Edit tour

Windows Analysis Report
http://www.yamanoue-hotel.co.jp

Overview

General Information

Sample URL:	http://www.yamanoue-hotel.co.jp
Analysis ID:	1544103
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1904,i,9685926264043671241,3488216749291658935,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.yamanoue-hotel.co.jp" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=187711794.1730142868&auid=1831589210.1730142868&npa=0&gtm=45He4ao0v78713577za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&tft=1730142867929&tfd=11754&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.yamanoue-hotel.co.jpX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.yamanoue-hotel.co.jp/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 28 Oct 2024 19:15:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Powered-By: PHP/5.6.40

Source: chromecache_158.2.dr	String found in binary or memory: http://asp.hotel-story.ne.jp/ver3d/image/topic_path_tabs.png)
Source: chromecache_158.2.dr	String found in binary or memory: http://asp.hotel-story.ne.jp/ver3d/image/topic_path_tabs_bg.png)
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_271.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_166.2.dr	String found in binary or memory: https://asp.hotel-story.ne.jp/ktai/ZKETAI0000.asp?cod1=09060&cod2=001&guid=on
Source: chromecache_166.2.dr	String found in binary or memory: https://asp.hotel-story.ne.jp/ver3d/planlist.asp?mode=seek&clrmode=true&hcod1=09060&hcod2=001&reffro
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_319.2.dr, chromecache_289.2.dr, chromecache_302.2.dr, chromecache_228.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr, chromecache_271.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_166.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/slick-carousel
Source: chromecache_166.2.dr	String found in binary or memory: https://code.jquery.com/jquery-1.9.1.js
Source: chromecache_290.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_290.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_166.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Sawarabi
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_191.2.dr, chromecache_314.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_232.2.dr, chromecache_275.2.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_262.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/rewish/jquery-bgswitcher
Source: chromecache_262.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md)
Source: chromecache_166.2.dr	String found in binary or memory: https://goo.gl/maps/nH5srpsemCT2
Source: chromecache_163.2.dr	String found in binary or memory: https://google.com
Source: chromecache_163.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_319.2.dr, chromecache_289.2.dr, chromecache_302.2.dr, chromecache_228.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr, chromecache_271.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_319.2.dr, chromecache_289.2.dr, chromecache_228.2.dr, chromecache_271.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_260.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_319.2.dr, chromecache_289.2.dr, chromecache_302.2.dr, chromecache_228.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr, chromecache_271.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_166.2.dr, chromecache_191.2.dr, chromecache_314.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_271.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_142.2.dr, chromecache_296.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/705351937/?random
Source: chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_166.2.dr	String found in binary or memory: https://www.googleoptimize.com/optimize.js?id=OPT-KXRP8KT
Source: chromecache_271.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_302.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_362.2.dr, chromecache_260.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_166.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_166.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-PTHR639
Source: chromecache_302.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.instagram.com/hilltop_wedding/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.instagram.com/yamanouehotel/
Source: chromecache_368.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files
Source: chromecache_319.2.dr, chromecache_289.2.dr, chromecache_228.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_166.2.dr	String found in binary or memory: https://www.tablecheck.com/shops/tempurayamanoue-ginza/reserve
Source: chromecache_166.2.dr	String found in binary or memory: https://www.tablecheck.com/shops/tempurayamanoue-roppongi/reserve
Source: chromecache_166.2.dr	String found in binary or memory: https://www.tablecheck.com/shops/yamanoue-hotel-tenpura/reserve
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/access/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/hall/ginga.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/hall/kobeya.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/hall/tsubaki.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/hall/tsutsuji.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/banquet/plan/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/common/brn_next.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/common/brn_prev.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/common/ico_bldg.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/common/sns_ft_ig.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/common/sns_ol_ft.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/access.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/bed.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/foot_logo.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/ol_ft.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/pagetop.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/common/images/footer/restaurant.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/company/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/concept/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/concept/inquiry.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/contact/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/contact/other/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/news/images/1_020240918170835_SRsFL.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/news/images/1_020240920105301_ggV3g.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/news/images/1_020240924125934_igRth.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020230314111356_DUO8.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240918171706_FmGcY.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240924142823_Hw5kW.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240924150700_hqIN1.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240925111613_CiWVi.png
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/eng/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/eng/index.html
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_1-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_1-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_3-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_3-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_5-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_5-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-pc.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-sp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban01.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban02.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban03.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban04.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban05.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban06.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_con01.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_con02.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest01.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest02.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest03.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest05.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest06.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest07.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest08.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest09.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest10.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest11.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest12.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay01.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay02.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay03.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay04.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay05.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay06.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay07.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay08.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay09.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay10.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay11.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay12.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_lnk01.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_lnk02.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_lnk03.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/images/new/img_store05.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/130
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/194
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/241
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/247
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/249
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/250
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/251
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/74
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/91
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/92
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/information/93
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/ogp.jpg
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/policy/privacy.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/recruit/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/garden/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/hilltop/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/hotelshop/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/lavi/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/lobby/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/moncave/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/nonnon/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/pekin/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/privateroom/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/takeout/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/restaurant/tenpura/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/shop/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/other/roomservice.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/plan/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/403.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/406.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/501.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/deluxe.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/deluxe_wa.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/single.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/standard.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/stay/room/standard_wa.php
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/tempurayamanoue/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/tempurayamanoue/ginza/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/tempurayamanoue/mitsukoshi/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/tempurayamanoue/roppongi/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.yamanoue-hotel.co.jp/wedding/
Source: chromecache_319.2.dr, chromecache_271.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_166.2.dr	String found in binary or memory: https://yamanoue-hotel.co.jp
Source: chromecache_166.2.dr	String found in binary or memory: https://yamanoue-hotel.co.jp/common/images/header/head_logo.png
Source: chromecache_166.2.dr	String found in binary or memory: https://yoyaku.toreta.in/tempuratowashokuyamanoue/
Source: chromecache_166.2.dr	String found in binary or memory: https://yoyaku.toreta.in/tempurayamanoueginza/
Source: chromecache_166.2.dr	String found in binary or memory: https://yoyaku.toreta.in/yamanoue-roppongi/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50060 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/386@75/28

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1904,i,9685926264043671241,3488216749291658935,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.yamanoue-hotel.co.jp"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1904,i,9685926264043671241,3488216749291658935,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
uh0.nakanohito.jp	203.114.55.140	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
yamanoue-hotel.co.jp	219.94.174.138	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.googleoptimize.com	142.250.185.110	true	false	unknown
stats.g.doubleclick.net	74.125.133.155	true	false	unknown
uh.nakanohito.jp	203.114.55.135	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
scontent.xx.fbcdn.net	157.240.0.6	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
googleads.g.doubleclick.net	142.250.186.98	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
td.doubleclick.net	142.250.185.194	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
www.yamanoue-hotel.co.jp	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay04.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_lnk01.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest08.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay12.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/images/header/head_logo.png	false	unknown
https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020230314111356_DUO8.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/css/layout.css	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest01.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-sp.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-sp.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-sp.jpg	false	unknown
https://connect.facebook.net/signals/config/475221159740172?v=2.9.174&r=stable&domain=www.yamanoue-hotel.co.jp&hme=ead923021ccd3483ef3b9b04703d0a78b943fbdc01e8d7cec21c5059f1f4a5e9&ex_m=70%2C121%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C172%2C175%2C187%2C183%2C184%2C186%2C29%2C101%2C53%2C77%2C185%2C167%2C170%2C180%2C181%2C188%2C131%2C41%2C189%2C190%2C34%2C143%2C15%2C50%2C194%2C193%2C133%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C168%2C171%2C140%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban06.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/js/jquery.matchHeight.js	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-pc.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-pc.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/images/header/reserve_bg.png	false	unknown
https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240924142823_Hw5kW.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest13.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_store04.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/js/jquery/common.js	false	unknown
https://www.yamanoue-hotel.co.jp/common/css/footer.css	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest05.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/bg_story.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/js/bgslide/jquery.bgswitcher.js	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/bg_stay.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/js/drawr/drawr.js	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_stay01.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/css/header.css	false	unknown
https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240918171706_FmGcY.png	false	unknown
https://www.yamanoue-hotel.co.jp/common/images/common/mrk_brawn.png	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest07.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay05.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/common/css/class.css	false	unknown
https://cdn.jsdelivr.net/npm/slick-carousel@1.8.0/slick/slick.min.css	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban05.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_store03.jpg	false	unknown
https://uh.nakanohito.jp/uhj2/uh.js	false	unknown
https://www.yamanoue-hotel.co.jp/common/images/common/bg_texture.png	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay11.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest02.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-pc.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_1-pc.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest12.jpg	false	unknown
https://www.yamanoue-hotel.co.jp/	false	unknown
https://www.yamanoue-hotel.co.jp/common/images/footer/restaurant.png	false	unknown
https://www.yamanoue-hotel.co.jp/contact/other/images/btn_next.png	false	unknown
https://www.clarity.ms/tag/8618shaoqp	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_stay02.jpg	false	unknown
https://www.googleoptimize.com/optimize.js?id=OPT-KXRP8KT	false	unknown
https://www.facebook.com/tr/?id=475221159740172&ev=PageView&dl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2Fcontact%2Fother%2F&rl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&if=false&ts=1730142935694&sw=1280&sh=1024&v=2.9.174&r=stable&a=tmgoogletagmanager&ec=0&o=4126&fbp=fb.2.1730142935692.508106375333168916&cdl=API_unavailable&it=1730142933821&coo=false&rqm=GET	false	unknown
https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay01.jpg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_319.2.dr, chromecache_289.2.dr, chromecache_228.2.dr, chromecache_271.2.dr	false	URL Reputation: safe	unknown
https://www.yamanoue-hotel.co.jp/contact/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/tenpura/	chromecache_166.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_362.2.dr, chromecache_260.2.dr	false	URL Reputation: safe	unknown
https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md)	chromecache_262.2.dr, chromecache_304.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/moncave/	chromecache_166.2.dr	false		unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
https://yamanoue-hotel.co.jp	chromecache_166.2.dr	false		unknown
https://cdn.jsdelivr.net/npm/slick-carousel	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/banquet/hall/tsutsuji.php	chromecache_166.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_260.2.dr	false	URL Reputation: safe	unknown
https://github.com/microsoft/clarity	chromecache_232.2.dr, chromecache_275.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/hilltop/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/stay/room/403.php	chromecache_166.2.dr	false		unknown
http://asp.hotel-story.ne.jp/ver3d/image/topic_path_tabs_bg.png)	chromecache_158.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/	chromecache_166.2.dr	false		unknown
http://bugs.jquery.com/ticket/12359	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/recruit/	chromecache_166.2.dr	false		unknown
https://connect.facebook.net/	chromecache_290.2.dr	false	URL Reputation: safe	unknown
https://www.yamanoue-hotel.co.jp/stay/room/deluxe_wa.php	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/hotelshop/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/concept/	chromecache_166.2.dr	false		unknown
https://yoyaku.toreta.in/tempuratowashokuyamanoue/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/194	chromecache_166.2.dr	false		unknown
https://www.instagram.com/hilltop_wedding/	chromecache_166.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/garden/	chromecache_166.2.dr	false		unknown
http://jsperf.com/getall-vs-sizzle/2	chromecache_283.2.dr, chromecache_168.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/91	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/92	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/ogp.jpg	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/shop/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/93	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/stay/room/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/tempurayamanoue/ginza/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/stay/room/standard_wa.php	chromecache_166.2.dr	false		unknown
https://asp.hotel-story.ne.jp/ver3d/planlist.asp?mode=seek&clrmode=true&hcod1=09060&hcod2=001&reffro	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp	chromecache_166.2.dr	false		unknown
https://googleads.g.doubleclick.net	chromecache_163.2.dr	false		unknown
https://yoyaku.toreta.in/yamanoue-roppongi/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/lobby/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/restaurant/pekin/	chromecache_166.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/company/	chromecache_166.2.dr	false		unknown
https://www.tablecheck.com/shops/tempurayamanoue-ginza/reserve	chromecache_166.2.dr	false		unknown
https://td.doubleclick.net	chromecache_319.2.dr, chromecache_289.2.dr, chromecache_302.2.dr, chromecache_228.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr, chromecache_271.2.dr	false		unknown
https://www.yamanoue-hotel.co.jp/information/74	chromecache_166.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
203.114.55.140	uh0.nakanohito.jp	Japan	2519	VECTANTARTERIANetworksCorporationJP	false
74.125.133.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
216.239.38.181	unknown	United States	15169	GOOGLEUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
219.94.174.138	yamanoue-hotel.co.jp	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
142.250.186.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
203.114.55.134	unknown	Japan	2519	VECTANTARTERIANetworksCorporationJP	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
142.250.185.110	www.googleoptimize.com	United States	15169	GOOGLEUS	false
203.114.55.135	uh.nakanohito.jp	Japan	2519	VECTANTARTERIANetworksCorporationJP	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
64.233.166.156	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.130	unknown	United States	15169	GOOGLEUS	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544103
Start date and time:	2024-10-28 20:13:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.yamanoue-hotel.co.jp
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/386@75/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 142.250.184.238, 64.233.167.84, 34.104.35.123, 142.250.185.74, 142.250.186.35, 142.250.185.72, 172.217.16.206, 142.250.185.104, 20.109.210.53, 142.250.184.200, 199.232.210.172, 142.250.186.174, 52.165.164.15, 192.229.221.95, 20.114.189.70, 20.3.187.198, 13.74.129.1, 204.79.197.237, 13.107.21.237, 142.250.185.195, 142.250.184.234, 142.250.186.170, 216.58.212.138, 142.250.186.138, 172.217.16.202, 172.217.23.106, 142.250.186.74, 142.250.184.202, 142.250.186.106, 142.250.186.42, 142.250.74.202, 172.217.18.10, 142.250.185.106, 216.58.206.74, 172.217.18.106, 142.250.114.102, 142.250.114.138, 142.250.114.100, 142.250.114.113, 142.250.114.139, 142.250.114.101
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, otelrules.afd.azureedge.net, clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, c-bing-com.dual-a-0034.a-msedge.net, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, c.bing.com, dual-a-0034.a-msedge.net, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.yamanoue-hotel.co.jp

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 179, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	93867
Entropy (8bit):	7.993890004853002
Encrypted:	true
SSDEEP:	1536:OHrg60V2/CoUrccDheijyqJRuugFs86NdlFRtxo1+ilVSQdg7ZvgMA/EMUvHBiXV:eg6o2696ut867/RtxyxqtgMAcMwgV
MD5:	DB8035ED804C421333FCCCA6DA9BCB96
SHA1:	79A98984ADB34225BDFE9C513FC5997ABDACCD45
SHA-256:	E9AC50ACECCDF99E92960292DD0C3EE194F2A46930A43E2F8F3E933250F18505
SHA-512:	63289D9C46E85EB0B4806B3F18F09F92EA4BF8FA386F68E43BCE6C13FA1E1830C2CB58DCC5BEF80D73DC61E27CF1C6632058F0E21307B41D7D24964FBD8184FF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2..........].... .IDATx.t.y.eWU...9.>..9.$.J5iIS.!=...&!.A.AZ.F...b.}.....UQD...N .D.......TH[..Ri.TRI...{.9..c\|c..../T..{......7.).v>....2 ...)%.~.I.. "..........Z..)@...A.=.V.w...T+.V.lJ..BR....Q...B.H).{E..@....$A...."..W.. wS.B-.)...I...#.T..v=.......Y..hd..k...Z.n...v.Z.3...@!...jk......=..D..\...k...........j-.....Z...V...;T..U.....3T.[..]W.P..V..{{6...s.F(.....oG...9%.R.....(}..u...T.rg...G..+.{.D\..V...~.}V.g....R..Q\.p.....br.....L-=..$A?.1.Y...(..3.V..G.:@....K.V.uP..R*r2....5..e21Y.}..7..F...I2.p}T..<..U..QU@.I.....sB.{_...e.~.2k.&PT.....Q..x..".@!(...."w...._..R.Y..m.....Y$.N....mv..c.......R.... !%@..: g......&......B".EB......C..{..\...Q..9e_......k.JeF./w#..Z.......8...g....S..L.J..n.M...dJ.j(~..5s.4jf.J.@..s.Q.'1......6.w....f$..t.VC....... . ........P.=..Z.d..~..@`.w......@E.3..;..A-@..~@r."0#Y....q.jN....\|)j.Cs%wCd.[...$$...@.{... ..@0.......V.RL6Sr.4./.w.\./n j.v}.G..D.AS..`......v)=..K.7...D..@cc2.H9.......

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8590
Entropy (8bit):	7.904121954483654
Encrypted:	false
SSDEEP:	192:drj3hMyVDtK492rvQziPaMJb5Jn1/k0Y2:Zj3hPLYr4zifNrn1k0Y2
MD5:	B220BFDFD3690E0C08619CEB9B31225C
SHA1:	D5C6D9E8B81A75B84B6FAFBA1E15CF363D41788C
SHA-256:	3E29A421069B735A13347D9E210E64BB6D2241F69D8F6CA6C0EF1409D60C913D
SHA-512:	D4783F3DA31AA071B76C93429EDB640636CE96707998EDFFA9CF3C54E4D07B553D7852ACBCF298D4444E67881AD9A0222F1D210C96002199BB27A9F7958E2C49
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay09.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63A4AB6DF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63A4AB6CF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x280, components 3
Category:	downloaded
Size (bytes):	45930
Entropy (8bit):	7.977495633151261
Encrypted:	false
SSDEEP:	768:lxf/bUwhrHC/+wT9KEw+w+cxFfsokuFYq/7TOOakfroaGu+UMBhsD+dPeP3FK1gz:lpbLhrHCzKEYnfsVuFJiOakTnM76QW3Z
MD5:	6A13BD287AFB017E74DA667F0B20E9A1
SHA1:	85BF1C20EC123E886EBEDCCC7F4B80EA77E6AEFA
SHA-256:	92824FEFD997AF4CB6CC0853D4E7673AC2CC0AD10F4974B5A252AEB4C0A3A514
SHA-512:	F623096B50D5F4E10F65177720F090AC0CC94053682AB7395045C67635D108838C6247F6711AD045C8A906ED78DC8109E5FBC7A0E31CB35830A3A9604E8075C6
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_store01.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:9375AFD1BB0511ECA33EF8FAD2829EBF" xmpMM:InstanceID="xmp.iid:9375AFD0BB0511ECA33EF8FAD2829EBF" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	dropped
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4846), with no line terminators
Category:	downloaded
Size (bytes):	4846
Entropy (8bit):	5.8650314740653675
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUhq1RhrF:1DY0hf1bT47OIqWb1Qq17F
MD5:	A6F294798FC3F11996E8A39E80374C9A
SHA1:	BA76334FDD43B88E8EDE90967CC9ED39511B9FFA
SHA-256:	E50EC39788F0A01D624BE2965A57EAC87D4B088C4DC4C5778B414D6F051C9E39
SHA-512:	670754E42D34CC0D243E2A162FCC4292F47554CC03E64B3BE3DF40E3E8D5D2714436AFB49A1525DF25E6EC664CFDA79BBA728EDBB83E7F7A6317534BAAD43D75
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/705351937/?random=1730142871314&cv=11&fst=1730142871314&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 137 x 55, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2398
Entropy (8bit):	7.521224380562585
Encrypted:	false
SSDEEP:	48:BitvnLb3UxfJ33xoZb14r3eBU/vR/iJUxxwyQo6p3cs:O3UxFxoR14jeUdxxnN4N
MD5:	F2EE86F78E9A9266077330F9C19AAD9E
SHA1:	0EAB47CAFE910F5A64CA71DC7D2FCB63066EC2A7
SHA-256:	A5397C97C0274446D4372929A3D4701876092D518E6E8C04257D33EC68450432
SHA-512:	DF0F0BA89873279DF1BA5039662134E444926DBCE7DFFC54A2377384CC1AF92F611C0D02A11446B256E41415422B0289BC2487CA70B534062280BC390B9A8240
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7......:......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:C5493022921511E68BDBBF1FC0CC9715" xmpMM:InstanceID="xmp.iid:C545BF64921511E68BDBBF1FC0CC9715" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118B86D6E8981BC5D0" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......3PLTE...5....~...gTFA,..........pc......sbU.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw_iframe.html?origin=https%3A%2F%2Fwww.yamanoue-hotel.co.jp
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2023:06:13 15:54:51], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	29589
Entropy (8bit):	7.565086236440262
Encrypted:	false
SSDEEP:	384:IgrxvPYDTG9IsiVKgrxvPYDTG9nnnCgs30yQNd4m2tEzRZnuD9Uf4uQ1taxr:IAtwu9IscKAtwu9nM305D4guDyg8
MD5:	508311756CD0F524D312D99F4DF66B79
SHA1:	46F810BC63AC2B861FE6956F0B4C36E1FC648A7F
SHA-256:	F705D6282F466E4B14BB94C0C871912A90131E17472E110DD158AD03202983D9
SHA-512:	51821DF2B03CAB19F3D43C3F6A8F5E358E8FBA6FA65BC5FB5FAF74AF1476A3C0D37477EDB2E2EB6F610225F2539F11D93EB4271387561AB236D9ABDAB570BC31
Malicious:	false
Reputation:	low
Preview:	.....RExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 23.5 (Windows).2023:06:13 15:54:51.........................................P..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................G...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#.xF....e6....._K.........s......~.`..[...f..;..u..j...v...Z..Z.+....l.>...G..N..31.%.E....~K*..}L.......?..M...5[>i..u...GS,fH.....Q...3..5o.o.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7460
Entropy (8bit):	7.896631134240208
Encrypted:	false
SSDEEP:	192:7q+kcP1hbs6tOe31o08uxXPordP5g23OFkBWv7G5:CcrI6sel98w/KtfOqV5
MD5:	FCF236B513DA2F9741D2CE35146B6A80
SHA1:	7A776F6106A4146DC09AD619E335C7B153C77FC3
SHA-256:	8993609174AADB0CB28B2D4875C263A7B42A5ECEB44BFCEB16B6D63604766299
SHA-512:	BCEA3BCDD019F69ACF1D931F57D2F482D0B4B7DA6C1B87238C2FBC7ADA5C41193B9D42F87A54AA1A51E1CC0F74C6C1FE8BDE9F6152661ABC5981D0C70A47BAE3
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBFA52AFF6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBFA52AEF6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2023:06:13 15:55:37], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	26572
Entropy (8bit):	7.511282516427247
Encrypted:	false
SSDEEP:	384:2YX8/LK5HCCMEWkdehjWsi4xYX8/LK5HCCMEWkdehjXnq0gJxiq+VHCCRWJilXeZ:2XwiCS/hasJxXwiCS/hbK8ZRWQlhd2d
MD5:	C7BC2F83FE13000D8FC08695E98E7AE3
SHA1:	598F5445AD8321563CB0912010ECB7B3EB02868A
SHA-256:	D983646F33DACA4BA9804C86E29E5FD337ECD1E3F67E6C40489B94979E41CB26
SHA-512:	3C2BDD4C04978B84942365102CB6B5F62D903C698BF33235730BC52E25E5A213635279E4568387D927F464B00AE3928ACC310069FC756CDAACAC06DE7E7C220B
Malicious:	false
Reputation:	low
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 23.5 (Windows).2023:06:13 15:55:37.........................................P..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................G...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....8....._....;jK.p.......J..FCV}yOs...H.h..j.......N.{J.r@t-..d]..+...8A9#.7...3%.N.=...>...<...z..}b...uv...4..?:.]......v.s..#8.F.T.s".....W...r.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	9716
Entropy (8bit):	7.920424352565232
Encrypted:	false
SSDEEP:	192:JAFG4uOo9ZTpfGchEcs3vGm3Gx3idRekQfMKLzr:JZZOo9J09c2bdEk0Ln
MD5:	7D6DD3764546F9927E5C7F4D8D754C79
SHA1:	8DA5C9DD18FDA94F5A2227B1EC784BC63A919BEA
SHA-256:	BF5A3651FD41A41BF04ED105DD8123D63B5A9866A46BBB03E03A6D88E229717C
SHA-512:	8E0AF9A1E774A54A15F6E07436ECA8E48419CDAEB59FD222C54CD9052900502A5E633B5BAEC3EEAE774631ADDC4B61097AF0D9CCA0C48194D1841A209AEA0A80
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1D9D9404F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1D9D9403F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8446
Entropy (8bit):	7.906854917873747
Encrypted:	false
SSDEEP:	192:WyjP+DvcRXBj5ioIlbvTr6KNB1Z6P6WwpsXxyhld:WyyDvcBBj5iLj3tNr0PXw0o/
MD5:	7FB0D641E6E0E20D1862C192E833B7C7
SHA1:	0E5A2D185165233CE7A7C2307BA1E1593F8205B3
SHA-256:	CD9DC446729A1A058AD0CC7E2C9303B0F0F506D7F98922CB686D49FA7F901A8C
SHA-512:	62F6F5E90A193F38F3A72243410741FAA844A88F564FD47C08FB5B7E302E9DFB8D60CFECFD8C58ED2842B37564FF25DE0E1373E4EF718C1FDC97F67BB3956BD6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBF2BED4F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBF2BED3F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 226, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8129
Entropy (8bit):	7.880547513702046
Encrypted:	false
SSDEEP:	192:W7F+OYPQAW2dZfJuaEjag2T7ciX6WrYYKeEMtkhV78UOrK15rB:W0PLd71Xl6WrY5epk8K5t
MD5:	4D6AEB67ECBD7C91508BC96CD515DE31
SHA1:	76B5A4DB976FAEC6CFA81C44222D1FE6C9550167
SHA-256:	184FF3DD4BC893A9D9D8D23C43B626C4373B87E1644F58E57672D8CAF5702373
SHA-512:	88A37B6409BB4C88C013DCBB1EEC2F7A28B38082DDE104668B2F0E4C8AE3CA5847399D02FBF8046CFD5C1FD27CFADFEC5D71F10F5DFABC71E3AB8F2A332758BE
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/footer/access.png
Preview:	.PNG........IHDR................[....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7FFB6034341211E98C2DA3D57B0161AB" xmpMM:InstanceID="xmp.iid:7FFB6033341211E98C2DA3D57B0161AB" xmp:CreatorTool="Adobe Photoshop CC 2018 Windows"> <xmpMM:DerivedFrom stRef:instanceID="686F785F9DD62147E7427D726C42E621" stRef:documentID="686F785F9DD62147E7427D726C42E621"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..!...CIDATx..]......C...Q#.r<....w.h.$b.."..Fq.F.....(. (^.....<...D.(..#.}....?._\|..o.?.==3.....q.........j.f..!J...6......

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit/color RGB, interlaced
Category:	downloaded
Size (bytes):	17874
Entropy (8bit):	7.979190244891279
Encrypted:	false
SSDEEP:	384:eqUN//+vLmrCHPzxEkOmqPyfseRO9VcHXScpJgN8FqV:eqUVELmOH1E9ynRO90XSJ
MD5:	A33242B468FC2FB445F9CD5C3D3853A3
SHA1:	46603BEE104F69C7BCB973B1425452225080C80E
SHA-256:	116114BF233DB993255C154387306C20619C1770B19867AA9A3B91D26430C2A0
SHA-512:	88802F4AF4AC6BE842FF7875D7CD7CBA3D6115DCE06F1F4D5BF517A783DB1D423509126120A217D1C28397115854AA8C934A211FDDC097B771FEAF7DF4DCDED4
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/concept/bg_texture.png
Preview:	.PNG........IHDR...n...n.....>>.:....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:EFBDC213547211EAA7828F1C0CA513F4" xmpMM:InstanceID="xmp.iid:EFBDC212547211EAA7828F1C0CA513F4" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C173E33A904911E6A10A83604742EDCC" stRef:documentID="xmp.did:C173E33B904911E6A10A83604742EDCC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#iG...B.IDATx.$... ....3IF.....@U.......$....%R....

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5096
Entropy (8bit):	5.149308809624355
Encrypted:	false
SSDEEP:	48:jFh/FXf1IfZY8OvKsVn4cEub8MGUFEGiGGFeLSGLVnPUGCAFhQr1l0mUFEGzGGFb:jV9X8ApekwVqk8Cc4RFTB3bQ
MD5:	81958AEA284B7F09A1BE48E0CDF3682E
SHA1:	70B5A8A66D1E1D2363FB21DEB9FCB9D6CD9C11D8
SHA-256:	EDE2E7C809C6FC5C4E4ED8742D1FF19A3E7C398FB994CC1D2CD966838BE2AC65
SHA-512:	1CAA58F3A684E634CFFE5F1F0B4DC435A41F33826BF6F8FDF1B64C9F0B92A6F4008FA07750814EF708A3ED78B99E06799D0D4F4F5D5A38FE51C7A1DBB62052C6
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/parts.css
Preview:	@charset "utf-8";./* Filename.parts.css /../ :::::::::::::::::::::::::::::::::::..Br.::::::::::::::::::::::::::::::::::: /...brClear-pc{..display:none;.}../ :::::::::::::::::::::::::::::::::::..TextSet.::::::::::::::::::::::::::::::::::: /..taxAtt{..clear:both;..padding:10px;..font-size:12px;..text-align:right !important;.}..diib{..display:inline-block;.}../ :::::::::::::::::::::::::::::::::::..Cate Title.::::::::::::::::::::::::::::::::::: /...cateTtl{..padding:30px 0 20px;..font-family: "Times New Roman", "...", YuMincho, "...... ProN W3", "Hiragino Mincho ProN", "....", Meiryo, serif;..text-align:center;.}...cateTtl h1{..font-size:32px;..line-height:1.2;..letter-spacing:2px;.}...cateTtlEn{..line-height:1.2;..letter-spacing:2px;.}../ :::::::::::::::::::::::::::::::::::..Common Title.::::::::::::::::::::::::::::::::::: */...common-ttl{..padding:30px 0;..text-align:center;.}...common-ttl h1{..letter-spacing:2px;..font-size:24px;..font-family: "Times

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	9698
Entropy (8bit):	7.91758529261866
Encrypted:	false
SSDEEP:	192:+4YX76foiZckjHbvTKl01Wm4/z4GsLncLP2Q+2RLEi:zdoitiencTPRF
MD5:	DBDAAE2E786EE2A7A5619BA371939031
SHA1:	7EE94838066FC9E61291ADA397712B8BF7B648D0
SHA-256:	1301C7BE65C32D4378DCBD0A027121BE38F941B4567EC72A8FE1773A3F8ED35E
SHA-512:	9462A56682A72A2C199E82A1696F96C9D4FF214685EAEBD588F3E20A70990093738DEACCE4B461E4020E9652B8FC5C27D003880FCC04EA4FF1DC80257149B48A
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay12.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:640F0C71F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:640F0C70F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8657
Entropy (8bit):	7.901128576379197
Encrypted:	false
SSDEEP:	192:8taysWDUQi9xFKT/a90Q0dC8VigZuEls4xmN2TqzJwMs9z:8tazWYQSWa909C8Vi2O4xEfzJv4
MD5:	133463EAB7FB8091D16AA7DAC74CCAB9
SHA1:	B022E5C8355C62EB75D398ECD4DA292521E7B8BA
SHA-256:	5430DCF4F6F6CE9368AC220E83EBF39CD7820E174624528E5D65B9681546012F
SHA-512:	2D8FCE92A552ADCEA91C35BE1F4C9FE97F8428917CD1686B6C9653064E4BDE5B84C42CE5902ED0C935641AC47510A6F2DEEF52EAC594DD8FA89C87F92F3001AC
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban05.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CADCEC97F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CADCEC96F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1825
Entropy (8bit):	4.932963071745371
Encrypted:	false
SSDEEP:	24:uSgYo5pmz+xOcXzDRa+cTDJNdxa36vvAMjki0GR1Yk/+cpmzrBx:fxoaQ5zDROxa3gAfi0gFerT
MD5:	0D995E1C97B3A716B409EE1164E823C5
SHA1:	B3F268458C160CCF62D35850893361FCB8FAD671
SHA-256:	ED429C4B4B7E404ABD2C3680AB4A0970AD5A7892F12A46F825A9E2852EDCA42F
SHA-512:	F21613A3BEC5E88020F71EB459C8E46573D0061A161E1A4B6C76E5A4E923C8B68E26DAE04D5738058D0C3A282647C92AB7D3845363BCF117C7190EDB4002BBAF
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/default.css
Preview:	@charset "utf-8";./* Filename.default.css /../ :::::::::::::::::::::::::::::::::::..BODY.::::::::::::::::::::::::::::::::::: /.body{..color:#4f3321;..font-size:14px;..line-height:1.6;..font-family: "Times New Roman", "...", YuMincho, "...... ProN W3", "Hiragino Mincho ProN", "....", Meiryo, serif;..font-weight:500;..background:url(../images/common/bg_texture.png) repeat;..background-size:40px;.}../ :::::::::::::::::::::::::::::::::::..Hx & P.::::::::::::::::::::::::::::::::::: /..h1,h2,h3,h4,h5,h6{..font-size:1em;..line-height:1.3;..padding:0;.}..p{..line-height:1.6;..padding-bottom:1em;.}../ :::::::::::::::::::::::::::::::::::..A LINK.::::::::::::::::::::::::::::::::::: /..a:link{..color:#745757;..text-decoration:none;.}..a:hover{..color:#c29c71;..text-decoration:none;.}..a:visited{..color:#745757;.}..a:active {..color:#c29c71;.}../ :::::::::::::::::::::::::::::::::::..LIST. ul ol dl..::::::::::::::::::::::::::::::::::: */..ul{..padding-bottom:

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7794
Entropy (8bit):	7.892155165247441
Encrypted:	false
SSDEEP:	192:rduNnxTreH1G+RuNP2Xbx/305RFC1TaZcJd8Y:rduL9+RuN+3eRERFx
MD5:	08DB9BFAD6BC176CE76DB9010FB4DBB8
SHA1:	07182D82F4F2F82C2195D8286C3A5C9AB9A5F5A4
SHA-256:	EB317FF7E1D3B0F055B688EEDE28DA457618B64A61CB9CB54053E5377C7C2BD6
SHA-512:	3D17560951E9E38D8A15744C88991970900B4642905CD28CA078B277C8DC1411D36109DB4B58C5D214F62CBB88172A977DC6A1477A2356E56EEAFCF6467AC91D
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay06.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61C9426FF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61C9426EF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 7, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	983
Entropy (8bit):	5.968750319333958
Encrypted:	false
SSDEEP:	24:bl1hNo7FCWwjx82lY2T36VP4BRayJ3VqBcqEGVZmE/:bLzo7FDNn2mUJ3YE5E/
MD5:	012E8A9FF3A7DC7764398EBD474DEB48
SHA1:	41A8CAD02E709F1C92E0AFF44FB398F999808157
SHA-256:	4CBD05A2D59A7F4906A2DA3FAA8C09867C901ACB8C5D16731EAB5DE0B0004F87
SHA-512:	568C0FC70C54E52700F9C26F3A3CEBB4CA6033093858ADC285AE9A6F9C6556EB7EEF9FDEDDC97150B43BC52C0F4990BAB5D9219407D6933D0E723CAE30ED943C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/mrk_white.png
Preview:	.PNG........IHDR............./e......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:389D584A33E511E9955EEC2C985C12E8" xmpMM:DocumentID="xmp.did:389D584B33E511E9955EEC2C985C12E8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:389D584833E511E9955EEC2C985C12E8" stRef:documentID="xmp.did:389D584933E511E9955EEC2C985C12E8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..+G...GIDATx.bxwg.........3.0.0".2.9 A&. X...}.P...........A0. .L@.0.H..@....a+...2.....IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	2589
Entropy (8bit):	5.779244692593716
Encrypted:	false
SSDEEP:	48:ilx4q5uPcAp3LWRz2Tl0+AflCEboKvP+vkHdE4xpz:iolmz7Zf1XTJPz
MD5:	F228B58985587930982547C1DB58DA78
SHA1:	216034317CC3A9AB0C1AC3DA3687D95EF1F2E71F
SHA-256:	B642F97CACABA596434EAA7272804063E434946708FEEC5359B3C5EB73104C2B
SHA-512:	84B657977E2596E4F64EE0E4127D3C151452EB023A847ADF45CAEE2814FEF13D3468CD8DCCF9BF223A9845C54FA250419A858BC1208B859EDA0456608FC90E0A
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/Data/searchPanel.css
Preview:	/....../..style_subhead {..margin.. : 0;..padding.. : 0;..font-size. : 14px;..font-weight. : bold;..background:#0F0;.}./......./..style_block_area {..margin.. : 0;..padding.. : 0 5px;..float.. : left;..display.. : block;..background:#ccc;.}...style_chkymd,/............/..style_chkpsn {/............/..margin.. : 0;..padding.. : 0;.}...style_inputButton {/......../..width.. : auto;..margin.. : 3px auto;..text-align. : center;.}..style_inputArea {/......../..margin.. : 2px 0;..padding.. : 2px 3px;.}...dynDP,/.........../..dynGroup,/......../..bookingDate,/....../..dynPersons,/....../..dynPrice,/......./..dynDispunit {/........./..width.. : auto;..margin.. : 0;..padding.. : 5px;..border.. : none;.}./........../..style_dyndispunitElement {.}..hr {..

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	76981
Entropy (8bit):	7.976417412997382
Encrypted:	false
SSDEEP:	1536:ZrScl24EoQ6NmaQKPys5BxfzhpjlROoME5LFJT7nCRmKmsn:ZrScWoQ64abPys5BxfziOF8R1msn
MD5:	A59D5F750123F356AE51C51BF9AB4981
SHA1:	7D2EC39EDB32DA3090DFF7C1785CC40D986B6784
SHA-256:	5BCFE0DC87E712EF34BC5EA2B17C0A767A12C9E3B6C570B559ACD72A3684D5B9
SHA-512:	D483ABC58E77EB60696087949683033460CA27F213A83B863A7DA9A9D6D532E0719863D76C9277CD9A0080A00F25A3EEB12250708A2D3C961750931B1DE427AE
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_3-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:57CAD7CFBBB611EC9FD6BDAC6ABB659D" xmpMM:InstanceID="xmp.iid:57CAD7CEBBB611EC9FD6BDAC6ABB659D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8937
Entropy (8bit):	7.914241271342097
Encrypted:	false
SSDEEP:	192:0KTLpGcdCW0s5pVj/hUpeMYOK/NQkYSgNVpM9SO/Jk/E:0KN8W0sjDsDYQk2MIO/Jp
MD5:	66D73EA185E2572DC29CCC13F3DDA871
SHA1:	09EB2EC81C71E42843DBC7EC4ACAF601A0B145DD
SHA-256:	0D6BAE1B1532B5CA30051D185A12961F0719704B0F77AD765295F2339A9D7119
SHA-512:	823D814AEDEE13A281F1735F91FE819897EC428FF74A7B3382A56AC98FFFB27E1AE1FB12EFB8FBE8353273E67962BCCCFEBBB4CB2A3C13D90A9257E538B92292
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61BA1E73F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61BA1E72F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8279
Entropy (8bit):	7.908265449567834
Encrypted:	false
SSDEEP:	192:wRKEA+o7tEfrHVbBg59+g1jmfyWp6y6mIbq7bioO:w4dSVcDUO
MD5:	EAB838FB2F6AF77F5B07A3F9A438F362
SHA1:	D03642E4F636E9775AFF373D1CE495630D0A06D8
SHA-256:	79F75D9336303148369464242A091BE9E60DFEAB5D787049D6DC2F03E6F4F7EB
SHA-512:	2D4D9AD3FFA307DC9D0EF2041C3545CEDFE6388AFD0FC807BA55C0F3B0EE1759E07F96332AF718F0DBABC227BE8AE68B5A05F0726FA99F9546540C9D5669E7D2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E68A830F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E68A82FF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8205
Entropy (8bit):	7.907401997356158
Encrypted:	false
SSDEEP:	192:xtCAPJ/5+bgWd/3PyApHq/HDJzJsUTTGeepk9IEwNnMT9RI0q+AO+1:WAPJh+bl3aAMJyezNOcBy0fe1
MD5:	8F035E6A365671B0523AF29C2AEEF9BF
SHA1:	E7E5965A57C91533096C1B6257151FEE2D7CCECC
SHA-256:	1DA9508E0F16212E421C5D3F03647BD43E4FA9DCBFC60474C6ED185D0235581D
SHA-512:	2E21D495B2C63206AA439270E34E429CD2F96C68812E759501224E0D7D50F81F10CAED9EE408C03928AB0F59A6CC2AB10007FAA865674F4C0D9432D17A87D4EB
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:62EDE387F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:62EDE386F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	249589
Entropy (8bit):	5.548753192294371
Encrypted:	false
SSDEEP:	3072:LVwwniaF5LFz9J6s0Znb28/XJTT81Nsj5nZ5Y3wXr1oJXGhy3pyFd:ga/Rz38S0howXpoJXGh+p4d
MD5:	E0AF411E47805DD2D0DC8BF7EC5CA521
SHA1:	539B43B60CC58A8ED2F81F465A64EA66B26A1224
SHA-256:	A076DD88651C820312FEACFE41DE67FBBAEF2652D5E390D689EA356CD3D60211
SHA-512:	EA93C9E076684CDD450FE06A70B7B9AD6FA5EB8FF63E6599FF972D2660B0791735C6DC2C5F22A1BD3C908B35617FDD4051A3AACE0C221F75BF7D28120936B50C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2513
Entropy (8bit):	6.949140783663541
Encrypted:	false
SSDEEP:	48:2/61O4knA9WItL0X2/c0gkD3THx2y3XYHxBcbfUkEFuCCjLJxOaq/5jZL9:2S3knmWIpR/WOHY9H30uFkjNxOZhjZL9
MD5:	7D2923512F1352CA91C939FFBBB94D9E
SHA1:	F104545BC328B7BADB3D97F74A7638B86814084F
SHA-256:	A1C814AEEF5DB770F036669AD4133780B808D0F8C93AB283C869AE476D4AEF9A
SHA-512:	DDDA487A46905EED4E1A7E84BBC95AA3C1BCC985D824FD29B0BE0FD4F87F52359BDAFC4A7495DC10E1D16FBBAD6D15A6172190F9F1E19B7F5C2DB1414C60286F
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/sns_ol_ft.png
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2020-09-25T16:07:46+09:00" xmp:ModifyDate="2020-09-25T16:10:41+09:00" xmp:MetadataDate="2020-09-25T16:10:41+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:c77e458f-4fec-c54f-9e09-8975ccdb759b" xmpMM:DocumentID="adobe:docid:photoshop:fb08caf7-a0d8-7241-a9c5-5c72a0bba6bf"

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x742, components 3
Category:	dropped
Size (bytes):	386397
Entropy (8bit):	7.978640628639053
Encrypted:	false
SSDEEP:	6144:nJfwwldwrObeVq1w75/+QBjoePSTFQ/aY5MaBrMCJ77mqjroovuHflZa31OeoSM:n9w+dwi72p+Gj96BgY8rX71r5vqGoSM
MD5:	D0F372ED1F9556B564388F7EF27C6157
SHA1:	5F348B992B5D555B5BE325597A7235B3AA951B92
SHA-256:	C9D6CA80F93E857D52A0E28C2512A3C0C300F71EC4D85E1CB0AD696694CD98A7
SHA-512:	9614D8F9B3507C6AEA6ED7CD8D8DA3AFB5A374286226BC07DD2C7C2EFB8A4084D6AFA3A0F9FF14792E7B24E43FF1AD91B1A3571BE56B57119D24A4F6FDCAA641
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:95E040DFB48611ECA512B75D7F112F65" xmpMM:InstanceID="xmp.iid:95E040DEB48611ECA512B75D7F112F65" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (309), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	84369
Entropy (8bit):	5.212745398318752
Encrypted:	false
SSDEEP:	768:yT+4oV92Xh29nNhXhYOL18rWF8724MEq/YDWECCdrK6Z2bISuhiCTmH:yloV0X89nXXSO97pCdrKu2bISRCQ
MD5:	6641FB3293E84EF9D7C230911C9F9630
SHA1:	3C4A1A7E37728AA1D30C9F955952119FFDC36FF3
SHA-256:	C947628CAD73C5830FA9E928F9A4C84C78BAE10603AAD08CB913F9EB7FF43329
SHA-512:	3F23A1EA2BBADCFF1E5A93E24C06DF4379500C8FFD606595696675052D2CA7D5D09E149AAE956D75798CB9F28DF1CAFD33F3B667374AEF53B648A690A70B8C16
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/
Preview:	<!doctype html>..<html>..<head>..<script src="https://www.googleoptimize.com/optimize.js?id=OPT-KXRP8KT"></script>.. Google Tag Manager -->..<script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':..new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],..j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=..'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);..})(window,document,'script','dataLayer','GTM-PTHR639');</script>.. End Google Tag Manager -->..<meta charset="UTF-8">..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1">..<meta name="format-detection" content="telephone=no">..<meta name="Keywords" content="..,....,...,...,........">..<meta name="description" content="1954..............................-HILLTOP HOTEL-.................

