 1a 50 82 79 31 2d f3 6e 1f 8b 37 10 40 e8 a6 f1 4d 16 b0 d9 7f 4b b5 45 5c 07 20 bd 32 1d 2a 20 e5 c1 a5 be 2a 8d d5 5f da 69 14 31 bb Data Ascii: !JGL{$H^&i2h[7M-ARdx'c3PjTaq":5F&3Z8o]PL7%&m?kP+i8zjMLr5{[aiD%h-p@hg:;?\PE7kHYKvX5,~+d7C0O.hvC,uPy1-n7@MKE\ 2 *_i1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49881	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1011	OUT	GET /media/wysiwyg/campaign/Slider/bonnes-affaires-noel.jpg HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	820	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54823 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "NWivQCORINCN4mV2XtaitvRlQSgfEYZKdH7XLgWSoi0" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=171186 idim=1920x700 ifmt=jpeg ofsz=54823 odim=1920x700 ofmt=jpeg Fastly-Io-Served-By: img01-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627804fbd5d48c3185087c3eb14f-6f0c262247737db9-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960026-PAR, cache-dfw-kdal2120135-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 3c 05 6b 55 51 bd bb aa 9a 94 ea 2a 71 4f b9 43 b9 7d a7 40 db 1d db b0 b3 8c 64 4d 77 a8 f9 36 57 2f 44 df a6 bd e6 3c fc 95 00 0c 9a 00 00 00 00 03 ca b5 6a 34 29 4e ad 6a 91 85 38 2c ca 72 78 49 78 b6 cc 4e b5 af 58 68 f4 a0 eb c9 ca ad 4e 54 a8 c7 e7 cd fe e5 e2 d9 c9 b5 dd 7b 58 bc bd 9c 6a ba d6 d1 8c 5c 7b 05 15 38 61 f5 ce 3a bf 32 4c e8 67 75 de 32 8d 67 5a 1a 74 2a c1 e1 41 dc 27 87 24 9e ec 25 e0 d6 76 be a7 3a 95 16 ea bc 3d cd d2 94 77 78 bc ed 4f 9f bd 17 56 fb 56 23 b5 35 8e 71 4f 97 8f 2d d8 71 f7 74 32 d4 f4 ca dd 93 9a 83 94 60 9c 63 24 b9 35 2e 9f 15 de 61 36 88 95 88 db 17 8b 64 e9 d4 d8 ea 3e ce 50 74 ea 72 84 57 d1 94 5f 76 17 b4 cc 75 e5 2a 74 ea ae ca 9d 58 d2 94 14 a9 f6 9f 3a 49 f7 fb 9f 71 94 b8 a5 0a 52 8c 66 93 5d e9 be 4f 9f Data Ascii: <kUQqOC}@dMw6W/D<j4)Nj8,rxIxNXhNT{Xj\{8a:2Lgu2gZtA'$%v:=wxOVV#5qO-qt2`c$5.a6d>PtrW_vu*tX:IqRf]O
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 73 a1 27 ed d0 96 31 fd 19 73 46 ee 15 f5 7b 56 7d e3 7f c1 a7 93 5d d6 2d f2 6d 40 03 d2 71 00 00 30 77 da 4a 9b 75 6d de da 8b 9e 17 2c fb bc cb 0a 1a b5 c5 09 76 77 30 72 4b 96 7e 92 fc cd ac b0 bd d3 e8 dd 47 9a c4 fb a4 bf 79 9c 5a 27 b5 a3 71 f3 f7 86 33 13 1d e1 5d 0b 8a 35 e1 ba 94 d4 97 de bd e8 f6 34 8a d4 2e ac 6b 75 71 6b a4 97 79 93 b4 d7 52 6a 17 4b 1f d3 4b f1 44 b6 29 88 dd 7b c2 c5 e2 7b 4f 69 6c 80 a2 9d 4a 75 60 a7 09 29 45 f4 69 e4 ac d4 c8 35 19 f1 1d 6d d2 51 a0 96 1b 5c d9 b7 9c ca 1c 4d c2 17 77 97 34 68 d3 ad 2a 90 94 9b 6b 29 4f 0f 9b 8e 5f 43 4e 6b f4 c5 75 92 b5 99 9f 7f 77 6f 0a 94 bd ed d5 82 f9 35 1e 2b ed f9 f8 66 5f 10 5d 3e e8 af 72 29 7a dd d3 fa 6d 7b 92 31 33 d4 b4 7f a3 69 5f fb 48 b7 9e a5 67 f4 2d a7 f1 91 a2 6f 6f Data Ascii: s'1sF{V}]-m@q0wJum,vw0rK~GyZ'q3]54.kuqkyRjKKD){{OilJu`)Ei5mQ\Mw4h*k)O_CNkuwo5+f_]>r)zm{13i_Hg-oo
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 55 a1 d9 29 4b 6f 76 32 93 cf 4f 35 de 8d 0e ad 2a f6 95 9d 3b 9a 7d 9c e9 c3 7b a6 b9 2a 70 7c d7 fb d2 cf bc aa 15 a5 0e d3 3f 47 0a 5c b9 3f 65 c9 9d 56 a6 da 62 55 d6 93 9b 6e 35 64 db 4d f2 93 4d f7 72 eb d3 bc b6 74 aa 42 94 eb 3b aa d4 b7 42 4a 96 e7 95 57 b9 c5 38 b2 99 e5 4f 11 8e fc f3 da b9 37 8e f8 f8 49 7e 07 a4 a7 6f 1b 39 ca b2 ed 9d 44 e3 45 ee db 3a 53 4d 65 ce 3d 1e 4c e2 3c 77 63 2c 44 23 ba 51 8f 8f 96 70 64 55 9c 64 9e dd dd 16 1f 8b ef 31 f4 aa 3a 75 23 34 b3 8e ab c5 78 19 af 5c dd 68 a8 76 90 74 94 9c d6 79 37 dc d7 fd 0b 3b f6 48 d3 0a b2 54 9e 4a 67 3d d3 94 92 c2 6f 29 78 15 d6 ad da d5 94 f6 46 19 c7 28 ac 25 83 24 64 e1 79 3a d7 aa a6 f8 5b a9 45 41 ec 58 82 8c 57 4c 78 3c 15 ca 74 5d 15 55 29 41 28 ed 82 ca 93 75 63 87 cf bd Data Ascii: U)Kov2O5;}{p\|?G\?eVbUn5dMMrtB;BJW8O7I~o9DE:SMe=L<wc,D#QpdUd1:u#4x\hvty7;HTJg=o)xF(%$dy:[EAXWLx<t]U)A(uc
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: bf c3 6f 94 b6 e4 e0 f2 70 db 5d 3d 55 f6 9a f7 fe 4e b9 25 0a b4 a4 b7 66 33 8b 59 4f b9 ae a8 f9 3a f2 c3 50 d0 f5 9a d1 a9 4e 51 9d 0a ef da c7 29 2c f2 6b c9 a3 ac d8 ea d7 da 6b 4e 84 f7 d1 7c dd 27 ed 47 df 17 fb 8c 86 af 6d a2 71 7d a4 57 6a ad af 69 ac 52 a8 fa 7e c4 bc 57 93 e6 9f 43 cf e6 f1 fe 3d 22 2b 3a bd 67 75 f9 4b b7 d3 b9 3f a2 e4 b4 da 26 71 de 22 2f af 35 d7 89 60 a1 46 75 69 53 ad 4e 2d c2 a4 14 e2 fc a4 b2 52 e1 25 d6 2c c5 da d6 d5 34 25 fa 36 fe 94 a1 52 8b 7d 9b cb 71 9c 1f 34 e2 fa 34 64 e3 af 53 6b da 49 fd 8c e2 ea ac 6a 2f ba db 5d e2 7d a5 f4 d8 fe 2e 4a 45 f1 c5 6f 49 f1 31 28 e7 9c 61 b7 dc 92 ea 5e bd 2a fb 6a 9c e3 0a 6b aa 52 97 3f b1 17 f6 12 8d 77 46 a2 82 8e fc 3c 2f 02 f7 52 ae 93 db 93 6d 69 59 ac da 67 b7 b3 4e 4c Data Ascii: op]=UN%f3YO:PNQ),kkN\|'Gmq}WjiR~WC="+:guK?&q"/5`FuiSN-R%,4%6R}q44dSkIj/]}.JEoI1(a^*jkR?wF</RmiYgNL
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 26 97 6f 5a 95 0b 29 4f 99 4d 4a b8 e5 9e 6f a2 f1 32 96 5c 3d ad 5e e2 54 ec e5 18 3f a7 57 d8 8f df cd 88 84 db 15 bf 99 90 d3 1f cb d5 96 7a 43 1f 6b 37 1b 3e 05 a6 b1 2b db d7 27 f5 29 2c 2f ed 33 6c b2 d2 34 bb 05 ff 00 66 b4 84 5f 7c e5 ed 49 e3 cd 8b 57 71 30 44 ea 5a 65 be 9f a8 5d 61 d3 b7 9e df ad 2f 66 3f 6b 33 96 fc 37 2e 4e e2 e5 25 df 1a 6b 2f ed 66 d2 db 7d e0 c6 31 d6 3e a4 de 56 16 da 5e 9d 6b fe 8a da 39 ce 77 4b da 79 f8 97 f9 20 1b 22 22 3c 31 99 99 f2 a9 3c 34 cb b2 c8 ba 83 cc 50 15 81 90 55 00 00 00 00 03 49 ac 30 00 b4 a9 67 09 73 83 da fe e3 ca 8d ac 94 db a8 b9 2e 8b c4 c8 02 f5 4e b5 b4 d4 00 37 8e a6 32 ad dd c5 76 e9 d9 46 0f 0d a9 57 9e 5c 23 8e b8 4b 1b 9f dd e6 63 33 a6 51 13 2b ea d5 e8 d0 86 fa b5 23 08 e7 19 6f 19 7e 0b Data Ascii: &oZ)OMJo2\=^T?WzCk7>+'),/3l4f_\|IWq0DZe]a/f?k37.N%k/f}1>V^k9wKy ""<1<4PUI0gs.N72vFW\#Kc3Q+#o~
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: ea 51 97 cd 95 0a bf 39 46 51 e9 8f 0c ae 46 93 1b aa ab 31 e7 9e 86 43 52 b2 ba d3 a6 95 e5 17 6f 97 88 56 8b df 42 6f ca 5d cf ca 58 66 3e ac 32 f7 3c 29 63 aa e8 fd e7 81 ce fd 27 ae 23 2c 4c 5a b1 a8 99 f7 87 d6 7a 6c 71 6b 8a f7 e2 5e b6 a5 ed b9 88 f1 13 e3 c7 b4 fd 1d 56 c3 5e d1 b4 eb 7a 14 ee 6f 62 aa c2 84 53 8a 4e 4f 76 3b da ca 3c 6a ea d6 d7 6a 55 68 d7 8c d7 7e 3a af 7a 39 0b 4b e6 cb b9 97 16 95 aa 5a d7 85 58 3f 9a f3 8f 15 e0 fc 89 5e 7d b5 5a da b1 15 8f 97 97 9d 6a 65 af 2a d3 6a c4 f5 4f 9f 1a 74 7f 96 af 2c 42 2c bf a3 a5 55 97 39 bc 7b c8 a3 ac db ca de 95 4b 6a 38 8c a3 9c 75 c3 ef 5f 03 ce 7a a5 d4 ba 2c 1e a4 45 35 13 bd ed 26 f9 ad da 22 2b 0c 9f e8 ba 1b 7d a6 fe 1c 8e 7d 73 a6 59 e8 d7 d5 28 5a c5 2a 72 5d a4 1f 82 93 e7 15 ee Data Ascii: Q9FQF1CRoVBo]Xf>2<)c'#,LZzlqk^V^zobSNOv;<jjUh~:z9KZX?^}ZjejOt,B,U9{Kj8u_z,E5&"+}}sY(Zr]
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 2c a6 d4 79 19 df 48 fa be a7 a7 55 d3 15 9d e5 5a 2a 71 ab bf 63 c6 70 e3 8c fd a6 97 e8 eb f8 d1 6f fe ca af f8 4d 8b d2 b7 fa 6d 23 f6 2b 7e 31 35 52 f7 fd 5f 92 dd 53 be bf 3b ef ec ee e4 71 b8 d1 f6 bb 87 8e 30 63 8a 4f 1e 66 69 d3 1d 33 3a b7 b3 21 c0 bc 67 52 f2 6b 4d d4 ab 6e ac df c8 56 97 59 ff 00 42 5e 7e 1e 27 4e ba 94 a3 6b 71 28 b6 9a a5 26 9a ee 78 3e 51 56 97 70 b4 a7 7d 18 49 52 ed 9d 35 51 77 54 82 52 c7 93 e7 c8 ee 1c 2b c5 91 d6 34 ab 9b 5b a9 a5 7b 46 84 b3 dd da c7 1f 39 79 f8 9b b8 7c a9 b4 7c 2c 93 3d 5a fb b3 3e ee 1f b4 5e 85 4c 79 3f 4d e2 56 3e 17 5e b2 d2 be 29 3b d6 ff 00 2f 9b 40 e1 be 24 d7 ae 75 ed 36 8d 6d 4a e2 74 e7 71 15 28 b9 65 34 fb 99 d1 3d 22 6a 57 fa 7e 95 69 52 ce e6 a5 19 ca e9 45 ca 0f 0d ad ad e0 e4 1c 27 fc Data Ascii: ,yHUZ*qcpoMm#+~15R_S;q0cOfi3:!gRkMnVYB^~'Nkq(&x>QVp}IR5QwTR+4[{F9y\|\|,=Z>^Ly?MV>^);/@$u6mJtq(e4="jW~iRE'
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 6f 2c 4a 4d f3 9c 25 ce 32 fd c6 f8 7c d1 a0 df d7 e1 be 24 5d be 62 a9 d5 95 0b 85 fd 16 f0 df c3 aa 3e 96 4d 49 26 9a 69 ac a6 bb cd dc 2c d3 93 17 4d bf 15 3b 4b cf fb 4b e9 f5 e2 73 be 26 28 8f 83 c8 8e ba 6b c4 4f bc 47 f5 70 3e 2f e2 2d 72 d3 88 f5 0a 16 fa 8d 7a 74 a1 28 6d 84 65 84 b3 04 f9 1d 77 40 b8 af 5f 86 ec 6b d5 ab 29 d5 9d aa 94 a6 de 5b 78 ea 70 8e 39 fe 35 6a 9f b7 0f f0 23 b8 f0 d7 f1 53 4e fe a6 bf 03 47 16 d6 9e 57 22 26 d3 31 13 3a 8d fd 5e b7 ae e0 c1 4f 43 f4 8b d3 15 2b 6b 46 3e ab 45 62 26 77 4f 79 70 68 71 57 13 ce 71 84 35 4b a9 4a 4d 28 c5 49 b6 db ee 46 56 57 de 90 a9 c5 ce 7f a5 a3 15 cd b7 4e a2 4b df 94 6a 5a 7d 5a 74 6f ec ea d4 78 84 2b d3 94 9f 5c 25 24 df 43 e8 49 fa 40 e1 38 c5 b5 a8 39 35 f4 55 1a 99 7f 6c 51 c9 c7 Data Ascii: o,JM%2\|$]b>MI&i,M;KKs&(kOGp>/-rzt(mew@_k)[xp95j#SNGW"&1:^OC+kF>Eb&wOyphqWq5KJM(IFVWNKjZ}Ztox+\%$CI@895UlQ
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: b2 e7 6d 67 4a 9c be b2 8e 65 f6 bc b2 f9 c9 be ac 80 54 00 01 00 00 00 00 03 da 93 e4 d1 e2 57 4d e2 4b cc 2c 2e 41 19 05 54 93 92 32 00 9c 8c 91 90 04 82 00 12 1b 49 36 de 12 ea cb 5b db cb 7b 1b 4a d7 57 13 db 4a 94 1c a4 fc 91 6d 4e b5 3a f4 23 77 52 ba ec 1c 54 a3 18 fc d6 ba ac f7 b7 e5 d0 93 2b 11 32 9a d3 85 7a 4e a4 aa ec b7 49 ee 97 47 35 e5 e0 bc fa be e2 21 42 77 0a 2a 71 ec ed d2 c4 69 74 72 fd af 2f 23 d2 8c 27 73 28 d7 ad 1c 45 3c d2 a6 d7 4f e9 4b cf c3 c0 bf 24 46 d6 67 5d a0 49 25 84 b0 80 06 4c 40 08 94 a3 18 b9 37 84 80 92 4c 7b ad 77 5e 29 db 46 9c 63 9f 9f 53 2f 38 f0 8c 71 f8 8a 94 b5 3c c5 d3 ba a0 bc 54 a8 b6 9f d9 24 63 d5 bf 11 32 6b ea c8 02 c2 57 75 6d e1 29 5d d2 51 84 57 3a 90 cc a3 ef 6b aa fc 3c cb ba 55 69 56 a7 1a 94 aa Data Ascii: mgJeTWMK,.AT2I6[{JWJmN:#wRT+2zNIG5!Bw*qitr/#'s(E<OK$Fg]I%L@7L{w^)FcS/8q<T$c2kWum)]QW:k<UiV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49879	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:36 UTC	1317	OUT	GET /media/catalog/product/5/0/502867_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:36 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7846 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "rqBfoNFZQGIii8ly1+shxTYJj7eEqvFMztOEIJCWrTA" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=133077 idim=1000x1000 ifmt=jpeg ofsz=7846 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-18016278098dd4bdaad7a44ba4f202fb-219e0d40cd04c649-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72197 Date: Fri, 25 Oct 2024 08:16:36 GMT X-Served-By: cache-par-lfpg1960081-PAR, cache-dfw-ktki8620056-DFW X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 52 49 46 46 9e 1e 00 00 57 45 42 50 56 50 38 20 92 1e 00 00 f0 67 00 9d 01 2a c8 00 c8 00 3e 6d 2c 92 47 24 22 21 a1 2a 15 2d c8 80 0d 89 63 08 72 b1 8e 66 b6 c3 fd 7d ce 2f b5 bd a7 05 87 ef d9 7b fd 9f aa 9d b5 3e 63 3f 62 bd 66 fd 29 ff 69 df 2e f4 00 f3 9b ff df ec dd fd d7 7f df a4 7f a8 bf d8 bb 4c fe ed fd bb f6 4b d0 5f c6 fe 75 fb 8f e5 e7 ad 97 f7 de 39 3a 57 cc bf e5 3f 6c ff 39 fd e7 f7 2f d8 6f f3 de 06 fc 2b ff 03 d4 0b f2 2f e6 7f e6 bf 35 3d 16 76 41 ed 1f ee bf 5f 3d 80 bd b0 fa 4f fa ef ee 9f bd 5f e5 bd 2d 7f d1 f4 33 eb 87 eb c7 c0 07 f4 4f e9 ff f0 7f bb fb 55 ff 27 c0 df f0 bf f4 3d 80 7f a5 7f 6b ff c9 fe 6b dd 83 fa 0f fd bf e6 ff 2e fd ae 7e 89 fe 6f ff 47 f9 bf 80 af e6 ff d9 7f e7 7d d3 fc f1 7b 01 fd d3 ff ff ee c5 fb 79 ff fd Data Ascii: RIFFWEBPVP8 g>m,G$"!-crf}/{>c?bf)i.LK_u9:W?l9/o+/5=vA_=O_-3OU'=kk.~oG}{y
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: e1 f5 03 26 d2 dc 86 e1 e7 cc 18 75 6e 61 87 86 c4 1c 0d e3 4d 5e b7 32 57 af 84 05 ad 86 f7 fb fc b8 39 e1 39 74 d4 e4 0a 02 58 9f 73 ae 17 45 58 e2 dd 7b 93 82 c8 3a b7 f3 2a 89 b5 f7 6a d2 06 9e c6 ab 4c e7 d1 03 ab 3e 5a 5c 5d f1 8e 83 a1 99 d5 7d aa a8 3a f2 c6 78 6e ae 9a 67 8e b5 dd 7b cc dd f0 c1 a7 e8 60 1b 64 20 0c 7f 60 60 25 24 ec fa 76 21 0c 6b dd bf 83 07 7d e3 20 b6 55 57 93 a6 7f 0c bb f3 d2 85 9c 8a a0 0d 0e 47 f6 0d 5d 41 c7 aa a7 bf e6 de 92 be 60 57 8b ae b1 07 e9 c5 cf ed 50 12 9c 7d 79 f8 29 f1 1e 5e 09 0a 7c 08 a3 1e a2 5c 07 9c 1e ed d0 88 99 e7 6d 87 7e 19 0a 19 65 1c fc 74 e8 5d e8 2a 2c f2 f0 32 af fb ea 1e 7e ce e1 ca 15 02 08 7f 61 e1 1e 7d cf b2 e0 fe 2f a7 0d 8c db 23 40 55 ad 00 41 23 5c 0e 0e f3 b8 8a 49 2b 43 f4 53 c5 a3 Data Ascii: &unaM^2W99tXsEX{:jL>Z\]}:xng{`d ``%$v!k} UWG]A`WP}y)^\|\m~et],2~a}/#@UA#\I+CS
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 9a 48 fc db 48 fb 6c 01 a4 60 c4 7d 2f ed 10 9e 5f 4e 75 c8 ee 55 a4 9e cb a5 04 4f cf 21 87 87 19 35 b2 7b 2b c3 be 40 fe 6d 72 98 59 38 98 28 5b ba f9 db e5 4a 4a 7f 77 8c b8 65 03 1a 46 56 f4 82 c2 d5 e3 ad f8 61 1e 17 ff 68 6c fe 32 18 93 98 d3 4e 15 83 24 aa 18 dd 91 51 64 d8 48 ca dd 0c 08 4a 29 3a 43 58 49 00 b6 b3 ff 2e b3 33 fd 9c 77 80 38 d9 50 62 ae 91 0d 92 49 85 3e d6 d8 a1 61 48 bb fc d9 19 bd aa 97 b0 e3 19 c6 3a e9 1f c2 24 e0 19 5d b2 2c b1 34 c5 0a 56 a7 b3 76 8d ee cf 42 94 eb 12 86 57 3c 4f c6 a3 3c 3d 1e ee d9 c7 ee c0 cd fa ba 09 0c 90 b0 08 20 77 72 55 30 8a c6 71 16 98 98 cb 90 89 45 a8 c6 7c f7 33 fe 0b 37 7a 80 bb 98 2c 3d ba 41 dd 58 98 7d 64 d4 90 13 4a bd fd 2f 02 40 f8 b7 a7 07 b1 2a 97 2e 41 76 61 68 13 e6 1e cc 3a 4f 52 56 Data Ascii: HHl`}/_NuUO!5{+@mrY8([JJweFVahl2N$QdHJ):CXI.3w8PbI>aH:$],4VvBW<O<= wrU0qE\|37z,=AX}dJ/@*.Avah:ORV
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: 56 7d f2 9c 70 44 73 21 85 5d 14 12 c1 fe f7 fd 0c dc c5 50 79 77 21 8b a3 30 9e bc cb 53 59 fe 78 7b 36 35 b9 c7 c5 80 d5 40 24 64 f9 47 f0 23 55 a3 9d b9 17 57 b2 07 96 47 a5 cc 53 9d 18 5f 6b 8e e2 68 68 46 df ed fa 67 8d e7 1a ca 96 bf bd c6 fe 91 8f ea 9b cc f8 22 ef 7b ee d0 a5 da 0d 15 b8 e0 ed 26 f9 44 13 7e ca c2 93 8e 6a 80 fa 84 37 ee 36 6d 19 8d e0 31 5e 0c 3a c9 9a 84 5e d6 86 f6 ac 73 72 1f 1d 92 83 be 9c 15 bf 2e bf 2a 89 43 f6 51 ad 8b 8b e4 28 a9 db 76 43 49 cc 10 7a f5 4c 6e 63 42 06 72 31 d2 01 be d9 35 0c b6 c0 40 58 74 af 82 01 c8 40 98 10 02 8b 4e 09 2c 80 0e a0 c1 14 87 b6 94 ba b8 97 11 0d 8e 43 84 09 5f ea fd e0 81 be 44 6f 86 dd f9 44 29 64 b7 a4 0a 65 8d 6e 60 82 7a 12 e1 4d 40 9e 1c cf 6b 8f c1 46 70 b6 4b df 11 b7 90 97 75 ed Data Ascii: V}pDs!]Pyw!0SYx{65@$dG#UWGS_khhFg"{&D~j76m1^:^sr.*CQ(vCIzLncBr15@Xt@N,C_DoD)den`zM@kFpKu
2024-10-25 08:16:36 UTC	1379	IN	Data Raw: d1 22 5d f0 d7 e4 f1 b2 e3 06 58 ad b1 fa 7a ac b5 e5 58 3b f4 8f 55 3e 01 16 4a af 11 fd 3b d2 fc 33 12 41 4a bc 41 21 fd aa 5a c3 6e 10 fc 6d a2 b6 c5 a6 e9 25 c7 4a f2 0f 05 be 52 9b 5e af a2 82 34 17 6e 7d b9 23 28 27 c2 36 a7 41 db e1 38 b2 a1 3a af 30 0c 76 fa 12 15 42 c5 00 ff 1d 13 07 ba ec 59 06 e4 a6 55 e6 d5 5c 60 7d 18 d3 22 7a 57 d6 d4 c5 34 b6 d4 fb 5b 7b 64 8c c5 88 c4 ef 9a 69 96 f0 51 b0 08 8c 87 2b 29 6c 97 e5 3f a3 18 48 c6 ee e0 fe 98 d2 b9 c8 43 1d 72 70 e3 22 08 72 f5 e7 c5 6f d5 c3 48 ea 5f 40 68 91 b2 82 f3 1c ed 7b 73 80 60 f7 3d c2 ba a8 83 b1 a3 36 cf ba 20 ef 0a e5 79 3a ec 67 3c d6 8f b7 a7 ec 05 03 79 b2 fe 42 04 07 a3 c6 6b 89 8e ed 2a 22 dc a0 25 38 ee 63 12 cb 8d d5 f0 6a 1a 60 9d 73 67 83 58 0d 09 6a bb 28 97 b7 21 f5 b4 Data Ascii: "]XzX;U>J;3AJA!Znm%JR^4n}#('6A8:0vBYU\`}"zW4[{diQ+)l?HCrp"roH_@h{s`=6 y:g<yBk*"%8cj`sgXj(!
2024-10-25 08:16:36 UTC	951	IN	Data Raw: e8 07 75 94 85 bf f4 ad cc 68 94 51 1e d2 22 54 bc ee 10 d8 aa d9 6e d3 46 16 50 83 7d 96 a8 fd 08 69 fb 1d dd 7a 7e 2c 6f 6e a1 1a d9 79 75 e4 2a 85 81 21 33 47 8c 4a 46 b9 37 ae aa 58 eb 7e 9e c0 77 9b fa fc 76 84 00 c9 a0 24 9b f6 a5 4f d0 03 09 87 dc 88 f7 14 28 8d cb fa 84 67 54 52 d7 7d 18 22 6a 1b 46 35 69 dc 4e ad 78 eb 42 fb fa 95 79 4d 0c 17 90 b3 04 8e 63 15 03 9f a4 23 c6 a4 51 c5 72 7e fe c9 fd 59 df 73 09 92 7f a7 b2 0f 57 ec a2 37 0b a7 12 70 e8 06 ee be 68 0b 16 70 c6 0e 75 f5 e5 cf b0 b5 fa ba 5d f4 c2 cb 1c 16 72 ba 13 f5 10 52 59 de 9e 1e 54 c1 45 e8 5c 74 72 4a 54 bb 3c 82 a7 14 4d 53 d8 cc b2 4e a2 b9 28 54 36 81 9d d1 ca 87 c0 ef b9 4a 18 39 40 01 e9 83 96 e8 a3 a3 1b 11 c4 f3 fe 5b f9 a7 5f 70 51 03 6d 3a db 26 95 0f 9d 41 c0 5f c4 Data Ascii: uhQ"TnFP}iz~,onyu*!3GJF7X~wv$O(gTR}"jF5iNxByMc#Qr~YsW7phpu]rRYTE\trJT<MSN(T6J9@[_pQm:&A_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49888	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1321	OUT	GET /media/catalog/product/V/A/VAR-006346_Retif_PH_02.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:37 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6350 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "dGaQLWpNterbrAL+UnpR6Bg22fixeNBQh7XsT6HPY4Y" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=182388 idim=1000x1000 ifmt=jpeg ofsz=6350 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-180162780973949983552be90795d2f5-7a8aeb96b875b0fa-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72198 Date: Fri, 25 Oct 2024 08:16:37 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdfw8210129-DFW X-Cache: HIT, HIT X-Cache-Hits: 27, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: 52 49 46 46 c6 18 00 00 57 45 42 50 56 50 38 20 ba 18 00 00 d0 61 00 9d 01 2a c8 00 c8 00 3e 6d 32 93 47 24 23 21 a1 27 f6 1c 28 80 0d 89 40 1a 36 99 05 a1 f6 25 17 35 c9 ce 7c 1e 36 5f 9a 9b ef ff c9 f5 91 fd 9b d4 37 fb 9f 44 9f 32 5e 6c df f5 ff 6c 3d f8 7f 6b f5 0e fe e5 e9 6f ea f7 fd d7 d4 2b f7 1b d3 b3 da 0b fb 9f fd 2b 69 e6 b9 6a 8f ea 38 be f5 cf 99 9f cd bf 08 67 87 fb bf 0d 78 05 fb 6f 7a dc 01 f5 8a ea 9b e1 7f 60 0f 2b bc 20 28 11 fd 13 fd 3f ab ff fb 5e 55 3e c4 f6 13 e9 96 74 db a7 82 73 1b 12 15 d3 bf 00 dd 52 fc 2f ae df 73 ea aa 06 cc 47 84 b8 d7 f6 c3 68 5d 1c 2d 61 86 2a e6 05 45 d9 58 ab 0b 76 04 45 1f 36 a1 5f fb ed 46 7f 0f a0 e4 3f 6e 1c 63 c0 3d d6 b2 13 b5 88 d8 37 97 fa 2e dd a5 24 7c 96 b0 97 e7 cd fa 6e 74 1c 0b 96 a7 43 93 Data Ascii: RIFFWEBPVP8 a>m2G$#!'(@6%5\|6_7D2^ll=ko++ij8gxoz`+ (?^U>tsR/sGh]-aEXvE6_F?nc=7.$\|ntC
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: 87 95 c2 1e c5 5b 35 f7 20 18 10 63 dd 60 c5 8e c3 56 2f 24 aa d1 85 ed 6e cf 56 26 8d 3d 8d 6f d1 32 ec c1 e5 41 42 2a f7 78 e6 31 73 31 a1 e1 27 42 b6 dc f3 fe f0 a5 ec 48 94 82 53 2f ad 70 80 e8 f0 d1 35 2b 21 b5 d6 3e 78 e6 c1 83 af 99 43 00 19 1c 5a 6f 3a 73 43 d6 dc 27 36 2b d0 e6 7a 5c 4d 2e f2 4e f4 64 45 fc c8 f7 50 34 b7 3f cf 65 dc 44 b9 ef 8e 18 02 6c 6f e1 38 bf a9 6b 7f 01 24 f2 a3 ab 4f 42 1b 5f 3b 11 17 9b ee 86 8e 28 12 37 c7 4a fc 5d 41 c2 a0 4f d0 2f 90 6c 27 c9 d5 79 ad 6d 9e 3c 66 94 c2 99 20 e4 44 58 ec ea b4 c9 fc 7d 3c 09 e7 4e 15 78 d6 a3 59 d2 a3 a6 4f 21 a4 81 8f 42 b1 dc b9 13 e1 52 6e 66 39 c1 a3 de 88 a9 c2 eb 42 f3 83 d6 17 de ac 03 4d 56 99 c2 11 9d 9f a6 19 44 11 e9 a1 29 37 39 35 4c 01 9f 78 cc 44 d4 7d 0c eb 36 15 9f 15 Data Ascii: [5 c`V/$nV&=o2AB*x1s1'BHS/p5+!>xCZo:sC'6+z\M.NdEP4?eDlo8k$OB_;(7J]AO/l'ym<f DX}<NxYO!BRnf9BMVD)795LxD}6
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: 38 91 9f 37 db 71 58 78 42 a9 73 2f c3 23 1a d5 b8 d8 8e 62 b0 ba cd 4c f8 b2 52 fc 10 c0 a5 61 37 aa 6d be c9 1d a3 00 ce 6f f1 ff ad e7 aa 63 e7 07 d1 ac e4 79 9e d4 37 d8 74 68 9a 10 31 6c b7 81 02 0b a6 dc d3 0d 96 3f 5f cf 4e 69 24 2c a2 11 02 90 a4 94 af 66 1b 9e 8d 60 cd 40 a0 f0 c5 a1 27 1f 5a f5 82 49 d3 67 91 bd 9b 30 19 19 2a b3 b4 47 e3 8f c4 93 cc ac 39 1d de 6b d2 43 98 17 01 f1 8a 92 ab a8 be b3 1a eb 60 1d 7c 12 6f 69 07 8f 84 d3 e5 fd e6 ba 09 22 78 00 c3 b2 67 2e 17 52 68 7f d1 13 f7 d8 70 4b 1c 04 51 ca 08 a8 9f c2 1a 60 ca 0a d4 0e 09 a5 c6 16 88 31 b9 21 c6 24 d1 87 d0 6b 8b a8 09 1d b0 40 15 47 f8 68 68 64 1b 00 4b 00 86 9a 81 ff f1 e1 30 67 3e fa 7e b3 40 0f 57 28 39 0b 17 35 79 8c e7 8a 31 ac 94 ae 3a 5e 70 46 60 1f 0f 02 74 e7 b3 Data Ascii: 87qXxBs/#bLRa7mocy7th1l?_Ni$,f`@'ZIg0*G9kC`\|oi"xg.RhpKQ`1!$k@GhhdK0g>~@W(95y1:^pF`t
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: e4 ec 63 03 9b 98 8b d8 35 b1 9b 77 22 a9 2b fa bd ee 13 cb 76 e5 40 db b3 15 ee c9 36 2d d3 1b 4a d6 3d fc e8 5c b9 86 ef 62 f2 2d a0 39 9e b8 98 c5 fa 7d b0 af f5 70 65 fe 42 00 bc 47 48 f4 21 52 ed e0 fd 09 e8 0e e1 3d f2 bd 4c 41 e3 56 e3 a1 cc 0e ae f4 93 36 d3 43 45 02 bc b3 ff 03 4d 8e cb 04 48 a4 8e 3f 67 9b 71 b8 d8 12 6c 0a 8f d8 e7 a1 47 56 d8 f1 ca 92 06 cf 33 0c 2b 19 10 5b f2 53 f4 28 9f be 3f ba a8 5b b3 e0 2d 41 18 aa 99 64 93 1f 8a b2 a0 79 6a 26 67 ab b4 5e 07 ae 80 5d be bd b8 40 01 34 ae 0e d3 8a 6f 44 b8 e4 76 54 bb a2 d1 fc ed b9 7b 2b 93 e1 ac 05 a5 a3 8b bf dd 20 7b cc de bf fd ec 47 1a 40 db d8 46 86 57 03 44 ca 13 bb 10 55 95 03 c2 fb 66 26 ec 95 3a bd e5 d2 63 d8 db 7d 8d b6 bd 09 7e 4c 1f 9e 5c 4e 10 4c a3 0e 5c da c7 83 3d 1b Data Ascii: c5w"+v@6-J=\b-9}peBGH!R=LAV6CEMH?gqlGV3+[S(?[-Adyj&g^]@4oDvT{+ {G@FWDUf&:c}~L\NL\=
2024-10-25 08:16:37 UTC	834	IN	Data Raw: c5 4a d2 3e 92 a9 18 bd 19 7d 36 d0 cd cc 9c 40 56 df cf f6 87 b7 35 7b 78 65 f3 89 48 23 f0 bf 23 e9 d9 31 ef ce 49 d2 a6 18 39 73 34 69 0c c4 8c e3 ff 63 6c 9b 86 3f 0c 86 cf 75 87 96 de 2f cf 00 2a e8 2b d1 d8 2d dc 61 76 c5 a1 f6 9b 7c c5 73 76 af 50 55 12 68 9b 2b aa e9 05 9e c5 bc dc 2b f5 f3 31 60 d6 81 ad a7 7e d8 49 27 ec 5a 26 37 fd ee 2e 22 fc e4 34 dc c0 6c db 54 83 ef 6d 64 97 4f 7b 93 df fd 02 55 67 39 ca 09 27 a5 b9 01 e3 4a d1 f1 cb 94 69 99 88 f0 e0 4a ad 94 e8 f8 ce 3f 18 c6 ef bf b3 8c 02 1c 0f 65 92 93 d2 d1 47 52 c6 54 00 76 7e 45 96 09 31 bf 87 70 14 55 e9 1d f5 c8 4d 85 bc 59 ae 5c ff f2 03 df 05 f3 7a 14 68 41 c5 ad 81 d2 42 85 5e 72 93 b8 ef 54 41 a5 09 18 ad a2 35 cf ed 30 09 b0 f8 f2 0b ba 2e f5 50 e8 32 06 eb b2 ec c8 4f f9 01 Data Ascii: J>}6@V5{xeH##1I9s4icl?u/*+-av\|svPUh++1`~I'Z&7."4lTmdO{Ug9'JiJ?eGRTv~E1pUMY\zhAB^rTA50.P2O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49889	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1317	OUT	GET /media/catalog/product/6/0/602128_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:37 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4398 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "XACkOfMEl4PoLZsJHHIbppRwdXde4k+RR8qbgs2jQgM" Expires: Fri, 24 Oct 2025 12:46:50 GMT Fastly-Io-Info: ifsz=85162 idim=1000x1000 ifmt=jpeg ofsz=4398 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-1801644c3cbd16de1bb9eeecf18ef54e-45d9763d4558507b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 70187 Date: Fri, 25 Oct 2024 08:16:37 GMT X-Served-By: cache-par-lfpg1960052-PAR, cache-dfw-kdfw8210087-DFW X-Cache: HIT, HIT X-Cache-Hits: 29, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: 52 49 46 46 26 11 00 00 57 45 42 50 56 50 38 20 1a 11 00 00 90 47 00 9d 01 2a c8 00 c8 00 3e 6d 30 94 47 a4 22 a2 21 27 39 aa e8 80 0d 89 4d dc 2e 26 1e 0b 47 ab dc 2b a2 3e b7 c5 c3 f6 f6 4c f4 85 b7 87 cc e7 9d 17 a4 ad e6 0d e7 1f f0 38 2f 9d 9c f7 bb e2 ff d3 5e e4 7f 6a e6 8d 11 1f 9a fe 25 fe 2f 14 3c 03 bf 24 fe 7d fe c7 ce 2a 33 ee 0e f6 c3 ec fd fb 9a b4 64 05 fa b5 e9 37 7f dd 00 bc 5b f3 ea f5 df b0 5f 4b 82 f4 59 d0 d3 ef b9 28 23 4b b1 d6 49 e2 97 8d d9 27 86 cf a9 c8 a6 c4 81 de fc 59 55 91 4d 9c cb de fb 92 83 74 0b e5 a4 db 60 ee 13 e9 c8 b1 c2 44 c5 b4 a8 5a 2c bb 03 75 8c b3 13 27 ae 3d c1 bb 8a ab 58 16 c4 ff 5f 94 8d 78 dd 73 ed a2 24 7b 9e e6 50 88 60 ac 50 17 52 7f b9 5c 36 8c 22 af f3 d9 57 00 e2 3b 36 71 3f 9e 88 06 4f 3b 82 75 b1 Data Ascii: RIFF&WEBPVP8 G>m0G"!'9M.&G+>L8/^j%/<$}3d7[_KY(#KI'YUMt`DZ,u'=X_xs${P`PR\6"W;6q?O;u
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: 4d 65 9b 8b 2a 37 0c a3 c2 b1 a7 5e b0 d3 38 b3 5e ba 93 55 19 33 9d 59 0c 4f a2 d3 4f 73 c5 9e 2f 6f 5e 42 05 1b 16 e2 a8 cf 3c a9 bd 0f b4 be e7 6e 3f 1b b9 3b 7e bc 64 f8 9c df 4f b4 5f aa c3 30 a5 63 e2 6e c8 49 7b 83 ea 13 25 1c 5a 10 b8 e9 6d 3f 92 24 ea 9b f2 ec 88 a0 bf 4a 99 c7 df 4f a0 cf 70 87 14 98 e7 b5 ee 29 09 cd 32 60 f2 d3 02 9d 9d c9 5a 5a ff a0 be f2 1c 42 d2 1e f4 1c 1a 3e 81 a4 ff de 6f 34 ac df e6 07 80 41 1b 7e b9 14 84 1d 8b 3d 55 9b 03 32 ac e8 63 e7 4a eb 5c 78 f2 dd 1b 43 65 62 46 5b 95 0e f0 9e 18 d5 7d 11 db 2e 8c 13 75 a5 bf eb f4 f1 0e 3c 2d bd 33 42 65 57 47 c7 a9 ce 43 24 ef e3 f3 b8 67 b9 f9 99 cc b5 32 61 71 b3 a4 22 5d ba a2 c3 8c eb 9c 33 d8 67 b6 93 8f 12 88 c0 ec 6a 9a 82 45 58 71 f2 7c 53 5d b5 d0 22 57 d0 84 17 ab Data Ascii: Me*7^8^U3YOOs/o^B<n?;~dO_0cnI{%Zm?$JOp)2`ZZB>o4A~=U2cJ\xCebF[}.u<-3BeWGC$g2aq"]3gjEXq\|S]"W
2024-10-25 08:16:37 UTC	1379	IN	Data Raw: dd 4d c3 8a 9c 79 fb 7c ab 89 ac dc a6 1c 90 ba c5 5d 75 9c 2a 21 45 54 ef 38 bd d3 4a ef 7d c1 7c 22 a9 d0 0c 30 b8 1f b1 fa 41 bd 14 6d 85 34 dd 5c 11 19 98 fc a6 f3 d4 c0 0f 0f be d1 e6 09 45 77 ff 27 31 99 e5 aa 9f 77 4c dc 0b 83 50 cf 8e 38 9d ce 91 6e 15 28 48 56 13 3c 98 35 93 d7 de 24 1c fa ad 8e 56 3a 69 ef 4c 2b 6d fe 51 15 d4 3f c1 8f cb 80 58 30 45 bf 82 e3 d7 5f f5 12 6e 2f 95 ee f3 61 8c 68 32 d9 50 9c 08 9d 45 ec af 9b 77 77 df 60 f4 62 d1 96 30 59 23 f6 86 14 cc 3d a3 26 be ee 87 58 30 ba 77 4a 3d c5 69 58 ee fe d7 1d 91 d8 06 08 be 4d c5 87 37 d7 0e 2a b5 2e 53 e3 96 96 68 b9 59 07 76 8e a7 eb b0 6e c0 85 07 bc ec f1 9d 12 2f 31 6b 66 99 b9 e7 91 9a 96 63 d3 91 26 de 33 b1 cb a1 ec 6f 78 72 28 f5 05 ef 61 c4 20 79 0c 39 28 db d6 65 99 b4 Data Ascii: My\|]u!ET8J}\|"0Am4\Ew'1wLP8n(HV<5$V:iL+mQ?X0E_n/ah2PEww`b0Y#=&X0wJ=iXM7.ShYvn/1kfc&3oxr(a y9(e
2024-10-25 08:16:37 UTC	261	IN	Data Raw: 6a 85 60 26 d1 f0 6b 37 49 98 56 3b f5 c2 3f b4 e8 ce de bc 6b 79 04 55 63 22 9c 7a ba d5 32 ca 28 6b e5 81 a3 f7 d5 57 d3 05 82 0b b6 ed d5 e7 cb 16 be eb 36 2f f1 54 6a b0 6d e2 2f a9 9a 32 bd b0 df 29 fd 5f 82 72 b5 71 96 7c ac 0f a0 cc 60 bf 23 d9 8d aa 03 f9 14 65 64 4f ff f7 16 e6 86 4a 7a ff fd e5 80 99 08 a0 fd e0 d7 90 48 da 79 73 70 a7 5e 20 2e 09 ac 0f 72 75 65 71 76 f6 10 09 c7 67 f4 e0 d9 82 36 1c 7f 10 05 17 1f 4d f6 8c 80 01 fc e5 60 a9 97 e5 45 98 6f b8 80 b4 8a cd c1 ef cb b0 df cd dd d9 68 05 e3 4f 40 e2 be e0 85 63 26 65 c3 e5 a2 05 58 97 ab 89 97 9e e9 ea 9f 4d 6f f6 47 97 bd 15 37 cc de 8f 8f 48 15 90 68 81 d9 27 96 df 19 f6 34 ad 0e 06 d6 ba d2 a1 f9 52 5b 2f 9a 10 5e 2f dc 75 6e 5d c6 e6 8d d7 67 12 24 88 d3 20 ee b3 55 84 48 20 80 Data Ascii: j`&k7IV;?kyUc"z2(kW6/Tjm/2)_rq\|`#edOJzHysp^ .rueqvg6M`EohO@c&eXMoG7Hh'4R[/^/un]g$ UH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49893	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1321	OUT	GET /media/catalog/product/V/A/VAR-008645_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6124 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "KdM91mMw67WU1IhGcQCcFCAT8mpayr/+9MVGl3ypEnk" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=189237 idim=975x957 ifmt=jpeg ofsz=6124 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162780975b4636dd7a38a46f05212-7b6b6546620a5e85-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72198 Date: Fri, 25 Oct 2024 08:16:37 GMT X-Served-By: cache-par-lfpg1960072-PAR, cache-dfw-kdfw8210172-DFW X-Cache: HIT, HIT X-Cache-Hits: 25, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 e4 17 00 00 57 45 42 50 56 50 38 20 d8 17 00 00 b0 5e 00 9d 01 2a c8 00 c8 00 3e 6d 32 94 47 24 23 22 21 28 95 5a f8 80 0d 89 65 6e ee 8e d0 00 b0 87 2f fe 91 79 fd 80 f3 e7 e0 77 7e e8 ef cb 79 2e fc f7 7d 9f f9 1e b9 ff b7 ee f1 f3 0d fb 3f eb 3f e9 8b fe a6 fd 17 45 5f ad 77 f9 1c 97 a9 2c 7a 5f f0 dd f0 fe 8b d7 ad 71 3b 4e ec f3 d8 df ee 5e 21 0e e7 b4 0b 05 bc 16 e3 f7 bf b6 80 1e 52 1d f5 3f 7a f5 13 e9 94 66 f6 b9 ec 50 e9 46 0e 34 d5 0d 3e 5e df fa 73 ad 9c 7e 35 f2 86 a8 9d 73 0b ad 39 c7 d6 2f b5 ca c3 b6 f2 be 63 1a 73 32 0b e0 47 96 38 af e3 ee 27 9e 4d 8c 2f 61 35 c5 e9 60 8f e4 2c b2 1a db fa 39 eb 46 58 c4 a4 41 8a 96 a5 e4 9d d1 c3 bf 9d 9b 07 80 00 d7 86 d0 03 44 d7 5d ca 3c fe 8b ed 53 37 a3 b0 52 a0 7e 72 24 cd a5 f4 49 74 Data Ascii: RIFFWEBPVP8 ^*>m2G$#"!(Zen/yw~y.}??E_w,z_q;N^!R?zfPF4>^s~5s9/cs2G8'M/a5`,9FXAD]<S7R~r$It