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	4.794817662815634
Encrypted:	false
SSDEEP:	12:OXa4eU2lCoi0FHw44hRXen6iMvtR6XWvd3l6R1YkVGBPTFmzYv:OK4eUM5X/4hRO6PvtR6X6d4R1YkoTcW
MD5:	1C0A07D2C3B0E18FE3C7496DD1DE3FEB
SHA1:	6A3739322E018CB528D0821618F431E1E601D821
SHA-256:	FDC64445ABA9C5148CE09FE261A8278AB1182B030EB8AE957B24A9CCED96F482
SHA-512:	B9EF9E9AC351F7E90024634A37ECCDAE287D44B73525CF8FD98598E1015B06AD53251187D728AB34F6B6009E48F7E6DB404EB008EAF9A898820234C1DE355CEA
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/sidebar.css
Preview:	@charset "utf-8";./* Filename.sidebar.css /../.----------------------------------------- ............. .320px...479px.iPhone3,4,5,6,6Plus,Android. ..-----------------------------------------./ ../ :::::::::::::::::::::..LOCAL NAV.::::::::::::::::::::: /.../ -----------------------------------------......... ........Kindle,Nexus7..480px . 736px.iPhone,Android...----------------------------------------- /.@media only screen and (min-width: 480px) {....}..../ -----------------------------------------:......PC . ......iPad......734px . 959px..----------------------------------------- /.@media only screen and (min-width: 734px) {..}../ ::::::::::::::::::::::::::::::::::::::::..PC. . .......961px....:::::::::::::::::::::::::::::::::::::::: /..@media only screen and (min-width: 960px) {../ :::::::::::::::::::::..Local Navigation.::::::::::::::::::::: */...}

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x740, components 3
Category:	downloaded
Size (bytes):	959628
Entropy (8bit):	7.984988038562689
Encrypted:	false
SSDEEP:	24576:BUN8WeUFjrn2+11W54LJMsNXuVdETWonrSDp0/b:BM8nujza4NMsNjWon2D2
MD5:	0208290CD0986A90F09BA57FC26482EF
SHA1:	DC6DF91A68E25D4977C9CCF8F5751AB24B91407C
SHA-256:	C8AFB06AD69E8A6811C3BB24A98873A42ECC0DAE1A303CCC6DF61893F1D2649F
SHA-512:	F31A335AE36B02C2A9BABCC1F2B6FA9AE5DF85FB9F6BE9645053CEC5A44E315C05186859AF165916BD96AF50A132DA1A5BF0190EFB5B47F8633B5257CF3FAF26
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/wedding/bg_wedding.jpg
Preview:	......Exif..II*.................Ducky.......d.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="BE36DFBF890A93059E2AF8D90AEBCC5F" xmpMM:DocumentID="xmp.did:DD3984EFAE3511EBB8F2984E09826262" xmpMM:InstanceID="xmp.iid:DD3984EEAE3511EBB8F2984E09826262" xmp:CreatorTool="Adobe Photoshop 22.3 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:96785901-2169-d643-854a-110215a69207" stRef:documentID="adobe:docid:photoshop:36f42f80-f460-cf42-833e-b301c3bd6bc6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7460
Entropy (8bit):	7.896631134240208
Encrypted:	false
SSDEEP:	192:7q+kcP1hbs6tOe31o08uxXPordP5g23OFkBWv7G5:CcrI6sel98w/KtfOqV5
MD5:	FCF236B513DA2F9741D2CE35146B6A80
SHA1:	7A776F6106A4146DC09AD619E335C7B153C77FC3
SHA-256:	8993609174AADB0CB28B2D4875C263A7B42A5ECEB44BFCEB16B6D63604766299
SHA-512:	BCEA3BCDD019F69ACF1D931F57D2F482D0B4B7DA6C1B87238C2FBC7ADA5C41193B9D42F87A54AA1A51E1CC0F74C6C1FE8BDE9F6152661ABC5981D0C70A47BAE3
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban04.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBFA52AFF6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBFA52AEF6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	233663
Entropy (8bit):	7.965302493855912
Encrypted:	false
SSDEEP:	3072:oKQwL0w3w1rUJFlCUpqKZer4B14HA8iNJxeCVUxZFLhcKYvuhX3qYyec1xX9/C+3:oKQ208SrUJvkQ18A71OZ9hv1/c1hUW
MD5:	2D49891FCC25C4E58526D7815BD797E3
SHA1:	55944A739DA77C635FEEC6BBD26E40944B3CE1F2
SHA-256:	F57341973BF66EC745CCAEB5C000878850CB3C0AEA890B7A9A263F175880CD71
SHA-512:	22A6B34C0B0EEAEDAA7678109A03BA7B7EA765BC96715B53B72FA75569F85012716536A27FC4D2CCD7D216ACA4BB52318EC9860A8190F6D64180850B699CD1AC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:19D32A33BBAF11ECA67DC407DD409438" xmpMM:InstanceID="xmp.iid:19D32A32BBAF11ECA67DC407DD409438" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	55419
Entropy (8bit):	7.979818634116199
Encrypted:	false
SSDEEP:	1536:74QDUphnDiu83ZYHXX1I8v1nRxHzV5FJzBlXgyebNS7X9h:+hnDV83ZA15vhz3ep2
MD5:	FD2C4D1ACC2A03ED37111084F50F85D3
SHA1:	A6C1E71B4C96F669177909E05814A0D180DCE437
SHA-256:	F53DCACB209C881180A08801405CE0EBF827487C1710AD58C73A97EAC67B298A
SHA-512:	AB9B6EC2B1DF9B61DDCBC0E2B3F095B6F5BE85D5F0EAD67456051D32F311CADF77BDF95F0BF919D83CF0B6EEB5FDA81BA78525C67ADC170BA56CA25F15B38D46
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_1-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:3EC7C586BBB611EC90A29DE43BC802EA" xmpMM:InstanceID="xmp.iid:3EC7C585BBB611EC90A29DE43BC802EA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	55419
Entropy (8bit):	7.979818634116199
Encrypted:	false
SSDEEP:	1536:74QDUphnDiu83ZYHXX1I8v1nRxHzV5FJzBlXgyebNS7X9h:+hnDV83ZA15vhz3ep2
MD5:	FD2C4D1ACC2A03ED37111084F50F85D3
SHA1:	A6C1E71B4C96F669177909E05814A0D180DCE437
SHA-256:	F53DCACB209C881180A08801405CE0EBF827487C1710AD58C73A97EAC67B298A
SHA-512:	AB9B6EC2B1DF9B61DDCBC0E2B3F095B6F5BE85D5F0EAD67456051D32F311CADF77BDF95F0BF919D83CF0B6EEB5FDA81BA78525C67ADC170BA56CA25F15B38D46
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:3EC7C586BBB611EC90A29DE43BC802EA" xmpMM:InstanceID="xmp.iid:3EC7C585BBB611EC90A29DE43BC802EA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-RFKGKFWG67&gacid=42326441.1730142869&gtm=45je4ao0v881287644z878713577za200zb78713577&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848&z=187887619
Preview:	<html></html>

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1251 x 764, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	87022
Entropy (8bit):	7.966775711521364
Encrypted:	false
SSDEEP:	1536:+kVW+8anoY3Kz4QS7/Ec4+zVvqFLYrKGjxraooq/XNnQQpvvAGwJGI9w:1KYoY3Kc1XCFkjx+g/NnpA9Jn9w
MD5:	17BDC164CCF791A781B6477F1A5ABB83
SHA1:	05B7DD869E5F2205510AE170C1DC722D047C77B2
SHA-256:	6AC7CBC0FD8ED9915E0669D693FFDF99AC7B4A3380FF94CFFE8DB6DFC76ED6B2
SHA-512:	97CCD57AE0F433E6F782F00AC636DC15CB8ED863BFF11BD9FA80877AB0125C177ACE14F9B21E73C8C5FA54B62347CA72967274AD5F9E189B49BEAC6DE98C5F9C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/access/map.png
Preview:	.PNG........IHDR.............-*......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b7171999-c62a-5f41-923e-8ebfbfff96af" xmpMM:DocumentID="xmp.did:72B806060A9D11EABD7DC9235F3B2D77" xmpMM:InstanceID="xmp.iid:72B806050A9D11EABD7DC9235F3B2D77" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:bcebb828-ee39-dc4c-82e3-5a5924009049" stRef:documentID="xmp.did:b7171999-c62a-5f41-923e-8ebfbfff96af"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...6..P.IDATx....\|.e.7..d.6i(}' ....

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8205
Entropy (8bit):	7.907401997356158
Encrypted:	false
SSDEEP:	192:xtCAPJ/5+bgWd/3PyApHq/HDJzJsUTTGeepk9IEwNnMT9RI0q+AO+1:WAPJh+bl3aAMJyezNOcBy0fe1
MD5:	8F035E6A365671B0523AF29C2AEEF9BF
SHA1:	E7E5965A57C91533096C1B6257151FEE2D7CCECC
SHA-256:	1DA9508E0F16212E421C5D3F03647BD43E4FA9DCBFC60474C6ED185D0235581D
SHA-512:	2E21D495B2C63206AA439270E34E429CD2F96C68812E759501224E0D7D50F81F10CAED9EE408C03928AB0F59A6CC2AB10007FAA865674F4C0D9432D17A87D4EB
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay11.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:62EDE387F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:62EDE386F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8040
Entropy (8bit):	7.9012894572062455
Encrypted:	false
SSDEEP:	192:1nOqkt71+VWK6H9fp/u73TfBfSjzF2HMYCwi+swhUbqE:5OztwYK6H9fNu71djKFbh
MD5:	AC096C354DB0BCE695159C6499533484
SHA1:	BD06E91A5B52E04BDC11CE37480A8F8E496D5357
SHA-256:	0E9C7B4F67D642CE399200BCF9309ACA56E6CED0D87CA0DCE85F8FA3045BAA2E
SHA-512:	22269BE3D4421A5A4F9754D3FF3484BCA44CC8BC432D14651AA4043CD5F475920D80E1142136C594920BCD0D68B73A54F85E77CB77D8A9C22E322734B509B06F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61BA1E6BF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61B1948FF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	10012
Entropy (8bit):	7.922166108799429
Encrypted:	false
SSDEEP:	192:Xm/gf3KLeRAoYPCbIDlSykppk0z56AfXOsQtRg/jQsYybm6c8:2ofAeZuuKMk0z56AGsQzejQXyy6c8
MD5:	6123A56ED6DFF2EEC233ABDEF691BB70
SHA1:	F1B1D996A8D110328F5BAE782F0AE9FCD2CE4812
SHA-256:	7F290C827DD78E012B9D444651C4AFEC37E4141C13D2A1A68FCF8D66F5C05394
SHA-512:	4E29107BEEB4DB9C0451D239AAA6EB45E917526F41743BD21330A974ABA7901FE6CD7EA6AA96C8734D81653922761E90D1EE43D844CE1AC85A848EF54B0959DC
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest09.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E5D0994F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E5D0993F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7497
Entropy (8bit):	7.89151693978734
Encrypted:	false
SSDEEP:	192:tgqr3IeiIlS/x8FQf+SvNqDluoGxuDOynh:pLItIvFXNDlF9Omh
MD5:	CDBBF5B5A368E9B79D55FB47D8B97DDA
SHA1:	2475A5C9DE425AC690C8450D79BD9E15E2286FA4
SHA-256:	882D2619D0C2D4955D9F53C4B5983DE3525ED470346C46DABF9B501973312266
SHA-512:	5602CE2F811DA0DEEB6AACC3345E8823773A6F14A78D213FC381E61324703A46560527C35964D3BC1AC34D2DB063E96A041F384284ACB2B79D5FD7D0F8BF486E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CC03C213F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CC03C212F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	42392
Entropy (8bit):	7.96704917362685
Encrypted:	false
SSDEEP:	768:hsAgQvw/fnNY7sS3qov6NE1X8iMJxB+UxEgY//JYfj9qt3ff9fxL2Y/wWUEjr0VA:KAboHNwkUMrJR6xHxpxrtp
MD5:	7AAEEBBE121DC2498818BE79CB2201CF
SHA1:	9A6654945B4213D9A918B1F210A1A90A6F43758A
SHA-256:	BFD4A41722CECAA81EC179A2059A51669240A70C38DF07EB2D0CD15D3812C905
SHA-512:	236703426AF1AA0089AD9D2B05CC7B270E029F2A3FE4CE2A6D99BC7EE4BF5ED67487DCF9AD0C09C97C06BCB66B3B32305942BB63438CBE86D330E6680DF713B4
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:76CA6353BBB611ECACF9E2BDF5E0E796" xmpMM:InstanceID="xmp.iid:76CA6352BBB611ECACF9E2BDF5E0E796" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1889
Entropy (8bit):	7.766354355684906
Encrypted:	false
SSDEEP:	48:3843H7LAfxd7GNOtvOi5tDc7uhWtkt+dIV:Z/Afxs4vx6QAkQdw
MD5:	8AA998A9EA7BE3A7BF7C73EBB7EA640C
SHA1:	DCD32CA9F49044E7ED792BCBD0B0522616603464
SHA-256:	E5DD07A71914F9925BE5071006B8A0AA316F8DE84C31B8E0F21C80CD2CC95ABF
SHA-512:	EB5B67B8669C86AD95FA8329BE796A80E37267535B31BE3934FEEEB0E36755BCFFA0B6E3BC638A007BAAFF83B39F10846E95229A5F71421C3BBCEF1C6AAA8B30
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/brn_prev.png
Preview:	.PNG........IHDR...<...<.....:..r...KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:....IDATh...H.g.._~O...,..K.4..2.!.,d1Y..R.1.@F3..b.$.....X........\..ln.i...A.X..<.)s.................r\|...}.<....9.N$..,.....-0..w}..]..._@?.'...d.Le.(`9..!..`.'B..x.....POX...K.\..N.....`..+....E...Oz...B<P.( ....:.......Dx...qQ.N..&.9.7S.V.G5nj.N..h...e...u@L.....[.?.s....t&........2I..f.,.\|.X}^[\|.+.Zf.....1{..%...=g}....G../.V..M.X.px.O.Q...lg..e...S....5.@..c.p.b..2.......}111'%._...D.D..^...P....V.5'++..qNc.u.n.C...&55u.kkk.-[>5.....!.......n......mmm/l...l6.-9r..-....K.n.........o.m..W.~...%..Q..R..v.=.h4....^TT........"....-...h..".......].v..x.b.....A..W......9F..`WW.a...'.?...

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 20x17, components 3
Category:	downloaded
Size (bytes):	1487
Entropy (8bit):	6.48776193551701
Encrypted:	false
SSDEEP:	24:PK1h/4IpWwh82lYSKwYTNadCQVJCCvT3fyJ3VPYB8Gs74/tdo2C7WtTUw6/Kt8:gVFcvnLIlO+eJ3c88Ci2hKO
MD5:	7A25098F451B305D3A5CBC05F526F0E4
SHA1:	8B8A115EEEBA335B0FAC81189C6D4850FB6BA6B3
SHA-256:	E5783F17C674C7158B9156DD2367216D49D1CBBC9C9826C06090E0ABEAEB1245
SHA-512:	BD92106DCDEA5B8056D54CA7D80873283125FADB644BBCFE05FB922720041A67B54FBEE2163EBF7F0E24D00F56D2967C9386918BF133A0EBC418EAEA1807D3D5
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/ic_blank.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:7CD047F9B49C11EC8951DDE29C48E156" xmpMM:InstanceID="xmp.iid:7CD047F8B49C11EC8951DDE29C48E156" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	44230
Entropy (8bit):	5.442571802900125
Encrypted:	false
SSDEEP:	768:fZfzi9LVvcv3WgSVLiJCkZfziWvcv3WgSV2iJClTvMYnrUzY85OpXbzSEB3n6kaR:EvO9vOxvMYrpXbf6kaPxS6ePZeDeE30Y
MD5:	5A3ECFDBCDE0F5ADFFCA921CB2EBB4AC
SHA1:	9314C107337C17773CFC5FB7148F3C15D4F75765
SHA-256:	C3AD4D607398E4C9A54A7E86D205D60FFAB3B6EAC9BC8CA7EAF1309AFDB7EC2C
SHA-512:	1EECC96FCB8824BE18DC56D768DC56F47627BA38045CAB1EAC7C28F946B6411BB61791B1173BC00C844BEB7BDF861579D0E75E956E51DCB39E9DF9611EDB1C05
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/header.css
Preview:	@charset "utf-8";../* Filename.header.css /..../ -----------------------------------------.................320px . 479px.iPhone3,4,5,6,6Plus,Android.....----------------------------------------- /..@media only screen and (min-width: 1025px) {.../PC.../...body .view_tab-sp, body .view_tab, body .view_sp {....display: none !important;...}..}....@media only screen and (min-width: 768px) {.../TAB.PC.../...body .view_sp {....display: none !important;...}..}....@media only screen and (max-width: 1024px) {.../SP.TAB.../...body .view_pc {....display: none !important;...}..}....@media only screen and (max-width: 767px) {.../SP...*/...body .view_pc, body .view_pc-tab, body .view_tab {....display: none !important;...}..}....@media only screen and (max-width: 767px) {....sp-none{....display:none !important;...}..}..@media only screen and (min-width: 768px) {....pc_tab-none{....display:none;...}..}..@media only screen and (min-widt

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7383
Entropy (8bit):	7.898765146087572
Encrypted:	false
SSDEEP:	192:P/b89WSR5crNNm2jCgdANXefNkFnpu/q4SMXf7:P/eLcrNI2jjdUeFkFc3SMXj
MD5:	1D9266115E934F56A602C57500CEE23F
SHA1:	5F1869E718891DDDF8C25B1A000A5D82001AB896
SHA-256:	B981F302A3BE390BEFDEA599FB27AC3EF5BD496537A3E704BB9EFDD701E514A8
SHA-512:	11E6BA9D8EC4E9C61F57E4938D63BE942A13D3C945145ACC769EB912C06D6C2A7D8AA0F32F142998CB79B88CEFBDF7E3D5EA535F0C3B02CE44334937599B220B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:62874275F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:62874274F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8657
Entropy (8bit):	7.901128576379197
Encrypted:	false
SSDEEP:	192:8taysWDUQi9xFKT/a90Q0dC8VigZuEls4xmN2TqzJwMs9z:8tazWYQSWa909C8Vi2O4xEfzJv4
MD5:	133463EAB7FB8091D16AA7DAC74CCAB9
SHA1:	B022E5C8355C62EB75D398ECD4DA292521E7B8BA
SHA-256:	5430DCF4F6F6CE9368AC220E83EBF39CD7820E174624528E5D65B9681546012F
SHA-512:	2D8FCE92A552ADCEA91C35BE1F4C9FE97F8428917CD1686B6C9653064E4BDE5B84C42CE5902ED0C935641AC47510A6F2DEEF52EAC594DD8FA89C87F92F3001AC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CADCEC97F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CADCEC96F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x560, components 3
Category:	dropped
Size (bytes):	44538
Entropy (8bit):	7.909712996410755
Encrypted:	false
SSDEEP:	768:u94nY9zbMbw+di8hA9nKUTOdUk/bfiLsn/U3OVCyJIMrUnHfx0CpoXxG2Zwaw5S:QAbxUnKBdn/bCso/p6UHfmCyxGR4
MD5:	18AABB4031E79EDC07C7ECCFE367FE95
SHA1:	877A16D118BC9EC871C6CCD25ED40E6C2292219A
SHA-256:	8B8A27399E08C2626F2B1577F5D1A6E87B4AE1AA4C0C49EFB3D836BD207F55F9
SHA-512:	A4B154642478AD627CF66BA6F6229EEA1159D12AA2E7C1A8BF6593219BA3A3D2B0F90FF54828CD5EB9CE25FE2A7765F150EF75FEAE16C7DFC78036F5829BC157
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:065D5A0CB4A211EC8616C230E7EE2C2B" xmpMM:InstanceID="xmp.iid:065D5A0BB4A211EC8616C230E7EE2C2B" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	43507
Entropy (8bit):	7.970378361568872
Encrypted:	false
SSDEEP:	768:C+8pjhQKuygtGSNtc02A6F5jdB6yFgN/dlE1OMlvjJp9tngYsFUsFhEjiWWQuMcs:C+8pjhQtyMUA6FpnHkd+1Oi7ngYuB6rD
MD5:	38E4D447004D8D01C6FCCB29241980CE
SHA1:	8B3B20268AE5F354F885554951CDF6F109D070D9
SHA-256:	CD4E6056F3E9B1E0BC4E1657F8A40AB1A1503912599740E1B5664904DBF50E03
SHA-512:	6D22C90C076A0300B78A4207DD1493980157EC6C74538E6226E4B8D0F660E0B52D8693EF0FFB46B38785D3309B8884E47D692F4D566A953D154F0632DCD5F607
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:97658365BBB611EC920CAC65E1C33C92" xmpMM:InstanceID="xmp.iid:97658364BBB611EC920CAC65E1C33C92" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	4.6534646879723125
Encrypted:	false
SSDEEP:	12:ke/qImXVXJqLxXARHUEHcEL0t4JPIFOZumBQxOW/F0Dgfbw:jSXXVXsxk/HcELtw+O0EDw
MD5:	37B70DACD70D7FF4F8F8055C56B1CC59
SHA1:	25F2E5BA8C27E40AFDE8DD2678D115A95B033432
SHA-256:	1D1B4A4AC98972FDBEDCF3DECCD59BD530F1ABD23F97D7F3F0C8A3A18E28C014
SHA-512:	C4BF2279064579275061F367B3F145612D469EC43F9F44543B7B1E3858C23DAD3D14B2F1B3E054DE64DFC59FB5CE6119A2AE26BF852CBB2C3537D88BAFC3C917
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/form.css
Preview:	@charset "utf-8";../* Filename.form.css /..../ :::::::::::::::::::::::::::::::::::...Select..::::::::::::::::::::::::::::::::::: /....select {/ RESET /..}....select{...padding:3px 10px;...font-size:16px;...vertical-align:middle;..}..@media only screen and (max-width: 767px) {...select{....padding:5px 10px;...}..}..../ :::::::::::::::::::::::::::::::::::...Input Size..::::::::::::::::::::::::::::::::::: */.....w10{ width:10px;}...w20{ width:20px;}...w30{ width:30px;}...w40{ width:40px;}...w50{ width:50px;}...w100{ width:100px;}...w150{ width:150px;}...w200{ width:200px;}...w250{ width:250px;}...w300{ width:300px;}

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	downloaded
Size (bytes):	66318
Entropy (8bit):	7.983725031551425
Encrypted:	false
SSDEEP:	1536:v/hrp7ioMh3JvqGWMCSvFZHlFQNiSeIiO34AbYUw:Xh5i9ZBq1MfvFZ7SFiO34AbNw
MD5:	D2DC58EEFEC314649C0A0305ECA19B67
SHA1:	87BE5CC9F6E6E409BF05A87B70E03C1DB7A35D49
SHA-256:	E4709B69A1F9E5E2A47E921CAB6E850E448F32EA30E3917B7E7652FED3C5A911
SHA-512:	1F189E27C52B817A78E72222ACF66A789995194AC5A3C84DE4DED5451786E14C00A1316F60943BBB77A11F389A6752F5ADF75E98E91164D79CBFBBCD13D8CCF0
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_stay04.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69778B14B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69778B13B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x742, components 3
Category:	downloaded
Size (bytes):	386397
Entropy (8bit):	7.978640628639053
Encrypted:	false
SSDEEP:	6144:nJfwwldwrObeVq1w75/+QBjoePSTFQ/aY5MaBrMCJ77mqjroovuHflZa31OeoSM:n9w+dwi72p+Gj96BgY8rX71r5vqGoSM
MD5:	D0F372ED1F9556B564388F7EF27C6157
SHA1:	5F348B992B5D555B5BE325597A7235B3AA951B92
SHA-256:	C9D6CA80F93E857D52A0E28C2512A3C0C300F71EC4D85E1CB0AD696694CD98A7
SHA-512:	9614D8F9B3507C6AEA6ED7CD8D8DA3AFB5A374286226BC07DD2C7C2EFB8A4084D6AFA3A0F9FF14792E7B24E43FF1AD91B1A3571BE56B57119D24A4F6FDCAA641
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/bg_story.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:95E040DFB48611ECA512B75D7F112F65" xmpMM:InstanceID="xmp.iid:95E040DEB48611ECA512B75D7F112F65" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15174)
Category:	dropped
Size (bytes):	332857
Entropy (8bit):	5.603226858100003
Encrypted:	false
SSDEEP:	3072:WX2VwwniaF5AFDeJ6s0znb28/XJTT81Nsj5nZ5YPwXr1oJXGhVkMtK3jmaRJWS:y2ca/4DqIS0howXpoJXGh6lpiS
MD5:	B281069E31DF04BF5924F57412EA9C09
SHA1:	C30E2B1FB2868471CF329D569D1A7244039ECB03
SHA-256:	5935841A1C712D3A5E079BD31C0410BE70FF82EA80A35EC9D3C6780E4770CA62
SHA-512:	BA1358E89427A583DB09272FBACE58C97DCD787869ABC7813379DCB3811C4DAA613A876E1C119F5FE008C4869070D2D94A9B4E52793BF053B3689D529642962D
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"20",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_path"},{"function":"__cvt_8713577_28","vtp_getValueDefault":"searchAttr","vtp_searchAttr":"id","vtp_searchFilter":false},{"function":"__cvt_8713577_28","vtp_getValueDefault":"searchAttr","vtp_searchAttr":"class"

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x740, components 3
Category:	dropped
Size (bytes):	959628
Entropy (8bit):	7.984988038562689
Encrypted:	false
SSDEEP:	24576:BUN8WeUFjrn2+11W54LJMsNXuVdETWonrSDp0/b:BM8nujza4NMsNjWon2D2
MD5:	0208290CD0986A90F09BA57FC26482EF
SHA1:	DC6DF91A68E25D4977C9CCF8F5751AB24B91407C
SHA-256:	C8AFB06AD69E8A6811C3BB24A98873A42ECC0DAE1A303CCC6DF61893F1D2649F
SHA-512:	F31A335AE36B02C2A9BABCC1F2B6FA9AE5DF85FB9F6BE9645053CEC5A44E315C05186859AF165916BD96AF50A132DA1A5BF0190EFB5B47F8633B5257CF3FAF26
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....~http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="BE36DFBF890A93059E2AF8D90AEBCC5F" xmpMM:DocumentID="xmp.did:DD3984EFAE3511EBB8F2984E09826262" xmpMM:InstanceID="xmp.iid:DD3984EEAE3511EBB8F2984E09826262" xmp:CreatorTool="Adobe Photoshop 22.3 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:96785901-2169-d643-854a-110215a69207" stRef:documentID="adobe:docid:photoshop:36f42f80-f460-cf42-833e-b301c3bd6bc6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x280, components 3
Category:	dropped
Size (bytes):	45930
Entropy (8bit):	7.977495633151261
Encrypted:	false
SSDEEP:	768:lxf/bUwhrHC/+wT9KEw+w+cxFfsokuFYq/7TOOakfroaGu+UMBhsD+dPeP3FK1gz:lpbLhrHCzKEYnfsVuFJiOakTnM76QW3Z
MD5:	6A13BD287AFB017E74DA667F0B20E9A1
SHA1:	85BF1C20EC123E886EBEDCCC7F4B80EA77E6AEFA
SHA-256:	92824FEFD997AF4CB6CC0853D4E7673AC2CC0AD10F4974B5A252AEB4C0A3A514
SHA-512:	F623096B50D5F4E10F65177720F090AC0CC94053682AB7395045C67635D108838C6247F6711AD045C8A906ED78DC8109E5FBC7A0E31CB35830A3A9604E8075C6
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:9375AFD1BB0511ECA33EF8FAD2829EBF" xmpMM:InstanceID="xmp.iid:9375AFD0BB0511ECA33EF8FAD2829EBF" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1758
Entropy (8bit):	6.4857477918835444
Encrypted:	false
SSDEEP:	48:b/6iO4knA9WItLw/c0eTpTVCTYj3eT5Hx2s6XzijFXSC:bSsknmWIpw/8TpTgTYCT5HYsX
MD5:	0FA8E548D42F5E35D379D6398569AFEA
SHA1:	8BCE98AF3E4BCA14EF5660284C69D248AD12DC9B
SHA-256:	82C0CA3731E964D66D38BC608F29E8C7178916133028063003AAAD8EC30395A2
SHA-512:	BD20F13BB504B24061DFE257799ABE0F897FA2E04618486681A928B92BEC9F9090B04EA0A1C5C68D2CF7AEAE7283F073DBA07EF62ED21D3FE9AD448D8532B640
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2022-03-10T10:31:17+09:00" xmp:ModifyDate="2022-03-10T10:32:33+09:00" xmp:MetadataDate="2022-03-10T10:32:33+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:39bda0d1-f5fa-c442-9848-73b25ad9411a" xmpMM:DocumentID="xmp.did:39bda0d1-f5fa-c442-9848-73b25ad9411a" xmpMM:Original

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8110
Entropy (8bit):	7.904486184486367
Encrypted:	false
SSDEEP:	192:6ausmWyzEbkXfzlaf9UJESjXk+wOnrH72r4d9:esmWdaxxjXkmrqr4d9
MD5:	DAFB27F4D04B462839854835A0205F40
SHA1:	4FB1ED59A63A436ACEA3623A05606A411DBFBE3F
SHA-256:	D83DBABC5B24C8B5F0C168FAD34F0DDB96E1BBFE7A9358664DD86C7615CCD4AA
SHA-512:	17044D2748FF0CC1F278FB184C93E549FAA3C7297F295EE43FCDF0B559697D9F9D282C9583CDC58FB02F1CABE4510F865E33BFAEE7BC415B3D1D7E1846DBAAD9
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:619FC670F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:619FC66FF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5855
Entropy (8bit):	5.437137858581652
Encrypted:	false
SSDEEP:	96:rgf3KkfdcxBZ8gciYl3x+K5yonDnuNUtB2wgNRGw5Cgvh1gCeIpN7B3AmemzmRsh:r+rdqZE+QrnDnuNUawgf55Cgvh1gCeWD
MD5:	C3205AA035EA643ADBAD7E842D6F3EEA
SHA1:	44800570CB6BA391EE1BFA1FF65415AED4395970
SHA-256:	4A26D32E7CF3A7B86A4E358EC5F13757E80F2A67E14F4709E78302B54BC3B9F9
SHA-512:	C8CF1A14433609AC5C326F636722E9C6F693F5575E376D9CD4805957D55422BC0FBDF530C20350351AB0AD5801F7864FD7E211ED2D450C9844BD32A2A4397912
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/class.css
Preview:	@charset "utf-8";./* Filename.class.css /../ :::::::::::::::::::::::::::::::::::..TXT.::::::::::::::::::::::::::::::::::: /...spl{/ ......12px..... /..font-size:12px;.}..fwb{font-weight:bold;}../ :::::::::::::::::::::::::::::::::::..TEXT-ALIGN.::::::::::::::::::::::::::::::::::: /...taL{text-align:left!important;}..taR{text-align:right!important;}..taC{text-align:center!important;}.../ :::::::::::::::::::::::::::::::::::..LIST. OL UL ..::::::::::::::::::::::::::::::::::: /../.............../..ul.dList li{..list-style-type:disc;..list-style-position:outside;..margin-left:1em;..padding:0 0 3px;.}.../............/.ol.number li{..list-style:decimal inside;.}.../..................*/.ul.inlLink {..width: 450px;..overflow: hidden;.}.ul.inlLink li {..display: inline;..margin-left: -1px;..padding: 0 7px 0 11px;..border-left: 1px #336699 solid;..list-style-type: non

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	downloaded
Size (bytes):	57686
Entropy (8bit):	7.981606958447723
Encrypted:	false
SSDEEP:	768:ELyIo4mdZ9Kh1Hd5ahdfye9WMunkMUnozwY3XdVmsTGElWZToAk/8JeLkpokrAR0:zBKh1TamjQMKozwQfTGElmTo9E3oPzzw
MD5:	56871DAD31394D7C560E0EE48D698423
SHA1:	E1466396967575CF66902211AB1F6BB79B39FE85
SHA-256:	3D78A67003E95937042C0962EDD76F302984F73FECF2D980C2D657A2A5A06FAB
SHA-512:	FCBC41326CD8C924396B78F9B9D7894BBFD8E459934A3CA46E02329890E702C0E3C6ECF7A8BE1AD2F1DE3689E8117C789E292C3B03E624620A24579A0BDA70F2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_store03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8EACF5CB49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8EACF5BB49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 70", baseline, precision 8, 306x176, components 3
Category:	downloaded
Size (bytes):	12306
Entropy (8bit):	7.95366882440154
Encrypted:	false
SSDEEP:	192:3ekV6iSV611LzB3Gkej8FT1rPiTZoGG4rABFeXgE9jsJ/um9N5Y3amINbZ:3eM8q1B3GhQFJwtrABFeXgkCv9NNmIBZ
MD5:	D5227E7498930A12D9BA21AE7F0CC789
SHA1:	AF578E2DF20445DF92C9B3096D4266D7040BD241
SHA-256:	AEEE0FC881AFADB1E5081E185A31CFBBC071C5CCD1ACEFD84ECC33D1D5B3068C
SHA-512:	2FAFB79DD227A691A8C736F7C723297A02B47202AAFF3F3C4907AE96814910D1A96494E7F216F91EE52B9AF235B06D9D0654D30289E3A0D104EE1C2BD6349418
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240924142823_Hw5kW.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 70....C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...6.G....L..#....VG.Ry>a..#..eH.\.S..;....0. :.Gz...7.......5}.<.....E#).RE.##....MV..y...cR..!.4.GV.....T.........=V....w.....y.......iV........._f...(;H.i..a..GL}.2B..H....:6wq^....+.Iu..].*v..........MKM.H.<..7g....>....F.=.1PX..}.T......A#v.M..PE.3m..RP.H...H..h.....jo=...)qQ......q. c....F.+

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7469
Entropy (8bit):	7.885285767617252
Encrypted:	false
SSDEEP:	96:Z8/ft9nfUCSJaX7nc4+qaJAj8wSMQEkfG9JSqarbyzokbnmWlu0Rr2foiaJi2Cwh:SMR67SqaJhwMfgJoizbFuqqoiawA1T
MD5:	9C1B7AA6DFB45FCB9512EDF031261B09
SHA1:	21DF1516B751CCA605466C17144213F05DB31BAF
SHA-256:	F0619A00BA26AF023A7FDB775B640EC7943F7AA4BC60200A61368B81A33A646C
SHA-512:	EDE06C4E2A2369166C0D8C23A28C7E609009F901C11A6223F0EF4D2A3D6113361BDF4622CF211FD6013000279BA52B3DFFFA418EC431B6FF183C2839221E6C14
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E6F8299F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E68A837F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	dropped
Size (bytes):	12914
Entropy (8bit):	7.947398270646323
Encrypted:	false
SSDEEP:	384:fTwX2mzYW8vcwbF33kx8Q1L+3kwkTinYVRsbY:fI50HvcuJu8QFLTiYb
MD5:	5482519A607C6E5E51E5DF1FE19A8CCB
SHA1:	DD7DF79FCFC98CB57209B2091F1133976F05C862
SHA-256:	04E464ACC6CD61BBF968BBD4EB85FBC3B9C48DF0B09EBE202EB23E1B18506BF5
SHA-512:	59ACE4FD2557525C0A8075617D854F949188452C9AE6EDDE1D61BD6C90E4EC565B1D28DE0BFEE3026468A8336888A99442F838F86C042B7C8266AF3A07A96E06
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1CAA18DAF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1CAA18D9F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (849), with CRLF line terminators
Category:	downloaded
Size (bytes):	101854
Entropy (8bit):	5.368967211991177
Encrypted:	false
SSDEEP:	1536:KYjRxEUhf2ZL4vVVuCX677SprVa4677HVjpKKj3PFMJNEgvnPYHu:KCxE82ZL4v/BpYtFMJNEgvnP
MD5:	65DDF7C873C66F73BC231B02F072CEAA
SHA1:	7C950AFF7A9A461373103450FFA6E24201C31DE9
SHA-256:	797EBC7938507E41FB2F96B498481DC750950F18F297BB92CD490AFB74A18D2C
SHA-512:	B07346F703642EA14306714DD77B763B83025B9521D07AAAF7DDB70EED879CDA6B1FECBE6702372C4AF69A5AD9DFC244BC071B4C88E3C4448F049D571A25A9B9
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/css/home.css
Preview:	@charset "utf-8";../* Filename.home.css /..../.-----------------------------------------.................320px...479px.iPhone3,4,5,6,6Plus,Android.....-----------------------------------------./..@media only screen and (min-width: 1025px) {.../PC.../...body .view_tab-sp, body .view_tab, body .view_sp {....display: none !important;...}..}....@media only screen and (min-width: 768px) {.../TAB.PC.../...body .view_sp {....display: none !important;...}..}....@media only screen and (max-width: 1024px) {.../SP.TAB.../...body .view_pc {....display: none !important;...}..}....@media only screen and (max-width: 767px) {.../SP.../...body .view_pc, body .view_pc-tab, body .view_tab {....display: none !important;...}..}....../ :::::::::::::::::::::...Common..::::::::::::::::::::: */.....brClear-pc{...display:none;..}..@media only screen and (max-width: 767px) {....sp-none{....display:none !important;...}..}..@media only scree

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7497
Entropy (8bit):	7.89151693978734
Encrypted:	false
SSDEEP:	192:tgqr3IeiIlS/x8FQf+SvNqDluoGxuDOynh:pLItIvFXNDlF9Omh
MD5:	CDBBF5B5A368E9B79D55FB47D8B97DDA
SHA1:	2475A5C9DE425AC690C8450D79BD9E15E2286FA4
SHA-256:	882D2619D0C2D4955D9F53C4B5983DE3525ED470346C46DABF9B501973312266
SHA-512:	5602CE2F811DA0DEEB6AACC3345E8823773A6F14A78D213FC381E61324703A46560527C35964D3BC1AC34D2DB063E96A041F384284ACB2B79D5FD7D0F8BF486E
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban06.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CC03C213F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CC03C212F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3032
Entropy (8bit):	5.434593111039071
Encrypted:	false
SSDEEP:	48:EO5ogftzvNEjJRVI3+tcplnXtErAQXY9bhi9AYCEnfvkYYZG/6X6dsgFoCSLz:3QVqnXQQlYXvknZu6X6f+P
MD5:	E6AF154A2ED3AE708A428C9A58832B37
SHA1:	A6BE7C9A56B5018BBCBBB8273B4E94C8339EA343
SHA-256:	386A13D05AF6699BA4A9BEBD28AA558F29FAD656344B9EBF3A1B27F7571ECE55
SHA-512:	F310061795A7840761033F01534B7686FD3ADA23CFF91F116216B701DBE57E8A7D36E145F40FDE208D0FE2D607FD8A5AA93E7D20859DBCEE9C29F9F9349E689A
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/contact/other/css/original.css
Preview:	@charset "utf-8";./* Filename.home.css /../ -----------------------------------------..............320px . 479px.iPhone3,4,5,6,6Plus,Android...----------------------------------------- /..h1{..font-size:24px !important;..line-height:1.4 !important;.}../ :::::::::::::::::::::..BASE.::::::::::::::::::::: /..#entryForm{..padding:20px;.}..#entryForm h3{..font-weight:bold;.}..#entryForm input{..width:90%;..padding:5px;..margin:0 0 5px;..font-size:100%;.}..#entryForm textarea{..font-size:100%;.}..#entryForm select{..padding:10px;.}...error{..color:#cc141b;..background:#ffd1d3;..border:1px solid #f38a8e;..margin:0 0 5px;..padding:5px;..line-height:1.4;.}..#entryForm .case{..font-size:0.8em;..padding:0;.}...must{..color:#FFF;..font-size:12px;..padding:3px 5px;..margin:0 5px 0 0;..background:#c96c4b;.}.../ :::::::::::::::::::::..CLASS.::::::::::::::::::::: */...iptAgr{..width:auto !important;..margin:0 5px 0 0 !important;.}...iptCont{..width:90%;..height:100p