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 61 34 4f 0d 56 f9 1f ec 95 56 af 77 7c b7 2d c1 35 ad df c1 c0 c7 46 f1 b7 00 03 0d ac 31 69 5f 52 da d0 52 af 30 db c5 e7 60 22 86 a6 7d 03 b2 52 a3 a0 15 6a 58 39 09 65 ca c2 fb 43 cc 8c 70 1b 6e de e4 d4 a4 e7 44 4f b8 43 87 90 d8 a5 02 92 cb f9 79 19 42 87 f7 56 6e b7 48 0e d6 4d c2 d5 79 85 b1 45 02 87 71 1c 92 46 b3 52 ff c9 72 d3 a3 d8 c9 73 e0 27 1f a3 ad 64 65 88 86 77 6d 96 c2 ee 24 85 ca f9 fd 8a 85 86 19 3b ec b3 31 d9 2a 18 d4 9b bf 71 7a de a8 39 79 e1 02 c1 a9 4b e4 54 3b d9 ac ce 85 fa ab 9a ee 66 15 8a 26 f8 a4 85 2d 8f b5 cd f6 9b d8 1e c5 f3 c0 f6 ea 91 d6 a1 3e 83 b5 1f b2 4e c0 96 9c 88 09 fc 72 fa a0 77 e9 a1 4b e3 5a 5f 5b 1f cc 47 bd 95 97 e6 28 c5 30 80 29 14 55 07 b5 c4 aa de 62 2a 7a a1 6c 13 ea 8c 54 2a dc 9c c7 83 21 8c 13 fd Data Ascii: a4OVVw\|-5F1i_RR0`"}RjX9eCpnDOCyBVnHMyEqFRrs'dewm$;1qz9yKT;f&->NrwKZ_[G(0)UbzlT*!
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 81 12 b6 5f a8 89 22 c5 b6 67 47 b7 94 64 01 9c 1c 72 4a 51 35 ee b0 01 e5 29 77 fa 0f ab bf 66 d4 ff 5c c6 ed fb b6 ce 6b 9c 37 18 ba 77 39 8e 31 c7 14 e6 e5 72 76 73 7f 8a 30 7f 40 79 fe 1e 56 63 ed c2 ff fb 0b e9 bb 09 7d a3 65 e7 7b d2 fd 2f 6e 92 63 db 4a a9 2c 3b 71 28 fc 62 27 30 98 6f 15 49 3d 42 26 20 01 31 73 80 fe 6c f1 46 31 e3 02 77 df a1 70 b1 5d 47 a5 6d 5a c7 0a e2 ec 78 f2 b5 1c d7 32 45 36 35 4f 13 a6 3d 71 a2 3b 8b 9f 24 e7 04 7a de 9b a2 99 82 cf e5 40 62 a1 51 1b 89 41 5b 08 55 da 98 46 a4 7e 20 e6 35 27 22 f7 40 5d 7f b4 77 d6 42 8d 77 10 87 b8 e6 95 99 0e ca fb d2 ec 6d 5d 4f 8e f1 0e df 97 da ae 5e 1e 61 ee b3 00 ea e0 40 41 ab 30 64 6e 15 f5 a4 d7 fb 33 a2 24 1b 88 e9 7e 6f 76 70 41 e3 ab da 8b 26 d8 57 94 ce 7f 83 0b 3a 98 d3 20 Data Ascii: _"gGdrJQ5)wf\k7w91rvs0@yVc}e{/ncJ,;q(b'0oI=B& 1slF1wp]GmZx2E65O=q;$z@bQA[UF~ 5'"@]wBwm]O^a@A0dn3$~ovpA&W:
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 4e 13 3e b7 2b be 68 40 27 66 b1 f3 d1 f3 7a 6b 35 e6 69 5e 14 32 2a 1a b8 29 2b 63 d0 6e af 76 cb 3b dc 31 b4 f6 89 53 2f 68 fd 6f 11 ad f5 c2 ab 28 31 d5 f3 68 ea 18 b9 0b d3 f0 52 f1 f2 b6 c5 b3 3d 3f 93 cc b4 c8 69 57 41 84 5f 91 77 c3 f6 a8 60 d8 54 54 f3 ca 46 d0 ad f2 29 71 cb c6 27 4d 83 8f 8e d0 0b 00 34 57 f5 75 f2 ce 72 9f 6f cf 05 c7 55 f2 3f 8c dc 90 3f da 19 1b b9 68 5a bf 1e 3f b0 2b 55 48 8a 11 4a af 43 e1 2b 10 50 fa e2 dc c5 28 5e 4d 50 95 9f c1 c6 a1 b2 ce 12 32 1f cd 63 39 5d 5f 71 2a f8 15 b5 b0 22 d7 7a 58 99 89 48 2a ac 1d 10 bc 0b ef b6 f4 0a c7 20 07 81 08 ac 33 e4 ef 97 38 77 c9 36 54 0a a8 e3 aa 07 24 a9 2d a2 5d 05 f6 52 9e 45 ac fc 10 bd e9 15 a5 30 78 b6 2b 48 2a 90 7d 86 7a 4d 57 11 37 28 11 07 7d dd 2b 44 b4 21 e9 f8 70 5d Data Ascii: N>+h@'fzk5i^2)+cnv;1S/ho(1hR=?iWA_w`TTF)q'M4WuroU??hZ?+UHJC+P(^MP2c9]_q"zXH* 38w6T$-]RE0x+H*}zMW7(}+D!p]
2024-10-25 08:16:38 UTC	608	IN	Data Raw: 0d 16 86 66 0c 9a bc 7c e2 16 6e 81 8e 91 73 96 1b 14 c0 63 1f d3 a5 99 86 df 74 95 25 e1 f3 5a 66 5c df 2f cf e8 e4 20 ff 4a 4c 51 15 48 23 61 c9 8b a5 55 37 8c c6 c9 6b 19 21 b9 8a d2 fe 80 8c 58 ac af 47 10 8f 16 7e 75 3b 41 ae 67 cf da 0f df 10 62 3b 93 69 a5 f3 36 d2 b9 ab d4 a8 f6 3a f9 9d c0 44 63 99 67 45 1c ec e2 a6 52 fd bd c4 36 ab 6a 24 2e 4f b1 04 ed f9 bc a0 77 73 4f 5c ac 01 34 be 90 d6 1b b4 f2 03 de d5 fc 47 55 e1 0c 0b 5b c6 73 28 c8 ff 0f cd 11 e4 7e a4 ea 88 36 e3 9e 4f 5c 1d fb 7a 64 45 be ff 81 d7 96 7c c3 17 93 ff 58 4a 66 18 ce 17 0e 8d 3c e6 80 4d c8 d8 3c 22 a8 a7 57 a9 28 cb 89 c0 43 d5 40 0b 8c 53 5e 17 85 2e 16 44 30 a1 6a 31 6b 32 05 f6 09 c6 18 bf 44 38 84 05 9c 3a 43 1d 83 81 05 dd f8 ba d3 23 77 86 c6 48 88 88 0a 48 15 87 Data Ascii: f\|nsct%Zf\/ JLQH#aU7k!XG~u;Agb;i6:DcgER6j$.OwsO\4GU[s(~6O\zdE\|XJf<M<"W(C@S^.D0j1k2D8:C#wHH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49891	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1084	OUT	GET /media/catalog/product/6/0/603033_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4859 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "lW3VhECEbv/dSQ5djutUy+fyxxgQxJciB71OIJMou80" Expires: Fri, 24 Oct 2025 12:20:54 GMT Fastly-Io-Info: ifsz=66981 idim=1000x1000 ifmt=jpeg ofsz=4859 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162e1fe8b19872f2738e4dda5e0d4-1f62279795a9ff99-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 71744 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960057-PAR, cache-dfw-kdfw8210070-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: db d0 36 12 8c 51 ec 86 07 10 68 17 a3 8d e7 d3 20 cf 7f 7a b6 ad 2c 36 9f c1 70 ea 2a 7b 7f 85 4f 1b 3f 75 a0 2d d5 67 88 e3 9e 5d b3 ca fd 6d a2 22 2a cb e3 51 28 86 09 24 3f 65 a4 aa 3b 9c 5c e2 e7 1b 92 6e 4a b5 63 0e b5 19 1c dc d0 aa 6a c4 af b4 13 3a 09 99 23 77 b4 fb 47 10 af 2d 70 73 5a e1 b8 80 47 7a a0 2b 86 17 21 7d 14 77 e1 76 fb 0a 52 24 16 11 f9 3b b8 9e 16 e3 d8 b3 58 46 2c de f3 c2 dc 54 56 68 88 80 88 88 08 88 80 88 88 23 e3 f3 a5 4f ab 43 f3 3d 48 28 f8 fc e9 53 ea d0 fc cf 52 08 3c 0b a4 3a cc 7e 5c 72 4a 10 d6 3a 96 38 62 78 fa f3 03 40 94 bb 57 0b 3a f6 cb 62 55 66 9f 63 b1 9a 88 22 a9 66 0d 4e f6 bd 8d 73 5d e1 ed 06 ce 17 07 fc 3e d5 e8 3b 7a c6 c5 b4 98 7c af 76 56 4d 48 c6 9b 8c c1 dd 55 43 49 69 1c 88 7a df 76 20 f1 89 61 b4 b4 Data Ascii: 6Qh z,6p{O?u-g]m"Q($?e;\nJcj:#wG-psZGz+!}wvR$;XF,TVh#OC=H(SR<:~\rJ:8bx@W:bUfc"fNs]>;z\|vVMHUCIizv a
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 79 0b ab 1c 0f d9 68 03 e2 ad 8a 9d 5f e3 e2 12 83 f7 c0 f8 2d c2 b6 eb e2 10 d0 51 c7 f6 af 73 de 2e 54 2a 96 c5 e7 12 54 88 c6 e8 c5 bb ce f5 12 80 b6 de c6 f8 14 2f 1b fa c7 83 ee 5a 8b 75 a7 3d 03 db c6 39 43 bb 9c 2c 82 5f 03 78 31 4c ce 21 e0 fb 47 f2 53 31 f9 3d e7 97 3e c5 5e c0 cf d7 4c 3f 00 f8 ab 0c 62 cd dd c4 f0 b7 15 15 9a 22 20 22 22 02 22 20 22 2f 9c f7 ea 65 b5 ef 90 da db f7 70 b2 0d 38 fc e9 53 ea d0 fc cf 52 0a ad b3 99 ae f6 bb 52 da 78 da 4d ad 72 1e fd 75 0d f8 2b 4a 02 22 20 2e 48 86 86 1c 43 a6 ec 66 8e 52 43 26 96 a5 84 8d e0 f5 20 83 dc 42 eb 73 b8 ae 56 c2 07 f7 80 ae f5 a9 ff 00 f8 04 1e 87 f4 85 5c b0 e1 b2 91 3c 25 84 1a 82 e8 25 6b 4f 03 62 5b 6b 1d eb 71 95 50 17 48 f8 f1 1a 20 d2 e2 48 2f 07 8f 23 6c ba 68 42 f5 a5 f0 92 Data Ascii: yh_-Qs.T*T/Zu=9C,_x1L!GS1=>^L?b" """ "/ep8SRRxMru+J" .HCfRC& BsV\<%%kOb[kqPH H/#lhB
2024-10-25 08:16:38 UTC	722	IN	Data Raw: 4b da ca 6c a0 0b 9b 82 54 53 03 77 97 1f 45 90 7f 45 a3 da 4c 01 f1 b1 ff 00 4b 51 00 e6 83 ac f1 f1 17 e6 a6 22 96 39 63 64 91 bd af 63 80 2d 73 48 20 83 c4 10 bf 9e 71 ca 25 a5 70 20 5f 27 f2 5d a5 d1 85 5f 85 6c 36 08 e2 eb b9 90 98 9d e9 8d c5 a8 2f a8 88 80 ab b8 e1 f1 e0 1d 8e 56 25 03 8e 36 3c 91 3a de 3d c8 1e 84 19 e0 91 da 29 64 fb ce b0 ee 53 6b 47 0e 89 b1 d2 45 6f b4 33 1f 49 5b c8 2a 78 bd bc 35 df 91 aa 67 08 6d a8 9a 79 b9 c7 de a2 b1 77 46 ea c6 36 d6 b3 46 63 e9 56 58 a2 8e 26 35 91 b6 cd 1b 82 a8 cd 61 1f 93 de 79 73 ec 59 ac 23 f2 77 71 3c 2d c7 b1 45 66 88 88 08 88 80 88 88 08 88 82 3e 3f 3a 54 fa b4 3f 33 d4 82 d2 64 72 8c 46 69 0b 3e ad d4 f1 b4 3a e3 ca 6b 9c 48 b7 7a dd 40 5c e9 d3 ec df f4 dc 40 f1 aa 79 ee 0c 03 e2 ba 2d 78 8f Data Ascii: KlTSwEELKQ"9cdc-sH q%p _']_l6/V%6<:=)dSkGEo3I[*x5gmywF6FcVX&5aysY#wq<-Ef>?:T?3drFi>:kHz@\@y-x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49887	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1321	OUT	GET /media/catalog/product/V/A/VAR-002464_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2264 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "PgJLptQKx9AjE/mNGXB7KOFvaMQ3qWZ16Rh1/eU219s" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=95182 idim=1000x1000 ifmt=jpeg ofsz=2264 odim=200x200 ofmt=webp Fastly-Io-Served-By: img01-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-1801627809916d2e60dd9f21c24137c5-4c8562d3a176b2cb-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960022-PAR, cache-dfw-kdal2120045-DFW X-Cache: HIT, HIT X-Cache-Hits: 30, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 d0 08 00 00 57 45 42 50 56 50 38 20 c4 08 00 00 f0 35 00 9d 01 2a c8 00 c8 00 3e 6d 36 97 48 24 23 22 21 27 94 08 f0 80 0d 89 67 6e e1 6f d0 f5 2d fd 71 ec 31 3e fe 72 fc 7f f8 1e b1 f7 03 73 e3 3e 95 e2 42 cb 96 04 e0 2f e7 72 7c de 8d d6 09 ca fe 48 c7 51 e2 bc 11 a8 f2 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 21 86 26 2f ff e8 19 8d 05 ed 2c 3a c2 4b f1 f8 4e ed ba 71 77 46 4f 23 72 bf fd 5c 6f ff d0 89 ac c7 65 ad 48 e6 82 38 38 36 89 94 fc 84 00 ed 5c 38 64 cd 11 72 4a a8 47 2d 7c 3a 2e 9e d3 3b 52 16 c4 30 59 6e 55 7f b6 02 3d a9 53 da cc fe c2 78 26 85 d6 34 e0 ba 6f cc 48 25 9f e0 4c 6e 5f 7d fb 7e d4 9f 83 e1 fc 2f 11 af 48 78 0c e0 0a bb ed 79 9a 7b 7d 64 34 d5 a0 da 0c dc 05 db 67 e9 9a d4 06 9e 3a d5 42 90 10 c3 64 c9 Data Ascii: RIFFWEBPVP8 5*>m6H$#"!'gno-q1>rs>B/r\|HQ""""""""""""""""""!&/,:KNqwFO#r\oeH886\8drJG-\|:.;R0YnU=Sx&4oH%Ln_}~/Hxy{}d4g:Bd