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8937
Entropy (8bit):	7.914241271342097
Encrypted:	false
SSDEEP:	192:0KTLpGcdCW0s5pVj/hUpeMYOK/NQkYSgNVpM9SO/Jk/E:0KN8W0sjDsDYQk2MIO/Jp
MD5:	66D73EA185E2572DC29CCC13F3DDA871
SHA1:	09EB2EC81C71E42843DBC7EC4ACAF601A0B145DD
SHA-256:	0D6BAE1B1532B5CA30051D185A12961F0719704B0F77AD765295F2339A9D7119
SHA-512:	823D814AEDEE13A281F1735F91FE819897EC428FF74A7B3382A56AC98FFFB27E1AE1FB12EFB8FBE8353273E67962BCCCFEBBB4CB2A3C13D90A9257E538B92292
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay05.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61BA1E73F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61BA1E72F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	downloaded
Size (bytes):	57293
Entropy (8bit):	7.982279420968936
Encrypted:	false
SSDEEP:	1536:5YRtVN10vEFc83JqwTyj2iqWxIskLU6kOYHTzp:5YRtVLgswOSh7QmtTzp
MD5:	95883BB0A1669451DCA9E69DDC2B24F4
SHA1:	0A0E8FC2FDB29D2E1324F9C1E938AE747ECB0AFC
SHA-256:	1F7C13AC9F03CFF17FD01C30D1D38FFFD48E264303E47056F5E367E13FCF9770
SHA-512:	879D25D91CDD7669886438F7F6E6FEFEDC5C572A93D6FB03D2DE94761878A0BA19C5F9FFDD8696F59D3DF3B5864F84DEE255478746B29D6E715092B34D7CA924
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_stay02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69728578B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69728577B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8010
Entropy (8bit):	7.906099783949533
Encrypted:	false
SSDEEP:	192:tOrJCmsGtXy71h3IlGpkg0pPbBVVZoqyJP4nnNr8:tOrJCtcXy711IlGpk3pPbBp4JPMNr8
MD5:	AA4D73C72B1838E19FA95D580C7C5052
SHA1:	A190ACB48B27583BC54AE9E81E747D502849B1FB
SHA-256:	CF2573CD5AFA9E33FD9CA0567090E19C2570CB8D2F2655E6C5A5EB37C2DEBAE3
SHA-512:	6DD87DB30610595F9ABF6667A92401B91F61CDC01D12E218A7DEA509E68F925001A5D9062B8D826DE01968257EF20BFD2BBBF5893622A51A910FE8F46DF3EF3C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63AFC75EF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63AFC75DF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 740x560, components 3
Category:	downloaded
Size (bytes):	44538
Entropy (8bit):	7.909712996410755
Encrypted:	false
SSDEEP:	768:u94nY9zbMbw+di8hA9nKUTOdUk/bfiLsn/U3OVCyJIMrUnHfx0CpoXxG2Zwaw5S:QAbxUnKBdn/bCso/p6UHfmCyxGR4
MD5:	18AABB4031E79EDC07C7ECCFE367FE95
SHA1:	877A16D118BC9EC871C6CCD25ED40E6C2292219A
SHA-256:	8B8A27399E08C2626F2B1577F5D1A6E87B4AE1AA4C0C49EFB3D836BD207F55F9
SHA-512:	A4B154642478AD627CF66BA6F6229EEA1159D12AA2E7C1A8BF6593219BA3A3D2B0F90FF54828CD5EB9CE25FE2A7765F150EF75FEAE16C7DFC78036F5829BC157
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/bg_stay.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:065D5A0CB4A211EC8616C230E7EE2C2B" xmpMM:InstanceID="xmp.iid:065D5A0BB4A211EC8616C230E7EE2C2B" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x602, components 3
Category:	dropped
Size (bytes):	68581
Entropy (8bit):	7.980492309138822
Encrypted:	false
SSDEEP:	1536:aAOmyCgO0GliRMn7FwYojTJx4NdLLb4EYIerQ/0wpiwmuO:BOBR+iu7ypjd84EYIgPUiwmuO
MD5:	DA6B7A179479A7F64DE09B34E1B6631C
SHA1:	4E06C8A540437599A6F6F71FC552E8F8156DF4CE
SHA-256:	1046FBAE6471BC9CAC07AF3D2F7FB4AB58CE9CB96012F8A7577DF7ED03B5DB68
SHA-512:	46C8CA149EE917CAE4AEADA7D499BACEBCF6C0FF18A8E4F1AC8B44BF0B97D6362DD3B6A4F521B5E816F558DD48E099B506B49E17FD73F806416662898A5F6B46
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69676979B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69676978B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 252, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10659
Entropy (8bit):	7.910417587030618
Encrypted:	false
SSDEEP:	192:f7FvA5gelrPR9ME6wd+VBolXvEyp9Jb58TeFaivbBEis4am1o7inT7oKL:fG5FlrUEJ+VBoJvD58TepbBXFdY8
MD5:	7CFA486FB17368104B300BC424DA62ED
SHA1:	C26D40C28608E026FA0DC708EBD2A3509B331893
SHA-256:	74FB5C9009F14AE7ADB1055B462725FC38CD5CF50A05F5E588FDD1F5F3754ADA
SHA-512:	346ED5BF6DF928BD208444B54945DEABC683A2D8B05515108E17AA66AB1D73C6A9998B54D79357DD55E93C3EE8CA19B4CCD6BC267B50B6C5FF6908E185E60851
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/footer/restaurant.png
Preview:	.PNG........IHDR..............Uz.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:80055D83341211E98C2DA3D57B0161AB" xmpMM:InstanceID="xmp.iid:80055D82341211E98C2DA3D57B0161AB" xmp:CreatorTool="Adobe Photoshop CC 2018 Windows"> <xmpMM:DerivedFrom stRef:instanceID="686F785F9DD62147E7427D726C42E621" stRef:documentID="686F785F9DD62147E7427D726C42E621"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..,...&%IDATx..].....> X(*....DP..6.......I4v.I..F..hb4....{Cc,X(.....".@D,.]).D..u.......;..g..y.#.swg..s..)../_N..hc...u.4ei..m.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.0/slick/slick.min.js
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 137 x 55, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2398
Entropy (8bit):	7.521224380562585
Encrypted:	false
SSDEEP:	48:BitvnLb3UxfJ33xoZb14r3eBU/vR/iJUxxwyQo6p3cs:O3UxFxoR14jeUdxxnN4N
MD5:	F2EE86F78E9A9266077330F9C19AAD9E
SHA1:	0EAB47CAFE910F5A64CA71DC7D2FCB63066EC2A7
SHA-256:	A5397C97C0274446D4372929A3D4701876092D518E6E8C04257D33EC68450432
SHA-512:	DF0F0BA89873279DF1BA5039662134E444926DBCE7DFFC54A2377384CC1AF92F611C0D02A11446B256E41415422B0289BC2487CA70B534062280BC390B9A8240
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/footer/foot_logo.png
Preview:	.PNG........IHDR.......7......:......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:C5493022921511E68BDBBF1FC0CC9715" xmpMM:InstanceID="xmp.iid:C545BF64921511E68BDBBF1FC0CC9715" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:07801174072068118B86D6E8981BC5D0" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......3PLTE...5....~...gTFA,..........pc......sbU.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	dropped
Size (bytes):	43239
Entropy (8bit):	7.981795829600631
Encrypted:	false
SSDEEP:	768:iu8XyQBHenxhgicZMmvgA84Bz7PNQJO5rrmRJzNXXzEt1JgILftPy8yxoPxVfGn:i3DB+nxhglF3PBKRNNXXgt1XFLUoPGn
MD5:	F53FC566B2E9B8B5B2069AE33CFCD8AE
SHA1:	52C84B406D7DB5C8636B8C2A1B10D6748B692849
SHA-256:	1040644F840D1C47FB5ED74820D587553278E2A092A8FDC73FEF3FD626B9B83F
SHA-512:	7392B2812E0640DEF9897A83C094419A2B0855187B09ACB7018F03DA115DE7E5B7E61F116ADC65868C12AF1894032FE5650FB34C2B4DF200550204D58B827402
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8E4B8FBB49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8E4B8FAB49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 113, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6741
Entropy (8bit):	7.884383508697227
Encrypted:	false
SSDEEP:	96:mRKKVboH/cOPiUhG0uRXJopJ+WqRzsDzwQbk9LtfzN3vdsCFr1a7Z8EPR0NVNQ:GZofswG0uDukWmwk9xfz5vCEQKE29Q
MD5:	7044D7B59378EFC62204190D1DD8590C
SHA1:	05BB2704D88FE81E9813695AAC422B522B25C218
SHA-256:	915271E3CA929D8638692CEB9BEA5A8E63A125B67930AA9BFEB26D85DBF04D44
SHA-512:	B90F78F111363B6E315851B4D097899599ADF1DDEA2937B25D19113E5257DB5B2F58F88605E857D19FC21C39447DD2355886A5A3706AA12C08C31893842C7CE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...q.....o.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0A801174072068118B86D6E8981BC5D0" xmpMM:DocumentID="xmp.did:BF7D9C63926111E68BDBBF1FC0CC9715" xmpMM:InstanceID="xmp.iid:BF7D9C62926111E68BDBBF1FC0CC9715" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0A801174072068118B86D6E8981BC5D0" stRef:documentID="xmp.did:0A801174072068118B86D6E8981BC5D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>@CLr....IDATx..].U.:..r........V...B.k* T.PA..d+ T.S

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	42392
Entropy (8bit):	7.96704917362685
Encrypted:	false
SSDEEP:	768:hsAgQvw/fnNY7sS3qov6NE1X8iMJxB+UxEgY//JYfj9qt3ff9fxL2Y/wWUEjr0VA:KAboHNwkUMrJR6xHxpxrtp
MD5:	7AAEEBBE121DC2498818BE79CB2201CF
SHA1:	9A6654945B4213D9A918B1F210A1A90A6F43758A
SHA-256:	BFD4A41722CECAA81EC179A2059A51669240A70C38DF07EB2D0CD15D3812C905
SHA-512:	236703426AF1AA0089AD9D2B05CC7B270E029F2A3FE4CE2A6D99BC7EE4BF5ED67487DCF9AD0C09C97C06BCB66B3B32305942BB63438CBE86D330E6680DF713B4
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:76CA6353BBB611ECACF9E2BDF5E0E796" xmpMM:InstanceID="xmp.iid:76CA6352BBB611ECACF9E2BDF5E0E796" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	6869
Entropy (8bit):	7.870560604180493
Encrypted:	false
SSDEEP:	96:Zsft2nkutvCtV75XLFKH9WXWIFuZ0+M0TQfkpKEzJ0NgZBv+:5v6VJLcdWLFy0+MNkpKOJ0NgZJ+
MD5:	323DB8A56F127C0167021763C7AE71C6
SHA1:	E2ED4222772183CF26F9531D8DF73722094F3140
SHA-256:	D4E2EC40F57076AAC4DE29A5393CD2FCD8FA4AF319146E2E7C4AFE57127B1C63
SHA-512:	1B1B6350F7661C5955BCA83FC48B7BB3C01F14E09941397935373982817E8BD27E96078B4BEEB3AAA415C5E321B49C23B70E1B36996482F5F5BA5B544A2C1A73
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest06.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1DAFFDE2F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1DAFFDE1F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 62, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3999
Entropy (8bit):	7.797466967883531
Encrypted:	false
SSDEEP:	96:bYR2lHI8hQrDCp32eZhpNrLp+rFYCiV0xXNDt6eX:8sEOFfZhvrd+Ra4dDt6eX
MD5:	F1F00797BA02F9228F392BA87F10741B
SHA1:	08CD05CD03826E6C457E897AD586DA9D6AE90C56
SHA-256:	E4FEA19D8B8178D73EE961232F27BD6DCFD55E50D9355080BD718794E7277EDF
SHA-512:	EF0F65FBB6D520ADA62414B581B4C550D190E7F4E69FE2281510A51F88189CF91CD3800D519045528EF8B9529BFE6F8669775A89029A29DA3DAA698CE4B43418
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...>......_m(....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:79947F8B05BB11EA8A8B9212573900BD" xmpMM:DocumentID="xmp.did:79947F8C05BB11EA8A8B9212573900BD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:79947F8905BB11EA8A8B9212573900BD" stRef:documentID="xmp.did:79947F8A05BB11EA8A8B9212573900BD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx....TW.......e.............4..F.KJ.Eb....VM...*...51.Q.6..b.&.e...m.J........"lY~.......7.=.s...7..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	6.23240095553804
Encrypted:	false
SSDEEP:	48:B/6fOvnqknA9W2wyy+vjc/cHJ3Q3+1HxBO:BSeqknmW1yRvjc/61H3O
MD5:	386DCAD4E5E92378FD6413F460A2A870
SHA1:	05861BC1C03046907E7B5BEE384A3CE1BFB1FF9C
SHA-256:	65E991B785598F3362652BCC26570DE09BED7D88231FB6A51070499461DA61EA
SHA-512:	F1E51D5A6CB076FD30CCF6822C3B49F5C82C5B6AE3C1708384FA024FBBB0E07D4AFBF989867E4B77CD103CF2BB64B8FBFF1D9B75995CB4413EC4118B36FCCD0D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:5818A955904711E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:c17dd201-12cc-f846-9073-46faa3c78a27" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2020-03-17T10:04:29+09:00" xmp:ModifyDate="2022-03-07T12:35:23+09:00" xmp:MetadataDate="2022

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/705351937?random=1730142932347&cv=11&fst=1730142932347&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2Fcontact%2Fother%2F&ref=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E3%81%9D%E3%81%AE%E4%BB%96%E3%81%AE%E3%81%8A%E5%95%8F%E3%81%84%E5%90%88%E3%82%8F%E3%81%9B%20%7C%20%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19504
Entropy (8bit):	7.8938332057719
Encrypted:	false
SSDEEP:	384:UmnPIHYA2eIsDg9G2z+VKXJvVEil4x4KLybrtxdchW:FdA2Rbztddl2lcrK0
MD5:	DC3E38504BB860E1F180609D55434E35
SHA1:	5E4DD1946F2A27E20E42DBC97CC16BD2F66E88CB
SHA-256:	C419F214CBF79FABDC3E5B49B9E41070E4EBEC974B17FD3BC4121FD68F0B9B7E
SHA-512:	B6C7602D862E33423C8AF0A013DF0B75D58502379DC1338423BE14FBEA062710EEFACADA01B44AF3D5B2715B9F25026C9B4DBD7CD6C7498F9B73EEA0E814086D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2020-09-25T16:07:46+09:00" xmp:ModifyDate="2022-03-07T17:46:38+09:00" xmp:MetadataDate="2022-03-07T17:46:38+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:63579fbd-4e75-0d47-8f6c-ce6f4f64d4f2" xmpMM:DocumentID="adobe:docid:photoshop:fb08caf7-a0d8-7241-a9c5-5c72a0bba6bf"

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	88007
Entropy (8bit):	7.9772305540254544
Encrypted:	false
SSDEEP:	1536:0LLBrV7OmiBL/922dOO44Fhz8OmwgGoTvuNd42jdTpUfLMKhKVGlkjNBNUMjBkhS:AB57OgW44FuO/gGO+tjVLKhK6koM2s1
MD5:	0212C9980FDC17243C018ECEA0063D7E
SHA1:	3B504B3FFA25A5E67C69B0866EF97CD7AFCCB37B
SHA-256:	EDED76D654AB4C7C6F1D1E0FCD918206B0E447402E6A52886408149D89E4DE79
SHA-512:	CC125604F5D6DFEBB7BB060105D6F94EA37E7EE48C59667483FE6E8745F70F8E9485533AC6E6190A5CC19AFA79D47CAF553E3AAF0F4239B9FB5DC41AF4C708E0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:A19D7CC7BBB611ECA435ACA4446C916C" xmpMM:InstanceID="xmp.iid:A19D7CC6BBB611ECA435ACA4446C916C" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	9698
Entropy (8bit):	7.91758529261866
Encrypted:	false
SSDEEP:	192:+4YX76foiZckjHbvTKl01Wm4/z4GsLncLP2Q+2RLEi:zdoitiencTPRF
MD5:	DBDAAE2E786EE2A7A5619BA371939031
SHA1:	7EE94838066FC9E61291ADA397712B8BF7B648D0
SHA-256:	1301C7BE65C32D4378DCBD0A027121BE38F941B4567EC72A8FE1773A3F8ED35E
SHA-512:	9462A56682A72A2C199E82A1696F96C9D4FF214685EAEBD588F3E20A70990093738DEACCE4B461E4020E9652B8FC5C27D003880FCC04EA4FF1DC80257149B48A
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:640F0C71F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:640F0C70F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	5693
Entropy (8bit):	7.833352449116137
Encrypted:	false
SSDEEP:	96:ZIftbUom2F+ncwW4F1718M96T/L8P9ZeMqxT55YvttrvzZgQ:nomLc3kGH/I9YH55YVtrvb
MD5:	D50865270A88F2CC00A9C349C2F88DC5
SHA1:	59E30D2E33F6D10793ED7E2745C0AAC2BA495493
SHA-256:	E298893DB7F10A4BBF85177C66B0E9D4D412E7E5453A40937F89EB9EE4AD2605
SHA-512:	2ADA8A4C485B46E92F2032A6FEFDC15B7BC26F478B756435D8CB67ECB1879108DA9DEC2A84D1766F22031C73829DB4F5D2AA50CB4D091389EFA20BA5618DB25B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_con02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:8461ECB2F6C511ECAE29EC13862F33CB" xmpMM:InstanceID="xmp.iid:8461ECB1F6C511ECAE29EC13862F33CB" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	2064
Entropy (8bit):	4.558766730960899
Encrypted:	false
SSDEEP:	24:XD75OxcUbnwG4eb5+xcUbnwG4ek9lcDnwGldTCwG9egBJOCHbNiCoQgdTC7I:T7/cz4kjcz4XMbzldTCZdindTC8
MD5:	879FF68832F4957B519BD859C62A7683
SHA1:	E00D01E3B878914A7F323BAEA84DFF555226C182
SHA-256:	A15FC2A4EC10DFB6983272DF81131A25CE6A63D15ACF15862ECE259CDEA8EC08
SHA-512:	B0F9CECBDB042AE02194565D138530C11AB7F99151D4E3D37A4025C762B9ECDB86798044DE7340C646E2BB078E572013B30D7CC80FFCBDBF419F0EDF7185F06B
Malicious:	false
Reputation:	low
Preview:	....//slider accordion..document.addEventListener("DOMContentLoaded", function (e) {.... $('#js_slider_mv').slick({.. fade : true,.. arrows : false,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : true,.. autoplay : true,.. pauseOnHover: false,.. pauseOnFocus: false,.. lazyLoad: 'ondemand',.. customPaging: function(slick, index){.. return '';.. }.. });.. $('#js_slider_mv_sp').slick({.. fade : true,.. arrows : false,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : true,.. autoplay : true,.. pauseOnHover: false,.. pauseOnFocus: false,.. lazyLoad: 'ondemand',.. customPaging: function(slick, index){.. return '';.. }.. });.... $('#js_slider_pickup').slick({.. fade : false,.. arrows : true,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : false,.. autoplay : tr

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	10681
Entropy (8bit):	7.925787836484126
Encrypted:	false
SSDEEP:	192:bHVHWQ8K/hajLraTJrQ46+7GI6xTGr+W207nU2mP:VWB4hajPa9KgGI6x6320LU2s
MD5:	E94535B714A11DFD38B8F32F2D871B0D
SHA1:	3942D7C2C2D9DCA686C6D3221854380B0132FB98
SHA-256:	4E309EABFAAADB5A2801D245F4D4F5886147F91D8D1196D72ECD91E140E1465F
SHA-512:	FDE3741CE26CE39396F56A04FDC1323EC37B2B53DB4C66E5B516E01F502337A85AB7723AC3D8B296E7329CADC5E100E5AEABF558DB51C1D000637C16847650A2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61B19488F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61B19487F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 23, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1817
Entropy (8bit):	7.3013586688121155
Encrypted:	false
SSDEEP:	48:Wdzo7FDNn2m+PJMqvJ3L1ARncCsvVrtZkZTPUVoGTr/GzWc:yo7F52NMO1ARnEVfETPUaGmac
MD5:	4C2045FC12745E67AC2652D2A0BE5E4E
SHA1:	A6A550BF070944ED03D9210D351B37D022FBA077
SHA-256:	38596B43AC596A0A566A854D5B50FC78A5E8429B00C277524CA68BCAC67B3322
SHA-512:	B4EEC9EEF9EE3E04214422FF079CD53B2A3256968F7E31379203902D23DDFF8F70B6B77037A9237959463031FD9E624645E7C3490DFE26985AFF723689AE0AE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:52B996BB5CF511E9A38BAD8F5173AB11" xmpMM:DocumentID="xmp.did:52B996BC5CF511E9A38BAD8F5173AB11"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:52B996B95CF511E9A38BAD8F5173AB11" stRef:documentID="xmp.did:52B996BA5CF511E9A38BAD8F5173AB11"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>L;......IDATx..Mh.A..7Z.A1.....A.=..K..A..A<..x.<..uPK.K+(..D.MO.,.E..Wz.^.......((*.....a;...nl...M&.}.;o.{3i.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7500
Entropy (8bit):	7.879653498701227
Encrypted:	false
SSDEEP:	96:Z2ftcpZj4runzMIxCIXoV1g40hcxqyfJauv78i2zM5VPRWUz5cb7N+vc8heUY93:fZRnzMI4I264zgU/Ii/7PkUG+5q9
MD5:	9BB783E04E69A811E964923381DD397E
SHA1:	9D75B2CE0BE0D824D280D10A4EC95EFDBDD85A2C
SHA-256:	8FD165C061B666E33182B17C0BE6AFCECA13445D741820906A76C9045968FE30
SHA-512:	DFDB82CBC22FD6E69F86622223DB693441432D4223F56AEB6A8BACF4F50B6D2C01F44A71E8DB3E0F9829528E0DC7B688091B5808DC852657B9274FA26D2FCE4F
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest05.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1DA3AA4CF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1DA3AA4BF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1758
Entropy (8bit):	6.4857477918835444
Encrypted:	false
SSDEEP:	48:b/6iO4knA9WItLw/c0eTpTVCTYj3eT5Hx2s6XzijFXSC:bSsknmWIpw/8TpTgTYCT5HYsX
MD5:	0FA8E548D42F5E35D379D6398569AFEA
SHA1:	8BCE98AF3E4BCA14EF5660284C69D248AD12DC9B
SHA-256:	82C0CA3731E964D66D38BC608F29E8C7178916133028063003AAAD8EC30395A2
SHA-512:	BD20F13BB504B24061DFE257799ABE0F897FA2E04618486681A928B92BEC9F9090B04EA0A1C5C68D2CF7AEAE7283F073DBA07EF62ED21D3FE9AD448D8532B640
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/header/restaurant.png
Preview:	.PNG........IHDR................a....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2022-03-10T10:31:17+09:00" xmp:ModifyDate="2022-03-10T10:32:33+09:00" xmp:MetadataDate="2022-03-10T10:32:33+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:39bda0d1-f5fa-c442-9848-73b25ad9411a" xmpMM:DocumentID="xmp.did:39bda0d1-f5fa-c442-9848-73b25ad9411a" xmpMM:Original

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	290635
Entropy (8bit):	5.621550743841449
Encrypted:	false
SSDEEP:	6144:lS4a/0HfP9pmwXpoJXGhLMZw1vyW3cB+22d:cBsHf/jOG
MD5:	8BEF7B4260CB8A5CEC3EBB30D1A3BCA9
SHA1:	72A484DFF029029AD473DB42A3F368FBBA3D108F
SHA-256:	A224451607E2E17860A5A17FC44E18C40A1D91C19E4A6C1FB6ABFFE6562AEF0D
SHA-512:	5272387D37C7793471DC783D9C4A4CDC5A38499E23D4C74D2D7A16FF92086EDC30F1229B4CA2321DCEBD999880C64BDC0E66CBDBF59014F2C6FAB96A594C009A
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","yamanoue\\-hotel\\.co\\.jp"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 306x182, components 3
Category:	downloaded
Size (bytes):	62189
Entropy (8bit):	7.93678983143026
Encrypted:	false
SSDEEP:	1536:0uaXaynoJ7OVkYjZPg7n8n+BP7B2xSrm8jrvr:ZaXaynXVkCLKQxSrmqvr
MD5:	8CF0DFF01C0819FC9EA2F223E4EE3B42
SHA1:	CC9205CFB19037BE90A5BCD9F1EBD6A19A107DCD
SHA-256:	79A990BEF0C715B207FBC2CF599F365A8F6AE3F5FCBDC61EC4B77211A827542D
SHA-512:	0DAA79BBEDBDBAC25DEC48C17F47A7F50C775B1D8BB5EB667B7FC0ACA4A3DD6D923771750552D97F01D8B5EC98222161BDF99E756015FBFC85389B862F3A213D
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020230314111356_DUO8.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..p..S(b3..q....a.....U.M.P..$.B.R......b..~i...9G........^_5....ay.2..B..H.O)P...4...;..1.Df.]$...1..@.b.u<S4..U.BU....h>.j....{.......t]........b.N..`.0...r(..<...{/.....r..x$...BP.4....5b..V.$.X7..!.Sw.7(.#i.W..\|.D...!U.A.-..(.d..X.A1......)..ilF....."y.x..<....#C.........c.^F..m.$Ky.g.....Q...c.b.....eH..JF.T}..d..EO4D.a..y............W..\..d;+<S*...a.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	4715
Entropy (8bit):	4.8667914881395085
Encrypted:	false
SSDEEP:	96:/n7K/KKKfhNWmKJG2+X6GghNMXqGqyYWK06kghNvQqyS25XPDs2y3NR1PDs2y3tk:/27me9+/qGqy3UQqy3Bly9/ly5H9S
MD5:	967F32C2382DF5D99F7DE9FDF944BE36
SHA1:	87F2A8BAA385604AC8ABD44ECBD12FC0584DA165
SHA-256:	A7465606A04101262FD14E13C67FA3F99B4E0F6F9DB9B43437575BC87F7AABBC
SHA-512:	E9EDB83451AB8FE2865928A7BF8C36BBFF6B5B30F5D55AE4BC53C6F4A262C61420DF607752AE707EA2D08858B54FBD07858242CB5AC1B5B815590A5809867EC2
Malicious:	false
Reputation:	low
Preview:	$(window).bind("scroll", function() {. scrollHeight = $(document).height();. scrollPosition = $(window).height() + $(window).scrollTop();. if ( (scrollHeight - scrollPosition) / scrollHeight <= 0.03) {. $('#header').fadeOut();. $('.con_snav').fadeOut();. } else {. $('#header').fadeIn();. $('.con_snav').fadeIn();. }.});..// ---------------------------------------------------.// fixnav.// ---------------------------------------------------.$(function() {. var fixnav = $('#gnav_fixed');. fixnav.hide();. //......100........... $(window).scroll(function () {. if ($(this).scrollTop() > 600) {. //......... fixnav.fadeIn();. } else {. //.......... fixnav.fadeOut();. }. });.});..// ---------------------------------------------------.// Image hover opacity.// ---------------------------------------------------..$(func

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	9131
Entropy (8bit):	7.917990838707486
Encrypted:	false
SSDEEP:	192:xZTo6uY+w4ZNST/5yzgjUK3aEEnGNWwr6:xZE6P+BG/5yEjUKqEEnGNWwO
MD5:	CBC2BBBA77139901DAAFF75D35C3839A
SHA1:	4F3B2E93929821CC912723212E45BDC9A148FF0F
SHA-256:	9F9B318CA26C16F4F175BF906AAE295170695B0BB294D3706801D694F06180F5
SHA-512:	E2E33F9CEFAB0F7FA13FCD1FEE16AB0047DDB9BFE1B9E8EBF119C0B41EC84CA26C38453A1556C2CC1F2ED1F99F7DFC95B2FE84650C0E1C3655862D1FDBBA40B5
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest07.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E471F80F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E471F7FF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 450x279, components 3
Category:	dropped
Size (bytes):	94305
Entropy (8bit):	7.965505073910703
Encrypted:	false
SSDEEP:	1536:cA1Dp+0l5To9Fb/yo0SOwCXn2ydlqcr56v+pc9l7UpbGN1mx2JA5h2X3EWttOApH:dd+0GyRxwCHdltczkx2AMXUWX1S2+2Hp
MD5:	4A78D393658244ABEE0BED45A912CCE7
SHA1:	0A1D5310EEC960AAF699BFC97BC108B8EE45D667
SHA-256:	7128EF0C57A62F90145B1D9CC0E9F8870AB94F29C4D4A821A163DB4CE24E69CD
SHA-512:	F6CFD7D6C10A454190F772BB282C16E3DCF494F1A17D3ABDB11FED1E861A78AAA78D5F945E723E2696A50CF153CEF2E537F32C3C3B6F4DB5AFD8A6F228FDB312
Malicious:	false
Reputation:	low
Preview:	.............................................................................................................................................9....Adobe.d...................................................................................................{.............!.."1..AQ.aq.#2B....3R..$Tb.....%&'()456789:CDEFGHIJSUVWXYZcdefghijrstuvwxyz.......................................................................................u............1..!A"Q.2aq.....BR..#r.....%34Sb..........$&'()56789:CDEFGHIJTUVWXYZcdefghijstuvwxyz.................................................................................?.7.......rJr#. 4..@K.....''.]f.3..F..t..jR{..!..@DPO.2<IGN'.H)P..3...GR.?)..N.8:.x.i.A8s...u...Vn.e+.pde....1......O...u#.}..Xo.u..:..P...\H3.!EKX.J..JFr..~0.MJ.]Wv3.}..J.\ur(J.YPG!...E}.q...."B.b..S.....A.8..R[...V.g..tH.E.S.X..#T.......t:.g..).)q.4....R8-$)...yt...t..s+....._~.n.v..U...e.xl.*.Rv..TZ...ckD..M.3..~......e..BR[X.......SbtQ.K&..y..V.l..Y;.yT/;..O.jH.HUE.T..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	dropped
Size (bytes):	66318
Entropy (8bit):	7.983725031551425
Encrypted:	false
SSDEEP:	1536:v/hrp7ioMh3JvqGWMCSvFZHlFQNiSeIiO34AbYUw:Xh5i9ZBq1MfvFZ7SFiO34AbNw
MD5:	D2DC58EEFEC314649C0A0305ECA19B67
SHA1:	87BE5CC9F6E6E409BF05A87B70E03C1DB7A35D49
SHA-256:	E4709B69A1F9E5E2A47E921CAB6E850E448F32EA30E3917B7E7652FED3C5A911
SHA-512:	1F189E27C52B817A78E72222ACF66A789995194AC5A3C84DE4DED5451786E14C00A1316F60943BBB77A11F389A6752F5ADF75E98E91164D79CBFBBCD13D8CCF0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69778B14B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69778B13B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11553
Entropy (8bit):	7.939764236830006
Encrypted:	false
SSDEEP:	192:hZsfB2bhP+3Zx7O1oVpgnHIjL5psLKSJ7KAyZ6ypC4SUvbAQKPJgi8asqNU:hZs4bhP+3YiiHIjTuh+AhShbAYiyqNU
MD5:	2099D0E924138881F2118A9FE8626B34
SHA1:	CAED0D90B3DD2385DB7C63474B7467294AF101B5
SHA-256:	C795651E21A136AE170AFBFDA29D7CD704CD5C0481F5BAF1DC1BDC1EAD950E23
SHA-512:	DC269543EE2082E118B07A3C049DA5FBBCBB1940CC13A09D427A4CB52B4B6FEF553E69CDB8E6E2BF03F075FC27758376E4A4F1EFCCB6EB264AE7F6942114F690
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...n............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:C173E33B904911E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:C173E33A904911E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Cu.....PLTE........................................

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1675
Entropy (8bit):	7.252419443667501
Encrypted:	false
SSDEEP:	24:n1hmYaWwjx82lY2T3XV8Fa0qyJ3VKx2vGZ6oEnq7uo9oDx7HgAh9Cp6wPf:1MYLNn2DqFFRJ3c4vTD8ol7AATCn
MD5:	3384CB31CC9A7703EC0621A21D0412CA
SHA1:	2E15F6FE1F465DA66BB918525FBD0649222B1E8A
SHA-256:	E0C523C7CBCAB1C466FE770CEE494A883E9DEF549313A5737CC6921D42952CCF
SHA-512:	D1EF42633CD67E465B87CB887C60732F0BDA6806691F6AC2E5600052014A615CC2CE89370E09E456CED33D01B8A6A860977FFCE49B1C06B401968910FCDD45AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D20273F7A6D911EAA311A9FBD4C65767" xmpMM:DocumentID="xmp.did:D20273F8A6D911EAA311A9FBD4C65767"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D20273F5A6D911EAA311A9FBD4C65767" stRef:documentID="xmp.did:D20273F6A6D911EAA311A9FBD4C65767"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..].MQ...f\&..a>.1J.H.'.!....".....)O..<.AM.%..D.(.EJ>Bb..d...a.._..Zm{..O..Y...:{...k....J.Rf

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4979), with no line terminators
Category:	downloaded
Size (bytes):	4979
Entropy (8bit):	5.86927488845883
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUkq/RFUHO:1DY0hf1bT47OIqWb1Jq/aO
MD5:	B326EB343D3897B86D2FF8C9F38A9598
SHA1:	C2ADA50C3A7D78D3E09E02DC5703AB6772C442AF
SHA-256:	7E891D59778A3553D82318831668C740FA94B158BA3450F4908CFB1F1AEF9F00
SHA-512:	5DD0F88DBD56824FCD071372633ACE59ECD719DAD73274D154E5FEC82F652B9D90BD88382627B5592941FC854CC63CF447FC227B3E7CFE5A4AADE58858C272AD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/705351937/?random=1730142932347&cv=11&fst=1730142932347&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2Fcontact%2Fother%2F&ref=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E3%81%9D%E3%81%AE%E4%BB%96%E3%81%AE%E3%81%8A%E5%95%8F%E3%81%84%E5%90%88%E3%82%8F%E3%81%9B%20%7C%20%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	15246
Entropy (8bit):	7.92868383384673
Encrypted:	false
SSDEEP:	384:qIRvo4Exvkme0HPGArbDohkt6QpS1FfMMln1GJ4D:qCAdvkme0vGwQyZpWFEMln1zD
MD5:	F8B58415AD03B253DBF8EAF1FD6FC223
SHA1:	28554DF47EB3888F71C995CFD221BEF2305C1A90
SHA-256:	290621605D0CE06AA6658FD6D71D67899B79ED0960C2D10AA34264D69534EC45
SHA-512:	BE5B2A2F04FAAE7A67D265F0763D9D3E7CAA1E6EB9D5942F002E80E9CF169664FB658591770F674D1A6A0391692C13A9D069FB6850A1BF19B1D6542AB9E4E78C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest12.jpg
Preview:	..................................................................................................................................................Adobe.d...........P......................................................................................................!.."1..Q.#Aaq.....$2C.%&'()3456789:BDEFGHIJRSTUVWXYZbcdefghijrstuvwxyz..........................................................................................y.............!1.AQa...".#Rq........$23Bbr.............%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.................................................................................?.V....uZ.....jo?..<1..dI.Q.....s.".S@..s..k25.....j..S..IQ.!.P.:RT..PI....o.:`..P.U.l....-.)p....d.2...E.....4.R....i.=.....-...Ql..@X..S.\.....9..l.1.k6n.b.f...!U..4.lk.1.@....r....6B>.H.gt.....t).j%<S.+..K..4.T..T..H:I.i.@....1.....f..J+.GnQ*e.4....p.V$...g...J.po.!h...+MT.\|...I4.H..F...SSfk.=5.\..U.m6..0...<.(.&{..1...am.t.r.vu..FO.'...7J.v.g.\|;RR...C...&.6..FD.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/705351937?random=1730142871314&cv=11&fst=1730142871314&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	176022
Entropy (8bit):	7.9502620953716265
Encrypted:	false
SSDEEP:	3072:ot8ku8mP3b9SHjcPDyUgbiGWuIPQcQbo2b5wtopJyM0RA8KDHOLe+DI7iD6M:ot8pT5SHjceAQa2SKp85kuLq7+
MD5:	B3932612D321FECBCF49AFB23034EC01
SHA1:	8AB3953CF591C8C224ADB0D1E1F2C0B892004707
SHA-256:	A01DBD1963458029ED970905CDDE36AA3B8D70E5841A0A030386336D0AC3BC5C
SHA-512:	45C1A461C0DD0CB1334AD9516F7C5790157028A4707AC92CE45CB57BC61F869D05695C3867CD81B06AC4D6CE3387C861BFF91C284D0EC9112DECDDE64DBC32AF
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:0004998FBBB511ECA10DE22836D11C9F" xmpMM:InstanceID="xmp.iid:0004998EBBB511ECA10DE22836D11C9F" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7682
Entropy (8bit):	7.885632779259633
Encrypted:	false
SSDEEP:	192:mKFbLdBbUxrO9tHMHr7QpSHeeyZ2dEqy0t:DXdyrOvMH3ISHhGCEP4
MD5:	180DFFD390FD898961A5A50CACA19622
SHA1:	5306DDB0367BA4633BFE577B0A7D3A64C2B9DC0C
SHA-256:	3133CB6BD746790B9A73A318D1FC12782C679B56D3EC8DDE9026204424662940
SHA-512:	7CD55B4C567EF29467D986E6446B015454D45620A02320BFD8603C28D736C9EB0BA827D548FB6FAD293A50293B984CA6BEC372BA2AEBFA7007A06B79B2811D08
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest08.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E534C2FF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E534C2EF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	6035
Entropy (8bit):	7.8516720595652725
Encrypted:	false
SSDEEP:	96:Z/fteTELmqHnyav251D8GeyesKh4dwZLqU0FrWRm4cjYkAWCvOWXTqr+cY:tLnyPbD8pbh4dqP0Fr0mDU/OWerI
MD5:	F44D466D9C3CF4173B43CD24CEC35F9E
SHA1:	C8923C80FFAC5AFA55754149352A5CF4DE522A39
SHA-256:	F8B3D573061AF4AE8B79F9BB2DC3563AD9308A7C9A3EF0CAB53A680922A9FE26
SHA-512:	7874E1DFC0CDAE7A24C67E1801CBC4F7B1BBBEF88B3884602A85B698EEA15309656A2175F5489713B9AF12F00B678A48CBAC5792CF6328BBF6A245EB315AE508
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBE3FC3AF6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBE3FC39F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 38, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1229
Entropy (8bit):	6.4643496694915425
Encrypted:	false
SSDEEP:	24:w1hpunQWwh82lYSKw1tEVXT34yJ3Vl6GxYuMF/UIJXr7dUFGw+:OitvnL2ENfJ3ScQOIhdUb+
MD5:	08BFECDB4D8B019442AD831117947FC6
SHA1:	CABF1BBEBE38DAB1A27482AEFE522C15E277C3D5
SHA-256:	2592A4A44CC037ED398A7EB2054E151EE7D87911CA594B1A62DB6691FDE51DF4
SHA-512:	B75FAB021DE91D92F62A692A523F4AC6097A82AD10D79BB06BE159E569243CF8216288744727699DAFADEA033E84590473A57771C90637FC8F6F76E6F479D668
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&.....~......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8899A37EF9206811945792B882ACB30D" xmpMM:DocumentID="xmp.did:4A354CDC991311E685D0D194E6F35847" xmpMM:InstanceID="xmp.iid:4A354CDB991311E685D0D194E6F35847" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8899A37EF9206811945792B882ACB30D" stRef:documentID="xmp.did:8899A37EF9206811945792B882ACB30D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..zZ...6PLTE8&.......]OED4(.xp...QA7...j\S.lK.......

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	downloaded
Size (bytes):	25082
Entropy (8bit):	7.969718656493191
Encrypted:	false
SSDEEP:	768:egx7juFMR1ajkoM0c+/D7ca4Y971YtN3hdugALsOXYO2Y:egBjuFMmkoM0pcaJ71Yr3XugAA6YNY
MD5:	994AFF46A6EF0BD8222AB515DDA83E44
SHA1:	8D0EE9AAF60C77DCF84D619F535CD39823C6FE37
SHA-256:	D4EBBBD511373A4222B8183494BC7BFCE459A0BC02DF01D1F56893F76BC181BD
SHA-512:	9780E287AD8BC109DD26F3DC4E9D678E2934E6589E00069A7D680074AD8A0763C71FD8594CFB6680C885EA3AD634C28F05BA1934DD9E2EDBCF8BF4A2FCE74C71
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_con01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:83422827F6C511ECAE29EC13862F33CB" xmpMM:InstanceID="xmp.iid:83422826F6C511ECAE29EC13862F33CB" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x113, components 3
Category:	dropped
Size (bytes):	18676
Entropy (8bit):	7.958818080052949
Encrypted:	false
SSDEEP:	384:GlQBFL2QZfk41XpNTzSguw3xjEk9XYLq2/r5FauOKdS:fL2QSev/SUhL96q4r5FauOKdS
MD5:	47D78FF42BC71FCF6B3E9C4CC969D752
SHA1:	28740419CD61F9028E3F03CEAB9A81591360BDCE
SHA-256:	3DAA5E19E006A17ABA7C64E9994E266AB369C54B56EE85B0CC60B48A437863FB
SHA-512:	268C447A04C9E567C3FEBD59F4EA5E0EDD8AA41A7829898D3B7DDC71BF84F736E6450DDC174BB5BA73B21BBE863833FB30446D3891247C6471686248B5D4D668
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D729FAB0B4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D729FAAFB4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	286
Entropy (8bit):	4.5736724285130395
Encrypted:	false
SSDEEP:	3:5RFKtK9jMJuWOMJb+xsHfYEgFWHfpLg/6GWpe6z7eZAkbBWHMePWx/k76YLGVn:PI/nb+ugE4VCGsGcnWxsGYyV
MD5:	5FC861F493F9461ACFD948B0B8455B54
SHA1:	D682531F41AA0C94764FD0C3CE500713E39DD2FE
SHA-256:	DDF9C679E6E2DDD0E15C2A94B87302D82C6ED2859462C13FBEC6E5298CA55BA8
SHA-512:	5865631C3AA2A732CCB27B210CD5031E3C00FFE28BCF75EB4AD1C4FD7A8763290CED73D2720D8559C795A58C7C62B288D1607E8DD689E2C1532AE6B24AD57F41
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/import.css
Preview:	@charset "utf-8";./* Filename.import.css */..@import url("reset.css");.@import url("default.css");.@import url("layout.css");.@import url("header.css");.@import url("footer.css");.@import url("sidebar.css");.@import url("class.css");.@import url("parts.css");.@import url("form.css");

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 20x17, components 3
Category:	dropped
Size (bytes):	1487
Entropy (8bit):	6.48776193551701
Encrypted:	false
SSDEEP:	24:PK1h/4IpWwh82lYSKwYTNadCQVJCCvT3fyJ3VPYB8Gs74/tdo2C7WtTUw6/Kt8:gVFcvnLIlO+eJ3c88Ci2hKO
MD5:	7A25098F451B305D3A5CBC05F526F0E4
SHA1:	8B8A115EEEBA335B0FAC81189C6D4850FB6BA6B3
SHA-256:	E5783F17C674C7158B9156DD2367216D49D1CBBC9C9826C06090E0ABEAEB1245
SHA-512:	BD92106DCDEA5B8056D54CA7D80873283125FADB644BBCFE05FB922720041A67B54FBEE2163EBF7F0E24D00F56D2967C9386918BF133A0EBC418EAEA1807D3D5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:7CD047F9B49C11EC8951DDE29C48E156" xmpMM:InstanceID="xmp.iid:7CD047F8B49C11EC8951DDE29C48E156" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1837
Entropy (8bit):	7.774373768478249
Encrypted:	false
SSDEEP:	48:38WooJxwsodkf1IR5hcaeosRrq1/fHV9X:phJxw1dO+iaeoe+1/fH7X
MD5:	770614FFD3F4ADD804BCBE8BFE257DA4
SHA1:	FAF4C7B47E191088A1E2216D143C1FD019BC00BB
SHA-256:	CB536C5181A6188E11C4034F1AEC0DCAB99671EB1E9E4B5D4B2FBEC9BB4501DE
SHA-512:	7F3E06885591F7CE781AB8292760457136C6F789430A9AAC839DDCB03F6314783F7FCB4C07B18E54214789FF1717C226172B449BAD0E338B1FE0C627AC7113EE
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/brn_next.png
Preview:	.PNG........IHDR...<...<.....:..r...KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:....IDATh..]L.W...J.H.O...Q.3..4Lp#. 3dfd..T..e.p..1.,1c.l.....2.....F.Y\.16F....j.-k"AQ.)..d....8....~.-...%.y....{.{.\...H...<`......./....}.O`.....<..T....R`1B6..q\.i;p..K..PN8.H.....?\.........p2..,.7. ..~'..P.....?.h....8..E(.@...M....s<h.#.B....%.n..........5@J.yI.....,..Y.Z..4...~.....j.A.....s.......V..03d..C...+.p&.{.."...O....+ed.!V"....p".>;..B.x.KXO..*. ....d..D..(............4..t....NF....l6[..`...i/'...H.z....7n.x...+_.............n..p....]j.iS]ww.sYYYo;.N...R..7...Q.K....l..7o......."...R.........m........N........K".t..g.~.c.....l..p..pD.6....{v1..9s...;w......F..o..R.$..o

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	3.8817346736820046
Encrypted:	false
SSDEEP:	24:HKCM6ScUqBdQ6VX1SxAGR1Yk3nC/w63Bc4K1:U0UqBPXbgF3sG
MD5:	5E925632B452AB8FDFF286C4927DF7F8
SHA1:	F713506B1C5F85C31C5A725A1F53E9482CA0E685
SHA-256:	4ECEAD226F4AB79D1D9D0E48D27D0EF1B01A08B12444AFFF74AC64D811B290D2
SHA-512:	CB22FCD57B9EF13C3F159B176735C035ECA9AA23C9B263C8B1816E2C166EBBA37692B007CCE8208AD98CE20BF1DDB3F637886C93C4C0C7B9A9A28744BC456069
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/layout.css
Preview:	@charset "utf-8";./* Filename.layout.css /.../ :::::::::::::::::::::::::::::::::::..WRAPPER.::::::::::::::::::::::::::::::::::: /...cnt-wrap{..background:#FFF;..padding: 0 15px;.}...cnt-wrap-inner{.}../ :::::::::::::::::::::::::::::::::::..SECTION.::::::::::::::::::::::::::::::::::: /...section{..padding:0 10px :30px;.}../ :::::::::::::::::::::::::::::::::::..HEADER.::::::::::::::::::::::::::::::::::: /..#header{.}../ :::::::::::::::::::::::::::::::::::..CONTAINER.::::::::::::::::::::::::::::::::::: /..#container{.}../ :::: SIDEBAR :::: /..#sidebar{.}../ :::::::::::::::::::::::::::::::::::..FOOTER.::::::::::::::::::::::::::::::::::: /..#footer{.}../ -----------------------------------------..PC. . .......961px....----------------------------------------- /.@media only screen and (min-width: 960px) {../ :::::::::::::::::::::::::::::::::::..WRAPPER.::::::::::::::::::::::::::::::::::: */...cnt-wrap{.}...cnt-wrap-inner{..width:960px;..margin:0 auto;.}.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	downloaded
Size (bytes):	17826
Entropy (8bit):	7.958394491825932
Encrypted:	false
SSDEEP:	384:Igop1ebyU1ahuPHBRvUFEd+SEhPGz6eMoj4664Sz5IemRlnkJMC:Rop1en1Iuf7vUu8PGXj4PVz5kTkN
MD5:	7D6566E7BB230FCC4DABAA77A6EEE993
SHA1:	55456B36A64A78664C4FC1FCCC6FB31BB74E1D9E
SHA-256:	218489825185ACCE6BFD3B0D38256FDEFDA8B01DDA82A0914F6C38A3A346ED18
SHA-512:	01C35C485F8FA6FEFE08ECFBC8F371308B65BF0B553C4D04CD4CCCDF98BBABF349CE62526B68F00193613317DC05D1E17504BC9308AF4A951982D32AF306A37D
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CAEEF687F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CAEEF686F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	4715
Entropy (8bit):	4.8667914881395085
Encrypted:	false
SSDEEP:	96:/n7K/KKKfhNWmKJG2+X6GghNMXqGqyYWK06kghNvQqyS25XPDs2y3NR1PDs2y3tk:/27me9+/qGqy3UQqy3Bly9/ly5H9S
MD5:	967F32C2382DF5D99F7DE9FDF944BE36
SHA1:	87F2A8BAA385604AC8ABD44ECBD12FC0584DA165
SHA-256:	A7465606A04101262FD14E13C67FA3F99B4E0F6F9DB9B43437575BC87F7AABBC
SHA-512:	E9EDB83451AB8FE2865928A7BF8C36BBFF6B5B30F5D55AE4BC53C6F4A262C61420DF607752AE707EA2D08858B54FBD07858242CB5AC1B5B815590A5809867EC2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/jquery.common2.js
Preview:	$(window).bind("scroll", function() {. scrollHeight = $(document).height();. scrollPosition = $(window).height() + $(window).scrollTop();. if ( (scrollHeight - scrollPosition) / scrollHeight <= 0.03) {. $('#header').fadeOut();. $('.con_snav').fadeOut();. } else {. $('#header').fadeIn();. $('.con_snav').fadeIn();. }.});..// ---------------------------------------------------.// fixnav.// ---------------------------------------------------.$(function() {. var fixnav = $('#gnav_fixed');. fixnav.hide();. //......100........... $(window).scroll(function () {. if ($(this).scrollTop() > 600) {. //......... fixnav.fadeIn();. } else {. //.......... fixnav.fadeOut();. }. });.});..// ---------------------------------------------------.// Image hover opacity.// ---------------------------------------------------..$(func

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	dropped
Size (bytes):	43862
Entropy (8bit):	7.979277994081508
Encrypted:	false
SSDEEP:	768:2afjZcN/sYvDFBGGonOl7ziSPPwgSn+Fs2isvsicEkd9B2Hy/SmwpYkTexnRy9+W:tjZcN0YbvGGH1PjSE1UiSd9B3/SmcBoM
MD5:	40EEEEE8B0AAD3ECA46F205E27F92157
SHA1:	6910AC3C8446712564BA2654B7789548FFEC1821
SHA-256:	75FDFD7A03E293DB7E7BE2F7744CCF2706170593FBC19D800269D1971615954A
SHA-512:	CDAE85C0AEFF40F498A93D1043AFF3CC8FF927C30A56D3299800D43E3B1A5D3827F9B58C08ECB41D5D49DA2831257D7B5E556A8B14A8B4308B5ACAB425DEB6B0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8EF86F9B49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8EF86F8B49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-QJ6BW8XGJP&gacid=42326441.1730142869&gtm=45je4ao0v9134487267za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848&z=975873594
Preview:	<html></html>

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 179, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	93867
Entropy (8bit):	7.993890004853002
Encrypted:	true
SSDEEP:	1536:OHrg60V2/CoUrccDheijyqJRuugFs86NdlFRtxo1+ilVSQdg7ZvgMA/EMUvHBiXV:eg6o2696ut867/RtxyxqtgMAcMwgV
MD5:	DB8035ED804C421333FCCCA6DA9BCB96
SHA1:	79A98984ADB34225BDFE9C513FC5997ABDACCD45
SHA-256:	E9AC50ACECCDF99E92960292DD0C3EE194F2A46930A43E2F8F3E933250F18505
SHA-512:	63289D9C46E85EB0B4806B3F18F09F92EA4BF8FA386F68E43BCE6C13FA1E1830C2CB58DCC5BEF80D73DC61E27CF1C6632058F0E21307B41D7D24964FBD8184FF
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240925111613_CiWVi.png
Preview:	.PNG........IHDR...2..........].... .IDATx.t.y.eWU...9.>..9.$.J5iIS.!=...&!.A.AZ.F...b.}.....UQD...N .D.......TH[..Ri.TRI...{.9..c\|c..../T..{......7.).v>....2 ...)%.~.I.. "..........Z..)@...A.=.V.w...T+.V.lJ..BR....Q...B.H).{E..@....$A...."..W.. wS.B-.)...I...#.T..v=.......Y..hd..k...Z.n...v.Z.3...@!...jk......=..D..\...k...........j-.....Z...V...;T..U.....3T.[..]W.P..V..{{6...s.F(.....oG...9%.R.....(}..u...T.rg...G..+.{.D\..V...~.}V.g....R..Q\.p.....br.....L-=..$A?.1.Y...(..3.V..G.:@....K.V.uP..R*r2....5..e21Y.}..7..F...I2.p}T..<..U..QU@.I.....sB.{_...e.~.2k.&PT.....Q..x..".@!(...."w...._..R.Y..m.....Y$.N....mv..c.......R.... !%@..: g......&......B".EB......C..{..\...Q..9e_......k.JeF./w#..Z.......8...g....S..L.J..n.M...dJ.j(~..5s.4jf.J.@..s.Q.'1......6.w....f$..t.VC....... . ........P.=..Z.d..~..@`.w......@E.3..;..A-@..~@r."0#Y....q.jN....\|)j.Cs%wCd.[...$$...@.{... ..@0.......V.RL6Sr.4./.w.\./n j.v}.G..D.AS..`......v)=..K.7...D..@cc2.H9.......