2024-10-25 08:16:38 UTC	885	IN	Data Raw: 40 e0 34 1f 9b fb 06 a4 80 58 9a 85 eb 13 38 9c a9 18 67 51 70 b9 46 b8 6b af a0 d0 bb ea 7c 23 1e c1 47 b7 0d 35 30 7a 6c 8e a0 5c ef 83 69 d0 52 f6 27 74 4e c1 92 eb 23 c0 7b d2 fd a3 2a 8d 53 75 d2 32 75 bc 5a b7 90 b5 6b ab c9 40 08 96 16 1c 56 c8 69 8a 36 17 a1 95 c8 92 6b 81 86 5d fc 16 9d 37 97 ad 56 47 d9 82 78 79 8f 9d 1f 54 c2 35 45 66 42 e4 ba 4f 7b 54 b8 32 d3 e9 96 da 2f be 66 d4 11 60 23 68 f5 a8 bb ff 2a 77 85 f7 58 67 bf 04 7e da dd 8d 9e b6 ca 2f c3 3d 0c 52 0b 0e 05 81 8f a8 87 e9 b0 91 0a f3 63 21 d2 44 d9 cc 17 03 8e f3 da 37 76 62 c3 8a 0e b1 24 04 ed 6d 36 4e 1a 50 e3 e6 54 cb 25 d6 36 01 eb 68 47 5f fa 33 3d 98 49 81 22 57 e5 10 fd 5e 9c e5 7e 55 28 07 13 39 cd 0b d3 cb b1 69 8b 59 03 ff 34 1c fc fd 5c 28 3a cb a0 f7 54 1a 4c 83 da Data Ascii: @4X8gQpFk\|#G50zl\iR'tN#{Su2uZk@Vi6k]7VGxyT5EfBO{T2/f`#hwXg~/=Rc!D7vb$m6NPT%6hG_3=I"W^~U(9iY4\(:TL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49886	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:37 UTC	1321	OUT	GET /media/catalog/product/V/A/VAR-007473_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1638 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "FlmHiQD1i/2IMMhkkACeq/X6Or9c3FYd+DtViNDvRao" Expires: Fri, 24 Oct 2025 12:16:37 GMT Fastly-Io-Info: ifsz=4630304 idim=3279x3279 ifmt=jpeg ofsz=1638 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240193 Fastly-Stats: io=1 Traceresponse: 00-180162a6348d2855473be053fc04d3f8-ec56db668f86958f-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:16:38 GMT Age: 72000 X-Served-By: cache-par-lfpg1960075-PAR, cache-dfw-kdal2120044-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 1 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 5e 06 00 00 57 45 42 50 56 50 38 20 52 06 00 00 90 2d 00 9d 01 2a c8 00 c8 00 3e 6d 36 94 47 24 23 24 a1 2b 37 09 50 90 0d 89 69 6e ba 5e db 31 34 8d 9f 28 db d0 e2 33 44 fb ca 6f a2 aa 50 41 d8 4e 7b 12 aa c1 a1 d1 2b 81 2d 89 d2 e3 1f 55 75 83 5f d5 3e 9e 2a 67 6f f4 73 94 ed 03 c6 82 35 1f 0b ca b0 ee e1 66 e7 39 95 a8 72 15 91 aa 8b 46 3c db 16 19 5a a8 86 5b 52 80 a8 7f e2 a1 c6 a2 25 55 4a 27 8c 0a 58 58 99 b5 07 20 9b a1 79 06 03 59 24 16 8f d9 8d ff 16 65 09 f7 1f 50 f6 21 a6 26 b5 d9 53 52 40 c5 0a 63 66 42 15 89 64 47 43 e5 64 18 4a 6a 2e 95 42 2e 6a f0 fa ba 07 76 5b a2 9f 12 ae b9 92 c9 6b e4 1f b3 23 4a 93 33 7c ed e5 67 0a d1 bc cf ca ea 10 e5 5d db 98 4b 74 07 59 43 43 30 9e 7d 03 7c 2e 71 01 fd 63 80 d8 f6 08 d5 02 1b 89 2a 26 Data Ascii: RIFF^WEBPVP8 R->m6G$#$+7Pin^14(3DoPAN{+-Uu_>gos5f9rF<Z[R%UJ'XX yY$eP!&SR@cfBdGCdJj.B.jv[k#J3\|g]KtYCC0}\|.qc*&
2024-10-25 08:16:38 UTC	259	IN	Data Raw: f8 74 fd 88 d1 c8 d2 06 d6 45 9b fc 34 ff 91 91 26 ae 91 4b 2a 30 df b0 71 b2 c4 90 04 d0 1b 1c ec 0f 8c f5 29 6c 10 09 fb 29 2f 59 a0 7a 71 e1 5c ee 55 3f 9d 18 bf 13 3e 24 16 e5 04 cb 8b 8a 6c bd 69 93 4d f6 aa c2 7e 3a 95 91 65 ae df ca e7 cc 07 fa 67 90 e0 fe e1 d7 10 4b 77 91 6f a4 9c 81 16 2e 0c 32 12 a6 6e 4e 41 c0 b5 60 4b b5 7f ef 58 52 9b 8e 4d e9 c5 fc 8f f1 84 8e 10 9a 1c dc 9f e9 51 2e 1f e0 e9 2f 4a 9f 93 cd c6 33 f5 b9 a3 12 47 15 72 b7 3b 00 2b 2a 5d b5 33 12 99 b1 8f b0 2d a8 23 3a 7e 94 28 5a 8d b8 16 d7 e5 04 c7 2a 08 71 cc a1 08 61 e3 6f 80 16 63 95 bc 5f f4 ca 15 72 ab 01 1c a2 48 2a 58 73 da b2 6d 88 66 3d f6 f6 75 3f ee 37 d4 4f ec 91 64 2f 1d e8 5f bd 44 71 63 25 d1 a5 0a 30 fd 63 e6 50 41 63 c0 00 00 16 c2 d8 bf 60 48 61 9b 45 3e Data Ascii: tE4&K0q)l)/Yzq\U?>$liM~:egKwo.2nNA`KXRMQ./J3Gr;+]3-#:~(Zqaoc_rHXsmf=u?7Od/_Dqc%0cPAc`HaE>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49894	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1084	OUT	GET /media/catalog/product/6/0/602511_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8218 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "3XsO/RTIrBQiXqbeMSvglRSzi0VGZVuWYDRno9MUL3M" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=181135 idim=1000x1000 ifmt=jpeg ofsz=8218 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-18016277e84c685fb5d0b3f63a1f2d17-e482a5c81f0848d4-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960083-PAR, cache-dfw-kdal2120132-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: c4 00 2a 10 00 02 02 02 01 02 05 04 03 01 01 00 00 00 00 00 01 02 00 03 04 11 12 13 30 10 21 31 32 33 05 14 22 23 20 24 41 15 34 ff da 00 08 01 01 00 01 05 02 fe 45 c6 ee b9 5e d5 ca 9f 70 c4 59 97 c5 5e f5 44 af 29 da 2d f5 b0 39 01 60 ca dd 97 65 32 38 b4 98 ad c8 76 dc c2 45 55 b3 17 3d 4b 1a 00 56 ba ac dc b2 f4 7b ad c9 e9 e4 7b d6 dd f4 56 ef d9 68 e4 13 ca 56 da 3d b6 f7 e5 b6 d9 a8 53 11 11 63 0f c6 aa c2 c2 1f ad 7e da dc 4b 4e ad 1c ab e3 c5 ab 3b 50 3c e5 67 6b da de f2 ac b7 95 a6 d3 16 c3 b5 b0 f8 64 0d 37 ac c6 f5 3e 97 09 51 d4 0d e1 8e de 7d ab ec e0 54 ee 03 16 2c 13 27 c3 1f dc 3d 2c 48 12 0d c1 e9 51 d5 bd af a8 37 e2 9e 9a 81 82 05 b2 d0 06 42 4b ad a9 a7 51 25 06 e2 c2 9b 58 7c 2c 34 66 a0 13 5a 3d ac f3 b9 5c 6e 4d 65 78 da 9b 83 8c Data Ascii: *0!123"# $A4E^pY^D)-9`e28vEU=KV{{VhV=Sc~KN;P<gkd7>Q}T,'=,HQ7BKQ%X\|,4fZ=\nMex
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 28 33 74 e0 86 05 3a 98 40 4a 2b c4 a0 d1 fe ab 5e 51 76 76 18 14 ea 7c a0 2d 1d a8 08 11 7e 97 91 fe 1d 4c 04 1c 65 71 f7 b8 04 ae 50 bd 4f 12 da 01 da d3 65 a7 f5 51 d4 ea b6 32 50 10 29 2d 07 84 47 e9 06 02 bd 6d 5e b6 f4 bc 5b d0 50 29 ff c4 00 33 10 00 01 03 01 05 06 05 02 06 03 00 00 00 00 00 00 01 00 02 11 21 03 10 12 30 31 22 41 51 61 71 81 20 32 72 91 a1 52 b1 04 13 23 33 34 62 42 c1 e1 ff da 00 08 01 01 00 06 3f 02 f1 46 f5 57 b8 06 ff 00 8e 95 5c 94 86 a6 b8 7b 2c 5f 0a 70 51 6a 89 3a 28 8a 45 10 8d 14 ce 73 9e 53 9d ee b0 35 47 24 d1 84 51 7e 53 85 16 11 a4 29 09 dd 13 40 d1 a2 10 39 d1 d1 36 cf b9 ba 9a a8 b8 b8 f1 44 a8 44 5d ad e3 2e 38 27 bb 9f 86 72 08 cb fc 4b ff 00 ac 0f b6 73 72 c0 fa 89 fb df 25 09 b3 f6 55 04 76 5e 70 a8 65 6c 80 3a Data Ascii: (3t:@J+^Qvv\|-~LeqPOeQ2P)-Gm^[P)3!01"AQaq 2rR#34bB?FW\{,_pQj:(EsS5G$Q~S)@96DD].8'rKsr%Uv^pel:
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 14 31 72 fe c7 9a 86 5a 69 46 55 89 6f fb 68 78 a1 7f b8 5c 56 7c 5e 8d 7d 0f 98 b0 18 a9 15 ee 9f e6 ef 02 0c 0c 07 a5 18 c3 e6 25 03 71 1b e9 5a b7 71 01 6f 0a 0c 9c 6f eb 33 8e 5e c6 2d 45 d4 72 db cc d4 0f f5 c5 94 53 b8 0f 4c c2 c7 21 16 7c 0e 95 fc 4f b3 01 a9 5f 08 ae ba 1b 4a 27 01 59 8c 34 c3 07 72 12 b8 a6 02 b1 de e3 d1 14 73 7f a9 49 c0 03 1a 40 74 58 56 85 bd a5 bf 6d 97 7e d1 d0 74 54 5f 4f 17 a7 d7 87 05 0b c4 0b 47 1f a4 12 ce 8b 33 32 41 ae 50 bf 5b 99 45 d2 95 e0 8d 60 66 5a 81 ac d0 23 80 8c 54 3e 34 f3 17 ba dc 8f ea 2d 95 89 a5 6a d0 cf 30 cb 11 66 b6 1b b1 49 75 64 57 e1 74 ac b6 a4 b5 16 54 58 6f 82 16 81 86 8d e5 a5 65 b2 72 1d 9c cb f9 b9 fe a1 aa de b1 76 aa e2 e5 a5 55 d6 0d e0 ac 02 5e 59 5c 01 08 5a dc c1 a3 54 bd f5 94 99 a9 Data Ascii: 1rZiFUohx\V\|^}%qZqoo3^-ErSL!\|O_J'Y4rsI@tXVm~tT_OG32AP[E`fZ#T>4-j0fIudWtTXoervU^Y\ZT
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ab 2f 47 10 7b 83 e5 bf e7 e2 ba 1a 2a b1 c7 12 89 41 30 31 e6 f9 cc 09 ab 36 06 b2 cb 40 04 19 6c e7 88 e9 7b 17 c8 3d 20 a8 1b c7 05 bd 40 48 0b ab b5 c0 4b bf c2 a5 06 8e 0e d3 42 3b 70 55 f9 58 36 c2 0c 50 ab eb 69 9c a0 aa c7 01 88 ad 5a d7 a5 4b 14 08 35 63 71 45 a1 f9 ff 00 63 b2 3e af f7 15 29 ab 8d 08 b6 bf 34 53 55 e9 ff c4 00 22 11 01 00 02 02 00 07 01 01 01 00 00 00 00 00 00 00 01 00 11 21 31 10 20 41 51 61 71 a1 91 81 d1 ff da 00 08 01 02 01 01 3f 10 e0 e2 28 05 ee 50 55 a1 d5 6c fc 9b 06 e2 5d 7c c5 95 ae e4 d9 6c df 32 d7 96 58 bf 25 44 74 4e a1 04 58 25 34 ef cc a8 3c 43 32 9b 88 d6 55 4c 18 91 5d 98 72 e8 84 5e d1 f0 3f 20 bb d4 1f 88 d5 e0 c2 4a c4 77 ea 39 55 9e 04 ea 95 c0 21 a7 70 ca 0e 9a 95 ac 74 63 a9 f3 1c b4 b4 37 2f 29 92 40 8c Data Ascii: /G{*A016@l{= @HKB;pUX6PiZK5cqEc>)4SU"!1 AQaq?(PUl]\|l2X%DtNX%4<C2UL]r^? Jw9U!ptc7/)@
2024-10-25 08:16:38 UTC	1323	IN	Data Raw: be 60 06 35 73 ab ff 00 1f 48 ab ac 2b be e3 05 b1 ca 2f 26 aa 0f 86 8a b9 e5 80 7b 2a 41 aa a8 0e 06 d7 20 ed 50 e0 2d 70 50 27 6e 48 5d 5c 5d 02 e3 66 53 a6 a2 c9 e7 0a 6b 38 15 a9 57 61 69 90 70 9c f5 79 88 52 8b 3e b9 b9 75 a8 8d 74 1c ca 23 ae b0 1f c2 1e 00 9b ec 44 1b 6b 9f e2 30 2b f1 0d 61 ac 1f 9f 48 f3 7f cb bf ec b1 ce eb 63 8f c9 82 8a 43 da 35 5b 44 56 dc 50 67 cc 5e 8d 80 1b d1 2b 21 57 49 70 54 6c 95 c1 d6 68 05 1c 5a d7 41 5e 1e d3 01 37 e0 2f 2b 15 c7 db 29 8a ae fd 41 6f dd 1e e5 b0 55 7c b1 44 cc d0 01 40 54 43 99 49 f0 ab 7c 04 1d 9b b7 20 7b 3f 25 51 0b 41 de 4b c9 2e 7f e8 c7 a4 b6 a2 af 63 8f 89 50 b8 3b 61 24 16 bf 02 af ea 52 f8 08 2e 16 6e 99 aa c3 65 8d 9c d0 c4 59 5c a7 57 8d fe c1 cb dd 36 c8 f5 ea 84 33 bc 88 6f b5 36 10 e3 Data Ascii: `5sH+/&{*A P-pP'nH]\]fSk8WaipyR>ut#Dk0+aHcC5[DVPg^+!WIpTlhZA^7/+)AoU\|D@TCI\| {?%QAK.cP;a$R.neY\W63o6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49892	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1317	OUT	GET /media/catalog/product/5/0/502429_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	816	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2486 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "DKLD/9inIz6W70IQmKdSO2Vy5tRxyoxXyycH5DUDDvQ" Expires: Fri, 24 Oct 2025 12:17:33 GMT Fastly-Io-Info: ifsz=155045 idim=1000x1000 ifmt=jpeg ofsz=2486 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240195 Fastly-Stats: io=1 Traceresponse: 00-180162b327a968d88a98770ef5ddcf5f-0bcc9565f273e5f8-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 71945 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960078-PAR, cache-dfw-kdal2120062-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 ae 09 00 00 57 45 42 50 56 50 38 20 a2 09 00 00 b0 39 00 9d 01 2a c8 00 c8 00 3e 6d 36 96 48 a4 23 22 26 22 f4 4a 70 c0 0d 89 69 6e e0 46 8d c1 e7 13 f5 fa 40 db e5 cf e0 fa 37 40 2e 5c 14 14 a2 9b 80 17 ae ff c8 70 4e 72 9f ed 7e 89 93 5c 54 88 d5 7c 84 fd 81 ec 11 d2 78 7c 5a 94 50 f8 8b c7 d6 c6 ac f3 f7 e6 9d 91 5d 3d e8 e2 78 c0 21 4d 2f e3 c7 cf c7 ea ee 8a de dc 52 5c 2b 59 e8 da 44 e0 75 50 47 bd 56 23 98 6b 80 62 2d ae 87 9f 25 54 b7 20 df 88 8a 87 52 a7 bc 85 2a 90 2c 93 1f 87 c6 87 27 48 59 4d 11 67 ed 0c 15 a0 c5 bc f1 0d 3c 7b 83 96 1a 80 40 35 50 f8 cf 0a 4c 98 ed 8c 0a 8f bc aa 5d f7 39 6c b7 8e 8d 13 d0 2d 0d a2 e1 a0 e5 e4 a1 62 f9 31 ea 3a e6 33 f9 74 ed 0a fc 12 03 c3 0d 97 ce e8 cb 50 d1 01 69 c0 97 f7 35 aa 61 34 3c f2 18 Data Ascii: RIFFWEBPVP8 9>m6H#"&"JpinF@7@.\pNr~\T\|x\|ZP]=x!M/R\+YDuPGV#kb-%T R,'HYMg<{@5PL]9l-b1:3tPi5a4<
2024-10-25 08:16:38 UTC	1107	IN	Data Raw: 94 0d 05 db c4 0f aa 8a 0a 26 47 77 7f a5 bf e0 3f cf d5 5a 9d fb a7 15 c5 ed e7 6b 25 2b d5 46 29 14 33 e0 c8 32 69 db f3 d4 e3 0a af 97 88 23 fd 01 45 89 f1 19 94 fe 6b 82 1e 0a 19 8a 21 9f 94 22 b0 47 90 a6 78 f9 c7 30 2e 50 47 50 fa 62 29 13 e6 27 7b 08 88 65 b5 ad ed 5f 43 f0 58 1d 32 40 c9 72 fb dd e7 13 57 a5 b8 f5 a8 c8 3f c1 6f da 85 f4 27 8c 27 0b d3 e1 d4 76 28 c0 e0 ba 5d 42 64 77 fe 0c 0c 79 ab 39 a6 ea 6c 63 ff 66 22 22 c5 87 c2 bf 51 be 91 64 a3 cb 7d ed 57 3b 3d 9b 33 69 15 90 1b ef 67 a3 e2 50 0d f4 13 58 11 aa 7a 33 59 0f 97 db 24 30 69 89 29 27 14 2e 48 56 79 16 37 64 77 bc 9c b8 10 79 e4 91 35 0f c5 2d 1c e6 a5 ff fc ae 48 86 86 f7 f4 68 3a 25 87 01 9b cd a6 be 39 2a 5c 78 11 97 99 d8 21 47 00 dd 95 a7 46 c7 a7 90 e7 49 0a 1f 9c 8a e0 Data Ascii: &Gw?Zk%+F)32i#Ek!"Gx0.PGPb)'{e_CX2@rW?o''v(]Bdwy9lcf""Qd}W;=3igPXz3Y$0i)'.HVy7dwy5-Hh:%9*\x!GFI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49890	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1084	OUT	GET /media/catalog/product/6/0/602991_Retif_PH_10.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4572 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "1lXdkmNrCU5GmGdzwOTRg5USA2UZMnIgdA0AngqNve4" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=81031 idim=1000x1000 ifmt=jpeg ofsz=4572 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img08-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016277e870004b09dd0352b659aa21-598ff798c9f0d2c2-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960030-PAR, cache-dfw-kdal2120031-DFW X-Cache: HIT, MISS X-Cache-Hits: 6, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 6b 8c 7a 38 69 e5 ec e6 bc 36 4a 9b 33 ba c7 83 b9 69 b7 b4 03 fe ab 96 a2 79 a9 a4 e3 c8 41 80 37 bc 5a 09 b0 eb a7 4f 92 fb 1b e9 84 a6 21 20 2c 95 a6 46 1b e9 ae f9 4f c5 67 be 55 20 9a 06 4c 1c d9 08 cc 72 39 9d 1c 4e f6 e5 e2 b8 31 7a 68 62 84 d5 b7 30 95 92 47 de 07 76 e7 17 69 e5 65 6a 69 86 4c a5 d9 87 f5 00 7e 2a 9f 1c 64 ec c0 f1 1c ee 6b ff 00 e1 df a0 16 b6 9e 24 dd 53 da 59 e6 35 cf e1 70 66 75 3d ec 5c d0 03 65 f6 93 e8 fc fc 97 5c 70 3e 33 1b 40 8d b6 b9 37 ef b8 db 99 71 b2 eb 2f 64 6c 65 c6 f6 0d 00 6a 7c 00 54 11 d4 9a ca 99 81 91 cf 6e ac 74 2c 1a 5d a7 62 ee 43 e7 e4 a0 bc e2 ec e2 f6 64 1e 93 ad 61 ec 37 53 37 39 37 3a 0e 43 9a e4 64 6e 90 b5 d3 46 d6 31 96 2c 8e e0 d8 8d 89 b7 4e 41 49 24 ee ce d8 e3 00 9b dd e4 9d 1a de a7 c4 f2 0a Data Ascii: kz8i6J3iyA7ZO! ,FOgU Lr9N1zhb0GviejiL~*dk$SY5pfu=\e\p>3@7q/dlej\|Tnt,]bCda7S797:CdnF1,NAI$