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	6035
Entropy (8bit):	7.8516720595652725
Encrypted:	false
SSDEEP:	96:Z/fteTELmqHnyav251D8GeyesKh4dwZLqU0FrWRm4cjYkAWCvOWXTqr+cY:tLnyPbD8pbh4dqP0Fr0mDU/OWerI
MD5:	F44D466D9C3CF4173B43CD24CEC35F9E
SHA1:	C8923C80FFAC5AFA55754149352A5CF4DE522A39
SHA-256:	F8B3D573061AF4AE8B79F9BB2DC3563AD9308A7C9A3EF0CAB53A680922A9FE26
SHA-512:	7874E1DFC0CDAE7A24C67E1801CBC4F7B1BBBEF88B3884602A85B698EEA15309656A2175F5489713B9AF12F00B678A48CBAC5792CF6328BBF6A245EB315AE508
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBE3FC3AF6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBE3FC39F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 402x112, components 3
Category:	downloaded
Size (bytes):	15507
Entropy (8bit):	7.951862559589596
Encrypted:	false
SSDEEP:	384:yVrkGm5BDbiG3ji9Py56Eyp8PoTV9d/Ptd6ebhrlGKcvGXU:A34BDbiGzE656D8Pe99PeebhrlGKcvGk
MD5:	9C6E6677930CF1DE5D77390A6C6B133F
SHA1:	3B577B5DC0A1E082F22B47137C796B50C83E47E7
SHA-256:	AE99E08B728F9DCFE15C86FF2F23D824460A605B56FBBB7C7C6274ABDF138293
SHA-512:	118E7573298269098EF2A33AD16A1AD95503A91FBA0353A3ED6A435F95908032CD7FCB34B505F03DE33170AA8824DDF094D34F0BE782A8B960E46754E312D13C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_lnk01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D70DE68FB4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D70DE68EB4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9980
Entropy (8bit):	4.27742746445385
Encrypted:	false
SSDEEP:	192:PsGDyzIFc6jEu0F90L55uSnAurlbsg+y/cs0wb/F2RQ6vNcA8i6JKmWclbAwpxMM:0lzIFc1u0FIuSZ5bsg+UpDF2RQOcAYKg
MD5:	28AD61331ACF8F9033FE9A6D9A18CEB8
SHA1:	77950BFC5F661B61C14D2C328C031763A2A4C3E1
SHA-256:	F9D79525A50E636DD8E9487071B91C7BAD3C389BC17974F2015C46B210EBB171
SHA-512:	52278A7A4A9F34DF8D775CEB6C261FFCE19EB419910214D46C475C69C2D50ECF59B4DD8FCFB96D5AAB7096F7B88E9075CA763190E758C83DB150CDF23548F280
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/jquery.matchHeight.js
Preview:	/*. jquery.matchHeight.js v0.5.2.* //brm.io/jquery-match-height/.* License: MIT./..;(function($) {. /. * internal. /.. var _previousResizeWidth = -1,. _updateTimeout = -1;.. /. * _rows. * utility function returns array of jQuery selections representing each row. * (as displayed after float wrapping applied by browser). */.. var _rows = function(elements) {. var tolerance = 1,. $elements = $(elements),. lastTop = null,. rows = [];.. // group elements by their top position. $elements.each(function(){. var $that = $(this),. top = $that.offset().top - _parse($that.css('margin-top')),. lastRow = rows.length > 0 ? rows[rows.length - 1] : null;.. if (lastRow === null) {. // first item on the row, so just push it. rows.push($that);. } else {. // if the row top is the same, add to the row

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2590
Entropy (8bit):	7.877900399361336
Encrypted:	false
SSDEEP:	48:z/6OpXztIsQMAFEG6oFc7XAiVnMZMmrZ3vLfcjBhHMsoA7UBf:zS4jtvQMAmdt83vLYhsRYUBf
MD5:	BD80AF870D4E987AD9148048DBA32FBA
SHA1:	671D5F210242552904007189E357D6DE6F960CD8
SHA-256:	66444E4E5D81F4670942249185D846544990C1EF8EB7E4327A60C69CFF30D5BD
SHA-512:	C9DE1DC61DD006F20CD1B447170DB88C4C7EAC52DE874840068390CBC54BBCE01818ABD354A300570AD36BDD25E04EB58307549A7F7A5670D9BA6A1F425E0161
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/favicon.ico
Preview:	.PNG........IHDR...0...0......`n.....pHYs.................IDATX..wXS...O...$ #...p.R.NZ...TEDq....U.`...2.=E.@...".UT6...l....%d.MnN..."E..........O...='8.!......FK..S<.......C:.f.^..L&.P:.....7....f.P....i...NO..!9'.$..,.o...........P[]mke>S].qa...t%..CE93-...{..2B.-.fA.'..n^6.....W.....i3.l...9..i.....hO....\.I.2.SnCC.;.-....lg.\|......2.y...u..'.T[]..w......CCC...B.."KK.xy..@.B..NJ4.EK..s.....w>$.......U....()..........z..[.zz...\..}Z .E..=..X.a....q.~....w.)..V.'...p...w<>..PSW.w....."ii.9...x{.(.I.ZX.......J.......?bfe=....r..K....?...)7..g.g..3.BS.....Q...++.7}..\|...W....QarR.a.c....x<1{1....g..r...\|d /7..Md._.IL.......7...........t'1.........U\|...##V.]+++..&V..P...<m...........0....p.)#5.qA.G..?.lki9`........H.'.../...j.\/7W8Q.<.P{[.. 3..R.....z.m......cyiIrR....{z....-[."..w.......k.\|O....N....8!.......Zm.ThP.!.#.mm..N..B.........^F.....q..........m.....\|o.?..*+.vrq..85!.....L.z...zS2.....url...W....k...j..>..H.a....t8v<6.j]M.{.1

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6816
Entropy (8bit):	5.166678767492449
Encrypted:	false
SSDEEP:	96:8KS9dIOwo27Hf2PpxsGPB9MwYOpJO+dnCsIVwJ0+L2uQgPdoDNR+qisBPS9/QTyM:8Nq7HpcBpxRC+69QQTyM
MD5:	762F4846BD4A16FCB436217D63ED40C3
SHA1:	A613FB888187B70461840179633284F0DD251CDD
SHA-256:	0224088EEE4417C23947E0B834BA698E7FF6AFC9FAB7790DF76A3D4A40EB4564
SHA-512:	6A2C727D80C729111651D2A2432AD495A55524F000F666BFCC5F945B4A7A5BBCEF070D1F157647865F1B051EB84892CE5D8611A5BC4B3CF8FB42B75A21A96F12
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/drawr/css/style.css
Preview:	@charset "utf-8";./* CSS Document /..@media only screen and (max-width: 959px) {..#wrapper{...overflow:hidden;..}../ Menu /...navDrawr {...background-color:#f7f1eb;...position: fixed;...width: 270px;...top: 60px;...bottom: 0;...right: -270px;...overflow: auto;...z-index: 9999;...-webkit-overflow-scrolling: touch;..}..body.menuOpen #wrapper{.../ padding-top:80px; /..}...overlay {...display: none;...background-color: rgba(0,0,0,0.6);...position: fixed;...top: 0;...bottom: 0;...left: 0;...right: 0;...z-index:1000;..}../ Header /...header {...position:relative;...height: 80px;...padding:0;..}..body.menuOpen .header{...position: fixed;...top:0;...height:600px;...width: 100%;...z-index:1000;..}../ Button */...navDrawrBtn {...text-align: right;...z-index:10003;..}...navDrawrBtn span {...position: absolute;...top: 0;...right: 0;...margin: auto;...display: block;...width: 60px;...height: 60px;...cursor: pointer;...z-index: 9999;..}...navDrawrBtn span::before {...font-family: FontAwesom

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2023:06:13 15:55:37], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	26572
Entropy (8bit):	7.511282516427247
Encrypted:	false
SSDEEP:	384:2YX8/LK5HCCMEWkdehjWsi4xYX8/LK5HCCMEWkdehjXnq0gJxiq+VHCCRWJilXeZ:2XwiCS/hasJxXwiCS/hbK8ZRWQlhd2d
MD5:	C7BC2F83FE13000D8FC08695E98E7AE3
SHA1:	598F5445AD8321563CB0912010ECB7B3EB02868A
SHA-256:	D983646F33DACA4BA9804C86E29E5FD337ECD1E3F67E6C40489B94979E41CB26
SHA-512:	3C2BDD4C04978B84942365102CB6B5F62D903C698BF33235730BC52E25E5A213635279E4568387D927F464B00AE3928ACC310069FC756CDAACAC06DE7E7C220B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest13.jpg
Preview:	......Exif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 23.5 (Windows).2023:06:13 15:55:37.........................................P..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................G...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....8....._....;jK.p.......J..FCV}yOs...H.h..j.......N.{J.r@t-..d]..+...8A9#.7...3%.N.=...>...<...z..}b...uv...4..?:.]......v.s..#8.F.T.s".....W...r.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11714
Entropy (8bit):	4.596384958761047
Encrypted:	false
SSDEEP:	192:GBGnmUjUAn0oGIMDrRbV/BgrMjH+jxr7g8FaUZeDsVrY4esO1mt8IX9XVP8mAPia:GnUiNDZ7+UsXXlVP8mLhm17
MD5:	7A3F745BF700D0A97E206D4F7170A28D
SHA1:	7DA50E46836D8BF623F0CBF33ADF8E243FCBEE15
SHA-256:	92852C91B0B884881092FC1D1B418D6636B64E42D937AE3227138C0C6D14A808
SHA-512:	F4B2250F488519EEB3A7F246B3EF14E23D35D2814852E91AF8BA90A536327062E0535972A8EE61CBCFA5A4EDF0482569B5B70214859DECBAC487DE45E5AC583B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/bgslide/jquery.bgswitcher.js
Preview:	/!. jQuery.BgSwitcher. . @version 0.4.3. * @author rewish <rewish.org@gmail.com>. * @license MIT License (https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md). * @link https://github.com/rewish/jquery-bgswitcher. */.(function($) {. 'use strict';.. var loadedImages = {},.. slice = Array.prototype.slice,. toString = Object.prototype.toString,.. corners = ['Top', 'Right', 'Bottom', 'Left'],. backgroundProperties = [. 'Attachment', 'Color', 'Image', 'Repeat',. 'Position', 'Size', 'Clip', 'Origin'. ];.. $.fn.bgswitcher = function() {. var args = arguments,. instanceKey = BgSwitcher.keys.instance;.. return this.each(function() {. var instance = $.data(this, instanceKey);.. if (!instance) {. instance = new BgSwitcher(this);. $.data(this, instanceKey, instance);. }.. instance.dispatch.apply(instance, args);. });. };.. // Backward Compatibility. $.fn.bgSwitcher = $.fn.bgsw

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.953689631986388
Encrypted:	false
SSDEEP:	3:dH0sdk1s2WgY08ObLOmpSsmqsr3ic+2m44/Y:dH0vs2WDipS5rSTn1Q
MD5:	82BC073C673C49E2AC252999D2AD3384
SHA1:	D1801E8110F7143690971917954305EA83199D43
SHA-256:	D51B9F1BBB5DB818140E3D4CEF08F262C4F164C50739EA5D637D2E25B176FA5B
SHA-512:	5FE16E5C9CD1008944382F961D05691D7A1297F1AF57DE3DA9143D11441B0BC89C41DC8B8C3693FF770A87A5FBA601F454590E7603A501ADA99B27E4F487B384
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwlifnAo0WBkbRIFDa0Fz7wSBQ1R8U9HEgUNZ4dNBhIFDVtwtJQSBQ2ABUj5EgUNRwlIaA==?alt=proto
Preview:	CkoKCw2tBc+8GgQIBxgBCgsNUfFPRxoECAcYAQoLDWeHTQYaBAgJGAEKCw1bcLSUGgQICRgBCgsNgAVI+RoECA0YAQoHDUcJSGgaAA==

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3999
Entropy (8bit):	7.797466967883531
Encrypted:	false
SSDEEP:	96:bYR2lHI8hQrDCp32eZhpNrLp+rFYCiV0xXNDt6eX:8sEOFfZhvrd+Ra4dDt6eX
MD5:	F1F00797BA02F9228F392BA87F10741B
SHA1:	08CD05CD03826E6C457E897AD586DA9D6AE90C56
SHA-256:	E4FEA19D8B8178D73EE961232F27BD6DCFD55E50D9355080BD718794E7277EDF
SHA-512:	EF0F65FBB6D520ADA62414B581B4C550D190E7F4E69FE2281510A51F88189CF91CD3800D519045528EF8B9529BFE6F8669775A89029A29DA3DAA698CE4B43418
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/ico_bldg.png
Preview:	.PNG........IHDR...F...>......_m(....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:79947F8B05BB11EA8A8B9212573900BD" xmpMM:DocumentID="xmp.did:79947F8C05BB11EA8A8B9212573900BD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:79947F8905BB11EA8A8B9212573900BD" stRef:documentID="xmp.did:79947F8A05BB11EA8A8B9212573900BD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx....TW.......e.............4..F.KJ.Eb....VM...*...51.Q.6..b.&.e...m.J........"lY~.......7.=.s...7..

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2513
Entropy (8bit):	6.949140783663541
Encrypted:	false
SSDEEP:	48:2/61O4knA9WItL0X2/c0gkD3THx2y3XYHxBcbfUkEFuCCjLJxOaq/5jZL9:2S3knmWIpR/WOHY9H30uFkjNxOZhjZL9
MD5:	7D2923512F1352CA91C939FFBBB94D9E
SHA1:	F104545BC328B7BADB3D97F74A7638B86814084F
SHA-256:	A1C814AEEF5DB770F036669AD4133780B808D0F8C93AB283C869AE476D4AEF9A
SHA-512:	DDDA487A46905EED4E1A7E84BBC95AA3C1BCC985D824FD29B0BE0FD4F87F52359BDAFC4A7495DC10E1D16FBBAD6D15A6172190F9F1E19B7F5C2DB1414C60286F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2020-09-25T16:07:46+09:00" xmp:ModifyDate="2020-09-25T16:10:41+09:00" xmp:MetadataDate="2020-09-25T16:10:41+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:c77e458f-4fec-c54f-9e09-8975ccdb759b" xmpMM:DocumentID="adobe:docid:photoshop:fb08caf7-a0d8-7241-a9c5-5c72a0bba6bf"

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	dropped
Size (bytes):	54089
Entropy (8bit):	7.9658433251050065
Encrypted:	false
SSDEEP:	1536:WNG5DgYB82lAES5+cgBpSumeM1fKg4hQGq9F:hZdljc+hSuf0D4hGP
MD5:	4FD6F7D1678B21E2BE8EDA81FC037336
SHA1:	9D47D74960D1408D0907D687A1AB6D1FAA21CCFA
SHA-256:	4A017D4134B33013E5089775E4C40382AF9BE6018713805B826BA8DC8D4E8466
SHA-512:	AF34A47FA957418004C5401BD4BA408B23C46747770FB7FF03F39170CFCF10FA2C178B2D02B1F2A5D67A6F4AE11BC3925A785334CADD11A755F10091D78EC701
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:696C2142B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:696C2141B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	10012
Entropy (8bit):	7.922166108799429
Encrypted:	false
SSDEEP:	192:Xm/gf3KLeRAoYPCbIDlSykppk0z56AfXOsQtRg/jQsYybm6c8:2ofAeZuuKMk0z56AGsQzejQXyy6c8
MD5:	6123A56ED6DFF2EEC233ABDEF691BB70
SHA1:	F1B1D996A8D110328F5BAE782F0AE9FCD2CE4812
SHA-256:	7F290C827DD78E012B9D444651C4AFEC37E4141C13D2A1A68FCF8D66F5C05394
SHA-512:	4E29107BEEB4DB9C0451D239AAA6EB45E917526F41743BD21330A974ABA7901FE6CD7EA6AA96C8734D81653922761E90D1EE43D844CE1AC85A848EF54B0959DC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E5D0994F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E5D0993F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	downloaded
Size (bytes):	43239
Entropy (8bit):	7.981795829600631
Encrypted:	false
SSDEEP:	768:iu8XyQBHenxhgicZMmvgA84Bz7PNQJO5rrmRJzNXXzEt1JgILftPy8yxoPxVfGn:i3DB+nxhglF3PBKRNNXXgt1XFLUoPGn
MD5:	F53FC566B2E9B8B5B2069AE33CFCD8AE
SHA1:	52C84B406D7DB5C8636B8C2A1B10D6748B692849
SHA-256:	1040644F840D1C47FB5ED74820D587553278E2A092A8FDC73FEF3FD626B9B83F
SHA-512:	7392B2812E0640DEF9897A83C094419A2B0855187B09ACB7018F03DA115DE7E5B7E61F116ADC65868C12AF1894032FE5650FB34C2B4DF200550204D58B827402
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_store02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8E4B8FBB49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8E4B8FAB49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	76564
Entropy (8bit):	7.984582202497407
Encrypted:	false
SSDEEP:	1536:T6ENQ0tMTjU+gXf1wv4/3hcrS2UbuNxJOS+GfcuyCaXAmlJN:TDNfMBQvSK29+G0CGAmfN
MD5:	E587A1D8C166BC599C5C87BAA40208B9
SHA1:	0731EE2ED5206659CDFED7FFCDD56645C8928403
SHA-256:	FB5F78779623F1571D07E2F73957694571D5FC915682E16886FFC5874FEA2D77
SHA-512:	6B17C5E6B796EE7DD19BCF8F7D54638C4C8578158166AFC8BB22CCCDBDC4D63539E858D163DADBEA23E96B2D68387152ECAA961C24BD1150CA0FE2788BCDF5E2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:84FDF6C1BBB611ECAEA89CCEA1698B4D" xmpMM:InstanceID="xmp.iid:84FDF6C0BBB611ECAEA89CCEA1698B4D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	233663
Entropy (8bit):	7.965302493855912
Encrypted:	false
SSDEEP:	3072:oKQwL0w3w1rUJFlCUpqKZer4B14HA8iNJxeCVUxZFLhcKYvuhX3qYyec1xX9/C+3:oKQ208SrUJvkQ18A71OZ9hv1/c1hUW
MD5:	2D49891FCC25C4E58526D7815BD797E3
SHA1:	55944A739DA77C635FEEC6BBD26E40944B3CE1F2
SHA-256:	F57341973BF66EC745CCAEB5C000878850CB3C0AEA890B7A9A263F175880CD71
SHA-512:	22A6B34C0B0EEAEDAA7678109A03BA7B7EA765BC96715B53B72FA75569F85012716536A27FC4D2CCD7D216ACA4BB52318EC9860A8190F6D64180850B699CD1AC
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:19D32A33BBAF11ECA67DC407DD409438" xmpMM:InstanceID="xmp.iid:19D32A32BBAF11ECA67DC407DD409438" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3926)
Category:	dropped
Size (bytes):	310726
Entropy (8bit):	5.583115155965983
Encrypted:	false
SSDEEP:	6144:62Oa/0aXWmfGXppoJXGhrZWcEQvyW3cB+LAd:62jsaXbcnOr
MD5:	309A33D1F1C968EA024AF7077EC25396
SHA1:	AD3101F3432F35049FBB04E691DB784E715725A1
SHA-256:	6F723B124435A0AEF9B245193815C335150B5BA9F6BA9AD32D7D836A29F6870A
SHA-512:	218B1AA9BD8546365E3024B299E9CFA73E5F27D97E14567B354DD1AC0B66307CC3E5EEF3AED239F5D6EFAC53D240196DA2D46183B59B4B011630FB1CEE157D0F
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":22,"vtp_rules":["list","yamanoue\\-hotel\\.co\\.jp","asp\\.hotel\\-story\\.ne\\.jp","tablecheck\\.com"],"tag_id":24},{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":26},{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":1,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":27},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_coun

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	3696
Entropy (8bit):	5.787319304462251
Encrypted:	false
SSDEEP:	96:QZrROCDTYrRfA8xzULK9KrHIabmrHIcPeP1:8ROCDwRfpzULcuHIabqHIcw1
MD5:	99E4B8D00006EFA064A58CC6026F52E3
SHA1:	DF3FAA917FC8F4EACDA85471ED8E248134CAF8F4
SHA-256:	B9A627EDCE37800D8E52C943D59424786ABB14FDA7EEAE98B1B24A5592055A71
SHA-512:	26BCCDBA58406455C78E4EF0D59CC88E0360D2E5C509A082C623F69B8D416A7E8EBC91672BAB2A3553F50B8524F57FAFBE4371A428F1BC148748FB79FF5F164C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/drawr/drawr.js
Preview:	// JavaScript Document..$(function () {..var $nav.= $('.navDrawr');..var $navBtn.= $('.navDrawrBtn, .f_navDrawrBtn');..var $speed.= 300;..var $navW.= 270;...//.............$nav.find('.sub').hide();...//hover.......$nav.find('li').hover(function(){....// PC.................................if ($('.navDrawrBtn span, .f_navDrawrBtn').css('display') !== 'block'){.....//li...hover.....sub.............if( $(this).find('.sub').length && !$nav.hasClass('open') ){.......$(this).find('.sub').slideDown();.....}....}...},function(){....// PC.................................if ($('.navDrawrBtn span, .f_navDrawrBtn').css('display') !== 'block'){.....if(!$nav.hasClass('open')) {......$(this).find('.sub').stop(true).slideUp();.....}....}...});...//...........(PC..............touch

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	198239
Entropy (8bit):	5.525842140187755
Encrypted:	false
SSDEEP:	3072:+GwwniaF5LF66o0Qpb28/XJTT+IGwXr1oJXGhJ3TYZ:Sa/R69mwXpoJXGhB0Z
MD5:	285771E815EA19319CE43016536A180F
SHA1:	A824E1CBA128526BC4EB3CD7A2D804DAEF512FE7
SHA-256:	5024018631B8F63DED723131C5BA59A60B3ED3D528C5294A112790AC27E66D1E
SHA-512:	CE2673CA74471566085D34D4A45D134508389EC63B6268062F7B479CB759CB365B75077F9E89C9F40136020760EF55347D5FFCAF966253B414AF3DC5A1AA4960
Malicious:	false
Reputation:	low
URL:	https://www.googleoptimize.com/optimize.js?id=OPT-KXRP8KT
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"vtp_type":3,"function":"__c","vtp_value":"2840"},{"function":"__exs","vtp_measurementId":"WA23UKG8RvGjpj3F9pIGEw","vtp_sections":["list",2]},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"function":"__cie","vtp_experimentState":["macro",5],"vtp_trafficCoverage":["macro",6],"vtp_trafficCoverageHash":["macro",7]},{"function":"__c","vtp_value":false},{"function":"__gaoo_c","vtp_trackingId":"UA-118123153-1"},{"function":"__ctto","vtp_isDynamic":false},{"function":"__sel","vtp_selector":":root"},{"function":"__c","vtp_value":[

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1889
Entropy (8bit):	7.766354355684906
Encrypted:	false
SSDEEP:	48:3843H7LAfxd7GNOtvOi5tDc7uhWtkt+dIV:Z/Afxs4vx6QAkQdw
MD5:	8AA998A9EA7BE3A7BF7C73EBB7EA640C
SHA1:	DCD32CA9F49044E7ED792BCBD0B0522616603464
SHA-256:	E5DD07A71914F9925BE5071006B8A0AA316F8DE84C31B8E0F21C80CD2CC95ABF
SHA-512:	EB5B67B8669C86AD95FA8329BE796A80E37267535B31BE3934FEEEB0E36755BCFFA0B6E3BC638A007BAAFF83B39F10846E95229A5F71421C3BBCEF1C6AAA8B30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:....IDATh...H.g.._~O...,..K.4..2.!.,d1Y..R.1.@F3..b.$.....X........\..ln.i...A.X..<.)s.................r\|...}.<....9.N$..,.....-0..w}..]..._@?.'...d.Le.(`9..!..`.'B..x.....POX...K.\..N.....`..+....E...Oz...B<P.( ....:.......Dx...qQ.N..&.9.7S.V.G5nj.N..h...e...u@L.....[.?.s....t&........2I..f.,.\|.X}^[\|.+.Zf.....1{..%...=g}....G../.V..M.X.px.O.Q...lg..e...S....5.@..c.p.b..2.......}111'%._...D.D..^...P....V.5'++..qNc.u.n.C...&55u.kkk.-[>5.....!.......n......mmm/l...l6.-9r..-....K.n.........o.m..W.~...%..Q..R..v.=.h4....^TT........"....-...h..".......].v..x.b.....A..W......9F..`WW.a...'.?...

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65959
Entropy (8bit):	5.353413306184177
Encrypted:	false
SSDEEP:	768:ZSDqeR7solr3roUzaOGjIj7KkIe0McOYkyJ+nM1Em87o6dHhMHKvOW4QES3OII:cDBFsolr3r7N5yJ+nwENFnESeII
MD5:	E4B2C9B152E972CACB77265A161CD311
SHA1:	EDD9F41FFFB57C51B7C2B50D4732A61039FF308E
SHA-256:	09FA04E84D7038CC32F19BEDCBA454B9E637A35F4DE496E8EC9148C47550F0FC
SHA-512:	4263D9EFE7D369A364F785E11BFFBFEA139A1B5CBD129A84E745AAB8F8A1D254EC204963E09CA18365AD851F7491C1F7A61EE28CEB24E7CFF87E4358B8F15069
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.49/clarity.js
Preview:	/* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return Ar},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return jr}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	dropped
Size (bytes):	17826
Entropy (8bit):	7.958394491825932
Encrypted:	false
SSDEEP:	384:Igop1ebyU1ahuPHBRvUFEd+SEhPGz6eMoj4664Sz5IemRlnkJMC:Rop1en1Iuf7vUu8PGXj4PVz5kTkN
MD5:	7D6566E7BB230FCC4DABAA77A6EEE993
SHA1:	55456B36A64A78664C4FC1FCCC6FB31BB74E1D9E
SHA-256:	218489825185ACCE6BFD3B0D38256FDEFDA8B01DDA82A0914F6C38A3A346ED18
SHA-512:	01C35C485F8FA6FEFE08ECFBC8F371308B65BF0B553C4D04CD4CCCDF98BBABF349CE62526B68F00193613317DC05D1E17504BC9308AF4A951982D32AF306A37D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CAEEF687F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CAEEF686F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 178, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	37066
Entropy (8bit):	7.990529563482211
Encrypted:	true
SSDEEP:	768:poZLWXpsgZPsmsblGt7kR/5Q2rYhCsK2M/cZGhwsGb82YjoqtLSroP0hq:AL1osVGtoR/W2rYp8/cZGhwsGTQtL6c
MD5:	EF5DE99C53BA3B483C2271B679FBC320
SHA1:	5AFE4CBAE22D5C532210B5104B9C854D67BAE385
SHA-256:	2459D0B248B742A6BA8B8119B0AABAB6D4F2D066E52D1BB8952BBD84CC487504
SHA-512:	889A707F2854F7B5202C9BB64FB4D6C82A504B3A62F31F399284A5723588A342404581C399217B288FCD697B1AF87271F8A4543F686F1A459F91054FBED4BB56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...........C... .IDATx...g.eW}...'.:.r..].U.9..I..P@..Lx..`.m<3.c..3..`_.c.....k.c.m...e..V...+.:9...0\..B...u>...:..:.~g...km....4555].r2..X.j.........v.....~Z. kjj..5...........k^3....y. kjz.S..`.w...Sk.YS..X.%......Z3.....A@.....Z3....y. kjj..5....m...xC4....m....f.555]..A...t..v....~..p']..2...V.....N...x...V..$....).l..Y$..pp[.........4..o.M..55...tG...N._.r..NvNts.M..H..}.......h._y.8'.....phg.]ma...n.U..0..[y.4....-F3l..d).+...a.....N,P.4(.K.wG8z~.\..eY.....@KP.R....d.eSS...J.....e.0+Y..W.(....l.........e..pj.d....3.pb......=...v}.l.55..H....7.-T8rf..D...]...IB~.d......n._~.2.#.z..ju...k.....4....-fl.....[......W....\|........R.E...{...Ks..x6..r..;..C..5.....~+o..H.\|.HS.[...5...3XK.Yt..J.}...:."....... .)R.6..b. ...i..suuD.0../.......L.G....S.k.,$...n..k..[3..!..7..V.?...9... ..........k^3....y. k.... \..>o.. .9.......UU.4.......A&W....Ril.~M..0<....,.ms.=7R.Uy...?..p..>B..dMo*...'~.#...O<.._....4...x.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 179, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	85520
Entropy (8bit):	7.993653480136194
Encrypted:	true
SSDEEP:	1536:30AXVSULgVAY02CwoJcHCV2iGjQiaXtokgL5Byf7MXhRXVRFajfzf5Lg:30AQxCwwV2i7iItoz/RXVTajzf5Lg
MD5:	0FE5CC4474C618DB35F282A4A81A0E5E
SHA1:	2588472D6218F0E236956607CE0E8604B85B5C04
SHA-256:	DF348C6D0E558823B9CED7242DAD350F87C415D24E6FE91F6D52FC81CA519E11
SHA-512:	7EA87059E867CB6DE8F8A9DD54B82078383C87800CC7A47C377E7229F894A58D4890D01C1FE323B267B2922E869CCBDC396ABEBDEFC2560AA54CD59747BE7834
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2..........].... .IDATx...i.f.u%..9.~...y&%Y"5P.HYC{.G.=....I. ...F..F'h4` .:?.$.4.F~..a....i....,K.(Q.%J$%.".(.....c.....H.......7.{...k......w...........w....{......Gp......,.....x.....XE...`...RQ.........k~.J..h.S..0..a.......p....Q...w..`....`............V..m......`....X....;.....mq...=...af.=.&.....`p8....aV`.....b..x.x.A....0~_.........w...`V.ZC-.}z....c.0.R..OP...a.;.w.m.....1..........e.w.{.Z........v...Z.[..`.p9...........sS.`.m.P.....=.e....=5..T...X#....jN..O...m-...........c.J...=.>...z.Y.N.r.R..W.F.VjE.=..4..R..7xwX..=v...Vj.q...a%.=........w..k-.AAY...z./.q.6.eA.e]...b....h.~...O.w...)h........JL..NC.1.\.a.J,...=n.m{...5..)(V.....N2..8.i.....,K\|.F.."...=Z...Z0.XL2bal.... .q....cQ.Zy....#...aMC.4...0~...m.I...7n\|.....R.4B.{.Q..p....uA)._o..........X.1wu.q..T).V......a43n$?..qo....K...1d...L..=.So...M..............D.^...K.:..5...2..B..Y..ZK..Rk.W...#M.V...^....b].!q.y.....#.}i...Z.pz1w.`.y.?..Ry..!x.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8040
Entropy (8bit):	7.9012894572062455
Encrypted:	false
SSDEEP:	192:1nOqkt71+VWK6H9fp/u73TfBfSjzF2HMYCwi+swhUbqE:5OztwYK6H9fNu71djKFbh
MD5:	AC096C354DB0BCE695159C6499533484
SHA1:	BD06E91A5B52E04BDC11CE37480A8F8E496D5357
SHA-256:	0E9C7B4F67D642CE399200BCF9309ACA56E6CED0D87CA0DCE85F8FA3045BAA2E
SHA-512:	22269BE3D4421A5A4F9754D3FF3484BCA44CC8BC432D14651AA4043CD5F475920D80E1142136C594920BCD0D68B73A54F85E77CB77D8A9C22E322734B509B06F
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay04.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61BA1E6BF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61B1948FF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 23, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1817
Entropy (8bit):	7.3013586688121155
Encrypted:	false
SSDEEP:	48:Wdzo7FDNn2m+PJMqvJ3L1ARncCsvVrtZkZTPUVoGTr/GzWc:yo7F52NMO1ARnEVfETPUaGmac
MD5:	4C2045FC12745E67AC2652D2A0BE5E4E
SHA1:	A6A550BF070944ED03D9210D351B37D022FBA077
SHA-256:	38596B43AC596A0A566A854D5B50FC78A5E8429B00C277524CA68BCAC67B3322
SHA-512:	B4EEC9EEF9EE3E04214422FF079CD53B2A3256968F7E31379203902D23DDFF8F70B6B77037A9237959463031FD9E624645E7C3490DFE26985AFF723689AE0AE3
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/header/ico_english.png
Preview:	.PNG........IHDR...................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:52B996BB5CF511E9A38BAD8F5173AB11" xmpMM:DocumentID="xmp.did:52B996BC5CF511E9A38BAD8F5173AB11"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:52B996B95CF511E9A38BAD8F5173AB11" stRef:documentID="xmp.did:52B996BA5CF511E9A38BAD8F5173AB11"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>L;......IDATx..Mh.A..7Z.A1.....A.=..K..A..A<..x.<..uPK.K+(..D.MO.,.E..Wz.^.......((*.....a;...nl...M&.}.;o.{3i.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 252, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10659
Entropy (8bit):	7.910417587030618
Encrypted:	false
SSDEEP:	192:f7FvA5gelrPR9ME6wd+VBolXvEyp9Jb58TeFaivbBEis4am1o7inT7oKL:fG5FlrUEJ+VBoJvD58TepbBXFdY8
MD5:	7CFA486FB17368104B300BC424DA62ED
SHA1:	C26D40C28608E026FA0DC708EBD2A3509B331893
SHA-256:	74FB5C9009F14AE7ADB1055B462725FC38CD5CF50A05F5E588FDD1F5F3754ADA
SHA-512:	346ED5BF6DF928BD208444B54945DEABC683A2D8B05515108E17AA66AB1D73C6A9998B54D79357DD55E93C3EE8CA19B4CCD6BC267B50B6C5FF6908E185E60851
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Uz.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:80055D83341211E98C2DA3D57B0161AB" xmpMM:InstanceID="xmp.iid:80055D82341211E98C2DA3D57B0161AB" xmp:CreatorTool="Adobe Photoshop CC 2018 Windows"> <xmpMM:DerivedFrom stRef:instanceID="686F785F9DD62147E7427D726C42E621" stRef:documentID="686F785F9DD62147E7427D726C42E621"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..,...&%IDATx..].....> X(*....DP..6.......I4v.I..F..hb4....{Cc,X(.....".@D,.]).D..u.......;..g..y.#.swg..s..)../_N..hc...u.4ei..m.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	480891
Entropy (8bit):	7.987111627674151
Encrypted:	false
SSDEEP:	12288:0wmhjEtwvE1xLlBItLGz2CvJdn8iMkorHFRWZvz:5CotwAno6z2+f8CHZvz
MD5:	E3081D621E7841A3C5CF26187AA9B908
SHA1:	4882F53B6FB2FBE182734E3CD18150159A703E99
SHA-256:	A33663853F01DB33E86B21FA94B2BAA80667DE35B97F8A50E43AF9ED7B9F639F
SHA-512:	EDBA558C67CB23ED69432E7DA6292E0D8B054451F847BB0F2FA1E70B2ACB1D096CEBA2B3DD5601FBD22BD0FA4953A6BD2077FF1936F429A0B8FC0BC5EF37693F
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_5-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:F6CC5311BBB411ECA41BE9BB706725A6" xmpMM:InstanceID="xmp.iid:F6CC5310BBB411ECA41BE9BB706725A6" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	268381
Entropy (8bit):	5.072141999174343
Encrypted:	false
SSDEEP:	6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i
MD5:	08C235D357750C657AC1DB7D1CF656A9
SHA1:	9257AFD2D46C3A189EC0D40A45722701D47E9CA5
SHA-256:	7BD80D06C01C0340C1B9159B9B4A197DB882CA18CBAC8E9B9AA025E68F998D40
SHA-512:	D62700E7A1FF41F9D6326CA024BA2BE1D391BC8FBB2AEAE0F427D74837899B230940BF7C2DF3D193F5300A68BB3686706D4C31328234B5CDA026A1BF52EF9E70
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-1.9.1.js
Preview:	/!. jQuery JavaScript Library v1.9.1. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-2-4. */.(function( window, undefined ) {..// Can't do this because several apps including ASP.NET trace.// the stack via arguments.caller.callee and Firefox dies if.// you try to trace through "use strict" call chains. (#13335).// Support: Firefox 18+.//"use strict";.var..// The deferred used on DOM ready..readyList,...// A central reference to the root jQuery(document)..rootjQuery,...// Support: IE<9..// For `typeof node.method` instead of `node.method !== undefined`..core_strundefined = typeof undefined,...// Use the correct document accordingly with window argument (sandbox)..document = window.document,..location = window.location,...// Map over jQuery in case of overwrite.._jQuery = window.jQuery,...// Map over the $ in c

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1188, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1999], baseline, precision 8, 1000x594, components 3
Category:	dropped
Size (bytes):	382087
Entropy (8bit):	7.961923824469686
Encrypted:	false
SSDEEP:	6144:bdZPiLSOUVILxK678s3/jK2ZxoBYWJ6eW4TCOv6/BaMcPRQ3l8Knw4K6y/AwV58L:HBOU+KsrRgYguOvABSJQ18yi/APRwdK
MD5:	089770680C6A83BAD87F1960804F70EF
SHA1:	EDFE050FA55BFAF24B33E4763015E3E126D5288F
SHA-256:	EDD46B321CC37CB1267C77849683946ACE3590D8864E141B11BD6E8619C48874
SHA-512:	01005CFC64E2840B9F375F44EE056FC3D505E7E1E5BC0D9CAB20E29660B16835E0CEC84211A25DF438FAAAC3BBB6E7A3F7780828C02FEDE79BA0AD3678027058
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. .......LK@..'..LK@..'.Adobe Photoshop 24.7 (Windows).2023:12:19 17:46:52............0231..................................R...............................n...........v.(.....................~...........".......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....}...G"g.M.....{@...n..V.md.\Ap...nkMl\|..K~.A....g.K...RI.CT`.....8.a......

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8446
Entropy (8bit):	7.906854917873747
Encrypted:	false
SSDEEP:	192:WyjP+DvcRXBj5ioIlbvTr6KNB1Z6P6WwpsXxyhld:WyyDvcBBj5iLj3tNr0PXw0o/
MD5:	7FB0D641E6E0E20D1862C192E833B7C7
SHA1:	0E5A2D185165233CE7A7C2307BA1E1593F8205B3
SHA-256:	CD9DC446729A1A058AD0CC7E2C9303B0F0F506D7F98922CB686D49FA7F901A8C
SHA-512:	62F6F5E90A193F38F3A72243410741FAA844A88F564FD47C08FB5B7E302E9DFB8D60CFECFD8C58ED2842B37564FF25DE0E1373E4EF718C1FDC97F67BB3956BD6
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_ban03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:CBF2BED4F6C411ECA31FDD4BDA4D427A" xmpMM:InstanceID="xmp.iid:CBF2BED3F6C411ECA31FDD4BDA4D427A" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7500
Entropy (8bit):	7.879653498701227
Encrypted:	false
SSDEEP:	96:Z2ftcpZj4runzMIxCIXoV1g40hcxqyfJauv78i2zM5VPRWUz5cb7N+vc8heUY93:fZRnzMI4I264zgU/Ii/7PkUG+5q9
MD5:	9BB783E04E69A811E964923381DD397E
SHA1:	9D75B2CE0BE0D824D280D10A4EC95EFDBDD85A2C
SHA-256:	8FD165C061B666E33182B17C0BE6AFCECA13445D741820906A76C9045968FE30
SHA-512:	DFDB82CBC22FD6E69F86622223DB693441432D4223F56AEB6A8BACF4F50B6D2C01F44A71E8DB3E0F9829528E0DC7B688091B5808DC852657B9274FA26D2FCE4F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1DA3AA4CF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1DA3AA4BF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 70", baseline, precision 8, 306x176, components 3
Category:	dropped
Size (bytes):	12306
Entropy (8bit):	7.95366882440154
Encrypted:	false
SSDEEP:	192:3ekV6iSV611LzB3Gkej8FT1rPiTZoGG4rABFeXgE9jsJ/um9N5Y3amINbZ:3eM8q1B3GhQFJwtrABFeXgkCv9NNmIBZ
MD5:	D5227E7498930A12D9BA21AE7F0CC789
SHA1:	AF578E2DF20445DF92C9B3096D4266D7040BD241
SHA-256:	AEEE0FC881AFADB1E5081E185A31CFBBC071C5CCD1ACEFD84ECC33D1D5B3068C
SHA-512:	2FAFB79DD227A691A8C736F7C723297A02B47202AAFF3F3C4907AE96814910D1A96494E7F216F91EE52B9AF235B06D9D0654D30289E3A0D104EE1C2BD6349418
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 70....C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...6.G....L..#....VG.Ry>a..#..eH.\.S..;....0. :.Gz...7.......5}.<.....E#).RE.##....MV..y...cR..!.4.GV.....T.........=V....w.....y.......iV........._f...(;H.i..a..GL}.2B..H....:6wq^....+.Iu..].*v..........MKM.H.<..7g....>....F.=.1PX..}.T......A#v.M..PE.3m..RP.H...H..h.....jo=...)qQ......q. c....F.+

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 640, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10587
Entropy (8bit):	6.855100969806134
Encrypted:	false
SSDEEP:	192:gxqUArJNp0VcnP2jkQWqF1bEZ7DcS5jCoI:gxqUA+0P2jhRzbcB5jCj
MD5:	6600D960C008ADB93A133058FF9BB2C1
SHA1:	025F7150E7413A07B5F62C79A4BBABB33B556157
SHA-256:	BCF1D827FEAEB6B4DC187CB050240D565B8C85EBF4D25BF52676051450B3B748
SHA-512:	70D1E45F0F00D590F2B8AF80D8498F5D00C845E1022DCD0B6505C51D4C25C49D740C7D62A3AE77305DD455EB63A8A30B352B1FCAAD5B815E6E56301068A966A3
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/bg_deco.png
Preview:	.PNG........IHDR..............Z......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:DA1263F7904611E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:DA1263F6904611E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>At....%.IDATx...y.]uy..u.'$..Dd....^@..c@..J.......

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	290641
Entropy (8bit):	5.621577999157482
Encrypted:	false
SSDEEP:	6144:lS4a/0HlP9pmwXpoJXGhLMZw1vyW3cB+22d:cBsHl/jOG
MD5:	0E9B1E965F4D613E5FD83A042035E3DC
SHA1:	60EE86572549FF78FB21452892A0BF3B2540D0E7
SHA-256:	912A2E2EAD1B39EEBE5C8A0AE1DFE5E47E67E766D640EBB228C69D2EA81CC77A
SHA-512:	14B3EB12DCB72CFA0FA5E3825BCD6A2A5A74EFE6AFE0872118120587799DFA0268089539F69985A9B77A4DDE9995F12F57F6E99266BF443BA394250C69435ADF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-QJ6BW8XGJP&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":10},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","yamanoue\\-hotel\\.co\\.jp"],"tag_id":12},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":13},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	234262
Entropy (8bit):	5.456637342266817
Encrypted:	false
SSDEEP:	3072:zfLeYH8AtPJ137OeR8NteGvQ+AMPpgArl0xYu58K713hN:zfLeYc+PJxH8N7QQGArHu58K713/
MD5:	8F9BA3A0B8666C670FD1680E4F86E565
SHA1:	837F04B8B9558C4BBF0A1A4C430DBD620846B3AC
SHA-256:	836C3398D4EAF117B43BE2D45DE19A00DBECD1EBA77E2A3DA4F22494EE6F5BB1
SHA-512:	4090B1CFD20899B32E596F737486B1412103074C805F17F0B6023201586E01A66FC6FA7EE9F76AF15EE58BE02269B9F33F346C0DA720C534FFB3E60289F83DE8
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8110
Entropy (8bit):	7.904486184486367
Encrypted:	false
SSDEEP:	192:6ausmWyzEbkXfzlaf9UJESjXk+wOnrH72r4d9:esmWdaxxjXkmrqr4d9
MD5:	DAFB27F4D04B462839854835A0205F40
SHA1:	4FB1ED59A63A436ACEA3623A05606A411DBFBE3F
SHA-256:	D83DBABC5B24C8B5F0C168FAD34F0DDB96E1BBFE7A9358664DD86C7615CCD4AA
SHA-512:	17044D2748FF0CC1F278FB184C93E549FAA3C7297F295EE43FCDF0B559697D9F9D282C9583CDC58FB02F1CABE4510F865E33BFAEE7BC415B3D1D7E1846DBAAD9
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:619FC670F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:619FC66FF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	downloaded
Size (bytes):	43862
Entropy (8bit):	7.979277994081508
Encrypted:	false
SSDEEP:	768:2afjZcN/sYvDFBGGonOl7ziSPPwgSn+Fs2isvsicEkd9B2Hy/SmwpYkTexnRy9+W:tjZcN0YbvGGH1PjSE1UiSd9B3/SmcBoM
MD5:	40EEEEE8B0AAD3ECA46F205E27F92157
SHA1:	6910AC3C8446712564BA2654B7789548FFEC1821
SHA-256:	75FDFD7A03E293DB7E7BE2F7744CCF2706170593FBC19D800269D1971615954A
SHA-512:	CDAE85C0AEFF40F498A93D1043AFF3CC8FF927C30A56D3299800D43E3B1A5D3827F9B58C08ECB41D5D49DA2831257D7B5E556A8B14A8B4308B5ACAB425DEB6B0
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_store04.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8EF86F9B49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8EF86F8B49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26548)
Category:	downloaded
Size (bytes):	26701
Entropy (8bit):	4.753510241584548
Encrypted:	false
SSDEEP:	384:di5yWeTUKW+KlkJ5de2UYmydfwYUas8l8yQ/7:Wlr+Klk3YlKfwYUf8l8yQ/7
MD5:	8B4FD194DEE0172C604F79F7DF8A6412
SHA1:	1D402B10FFEC0E84D956318595586044295E2F6C
SHA-256:	37535539941D4EE43EE78618080314482FDCE9C459E4F6861F904C8DCDB5AFF8
SHA-512:	01BF554A56CCC50120A3DA37A5D7A6BBE6C41CDFAD7551CFEBE5CADA6A92E185CA783046CCBC5CBB24522E562E17CAA49CC4D8EA54847C84502E5C19FF8A8425
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/drawr/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.4.0 by @davegandy - //fontawesome.io - @fontawesome. * License - //fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.4.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.4.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.4.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.4.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.4.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	744197
Entropy (8bit):	7.981749894613468
Encrypted:	false
SSDEEP:	12288:rx3Y8ABWMAF60ZSO7IzmnVqbr3GPrRgwBc/hysSXrYx+Xv7hOKBFVIzW7K:rjmdAF6ySOMzm9rRgwuQ1rYx+TI+FVIr
MD5:	674B92F68385D9900C9573303D795CAF
SHA1:	8AB7299BE40B20B5464997BBEC5ABDBF6F9AE487
SHA-256:	4C87F6065557DE744B2968A62344C0FE100DCFF0E14CDA4AC8540A51DF636A3C
SHA-512:	96E16A6030B94076890BD46DCA82B727FDCF5BB5499F44F4E925B900C9B84D50EDCA7365CA1D5C710A160176646A4408E10065253B87E8ACE9EC9E968F7FC5AA
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_7-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:081CE81FBBB511EC95F1F8D63E734545" xmpMM:InstanceID="xmp.iid:081CE81EBBB511EC95F1F8D63E734545" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	9716
Entropy (8bit):	7.920424352565232
Encrypted:	false
SSDEEP:	192:JAFG4uOo9ZTpfGchEcs3vGm3Gx3idRekQfMKLzr:JZZOo9J09c2bdEk0Ln
MD5:	7D6DD3764546F9927E5C7F4D8D754C79
SHA1:	8DA5C9DD18FDA94F5A2227B1EC784BC63A919BEA
SHA-256:	BF5A3651FD41A41BF04ED105DD8123D63B5A9866A46BBB03E03A6D88E229717C
SHA-512:	8E0AF9A1E774A54A15F6E07436ECA8E48419CDAEB59FD222C54CD9052900502A5E633B5BAEC3EEAE774631ADDC4B61097AF0D9CCA0C48194D1841A209AEA0A80
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1D9D9404F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1D9D9403F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4863), with no line terminators
Category:	dropped
Size (bytes):	4863
Entropy (8bit):	5.864548095998704
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUhq1Rhr4:1DY0hf1bT47OIqWb1Qq174
MD5:	F616C5108CD90C58B281F8231E2C744B
SHA1:	0BF671A420A48892A67E1774B6D869D2B7C6A003
SHA-256:	356FEEEB9FED67B0691AF374437F56A0CEF2A57CEDD42069274525B9B9D9D950
SHA-512:	CEB07FD8B49F01FB72C984C4D7896638884798BECA0DDF9BCF89D264457E3D3E2799A82CE6A6C61EB40DF243CA1EBC5176D4BA9F042360A9294C2DF113CB9C3F
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.5 (Windows), datetime=2023:06:13 15:54:51], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	29589
Entropy (8bit):	7.565086236440262
Encrypted:	false
SSDEEP:	384:IgrxvPYDTG9IsiVKgrxvPYDTG9nnnCgs30yQNd4m2tEzRZnuD9Uf4uQ1taxr:IAtwu9IscKAtwu9nM305D4guDyg8
MD5:	508311756CD0F524D312D99F4DF66B79
SHA1:	46F810BC63AC2B861FE6956F0B4C36E1FC648A7F
SHA-256:	F705D6282F466E4B14BB94C0C871912A90131E17472E110DD158AD03202983D9
SHA-512:	51821DF2B03CAB19F3D43C3F6A8F5E358E8FBA6FA65BC5FB5FAF74AF1476A3C0D37477EDB2E2EB6F610225F2539F11D93EB4271387561AB236D9ABDAB570BC31
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest04.jpg
Preview:	.....RExif..MM..............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop 23.5 (Windows).2023:06:13 15:54:51.........................................P..............................."............(.....................2...................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................G...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#.xF....e6....._K.........s......~.`..[...f..;..u..j...v...Z..Z.+....l.>...G..N..31.%.E....~K*..}L.......?..M...5[>i..u...GS,fH.....Q...3..5o.o.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 7, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	983
Entropy (8bit):	5.968750319333958
Encrypted:	false
SSDEEP:	24:bl1hNo7FCWwjx82lY2T36VP4BRayJ3VqBcqEGVZmE/:bLzo7FDNn2mUJ3YE5E/
MD5:	012E8A9FF3A7DC7764398EBD474DEB48
SHA1:	41A8CAD02E709F1C92E0AFF44FB398F999808157
SHA-256:	4CBD05A2D59A7F4906A2DA3FAA8C09867C901ACB8C5D16731EAB5DE0B0004F87
SHA-512:	568C0FC70C54E52700F9C26F3A3CEBB4CA6033093858ADC285AE9A6F9C6556EB7EEF9FDEDDC97150B43BC52C0F4990BAB5D9219407D6933D0E723CAE30ED943C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............./e......tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmpMM:InstanceID="xmp.iid:389D584A33E511E9955EEC2C985C12E8" xmpMM:DocumentID="xmp.did:389D584B33E511E9955EEC2C985C12E8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:389D584833E511E9955EEC2C985C12E8" stRef:documentID="xmp.did:389D584933E511E9955EEC2C985C12E8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..+G...GIDATx.bxwg.........3.0.0".2.9 A&. X...}.P...........A0. .L@.0.H..@....a+...2.....IEND.B`.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/plugins/ua/linkid.js
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 450x279, components 3
Category:	dropped
Size (bytes):	57686
Entropy (8bit):	7.981606958447723
Encrypted:	false
SSDEEP:	768:ELyIo4mdZ9Kh1Hd5ahdfye9WMunkMUnozwY3XdVmsTGElWZToAk/8JeLkpokrAR0:zBKh1TamjQMKozwQfTGElmTo9E3oPzzw
MD5:	56871DAD31394D7C560E0EE48D698423
SHA1:	E1466396967575CF66902211AB1F6BB79B39FE85
SHA-256:	3D78A67003E95937042C0962EDD76F302984F73FECF2D980C2D657A2A5A06FAB
SHA-512:	FCBC41326CD8C924396B78F9B9D7894BBFD8E459934A3CA46E02329890E702C0E3C6ECF7A8BE1AD2F1DE3689E8117C789E292C3B03E624620A24579A0BDA70F2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D8EACF5CB49511ECBCC5B60077D7FC72" xmpMM:InstanceID="xmp.iid:D8EACF5BB49511ECBCC5B60077D7FC72" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	downloaded
Size (bytes):	12914
Entropy (8bit):	7.947398270646323
Encrypted:	false
SSDEEP:	384:fTwX2mzYW8vcwbF33kx8Q1L+3kwkTinYVRsbY:fI50HvcuJu8QFLTiYb
MD5:	5482519A607C6E5E51E5DF1FE19A8CCB
SHA1:	DD7DF79FCFC98CB57209B2091F1133976F05C862
SHA-256:	04E464ACC6CD61BBF968BBD4EB85FBC3B9C48DF0B09EBE202EB23E1B18506BF5
SHA-512:	59ACE4FD2557525C0A8075617D854F949188452C9AE6EDDE1D61BD6C90E4EC565B1D28DE0BFEE3026468A8336888A99442F838F86C042B7C8266AF3A07A96E06
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1CAA18DAF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1CAA18D9F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	249588
Entropy (8bit):	5.548775853298352
Encrypted:	false
SSDEEP:	3072:LVwwniaF5LFD5J6s0Znb28/XJTT81Nsj5nZ5Y3wXr1oJXGhy3pyWd:ga/RD78S0howXpoJXGh+pLd
MD5:	855BE5DC6960349965DDB5DDD51CEE67
SHA1:	364819A5AE0A824B40894CCE25E2136E5F9D31F2
SHA-256:	C634D67443C8861A2CF9935AA8FADD225476C167A3C5803678225941DB757BF0
SHA-512:	ECD2D60F3792E5E8C7E21B92B2DAA04C114E9D5B11B83A7DC4697605D7C78E44532CBAC8F27B1CEB2F885F72B5A2CCE765BB941A94758F39A89B2CE9354AFE48
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-705351937&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{d

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1251 x 764, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	87022
Entropy (8bit):	7.966775711521364
Encrypted:	false
SSDEEP:	1536:+kVW+8anoY3Kz4QS7/Ec4+zVvqFLYrKGjxraooq/XNnQQpvvAGwJGI9w:1KYoY3Kc1XCFkjx+g/NnpA9Jn9w
MD5:	17BDC164CCF791A781B6477F1A5ABB83
SHA1:	05B7DD869E5F2205510AE170C1DC722D047C77B2
SHA-256:	6AC7CBC0FD8ED9915E0669D693FFDF99AC7B4A3380FF94CFFE8DB6DFC76ED6B2
SHA-512:	97CCD57AE0F433E6F782F00AC636DC15CB8ED863BFF11BD9FA80877AB0125C177ACE14F9B21E73C8C5FA54B62347CA72967274AD5F9E189B49BEAC6DE98C5F9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............-*......tEXtSoftware.Adobe ImageReadyq.e<...viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b7171999-c62a-5f41-923e-8ebfbfff96af" xmpMM:DocumentID="xmp.did:72B806060A9D11EABD7DC9235F3B2D77" xmpMM:InstanceID="xmp.iid:72B806050A9D11EABD7DC9235F3B2D77" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:bcebb828-ee39-dc4c-82e3-5a5924009049" stRef:documentID="xmp.did:b7171999-c62a-5f41-923e-8ebfbfff96af"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...6..P.IDATx....\|.e.7..d.6i(}' ....

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	11714
Entropy (8bit):	4.596384958761047
Encrypted:	false
SSDEEP:	192:GBGnmUjUAn0oGIMDrRbV/BgrMjH+jxr7g8FaUZeDsVrY4esO1mt8IX9XVP8mAPia:GnUiNDZ7+UsXXlVP8mLhm17
MD5:	7A3F745BF700D0A97E206D4F7170A28D
SHA1:	7DA50E46836D8BF623F0CBF33ADF8E243FCBEE15
SHA-256:	92852C91B0B884881092FC1D1B418D6636B64E42D937AE3227138C0C6D14A808
SHA-512:	F4B2250F488519EEB3A7F246B3EF14E23D35D2814852E91AF8BA90A536327062E0535972A8EE61CBCFA5A4EDF0482569B5B70214859DECBAC487DE45E5AC583B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery.BgSwitcher. . @version 0.4.3. * @author rewish <rewish.org@gmail.com>. * @license MIT License (https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md). * @link https://github.com/rewish/jquery-bgswitcher. */.(function($) {. 'use strict';.. var loadedImages = {},.. slice = Array.prototype.slice,. toString = Object.prototype.toString,.. corners = ['Top', 'Right', 'Bottom', 'Left'],. backgroundProperties = [. 'Attachment', 'Color', 'Image', 'Repeat',. 'Position', 'Size', 'Clip', 'Origin'. ];.. $.fn.bgswitcher = function() {. var args = arguments,. instanceKey = BgSwitcher.keys.instance;.. return this.each(function() {. var instance = $.data(this, instanceKey);.. if (!instance) {. instance = new BgSwitcher(this);. $.data(this, instanceKey, instance);. }.. instance.dispatch.apply(instance, args);. });. };.. // Backward Compatibility. $.fn.bgSwitcher = $.fn.bgsw

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 7, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1047
Entropy (8bit):	5.995978972770312
Encrypted:	false
SSDEEP:	24:bl1hpunQWwh82lYSKw/zI7wVYT34yJ3VTqcyh/zvGe111:bLitvnL8dCfJ3pAvd
MD5:	A83918F67E86AC48C5B16F3517AB55EC
SHA1:	24576A5EE14994033D4E86B8C3D0EDD1D2C3E46B
SHA-256:	E803B3018A5F4DE0AEE6423ADBBEDA7C7BD9607D02F4B9FF3A3A8DD270C3CC0D
SHA-512:	6069912819790FFC34F129B9DCD6ADE1951DE275F47E012AE32A48728E5B3CBBF2FDD8E183990FF8A7346ACAFE7DB41A68F42359F39855B7919F3692EFA0DEDC
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/mrk_brawn.png
Preview:	.PNG........IHDR............./e......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:F77F117407206811B3029ABB5B3207FE" xmpMM:DocumentID="xmp.did:E37F3E5A928F11E68BDBBF1FC0CC9715" xmpMM:InstanceID="xmp.iid:E37F3E59928F11E68BDBBF1FC0CC9715" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F277D189802068118B86D6E8981BC5D0" stRef:documentID="xmp.did:F77F117407206811B3029ABB5B3207FE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......GIDATx.b.R......x..s..`.q.....$X......P.X%H..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	198248
Entropy (8bit):	5.526052248894453
Encrypted:	false
SSDEEP:	3072:+GwwniaF5LFs6o0Qpb28/XJTT+IGwXr1oJXGhJ3TeZ:Sa/Rs9mwXpoJXGhBiZ
MD5:	A92174E528BA1916A492C76B52EF15B6
SHA1:	D1A3EDAACF53A89A0601B4B6CF89B25ACB7D3C3F
SHA-256:	17262E0F9D607832A4852CED860BDFAF136166AF5611171FD47368C02635BB34
SHA-512:	2246F9BDFB3ED4FF77C3649B23CD2810F20F02732CED58CF00F86A2B01B1D50F6A9AF74886B5475A80604EB5ED0BD4D790AA6778C2893CDB88F4493F29DDF220
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":false},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"vtp_type":3,"function":"__c","vtp_value":"2840"},{"function":"__exs","vtp_measurementId":"WA23UKG8RvGjpj3F9pIGEw","vtp_sections":["list",2]},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"function":"__cie","vtp_experimentState":["macro",5],"vtp_trafficCoverage":["macro",6],"vtp_trafficCoverageHash":["macro",7]},{"function":"__c","vtp_value":false},{"function":"__gaoo_c","vtp_trackingId":"UA-118123153-1"},{"function":"__ctto","vtp_isDynamic":false},{"function":"__sel","vtp_selector":":root"},{"function":"__c","vtp_value":[

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	744197
Entropy (8bit):	7.981749894613468
Encrypted:	false
SSDEEP:	12288:rx3Y8ABWMAF60ZSO7IzmnVqbr3GPrRgwBc/hysSXrYx+Xv7hOKBFVIzW7K:rjmdAF6ySOMzm9rRgwuQ1rYx+TI+FVIr
MD5:	674B92F68385D9900C9573303D795CAF
SHA1:	8AB7299BE40B20B5464997BBEC5ABDBF6F9AE487
SHA-256:	4C87F6065557DE744B2968A62344C0FE100DCFF0E14CDA4AC8540A51DF636A3C
SHA-512:	96E16A6030B94076890BD46DCA82B727FDCF5BB5499F44F4E925B900C9B84D50EDCA7365CA1D5C710A160176646A4408E10065253B87E8ACE9EC9E968F7FC5AA
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:081CE81FBBB511EC95F1F8D63E734545" xmpMM:InstanceID="xmp.iid:081CE81EBBB511EC95F1F8D63E734545" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	dropped
Size (bytes):	25082
Entropy (8bit):	7.969718656493191
Encrypted:	false
SSDEEP:	768:egx7juFMR1ajkoM0c+/D7ca4Y971YtN3hdugALsOXYO2Y:egBjuFMmkoM0pcaJ71Yr3XugAA6YNY
MD5:	994AFF46A6EF0BD8222AB515DDA83E44
SHA1:	8D0EE9AAF60C77DCF84D619F535CD39823C6FE37
SHA-256:	D4EBBBD511373A4222B8183494BC7BFCE459A0BC02DF01D1F56893F76BC181BD
SHA-512:	9780E287AD8BC109DD26F3DC4E9D678E2934E6589E00069A7D680074AD8A0763C71FD8594CFB6680C885EA3AD634C28F05BA1934DD9E2EDBCF8BF4A2FCE74C71
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:83422827F6C511ECAE29EC13862F33CB" xmpMM:InstanceID="xmp.iid:83422826F6C511ECAE29EC13862F33CB" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 113, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6741
Entropy (8bit):	7.884383508697227
Encrypted:	false
SSDEEP:	96:mRKKVboH/cOPiUhG0uRXJopJ+WqRzsDzwQbk9LtfzN3vdsCFr1a7Z8EPR0NVNQ:GZofswG0uDukWmwk9xfz5vCEQKE29Q
MD5:	7044D7B59378EFC62204190D1DD8590C
SHA1:	05BB2704D88FE81E9813695AAC422B522B25C218
SHA-256:	915271E3CA929D8638692CEB9BEA5A8E63A125B67930AA9BFEB26D85DBF04D44
SHA-512:	B90F78F111363B6E315851B4D097899599ADF1DDEA2937B25D19113E5257DB5B2F58F88605E857D19FC21C39447DD2355886A5A3706AA12C08C31893842C7CE8
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/header/head_logo.png
Preview:	.PNG........IHDR...,...q.....o.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0A801174072068118B86D6E8981BC5D0" xmpMM:DocumentID="xmp.did:BF7D9C63926111E68BDBBF1FC0CC9715" xmpMM:InstanceID="xmp.iid:BF7D9C62926111E68BDBBF1FC0CC9715" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0A801174072068118B86D6E8981BC5D0" stRef:documentID="xmp.did:0A801174072068118B86D6E8981BC5D0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>@CLr....IDATx..].U.:..r........V...B.k* T.PA..d+ T.S

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 130 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	6.23240095553804
Encrypted:	false
SSDEEP:	48:B/6fOvnqknA9W2wyy+vjc/cHJ3Q3+1HxBO:BSeqknmW1yRvjc/61H3O
MD5:	386DCAD4E5E92378FD6413F460A2A870
SHA1:	05861BC1C03046907E7B5BEE384A3CE1BFB1FF9C
SHA-256:	65E991B785598F3362652BCC26570DE09BED7D88231FB6A51070499461DA61EA
SHA-512:	F1E51D5A6CB076FD30CCF6822C3B49F5C82C5B6AE3C1708384FA024FBBB0E07D4AFBF989867E4B77CD103CF2BB64B8FBFF1D9B75995CB4413EC4118B36FCCD0D
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/header/reserve_bg.png
Preview:	.PNG........IHDR.......2.............pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:5818A955904711E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:c17dd201-12cc-f846-9073-46faa3c78a27" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmp:CreateDate="2020-03-17T10:04:29+09:00" xmp:ModifyDate="2022-03-07T12:35:23+09:00" xmp:MetadataDate="2022

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11553
Entropy (8bit):	7.939764236830006
Encrypted:	false
SSDEEP:	192:hZsfB2bhP+3Zx7O1oVpgnHIjL5psLKSJ7KAyZ6ypC4SUvbAQKPJgi8asqNU:hZs4bhP+3YiiHIjTuh+AhShbAYiyqNU
MD5:	2099D0E924138881F2118A9FE8626B34
SHA1:	CAED0D90B3DD2385DB7C63474B7467294AF101B5
SHA-256:	C795651E21A136AE170AFBFDA29D7CD704CD5C0481F5BAF1DC1BDC1EAD950E23
SHA-512:	DC269543EE2082E118B07A3C049DA5FBBCBB1940CC13A09D427A4CB52B4B6FEF553E69CDB8E6E2BF03F075FC27758376E4A4F1EFCCB6EB264AE7F6942114F690
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/bg_texture.png
Preview:	.PNG........IHDR...n...n............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:C173E33B904911E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:C173E33A904911E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Cu.....PLTE........................................

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7682
Entropy (8bit):	7.885632779259633
Encrypted:	false
SSDEEP:	192:mKFbLdBbUxrO9tHMHr7QpSHeeyZ2dEqy0t:DXdyrOvMH3ISHhGCEP4
MD5:	180DFFD390FD898961A5A50CACA19622
SHA1:	5306DDB0367BA4633BFE577B0A7D3A64C2B9DC0C
SHA-256:	3133CB6BD746790B9A73A318D1FC12782C679B56D3EC8DDE9026204424662940
SHA-512:	7CD55B4C567EF29467D986E6446B015454D45620A02320BFD8603C28D736C9EB0BA827D548FB6FAD293A50293B984CA6BEC372BA2AEBFA7007A06B79B2811D08
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E534C2FF6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E534C2EF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	480891
Entropy (8bit):	7.987111627674151
Encrypted:	false
SSDEEP:	12288:0wmhjEtwvE1xLlBItLGz2CvJdn8iMkorHFRWZvz:5CotwAno6z2+f8CHZvz
MD5:	E3081D621E7841A3C5CF26187AA9B908
SHA1:	4882F53B6FB2FBE182734E3CD18150159A703E99
SHA-256:	A33663853F01DB33E86B21FA94B2BAA80667DE35B97F8A50E43AF9ED7B9F639F
SHA-512:	EDBA558C67CB23ED69432E7DA6292E0D8B054451F847BB0F2FA1E70B2ACB1D096CEBA2B3DD5601FBD22BD0FA4953A6BD2077FF1936F429A0B8FC0BC5EF37693F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:F6CC5311BBB411ECA41BE9BB706725A6" xmpMM:InstanceID="xmp.iid:F6CC5310BBB411ECA41BE9BB706725A6" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15174)
Category:	downloaded
Size (bytes):	332857
Entropy (8bit):	5.603226858100003
Encrypted:	false
SSDEEP:	3072:WX2VwwniaF5AFDeJ6s0znb28/XJTT81Nsj5nZ5YPwXr1oJXGhVkMtK3jmaRJWS:y2ca/4DqIS0howXpoJXGh6lpiS
MD5:	B281069E31DF04BF5924F57412EA9C09
SHA1:	C30E2B1FB2868471CF329D569D1A7244039ECB03
SHA-256:	5935841A1C712D3A5E079BD31C0410BE70FF82EA80A35EC9D3C6780E4770CA62
SHA-512:	BA1358E89427A583DB09272FBACE58C97DCD787869ABC7813379DCB3811C4DAA613A876E1C119F5FE008C4869070D2D94A9B4E52793BF053B3689D529642962D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PTHR639
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"20",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"page_path"},{"function":"__cvt_8713577_28","vtp_getValueDefault":"searchAttr","vtp_searchAttr":"id","vtp_searchFilter":false},{"function":"__cvt_8713577_28","vtp_getValueDefault":"searchAttr","vtp_searchAttr":"class"

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	9980
Entropy (8bit):	4.27742746445385
Encrypted:	false
SSDEEP:	192:PsGDyzIFc6jEu0F90L55uSnAurlbsg+y/cs0wb/F2RQ6vNcA8i6JKmWclbAwpxMM:0lzIFc1u0FIuSZ5bsg+UpDF2RQOcAYKg
MD5:	28AD61331ACF8F9033FE9A6D9A18CEB8
SHA1:	77950BFC5F661B61C14D2C328C031763A2A4C3E1
SHA-256:	F9D79525A50E636DD8E9487071B91C7BAD3C389BC17974F2015C46B210EBB171
SHA-512:	52278A7A4A9F34DF8D775CEB6C261FFCE19EB419910214D46C475C69C2D50ECF59B4DD8FCFB96D5AAB7096F7B88E9075CA763190E758C83DB150CDF23548F280
Malicious:	false
Reputation:	low
Preview:	/*. jquery.matchHeight.js v0.5.2.* //brm.io/jquery-match-height/.* License: MIT./..;(function($) {. /. * internal. /.. var _previousResizeWidth = -1,. _updateTimeout = -1;.. /. * _rows. * utility function returns array of jQuery selections representing each row. * (as displayed after float wrapping applied by browser). */.. var _rows = function(elements) {. var tolerance = 1,. $elements = $(elements),. lastTop = null,. rows = [];.. // group elements by their top position. $elements.each(function(){. var $that = $(this),. top = $that.offset().top - _parse($that.css('margin-top')),. lastRow = rows.length > 0 ? rows[rows.length - 1] : null;.. if (lastRow === null) {. // first item on the row, so just push it. rows.push($that);. } else {. // if the row top is the same, add to the row

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	54727
Entropy (8bit):	7.978292041480337
Encrypted:	false
SSDEEP:	1536:UytkCxhIH9DrwtcylbsaKrP/swom2hAgdcFmaVyXhM8Ro:QqWH9ScQfKz/swMYVyXhtRo
MD5:	1F10430AF91C576318F74913F7FE62BD
SHA1:	AF4CE47DC165EA3466921DCED5587FD35D0C77A0
SHA-256:	5113D6D2179C6220089F57849A413258A876F536D7E94EA3B9F44D289F0C2218
SHA-512:	652EFBA3D32A6175F7379A48D9FFC9E43118CDC390C6C11C69F022F4540C300E169A931F9FCCE3E61E7229BF89F79E3A3B0D5105697703C9D51E8AA0C2635552
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:4C6A7373BBB611EC8FF0AB67BB66D5D7" xmpMM:InstanceID="xmp.iid:4C6A7372BBB611EC8FF0AB67BB66D5D7" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 226, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8129
Entropy (8bit):	7.880547513702046
Encrypted:	false
SSDEEP:	192:W7F+OYPQAW2dZfJuaEjag2T7ciX6WrYYKeEMtkhV78UOrK15rB:W0PLd71Xl6WrY5epk8K5t
MD5:	4D6AEB67ECBD7C91508BC96CD515DE31
SHA1:	76B5A4DB976FAEC6CFA81C44222D1FE6C9550167
SHA-256:	184FF3DD4BC893A9D9D8D23C43B626C4373B87E1644F58E57672D8CAF5702373
SHA-512:	88A37B6409BB4C88C013DCBB1EEC2F7A28B38082DDE104668B2F0E4C8AE3CA5847399D02FBF8046CFD5C1FD27CFADFEC5D71F10F5DFABC71E3AB8F2A332758BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................[....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:7FFB6034341211E98C2DA3D57B0161AB" xmpMM:InstanceID="xmp.iid:7FFB6033341211E98C2DA3D57B0161AB" xmp:CreatorTool="Adobe Photoshop CC 2018 Windows"> <xmpMM:DerivedFrom stRef:instanceID="686F785F9DD62147E7427D726C42E621" stRef:documentID="686F785F9DD62147E7427D726C42E621"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..!...CIDATx..]......C...Q#.r<....w.h.$b.."..Fq.F.....(. (^.....<...D.(..#.}....?._\|..o.?.==3.....q.........j.f..!J...6......

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7383
Entropy (8bit):	7.898765146087572
Encrypted:	false
SSDEEP:	192:P/b89WSR5crNNm2jCgdANXefNkFnpu/q4SMXf7:P/eLcrNI2jjdUeFkFc3SMXj
MD5:	1D9266115E934F56A602C57500CEE23F
SHA1:	5F1869E718891DDDF8C25B1A000A5D82001AB896
SHA-256:	B981F302A3BE390BEFDEA599FB27AC3EF5BD496537A3E704BB9EFDD701E514A8
SHA-512:	11E6BA9D8EC4E9C61F57E4938D63BE942A13D3C945145ACC769EB912C06D6C2A7D8AA0F32F142998CB79B88CEFBDF7E3D5EA535F0C3B02CE44334937599B220B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay10.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:62874275F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:62874274F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3926)
Category:	downloaded
Size (bytes):	310726
Entropy (8bit):	5.5831990451248386
Encrypted:	false
SSDEEP:	6144:62Oa/0aXlmfGXppoJXGhrZWcEQvyW3cB+LAd:62jsaXecnOr
MD5:	1A042094DD5E88C5D8ED8B0F43349C57
SHA1:	77295F4535C7425FE6B1729088ABD78B7766CE0F
SHA-256:	A4AF7228442C1FECCCE5244017C7DD2EB66763F6F188C718FFE108F13BD0165E
SHA-512:	91C2C274EBA01C5ED51C83758A8B96C507605B28B326F1B7377F384DEC60B0CAA58DA880F1946C5634D8A27E468E310BDF65E90C6C54BB94A7AE454E80E25745
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-RFKGKFWG67&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":22,"vtp_rules":["list","yamanoue\\-hotel\\.co\\.jp","asp\\.hotel\\-story\\.ne\\.jp","tablecheck\\.com"],"tag_id":24},{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":26},{"function":"__ogt_ip_mark","priority":12,"vtp_instanceOrder":1,"vtp_paramValue":"internal","vtp_ruleResult":["macro",2],"tag_id":27},{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_coun

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 110 x 110, 8-bit/color RGB, interlaced
Category:	dropped
Size (bytes):	17874
Entropy (8bit):	7.979190244891279
Encrypted:	false
SSDEEP:	384:eqUN//+vLmrCHPzxEkOmqPyfseRO9VcHXScpJgN8FqV:eqUVELmOH1E9ynRO90XSJ
MD5:	A33242B468FC2FB445F9CD5C3D3853A3
SHA1:	46603BEE104F69C7BCB973B1425452225080C80E
SHA-256:	116114BF233DB993255C154387306C20619C1770B19867AA9A3B91D26430C2A0
SHA-512:	88802F4AF4AC6BE842FF7875D7CD7CBA3D6115DCE06F1F4D5BF517A783DB1D423509126120A217D1C28397115854AA8C934A211FDDC097B771FEAF7DF4DCDED4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n...n.....>>.:....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:EFBDC213547211EAA7828F1C0CA513F4" xmpMM:InstanceID="xmp.iid:EFBDC212547211EAA7828F1C0CA513F4" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C173E33A904911E6A10A83604742EDCC" stRef:documentID="xmp.did:C173E33B904911E6A10A83604742EDCC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#iG...B.IDATx.$... ....3IF.....@U.......$....%R....

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	210938
Entropy (8bit):	7.977057301292877
Encrypted:	false
SSDEEP:	3072:OyL0LlRtew87fNZqCBbTwwV0fntjd/lt4bytnA4K0TcKKKVDvdszve8+9gph:70Fny3RTeth8f4Rc7KVDVsN0Ch
MD5:	08A58651D3A925E1D6DCAF7828974D30
SHA1:	812D49FDA1FD56C58B1EC986CA9E01EE4A3FB98B
SHA-256:	73C518799784AB75E8391EF00FEC47865628C0912F683608A2BCE7FD0C7FDFA6
SHA-512:	8D19667B1712866E32536F27EA21F4386DC8BA0FB2C866D83B92E967D31FD4B366A515DB5E7319EC6249A50387C1E919536FBD8A143B1CD50A7F47E09317B112
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_4-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:EE558605BBB411ECA197BE7D97B096F1" xmpMM:InstanceID="xmp.iid:EE558604BBB411ECA197BE7D97B096F1" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1675
Entropy (8bit):	7.252419443667501
Encrypted:	false
SSDEEP:	24:n1hmYaWwjx82lY2T3XV8Fa0qyJ3VKx2vGZ6oEnq7uo9oDx7HgAh9Cp6wPf:1MYLNn2DqFFRJ3c4vTD8ol7AATCn
MD5:	3384CB31CC9A7703EC0621A21D0412CA
SHA1:	2E15F6FE1F465DA66BB918525FBD0649222B1E8A
SHA-256:	E0C523C7CBCAB1C466FE770CEE494A883E9DEF549313A5737CC6921D42952CCF
SHA-512:	D1EF42633CD67E465B87CB887C60732F0BDA6806691F6AC2E5600052014A615CC2CE89370E09E456CED33D01B8A6A860977FFCE49B1C06B401968910FCDD45AC
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/sns_ft_ig.png
Preview:	.PNG........IHDR...$...$.............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:D20273F7A6D911EAA311A9FBD4C65767" xmpMM:DocumentID="xmp.did:D20273F8A6D911EAA311A9FBD4C65767"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D20273F5A6D911EAA311A9FBD4C65767" stRef:documentID="xmp.did:D20273F6A6D911EAA311A9FBD4C65767"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......IDATx..].MQ...f\&..a>.1J.H.'.!....".....)O..<.AM.%..D.(.EJ>Bb..d...a.._..Zm{..O..Y...:{...k....J.Rf

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	dropped
Size (bytes):	57293
Entropy (8bit):	7.982279420968936
Encrypted:	false
SSDEEP:	1536:5YRtVN10vEFc83JqwTyj2iqWxIskLU6kOYHTzp:5YRtVLgswOSh7QmtTzp
MD5:	95883BB0A1669451DCA9E69DDC2B24F4
SHA1:	0A0E8FC2FDB29D2E1324F9C1E938AE747ECB0AFC
SHA-256:	1F7C13AC9F03CFF17FD01C30D1D38FFFD48E264303E47056F5E367E13FCF9770
SHA-512:	879D25D91CDD7669886438F7F6E6FEFEDC5C572A93D6FB03D2DE94761878A0BA19C5F9FFDD8696F59D3DF3B5864F84DEE255478746B29D6E715092B34D7CA924
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69728578B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69728577B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	15246
Entropy (8bit):	7.92868383384673
Encrypted:	false
SSDEEP:	384:qIRvo4Exvkme0HPGArbDohkt6QpS1FfMMln1GJ4D:qCAdvkme0vGwQyZpWFEMln1zD
MD5:	F8B58415AD03B253DBF8EAF1FD6FC223
SHA1:	28554DF47EB3888F71C995CFD221BEF2305C1A90
SHA-256:	290621605D0CE06AA6658FD6D71D67899B79ED0960C2D10AA34264D69534EC45
SHA-512:	BE5B2A2F04FAAE7A67D265F0763D9D3E7CAA1E6EB9D5942F002E80E9CF169664FB658591770F674D1A6A0391692C13A9D069FB6850A1BF19B1D6542AB9E4E78C
Malicious:	false
Reputation:	low
Preview:	..................................................................................................................................................Adobe.d...........P......................................................................................................!.."1..Q.#Aaq.....$2C.%&'()3456789:BDEFGHIJRSTUVWXYZbcdefghijrstuvwxyz..........................................................................................y.............!1.AQa...".#Rq........$23Bbr.............%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.................................................................................?.V....uZ.....jo?..<1..dI.Q.....s.".S@..s..k25.....j..S..IQ.!.P.:RT..PI....o.:`..P.U.l....-.)p....d.2...E.....4.R....i.=.....-...Ql..@X..S.\.....9..l.1.k6n.b.f...!U..4.lk.1.@....r....6B>.H.gt.....t).j%<S.+..K..4.T..T..H:I.i.@....1.....f..J+.GnQ*e.4....p.V$...g...J.po.!h...+MT.\|...I4.H..F...SSfk.=5.\..U.m6..0...<.(.&{..1...am.t.r.vu..FO.'...7J.v.g.\|;RR...C...&.6..FD.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	6869
Entropy (8bit):	7.870560604180493
Encrypted:	false
SSDEEP:	96:Zsft2nkutvCtV75XLFKH9WXWIFuZ0+M0TQfkpKEzJ0NgZBv+:5v6VJLcdWLFy0+MNkpKOJ0NgZJ+
MD5:	323DB8A56F127C0167021763C7AE71C6
SHA1:	E2ED4222772183CF26F9531D8DF73722094F3140
SHA-256:	D4E2EC40F57076AAC4DE29A5393CD2FCD8FA4AF319146E2E7C4AFE57127B1C63
SHA-512:	1B1B6350F7661C5955BCA83FC48B7BB3C01F14E09941397935373982817E8BD27E96078B4BEEB3AAA415C5E321B49C23B70E1B36996482F5F5BA5B544A2C1A73
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1DAFFDE2F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1DAFFDE1F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	458708
Entropy (8bit):	7.980956251635015
Encrypted:	false
SSDEEP:	12288:KN6Zs1LNTEpB13EOiKb4bsoy8VljNe9xtMGffvS4lvO:KQs1Gn1utRYTMG3qp
MD5:	FB584DC8C6DB93503EDC1A6FF3DC6A55
SHA1:	56F9ED9335263B0FA70AEF865EF91E535A19C8AD
SHA-256:	5BF30ADAF8BCC9676F6D15B2227149BD8BC2746FDD85134638A6D451BCFB5977
SHA-512:	CB015DB6F11A7861DC9200B570385ABCEFB3915E4A35D36EBB169ED2F6CC570675AE890366156E61AC041420135EACFBC3962B745B5207ADA072A120A8C7C8A2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_3-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:29D01E98BBAF11EC976DB455B57E3F87" xmpMM:InstanceID="xmp.iid:29D01E97BBAF11EC976DB455B57E3F87" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8536
Entropy (8bit):	7.911285374838848
Encrypted:	false
SSDEEP:	192:sk+kM+/1+j0Ljt/eLGVfQ5xV0jyvIpKAF1muY3:sk+kF/1+j0ntWSxQ5xV02ApFFFY3
MD5:	C1045E50D8F725AE6E5181207A922FA9
SHA1:	0A6C88B9B8DE6FA527A052D01C4BF2A22758DC52
SHA-256:	C672531CAE51146CC0B67237657400E12B11F498E9D20B37DE655035EF7B9315
SHA-512:	0C42945054CACEBA07F86E7E07D5824DC8EBAE276F742B6A19DACE7EDC96542379F2EA59328F72B13D0D3528862DA6E8733E2485022D5B4B14E368E06E76B207
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63B3E34CF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63AFC765F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 402x112, components 3
Category:	dropped
Size (bytes):	15507
Entropy (8bit):	7.951862559589596
Encrypted:	false
SSDEEP:	384:yVrkGm5BDbiG3ji9Py56Eyp8PoTV9d/Ptd6ebhrlGKcvGXU:A34BDbiGzE656D8Pe99PeebhrlGKcvGk
MD5:	9C6E6677930CF1DE5D77390A6C6B133F
SHA1:	3B577B5DC0A1E082F22B47137C796B50C83E47E7
SHA-256:	AE99E08B728F9DCFE15C86FF2F23D824460A605B56FBBB7C7C6274ABDF138293
SHA-512:	118E7573298269098EF2A33AD16A1AD95503A91FBA0353A3ED6A435F95908032CD7FCB34B505F03DE33170AA8824DDF094D34F0BE782A8B960E46754E312D13C
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D70DE68FB4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D70DE68EB4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	9408
Entropy (8bit):	7.919170908257337
Encrypted:	false
SSDEEP:	192:0zbfB95J1zEP19x2qZMfbRSbx2YF8L5dfkqbvDerP:0J95J2PF2RS2Q8njbvDUP
MD5:	C446B6C0C0E69F81803E4CF4D6B35CBF
SHA1:	917E49079CE8E6005B8688405832692CE8F22A78
SHA-256:	7A24747AC2D12D588C30542C3E0CFE340AEAD4654A6819934F1E57186B09C294
SHA-512:	387F737F73AE3FEEDC416430FA2C88AD24FC06AFAB7C3D7C24FF5DC8DCD2A984B67C95C76554B992EBA6A1C37CFF500157ADA9A25BF08443B380CFB09D33E138
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1D972FB3F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1D972FB2F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2064
Entropy (8bit):	4.558766730960899
Encrypted:	false
SSDEEP:	24:XD75OxcUbnwG4eb5+xcUbnwG4ek9lcDnwGldTCwG9egBJOCHbNiCoQgdTC7I:T7/cz4kjcz4XMbzldTCZdindTC8
MD5:	879FF68832F4957B519BD859C62A7683
SHA1:	E00D01E3B878914A7F323BAEA84DFF555226C182
SHA-256:	A15FC2A4EC10DFB6983272DF81131A25CE6A63D15ACF15862ECE259CDEA8EC08
SHA-512:	B0F9CECBDB042AE02194565D138530C11AB7F99151D4E3D37A4025C762B9ECDB86798044DE7340C646E2BB078E572013B30D7CC80FFCBDBF419F0EDF7185F06B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/js/slider.js
Preview:	....//slider accordion..document.addEventListener("DOMContentLoaded", function (e) {.... $('#js_slider_mv').slick({.. fade : true,.. arrows : false,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : true,.. autoplay : true,.. pauseOnHover: false,.. pauseOnFocus: false,.. lazyLoad: 'ondemand',.. customPaging: function(slick, index){.. return '';.. }.. });.. $('#js_slider_mv_sp').slick({.. fade : true,.. arrows : false,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : true,.. autoplay : true,.. pauseOnHover: false,.. pauseOnFocus: false,.. lazyLoad: 'ondemand',.. customPaging: function(slick, index){.. return '';.. }.. });.... $('#js_slider_pickup').slick({.. fade : false,.. arrows : true,.. autoplaySpeed : 3500,.. speed : 2000,.. dots : false,.. autoplay : tr