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 4c 78 6c 80 b9 99 4b 81 b1 b1 bd 8d ad 6d b4 2b 67 0c bc 56 07 65 2d 3c da 77 05 65 7b 70 2f d9 ea 8e f0 69 e2 47 62 7a e6 56 e1 36 7e b4 58 6b 9c fc 3a 89 ce 6d 8b a9 e3 24 74 25 a1 75 97 34 58 13 be c1 56 61 d5 51 9a 2a 46 b0 39 e4 43 18 39 45 c0 39 46 e7 65 d9 c3 91 ee ce e6 81 a5 ad 7d bd ca a2 1b d3 89 5d fb b8 d9 91 a0 07 e8 0e bc 82 90 d4 86 e9 de 71 b7 a5 94 db 7b 72 5e 4b 26 60 71 ca dd 7f ed 80 2f e7 99 73 bd ce 76 70 6b 2c 6d e8 91 62 d3 ff 00 8d 96 71 5d ce a8 8e 36 83 2b c3 05 bd 27 59 a3 e2 be b2 78 5c 06 47 5c 1d ac 0d b5 55 ed a4 a8 e3 09 1b 54 08 2d ef 0c a0 b8 fb 5d 7f 72 99 b4 4f 74 79 64 aa 9c dc eb de 0d ff 00 d4 6c af 6f c1 61 70 ab b1 58 f3 d1 bc ff 00 29 0e f7 2e d6 43 1b 2d 66 8b 8e 7b 9f 79 5e a4 63 64 63 98 e1 a3 81 07 da aa 31 Data Ascii: LxlKm+gVe-<we{p/iGbzV6~Xk:m$t%u4XVaQ*F9C9E9Fe}]q{r^K&`q/svpk,mbq]6+'Yx\G\UT-]rOtydloapX).C-f{y^cdc1
2024-10-25 08:16:38 UTC	435	IN	Data Raw: 9b d2 23 90 39 35 b5 b6 41 5f d8 69 be c7 15 45 35 5b d9 1b e5 94 3a 10 5d a3 b2 b4 02 05 f9 8b 2f d2 01 04 5c 15 81 38 05 55 4c 31 96 3e 92 48 f3 e6 bf 17 3b 4b 86 97 1d cb 5d 6c e8 21 7c 14 91 46 f0 c0 f0 3b d9 4d c5 fc 09 01 5f 03 ad 11 14 04 44 40 5c 58 84 e2 1a 59 0d f5 23 2b 7c ca ed 54 d8 9d 1d 55 4c 91 98 ec 5a 1b b1 36 d5 04 18 1b 8f ef db cb 42 b4 0b 9a 8e 9f ec f4 ec 8f 4b 81 a9 1c c9 5d 28 32 53 48 62 c5 5d 23 be ec a2 fe 4b 5a 08 20 11 b2 ce 62 18 7d 4c b5 4f 7c 6c 05 ae 03 5b 80 af 69 e3 74 70 44 c7 1b 96 b4 03 ec 41 32 f0 ef 49 9a 73 3f 25 ed 43 20 94 c9 0e 56 b4 b6 e7 39 3b 8d 34 b2 09 91 11 01 11 10 14 15 06 a0 30 18 19 1b 9d 98 68 f7 16 8b 73 d4 02 88 83 9b 89 8a fe 1a 9b f3 9d fa 13 89 8a fe 1a 9b f3 9d fa 11 10 38 98 af e1 a9 bf 39 df Data Ascii: #95A_iE5[:]/\8UL1>H;K]l!\|F;M_D@\XY#+\|TULZ6BK](2SHb]#KZ b}LO\|l[itpDA2Is?%C V9;40hs89

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49895	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1004	OUT	GET /media/wysiwyg/home/emballage-transport-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 115084 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "j0jR1AEvmFoDA+lE1Hm09Vw0NYyZR1UMxDmLR3TwXuE" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=115084 idim=400x400 ifmt=png ofsz=115084 odim=400x400 ofmt=png Fastly-Io-Served-By: img09-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016278071f31f6c304d5567f29552e-762975288dc7155a-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960079-PAR, cache-dfw-kdal2120138-DFW X-Cache: HIT, MISS X-Cache-Hits: 4, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 b0 65 d9 55 de f9 5b 7b ef 73 ee 7d 2f 87 1a 54 a5 79 00 0d 0c 42 62 30 20 10 c8 20 40 c2 60 87 c1 46 62 b0 0d 18 63 a0 81 76 77 d8 dd d8 c6 3d d8 ed 68 b7 c3 41 74 84 83 a0 1d e0 76 63 1a 1c 8d 1b 64 04 12 83 d4 02 09 90 54 68 28 89 2a cd 35 a9 a6 2c d5 3c 64 66 65 be 77 cf d9 c3 ea 3f d6 de e7 dc 97 1a 28 55 e5 54 95 e7 ab 78 91 59 ef dd 77 ef b9 e7 9e 5c eb ac b5 be ef 5b b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 c1 82 05 0b 16 2c 58 b0 60 Data Ascii: PNGIHDR6 IDATxyeU[{s}/TyBb0 @`Fbcvw=hAtvcdTh(*5,<dfew?(UTxYw\[`,X`,X`,X`,X`,X`,X`,X`,X`,X`
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 30 38 65 d4 cc ce ba e3 f2 43 2b 62 ce 74 bd 27 97 62 31 bf 8c 28 09 cd 0e 70 38 09 a8 16 62 51 82 f7 08 42 ca 89 ec 85 a4 4a 8e 09 50 7c 27 ac 56 3d 29 26 ca 68 df 03 67 07 a4 a0 28 ae fe af 60 d4 5d 71 82 88 b3 ff 53 a5 72 b6 58 f5 81 ab 0f 5f c9 8d 9f b8 ee 1b 2f 7f f6 73 bf 0b 58 ac 4d 16 9c 77 2c 09 64 c1 25 81 db 6f f9 93 b5 f3 47 5f d6 0d 92 ef bd fb e6 d7 7d e2 da 6b 7e 3a 8f 7b 57 8c c3 48 f0 81 23 ae 10 f2 c8 ce 6e 47 29 11 95 60 c9 40 ea 9d bf 3a 72 4e b8 10 00 1b 78 17 0a a5 d4 a1 38 82 d4 e0 3f 8c 03 ea d4 92 42 1a 09 ce b4 1c 81 9e 92 12 68 26 78 57 0b 10 87 96 42 ca 56 8d 14 c9 84 e0 71 e2 6c 16 e2 1c de d5 d7 2b 85 52 32 68 21 47 25 aa a3 f3 9e 30 0e 97 5d a8 f3 ba e0 d2 c6 92 40 16 3c 65 f1 c9 eb de f0 97 88 47 9e 2f c2 65 1f 7e e7 7b ff Data Ascii: 08eC+bt'b1(p8bQBJP\|'V=)&hg(`]qSrX_/sXMw,d%oG_}k~:{WH#nG)`@:rNx8?Bh&xWBVql+R2h!G%0]@<eG/e~{
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 17 5d f9 cb e7 f1 a3 5b 70 89 63 69 61 2d b8 20 b8 e1 3d ef fd e9 31 9d 7c b9 ef 34 de 73 fb 6d 7f ef ce 3b 6e 39 2c 3a 70 a8 5f 71 68 b5 c6 49 06 cd f4 4e f0 24 6b 4f 21 68 0d c6 4e 1d 19 25 6a 26 03 8a 05 79 a9 d9 41 29 88 16 ab 4a aa 96 43 c4 12 86 77 8e b1 ee df 70 b5 95 e4 bd 27 8e 36 f3 68 ed 28 a4 26 14 ac 12 40 04 55 b3 13 89 29 4f ad ab 52 cc f4 50 a4 da 92 40 ad 58 ac c5 d4 da 55 db ad ae 92 4b 15 0e 1a bb 6b 1c 46 53 b4 7b 6f 15 47 4d 26 52 df 93 aa 92 35 53 b2 4e ed 31 ef 41 34 20 02 f7 3f 7a 92 f5 73 be e8 a6 bf f9 23 ff f8 8b cf e7 e7 b8 e0 c2 60 69 61 2d b8 a4 70 c3 27 de f7 2d c7 6e bf ed fb 9e b5 22 ef 9d 3c fe 55 c7 ee b8 fd 1b 4a 3e 85 96 91 43 87 8e f0 fc 2b 03 e4 55 65 21 45 1b 66 d7 3b 70 80 5c 32 88 e0 c4 a3 38 0b a6 6a ed 23 b0 04 Data Ascii: ][pcia- =1\|4sm;n9,:p_qhIN$kO!hN%j&yA)JCwp'6h(&@U)ORP@XUKkFS{oGM&R5SN1A4 ?zs#`ia-p'-n"<UJ>C+Ue!Ef;p\28j#
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 6b db 29 c5 e6 25 fd 0e 8f 8e 8e 2f f9 c6 bf c1 57 be f2 d5 ed d1 23 f0 2e e0 4d 98 e5 fb 5d 67 e9 d2 58 70 01 b1 b4 b0 16 5c 94 c8 7b f7 5d fd e1 0f 5d ff df 9e 3a f1 d0 0b 56 92 76 ee be e9 13 af 8f 9b 53 f4 de 13 e3 c0 a1 dd 35 57 5e b5 42 4b 22 f4 01 f1 81 71 88 94 92 50 71 d6 f7 71 0e 4d 69 d2 55 d8 ce 0b 63 28 b9 ba fb 9b 52 6c 8e a1 98 57 15 82 34 0d 84 93 ad c0 6b ed 2c b1 ac 42 a9 73 04 c1 ee c4 db 83 ec 79 6d 76 40 a5 bd b6 3b 7d a9 6d ad 99 b1 55 67 dd 2d 50 17 ad 03 f8 ba 9f 1c ab 3a b4 ce 28 42 30 33 44 63 4c 29 b9 14 52 8e 48 b1 d7 75 22 55 93 52 a6 b6 57 4e b6 68 0a 38 30 fb 68 70 6d f1 47 30 cd 49 8c 71 b2 3b 49 29 99 ea bc eb 50 55 62 8a 04 1f 2c 49 54 25 7b 33 58 44 04 a7 98 ba 3e 0f 30 46 d2 e6 80 18 bd 07 be ad 7e fd 3c f0 3e e0 8d c0 Data Ascii: k)%/W#.M]gXp\{]]:VvS5W^BK"qPqqMiUc(RlW4k,Bsymv@;}mUg-P:(B03DcL)RHu"URWNh80hpmG0Iq;I)PUb,IT%{3XD>0F~<>
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 21 b6 8d b6 1d bf 1c 48 3e 3a 0d f7 a1 89 16 2d 59 48 63 07 d7 c7 e7 9c 49 c9 62 6f d3 82 c0 dc 82 9a 9e 13 c0 89 0d e9 4d 29 03 65 96 4b 4e 4b a6 d0 da e6 ab ad ba 7a ce 63 8a 74 be 67 38 1d f1 eb 43 dc bb 17 f9 f2 6f f9 4e be ee 1b fe da e7 75 dd 7c 16 1c 03 fe 1d 96 4c 1e 3e 1b 4f b8 e0 89 e1 62 49 20 ee 2f 7e c8 82 27 23 ee ba eb d4 6b ef ba e3 c1 af 7a de 55 3b 5c 7d 78 cd 4a 0a ce 41 e8 7a 5c e8 c1 3b b2 13 92 77 e4 e0 29 c1 93 04 22 4a a9 bd 75 51 70 59 09 d9 f4 06 25 a6 aa d5 a8 ed 29 a0 de 36 57 61 de 9c 3c 1a 72 ce d3 5d be 4e 8b 97 3c ce 07 73 c8 dd 0a a2 8d 59 d4 9e cb 6d b3 b1 9c 18 dd 75 db ab aa 06 55 d3 5d f8 ca a6 da 4a 4a f2 99 93 07 58 1b cd 15 ec f7 5c 6d 61 e5 d6 4a b3 4a 63 9a 39 9c 71 8c 42 5d 3f 8b a0 05 b4 56 13 6c bd fb 32 b5 e5 Data Ascii: !H>:-YHcIboM)eKNKzctg8CoNu\|L>ObI /~'#kzU;\}xJAz\;w)"JuQpY%)6Wa<r]N<sYmuU]JJX\maJJc9qB]?Vl2
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: e9 b6 03 5e 1b 58 4f 8a ee 62 cf df fa f2 29 46 c8 65 0a b4 f6 20 53 94 e7 32 ab b6 43 d5 76 74 5d 37 cd 37 4a 29 d3 1c 23 46 a3 d3 a6 9c 89 31 d6 b9 43 aa 89 28 e3 7d 98 6c 45 4c 92 a2 ac fa 9a 34 b4 e0 14 d2 98 18 86 88 16 f3 91 2a ce 86 d7 4e ea 40 df 79 a0 06 62 0a 48 41 35 57 75 79 41 9c e2 eb fc 45 8a 56 b3 47 db 27 e2 10 82 b8 a9 cd 36 0c 83 b5 ac 64 de c9 9e 35 4f 8c b2 16 e4 db ff b7 ca 44 8b 25 2a bc 43 82 9b 2a 1e a9 ec 35 87 e0 43 20 a6 c4 fe b0 21 d7 cf d4 7b ab 36 35 47 b4 54 4f ad b6 72 57 0b 69 3c cd fe c9 fb 79 d6 4e c7 d3 a4 f0 c6 5f fa df d9 a6 1b 9f 45 bc 06 b3 4b f9 2d e0 a5 e7 e2 05 16 5c 3c 58 12 c8 53 10 b7 de 71 ec a7 ee bf ef ee ab d7 ab ce 5a 3f 12 f0 a1 a3 5f ed b0 ea 57 d5 d3 29 b3 5a f5 04 67 4a 67 87 98 22 3a 17 40 ea dd 6e Data Ascii: ^XOb)Fe S2Cvt]77J)#F1C(}lEL4N@ybHA5WuyAEVG'6d5OD%C*5C !{65GTOrWi<yN_EK-\<XSqZ?_W)ZgJg":@n
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 59 87 13 87 97 b9 85 27 3a 27 ba 52 6d d7 ad e5 66 1a 93 5c f2 64 06 39 55 20 db 52 cd 9a 6c bd 33 46 96 79 8e 55 45 7e 1d fc 37 ef 2f 10 42 17 8c 51 26 e6 16 60 09 50 19 c6 a1 7e 16 90 6a e5 b9 2b 91 67 1d d9 e1 4d bf fa 7f 50 f2 59 67 65 7d 2e bc 16 b8 1e f8 5f b0 7d 25 0b 9e a4 58 12 c8 93 1f af 00 3e 08 fc af c0 5a a4 d0 af 1d 9b 61 43 b7 5a f1 cc 67 3d 0b 54 19 e3 80 38 0b 62 29 46 72 9e ab 8c 56 39 38 37 8b 03 5b 8b c5 fb 40 4a 36 5f f0 be ab 89 81 49 8f 50 72 66 18 c7 a9 6a 81 a9 c0 30 46 94 33 b7 de 56 05 a8 1a cd 55 9d f5 8e 9a f9 49 9b 2b f8 10 aa a1 e1 cc ec 6a 8c ac a2 05 ef 02 5e 9c bd 48 d1 e9 78 cc bc ca ac 3d a4 79 48 a9 31 a5 1c 52 87 d5 c1 2c 54 c4 d7 b9 06 07 de 7f 4e 99 98 2b 83 89 42 21 d3 05 3f cd 33 5a 92 43 a1 e4 e6 1f e6 70 e2 51 Data Ascii: Y':'Rmf\d9U Rl3FyUE~7/BQ&`P~j+gMPYge}._}%X>ZaCZg=T8b)FrV987[@J6_IPrfj0F3VUI+j^Hx=yH1R,TN+B!?3ZCpQ
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: dd e1 48 29 ac 43 e6 cd bf f3 9f d8 0c e7 54 1b f2 58 f0 43 d8 90 7d 99 8d 5c e4 58 12 c8 c5 0f 8f 31 ac ae c1 68 ba 9f 15 27 1f b8 17 4a 24 6f 86 4a 43 05 4a 41 c4 e6 13 b2 55 19 98 fb 2e 55 80 97 27 aa ed e4 0e cb ec 0b d5 da 55 21 78 ba 2e 58 7b bd b2 86 52 aa 0a ed e6 09 05 33 f5 d5 39 1b ee d6 e7 9b c4 7a d8 a1 85 60 09 6b 9b 2e 3c b1 97 64 be 34 a7 dd 1a 5a c5 73 55 71 5d 8a 31 99 da 1d fe f6 5c c1 50 db 3d a9 54 0a 70 9e 12 a3 20 13 ad b6 09 0d 27 05 f9 d6 b0 5c 51 c6 38 d6 19 c7 3c df c8 6a ad be f6 7b db 34 dc a6 e9 d8 ae 76 1c 66 f8 78 80 b9 a5 b5 c5 28 42 d7 05 db 19 62 07 65 09 16 f3 dc 4a c3 48 8e 11 cd 96 88 83 28 a2 a5 52 a9 e7 44 6f 25 97 7d 7e b1 6a 74 9c b7 e3 8b 31 55 96 59 4d 54 e2 2d e1 95 04 25 13 b3 a7 97 c3 ec df 7b 17 d7 bf f3 8f Data Ascii: H)CTXC}\X1h'J$oJCJAU.U'U!x.X{R39z`k.<d4ZsUq]1\P=Tp '\Q8<j{4vfx(BbeJH(RDo%}~jt1UYMT-%{
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 6d 4e da 46 3f 39 38 e4 9f ad cf 67 66 55 ab 9a 5a f5 70 a0 55 25 b3 b9 61 2e 07 93 5a b3 20 99 16 38 a1 d3 2c 04 4c 08 38 66 ab 4e 1a f3 ab 29 ca 5b d2 b2 e1 b8 9b 06 f4 db 68 c7 46 65 bc 09 4c c7 d7 96 54 b5 63 b1 64 e5 70 78 9c 5a cb ab a8 e2 5d c0 85 80 f3 02 5e 6c 42 50 cf c9 18 23 4e cc df 2b c6 71 1a a2 37 96 58 d1 4c 4c 63 4d ec 6d e0 5e 57 f9 56 05 7c 2e 4a 51 b3 9a d9 0d 99 3e ef f3 be df fb f5 c7 73 39 9e 6b 34 f7 85 6f bd d0 07 72 a9 63 49 20 17 1e 02 fc 53 8c ff 7e c5 e3 7d 92 ab af b8 1c 89 95 95 63 db 9c 8c c1 13 e3 44 c5 f5 be d1 5c a9 73 04 fb cb 38 8e 93 60 50 c4 4d de 4a c3 30 70 e2 c4 49 86 cd 30 29 d8 81 ca fe d1 3a a4 f5 ac 77 76 26 46 55 e8 3a 62 8c b5 1d 34 4c 09 c1 66 c4 99 71 18 3e 2d 60 ba 6a 12 78 26 03 6c 3a 41 32 af 72 b5 Data Ascii: RmNF?98gfUZpU%a.Z 8,L8fN)[hFeLTcdpxZ]^lBP#N+q7XLLcMm^WV\|.JQ>s9k4orcI S~}cD\s8`PMJ0pI0):wv&FU:b4Lfq>-`jx&l:A2r
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 6c 54 e4 96 94 ed b9 ec 75 52 c9 b6 d8 cb 35 53 18 87 d4 c4 d3 74 41 e6 a4 95 51 29 95 70 90 49 69 0f 47 22 78 cf 2d 37 7c f4 00 6b ef 22 c5 b3 31 d1 e1 77 5f e8 03 b9 54 b0 24 90 f3 8b 1f 05 de c4 59 ec d7 0e e3 86 0f bc f3 6d 1c 39 b4 c2 fb ce ee 86 75 de 81 d1 f4 1e 93 35 48 6d 85 38 e6 0d 81 db 01 0d 9d 77 7d c7 71 24 8d a3 b5 bb 72 9e 98 5b 25 95 ca 98 da ae 1c da d3 0b 25 27 52 8a 07 e6 07 22 6d 60 ee ea 3c 64 fe 5d 47 9b 53 58 f0 9d 5a 47 5b ed a3 b6 e9 0f ac 72 0a 9d 25 8a e0 67 2f ae a6 07 69 33 0f 55 ad c7 de 6c 3c 6a 10 d6 52 83 ad bd ef 18 e3 4c e5 6d f3 8e 33 66 23 b6 9f c3 13 c4 4f 74 e7 66 a8 a8 db 89 b4 26 80 56 99 35 a1 60 8a 71 1a 92 4b 5b 7f 5b 77 be c7 9c 18 ab aa be 09 1e 8b 9a 27 17 ba 45 7d 9e 5e c7 12 40 4e 75 a9 55 f0 d4 35 2e 28 Data Ascii: lTuR5StAQ)pIiG"x-7\|k"1w_T$Ym9u5Hm8w}q$r[%%'R"m`<d]GSXZG[r%g/i3Ul<jRLm3f#Otf&V5`qK[[w'E}^@NuU5.(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49896	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	991	OUT	GET /media/wysiwyg/home/marche-gris.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 155283 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "anbg4AAjRJkvY2VFA/saeSq6oyIcfxui0SNXl5I/tIM" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=155283 idim=400x400 ifmt=png ofsz=155283 odim=400x400 ofmt=png Fastly-Io-Served-By: img01-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-180162780707575490580e21aa62fb13-987e0c32d7ca843e-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120037-DFW X-Cache: HIT, MISS X-Cache-Hits: 3, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec bd 79 b0 25 d9 5d df f9 39 4b 66 de 7b df fe 5e bd da ab 7a df d4 dd 42 dd da ac 1d 64 83 20 80 11 18 0d 08 82 c5 60 b0 c2 03 1e 60 3c 66 22 66 3c 0b c6 98 61 02 ec 89 c0 76 4c 0c 10 63 83 3d 20 24 24 01 16 83 16 a4 56 77 4b 6a a9 d5 52 ab d5 dd d5 5b 75 ed eb ab 7a eb 5d 33 cf 32 7f 9c 93 79 f3 be 7a dd 08 84 54 d5 ad fc 46 bc aa 7b f3 e6 72 f2 64 e6 ef fb db 13 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 0d 1a 34 68 d0 a0 41 83 06 Data Ascii: PNGIHDR6 IDATxy%]9Kf{^zBd ``<f"f<avLc= $$VwKjR[uz]32yzTF{rd4hA4hA4hA4hA4hA4hA4hA4hA4hA4hA
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: f2 5c c2 bf 52 88 48 6e e0 fd 57 4f 5a 2f 23 eb ac c1 0b e3 ef c5 bf 4f 00 bf 0c dc 7f 75 87 d3 e0 1b 89 97 34 81 48 21 e8 f6 bb 7c e0 3f fe 3e cf 3f f6 30 cf 9f 38 4f d6 9a e7 8e bb 6e e0 d6 5b 6f 60 7e b6 c5 a5 4b 17 38 7b fa 38 ed f6 0c 8b 4b 4b cc 2f cc a3 d3 8c 34 49 51 49 8a 92 0a a5 15 4a 25 51 c8 0b 10 12 8f 23 4a d4 68 49 80 f0 35 9d 5f 08 a4 84 68 b7 ec e0 ee 1a 93 49 e9 5c f3 3e 58 10 13 2e 33 49 25 9c 45 f4 b2 c9 1a af 49 19 7e 74 de a3 64 d8 46 aa 20 e4 c3 7a a5 35 02 3a 18 44 38 37 0a eb 5a 4f 2a 05 d6 78 94 00 0c 68 21 5e ed 1c bf 9a 08 de e1 bd c7 8d 3c 89 92 b8 3c 12 27 54 96 93 8f 96 8e f1 d5 29 47 d7 9d 18 2f 98 38 ff 31 b9 04 97 a2 c4 97 56 d7 b6 6d ea 16 5d 79 02 75 3a 17 a2 ac 47 14 d5 75 78 51 78 f0 63 06 67 27 e2 2a cf af c1 d7 05 Data Ascii: \RHnWOZ/#Ou4H!\|?>?08On[o`~K8{8KK/4IQIJ%Q#JhI5_hI\>X.3I%EI~tdF z5:D87ZOxh!^<<'T)G/81Vm]yu:GuxQxcg'
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 25 56 27 26 51 5e 9a e8 92 13 63 4b a6 5c a9 8a 60 55 71 27 5f 25 54 8c f7 23 c7 e3 17 92 d2 06 1c 93 50 a9 d1 c4 e5 d4 96 8d 09 fd 04 a1 c6 e8 83 e3 31 6c 1b 7d 13 a7 fa aa d1 10 48 0d 5f 2d 81 58 eb 18 6e ae 30 bb b0 80 f7 06 21 d3 4f a7 9d c5 37 9e 3f 7b 9a 67 9e 78 8c 57 7d cb 1d ac 6d e5 fc e1 1f bc 8f 9b af df c3 8d 37 dd c0 ec fc 02 73 0b 8b b4 3b 53 e1 84 2b 6d 1e aa 1b d8 87 47 6c 22 fe 50 13 1c e5 76 a5 4c 29 b5 62 6a bb a8 3f 08 75 ed b1 54 f2 85 2f bb d4 05 e2 92 31 38 0e 93 cf 4d f9 a0 43 cc ce f2 31 83 ca 81 92 02 e7 28 84 14 c6 7b 6f 84 10 85 87 5c 40 6e 1d c2 14 a3 79 29 e5 8c 73 0e 21 05 ce 3a 94 96 58 13 52 86 ad f1 28 15 b2 c6 a4 54 48 25 31 c6 91 a6 1a ef 3d 4a ca 2b d2 84 a5 94 51 ab 25 7e 57 95 d4 1b 0b 15 31 9e 03 ef 09 f1 06 57 09 Data Ascii: %V'&Q^cK\`Uq'_%T#P1l}H_-Xn0!O7?{gxW}m7s;S+mGl"PvL)bj?uT/18MC1({o\@ny)s!:XR(TH%1=J+Q%~W1W
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ea 1a 47 8d ef c1 f2 5a 6c 4b af 1e eb 07 13 cb ea ca d7 e4 5d 16 fe bc b3 08 01 2e f6 22 76 35 cf 44 35 17 d5 8d 30 be 8e e1 19 0f 44 13 c8 a7 96 7d 57 bb 5f ea 1e 87 6b dd e2 d9 09 2f 09 02 d1 49 ca d1 c7 1f e0 4b 5f 78 8c 1f fb 07 ff 00 ef a5 f2 66 f0 a3 4a a7 0c 7b 1b 1c bc ee 3a fe cb 87 3f c8 87 fe e4 33 fc f7 bf f0 73 f4 bb 9b 0c bb 3d d6 8c 21 4b 13 0e ec db cd dc fc 41 e6 17 16 58 5f 5b 65 63 6d 9d fe 56 97 cd f5 2e 5b ba 87 42 04 6d 33 51 24 5a a1 94 22 49 13 da 9d 36 49 9a a1 93 94 34 4b d1 3a 41 27 29 9e 60 95 28 a5 b0 2e 04 95 9d 73 78 6f e3 cd 15 7c fe ce 07 41 1f 6e 3a 11 73 53 83 16 36 4e 31 0d 99 57 e3 2c 2c 8d d6 b1 1e 45 ca a0 01 8b 98 85 25 c6 37 a6 14 63 81 5d b9 ab aa 19 bb 52 9b 1c 1f 6f 87 5b b4 7a b8 22 81 6d 53 fe b7 6b b6 3b 6f Data Ascii: GZlK]."v5D50D}W_k/IK_xfJ{:?3s=!KAX_[ecmV.[Bm3Q$Z"I6I4K:A')`(.sxo\|An:sS6N1W,,E%7c]Ro[z"mSk;o
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: f9 63 2e dc 7f 80 08 be 03 5f 76 87 70 21 4b b0 28 0c 75 f7 9f 92 0a 44 b8 3b a4 54 55 2f 38 ef c3 73 aa 55 52 b9 8d bd 90 28 29 c7 f7 5d ec 5d 27 64 f9 2c 45 8b 47 94 33 59 2a 74 72 ac 24 94 71 d1 ea 79 aa df 0f 7e 7c 3f cb da b2 9d 34 b1 ab 80 6b 9a 40 a4 54 9c 38 f2 08 59 96 31 b3 b0 c4 d4 e2 de d7 3c f6 d0 fd ff 6e 79 f7 12 08 4f 36 b3 97 3f ff f0 c7 91 a3 b3 bc e9 4d f7 f0 a1 0f 3f c5 9e e5 39 ce 5f b8 48 9a b5 d0 42 90 8f 46 78 1f 1a 28 3a 67 71 c6 84 1b 44 0b 52 35 4d a2 33 3a a6 c0 98 11 ae 18 61 ad c5 58 8b b3 06 f0 38 63 19 e5 05 78 4b 91 5b 1c f1 51 72 8e 24 49 42 a7 5f 24 45 6e f1 ce a2 b4 42 08 89 92 02 a9 04 c6 59 8a 3c c7 3a 87 73 8e a2 28 62 83 44 d0 5a a1 74 82 52 0a ad 15 42 4a 74 96 e2 ad 43 5b 8b 34 06 11 35 ab a2 30 0c 86 23 ac 31 8c Data Ascii: c._vp!K(uD;TU/8sUR()]]'d,EG3Y*tr$qy~\|?4k@T8Y1<nyO6?M?9_HBFx(:gqDR5M3:aX8cxK[Qr$IB_$EnBY<:s(bDZtRBJtC[450#1
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 31 48 39 e1 2f 97 42 e1 63 d6 9b 28 03 d0 8c 2d 24 51 12 91 28 b5 f9 d2 05 53 ce 8b 8a 7b 22 8e b7 9c 0b 28 27 a6 72 fe d4 e2 12 a5 4c ac c7 73 26 88 68 9b 59 b1 a3 75 54 5b 47 a9 10 2c b7 d6 d6 14 f4 49 a1 ee af f8 30 b6 50 ca e3 8a 9d d6 db ee 9e aa 59 1e 25 19 ec 64 dd 94 e7 57 47 99 85 b5 fd 9c aa 0a fd 2b e2 60 93 43 19 ff 56 cb a7 bb 82 f7 c4 84 db 6e 3c 28 51 23 c1 c9 9d fa 6d 73 32 de b3 9f 06 a6 9d 8d 31 89 c0 3e 58 53 da 04 e3 63 56 5b 47 85 c6 0b b1 21 10 9b 87 af bb 75 43 08 b1 89 50 ab 08 b1 0e 62 55 48 b1 26 84 5a 03 d6 bc f7 ab de 8b 75 9d 24 97 a4 90 97 3c 72 e3 d1 cf 7c b8 f0 02 94 0a 0a 9e 8b 24 ed bd 27 cf 0d e0 c6 3d f6 ae 01 5c 93 04 a2 93 94 d3 c7 9f 62 b0 b9 8e 33 05 bf f2 7f fc c6 7b 8e 3e 7e ff 77 7f f1 f3 8f f2 23 3f f6 63 80 e2 Data Ascii: 1H9/Bc(-$Q(S{"('rLs&hYuT[G,I0PY%dWG+`CVn<(Q#ms21>XScV[G!uCPbUH&Zu$<r\|$'=\b3{>~w#?c
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: fe 92 7d 87 6e e5 07 7e f0 fb 10 2a 5c 88 e7 9e 39 ca f2 52 06 7a 8e 73 2b 1b 0c 47 23 66 a7 5b 38 63 d8 b7 6f 3f 8b cb fb 30 b6 00 1f 5e 07 5b de 88 4a 4a aa 36 b9 51 2f 92 51 1b f0 f1 aa 65 ad 0c e7 cb 6a 64 87 37 82 b4 35 4d 92 b6 83 69 89 20 cf 47 68 93 e0 92 0c 63 43 7c c4 16 45 b0 3a 08 ee 2e 2b 3d a2 80 bc c8 91 42 22 95 40 eb 0c 45 1b ef 03 f9 78 ef 42 56 88 d2 28 41 2c 36 cc 50 aa 6c f3 1d 7c 9f 49 6b 96 ac 15 ac 1d 64 10 48 4a 4a ac 0f 85 8c 0b d1 35 e6 9d a3 7c 9e 8d 29 30 c5 90 a2 c8 e3 cd 6c 31 79 8e b1 05 ce 5a 8a 51 4e 61 4c 70 61 15 0e bc c5 18 cb 28 cf 19 17 db 85 e0 3f 78 7c 74 9f 79 e9 29 6c 19 c8 f6 b8 98 9a 8c f3 95 66 2d 85 c4 11 02 2a 61 ba 83 35 53 3e 54 52 04 c1 ae 25 91 c0 04 4a c7 a0 ba 0b 8d 1d 7d 74 2f 96 b1 1b a5 c2 5c d8 e8 Data Ascii: }n~\9Rzs+G#f[8co?0^[JJ6Q/Qejd75Mi GhcC\|E:.+=B"@ExBV(A,6Pl\|IkdHJJ5\|)0l1yZQNaLpa(?x\|ty)lf-a5S>TR%J}t/\
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 22 b8 8f 42 4b 87 a0 15 5b 5b e0 4c 1e 7e f3 3e 58 5b d6 84 6c 30 1b 0a 24 8d c9 f1 d6 51 14 a3 f1 6f 31 8b cd 98 82 22 cf 83 20 94 22 58 55 c2 e3 0a 4b e1 2c 59 96 a1 84 c0 fa a0 f5 39 1f 82 c4 a6 28 a2 30 a0 7a d0 8c 0d c2 43 c4 b8 06 de 85 1a 15 19 ba 01 97 2e 4a 59 3e d9 51 a1 2e f5 6a 21 04 a9 08 b5 01 3e 6a e9 32 49 30 d6 92 c8 90 6e 1c 32 f2 a2 06 6a cb 42 50 8f 75 0e 1b 35 f2 72 f7 de 43 91 d7 dc 24 7e 1c 8f 92 31 e0 ed 09 42 b4 95 66 e4 49 81 d4 9a 24 d5 78 a9 51 52 92 a4 69 b0 44 44 c8 c4 c9 5a 19 ed ce 0c 3a 49 82 70 94 09 a3 61 9f 4b 97 2e 70 f2 e4 71 66 a7 3a 5c ba 3c e4 f0 0d 87 c0 e7 0c ba eb 51 13 f7 c1 c2 b4 26 08 62 0f 85 2d f0 2e bc 1e b9 c8 f3 68 e1 24 08 11 5d 4a 4a 47 8b 27 28 11 a1 17 58 48 d8 a6 6a cf 13 92 29 10 21 ce 57 a6 8f 3b Data Ascii: "BK[[L~>X[l0$Qo1" "XUK,Y9(0zC.JY>Q.j!>j2I0n2jBPu5rC$~1BfI$xQRiDDZ:IpaK.pqf:\<Q&b-.h$]JJG'(XHj)!W;
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 66 67 a6 98 99 99 a6 33 d5 21 49 74 88 31 c5 9e 50 a3 bc a0 db ef c7 d4 e9 a8 80 28 89 44 55 a5 0d d6 ba 48 84 61 5e 6d 51 04 b2 b3 36 7c 36 05 d6 58 4c 24 1e 5c 10 04 4a a9 2a 15 37 84 18 42 12 c4 70 34 22 cf 73 ac f3 0c fb 7d 9c 75 14 d1 cd a8 62 c1 a9 90 92 a9 76 ca b3 4f 3d c7 f1 93 97 39 b4 af 8d d2 12 11 5f 1c 56 7f 83 65 88 b7 08 9c 71 c1 da 73 81 10 7a 1b d1 b5 eb 7c d4 bc c1 19 57 59 49 55 6c 87 a0 70 d4 3b 12 d8 a8 b0 10 ef ff b8 5a b8 fe 52 8e b3 9c a2 b0 45 88 18 03 8a 29 e4 8c 5d 34 e8 84 a4 f6 26 c4 d2 b5 6c 8d 0d 84 1a 05 ab 24 6c 6b bd c7 e5 39 f8 11 20 a2 55 e0 10 4a 91 28 1d 52 b4 85 44 ab 20 b4 bd 76 14 de 53 e4 05 26 ce 65 15 6b 29 e3 6a d1 9a b1 c5 f8 d5 c7 a5 45 1e ae 4d 8c 99 46 81 8e 00 67 6d 4c 74 88 9d 1b 44 8c 3f 39 1b dd d4 1e Data Ascii: fg3!It1P(DUHa^mQ6\|6XL$\J*7Bp4"s}ubvO=9_Veqsz\|WYIUlp;ZRE)]4&l$lk9 UJ(RD vS&ek)jEMFgmLtD?9
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 73 fb 6d 37 f3 6d 6f 7d 3d fb 76 2f 30 1a 0c d8 58 df a0 3d 3d 45 67 66 9e d1 a8 60 7a 7a 86 34 6b a3 93 84 76 bb 8d f7 96 cd 8d 75 9e 7d f6 28 f7 3d f0 10 1b 1b 6b 48 69 b8 74 69 85 d9 b9 36 bb 16 66 d9 b3 bc 44 a7 9d a2 66 24 c3 91 62 73 b3 cb b9 73 67 39 f9 fc 93 dc ff c9 0f f3 1f fe e3 ef f1 aa 57 dd cb 0f bd eb fb 59 da 7b 00 f0 60 7a e4 79 5e dd d4 d6 06 6d 4c eb 30 7e a5 04 32 9b 07 60 38 d8 e4 c1 07 1e e1 f1 c7 9f e2 e1 cf 3f c2 63 8f 7d 99 b3 17 2e b0 b2 b2 49 51 38 b4 72 cc 74 5a 68 a9 18 e6 05 69 96 f0 da 57 df ce 81 7d bb b8 ed e6 1b b8 fb 8e 5b 58 9a 9f c5 39 c7 a8 c8 83 f6 ab 35 de 83 2d 82 6b a8 dd 6e d1 6a 85 16 31 67 ce 5d e6 e9 67 8e b3 ba b6 81 f1 16 9d 6a 3a ed e0 67 df b5 a8 91 62 1a 95 68 f2 dc d0 eb 0d 19 e5 3d 9e 39 b5 ce e3 4f 3f Data Ascii: sm7mo}=v/0X==Egf`zz4kvu}(=kHiti6fDf$bssg9WY{`zy^mL0~2`8?c}.IQ8rtZhiW}[X95-knj1g]gj:gbh=9O?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49897	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	990	OUT	GET /media/wysiwyg/home/Etiquetage.png HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 109218 Cache-Control: max-age=31536000 Content-Type: image/png Etag: "a7xVEa0EHLwg8mVqALvYLmPQ2DvtqsZZ1k/qfQuON0w" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=109218 idim=400x400 ifmt=png ofsz=109218 odim=400x400 ofmt=png Fastly-Io-Served-By: img09-europe-west3 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Traceresponse: 00-18016278073112101016641d02926221-190a55b873657221-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72199 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960093-PAR, cache-dfw-kdal2120094-DFW X-Cache: HIT, MISS X-Cache-Hits: 1, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 9c ec dd 77 98 65 e7 5d e0 f9 ef c9 e9 e6 54 75 2b 75 aa 6e b5 64 c9 4a 96 b0 2d 07 f0 63 83 4d b0 07 c6 33 43 da 61 cc 1a 58 18 86 30 7f ec ce ce 00 43 86 d9 e5 81 21 0f b0 6b 13 67 17 18 2f 0e 80 8d 65 1b b0 6c cb 56 b0 42 4b dd 2d 75 ac aa ae 7c 73 38 e7 dc 13 f7 8f 73 bb d4 02 0b 5b b1 5a ad f7 f3 3c f5 54 77 ab 6e d5 ab 5b f7 9e df 79 df f7 f7 fb bd 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 08 82 20 Data Ascii: PNGIHDR6 IDATxwe]Tu+undJ-cM3CaX0C!kg/elVBK-u\|s8s[Z<Twn[y