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x600, components 3
Category:	downloaded
Size (bytes):	54089
Entropy (8bit):	7.9658433251050065
Encrypted:	false
SSDEEP:	1536:WNG5DgYB82lAES5+cgBpSumeM1fKg4hQGq9F:hZdljc+hSuf0D4hGP
MD5:	4FD6F7D1678B21E2BE8EDA81FC037336
SHA1:	9D47D74960D1408D0907D687A1AB6D1FAA21CCFA
SHA-256:	4A017D4134B33013E5089775E4C40382AF9BE6018713805B826BA8DC8D4E8466
SHA-512:	AF34A47FA957418004C5401BD4BA408B23C46747770FB7FF03F39170CFCF10FA2C178B2D02B1F2A5D67A6F4AE11BC3925A785334CADD11A755F10091D78EC701
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_stay03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:696C2142B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:696C2141B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2590
Entropy (8bit):	7.877900399361336
Encrypted:	false
SSDEEP:	48:z/6OpXztIsQMAFEG6oFc7XAiVnMZMmrZ3vLfcjBhHMsoA7UBf:zS4jtvQMAmdt83vLYhsRYUBf
MD5:	BD80AF870D4E987AD9148048DBA32FBA
SHA1:	671D5F210242552904007189E357D6DE6F960CD8
SHA-256:	66444E4E5D81F4670942249185D846544990C1EF8EB7E4327A60C69CFF30D5BD
SHA-512:	C9DE1DC61DD006F20CD1B447170DB88C4C7EAC52DE874840068390CBC54BBCE01818ABD354A300570AD36BDD25E04EB58307549A7F7A5670D9BA6A1F425E0161
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......`n.....pHYs.................IDATX..wXS...O...$ #...p.R.NZ...TEDq....U.`...2.=E.@...".UT6...l....%d.MnN..."E..........O...='8.!......FK..S<.......C:.f.^..L&.P:.....7....f.P....i...NO..!9'.$..,.o...........P[]mke>S].qa...t%..CE93-...{..2B.-.fA.'..n^6.....W.....i3.l...9..i.....hO....\.I.2.SnCC.;.-....lg.\|......2.y...u..'.T[]..w......CCC...B.."KK.xy..@.B..NJ4.EK..s.....w>$.......U....()..........z..[.zz...\..}Z .E..=..X.a....q.~....w.)..V.'...p...w<>..PSW.w....."ii.9...x{.(.I.ZX.......J.......?bfe=....r..K....?...)7..g.g..3.BS.....Q...++.7}..\|...W....QarR.a.c....x<1{1....g..r...\|d /7..Md._.IL.......7...........t'1.........U\|...##V.]+++..&V..P...<m...........0....p.)#5.qA.G..?.lki9`........H.'.../...j.\/7W8Q.<.P{[.. 3..R.....z.m......cyiIrR....{z....-[."..w.......k.\|O....N....8!.......Zm.ThP.!.#.mm..N..B.........^F.....q..........m.....\|o.?..*+.vrq..85!.....L.z...zS2.....url...W....k...j..>..H.a....t8v<6.j]M.{.1

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	10681
Entropy (8bit):	7.925787836484126
Encrypted:	false
SSDEEP:	192:bHVHWQ8K/hajLraTJrQ46+7GI6xTGr+W207nU2mP:VWB4hajPa9KgGI6x6320LU2s
MD5:	E94535B714A11DFD38B8F32F2D871B0D
SHA1:	3942D7C2C2D9DCA686C6D3221854380B0132FB98
SHA-256:	4E309EABFAAADB5A2801D245F4D4F5886147F91D8D1196D72ECD91E140E1465F
SHA-512:	FDE3741CE26CE39396F56A04FDC1323EC37B2B53DB4C66E5B516E01F502337A85AB7723AC3D8B296E7329CADC5E100E5AEABF558DB51C1D000637C16847650A2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61B19488F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61B19487F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1188, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1999], baseline, precision 8, 1000x594, components 3
Category:	downloaded
Size (bytes):	382087
Entropy (8bit):	7.961923824469686
Encrypted:	false
SSDEEP:	6144:bdZPiLSOUVILxK678s3/jK2ZxoBYWJ6eW4TCOv6/BaMcPRQ3l8Knw4K6y/AwV58L:HBOU+KsrRgYguOvABSJQ18yi/APRwdK
MD5:	089770680C6A83BAD87F1960804F70EF
SHA1:	EDFE050FA55BFAF24B33E4763015E3E126D5288F
SHA-256:	EDD46B321CC37CB1267C77849683946ACE3590D8864E141B11BD6E8619C48874
SHA-512:	01005CFC64E2840B9F375F44EE056FC3D505E7E1E5BC0D9CAB20E29660B16835E0CEC84211A25DF438FAAAC3BBB6E7A3F7780828C02FEDE79BA0AD3678027058
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/img_seeyou_soon.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1...........2..........i............. .......LK@..'..LK@..'.Adobe Photoshop 24.7 (Windows).2023:12:19 17:46:52............0231..................................R...............................n...........v.(.....................~...........".......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................V...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....}...G"g.M.....{@...n..V.md.\Ap...nkMl\|..K~.A....g.K...RI.CT`.....8.a......

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 306x182, components 3
Category:	dropped
Size (bytes):	62189
Entropy (8bit):	7.93678983143026
Encrypted:	false
SSDEEP:	1536:0uaXaynoJ7OVkYjZPg7n8n+BP7B2xSrm8jrvr:ZaXaynXVkCLKQxSrmqvr
MD5:	8CF0DFF01C0819FC9EA2F223E4EE3B42
SHA1:	CC9205CFB19037BE90A5BCD9F1EBD6A19A107DCD
SHA-256:	79A990BEF0C715B207FBC2CF599F365A8F6AE3F5FCBDC61EC4B77211A827542D
SHA-512:	0DAA79BBEDBDBAC25DEC48C17F47A7F50C775B1D8BB5EB667B7FC0ACA4A3DD6D923771750552D97F01D8B5EC98222161BDF99E756015FBFC85389B862F3A213D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................2.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..p..S(b3..q....a.....U.M.P..$.B.R......b..~i...9G........^_5....ay.2..B..H.O)P...4...;..1.Df.]$...1..@.b.u<S4..U.BU....h>.j....{.......t]........b.N..`.0...r(..<...{/.....r..x$...BP.4....5b..V.$.X7..!.Sw.7(.#i.W..\|.D...!U.A.-..(.d..X.A1......)..ilF....."y.x..<....#C.........c.^F..m.$Ky.g.....Q...c.b.....eH..JF.T}..d..EO4D.a..y............W..\..d;+<S*...a.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	dropped
Size (bytes):	17119
Entropy (8bit):	7.9362546402396035
Encrypted:	false
SSDEEP:	384:SOvz9Zfc8v60YvCmh3mD+8HO4izQsMqckHVIWiezV8qfWIk9PxMk+h:tz9Vcy2v7h3eunjckVnNOpDR+h
MD5:	BE457CCADAA883AB0BA0E5C626786DA0
SHA1:	8A508782B15F31C99F274FB4358420C54706B475
SHA-256:	2011E32FBC2E3C7A8639323175E544D7AF52735C7243DEAAC07A17846650CBEB
SHA-512:	A996454E20BB76B6FB4F7F4BB5481AB3154B9668E61C717F946501D8F65F18C94D6487577953EACAAFC46550F04C8F954606D7140C87CF970FDFF41D1B3413CF
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:6079B6A5F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:6079B6A4F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8279
Entropy (8bit):	7.908265449567834
Encrypted:	false
SSDEEP:	192:wRKEA+o7tEfrHVbBg59+g1jmfyWp6y6mIbq7bioO:w4dSVcDUO
MD5:	EAB838FB2F6AF77F5B07A3F9A438F362
SHA1:	D03642E4F636E9775AFF373D1CE495630D0A06D8
SHA-256:	79F75D9336303148369464242A091BE9E60DFEAB5D787049D6DC2F03E6F4F7EB
SHA-512:	2D4D9AD3FFA307DC9D0EF2041C3545CEDFE6388AFD0FC807BA55C0F3B0EE1759E07F96332AF718F0DBABC227BE8AE68B5A05F0726FA99F9546540C9D5669E7D2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest10.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E68A830F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E68A82FF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7808
Entropy (8bit):	7.884643619654866
Encrypted:	false
SSDEEP:	192:rdhUHXdQWVWfFuEhAuZvCKR9M5610EayBANe:rdhAiWwMt5KHm4d
MD5:	BFE934C42B1F3D530FFFC4EAAFB044BD
SHA1:	F3D2BBBFE4E0CA62819248103750572094A78A7E
SHA-256:	C165AE167299159219A11B6037D8761648B267250F7429CDB62F8B3E0956D425
SHA-512:	2AB0F5CC3F218970B633DC5664F5B43D78F68639292FDFA28A9212384895A09B81830B4CCCEF957A93A5628CBF0BF54B28703A0549D5A1EB8BB372118F4EFE5B
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/header/bar_bg.png
Preview:	.PNG........IHDR...P...P.............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:D9F1ECCC904611E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:D9F1ECCB904611E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>v.`.....PLTE@. *..>,.9(.0..2 .8&.6$.3$.9(.,..4$.. .>

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1162 x 640, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10587
Entropy (8bit):	6.855100969806134
Encrypted:	false
SSDEEP:	192:gxqUArJNp0VcnP2jkQWqF1bEZ7DcS5jCoI:gxqUA+0P2jhRzbcB5jCj
MD5:	6600D960C008ADB93A133058FF9BB2C1
SHA1:	025F7150E7413A07B5F62C79A4BBABB33B556157
SHA-256:	BCF1D827FEAEB6B4DC187CB050240D565B8C85EBF4D25BF52676051450B3B748
SHA-512:	70D1E45F0F00D590F2B8AF80D8498F5D00C845E1022DCD0B6505C51D4C25C49D740C7D62A3AE77305DD455EB63A8A30B352B1FCAAD5B815E6E56301068A966A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Z......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:DA1263F7904611E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:DA1263F6904611E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>At....%.IDATx...y.]uy..u.'$..Dd....^@..c@..J.......

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	293051
Entropy (8bit):	7.961920453324416
Encrypted:	false
SSDEEP:	6144:cVYwj0w61CGEr1P1J2b0ZJgJDPMuu4F6PZtPRNOWxzCEy:cVyC9AbcJgCuLFF2z8
MD5:	C5AA39D50791A97638FCCC055558588F
SHA1:	407E7934AC09C0A73A84B8370FED4B22E52C6CB5
SHA-256:	1EDDDD3B0FF5A0414FA43875FE6AD14C15D587A49876B23741672FAE129AD267
SHA-512:	1B1505D9FF64C4062E4E87AF5A14FB10124012D062C80D71B360AAA371A2742E5896F560B95F2C218C6C5B8E8375708505AE845E16032718358A237F454D5163
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:EE5E0466BBD411ECA2B1DEBAA47BB491" xmpMM:InstanceID="xmp.iid:EE5E0465BBD411ECA2B1DEBAA47BB491" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5a1413f3-2669-7e46-9499-d0b738b4076c" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	8590
Entropy (8bit):	7.904121954483654
Encrypted:	false
SSDEEP:	192:drj3hMyVDtK492rvQziPaMJb5Jn1/k0Y2:Zj3hPLYr4zifNrn1k0Y2
MD5:	B220BFDFD3690E0C08619CEB9B31225C
SHA1:	D5C6D9E8B81A75B84B6FAFBA1E15CF363D41788C
SHA-256:	3E29A421069B735A13347D9E210E64BB6D2241F69D8F6CA6C0EF1409D60C913D
SHA-512:	D4783F3DA31AA071B76C93429EDB640636CE96707998EDFFA9CF3C54E4D07B553D7852ACBCF298D4444E67881AD9A0222F1D210C96002199BB27A9F7958E2C49
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63A4AB6DF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63A4AB6CF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 37 x 19, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1231
Entropy (8bit):	6.559988805311635
Encrypted:	false
SSDEEP:	24:e4J1hpunQWwh82lYSKwqjV2hmVpn2hJT34yJ3VGqcGB4Z+6pMWNV:e4XitvnLtR2hmn2hJfJ3FcYMJV
MD5:	978CA508ABCE21149ADF8EFD7EA0C1CB
SHA1:	25EC31BC67DEFC50EBE3F18639795D4FA46E023F
SHA-256:	6292F1D5BB85E3539C091505BCC56C962DA059F12B2B3690B83CBA7F63789899
SHA-512:	E311ED671B4B79B3CCC9C14420D77F6ACD0597C79F7EC319CEB1B6F3F4716F8C664B74205FCBB8FBD651F4E29832604E291E8C7EDE008CD22F2130D6408F0AF9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...%................tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0A8011740720681192B0CD2FEA0D2934" xmpMM:DocumentID="xmp.did:30C84CFFF3BE11E4A685DCA6ABAB5FA6" xmpMM:InstanceID="xmp.iid:30C84CFEF3BE11E4A685DCA6ABAB5FA6" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:664DE6923921681192B0CD2FEA0D2934" stRef:documentID="xmp.did:0A8011740720681192B0CD2FEA0D2934"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.V... ..N....#....(n..u.G..p..A....6.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x860, components 3
Category:	downloaded
Size (bytes):	709761
Entropy (8bit):	7.987420922049344
Encrypted:	false
SSDEEP:	12288:QzGGHzxrCfmuK+FIXKxjuBA/B37Mue2SQ6Iobu4z7qnzcKxxSjFQE/:QzlzPGe6xUk37I2SQAu4ShTYX/
MD5:	2F7A1A31ED60AA01D7FB76E8F16F474F
SHA1:	7C0F01D81351B69FF462C610CB7A9BBA07994F79
SHA-256:	C7CDD1603B5C173B1010D0CA09CE6936AB45A1DC674512B5114CCF1DC262DE4E
SHA-512:	6085687FDAC88F3DABB22D4E1CC6BF8AE235D3041C9BC57DE5E31D7745D36707664D8E7CABCCD74AF67ECCB96324B0FCDB0766A47597F644EC3A8ADC57BFC24A
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/bg_store.jpg
Preview:	..................................................................................................................................................Adobe.d...........\..........................................................................................e........!..1A."Qa.2q.#....B...3R..$Cb.....%r...'4c..&5DSs......()6789:EFGHIJTUVWXYZdefghijtuvwxyz...............................................................................m......!...1.AQ."aq.2......#..$3BRbr..%...4CS..5.....&T..'()6789:DEFGHIJUVWXYZcdefghijstuvwxyz.................................................................................?..DO.......b.8.e...4.....2UD..d......}.dzY.p......@R.W.f..M.wbu....I...8.~W{..m.RfO..^pS.fo..v...3.......q.g7p..C..r.\|.....e>bv...m...jH..Q..X8$0.s..\|&.f".T.............l5*..f................;.I.:. ..I..M.A..@-b.........^.}L..4..xJ.s./U.......q.+.H..N.H..,H....%....FR..I..m........h..N.. t..7._....Z....>..[.vE...M.;.(Ca..~...S....+...#}.\....~..t.)an[.:..Q6gY..@

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-RFKGKFWG67&gacid=42326441.1730142869&gtm=45je4ao0v881287644z878713577za200zb78713577&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848&z=1195175701
Preview:	<html></html>

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8010
Entropy (8bit):	7.906099783949533
Encrypted:	false
SSDEEP:	192:tOrJCmsGtXy71h3IlGpkg0pPbBVVZoqyJP4nnNr8:tOrJCtcXy711IlGpk3pPbBp4JPMNr8
MD5:	AA4D73C72B1838E19FA95D580C7C5052
SHA1:	A190ACB48B27583BC54AE9E81E747D502849B1FB
SHA-256:	CF2573CD5AFA9E33FD9CA0567090E19C2570CB8D2F2655E6C5A5EB37C2DEBAE3
SHA-512:	6DD87DB30610595F9ABF6667A92401B91F61CDC01D12E218A7DEA509E68F925001A5D9062B8D826DE01968257EF20BFD2BBBF5893622A51A910FE8F46DF3EF3C
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay07.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63AFC75EF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63AFC75DF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	7794
Entropy (8bit):	7.892155165247441
Encrypted:	false
SSDEEP:	192:rduNnxTreH1G+RuNP2Xbx/305RFC1TaZcJd8Y:rduL9+RuN+3eRERFx
MD5:	08DB9BFAD6BC176CE76DB9010FB4DBB8
SHA1:	07182D82F4F2F82C2195D8286C3A5C9AB9A5F5A4
SHA-256:	EB317FF7E1D3B0F055B688EEDE28DA457618B64A61CB9CB54053E5377C7C2BD6
SHA-512:	3D17560951E9E38D8A15744C88991970900B4642905CD28CA078B277C8DC1411D36109DB4B58C5D214F62CBB88172A977DC6A1477A2356E56EEAFCF6467AC91D
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:61C9426FF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:61C9426EF6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31877)
Category:	downloaded
Size (bytes):	32315
Entropy (8bit):	5.3840534528632915
Encrypted:	false
SSDEEP:	768:g/JXOL4t4IqvPuaPUNHBdTAlxBekNRBy+CUFQb5qeT/:9k4IqvPu2UNHBlAlrNRBy+oFT/
MD5:	B76753D3C93DA286A8C1C7BFE2A1E823
SHA1:	AC51FB31BDD98E4ADFF4D90918F829144670AFE5
SHA-256:	402070C3DE712BEEE07622762669E4C6AA00D7AC8BA6E83D477E3E39A0B42444
SHA-512:	B1A740F7BD11EB4876A4428A3E867578181AACC31951C4454668E66273E352B49C65B0A297E0658229FC1B1F517229F9BDDFB6CDBF7D3FDA421307B7CE2D3D3F
Malicious:	false
Reputation:	low
URL:	https://uh.nakanohito.jp/uhj2/uh.js
Preview:	!function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var l=new Error("Cannot find module '"+s+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[s]={exports:{}};t[s][0].call(u.exports,function(e){var r=t[s][1][e];return n(r?r:e)},u,u.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length;s++)n(o[s]);return n}({1:[function(e,t,r){(function(e){Object.keys\|\|(Object.keys=function(){var e=Object.prototype.hasOwnProperty,t=!{toString:null}.propertyIsEnumerable("toString"),r=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],o=r.length;return function(n){if("object"!=typeof n&&"function"!=typeof n\|\|null===n)throw new TypeError("Object.keys called on non-object");var i=[];for(var s in n)e.call(n,s)&&i.push(s);if(t)for(var a=0;a<o;a++)e.call(n,r[a])&&i.push(r[a]);return i}}()),function(){function o(e,t){function

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	458708
Entropy (8bit):	7.980956251635015
Encrypted:	false
SSDEEP:	12288:KN6Zs1LNTEpB13EOiKb4bsoy8VljNe9xtMGffvS4lvO:KQs1Gn1utRYTMG3qp
MD5:	FB584DC8C6DB93503EDC1A6FF3DC6A55
SHA1:	56F9ED9335263B0FA70AEF865EF91E535A19C8AD
SHA-256:	5BF30ADAF8BCC9676F6D15B2227149BD8BC2746FDD85134638A6D451BCFB5977
SHA-512:	CB015DB6F11A7861DC9200B570385ABCEFB3915E4A35D36EBB169ED2F6CC570675AE890366156E61AC041420135EACFBC3962B745B5207ADA072A120A8C7C8A2
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:29D01E98BBAF11EC976DB455B57E3F87" xmpMM:InstanceID="xmp.iid:29D01E97BBAF11EC976DB455B57E3F87" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19504
Entropy (8bit):	7.8938332057719
Encrypted:	false
SSDEEP:	384:UmnPIHYA2eIsDg9G2z+VKXJvVEil4x4KLybrtxdchW:FdA2Rbztddl2lcrK0
MD5:	DC3E38504BB860E1F180609D55434E35
SHA1:	5E4DD1946F2A27E20E42DBC97CC16BD2F66E88CB
SHA-256:	C419F214CBF79FABDC3E5B49B9E41070E4EBEC974B17FD3BC4121FD68F0B9B7E
SHA-512:	B6C7602D862E33423C8AF0A013DF0B75D58502379DC1338423BE14FBEA062710EEFACADA01B44AF3D5B2715B9F25026C9B4DBD7CD6C7498F9B73EEA0E814086D
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/footer/ol_ft.png
Preview:	.PNG........IHDR.............\r.f....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmp:CreateDate="2020-09-25T16:07:46+09:00" xmp:ModifyDate="2022-03-07T17:46:38+09:00" xmp:MetadataDate="2022-03-07T17:46:38+09:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:63579fbd-4e75-0d47-8f6c-ce6f4f64d4f2" xmpMM:DocumentID="adobe:docid:photoshop:fb08caf7-a0d8-7241-a9c5-5c72a0bba6bf"

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	88007
Entropy (8bit):	7.9772305540254544
Encrypted:	false
SSDEEP:	1536:0LLBrV7OmiBL/922dOO44Fhz8OmwgGoTvuNd42jdTpUfLMKhKVGlkjNBNUMjBkhS:AB57OgW44FuO/gGO+tjVLKhK6koM2s1
MD5:	0212C9980FDC17243C018ECEA0063D7E
SHA1:	3B504B3FFA25A5E67C69B0866EF97CD7AFCCB37B
SHA-256:	EDED76D654AB4C7C6F1D1E0FCD918206B0E447402E6A52886408149D89E4DE79
SHA-512:	CC125604F5D6DFEBB7BB060105D6F94EA37E7EE48C59667483FE6E8745F70F8E9485533AC6E6190A5CC19AFA79D47CAF553E3AAF0F4239B9FB5DC41AF4C708E0
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_7-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:A19D7CC7BBB611ECA435ACA4446C916C" xmpMM:InstanceID="xmp.iid:A19D7CC6BBB611ECA435ACA4446C916C" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31877)
Category:	dropped
Size (bytes):	32315
Entropy (8bit):	5.3840534528632915
Encrypted:	false
SSDEEP:	768:g/JXOL4t4IqvPuaPUNHBdTAlxBekNRBy+CUFQb5qeT/:9k4IqvPu2UNHBlAlrNRBy+oFT/
MD5:	B76753D3C93DA286A8C1C7BFE2A1E823
SHA1:	AC51FB31BDD98E4ADFF4D90918F829144670AFE5
SHA-256:	402070C3DE712BEEE07622762669E4C6AA00D7AC8BA6E83D477E3E39A0B42444
SHA-512:	B1A740F7BD11EB4876A4428A3E867578181AACC31951C4454668E66273E352B49C65B0A297E0658229FC1B1F517229F9BDDFB6CDBF7D3FDA421307B7CE2D3D3F
Malicious:	false
Reputation:	low
Preview:	!function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var l=new Error("Cannot find module '"+s+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[s]={exports:{}};t[s][0].call(u.exports,function(e){var r=t[s][1][e];return n(r?r:e)},u,u.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length;s++)n(o[s]);return n}({1:[function(e,t,r){(function(e){Object.keys\|\|(Object.keys=function(){var e=Object.prototype.hasOwnProperty,t=!{toString:null}.propertyIsEnumerable("toString"),r=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],o=r.length;return function(n){if("object"!=typeof n&&"function"!=typeof n\|\|null===n)throw new TypeError("Object.keys called on non-object");var i=[];for(var s in n)e.call(n,s)&&i.push(s);if(t)for(var a=0;a<o;a++)e.call(n,r[a])&&i.push(r[a]);return i}}()),function(){function o(e,t){function

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	76564
Entropy (8bit):	7.984582202497407
Encrypted:	false
SSDEEP:	1536:T6ENQ0tMTjU+gXf1wv4/3hcrS2UbuNxJOS+GfcuyCaXAmlJN:TDNfMBQvSK29+G0CGAmfN
MD5:	E587A1D8C166BC599C5C87BAA40208B9
SHA1:	0731EE2ED5206659CDFED7FFCDD56645C8928403
SHA-256:	FB5F78779623F1571D07E2F73957694571D5FC915682E16886FFC5874FEA2D77
SHA-512:	6B17C5E6B796EE7DD19BCF8F7D54638C4C8578158166AFC8BB22CCCDBDC4D63539E858D163DADBEA23E96B2D68387152ECAA961C24BD1150CA0FE2788BCDF5E2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_5-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:84FDF6C1BBB611ECAEA89CCEA1698B4D" xmpMM:InstanceID="xmp.iid:84FDF6C0BBB611ECAEA89CCEA1698B4D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 179, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	85520
Entropy (8bit):	7.993653480136194
Encrypted:	true
SSDEEP:	1536:30AXVSULgVAY02CwoJcHCV2iGjQiaXtokgL5Byf7MXhRXVRFajfzf5Lg:30AQxCwwV2i7iItoz/RXVTajzf5Lg
MD5:	0FE5CC4474C618DB35F282A4A81A0E5E
SHA1:	2588472D6218F0E236956607CE0E8604B85B5C04
SHA-256:	DF348C6D0E558823B9CED7242DAD350F87C415D24E6FE91F6D52FC81CA519E11
SHA-512:	7EA87059E867CB6DE8F8A9DD54B82078383C87800CC7A47C377E7229F894A58D4890D01C1FE323B267B2922E869CCBDC396ABEBDEFC2560AA54CD59747BE7834
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240918171706_FmGcY.png
Preview:	.PNG........IHDR...2..........].... .IDATx...i.f.u%..9.~...y&%Y"5P.HYC{.G.=....I. ...F..F'h4` .:?.$.4.F~..a....i....,K.(Q.%J$%.".(.....c.....H.......7.{...k......w...........w....{......Gp......,.....x.....XE...`...RQ.........k~.J..h.S..0..a.......p....Q...w..`....`............V..m......`....X....;.....mq...=...af.=.&.....`p8....aV`.....b..x.x.A....0~_.........w...`V.ZC-.}z....c.0.R..OP...a.;.w.m.....1..........e.w.{.Z........v...Z.[..`.p9...........sS.`.m.P.....=.e....=5..T...X#....jN..O...m-...........c.J...=.>...z.Y.N.r.R..W.F.VjE.=..4..R..7xwX..=v...Vj.q...a%.=........w..k-.AAY...z./.q.6.eA.e]...b....h.~...O.w...)h........JL..NC.1.\.a.J,...=n.m{...5..)(V.....N2..8.i.....,K\|.F.."...=Z...Z0.XL2bal.... .q....cQ.Zy....#...aMC.4...0~...m.I...7n\|.....R.4B.{.Q..p....uA)._o..........X.1wu.q..T).V......a43n$?..qo....K...1d...L..=.So...M..............D.^...K.:..5...2..B..Y..ZK..Rk.W...#M.V...^....b].!q.y.....#.}i...Z.pz1w.`.y.?..Ry..!x.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	76981
Entropy (8bit):	7.976417412997382
Encrypted:	false
SSDEEP:	1536:ZrScl24EoQ6NmaQKPys5BxfzhpjlROoME5LFJT7nCRmKmsn:ZrScWoQ64abPys5BxfziOF8R1msn
MD5:	A59D5F750123F356AE51C51BF9AB4981
SHA1:	7D2EC39EDB32DA3090DFF7C1785CC40D986B6784
SHA-256:	5BCFE0DC87E712EF34BC5EA2B17C0A767A12C9E3B6C570B559ACD72A3684D5B9
SHA-512:	D483ABC58E77EB60696087949683033460CA27F213A83B863A7DA9A9D6D532E0719863D76C9277CD9A0080A00F25A3EEB12250708A2D3C961750931B1DE427AE
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:57CAD7CFBBB611EC9FD6BDAC6ABB659D" xmpMM:InstanceID="xmp.iid:57CAD7CEBBB611EC9FD6BDAC6ABB659D" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	5693
Entropy (8bit):	7.833352449116137
Encrypted:	false
SSDEEP:	96:ZIftbUom2F+ncwW4F1718M96T/L8P9ZeMqxT55YvttrvzZgQ:nomLc3kGH/I9YH55YVtrvb
MD5:	D50865270A88F2CC00A9C349C2F88DC5
SHA1:	59E30D2E33F6D10793ED7E2745C0AAC2BA495493
SHA-256:	E298893DB7F10A4BBF85177C66B0E9D4D412E7E5453A40937F89EB9EE4AD2605
SHA-512:	2ADA8A4C485B46E92F2032A6FEFDC15B7BC26F478B756435D8CB67ECB1879108DA9DEC2A84D1766F22031C73829DB4F5D2AA50CB4D091389EFA20BA5618DB25B
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:8461ECB2F6C511ECAE29EC13862F33CB" xmpMM:InstanceID="xmp.iid:8461ECB1F6C511ECAE29EC13862F33CB" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x860, components 3
Category:	dropped
Size (bytes):	709761
Entropy (8bit):	7.987420922049344
Encrypted:	false
SSDEEP:	12288:QzGGHzxrCfmuK+FIXKxjuBA/B37Mue2SQ6Iobu4z7qnzcKxxSjFQE/:QzlzPGe6xUk37I2SQAu4ShTYX/
MD5:	2F7A1A31ED60AA01D7FB76E8F16F474F
SHA1:	7C0F01D81351B69FF462C610CB7A9BBA07994F79
SHA-256:	C7CDD1603B5C173B1010D0CA09CE6936AB45A1DC674512B5114CCF1DC262DE4E
SHA-512:	6085687FDAC88F3DABB22D4E1CC6BF8AE235D3041C9BC57DE5E31D7745D36707664D8E7CABCCD74AF67ECCB96324B0FCDB0766A47597F644EC3A8ADC57BFC24A
Malicious:	false
Reputation:	low
Preview:	..................................................................................................................................................Adobe.d...........\..........................................................................................e........!..1A."Qa.2q.#....B...3R..$Cb.....%r...'4c..&5DSs......()6789:EFGHIJTUVWXYZdefghijtuvwxyz...............................................................................m......!...1.AQ."aq.2......#..$3BRbr..%...4CS..5.....&T..'()6789:DEFGHIJUVWXYZcdefghijstuvwxyz.................................................................................?..DO.......b.8.e...4.....2UD..d......}.dzY.p......@R.W.f..M.wbu....I...8.~W{..m.RfO..^pS.fo..v...3.......q.g7p..C..r.\|.....e>bv...m...jH..Q..X8$0.s..\|&.f".T.............l5*..f................;.I.:. ..I..M.A..@-b.........^.}L..4..xJ.s./U.......q.+.H..N.H..,H....%....FR..I..m........h..N.. t..7._....Z....>..[.vE...M.;.(Ca..~...S....+...#}.\....~..t.)an[.:..Q6gY..@

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	dropped
Size (bytes):	210938
Entropy (8bit):	7.977057301292877
Encrypted:	false
SSDEEP:	3072:OyL0LlRtew87fNZqCBbTwwV0fntjd/lt4bytnA4K0TcKKKVDvdszve8+9gph:70Fny3RTeth8f4Rc7KVDVsN0Ch
MD5:	08A58651D3A925E1D6DCAF7828974D30
SHA1:	812D49FDA1FD56C58B1EC986CA9E01EE4A3FB98B
SHA-256:	73C518799784AB75E8391EF00FEC47865628C0912F683608A2BCE7FD0C7FDFA6
SHA-512:	8D19667B1712866E32536F27EA21F4386DC8BA0FB2C866D83B92E967D31FD4B366A515DB5E7319EC6249A50387C1E919536FBD8A143B1CD50A7F47E09317B112
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:EE558605BBB411ECA197BE7D97B096F1" xmpMM:InstanceID="xmp.iid:EE558604BBB411ECA197BE7D97B096F1" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1837
Entropy (8bit):	7.774373768478249
Encrypted:	false
SSDEEP:	48:38WooJxwsodkf1IR5hcaeosRrq1/fHV9X:phJxw1dO+iaeoe+1/fH7X
MD5:	770614FFD3F4ADD804BCBE8BFE257DA4
SHA1:	FAF4C7B47E191088A1E2216D143C1FD019BC00BB
SHA-256:	CB536C5181A6188E11C4034F1AEC0DCAB99671EB1E9E4B5D4B2FBEC9BB4501DE
SHA-512:	7F3E06885591F7CE781AB8292760457136C6F789430A9AAC839DDCB03F6314783F7FCB4C07B18E54214789FF1717C226172B449BAD0E338B1FE0C627AC7113EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...KiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about=""/>. </rdf:RDF>.</x:xmpmeta>.<?xpacket end="r"?> I.:....IDATh..]L.W...J.H.O...Q.3..4Lp#. 3dfd..T..e.p..1.,1c.l.....2.....F.Y\.16F....j.-k"AQ.)..d....8....~.-...%.y....{.{.\...H...<`......./....}.O`.....<..T....R`1B6..q\.i;p..K..PN8.H.....?\.........p2..,.7. ..~'..P.....?.h....8..E(.@...M....s<h.#.B....%.n..........5@J.yI.....,..Y.Z..4...~.....j.A.....s.......V..03d..C...+.p&.{.."...O....+ed.!V"....p".>;..B.x.KXO..*. ....d..D..(............4..t....NF....l6[..`...i/'...H.z....7n.x...+_.............n..p....]j.iS]ww.sYYYo;.N...R..7...Q.K....l..7o......."...R.........m........N........K".t..g.~.c.....l..p..pD.6....{v1..9s...;w......F..o..R.$..o

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	dropped
Size (bytes):	43507
Entropy (8bit):	7.970378361568872
Encrypted:	false
SSDEEP:	768:C+8pjhQKuygtGSNtc02A6F5jdB6yFgN/dlE1OMlvjJp9tngYsFUsFhEjiWWQuMcs:C+8pjhQtyMUA6FpnHkd+1Oi7ngYuB6rD
MD5:	38E4D447004D8D01C6FCCB29241980CE
SHA1:	8B3B20268AE5F354F885554951CDF6F109D070D9
SHA-256:	CD4E6056F3E9B1E0BC4E1657F8A40AB1A1503912599740E1B5664904DBF50E03
SHA-512:	6D22C90C076A0300B78A4207DD1493980157EC6C74538E6226E4B8D0F660E0B52D8693EF0FFB46B38785D3309B8884E47D692F4D566A953D154F0632DCD5F607
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:97658365BBB611EC920CAC65E1C33C92" xmpMM:InstanceID="xmp.iid:97658364BBB611EC920CAC65E1C33C92" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0b155d97-e945-454b-91b7-88efce476871" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1335)
Category:	dropped
Size (bytes):	1569
Entropy (8bit):	5.369127779967127
Encrypted:	false
SSDEEP:	48:Xpm6RFvCzWzAiWqSeTqn1PByqka1cUj54/vD978:5pfpy1Pkqka1cS52b978
MD5:	0CC3A63FE10060AF4A349E5DF666EEFE
SHA1:	3E8D3925B550345123F2CAB26568221FD4154F9C
SHA-256:	92FCA55833F48B4289AC8F1CEDD48752B580FCE4EC4B5D81670B8193D6E51B54
SHA-512:	5801C9DB98C4998480772CA5AD71F0E400C4756AE713AAB0358CA6593B3A3426499D6DEC81A768C861CBBCD8394DD8C6D647628A13F124FF3A1119F9B7793E8C
Malicious:	false
Reputation:	low
Preview:	(function(){var e=window,h=document,k="replace";var m=function(a,c,d,b,g){c=encodeURIComponent(c)[k](/$/g,"%28")[k](/$/g,"%29");a=a+"="+c+"; path="+(d\|\|"/")+"; ";g&&(a+="expires="+(new Date((new Date).getTime()+g)).toGMTString()+"; ");b&&"none"!=b&&(a+="domain="+b+";");b=h.cookie;h.cookie=a;return b!=h.cookie},p=function(a){var c=h.body;try{c.addEventListener?c.addEventListener("click",a,!1):c.attachEvent&&c.attachEvent("onclick",a)}catch(d){}};var q=function(a,c,d,b){this.get=function(){for(var b=void 0,c=[],d=h.cookie.split(";"),l=new RegExp("^\\s"+a+"=\\s(.?)\\s$"),f=0;f<d.length;f++){var n=d[f].match(l);n&&c.push(decodeURIComponent(n[1][k](/%28/g,"(")[k](/%29/g,")")))}for(d=0;d<c.length;d++)c[d]&&(b=c[d]);return b};this.set=function(g){return m(a,g,b,c,1E3*d)};this.remove=function(){return m(a,"",b,c,-100)}};var t=function(a,c){var d=void 0;if("function"==typeof a.get&&"function"==typeof a.set){var b=c\|\|{},g=b.hasOwnProperty("cookieName")?b.cookieName:"_gali",r=b.hasOwnProper

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	970
Entropy (8bit):	4.726189228486119
Encrypted:	false
SSDEEP:	24:KFc0a1zd2UhARjk+770ekS7jqQPfHLFehYtDJ:6ezhCjk+7g2jqOHLchw
MD5:	308F13884F991E9B764AEAE79D4B7FD9
SHA1:	25B2A23C087E1336B7ECA9FA3FD2A42FC74920AC
SHA-256:	E30EE52D3AD80DCBDF885EFC6A609B28E397529CB8DCC131018810293E732A53
SHA-512:	9EED46A229508C65A1460523DA265D4D088DEE36DED87541D8AC8F2445C1AC08FC06C4234043B566CB33B16729B8999F63BEC50C901F36060816E045865ABDE2
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/reset.css
Preview:	@charset "utf-8";./* Filename.reset.css */..html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed,.figure, figcaption, footer, header, hgroup,.menu, nav, output, ruby, section, summary,.time, mark, audio, video {..margin: 0;..padding: 0;..border: 0;..font-style:normal;..font-size: 100%;..vertical-align: baseline;..line-height:1;.}..article, aside, details, figcaption, figure,.footer, header, hgroup, menu, nav, section {..display: block;.}..html{. overflow-y: scroll;.}..input, textarea,{..margin: 0;..padding: 0;.}..ol, ul{. list-style:none;.}..table{. border-collapse: collapse;. border-spacing:0;.}..a:focus {..outline:none;.}

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 450x279, components 3
Category:	downloaded
Size (bytes):	94305
Entropy (8bit):	7.965505073910703
Encrypted:	false
SSDEEP:	1536:cA1Dp+0l5To9Fb/yo0SOwCXn2ydlqcr56v+pc9l7UpbGN1mx2JA5h2X3EWttOApH:dd+0GyRxwCHdltczkx2AMXUWX1S2+2Hp
MD5:	4A78D393658244ABEE0BED45A912CCE7
SHA1:	0A1D5310EEC960AAF699BFC97BC108B8EE45D667
SHA-256:	7128EF0C57A62F90145B1D9CC0E9F8870AB94F29C4D4A821A163DB4CE24E69CD
SHA-512:	F6CFD7D6C10A454190F772BB282C16E3DCF494F1A17D3ABDB11FED1E861A78AAA78D5F945E723E2696A50CF153CEF2E537F32C3C3B6F4DB5AFD8A6F228FDB312
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_store05.jpg
Preview:	.............................................................................................................................................9....Adobe.d...................................................................................................{.............!.."1..AQ.aq.#2B....3R..$Tb.....%&'()456789:CDEFGHIJSUVWXYZcdefghijrstuvwxyz.......................................................................................u............1..!A"Q.2aq.....BR..#r.....%34Sb..........$&'()56789:CDEFGHIJTUVWXYZcdefghijstuvwxyz.................................................................................?.7.......rJr#. 4..@K.....''.]f.3..F..t..jR{..!..@DPO.2<IGN'.H)P..3...GR.?)..N.8:.x.i.A8s...u...Vn.e+.pde....1......O...u#.}..Xo.u..:..P...\H3.!EKX.J..JFr..~0.MJ.]Wv3.}..J.\ur(J.YPG!...E}.q...."B.b..S.....A.8..R[...V.g..tH.E.S.X..#T.......t:.g..).)q.4....R8-$)...yt...t..s+....._~.n.v..U...e.xl.*.Rv..TZ...ckD..M.3..~......e..BR[X.......SbtQ.K&..y..V.l..Y;.yT/;..O.jH.HUE.T..

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x113, components 3
Category:	downloaded
Size (bytes):	18676
Entropy (8bit):	7.958818080052949
Encrypted:	false
SSDEEP:	384:GlQBFL2QZfk41XpNTzSguw3xjEk9XYLq2/r5FauOKdS:fL2QSev/SUhL96q4r5FauOKdS
MD5:	47D78FF42BC71FCF6B3E9C4CC969D752
SHA1:	28740419CD61F9028E3F03CEAB9A81591360BDCE
SHA-256:	3DAA5E19E006A17ABA7C64E9994E266AB369C54B56EE85B0CC60B48A437863FB
SHA-512:	268C447A04C9E567C3FEBD59F4EA5E0EDD8AA41A7829898D3B7DDC71BF84F736E6450DDC174BB5BA73B21BBE863833FB30446D3891247C6471686248B5D4D668
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_lnk03.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D729FAB0B4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D729FAAFB4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1327)
Category:	downloaded
Size (bytes):	1667
Entropy (8bit):	5.005717845223722
Encrypted:	false
SSDEEP:	24:l1wJuL+bu/SZOZHEPJ/popJzwxI0kATpL4HNrreVcjf:fwwkqTEJMJzyuKsf
MD5:	677C821CD30E4301C03019DE22EF082A
SHA1:	13FE7716E4C83C6828F79DFA8415B1A96A4A29D9
SHA-256:	CEDE44CC895AD77E6F5FE0EFFAAC7B994EB0D9F1FDD4DEA1EB22EE0CE33CC6F4
SHA-512:	79E3AA8C67264EE3F01B9D26A555FD1FD26A7D167D0974A43CC20717F9BB4E6620CD0EDEFD796E8BA0C03C658143ADCECE07D36680BDC65B6258D212984000AE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/slick-carousel@1.8.0/slick/slick.min.css
Preview:	/*. Minified by jsDelivr using clean-css v5.3.2.. * Original file: /npm/slick-carousel@1.8.0/slick/slick.css. . Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files. */..slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0}.slick-list:focus{outline:0}.slick-list.dragging{cursor:pointer;cursor:hand}.slick-slider .slick-list,.slick-slider .slick-track{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}.slick-track{position:relative;top:0;left:0;display:block;margin-left:auto;margin-right:auto}.slic

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	9131
Entropy (8bit):	7.917990838707486
Encrypted:	false
SSDEEP:	192:xZTo6uY+w4ZNST/5yzgjUK3aEEnGNWwr6:xZE6P+BG/5yEjUKqEEnGNWwO
MD5:	CBC2BBBA77139901DAAFF75D35C3839A
SHA1:	4F3B2E93929821CC912723212E45BDC9A148FF0F
SHA-256:	9F9B318CA26C16F4F175BF906AAE295170695B0BB294D3706801D694F06180F5
SHA-512:	E2E33F9CEFAB0F7FA13FCD1FEE16AB0047DDB9BFE1B9E8EBF119C0B41EC84CA26C38453A1556C2CC1F2ED1F99F7DFC95B2FE84650C0E1C3655862D1FDBBA40B5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E471F80F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E471F7FF6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x113, components 3
Category:	dropped
Size (bytes):	17979
Entropy (8bit):	7.9577725408829325
Encrypted:	false
SSDEEP:	384:KJhuInBRyYVSECJ+EpHHGrX1ko1XstMA8nMySc62Bj8GOknPd5:03nBRXkdpnMXDEMrr8GOknP/
MD5:	D7F54B228F993B78244AD66B1CE47100
SHA1:	7873C8CFFE9E03738B53DF8D4E21A4B3BCB7C981
SHA-256:	0C12CC8CF3249E05D80A8E62C85B16B1A3B54895F7A86142CACCD0AB5C3FBCF6
SHA-512:	1B35DC593E345AE7F26E6BBCF5AB722E1292AA2E87AF1BD78D19C51444E6930C5E4186596A04BE98E9F013EEC8EDCFFC9DF2F962BCA2DCC3E2FF5EA0A8B3E851
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D72653B2B4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D72653B1B4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1764
Entropy (8bit):	7.282772787912876
Encrypted:	false
SSDEEP:	48:1MYLNn2DLloXJ3f99V2GycHHwxIk5E9tAIBIeIL5:yYR2PloB99UG3wxIk5E3ItL5
MD5:	ABF96BABBF71295C5A822C487553BFCC
SHA1:	4505BECC11DED6F8C235308AA10C6966EE1DCE60
SHA-256:	020CE72655DF4FF53B89236B07ED8E8C4B7D6C4A6414B1AE0E1D51DF88137D1C
SHA-512:	03652FCBAFD8E51ADD8FB786EBC7292E67BAF714313700F7DF62EF4930D3CD610559910BBCBB7E0B37638397716067BE00B68B269BB4CA49F2C065E5974030B3
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/common/sns_fb_ft.png
Preview:	.PNG........IHDR...$...$.............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:CD73092790F411EA9D43D7795A57874F" xmpMM:DocumentID="xmp.did:CD73092890F411EA9D43D7795A57874F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CD73092590F411EA9D43D7795A57874F" stRef:documentID="xmp.did:CD73092690F411EA9D43D7795A57874F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.-.....TIDATx...K.Q.....pf..ZF.*F..D...........=X.A......e..P.%.%E..........R...4z(._.n..wjw..;..{....s.s..s...

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14489
Entropy (8bit):	5.41504935639486
Encrypted:	false
SSDEEP:	384:bP5VUIcZa4VBJ1V9VwJITlU4V4KJ0J4bw+TirKpk4x:bP5iZz3J1rOJITlxxJ0J6ziok4x
MD5:	F01BF45188668E854BA83EF7631E6D36
SHA1:	D23AE6DED9D7F14A7C322C6FA9DBB384D7CD95CD
SHA-256:	6401F5917FB076FDC825F8B8083A15F17E1C3F65ABE72FCDD6EB3AD0C54FA6C1
SHA-512:	7275F41DB3FAF084440BF4D92BFA225258BE9D004EA77A4D8C2DA58368BBCD05E4DEC645887C5F662E6072A42E6C73ECC754CC15E49AC5A274E3E3C6BB588CBB
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/css/footer.css
Preview:	@charset "utf-8";../* Filename.footer.css /..../.-----------------------------------------.................320px...479px.iPhone3,4,5,6,6Plus,Android.....-----------------------------------------./..../ ------------------------------------------.. ........-------------------------------------------/....#page-top {.. position: fixed;.. bottom: 20px;.. right: 20px;.. font-size: 77%;.. z-index: 999;..}....#page-top a img{...width:20px;..}....#page-top a {.. background:#333;.. text-decoration: none;.. color: #fff;.. width: 60px;...height:38px;.. padding: 22px 0 0;.. text-align: center;...opacity:0.7;.. display: block;.. border-radius: 100px;...transition:0.5s;..}..@media only screen and (max-width: 767px) {...#page-top a {... width: 40px;....height:27px;... padding: 13px 0 0;... .border-radius: 50%;...}..}....#page-top a:hover{...opacity:0.6;..}..../ :::::::::::::::::::::::::::::::::::...LAYOU

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 280x602, components 3
Category:	downloaded
Size (bytes):	68581
Entropy (8bit):	7.980492309138822
Encrypted:	false
SSDEEP:	1536:aAOmyCgO0GliRMn7FwYojTJx4NdLLb4EYIerQ/0wpiwmuO:BOBR+iu7ypjd84EYIgPUiwmuO
MD5:	DA6B7A179479A7F64DE09B34E1B6631C
SHA1:	4E06C8A540437599A6F6F71FC552E8F8156DF4CE
SHA-256:	1046FBAE6471BC9CAC07AF3D2F7FB4AB58CE9CB96012F8A7577DF7ED03B5DB68
SHA-512:	46C8CA149EE917CAE4AEADA7D499BACEBCF6C0FF18A8E4F1AC8B44BF0B97D6362DD3B6A4F521B5E816F558DD48E099B506B49E17FD73F806416662898A5F6B46
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_stay01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:69676979B4A111EC9E08DEB7D5F8F3CA" xmpMM:InstanceID="xmp.iid:69676978B4A111EC9E08DEB7D5F8F3CA" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 239x218, components 3
Category:	downloaded
Size (bytes):	17119
Entropy (8bit):	7.9362546402396035
Encrypted:	false
SSDEEP:	384:SOvz9Zfc8v60YvCmh3mD+8HO4izQsMqckHVIWiezV8qfWIk9PxMk+h:tz9Vcy2v7h3eunjckVnNOpDR+h
MD5:	BE457CCADAA883AB0BA0E5C626786DA0
SHA1:	8A508782B15F31C99F274FB4358420C54706B475
SHA-256:	2011E32FBC2E3C7A8639323175E544D7AF52735C7243DEAAC07A17846650CBEB
SHA-512:	A996454E20BB76B6FB4F7F4BB5481AB3154B9668E61C717F946501D8F65F18C94D6487577953EACAAFC46550F04C8F954606D7140C87CF970FDFF41D1B3413CF
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay01.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:6079B6A5F6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:6079B6A4F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1764
Entropy (8bit):	7.282772787912876
Encrypted:	false
SSDEEP:	48:1MYLNn2DLloXJ3f99V2GycHHwxIk5E9tAIBIeIL5:yYR2PloB99UG3wxIk5E3ItL5
MD5:	ABF96BABBF71295C5A822C487553BFCC
SHA1:	4505BECC11DED6F8C235308AA10C6966EE1DCE60
SHA-256:	020CE72655DF4FF53B89236B07ED8E8C4B7D6C4A6414B1AE0E1D51DF88137D1C
SHA-512:	03652FCBAFD8E51ADD8FB786EBC7292E67BAF714313700F7DF62EF4930D3CD610559910BBCBB7E0B37638397716067BE00B68B269BB4CA49F2C065E5974030B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:CD73092790F411EA9D43D7795A57874F" xmpMM:DocumentID="xmp.did:CD73092890F411EA9D43D7795A57874F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CD73092590F411EA9D43D7795A57874F" stRef:documentID="xmp.did:CD73092690F411EA9D43D7795A57874F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.-.....TIDATx...K.Q.....pf..ZF.*F..D...........=X.A......e..P.%.%E..........R...4z(._.n..wjw..;..{....s.s..s...

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7808
Entropy (8bit):	7.884643619654866
Encrypted:	false
SSDEEP:	192:rdhUHXdQWVWfFuEhAuZvCKR9M5610EayBANe:rdhAiWwMt5KHm4d
MD5:	BFE934C42B1F3D530FFFC4EAAFB044BD
SHA1:	F3D2BBBFE4E0CA62819248103750572094A78A7E
SHA-256:	C165AE167299159219A11B6037D8761648B267250F7429CDB62F8B3E0956D425
SHA-512:	2AB0F5CC3F218970B633DC5664F5B43D78F68639292FDFA28A9212384895A09B81830B4CCCEF957A93A5628CBF0BF54B28703A0549D5A1EB8BB372118F4EFE5B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P.............tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8E27D8011B2168119109D520AA66CC15" xmpMM:DocumentID="xmp.did:D9F1ECCC904611E6A10A83604742EDCC" xmpMM:InstanceID="xmp.iid:D9F1ECCB904611E6A10A83604742EDCC" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:06801174072068119109EC2B94F9AC19" stRef:documentID="xmp.did:8E27D8011B2168119109D520AA66CC15"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>v.`.....PLTE@. *..>,.9(.0..2 .8&.6$.3$.9(.,..4$.. .>

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	dropped
Size (bytes):	9408
Entropy (8bit):	7.919170908257337
Encrypted:	false
SSDEEP:	192:0zbfB95J1zEP19x2qZMfbRSbx2YF8L5dfkqbvDerP:0J95J2PF2RS2Q8njbvDUP
MD5:	C446B6C0C0E69F81803E4CF4D6B35CBF
SHA1:	917E49079CE8E6005B8688405832692CE8F22A78
SHA-256:	7A24747AC2D12D588C30542C3E0CFE340AEAD4654A6819934F1E57186B09C294
SHA-512:	387F737F73AE3FEEDC416430FA2C88AD24FC06AFAB7C3D7C24FF5DC8DCD2A984B67C95C76554B992EBA6A1C37CFF500157ADA9A25BF08443B380CFB09D33E138
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1D972FB3F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1D972FB2F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 306 x 178, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	37066
Entropy (8bit):	7.990529563482211
Encrypted:	true
SSDEEP:	768:poZLWXpsgZPsmsblGt7kR/5Q2rYhCsK2M/cZGhwsGb82YjoqtLSroP0hq:AL1osVGtoR/W2rYp8/cZGhwsGTQtL6c
MD5:	EF5DE99C53BA3B483C2271B679FBC320
SHA1:	5AFE4CBAE22D5C532210B5104B9C854D67BAE385
SHA-256:	2459D0B248B742A6BA8B8119B0AABAB6D4F2D066E52D1BB8952BBD84CC487504
SHA-512:	889A707F2854F7B5202C9BB64FB4D6C82A504B3A62F31F399284A5723588A342404581C399217B288FCD697B1AF87271F8A4543F686F1A459F91054FBED4BB56
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/datas/recommended/images/1_020240924150700_hqIN1.png
Preview:	.PNG........IHDR...2...........C... .IDATx...g.eW}...'.:.r..].U.9..I..P@..Lx..`.m<3.c..3..`_.c.....k.c.m...e..V...+.:9...0\..B...u>...:..:.~g...km....4555].r2..X.j.........v.....~Z. kjj..5...........k^3....y. kjz.S..`.w...Sk.YS..X.%......Z3.....A@.....Z3....y. kjj..5....m...xC4....m....f.555]..A...t..v....~..p']..2...V.....N...x...V..$....).l..Y$..pp[.........4..o.M..55...tG...N._.r..NvNts.M..H..}.......h._y.8'.....phg.]ma...n.U..0..[y.4....-F3l..d).+...a.....N,P.4(.K.wG8z~.\..eY.....@KP.R....d.eSS...J.....e.0+Y..W.(....l.........e..pj.d....3.pb......=...v}.l.55..H....7.-T8rf..D...]...IB~.d......n._~.2.#.z..ju...k.....4....-fl.....[......W....\|........R.E...{...Ks..x6..r..;..C..5.....~+o..H.\|.HS.[...5...3XK.Yt..J.}...:."....... .)R.6..b. ...i..suuD.0../.......L.G....S.k.,$...n..k..[3..!..7..V.?...9... ..........k^3....y. k.... \..>o.. .9.......UU.4.......A&W....Ril.~M..0<....,.ms.=7R.Uy...?..p..>B..dMo*...'~.#...O<.._....4...x.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	7469
Entropy (8bit):	7.885285767617252
Encrypted:	false
SSDEEP:	96:Z8/ft9nfUCSJaX7nc4+qaJAj8wSMQEkfG9JSqarbyzokbnmWlu0Rr2foiaJi2Cwh:SMR67SqaJhwMfgJoizbFuqqoiawA1T
MD5:	9C1B7AA6DFB45FCB9512EDF031261B09
SHA1:	21DF1516B751CCA605466C17144213F05DB31BAF
SHA-256:	F0619A00BA26AF023A7FDB775B640EC7943F7AA4BC60200A61368B81A33A646C
SHA-512:	EDE06C4E2A2369166C0D8C23A28C7E609009F901C11A6223F0EF4D2A3D6113361BDF4622CF211FD6013000279BA52B3DFFFA418EC431B6FF183C2839221E6C14
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest11.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:1E6F8299F6C511ECB504DB1F77C3CEF4" xmpMM:InstanceID="xmp.iid:1E68A837F6C511ECB504DB1F77C3CEF4" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 180x80, components 3
Category:	downloaded
Size (bytes):	8536
Entropy (8bit):	7.911285374838848
Encrypted:	false
SSDEEP:	192:sk+kM+/1+j0Ljt/eLGVfQ5xV0jyvIpKAF1muY3:sk+kF/1+j0ntWSxQ5xV02ApFFFY3
MD5:	C1045E50D8F725AE6E5181207A922FA9
SHA1:	0A6C88B9B8DE6FA527A052D01C4BF2A22758DC52
SHA-256:	C672531CAE51146CC0B67237657400E12B11F498E9D20B37DE655035EF7B9315
SHA-512:	0C42945054CACEBA07F86E7E07D5824DC8EBAE276F742B6A19DACE7EDC96542379F2EA59328F72B13D0D3528862DA6E8733E2485022D5B4B14E368E06E76B207
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_gnav_stay08.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:63B3E34CF6C511ECBBF9DEA8EFFBE6C0" xmpMM:InstanceID="xmp.iid:63AFC765F6C511ECBBF9DEA8EFFBE6C0" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2ef3b10b-e227-9a42-9090-63b4cd616b1b" stRef:documentID="adobe:docid:photoshop:1c52b720-f8df-1644-8bd2-67a4f3503b1b"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 405x113, components 3
Category:	downloaded
Size (bytes):	17979
Entropy (8bit):	7.9577725408829325
Encrypted:	false
SSDEEP:	384:KJhuInBRyYVSECJ+EpHHGrX1ko1XstMA8nMySc62Bj8GOknPd5:03nBRXkdpnMXDEMrr8GOknP/
MD5:	D7F54B228F993B78244AD66B1CE47100
SHA1:	7873C8CFFE9E03738B53DF8D4E21A4B3BCB7C981
SHA-256:	0C12CC8CF3249E05D80A8E62C85B16B1A3B54895F7A86142CACCD0AB5C3FBCF6
SHA-512:	1B35DC593E345AE7F26E6BBCF5AB722E1292AA2E87AF1BD78D19C51444E6930C5E4186596A04BE98E9F013EEC8EDCFFC9DF2F962BCA2DCC3E2FF5EA0A8B3E851
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/new/img_lnk02.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:D72653B2B4BF11ECAFF6D2A6F4F7D386" xmpMM:InstanceID="xmp.iid:D72653B1B4BF11ECAFF6D2A6F4F7D386" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b06505cb-222a-5645-b8ec-0f85b39f2e20" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 37 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1231
Entropy (8bit):	6.559988805311635
Encrypted:	false
SSDEEP:	24:e4J1hpunQWwh82lYSKwqjV2hmVpn2hJT34yJ3VGqcGB4Z+6pMWNV:e4XitvnLtR2hmn2hJfJ3FcYMJV
MD5:	978CA508ABCE21149ADF8EFD7EA0C1CB
SHA1:	25EC31BC67DEFC50EBE3F18639795D4FA46E023F
SHA-256:	6292F1D5BB85E3539C091505BCC56C962DA059F12B2B3690B83CBA7F63789899
SHA-512:	E311ED671B4B79B3CCC9C14420D77F6ACD0597C79F7EC319CEB1B6F3F4716F8C664B74205FCBB8FBD651F4E29832604E291E8C7EDE008CD22F2130D6408F0AF9
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/common/images/footer/pagetop.png
Preview:	.PNG........IHDR...%................tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0A8011740720681192B0CD2FEA0D2934" xmpMM:DocumentID="xmp.did:30C84CFFF3BE11E4A685DCA6ABAB5FA6" xmpMM:InstanceID="xmp.iid:30C84CFEF3BE11E4A685DCA6ABAB5FA6" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:664DE6923921681192B0CD2FEA0D2934" stRef:documentID="xmp.did:0A8011740720681192B0CD2FEA0D2934"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.V... ..N....#....(n..u.G..p..A....6.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	293051
Entropy (8bit):	7.961920453324416
Encrypted:	false
SSDEEP:	6144:cVYwj0w61CGEr1P1J2b0ZJgJDPMuu4F6PZtPRNOWxzCEy:cVyC9AbcJgCuLFF2z8
MD5:	C5AA39D50791A97638FCCC055558588F
SHA1:	407E7934AC09C0A73A84B8370FED4B22E52C6CB5
SHA-256:	1EDDDD3B0FF5A0414FA43875FE6AD14C15D587A49876B23741672FAE129AD267
SHA-512:	1B1505D9FF64C4062E4E87AF5A14FB10124012D062C80D71B360AAA371A2742E5896F560B95F2C218C6C5B8E8375708505AE845E16032718358A237F454D5163
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_1-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:EE5E0466BBD411ECA2B1DEBAA47BB491" xmpMM:InstanceID="xmp.iid:EE5E0465BBD411ECA2B1DEBAA47BB491" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5a1413f3-2669-7e46-9499-d0b738b4076c" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (723)
Category:	downloaded
Size (bytes):	7076
Entropy (8bit):	5.52488676121649
Encrypted:	false
SSDEEP:	192:bttd4a6O1T6ahNU3dJ+SrM0hjUYIW2WX8ISlY:bBJ1T9UNJ+SrM0lXV2WXXSlY
MD5:	88A2E0A522036C0B87E03552E56629AA
SHA1:	EC9D1157518E753A84DBDE1333A29B34CF776D63
SHA-256:	788AFB96F2DA68E8729EC35F3D5E381FAD3482D37C54C2195C7311440EE4C27E
SHA-512:	44B953878BD650FE2BCC8B6904620955C3E396B7DC8F41F85D021A8E0404DA41DB15C5499A03F7D4FE9129BB340AA3F6782942CF5327502FD4569BEBBB17073F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/4al0/sw.js?origin=https%3A%2F%2Fwww.yamanoue-hotel.co.jp
Preview:	'use strict';var k=function(a){function b(c){return a.next(c)}function e(c){return a.throw(c)}return new Promise(function(c,d){function f(h){h.done?c(h.value):Promise.resolve(h.value).then(b,e).then(f,d)}f(a.next())})};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;var u,v;a:{for(var x=["CLOSURE_FLAGS"],B=m,C=0;C<x.length;C++)if(B=B[x[C]],B==null){v=null;break a}v=B}var G=v&&v[610401301];u=G!=null?G:!1;var H;const I=m.navigator;H=I?I.userAgentData\|\|null:null;function J(a){return u?H?H.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function K(a){var b;a:{const e=m.navigator;if(e){const c=e.userAgent;if(c){b=c;break a}}b=""}return b.indexOf(a)!=-1};function L(){return u?!!H&&H.brands.length>0:!1}function O(){return L()?J("Chromium"):(K("Chrome")\|\|K("CriOS"))&&!(L()?0:K("Edge"))\|\|K("Silk")};!K("Android")\|\|O();O();!K("Safari")\|\|O()\|\|(L()?0:K("Coast"))\|\|(L()?0:K("Opera"))\|\|(L()?0:K("Edge"))\|\|(L()?J("Microsoft Edge"):K("Edg/"))\|\|L()&

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	3696
Entropy (8bit):	5.787319304462251
Encrypted:	false
SSDEEP:	96:QZrROCDTYrRfA8xzULK9KrHIabmrHIcPeP1:8ROCDwRfpzULcuHIabqHIcw1
MD5:	99E4B8D00006EFA064A58CC6026F52E3
SHA1:	DF3FAA917FC8F4EACDA85471ED8E248134CAF8F4
SHA-256:	B9A627EDCE37800D8E52C943D59424786ABB14FDA7EEAE98B1B24A5592055A71
SHA-512:	26BCCDBA58406455C78E4EF0D59CC88E0360D2E5C509A082C623F69B8D416A7E8EBC91672BAB2A3553F50B8524F57FAFBE4371A428F1BC148748FB79FF5F164C
Malicious:	false
Reputation:	low
Preview:	// JavaScript Document..$(function () {..var $nav.= $('.navDrawr');..var $navBtn.= $('.navDrawrBtn, .f_navDrawrBtn');..var $speed.= 300;..var $navW.= 270;...//.............$nav.find('.sub').hide();...//hover.......$nav.find('li').hover(function(){....// PC.................................if ($('.navDrawrBtn span, .f_navDrawrBtn').css('display') !== 'block'){.....//li...hover.....sub.............if( $(this).find('.sub').length && !$nav.hasClass('open') ){.......$(this).find('.sub').slideDown();.....}....}...},function(){....// PC.................................if ($('.navDrawrBtn span, .f_navDrawrBtn').css('display') !== 'block'){.....if(!$nav.hasClass('open')) {......$(this).find('.sub').stop(true).slideUp();.....}....}...});...//...........(PC..............touch

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 522x466, components 3
Category:	downloaded
Size (bytes):	54727
Entropy (8bit):	7.978292041480337
Encrypted:	false
SSDEEP:	1536:UytkCxhIH9DrwtcylbsaKrP/swom2hAgdcFmaVyXhM8Ro:QqWH9ScQfKz/swMYVyXhtRo
MD5:	1F10430AF91C576318F74913F7FE62BD
SHA1:	AF4CE47DC165EA3466921DCED5587FD35D0C77A0
SHA-256:	5113D6D2179C6220089F57849A413258A876F536D7E94EA3B9F44D289F0C2218
SHA-512:	652EFBA3D32A6175F7379A48D9FFC9E43118CDC390C6C11C69F022F4540C300E169A931F9FCCE3E61E7229BF89F79E3A3B0D5105697703C9D51E8AA0C2635552
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_2-sp.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:4C6A7373BBB611EC8FF0AB67BB66D5D7" xmpMM:InstanceID="xmp.iid:4C6A7372BBB611EC8FF0AB67BB66D5D7" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1dcc9260-e5d4-4942-943f-402179520e49" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x960, components 3
Category:	downloaded
Size (bytes):	176022
Entropy (8bit):	7.9502620953716265
Encrypted:	false
SSDEEP:	3072:ot8ku8mP3b9SHjcPDyUgbiGWuIPQcQbo2b5wtopJyM0RA8KDHOLe+DI7iD6M:ot8pT5SHjceAQa2SKp85kuLq7+
MD5:	B3932612D321FECBCF49AFB23034EC01
SHA1:	8AB3953CF591C8C224ADB0D1E1F2C0B892004707
SHA-256:	A01DBD1963458029ED970905CDDE36AA3B8D70E5841A0A030386336D0AC3BC5C
SHA-512:	45C1A461C0DD0CB1334AD9516F7C5790157028A4707AC92CE45CB57BC61F869D05695C3867CD81B06AC4D6CE3387C861BFF91C284D0EC9112DECDDE64DBC32AF
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/images/mv/slide/panel_6-pc.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d" xmpMM:DocumentID="xmp.did:0004998FBBB511ECA10DE22836D11C9F" xmpMM:InstanceID="xmp.iid:0004998EBBB511ECA10DE22836D11C9F" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22f69e5e-dedc-9849-92cf-9c479a812521" stRef:documentID="xmp.did:e1d30cf1-3f06-514d-8f7a-372e69d69d8d"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..........................................

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 217 x 38, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1229
Entropy (8bit):	6.4643496694915425
Encrypted:	false
SSDEEP:	24:w1hpunQWwh82lYSKw1tEVXT34yJ3Vl6GxYuMF/UIJXr7dUFGw+:OitvnL2ENfJ3ScQOIhdUb+
MD5:	08BFECDB4D8B019442AD831117947FC6
SHA1:	CABF1BBEBE38DAB1A27482AEFE522C15E277C3D5
SHA-256:	2592A4A44CC037ED398A7EB2054E151EE7D87911CA594B1A62DB6691FDE51DF4
SHA-512:	B75FAB021DE91D92F62A692A523F4AC6097A82AD10D79BB06BE159E569243CF8216288744727699DAFADEA033E84590473A57771C90637FC8F6F76E6F479D668
Malicious:	false
Reputation:	low
URL:	https://www.yamanoue-hotel.co.jp/contact/other/images/btn_next.png
Preview:	.PNG........IHDR.......&.....~......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:8899A37EF9206811945792B882ACB30D" xmpMM:DocumentID="xmp.did:4A354CDC991311E685D0D194E6F35847" xmpMM:InstanceID="xmp.iid:4A354CDB991311E685D0D194E6F35847" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8899A37EF9206811945792B882ACB30D" stRef:documentID="xmp.did:8899A37EF9206811945792B882ACB30D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..zZ...6PLTE8&.......]OED4(.xp...QA7...j\S.lK.......