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 16 d6 d5 ed 00 d9 01 3e a2 5d b6 f0 4a f6 39 b2 59 c9 f9 fd 1e c8 d5 42 64 61 09 5f ce b7 91 55 93 8b e0 21 bc d2 bd 1e 78 08 f8 d7 fb 3d 10 e1 e9 44 00 b9 fa 18 c0 ef 00 ff 1d b8 3a 6e 33 04 61 ff 15 80 3f 20 7b 6f 18 fb 3c 16 61 4a 2c 61 5d 5d 0e 91 b5 5c 7f cd 73 fd 06 51 18 93 24 09 29 29 29 20 cb 32 12 a0 28 0a 48 d9 2f 3c 4d 53 00 24 e9 a9 5f ff 95 7f 16 84 ab dc 7d 64 27 22 ae ed f7 40 f6 cb d5 b2 84 75 d5 5d 35 5e c1 01 e4 ed 64 b3 8e f2 57 f6 e5 12 5b 5b 3b b4 5b 1d 3c df c3 f7 7d 5a ed 0e ed dd 2e 93 60 82 a4 c2 a1 83 07 38 7a dd 31 e2 28 26 89 12 64 59 46 d7 35 2c cb c0 30 0c 74 5d 43 55 55 54 55 f9 92 2f 04 11 54 84 ab d8 2e f0 ad c0 a7 f6 7b 20 fb e1 6a 09 20 22 bb 61 ff 49 c0 ff 0a fc 1c 5f e1 79 e4 61 18 f1 91 0f 7f 8c 47 1f 79 1c 59 91 49 Data Ascii: >]J9YBda_U!x=D:n3a? {o<aJ,a]]\sQ$))) 2(H/<MS$_}d'"@u]5^dW[[;[<}Z.`8z1(&dYF5,0t]CUUTU/T.{ j "aI_yaGyYI
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: ea a6 e3 f8 be 97 6d a2 a7 d9 6c e3 a9 8b ae 94 7d af 34 c5 50 35 ba a3 21 fd 49 0f 80 7c 2e cf f2 b1 eb d0 0c 03 54 85 e1 78 84 ae 69 d3 bd 13 50 35 8d 38 4e 30 4d 83 38 49 f8 fc e7 1e e0 e2 c5 15 26 be cf d9 f3 e7 58 dd b8 c4 d7 7d fd d7 e2 c7 31 91 22 a3 98 1a 8a a2 12 26 31 95 7a 95 52 a5 8c 69 58 98 86 c5 ce ee 2e 83 c1 90 d1 60 c0 ca ca 2a 97 d6 d6 89 26 13 64 45 26 97 77 28 55 ca 38 8e c3 cc 4c 9d d9 d9 59 4c cb 20 e7 38 98 a6 3e 7d 8e 9e be 22 27 82 8a 30 f5 1f c9 d2 7d bf 1f 88 f7 79 2c d7 24 11 40 5e 5c 1a f0 fb c0 b7 3f a7 47 4b 12 67 cf 9c e7 f1 c7 9f a4 56 2b 93 24 59 a6 95 ae 67 7b 09 43 cf 23 20 e6 ba a3 cb 1c 3f b2 cc a8 3f e4 e8 d1 65 7e e6 a7 7f 89 c7 4f 9e c0 b6 0d 66 9a 65 82 30 22 4d 92 e9 32 90 f2 d4 05 56 92 a6 93 90 14 d3 30 58 5d Data Ascii: ml}4P5!I\|.TxiP58N0M8I&X}1"&1zRiX.`*&dE&w(U8LYL 8>}"'0}y,$@^\?GKgV+$Yg{C# ??e~Ofe0"M2V0X]
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: bc 49 c4 ab 6e ba 09 db b6 71 dd ec 26 2f 8e 63 74 5d 47 d7 75 0c 43 c7 34 0d 14 45 a1 5c a9 10 4c b2 25 ae 23 cb c7 f8 a5 5f fa 35 7e fa a7 7e 9c 49 f0 54 37 8a 7f fd 9d ef e1 3f fd d8 7f e4 e0 81 43 ec ee b4 28 95 ca 18 0b 4b 24 89 44 e8 47 d8 39 87 7e 7f 88 65 9b b4 db 1d 6a 95 32 37 1c 3f 8e e7 b9 e8 ba 8e 63 9b f4 fa 7d f2 f9 3c b3 8b 73 f8 9e 87 6d d9 5c bc 78 11 dd 30 70 5d 8f cf 7d fe 01 64 59 26 4d 63 2a 95 12 0b f3 f3 94 4a 45 1a 8d 3a a5 62 01 c7 b6 91 65 19 48 91 e4 a7 a7 18 8b c0 f2 b2 f4 06 b2 f7 e8 db 11 41 e4 79 13 01 e4 85 a3 93 15 2f 7d 45 c1 23 9b 75 64 01 24 8e b3 8d 6b 49 92 90 65 85 9d ad 16 0f 7e f1 04 e5 4a 81 38 49 b2 fb 61 19 92 38 06 24 14 4d e7 96 5b 5f 4d a3 5e a7 3f 1e d0 ee f4 f9 81 7f f7 83 40 82 aa 38 04 49 88 9d 2f d2 9c Data Ascii: Inq&/ct]GuC4E\L%#_5~~IT7?C(K$DG9~ej27?c}<sm\x0p]}dY&Mc*JE:beHAy/}E#ud$kIe~J8Ia8$M[_M^?@8I/
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: dc 70 c3 f5 4c 26 01 41 10 32 18 0c 88 e3 98 b9 b9 39 a4 14 0c d3 40 d1 14 2a 95 0a bb bb 3b 98 86 41 9a 66 d9 65 92 24 d1 98 99 c1 75 3d 2e ad 6f 32 33 d3 a0 d1 68 d0 69 b5 d8 dd 1d a0 a8 3a be 3c 41 4a 13 3a bd 0e 51 1c 11 04 13 f2 b9 3c ee 78 cc 81 03 8b e4 f3 39 0c d3 a0 d3 ed 30 1a b9 28 92 42 b7 db 45 37 74 2e 5d 5a e7 a1 87 4f f0 f1 bb ff 96 72 a9 c8 c2 c2 1c cd e6 2c b3 8d 06 b5 7a 95 5c ce 41 51 e4 6c 2f 45 b4 64 b9 da bc 0d f8 13 b2 23 15 44 b1 e1 b3 24 02 c8 f3 f3 ab 64 fd ad 9e 97 38 8e 09 c3 98 38 f6 68 b7 3b 24 49 4a 14 c7 c4 71 82 a6 6a 28 aa 4a 18 45 20 25 28 8a 4c 12 a7 28 b2 4a 14 a7 e8 ba ca c6 e6 7a 96 b2 9a 77 48 53 99 f9 d9 19 96 0f 2e b1 b5 b3 c3 c8 1d 23 cb ca de 19 1e 29 d9 b9 21 72 9a 75 ca 8d 49 30 0d 93 4b eb 5b 7b e3 c9 e7 f3 Data Ascii: pL&A29@*;Afe$u=.o23hi:<AJ:Q<x90(BE7t.]ZOr,z\AQl/Ed#D$d88h;$IJqj(JE %(L(JzwHS.#)!ruI0K[{
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: c7 8f 1d 4d 4f 3d fa d8 d1 8f 7e f4 63 b9 eb ae 3b c2 2d b7 de 54 b4 4c ab d8 ed b4 59 58 3c 88 ae a8 04 93 04 12 68 b7 5b df 1c c6 be 21 21 4b be ef a3 2a 3a 39 c7 a1 5c 2e 3d bd 07 53 76 d5 de fb 19 5f ea cd 7f e5 2c c4 34 4d 24 14 90 24 52 12 02 3f 20 9c 4c b0 2b 15 52 59 42 91 a5 ac 2a 5c 51 49 e2 04 48 50 54 99 20 98 30 1c 8d 99 99 6d 52 2d 97 79 f5 8d 37 f2 c1 0f 7d 98 7b ef fd 02 77 bd e1 f5 b4 5a bb a8 92 42 42 42 9c 24 d3 63 6d b3 b1 c9 52 d6 89 77 32 89 d8 9d 66 60 01 54 a6 01 c4 b6 ac 2c 25 37 96 f9 c2 e7 1f 64 6b 67 17 45 55 d9 dd d9 a1 df eb 91 c4 31 47 8f 1e 45 92 15 c2 c0 43 51 55 34 59 c9 fa 75 69 1a e5 72 09 cb 9c ce 4c 34 0d 4d d3 e8 f6 ba 94 4b 65 26 41 40 12 27 54 ab 65 de f5 ce 6f e2 8d 6f fa 5a 76 5a 17 ae 78 76 b2 e7 2e 4e 12 54 45 Data Ascii: MO=~c;-TLYX<h[!!K:9\.=Sv_,4M$$R? L+RYB\QIHPT 0mR-y7}{wZBBB$cmRw2f`T,%7dkgEU1GECQU4YuirL4MKe&A@'TeooZvZxv.NTE
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 79 b8 ae cb 91 a3 cb a8 b2 c2 c2 c2 1c 9e e7 33 3b db 80 34 65 ec 66 ff fd c4 63 27 59 59 cd 01 29 b6 6d 71 74 f9 08 33 33 75 2a e5 0a a6 a1 4f 0f 98 94 c4 de c9 0b c7 26 6b 84 fa 3a c4 19 eb ff 24 11 40 ae a0 aa 0a 1f fa 8b 0f 7c f8 d3 f7 7c e6 c3 0f 3d f4 10 9b 9b 5b 7c e1 be fb 2a 67 ce 9c b9 f3 97 7f f5 57 7e bb 56 aa 1c 5c 5d 59 a3 df 1b 50 af d6 38 7c f8 30 37 dc 74 3d 07 16 97 28 14 0a cc 37 67 b9 f9 8e 5b 41 86 e1 70 40 6b 77 07 7f e4 b2 be ba cd a9 95 c7 08 a5 08 d5 d0 d0 34 9d 5c ce 61 76 76 96 7c be 40 2e 97 a3 50 2c b0 b1 b1 0b 71 8c 69 68 58 b6 cd c3 9f f8 14 f7 7c e6 ef f1 02 8f 91 3b 60 f1 c0 af f2 d5 6f ba 8b 49 10 10 25 11 9a a4 10 b9 1e 51 14 67 9b d6 92 8c 2c ab 7b 9d 7b 2d cb 40 51 54 34 2d 21 8a 23 22 3f 42 56 94 ec 6b c9 da 92 24 41 Data Ascii: y3;4efc'YY)mqt33uO&k:$@\|\|=[\|gW~V\]YP8\|07t=(7g[Ap@kw4\avv\|@.P,qihX\|;`oI%Qg,{{-@QT4-!#"?BVk$A
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 93 cf e5 79 e2 f4 19 fc b1 cf c2 dc 3c b6 e3 20 cb 12 bb ad 36 c3 fe 90 c6 4c 1d 4d d7 91 25 89 38 8a 28 15 4b 4c 26 3e b9 7c 3e 1b 2f 64 a7 33 c6 31 fd 7e 9f 4a a5 42 3e 9f 67 73 73 73 ef ee 3c 3b d8 4a c6 d0 75 fa fd 3e 8a 2c 53 2c 95 f0 3c 8f 95 95 15 e2 28 a2 5a ab 4d 03 73 76 78 57 92 24 7b 59 51 96 6d d3 eb 75 69 36 9b d8 96 45 10 86 84 41 80 5d 2e d1 de 6d 51 2c 95 90 64 89 5a ad ce fa c6 3a 61 10 62 99 26 49 94 40 92 d2 6c 36 29 97 cb ac ad ae 51 af 67 41 c5 d0 0d 2a 95 32 51 14 d1 eb f5 d0 54 9d 9d dd dd 6c af ca 36 b1 0c 9d 5c 3e 8f 37 f1 69 ce cf 50 2a 17 30 0d 9d 30 8c 58 3d 7f 11 cf 0b f8 e4 df 7e 86 24 8e 99 99 69 b0 7c f8 30 4b 4b 0b 59 82 c7 74 ef 49 96 c5 46 fc b3 f4 2d c0 8f 03 3f bd df 03 b9 1a 5d 75 af 20 77 d4 df d7 9f 9f 4c 5b 8b 4c Data Ascii: y< 6LM%8(KL&>\|>/d31~JB>gsss<;Ju>,S,<(ZMsvxW${YQmui6EA].mQ,dZ:ab&I@l6)QgA2QTl6\>7iP00X=~$i\|0KKYtIF-?]u wL[L
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: be de 20 8e 22 ee bb ef 01 be f8 e8 17 b9 e3 ce af e2 37 7e e5 f7 29 94 4d be e3 3b ff 25 b7 df 7e 1b 8b 0b 0b dc f4 aa 9b 19 bf f3 1b 78 f7 37 ff 33 ae bf e9 06 2e 5d 58 e1 cc b9 73 7c e2 13 9f e2 b1 c7 4e b2 b6 b3 c5 c9 33 4f 70 f8 e0 21 34 4d a3 dd ea 22 cb 12 ba a9 d3 1d 0d f8 c2 fd 9f 65 61 7e 89 52 b1 48 6f 94 d5 81 2c 2e 2d a1 6a 3a c1 24 a0 df ed e1 7b 1e 83 c1 80 d1 60 88 ac 64 c7 e4 c6 a9 44 98 24 d9 41 53 9a 8a a2 64 27 15 9a a6 45 a5 5c 41 d1 34 d2 34 25 97 cb d3 6a 65 d5 ea f3 73 f3 44 51 48 4a 44 ad d6 20 49 13 d6 d7 36 51 64 9d 4b 97 36 b3 93 11 25 19 3b 97 c3 f3 27 68 8a 4c af db a1 56 a9 12 86 01 bb bb 3b 14 0a 11 93 89 9a cd 48 6c 9b b9 66 56 55 9e 02 9e e7 b1 ba b2 ca f5 d7 1f e7 c8 a1 83 dc ff c0 83 58 a6 4e aa 24 14 9c 22 8a a2 d0 e9 Data Ascii: "7~)M;%~x73.]Xs\|N3Op!4M"ea~RHo,.-j:${`dD$ASd'E\A44%jesDQHJD I6QdK6%;'hLV;HlfVUXN$"
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 30 a4 51 af 67 9b fc 83 01 b9 5c 0e 75 3a b3 d3 4d 03 4d 56 59 5d 5d a1 5e 9f a1 3b 1c 10 04 21 79 27 47 b7 93 7d 9f 72 a5 82 69 9a 0c 46 7d 82 69 aa b6 93 cb 9a 38 c6 71 c4 78 3c 42 91 14 e2 20 66 34 72 19 8e 06 4c 26 3e e7 2f 5e c0 d0 15 0e 2e 2d b1 30 3f c7 d2 e2 02 f9 42 1e 75 da 4d f8 ca 9b a7 57 b0 7f 03 fc c1 7e 0e 40 2c 61 5d 9d 8e 00 bf f5 5c 1f fc a5 36 24 95 69 cb 0c 00 d3 34 9e 5a f6 9a 76 db cd ce 38 0f f1 3c 9f f1 e7 ee 67 3c 76 19 8e 46 cc 2f 2c f2 de ef 7e 2f bb ed 16 e7 2e 9c e1 9d ef 7a 37 2b eb bb f4 ba 7d e2 30 46 55 74 46 a3 21 41 14 52 2e 15 c9 e5 f3 d8 86 81 a9 aa a0 c8 c4 09 78 ee 98 cd cd 6d 48 c0 f7 7c d6 d7 36 50 74 95 27 9f 7c 92 c3 47 97 a7 17 a0 06 0f 3e f0 20 ae 3f 66 66 76 06 d3 36 19 0d 47 4c 3c 8f 9d ed 2d 46 c3 21 e3 d1 Data Ascii: 0Qg\u:MMVY]]^;!y'G}riF}i8qx<B f4rL&>/^.-0?BuMW~@,a]\6$i4Zv8<g<vF/,~/.z7+}0FUtF!AR.xmH\|6Pt'\|G> ?ffv6GL<-F!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49899	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1316	OUT	GET /media/catalog/product/2/7/27583_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	818	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1852 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "gTzYlU7F4pu0pBhr/CBZXsasMHGrbHOLLGhWjR991+k" Expires: Fri, 24 Oct 2025 12:19:36 GMT Fastly-Io-Info: ifsz=142501 idim=1000x1000 ifmt=jpeg ofsz=1852 odim=200x200 ofmt=webp Fastly-Io-Served-By: img03-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162cfce5ebc133313cb02b241ee2d-aea76e6920f9945a-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 71822 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960068-PAR, cache-dfw-kdal2120029-DFW X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 34 07 00 00 57 45 42 50 56 50 38 20 28 07 00 00 90 32 00 9d 01 2a c8 00 c8 00 3e 6d 34 97 48 24 22 a2 a1 26 d1 c9 b0 80 0d 89 69 07 2c dc 25 ff ee a6 01 de 4a 1f 25 36 f4 73 d8 3e 95 b4 03 a0 fd 74 45 6f b3 df e1 b3 8c 87 1f 25 f5 c8 0f 2b e1 41 5d 21 83 70 79 89 eb 2d b8 e3 6a 24 3e 98 f5 17 8c 16 44 73 f1 6e fc 23 a7 99 c5 9b cb b6 24 43 97 24 bf 93 6b 78 5b 60 a0 52 1d ba 00 c7 c2 5b 38 5e 66 bc 69 37 ef 81 96 1c 9a ee 4c c2 c4 87 6a 0e 9b 1d ef 24 93 ec d3 ae 7d da b7 ab d2 a3 02 fc 41 c4 cc 1b c8 48 4e 5d 7c 74 4b d4 6d c3 ff d1 7a bf 5e 31 1a f0 db 14 9c bb 61 a3 7e 52 05 ec c4 65 c3 e2 f8 e3 fb 5a 33 97 38 b0 96 11 51 e1 8d f9 a7 67 31 fb 05 91 9b a6 72 96 70 2b 1c 58 32 26 70 09 fb 41 0c 78 74 d8 a9 cc 29 1b 6b ed 88 ba e0 c3 72 66 3f Data Ascii: RIFF4WEBPVP8 (2*>m4H$"&i,%J%6s>tEo%+A]!py-j$>Dsn#$C$kx[`R[8^fi7Lj$}AHN]\|tKmz^1a~ReZ38Qg1rp+X2&pAxt)krf?
2024-10-25 08:16:38 UTC	473	IN	Data Raw: 8a 38 87 07 b4 57 8b c0 a5 0c f0 3a 03 32 5d 30 34 f7 e2 0e 5b b3 d5 ea 7d 1f 91 a8 ab c5 e6 bc 0f 77 cb be 77 27 92 68 5c e6 ae 3b 40 97 fe cf 6c 9b 47 c8 71 91 26 ba 43 47 44 af 33 2e 73 82 eb 5d 03 0a ef 0a 60 04 52 1e a4 d6 99 2d d3 b1 cf 1e bb 4c cb 4c f9 2b c4 89 e1 e3 5c 8d 7b d1 e7 93 06 9c 8d ed e4 b2 ee 54 83 63 77 b7 40 16 f2 da 1f 6d 9a 19 a6 a8 33 0b 15 e8 d6 68 0d 4a e6 c0 88 20 0c 71 15 50 4b ad 5e 71 a9 a8 a7 6a fe 99 d6 33 e8 15 af 0d a3 fd ec 86 19 2e a3 a9 28 69 f6 21 c9 96 5f 3e ed 21 53 b5 ec 8c 37 48 bc 55 eb e2 23 85 83 8c 8a 47 7a 5a b0 7e 3e 4f 9c 80 ed 21 8c 14 56 da d8 45 01 f8 e1 94 f6 30 ae a2 42 8c 09 64 95 ec fa 33 cf 4f 5d 03 7b fc b0 b7 1b 37 1e 26 76 82 66 26 48 98 0e 3a 5b a5 c9 89 1d d8 be 93 bc 20 51 bf eb b7 5c da c5 Data Ascii: 8W:2]04[}ww'h\;@lGq&CGD3.s]`R-LL+\{Tcw@m3hJ qPK^qj3.(i!_>!S7HU#GzZ~>O!VE0Bd3O]{7&vf&H:[ Q\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49900	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1316	OUT	GET /media/catalog/product/1/6/16186_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 814 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "0jxtYYX03e4k3VawJs5GNhK2X9UfyotF8b4C1Wmt78c" Expires: Fri, 24 Oct 2025 12:17:18 GMT Fastly-Io-Info: ifsz=20070 idim=1000x1000 ifmt=jpeg ofsz=814 odim=200x200 ofmt=webp Fastly-Io-Served-By: img06-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180162afc72b6fafd539341e6b2a96ec-6361fb4d3cdf973b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 71959 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960085-PAR, cache-dfw-kdal2120073-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	814	IN	Data Raw: 52 49 46 46 26 03 00 00 57 45 42 50 56 50 38 20 1a 03 00 00 30 1b 00 9d 01 2a c8 00 c8 00 3e 6d 36 9a 49 24 23 22 a1 22 9c 48 18 80 0d 89 67 6e e1 6f 21 07 3c bc ce ee d2 15 df 8f 18 ed b9 de 30 1e bb de 8e 77 8a f7 a4 32 36 f6 c1 78 63 48 b7 3b d2 d2 e7 7b 34 10 3f 6c e1 f2 3f c2 1b 74 47 d6 44 c7 0f ee 6d 9c 3e 47 f4 2d 77 8f 73 e1 27 8d e5 dd 3e 02 fd 6a e3 c2 1a f4 93 f9 c9 d4 89 16 74 5b 9b 67 ba eb 79 3d c2 1a e1 60 d3 9f 8b 00 e1 f2 47 56 91 3c 5a fd 93 c9 21 78 4c ff 81 66 d1 ba 23 f0 9c 8f 3e 37 5b c3 fb 86 0c 27 75 01 08 70 69 5a 78 97 c4 8e 21 09 02 01 66 35 29 3e 5c 1e 51 3f 44 91 13 1b db 0f ec 8e 59 61 c6 3a 0b 04 6b ef bc a9 ac c6 45 30 fc 26 f3 13 2a 22 12 70 dc 5e b7 36 ce 20 37 f5 58 a4 8d 90 f6 55 81 73 68 00 00 fe fe f0 c0 00 00 e5 7e Data Ascii: RIFF&WEBPVP8 0>m6I$#""Hgno!<0w26xcH;{4?l?tGDm>G-ws'>jt[gy=`GV<Z!xLf#>7['upiZx!f5)>\Q?DYa:kE0&"p^6 7XUsh~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49902	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1316	OUT	GET /media/catalog/product/5/6/56888_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:38 UTC	813	IN	HTTP/1.1 200 OK Connection: close Content-Length: 880 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "LKtDRJfoJY4bfVXyOmXF+TsI7d+Oer+wgNfLKzuW/w8" Expires: Fri, 24 Oct 2025 12:51:31 GMT Fastly-Io-Info: ifsz=50176 idim=1000x1000 ifmt=jpeg ofsz=880 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240194 Fastly-Stats: io=1 Traceresponse: 00-1801648da077233692ccf59a51bf46ba-7542ef5c9b0effcd-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 69907 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960098-PAR, cache-dfw-kdal2120052-DFW X-Cache: HIT, HIT X-Cache-Hits: 14, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	880	IN	Data Raw: 52 49 46 46 68 03 00 00 57 45 42 50 56 50 38 20 5c 03 00 00 90 1e 00 9d 01 2a c8 00 c8 00 3e 6d 36 9a 48 24 23 a2 a1 25 98 d8 80 80 0d 89 69 6e de bf 00 cf 0b 9d 69 0e f7 29 ac c5 f2 de 8a 20 d5 2f 4e 9c 34 60 4e 8c 05 4f 5d dd 01 3a f5 8a 59 a2 58 dd eb 0d f1 23 14 45 38 97 9e 9e 09 44 0d db 03 fe 55 83 6c bd 36 c2 58 71 2e 8f 5b 88 45 c1 f9 90 1a f1 86 04 e8 bc 3f cf 7b 67 20 38 4f 3f ed 0b 2e 49 0c 09 d1 79 ab 04 78 86 13 95 b1 c8 07 f4 5b 50 81 66 60 02 74 5e 6c 9b 2c 96 3a fa 7f a3 19 53 e5 52 5c c6 9d 83 34 fa e9 7c 39 fc 99 e5 5e 08 7d 40 47 3a aa 36 4a b5 a6 b5 70 a5 3a 40 70 72 b3 9e 75 26 f7 28 e4 8c f4 b6 69 7f 76 52 7b dd fd d2 3e 54 f8 f3 6b f5 aa 3f aa 52 f6 8a 33 12 18 de b5 61 6a 34 87 25 82 b4 82 9d 6e fc de 1d 11 08 58 eb af 2a ce fc b5 Data Ascii: RIFFhWEBPVP8 \>m6H$#%ini) /N4`NO]:YX#E8DUl6Xq.[E?{g 8O?.Iyx[Pf`t^l,:SR\4\|9^}@G:6Jp:@pru&(ivR{>Tk?R3aj4%nX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49901	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1316	OUT	GET /media/catalog/product/1/4/14816_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844196.0.0.1241677340
2024-10-25 08:16:38 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2254 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "ENNGeO+YmAZcTPf+WtNokarOj+TV/OvMO4Z8LRyb6zw" Expires: Fri, 24 Oct 2025 13:17:01 GMT Fastly-Io-Info: ifsz=57350 idim=1000x1000 ifmt=jpeg ofsz=2254 odim=200x200 ofmt=webp Fastly-Io-Served-By: img04-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-180165f1cbfd8e182c4fa9079cad777b-a04941b846093518-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0bf162edd0bf69166 X-Platform-Server: i-0bf162edd0bf69166 Accept-Ranges: bytes Age: 68378 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960044-PAR, cache-dfw-kdal2120108-DFW X-Cache: HIT, HIT X-Cache-Hits: 13, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 c6 08 00 00 57 45 42 50 56 50 38 20 ba 08 00 00 90 30 00 9d 01 2a c8 00 c8 00 3e 6d 36 97 48 24 23 22 21 25 f2 99 48 80 0d 89 65 6e fc 7c 99 37 e7 fe 3d 8b fa 9b f9 3f 39 0b 33 f9 7f 20 dd a2 74 e7 96 b7 29 7e 72 f6 ed fe 4b d5 4f f8 6f e9 3e c1 ff e4 ff 06 bd f9 7a 13 f3 1b fb 6b ea af ff 0b d4 bf ec 07 ad 57 54 07 f2 8f 53 7e 99 8f 28 0d 55 06 4b cf de e2 9f 95 7e 64 8c 79 eb bf 64 84 9e ff ad 47 7b d9 cb 4f e4 43 f3 cf 32 7e b2 3f e8 f9 bb 4a c9 5a 57 1a 9b 88 bf 14 19 39 fb 4d 6f 8e 03 c9 fc c6 42 0f ce 6e 7a 52 f4 e0 8e b9 6f f5 f4 bf 02 5b c2 73 03 a5 8a 51 34 8a 44 ce 64 af 42 a7 cb 7a a7 2b 02 ee 80 50 d8 c8 4e b4 1a 43 48 60 35 a8 fd d7 e7 6f 0e b7 e9 5f 79 2c b9 09 6f 4f 03 92 56 95 4e 06 13 c8 dd e7 80 be a7 cc 9b 7f dc ad ef da 56 Data Ascii: RIFFWEBPVP8 0*>m6H$#"!%Hen\|7=?93 t)~rKOo>zkWTS~(UK~dydG{OC2~?JZW9MoBnzRo[sQ4DdBz+PNCH`5o_y,oOVNV
2024-10-25 08:16:38 UTC	875	IN	Data Raw: 13 ef 56 b0 e4 ab fd 77 71 1b b6 dc 63 8c e4 2a 67 63 a1 7e 47 7c ec 1d 1f c3 ca c4 4a 36 c9 ba 76 2f ba 93 1d a4 9d 12 5b c5 c4 9b ca 3d 62 c9 c6 aa ec da 5e 3f 86 cb 68 14 32 89 fe 2b 85 ca 49 1d 7d 76 06 8e 1d d3 ef f4 f5 8d 16 2b 06 d7 fc 78 69 67 ea 4a 33 99 69 fe c4 32 d4 90 7c b3 cc 9f c6 9b 48 46 84 01 47 ef f4 bb de 61 90 c3 b9 43 bb c9 0d 38 5e 3e 0b 53 b7 bd 3c f2 45 e7 ec a8 1d 92 85 e2 c0 58 2e 5d 2b 89 bf f6 45 b9 21 f2 ec 05 17 bf 32 cd c6 94 f9 7a 6c ff 67 0d 25 d7 5a 3c 5a 71 cc 8b d3 8d 20 75 7e 85 92 d0 54 50 4e f8 54 45 b5 a2 3a 27 a6 91 a7 b4 ec 94 64 7c 75 34 3b 4e 80 88 42 64 1a 14 17 f4 2e b8 cf 7f 32 7e b7 f7 c1 8c 27 9c 5c 32 fa ad 7c 26 76 be 94 cb 50 65 14 9c ba e6 0a 80 c9 18 92 5c b8 26 4e 83 7d b1 c4 f4 7c 30 b8 ec 61 69 13 Data Ascii: Vwqc*gc~G\|J6v/[=b^?h2+I}v+xigJ3i2\|HFGaC8^>S<EX.]+E!2zlg%Z<Zq u~TPNTE:'d\|u4;NBd.2~'\2\|&vPe\&N}\|0ai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49898	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1316	OUT	GET /media/catalog/product/5/2/52705_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.retif.eu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844196.0.0.1241677340
2024-10-25 08:16:38 UTC	815	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1536 Cache-Control: max-age=31536000 Content-Type: image/webp Etag: "N2Q9sxP+rGYZiB2w4kEJjdD6fw63vafnqjHCvNQlVqc" Expires: Fri, 24 Oct 2025 12:16:21 GMT Fastly-Io-Info: ifsz=80680 idim=1000x1000 ifmt=jpeg ofsz=1536 odim=200x200 ofmt=webp Fastly-Io-Served-By: vpop-etou8240196 Fastly-Stats: io=1 Traceresponse: 00-180162a27823910cf94fc9b45553b6fb-b847a20a4ba1cb2b-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-03188f8a63f7b2b43 X-Platform-Server: i-03188f8a63f7b2b43 Accept-Ranges: bytes Age: 72017 Date: Fri, 25 Oct 2024 08:16:38 GMT X-Served-By: cache-par-lfpg1960084-PAR, cache-dfw-ktki8620060-DFW X-Cache: HIT, HIT X-Cache-Hits: 16, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:38 UTC	1379	IN	Data Raw: 52 49 46 46 f8 05 00 00 57 45 42 50 56 50 38 20 ec 05 00 00 d0 28 00 9d 01 2a c8 00 c8 00 3e 6d 36 97 48 24 23 25 21 25 93 59 50 a0 0d 89 67 6e e1 6e 70 f9 5c 7c 92 57 3d 50 ae fd ea 5f 6e 07 3c cb 7c b9 1a 32 c8 f0 7f fb ed 73 0d 2c 34 20 b6 4f ab 8a 34 5a 41 67 12 30 5f 4e 81 6c 9f 57 14 68 b4 82 ce 24 60 be 9c a7 55 32 ff e0 1f ee e8 84 bf 2f f3 35 cd 0b 62 11 6c 9c 00 36 27 1b ef a1 fb 1e b4 9f 51 b7 ee 10 d0 24 36 3d 8d 95 d5 18 37 b6 ac 07 bd 67 42 ed 7e 5e 08 b2 d9 6f 9d 80 94 42 7b ea 6f 6b 75 3e 98 9e 65 98 d8 3f fb ca e1 fc 98 eb ec 9d 3b e4 09 75 9f de aa e8 b9 6f 7c 5a 86 aa 7a 07 d9 35 93 02 ed 70 63 b4 10 7a 06 97 ac ca 45 96 b2 f6 14 28 88 87 ff 8b d5 d4 ce 58 6f 63 ae 81 39 b4 91 f6 4a 32 bc 78 26 43 50 53 6a 06 b9 94 8f 33 26 7a a5 0a 53 Data Ascii: RIFFWEBPVP8 (*>m6H$#%!%YPgnnp\\|W=P_n<\|2s,4 O4ZAg0_NlWh$`U2/5bl6'Q$6=7gB~^oB{oku>e?;uo\|Zz5pczE(Xoc9J2x&CPSj3&zS
2024-10-25 08:16:38 UTC	157	IN	Data Raw: 18 8f 42 d8 31 17 8b 8f 71 16 dd 2b 67 eb 77 b6 40 f4 dd 99 09 cf e4 76 d3 96 64 69 50 27 7d 1a be 24 35 43 94 fc 3e e8 f7 82 b5 c3 0c f0 50 fe 58 1d 1d 2d 2d 2e 82 02 5c 21 59 d1 28 6e 5a 84 7d 20 02 1b 54 48 4a 88 30 ae 53 c8 15 8d e4 03 f8 63 d3 52 d1 3d fe 02 9f c3 89 07 52 e3 9e a6 57 8d a6 49 ef 42 81 92 75 23 bd 8c 7c 59 74 6a e1 d7 91 63 5f d2 7a fe e5 ed 7c 50 0b e8 12 9a 55 a3 4c 8b 71 4e de ce bd 62 86 5e 1d b8 9b 02 59 f1 f3 f0 62 85 c0 00 00 00 00 00 00 Data Ascii: B1q+gw@vdiP'}$5C>PX--.\!Y(nZ} THJ0ScR=RWIBu#\|Ytjc_z\|PULqNb^Yb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49906	151.101.1.124	443	6008	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:16:38 UTC	1084	OUT	GET /media/catalog/product/5/0/502809_Retif_PH_01.jpg?quality=80&bg-color=255,255,255&fit=bounds&height=200&width=200&canvas=200:200 HTTP/1.1 Host: www.retif.eu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; current_sector=0; current_activity=0; STUID=a8d192db-5991-52a6-41a9-76e4bd77e9b0; STVID=24d84efb-95be-2629-9e94-c7ebe5f23039; form_key=I7h4TtgVNH469zAb; PHPSESSID=4ef715b9ad34ead2efb281d94d20ac96; _ga=GA1.1.965705703.1729844187; _ga_6VQ11F71ZK=GS1.1.1729844186.1.0.1729844186.0.0.1241677340; FPID=FPID2.2.EP4EY%2Bnoh7upNPgYcS%2B1EakIrM%2Fk%2BKU00ijTRCLnlpQ%3D.1729844187; _fbp=fb.1.1729844190867.97636512878267; FPLC=9H8u2aYYK7qwAbrvkSwQ1t1w%2Fv%2BXVgDnO1Fq1%2Fo4JT%2FbgWmiQ8AasMfOUAxq0ufPMej4gEQDVtcQhv%2BSeFW%2F4OmgVI0KMgC0OX3HhJHABF%2Bl%2F1rzz%2FfY5Q1hCz6N1Q%3D%3D
2024-10-25 08:16:39 UTC	817	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3476 Cache-Control: max-age=31536000 Content-Type: image/jpeg Etag: "44fhQfAOxkQCkJiY9ZDOIt1aqzA3sT9ctoN4A8SYrR0" Expires: Fri, 24 Oct 2025 12:13:19 GMT Fastly-Io-Info: ifsz=90655 idim=1000x1000 ifmt=jpeg ofsz=3476 odim=200x200 ofmt=jpeg Fastly-Io-Served-By: img02-europe-west3 Fastly-Stats: io=1 Traceresponse: 00-18016278098acdce98211e8db46000a8-5969e80a5b28f781-01 X-Debug-Info: eyJyZXRyaWVzIjowfQ== X-Platform-Server: i-0e6e88bde19a2d96a X-Platform-Server: i-0e6e88bde19a2d96a Accept-Ranges: bytes Age: 72200 Date: Fri, 25 Oct 2024 08:16:39 GMT X-Served-By: cache-par-lfpg1960038-PAR, cache-dfw-kdal2120026-DFW X-Cache: HIT, MISS X-Cache-Hits: 5, 0 Vary: Accept country: US postal_code: 78645 Strict-Transport-Security: max-age=31557600
2024-10-25 08:16:39 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-10-25 08:16:39 UTC	1379	IN	Data Raw: 44 84 c2 a0 03 00 2a 24 84 32 21 8c 43 28 f2 5c 77 47 d6 f0 a6 a7 fb 90 85 45 f7 64 8e 6f 84 bc 4e a1 e2 7a 7e b3 87 35 88 f7 d9 d4 7f 82 cf f6 39 56 13 e4 8b 8c f2 66 6f 0d c6 36 e1 6f 34 c2 e7 36 41 cc a5 cc 83 99 15 37 22 b7 26 41 cf c4 ad cc 09 36 55 29 48 8c a6 55 29 f8 90 29 4d 94 ca 6d f6 90 9d 43 16 55 41 8b 67 27 de 8a 5b 7d e8 c7 9d 44 63 4a a2 22 b3 64 da fa 48 ce d3 6d dd 6a 9e b2 54 dd 48 c6 58 8c 3b 27 3e e7 fb ab ab 34 b4 21 56 e6 bd 3a 14 96 67 39 61 2f fe ec 47 d3 6c ed a9 5a d0 a7 4e 1f 46 38 cf 7f 7b f7 85 64 e8 3a 43 b8 d6 6c 69 d5 7e b2 b5 c5 c5 35 37 d8 a3 9c b4 bc 30 8e b1 7d 4f 81 7a 3c b4 77 1c 4b 1a ad 66 36 d4 27 53 de fe 62 f8 9f 7c 0b 84 21 89 85 26 02 02 aa b1 91 19 11 22 44 32 30 35 da d4 77 e8 da a4 7b ec eb ff 00 43 39 3e Data Ascii: D*$2!C(\wGEdoNz~59Vfo6o46A7"&A6U)HU))MmCUAg'[}DcJ"dHmjTHX;'>4!V:g9a/GlZNF8{d:Cli~570}Oz<wKf6'Sb\|!&"D205w{C9>
2024-10-25 08:16:39 UTC	718	IN	Data Raw: 4f 99 5b 46 ee b7 03 f1 9d be 7f d8 e1 51 2f a9 51 3f 89 a9 ad a3 f1 2d bf ed b4 8b 95 e2 a3 bb e0 2e 11 48 da e4 60 d4 af 73 45 ff 00 8d 6b 5a 9f da 84 a3 f1 45 4f 50 a5 9e b8 08 cf 6b 99 5c 91 54 6f 68 cb b4 6e bd 26 fd a0 83 04 24 ba 93 73 83 fa 48 8b 69 e7 9a 02 9c 73 20 d1 7e 03 69 15 46 05 82 e7 11 6d 03 4d ac 5b fa cb 75 55 2e 74 df 3f b2 cf 36 97 2e 67 bc d8 a4 9c 5a ca 6b 0d 78 33 c6 de 5a ce d6 b4 a9 be 9d 62 fb d0 57 64 fa 36 be f9 77 04 68 95 1b cc a9 d1 74 67 e7 4a 4e 3f 03 dc 60 f8 9f a0 fb ff 00 5b a0 6a 76 4d f3 b7 bc 53 4b ba 35 a3 9f 8c 59 f6 c0 d9 60 30 86 22 85 80 18 01 11 88 32 10 c3 99 1c 89 c9 15 03 59 21 b5 77 83 91 0c b6 54 4b 6c 7b c5 b6 02 c3 f1 1e c7 dc 05 73 a5 42 7c a5 4e 2f cd 23 5b 71 a0 e8 77 3f b6 d3 6d a7 9f ad 4d 33 71 Data Ascii: O[FQ/Q?-.H`sEkZEOPk\Tohn&$sHis ~iFmM[uU.t?6.gZkx3ZbWd6whtgJN?`[jvMSK5Y`0"2Y!wTKl{sB\|N/#[qw?mM3q

Target ID:	0
Start time:	04:16:11
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:16:14
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:16:16
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://retif.eu/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	04:16:31
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4016 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	04:16:50
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4288 --field-trial-handle=1952,i,1766725660204874733,5043555068857997583,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon
Source: https://www.retif.eu/	HTTP Parser: No favicon

Source: chromecache_301.2.dr, chromecache_449.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},lk:function(){e=zb()},ud:function(){d()}}};var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_301.2.dr, chromecache_449.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={rh:e,ph:f,qh:g,bi:k,di:m,Je:n,Fb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(AD(w,"iframe_api")\|\|AD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!rD&&yD(x[A],p.Je))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_452.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_452.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_452.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_234.2.dr, chromecache_220.2.dr	String found in binary or memory: var CC=function(a,b,c,d,e){var f=tA("fsl",c?"nv.mwt":"mwt",0),g;g=c?tA("fsl","nv.ids",[]):tA("fsl","ids",[]);if(!g.length)return!0;var k=yA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!fz(k,hz(b, equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: retif.eu
Source: global traffic	DNS traffic detected: DNS query: www.retif.eu
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sourcetrap.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: t.retif.eu
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: halc.iadvize.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: track.effiliation.com
Source: global traffic	DNS traffic detected: DNS query: api.iadvize.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: privacyportal-eu.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: dynamic.criteo.com
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: sslwidget.criteo.com
Source: global traffic	DNS traffic detected: DNS query: fledge.eu.criteo.com
Source: global traffic	DNS traffic detected: DNS query: measurement-api.criteo.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: partner.mediawallahscript.com
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: sync-t1.taboola.com
Source: global traffic	DNS traffic detected: DNS query: visitor.omnitagjs.com
Source: global traffic	DNS traffic detected: DNS query: r.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: exchange.mediavine.com
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: sync.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: widget.us.criteo.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: trends.revcontent.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: tapestry.tapad.com
Source: global traffic	DNS traffic detected: DNS query: criteo-sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: criteo-partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: ade.clmbtech.com
Source: global traffic	DNS traffic detected: DNS query: ad.tpmn.co.kr
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: 1f2e7.v.fwmrm.net
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: s.salecycle.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: match.prod.bidr.io

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://retif.eu/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Windows Analysis Report
https://retif.eu/