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 28, 2024 20:14:14.831317902 CET	49675	443	192.168.2.4	173.222.162.32
Oct 28, 2024 20:14:18.138346910 CET	49735	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:18.139086962 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:18.143824100 CET	80	49735	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:18.143954992 CET	49735	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:18.144573927 CET	80	49736	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:18.144664049 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:18.147061110 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:18.152461052 CET	80	49736	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:19.062520981 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.062558889 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:19.062649965 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.063035965 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.063046932 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:19.084172010 CET	80	49736	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:19.126652956 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:19.929173946 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:19.929277897 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:19.929375887 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:19.930651903 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:19.930691004 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:19.941024065 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:19.946034908 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.946048975 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:19.947626114 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:19.947709084 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.951656103 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:19.951755047 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:20.004733086 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:20.004744053 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:20.048542976 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:20.850805998 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:20.850850105 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:20.851037979 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:20.854218960 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:20.854238987 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:21.081454992 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.127929926 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.133244991 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.133276939 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.137089014 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.137170076 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.161662102 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.161825895 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.161843061 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.162009954 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.210961103 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.210983992 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.252166986 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.697896004 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:21.698012114 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:21.702821970 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:21.702850103 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:21.703123093 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:21.754712105 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:21.806888103 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:21.851375103 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:21.892577887 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892648935 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892671108 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892689943 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892714024 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.892728090 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892749071 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892765045 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.892779112 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892795086 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.892795086 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.892824888 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.892863035 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.894865990 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.894920111 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.894936085 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.894952059 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.894977093 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:21.895000935 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.895000935 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:21.935478926 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.008304119 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.008363962 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.008435011 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.008872986 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.008972883 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.009042025 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.013248920 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.013286114 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.013396025 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.014004946 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.014035940 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.014153957 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.014494896 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.014503002 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.014628887 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.019665956 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.019692898 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.020206928 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.020241022 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.020757914 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.020770073 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.021123886 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.021137953 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.021951914 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.021960020 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.022541046 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.022636890 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.022816896 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.023109913 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.023169041 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.023226976 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.023291111 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.023310900 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.023377895 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.024044037 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.024074078 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.024151087 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.024466038 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.024521112 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.025118113 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.025141954 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.025382042 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.025405884 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.025762081 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.025777102 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.028261900 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.028287888 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.028347969 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.028383970 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.028388977 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.029911041 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.029953957 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.029994965 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.030003071 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.030030966 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.030036926 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.030050993 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.030075073 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.052314043 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.052371979 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.052567959 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.052625895 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.052660942 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.052660942 CET	49741	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.052679062 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.052696943 CET	443	49741	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.127564907 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.127594948 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.127679110 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.128042936 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.128062963 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.299855947 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.299880981 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.299941063 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.299961090 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.300002098 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.300029993 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.300075054 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.300090075 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.300144911 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.301119089 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.301194906 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.301211119 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.307009935 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.307084084 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.307157993 CET	49740	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.307182074 CET	443	49740	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.307475090 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.307534933 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.307673931 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.308017015 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.308036089 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.633207083 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.642903090 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.646969080 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.647030115 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.647118092 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.647166014 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.648757935 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.648916960 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.649056911 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.649135113 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.654222012 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.685646057 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.686014891 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.690568924 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.690593004 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.690908909 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.691189051 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.694477081 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.694549084 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.700295925 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.700330019 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.700359106 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.700397015 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.713423014 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.713685989 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.714162111 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.714191914 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.747212887 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.747348070 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.814646959 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.824793100 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825021029 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825062990 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825074911 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.825105906 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825244904 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.825253963 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825429916 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.825470924 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.825478077 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.826016903 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.826054096 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.826061964 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.826069117 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.826154947 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.826246023 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.827456951 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.827544928 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.827581882 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.827750921 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.827816963 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.834719896 CET	49749	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.834748030 CET	443	49749	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.841466904 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.841660976 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.841722965 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.841741085 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.841836929 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.841890097 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.841905117 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.842000961 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.842058897 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.842072010 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.842153072 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.842251062 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.842263937 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.888273954 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.888609886 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.888627052 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.889641047 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.889713049 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.890415907 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.890472889 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.890563011 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.890568972 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.894790888 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.895134926 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.895190954 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.895560026 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.896554947 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.896639109 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.896729946 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.897861004 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.898150921 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.898163080 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.899631023 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.899707079 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.900149107 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.900224924 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.900280952 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.906172991 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.906430006 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.906507015 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.908150911 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.908221006 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.908245087 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.908375025 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.908649921 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.909338951 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.909348965 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.909697056 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.909795046 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.909949064 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.909964085 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:22.910327911 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.910413027 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.910974979 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.911032915 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.911132097 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.911139965 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.931415081 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.931790113 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.931812048 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.932986975 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.933656931 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.933859110 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.934166908 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.940551996 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940637112 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940673113 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940695047 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.940723896 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940776110 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940777063 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.940788984 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.940829992 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.940838099 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.941508055 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.941555977 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.941571951 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.941581964 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.941634893 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.941643000 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.941755056 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.941811085 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.942434072 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.942461014 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.942477942 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.942488909 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.942523003 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.942529917 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.942537069 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.942583084 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.943330050 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.943393946 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.943454981 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.943507910 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.943528891 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.943571091 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.944202900 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:22.947336912 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.957238913 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.960736036 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.960838079 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.960910082 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.960927010 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.960973978 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.960987091 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961091995 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961143970 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.961157084 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961241961 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961292028 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.961304903 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961675882 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961752892 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.961766005 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961852074 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961930990 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.961957932 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.961975098 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.962035894 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.962630033 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.962632895 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.962637901 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:22.962652922 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:22.962658882 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.962788105 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.962860107 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.962872982 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.962949991 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.963177919 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:22.963191986 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:22.975358963 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:22.988508940 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:22.994595051 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.994674921 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.997085094 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:22.997097969 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:22.998028994 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.000015974 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:23.002940893 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.003017902 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.003031969 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.043370008 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.055865049 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:23.056025028 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:23.056094885 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:23.056890011 CET	49750	443	192.168.2.4	151.101.1.229
Oct 28, 2024 20:14:23.056912899 CET	443	49750	151.101.1.229	192.168.2.4
Oct 28, 2024 20:14:23.079812050 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.079926968 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080003977 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080013990 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080041885 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080096960 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080152035 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080239058 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080252886 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080373049 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080466032 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080518961 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080533028 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080617905 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080671072 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080686092 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080776930 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080837965 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080851078 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.080899000 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.080910921 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.081326008 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.081377029 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.081389904 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.081476927 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.081522942 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.081537962 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083564043 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083586931 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083636045 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083655119 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083659887 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.083671093 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083698034 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.083698988 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.083698034 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.083698034 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.083739042 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.083760023 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.098639965 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.098670959 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.098793030 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.098956108 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.098965883 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.112823009 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.122680902 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.122745037 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.122798920 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.122813940 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.122850895 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.152282000 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.152333021 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.152385950 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.153331995 CET	49745	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.153342009 CET	443	49745	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.153830051 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.153879881 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.153958082 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.155865908 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.155894995 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164032936 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164067030 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164077997 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164134026 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.164140940 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164150953 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.164167881 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.164184093 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.164222956 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.165735006 CET	49746	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.165743113 CET	443	49746	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.166096926 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.166124105 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.166238070 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.167454958 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.167470932 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.183337927 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.183536053 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.183562994 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.187437057 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.187515974 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.187944889 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.188044071 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188102007 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188126087 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.188143969 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188154936 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.188180923 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.188218117 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188400030 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188416004 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.188432932 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.188479900 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.188494921 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.197263956 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.197344065 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.197372913 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.201555014 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.201595068 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.201647997 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.201670885 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.201699972 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.202560902 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.202581882 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.202639103 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.202639103 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.202683926 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.202708960 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.202708960 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.202974081 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.203028917 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.203109980 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.203123093 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.203190088 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.203254938 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.204134941 CET	49742	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.204159021 CET	443	49742	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.204359055 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.204385042 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.204428911 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.204442978 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.204473972 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.204699039 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.204762936 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.205434084 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.205454111 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.205516100 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.205545902 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.205545902 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.205576897 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.206708908 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.206742048 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.206991911 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.207017899 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.207058907 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.207072973 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.207099915 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.208216906 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.208254099 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.208317995 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.208331108 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.208359003 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.241693020 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.241760969 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.241786003 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.241805077 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.241832972 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.250202894 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.250277996 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.250381947 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:23.255712986 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.255717039 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.255738020 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.255778074 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.416294098 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.417635918 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.417637110 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.655148983 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:23.655217886 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.655251026 CET	49752	443	192.168.2.4	184.28.90.27
Oct 28, 2024 20:14:23.655270100 CET	443	49752	184.28.90.27	192.168.2.4
Oct 28, 2024 20:14:23.663286924 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663324118 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663331985 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663341999 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663388014 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663453102 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663480997 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663506985 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663533926 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663539886 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663552999 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663572073 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663599968 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663626909 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663702011 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.663713932 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.663716078 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663976908 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.663999081 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664006948 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664016962 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664052010 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664062023 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664076090 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664087057 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664094925 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664094925 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664103985 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664118052 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664164066 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.664165974 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664165974 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664211035 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.664274931 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.664628983 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664659023 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664731979 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664748907 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664748907 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664772034 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.664776087 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664797068 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664798975 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664812088 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.664827108 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664855957 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664863110 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.664876938 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664891958 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.664901018 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664913893 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.664921999 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664931059 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.664944887 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664964914 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664967060 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664967060 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.664989948 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.664997101 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.665033102 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665033102 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665040970 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665060043 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665083885 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665092945 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665115118 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665139914 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665158033 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665222883 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665244102 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665280104 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665281057 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665302992 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665316105 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665335894 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665357113 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665381908 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665544033 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665607929 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665647984 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665658951 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665724039 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.665817976 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.665961981 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666033030 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666066885 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666076899 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666093111 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666152954 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666153908 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666172028 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666393995 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666413069 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666425943 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666469097 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666476965 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666490078 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666527033 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666558981 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666558981 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666575909 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.666609049 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.666646957 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.666713953 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.666734934 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.666773081 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.666804075 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.666829109 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.666985989 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.667033911 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.676069021 CET	49751	443	192.168.2.4	151.101.130.137
Oct 28, 2024 20:14:23.676085949 CET	443	49751	151.101.130.137	192.168.2.4
Oct 28, 2024 20:14:23.688529015 CET	49744	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.688545942 CET	443	49744	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.697244883 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.697268963 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.697334051 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.697835922 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.697849989 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.698379993 CET	49753	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.698425055 CET	443	49753	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.703975916 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.704011917 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.704157114 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.704304934 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.704320908 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.706207037 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.816696882 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.816754103 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.920953035 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.920970917 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.921062946 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.921093941 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.921093941 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.921132088 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.921161890 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.921190023 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.921237946 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.921513081 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.921586990 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.921617985 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.921785116 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.921860933 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.921864033 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.921884060 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.921941042 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.921953917 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.922158957 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.922197104 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.922205925 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.922219992 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.922269106 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.922749043 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.922962904 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.923012018 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.923013926 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.923044920 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.923057079 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.923096895 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.923114061 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.923136950 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.923163891 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.923175097 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.923619986 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.923686028 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.923697948 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.923753023 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.923810005 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.923821926 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924498081 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924539089 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924572945 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924590111 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.924603939 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924632072 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.924649000 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.924701929 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.924715042 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.925000906 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.925055027 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.925076962 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.925095081 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.925122976 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.925214052 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.925441980 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.925453901 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.927903891 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.927946091 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.927970886 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.927989960 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.928020954 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.928704977 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.928759098 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.928771019 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.928864956 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.928874016 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.928910017 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.928976059 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.929013968 CET	49743	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:23.929042101 CET	443	49743	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:23.929061890 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.929490089 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.929514885 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929549932 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.929575920 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.929589033 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929677963 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929733992 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929740906 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.929754019 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929797888 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929804087 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.929816961 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.929857969 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.929989100 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:23.930006981 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:23.930643082 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.930695057 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.930727959 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.930788040 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.930800915 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.930923939 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.931502104 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935012102 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935062885 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935092926 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935231924 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935270071 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935307980 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935328007 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935343981 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935389996 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935390949 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935410023 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935435057 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935473919 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935507059 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935554028 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935554981 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935570955 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935615063 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935731888 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935787916 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935802937 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.935817003 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.935863018 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.936017990 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.936690092 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.936722994 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.936757088 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.936768055 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.936784029 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.936837912 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.936932087 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937273979 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.937285900 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937338114 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937371969 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937417030 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937417030 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.937432051 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937479019 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.937491894 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.937555075 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.938059092 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938355923 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938397884 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938438892 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938472033 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.938483000 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938492060 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.938499928 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938559055 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938604116 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.938617945 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.938673019 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.938684940 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939419031 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939466953 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939482927 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.939496994 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939536095 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939551115 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.939570904 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939624071 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939656973 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939671993 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.939685106 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.939713001 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.940740108 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.940817118 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.940829039 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.940929890 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.940973043 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941016912 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941030979 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941075087 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941087008 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941133022 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941441059 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941483974 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941495895 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941512108 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941544056 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941550970 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941606045 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941643000 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941652060 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941668034 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941708088 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941719055 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.941844940 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.941858053 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942310095 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942353010 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942369938 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.942384005 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942434072 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.942437887 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942454100 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942501068 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.942513943 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942563057 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.942641020 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.942653894 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943108082 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943156004 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.943167925 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943262100 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943295002 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943305969 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.943335056 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943471909 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943509102 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943520069 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.943536997 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.943568945 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944045067 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944096088 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944123983 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944211960 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944247007 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944287062 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944292068 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944307089 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944338083 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944425106 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944454908 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944468975 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944497108 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944541931 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944554090 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944634914 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.944681883 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944729090 CET	49747	443	192.168.2.4	142.250.185.110
Oct 28, 2024 20:14:23.944756031 CET	443	49747	142.250.185.110	192.168.2.4
Oct 28, 2024 20:14:23.985930920 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.043056965 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.043298006 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.043356895 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.043690920 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.044078112 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.044154882 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.044205904 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.051495075 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.051731110 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.051743984 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.052885056 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.053147078 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.053251028 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.053332090 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.064207077 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064394951 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064448118 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.064456940 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064558983 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064635992 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.064642906 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064764023 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064838886 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.064847946 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064927101 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.064990997 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.065001965 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.086808920 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.086829901 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.094167948 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.094360113 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.094388962 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.095504999 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.095861912 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.095972061 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.095978022 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.096030951 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.102835894 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.104789972 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.104799032 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.150002003 CET	80	49736	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.150063038 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.150996923 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.181859970 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.181917906 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.181935072 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.182034016 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.182106972 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.182112932 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.182231903 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.182280064 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.182286024 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.182998896 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.183041096 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.183058023 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.183190107 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.183248997 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.183254957 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.183864117 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.183928967 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.183936119 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.184006929 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.184066057 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.184072018 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.184166908 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.184212923 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.184221029 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.184952021 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.185045004 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.185051918 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.230778933 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.230906010 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.230915070 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.273492098 CET	49736	80	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.279464006 CET	80	49736	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.287322044 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.287363052 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.287420034 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.287739992 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.287753105 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.288737059 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.288775921 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.288872004 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.294430017 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.294440985 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.299360991 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.299410105 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.299420118 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.299608946 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.299706936 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.311299086 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.311333895 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.311392069 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.311414003 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.311484098 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.317697048 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317728043 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317739010 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317759037 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317789078 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.317814112 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317830086 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.317856073 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.317857981 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.317903042 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.331343889 CET	49754	443	192.168.2.4	151.101.129.229
Oct 28, 2024 20:14:24.331357956 CET	443	49754	151.101.129.229	192.168.2.4
Oct 28, 2024 20:14:24.345305920 CET	49755	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.345346928 CET	443	49755	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.350070953 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.350094080 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.350152969 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.356060982 CET	49757	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.356072903 CET	443	49757	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.359302044 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.359426975 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.359500885 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.366372108 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.366410971 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.367067099 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.367082119 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.376358986 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.376408100 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.376476049 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.376523018 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.376555920 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.376578093 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.376605034 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.381376028 CET	49758	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.381412983 CET	443	49758	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.381608009 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.381686926 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.381757021 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.383040905 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.383074999 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.389410019 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:24.389424086 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:24.389487028 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:24.389806986 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:24.389817953 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:24.797857046 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.798120975 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.798130989 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.799232960 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.799541950 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.799707890 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.799711943 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.816801071 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.817070961 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.817090988 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.820677996 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.820761919 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.821094036 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.821254015 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.821264029 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.843406916 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.867381096 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.892606974 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.892663956 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:24.892678022 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:24.898291111 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.898479939 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.898523092 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.899475098 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.899549007 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.900259972 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.900331974 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.900428057 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:24.900445938 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:24.944633007 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.007189035 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.028744936 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.060631990 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.060818911 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.060873032 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.061580896 CET	49759	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.061590910 CET	443	49759	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.062036037 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.062092066 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.062475920 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.062872887 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.062895060 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.070070982 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.084605932 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.084630966 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.084686041 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.084698915 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.084774017 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.084857941 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.085845947 CET	49760	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.085859060 CET	443	49760	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.086111069 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.086154938 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.086218119 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.086611986 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.086627960 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.146617889 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146646976 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146689892 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146697044 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.146709919 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146727085 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146743059 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.146754026 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.146773100 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.146805048 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.146805048 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.149121046 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.149190903 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.149221897 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.149287939 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.179981947 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.180357933 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.180380106 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.180701017 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.181000948 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.181063890 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.181370020 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.227336884 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.235271931 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.235507011 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.235521078 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.236531019 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.236582994 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.237127066 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.237185001 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.237529993 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.237536907 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.237890005 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.238153934 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.238161087 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.239175081 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.239228010 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.239233971 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.239284992 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.239716053 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.239780903 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.240113974 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.240120888 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.264372110 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.264420033 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.264462948 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.264496088 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.264532089 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.264569998 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.266246080 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.266288042 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.266320944 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.266340971 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.266370058 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.266395092 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.267205000 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.267244101 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.267275095 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.267307997 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.267354012 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.267354012 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.275331974 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.275527000 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.275587082 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.276068926 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.276331902 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.276418924 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.276420116 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.285703897 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.289841890 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.290035963 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.290060997 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.293972969 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.294055939 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.294271946 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.294373989 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.294384956 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.294449091 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.301944971 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.317832947 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.317886114 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.349337101 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.349360943 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.349435091 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.349497080 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.349554062 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.382055044 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382076025 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382143974 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.382180929 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382292986 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.382767916 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382781982 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382813931 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.382822990 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.382844925 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.382879972 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.383847952 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.383865118 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.383908987 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.383918047 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.383941889 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.383966923 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.385459900 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.385476112 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.385524988 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.385533094 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.385554075 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.385581017 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.386383057 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.386399031 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.386450052 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.386459112 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.386499882 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.387381077 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.387397051 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.387458086 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.387466908 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.387509108 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.410516024 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.410531044 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.448657036 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.448677063 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.448721886 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.448744059 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.448790073 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.449903011 CET	49762	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.449922085 CET	443	49762	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.450228930 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.450263977 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.450318098 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.450989962 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.451008081 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.458020926 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.466576099 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.466605902 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.466655016 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.466672897 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.466702938 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.466878891 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499088049 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499156952 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499202967 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499217987 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499248028 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499270916 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499654055 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499703884 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499748945 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499762058 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.499809980 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.499830961 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500035048 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500075102 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500107050 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500119925 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500149012 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500242949 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500477076 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500545979 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500559092 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500616074 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500624895 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.500669003 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500785112 CET	49761	443	192.168.2.4	151.101.2.137
Oct 28, 2024 20:14:25.500812054 CET	443	49761	151.101.2.137	192.168.2.4
Oct 28, 2024 20:14:25.508425951 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508558989 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508641005 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.508651018 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508774996 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508833885 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.508841038 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508910894 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.508985043 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.508991957 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.516586065 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.516633987 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.516640902 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.561296940 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.561448097 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.561512947 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.562453032 CET	49765	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.562474966 CET	443	49765	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.562783957 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.562863111 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.562942982 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.563756943 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.563791990 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.565337896 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.565346003 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.611263037 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.625171900 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.625341892 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.625396013 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.625403881 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.628211975 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.628277063 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.628283024 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.632540941 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.632586002 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.632591963 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.636279106 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636298895 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636306047 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636327982 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636343002 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.636348963 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636363029 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636372089 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.636379957 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.636394978 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.636411905 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.641525984 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.641599894 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.641604900 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.641627073 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.641719103 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.650178909 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.658968925 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.659046888 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.659089088 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.659096003 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.659229040 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.667722940 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.676491022 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.676565886 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.676573038 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.683991909 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684065104 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684087038 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684124947 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684139967 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.684170961 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684194088 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.684195042 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.684201956 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684223890 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.684362888 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.684431076 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.684657097 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.684705973 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.684712887 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.686404943 CET	49764	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.686446905 CET	443	49764	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.686925888 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.686953068 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.687236071 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.692142963 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.692157984 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.737798929 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.737807035 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.741940975 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.741974115 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.741991997 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.742000103 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742043972 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.742048025 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742058992 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742100000 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742125034 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.742125988 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742140055 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.742166996 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.745409012 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.745467901 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.745476007 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.748383999 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.748426914 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.748435020 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.752698898 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.752743006 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.752751112 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.757785082 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.757832050 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.757838964 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.763452053 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.763494968 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.763501883 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.769120932 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.769171953 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.769181013 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.772838116 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.772856951 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.772910118 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.772917032 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.772948027 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.772959948 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.774137020 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.774171114 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.774194956 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.774195910 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.774228096 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.774245977 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.774903059 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.775067091 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.775074959 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.780855894 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.780901909 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.780910015 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.786180019 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.787341118 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.787348032 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.789525986 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789572001 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.789647102 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789654016 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789668083 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.789756060 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789776087 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789788008 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.789832115 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789870024 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.789922953 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.789968967 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.790194035 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.790214062 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.790357113 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.790369987 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.790508986 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.790538073 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.790647984 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.790664911 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.791862965 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.791913033 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.791920900 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.797494888 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.797549963 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.797558069 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.803411961 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.803477049 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.803484917 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.807635069 CET	49763	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:25.807645082 CET	443	49763	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.809432983 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.809474945 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.809482098 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.814635038 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.814738035 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.814745903 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.820235014 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.820277929 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.820343018 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.820359945 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.820404053 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.831583023 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858464956 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858495951 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858521938 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858558893 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858582973 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.858592987 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.858624935 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.858632088 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.858727932 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.859057903 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.859097958 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.859105110 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.859111071 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.859147072 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.859877110 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.860002995 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.860042095 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.860086918 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.860095978 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.860136032 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.864186049 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.869484901 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.869518995 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.869587898 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.869596004 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.869636059 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.874713898 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.877803087 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.877823114 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.877867937 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.877877951 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.877917051 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.881105900 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.884393930 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.884418964 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.884469986 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.884478092 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.884520054 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.887475014 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.890909910 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.890928030 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.890976906 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.890985012 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.891031027 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.893939972 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.897176981 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.897223949 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.897239923 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.897252083 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.897260904 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.897270918 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.900240898 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.900295019 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.900302887 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.903597116 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.903664112 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.903671980 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.906513929 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.909590006 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.909609079 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.909661055 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.909672022 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.909682989 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.912447929 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.912501097 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.912508965 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.915342093 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.915393114 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.915400028 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.918199062 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.918242931 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.918251038 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.921169043 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.921269894 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.921278000 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.923949957 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.925991058 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.926002979 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.926830053 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.926887989 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.926896095 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.929666042 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.929712057 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.929718971 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.932461023 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.932548046 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.932557106 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.935142994 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.935410976 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.935419083 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.937834024 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.937885046 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.937891960 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.940625906 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.940682888 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.940690041 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.943159103 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.943191051 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.943249941 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.943257093 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.943303108 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.945975065 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.948345900 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.948367119 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.948417902 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.948426008 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.948468924 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.948848009 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.951061010 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.953689098 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.953711987 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.953756094 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.953766108 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.953805923 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.956284046 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.958677053 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:25.958724022 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.958744049 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.958786964 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:25.958795071 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:25.958841085 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:26.004692078 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.004693985 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.072037935 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.072076082 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.072170973 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.072185993 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.073633909 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.073637962 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.075267076 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.075483084 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.075639009 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.075846910 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.075850964 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.075956106 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.079168081 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:26.079233885 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:26.079284906 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:26.080353022 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:26.080360889 CET	443	49766	142.250.186.78	192.168.2.4
Oct 28, 2024 20:14:26.080393076 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:26.080415010 CET	49766	443	192.168.2.4	142.250.186.78
Oct 28, 2024 20:14:26.123336077 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.123337030 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.334780931 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335005999 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.335025072 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335345030 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335478067 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335503101 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335565090 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.335598946 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335643053 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.335688114 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.335938931 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.336002111 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.336247921 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.337327957 CET	49770	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.337349892 CET	443	49770	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338454008 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338481903 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338537931 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338546038 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.338578939 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338593006 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.338653088 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.339258909 CET	49769	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.339272976 CET	443	49769	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.379370928 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.458400965 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.458681107 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.458743095 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.460032940 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.460346937 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.460488081 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.460500002 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.460561037 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.504439116 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.559189081 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.571147919 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.571165085 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.574767113 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.574843884 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.575112104 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.575237989 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.575242043 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.575283051 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.601942062 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.602010012 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.602068901 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.602735996 CET	49771	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.602754116 CET	443	49771	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.617197037 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.617203951 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.633569956 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.633600950 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.633719921 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.634010077 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.634079933 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.634128094 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.634490013 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.634509087 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.634778976 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.634990931 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.635066986 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.635349035 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.636781931 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.636799097 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.637129068 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.637154102 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.637609959 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.637620926 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.637897968 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.637928963 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.663580894 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.667186975 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.667500973 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.667510986 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.669980049 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.670986891 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.671003103 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.671070099 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.671128035 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.671941042 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.671941996 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.672000885 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.672110081 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.672337055 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.672396898 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.672405005 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.672413111 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.672569990 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.672585011 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.673938990 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.675700903 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.675708055 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.680629969 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.680691957 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.681015968 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.681138039 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.682001114 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.703299999 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.703712940 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.703738928 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.707279921 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.707365036 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.707773924 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.707914114 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.707916021 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.720726967 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.720732927 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.727540016 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.727564096 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.727623940 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.727622986 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.727674961 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.728218079 CET	49772	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.728239059 CET	443	49772	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.731337070 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.731365919 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.731489897 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.731806040 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.731816053 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.731897116 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.732022047 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.732034922 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.732238054 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.732250929 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.735965967 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.735977888 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.752875090 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.752912045 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.783248901 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.799262047 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.835139990 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.835174084 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.835186958 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.835228920 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.835254908 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.835289955 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.836417913 CET	49773	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.836427927 CET	443	49773	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.839821100 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.839853048 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.839910984 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.840200901 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.840210915 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.840754986 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.840795994 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.840977907 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.841195107 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.841208935 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.933641911 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.933716059 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.933793068 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.933818102 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.933871984 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.934303999 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.934814930 CET	49776	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.934827089 CET	443	49776	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.936310053 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.936331034 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.936398983 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.936424971 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.936487913 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.937227964 CET	49774	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.937264919 CET	443	49774	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944567919 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944632053 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944653988 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944673061 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944683075 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.944705009 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944721937 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.944741964 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944789886 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.944799900 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944834948 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.944900036 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.944948912 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.946415901 CET	49775	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.946423054 CET	443	49775	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.980612040 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.980669975 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.980721951 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.980756044 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.980808973 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.980827093 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:26.980899096 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.981327057 CET	49777	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:26.981345892 CET	443	49777	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.389117956 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.389216900 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.389648914 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.389827013 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.389853954 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.516113043 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.516263008 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.516294003 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.516433001 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.516592979 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.516623974 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.517159939 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.517225027 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.517726898 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.518243074 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.519886971 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.519951105 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.520181894 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.520256996 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.520272017 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.520471096 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.520482063 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.520483971 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.520515919 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.520823956 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.521195889 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.521250963 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.521559954 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.521672964 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.521823883 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.521836042 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.522728920 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.522804976 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.523108006 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.523159981 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.523277998 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.523283958 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.560715914 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.563355923 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.563360929 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.578356028 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.966500998 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.966525078 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.966536999 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.966593027 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.966610909 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.966659069 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967068911 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967530012 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967544079 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967673063 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967710018 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967721939 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967739105 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967749119 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967756987 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967771053 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967778921 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967807055 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967849970 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.967890024 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.967951059 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968076944 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968094110 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968220949 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968261957 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968400955 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.968461037 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.969181061 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.969238043 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.969470024 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.969479084 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.969552040 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.969845057 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.969851017 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.970490932 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.970556021 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.970896006 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.970926046 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.971132040 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.971678019 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.971760988 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.972088099 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.973443985 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.973530054 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.975547075 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.975713968 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.976243019 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.976425886 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.977024078 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.977031946 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.977659941 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:27.977674007 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:27.977876902 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.009201050 CET	49779	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.009233952 CET	443	49779	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.010139942 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.010160923 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.010386944 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.011343002 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.011356115 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.011924028 CET	49781	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.011986017 CET	443	49781	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.012375116 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.012398958 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.012490034 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.013545036 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.013556957 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.014059067 CET	49780	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.014069080 CET	443	49780	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.014558077 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.014565945 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.014898062 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.015330076 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.015911102 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.015922070 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.019378901 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.024349928 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.024419069 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.583451986 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.583511114 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.583559036 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.583605051 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.583605051 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.583636999 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.583683968 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.586102009 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.586144924 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.586169958 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.586179018 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.586196899 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.591536999 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.591610909 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.591732025 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.591732025 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.591753006 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.596265078 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.596312046 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.596332073 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.596349955 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.596373081 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.597790956 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.597836971 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.597853899 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.597865105 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.597887039 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.599397898 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.599410057 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.599467039 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.599474907 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.602041006 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.602056026 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.602082968 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.602089882 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.602114916 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.603075027 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.603091002 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.603121042 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.603128910 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.603152037 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.604190111 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.604203939 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.604249954 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.604254961 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.606349945 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.606364965 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.606419086 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.606424093 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.609940052 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.609956980 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.610001087 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.610008955 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.610337973 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.610352993 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.610390902 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.610397100 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.610429049 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.611027956 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.611043930 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.611115932 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.611116886 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.611123085 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.626925945 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.626945019 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.626982927 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.627015114 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627034903 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.627216101 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627228975 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627263069 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.627269983 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627294064 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.627585888 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627604008 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.627654076 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.627661943 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.640551090 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.732165098 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.732225895 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.732256889 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.732265949 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.732311964 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.732949018 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.732994080 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.733011007 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.733019114 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.733047962 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.733136892 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.733191013 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.791169882 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.807888985 CET	49778	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.807904005 CET	443	49778	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.808644056 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.808738947 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.808816910 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.810167074 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.810201883 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.814757109 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:28.814819098 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:28.814901114 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:28.815679073 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:28.815709114 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:28.841072083 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.841263056 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.841344118 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.843750954 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.843775034 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.843827963 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.843842983 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.843951941 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.844254017 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.844283104 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.845422983 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.845530987 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.846029043 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846108913 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846167088 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.846180916 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846229076 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.846240044 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846266985 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846302986 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846350908 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.846443892 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.846457005 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846560001 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.846667051 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.848979950 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.849077940 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868243933 CET	49787	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868272066 CET	443	49787	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.868452072 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868463039 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.868587017 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868760109 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868769884 CET	443	49786	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.868786097 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.868804932 CET	49786	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.869054079 CET	49785	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.869065046 CET	443	49785	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.869313002 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.869401932 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.869472980 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.869954109 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.869966030 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.870081902 CET	49788	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.870095968 CET	443	49788	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:28.870465994 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:28.870503902 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.379282951 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.379638910 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.380186081 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.380213022 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.423681974 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434000969 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434016943 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.434298038 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434479952 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434555054 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.434629917 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434856892 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.434869051 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.435103893 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.435134888 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.435592890 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.435600996 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.435838938 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.436055899 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.436067104 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.453830004 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.460074902 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.460304976 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.460318089 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.460727930 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.460736036 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.460802078 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.461287975 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.461395979 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.461399078 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.464378119 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.464449883 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.468019962 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.468156099 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.468333960 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.487405062 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.487411022 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.488230944 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.488243103 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.489438057 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.497916937 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.498084068 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.498099089 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.503330946 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.511873960 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.527689934 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.543327093 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.548930883 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.562336922 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.562357903 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.562422037 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.562951088 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.562967062 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.641468048 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.641732931 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.641881943 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.669399023 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.684098005 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.684138060 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.686557055 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.687761068 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.687833071 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.696716070 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.696768999 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.697762966 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.697945118 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.697959900 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.697992086 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.700519085 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.700598955 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.717703104 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.717987061 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.718388081 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.718421936 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.722280979 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.722348928 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.722419977 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.722709894 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.722731113 CET	443	49790	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.722743988 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.722780943 CET	49790	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.728694916 CET	49792	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.728705883 CET	443	49792	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.729373932 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.729420900 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.729480028 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.733248949 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.733272076 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.742117882 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.742784977 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.742800951 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.744057894 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.744151115 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.745435953 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.745505095 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.745724916 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.746036053 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.746052027 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.746418953 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.746429920 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.747535944 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.747603893 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.748619080 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.748722076 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.749412060 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.749420881 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.750952959 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.750986099 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.755812883 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.755867004 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.755961895 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.757638931 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.757673025 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.765219927 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.765243053 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.765403986 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.765876055 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.765912056 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.768601894 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.793684006 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.793699980 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.793788910 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.886025906 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886084080 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886104107 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886123896 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886137962 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.886147022 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886158943 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.886164904 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886173964 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.886202097 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886224985 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.886230946 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.886243105 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.901500940 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901532888 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901544094 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901583910 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901597977 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.901621103 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901648045 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901671886 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:29.901684999 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.901684999 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.901684999 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.901706934 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.937953949 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:29.946829081 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:29.947004080 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:29.947069883 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:29.958453894 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.978924036 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.979036093 CET	443	49798	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:29.979110003 CET	49798	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:29.982862949 CET	49739	443	192.168.2.4	142.250.186.164
Oct 28, 2024 20:14:29.982877970 CET	443	49739	142.250.186.164	192.168.2.4
Oct 28, 2024 20:14:29.992506027 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:29.992518902 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:29.992587090 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:29.992856979 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:29.992872000 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:30.022149086 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.022169113 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.022209883 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.022226095 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.022228003 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.022270918 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.022277117 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.022285938 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.022416115 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.023931026 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.023974895 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.024005890 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.024010897 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.024045944 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.024045944 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.039700031 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.039777994 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.039783955 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.039808989 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.039854050 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.039854050 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.041374922 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.041429043 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.041464090 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.041471004 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.041507006 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.041507006 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.117654085 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117681026 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117691040 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117708921 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117718935 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117726088 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117755890 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.117847919 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.117891073 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.117918015 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.141586065 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:30.141604900 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:30.141747952 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:30.142108917 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:30.142123938 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:30.147516966 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147553921 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147582054 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147595882 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147603989 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147608042 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147617102 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147635937 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147638083 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147655010 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147669077 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147681952 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147682905 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147697926 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147712946 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.147722960 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147725105 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147747993 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.147767067 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.148390055 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.148432970 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.148452997 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.148462057 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.148479939 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.159931898 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.159993887 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.160029888 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.160037041 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.160078049 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.160083055 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.178693056 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.178755999 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.178839922 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.178839922 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.178858042 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.178951025 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.178958893 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.180102110 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.180131912 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.180171013 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.180176973 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.180213928 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.196840048 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.212210894 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.221914053 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.253119946 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.253146887 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.253190994 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.253240108 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.253295898 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.253297091 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.256880045 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.256900072 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.256974936 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.256984949 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.257026911 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.283972979 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.283998966 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.284049988 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.284063101 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.284095049 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.284105062 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.284120083 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.284148932 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.285753965 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.285773993 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.285859108 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.285902977 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.285968065 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.287086964 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.287101030 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.287146091 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.287166119 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.287199974 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.287225962 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.295653105 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.295682907 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.295725107 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.295731068 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.295768976 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.295782089 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.295795918 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.295819044 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.296608925 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.296653986 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.296686888 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.296691895 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.296730042 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.296762943 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.306499958 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.312673092 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.317068100 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.317127943 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.317184925 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.317193985 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.317212105 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.317229986 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.318416119 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.318463087 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.318557978 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.318557978 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.318564892 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.318830013 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.336705923 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.336721897 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.337003946 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.337028027 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.337548971 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.338543892 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.338622093 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.339524031 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.340393066 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.340473890 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.341028929 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.341197968 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.341336966 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.341345072 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.343480110 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.344095945 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.344105959 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.345304966 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.346333981 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.346534967 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.346559048 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.383327007 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.389790058 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.389836073 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.389888048 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.389955997 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.389992952 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.390043974 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.391323090 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.392426014 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.392468929 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.392499924 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.392513990 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.392544031 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.392585993 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.393444061 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.393444061 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.420643091 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.420701981 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.420747995 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.420757055 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.420790911 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.420802116 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.420814037 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.422377110 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.422430992 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.422436953 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.422457933 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.422488928 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.425985098 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.426023006 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.426088095 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.426124096 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.426152945 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.426171064 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.432013988 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.432060957 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.432099104 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.432106972 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.432153940 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.433999062 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.434040070 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.434087038 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.434092045 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.434125900 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.434139967 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.435914040 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.435956955 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.436002970 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.436008930 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.436050892 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.436069965 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.454852104 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.454909086 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.454940081 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.454948902 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.455003977 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.455003977 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.455871105 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.455918074 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.455981016 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.455988884 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.456006050 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.456044912 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.461282015 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.461462021 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.461472034 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.462501049 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.462574005 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.463041067 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.463104010 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.463320017 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.463326931 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.470716000 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.516141891 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.526992083 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.527036905 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.527070999 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.527112007 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.527137041 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.527158022 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.528393984 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.528436899 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.528472900 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.528486967 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.528517008 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.528533936 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.552321911 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.552371979 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.552407980 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.552416086 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.552433014 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.552449942 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.553919077 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.553967953 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.553987980 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.553996086 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.554020882 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.554042101 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.555547953 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.555591106 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.555619001 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.555627108 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.555651903 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.555666924 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.560982943 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.561000109 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.561057091 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.561105967 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.561134100 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.561158895 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.562412024 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.562426090 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.562488079 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.562503099 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.562669992 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.569611073 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.569663048 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.569685936 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.569694042 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.569719076 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.569734097 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.570255995 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.570311069 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.570338964 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.570344925 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.570367098 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.570468903 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.570602894 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.570614100 CET	443	49794	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.570621967 CET	49794	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.571099997 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.571141958 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.571247101 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.571624994 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.571640015 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.592200994 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.592247009 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.592278957 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.592292070 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.592308044 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.592343092 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.593242884 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.593283892 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.593358040 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.593358040 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.593368053 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.593446016 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.593935966 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.593976021 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.594017029 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.594024897 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.594065905 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.594065905 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.595407009 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.595448971 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.595472097 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.595480919 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.595585108 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.595585108 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.598614931 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.598633051 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.598687887 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.598695993 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.598757029 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.599132061 CET	49805	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.599159002 CET	443	49805	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.599409103 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.599509001 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.599581003 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.599890947 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.599930048 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.601902962 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.601937056 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.601952076 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.601969957 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.601989985 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.602003098 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.602030039 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.602030039 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.602072954 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.602627039 CET	49806	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.602637053 CET	443	49806	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.634773016 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.635059118 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.635082960 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.636568069 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.636636019 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.636902094 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.636991024 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.637001991 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.638900042 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.638962030 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.638982058 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.639009953 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.639017105 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.639043093 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.639045000 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.639064074 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.639182091 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.639235020 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.639487982 CET	49804	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.639493942 CET	443	49804	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.643687010 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.646410942 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.646677971 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.646697998 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.646847963 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.646859884 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.647447109 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.647767067 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.647851944 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.647880077 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.650329113 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.650475025 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.656531096 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.656697035 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.656774998 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.663412094 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.663469076 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.663517952 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.663538933 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.663564920 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.663584948 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.664627075 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.664674044 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.664696932 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.664705038 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.664737940 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.664757967 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.665411949 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.665455103 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.665478945 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.665486097 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.665515900 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.665530920 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.667656898 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.667704105 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.667731047 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.667738914 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.667769909 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.667787075 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.679358959 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.679557085 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.679577112 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688194036 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688246012 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688261032 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.688271046 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688308954 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.688324928 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.688636065 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688678980 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688697100 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.688705921 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.688735008 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.688749075 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.690202951 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.690242052 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.690263987 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.690270901 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.690299034 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.690310001 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.691165924 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.691205025 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.691245079 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.691252947 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.691283941 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.691294909 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.691333055 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.697361946 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.697395086 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.697410107 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.698923111 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.698944092 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.698990107 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.699029922 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.699071884 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.699071884 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.699969053 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.699984074 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.700048923 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.700066090 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.700197935 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.701530933 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.701558113 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.701615095 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.701628923 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.701658964 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.701677084 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.725816011 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.726897955 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:30.726946115 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:30.727015972 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:30.727283001 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:30.727303982 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:30.730866909 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.730921030 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.731029987 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.731029987 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.731043100 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.731336117 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.731873989 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.731914997 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.731981039 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.731981993 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.731988907 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.732060909 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.732506990 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.732549906 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.732647896 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.732647896 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.732656002 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.732996941 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.733114004 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.733169079 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.733198881 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.733206987 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.733228922 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.733262062 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.746633053 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.800497055 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.800544024 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.800581932 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.800615072 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.800662994 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.800705910 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.803576946 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.803626060 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.803648949 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.803664923 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.803693056 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.803710938 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.804552078 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.804596901 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.804635048 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.804647923 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.804672956 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.804691076 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.823550940 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.823612928 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.823622942 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.823637962 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.823668957 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.823784113 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.823837996 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.837697029 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.837713957 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.837781906 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.837814093 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.837827921 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.837852955 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.838846922 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.838861942 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.838908911 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.838917017 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.838941097 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.838948011 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.839998007 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.840015888 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.840064049 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.840074062 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.840519905 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.867860079 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:30.868737936 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868757963 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868763924 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868814945 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868824959 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.868849039 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868869066 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868900061 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.868923903 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.868923903 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.868923903 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.868942976 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869066000 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869119883 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869179964 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869190931 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869216919 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869277954 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869698048 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869740009 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869786024 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869793892 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869854927 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869883060 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869894028 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869925976 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869931936 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.869947910 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.869987011 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.870392084 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.870412111 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.870479107 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.870479107 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.870486975 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.870592117 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.870929956 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.870958090 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.870991945 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.871001005 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.871025085 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.871052980 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.900623083 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.900813103 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.900902033 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.911251068 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:30.921082020 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.921134949 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.921199083 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.921219110 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.921293974 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.921771049 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.936646938 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.936702967 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.936773062 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.936774015 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.936839104 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.936872005 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.936930895 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.936934948 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.936956882 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.937027931 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.940361977 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.940402031 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.940443039 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.940459013 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.940486908 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.940510988 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941046953 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941128969 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941169024 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941181898 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941207886 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941226959 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941375971 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941418886 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941443920 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941457987 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.941483021 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.941499949 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.975344896 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.975366116 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.975485086 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.975555897 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976219893 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976244926 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976288080 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976310968 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.976310968 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.976331949 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976360083 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:30.976362944 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:30.976419926 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.004755974 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.004774094 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.004838943 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.004868984 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.004892111 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.005161047 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.006290913 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.006305933 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.006356001 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.006364107 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.006392956 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.006405115 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007019043 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007064104 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007129908 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007129908 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007142067 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007265091 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007606983 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007651091 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007700920 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007700920 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.007710934 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.007770061 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008254051 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008294106 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008341074 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008341074 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008347988 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008527040 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008527994 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008553982 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008598089 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008598089 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008603096 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008626938 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008656979 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008735895 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008857965 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008896112 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008934021 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008934975 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.008944035 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.008980036 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.009386063 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.009426117 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.009449959 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.009466887 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.009517908 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.009517908 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.024514914 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.054177999 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054202080 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054210901 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054236889 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054254055 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054264069 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054281950 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.054321051 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.054341078 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.054369926 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.056143999 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.056179047 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.056221008 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.056231976 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.056262970 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073165894 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073215008 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073245049 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073259115 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073272943 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073633909 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073756933 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073802948 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073820114 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073828936 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.073857069 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.073877096 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.076708078 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.076755047 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.076780081 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.076787949 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.076822996 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.076837063 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.077343941 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.077389956 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.077406883 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.077415943 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.077441931 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.077452898 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078020096 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078061104 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078090906 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078098059 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078119040 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078135967 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078644037 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.078773022 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078813076 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078841925 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078874111 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.078902006 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.078922987 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.099136114 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.142215014 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.142236948 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.142326117 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.142340899 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.142385960 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.145009041 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145055056 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145081997 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.145090103 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145117998 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.145137072 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.145185947 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145242929 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.145248890 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145344019 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.145390034 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.193329096 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.193342924 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.193397045 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.193427086 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.193427086 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.193480015 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.193510056 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.193530083 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210014105 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210073948 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210102081 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210136890 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210161924 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210197926 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210618973 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210658073 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210694075 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210707903 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.210733891 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.210980892 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.211029053 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.211051941 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.211066961 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.211095095 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.211121082 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.213773012 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.213813066 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.213840961 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.213855028 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.213886023 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.213907003 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214205027 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214252949 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214287043 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214299917 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214327097 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214350939 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214653015 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214694977 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214720011 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214734077 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.214781046 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.214781046 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.215025902 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.215065002 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.215095043 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.215109110 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.215154886 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.215154886 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.278364897 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.278382063 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.278445959 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.278459072 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.278480053 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.278493881 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.279903889 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.279917002 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.279994011 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.280002117 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.280041933 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.311130047 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.311772108 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.312218904 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.320597887 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.320611000 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.322721004 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.323318005 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.323335886 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.324846983 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.324927092 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.324995041 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.325021029 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.325057030 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.330629110 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.330666065 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.330729008 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.330776930 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.330832005 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.332165003 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.332187891 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.332242966 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.332258940 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.332287073 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.332341909 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.346837997 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.346899986 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.346951008 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.346976042 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347007036 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347405910 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347454071 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347481012 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347498894 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347527981 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347568989 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347651958 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347703934 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347738981 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347753048 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.347776890 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.347803116 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.348566055 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.348613977 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.348655939 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.348669052 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.348695993 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.348714113 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.364435911 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.392241955 CET	49800	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.392270088 CET	443	49800	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.392565012 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.392608881 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.392996073 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.394450903 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.394501925 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.394530058 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.394547939 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.394588947 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.394588947 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.394901037 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.394942045 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.394987106 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395000935 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395030975 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395051003 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395311117 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395369053 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395399094 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395414114 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395438910 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395458937 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395657063 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395673037 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395745993 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395785093 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395824909 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395838022 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.395864010 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.395881891 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.396085978 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.396131039 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.396152973 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.396166086 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.396194935 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.396214008 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.415477037 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.415501118 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.415561914 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.415575981 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.415605068 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.415620089 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.416618109 CET	49801	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.416667938 CET	443	49801	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.416968107 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.417018890 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.417088985 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.417321920 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.417339087 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.417387962 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.417395115 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.417428017 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.417452097 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.426208019 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.426248074 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.428081036 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.428128004 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.428793907 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.429413080 CET	49812	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.429474115 CET	443	49812	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.430593967 CET	49814	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.430610895 CET	443	49814	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.431488991 CET	49793	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.431509018 CET	443	49793	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.431885004 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.431906939 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.432231903 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.433604002 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.433619976 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.450156927 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.450352907 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.450375080 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.450674057 CET	49723	80	192.168.2.4	2.19.126.163
Oct 28, 2024 20:14:31.451510906 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.452721119 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.452850103 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.452862024 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.452903986 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.456788063 CET	80	49723	2.19.126.163	192.168.2.4
Oct 28, 2024 20:14:31.456851006 CET	49723	80	192.168.2.4	2.19.126.163
Oct 28, 2024 20:14:31.469173908 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.469197035 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.469248056 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.469286919 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.469314098 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.469403982 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.470539093 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.470560074 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.470613956 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.470628023 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.470660925 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.470679045 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.475913048 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.476201057 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.476212025 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.476689100 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.477402925 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.477488995 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.477926016 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.483771086 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.483838081 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.483844995 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.483865976 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.483901978 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.483916044 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484042883 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484091043 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484106064 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484117031 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484143972 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484163046 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484461069 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484508038 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484533072 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484540939 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484570026 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484586000 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484837055 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484880924 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484900951 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484908104 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.484935045 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.484955072 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485028982 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.485089064 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485102892 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.485152960 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485187054 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.485243082 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485481977 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485498905 CET	443	49797	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.485511065 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485548973 CET	49797	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485836029 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.485915899 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.485986948 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.486275911 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.486309052 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.493799925 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.523343086 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.552011013 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.552031994 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.552107096 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.552119970 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.552162886 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.553353071 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.553369045 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.553437948 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.553446054 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.553488970 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.607554913 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.607584953 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.607642889 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.607687950 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.607714891 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.607784986 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.608254910 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.608274937 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.608324051 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.608340979 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.608366966 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.608408928 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.688565969 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.688589096 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.688636065 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.688654900 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.688673019 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.688901901 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.689095020 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.689110041 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.689167023 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.689176083 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.689214945 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.690145016 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.690159082 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.690211058 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.690217972 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.690248966 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.690259933 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.697273016 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.697526932 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.697530985 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.715476990 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.715538979 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.715610981 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.715636969 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.715694904 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.715781927 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.726732969 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.727092028 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.739365101 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.741836071 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.741930962 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.742010117 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.745374918 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.745409966 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.745481968 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.745551109 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.745589018 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.745628119 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.746098995 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746123075 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746228933 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.746244907 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746300936 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.746741056 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746762991 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746865034 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.746879101 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.746932030 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.754066944 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.754086018 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:31.774754047 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.774765015 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.825052977 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825072050 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825155973 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.825189114 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825234890 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.825793982 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825808048 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825843096 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.825853109 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.825884104 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.825911999 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.826678038 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.826694965 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.826750040 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.826757908 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.826817989 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.827600956 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.827615976 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.827661037 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.827668905 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.827706099 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.883513927 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.883546114 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.883609056 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.883662939 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.883694887 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.883867979 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.884103060 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.884128094 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.884176970 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.884193897 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.884222031 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.884244919 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.884959936 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.884982109 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.885042906 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.885061979 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.885090113 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.885107994 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.885751963 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.885795116 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.885834932 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.885854006 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.885876894 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.885974884 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.887367010 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:31.887456894 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.945476055 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.945549011 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:31.945774078 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:31.962620974 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.962676048 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.962701082 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.962723017 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:31.962739944 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:31.962769032 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.021615982 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.021641016 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.021712065 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.021712065 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.021783113 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.021835089 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.022332907 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022355080 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022408962 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.022423983 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022454977 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.022754908 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022780895 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022824049 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.022845030 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.022870064 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.022887945 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.023580074 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.023602009 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.023638010 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.023655891 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.023682117 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.025657892 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.065175056 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065188885 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065206051 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065213919 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065224886 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.065242052 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065252066 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.065275908 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.065315008 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.081413031 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.111011982 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111033916 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111051083 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111085892 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.111093998 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111114979 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111124992 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.111134052 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111145020 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.111162901 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.111165047 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.111327887 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.142062902 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142117977 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142138958 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142157078 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142177105 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.142199993 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142214060 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.142220974 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142241001 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142257929 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142275095 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.142288923 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.142312050 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.143745899 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143764973 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143781900 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143800974 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.143824100 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143842936 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.143862963 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143882036 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143898964 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143912077 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.143925905 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.143940926 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.143949986 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.144068003 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.144499063 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.159583092 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.159609079 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.159671068 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.159742117 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.159786940 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.159786940 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.160173893 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.160195112 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.160238028 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.160250902 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.160279036 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.160332918 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.160948992 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.160969019 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161006927 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161039114 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161065102 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161228895 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161433935 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161468029 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161494970 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161506891 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161533117 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161550999 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161709070 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161730051 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161766052 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161780119 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.161807060 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.161851883 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.162146091 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.162179947 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.162215948 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.162229061 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.162259102 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.162280083 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.184945107 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.184967995 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.184989929 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.185012102 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.185029984 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.185030937 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.185050011 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.185081005 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.185092926 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.185307026 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.198204041 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.198544025 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.199249983 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.199270010 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.203702927 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.203737020 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.203775883 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.204787970 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.204807043 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.204865932 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.204910040 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.204932928 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.204962015 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.204982042 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.205049992 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.205096006 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.215944052 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.216010094 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:32.216109991 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.217972994 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.218004942 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:32.218064070 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.236799002 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.236876965 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.236897945 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.236907959 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.236937046 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.280891895 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.286922932 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.298188925 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298213959 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298261881 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.298315048 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298346043 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.298372030 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.298469067 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298490047 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298527956 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.298541069 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298571110 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.298634052 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.298686028 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.301938057 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.302772045 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.302793980 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.302835941 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.302839041 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.302875042 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.302905083 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.302905083 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.302915096 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.302953005 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.305046082 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.305124044 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.305124044 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.305150986 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.305182934 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.305191994 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.318787098 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.318856955 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.318866968 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.318872929 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.318907976 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.324295044 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.324357033 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.324364901 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.324404001 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.331059933 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.335613012 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.335700035 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.335705996 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.335757017 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.351703882 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.351751089 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.351787090 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.351794004 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.351861000 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.383846998 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.383876085 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.383935928 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.383946896 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.383975983 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.383995056 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.405385017 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.405421019 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:32.405478954 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.405796051 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.405844927 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:32.406351089 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:32.406363010 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:32.406553984 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.406579018 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.407160044 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.407166958 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.407426119 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.407448053 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.407851934 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.408004999 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.410763979 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.410849094 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.410892963 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.415373087 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.416069984 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.416083097 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:32.416709900 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.416888952 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.419205904 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.419420958 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.420023918 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.420097113 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.420972109 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.420984983 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.421576977 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.421699047 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.426873922 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.427098036 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.436105967 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.436131954 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:32.463334084 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.463361025 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.476845026 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.482697010 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.482717991 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:32.482794046 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.483211040 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:32.483218908 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:32.484239101 CET	49809	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.484250069 CET	443	49809	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.486628056 CET	49821	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.486645937 CET	443	49821	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.525816917 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:32.532629013 CET	49820	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.532696009 CET	443	49820	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.545586109 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.545598984 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.545663118 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.547003031 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.547815084 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.549750090 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.549763918 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.559685946 CET	49819	443	192.168.2.4	203.114.55.135
Oct 28, 2024 20:14:32.559700966 CET	443	49819	203.114.55.135	192.168.2.4
Oct 28, 2024 20:14:32.579993963 CET	49810	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.580030918 CET	443	49810	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.666264057 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666295052 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666337967 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666347980 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666364908 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666373968 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666399956 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666429043 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666459084 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666529894 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666623116 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666683912 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666690111 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.666738987 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.666985035 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.667068005 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.667124987 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.667184114 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.668339014 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.717178106 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.717199087 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.718405008 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.721342087 CET	49816	443	192.168.2.4	157.240.0.6
Oct 28, 2024 20:14:32.721354008 CET	443	49816	157.240.0.6	192.168.2.4
Oct 28, 2024 20:14:32.724289894 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.724469900 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.728816986 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.731918097 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.731944084 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.732428074 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.732691050 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.732708931 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.771353960 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926059008 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926084042 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926094055 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926151991 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.926176071 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926198959 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.926244974 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.926944017 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:32.926959991 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:32.927018881 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:32.927434921 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:32.927449942 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:32.927506924 CET	49823	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.927530050 CET	443	49823	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.928958893 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.929008961 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.929078102 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.929251909 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.929266930 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997104883 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997154951 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997175932 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997210979 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.997231007 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997246027 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:32.997317076 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:32.997373104 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.015341043 CET	49828	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.015360117 CET	443	49828	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.017600060 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.017616034 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.017801046 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.017988920 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.017997980 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059801102 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059856892 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059876919 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059895039 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059916019 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.059932947 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059948921 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059962034 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.059968948 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.059988022 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060004950 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.060029030 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.060039043 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060655117 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060673952 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060703993 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060710907 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.060726881 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060750008 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.060770988 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.060777903 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060879946 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.060947895 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.061053991 CET	49825	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.061059952 CET	443	49825	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.063224077 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.063256979 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.063344002 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.063615084 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.063630104 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067445993 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067466974 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067475080 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067498922 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067507982 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067517042 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067537069 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.067604065 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067631960 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.067640066 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.067677975 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.067677975 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.068290949 CET	49824	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.068322897 CET	443	49824	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.069871902 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.069911957 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.070024014 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.070216894 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.070259094 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.103461027 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:33.103605032 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:33.103663921 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:33.103966951 CET	49822	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:33.103981972 CET	443	49822	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:33.268769979 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.269062996 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.269094944 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.269612074 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.269682884 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.270612001 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.270668983 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.395232916 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.395406961 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.395437956 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.395566940 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.528383970 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.528419971 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.663342953 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.665678978 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.675875902 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.676563978 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.680442095 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.682945967 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.713426113 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.724051952 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.724070072 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.724153042 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.724162102 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.724601984 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.724615097 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.725121975 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.725194931 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.725893021 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.725924015 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.726257086 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.726259947 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.726347923 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.726427078 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.726917028 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.727025986 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.728091002 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.728182077 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.728976011 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.729022980 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.729758978 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.729856014 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.734174967 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.734304905 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.756282091 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.756346941 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.756503105 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.756695986 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.761100054 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.761265039 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.765228033 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.765361071 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.765604973 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.765613079 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.769962072 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.769977093 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:33.788273096 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.807957888 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.809155941 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.809248924 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.811327934 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.811333895 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.814620018 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.814625978 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.814635038 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.814654112 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:33.816842079 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.901664972 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.913724899 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:33.913739920 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.913959026 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.913975954 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.914267063 CET	49830	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:33.914314032 CET	443	49830	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:33.915211916 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.915307045 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.915332079 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.915368080 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:33.915518999 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.915524960 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.917470932 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.917653084 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.919020891 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.919051886 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.919117928 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.919712067 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.919872999 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.920531988 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:33.920619965 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.920686960 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:33.920692921 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.920938015 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:33.920948029 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:33.950140953 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.963324070 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:33.975323915 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.018737078 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:34.018757105 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.018759966 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:34.018887997 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.025629044 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025655985 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025665998 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025722027 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025724888 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.025763988 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025789022 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025799990 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.025804043 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.025811911 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.025849104 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.027820110 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027853966 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027863026 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027880907 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027909994 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.027931929 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027961016 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.027966022 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.028009892 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.040594101 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.046401978 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.076769114 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.076781988 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.076803923 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.076816082 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.077688932 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.077754974 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.078449011 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.078469038 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.078545094 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.094155073 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.094331026 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.095851898 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.095922947 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.096230984 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.096244097 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.096455097 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.096470118 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.152429104 CET	49839	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.152457952 CET	443	49839	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.153162003 CET	49835	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.153172016 CET	443	49835	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.158071041 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.158112049 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.158174038 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.161194086 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.161211014 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.161263943 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.162456036 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.162544012 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.162614107 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.162735939 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.162748098 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.164220095 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.164232016 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.165324926 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.165381908 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.165658951 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.165708065 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.166008949 CET	49834	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.166013956 CET	443	49834	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.166901112 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.166954994 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.168229103 CET	49833	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.168241024 CET	443	49833	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.181498051 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181555986 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181601048 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181611061 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.181621075 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181648970 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181651115 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.181669950 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.181787968 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.181840897 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.183490992 CET	49842	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.183495045 CET	443	49842	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183506012 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183558941 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183579922 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183598995 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183624029 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.183631897 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183653116 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.183660030 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183723927 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.183732986 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183816910 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.183904886 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.184765100 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.185784101 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.185817957 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.185873985 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.186705112 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.186721087 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.187309027 CET	49841	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.187325954 CET	443	49841	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.188854933 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.188870907 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.188926935 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.189559937 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.189610958 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.189651966 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.189656019 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:34.189666033 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.189702034 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:34.189712048 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.190783024 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.190795898 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.194888115 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.194936037 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:34.195002079 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.203846931 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.203876972 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:34.221157074 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.232266903 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.232278109 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.232341051 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.232742071 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.232748985 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.235394955 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.235428095 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.235481977 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.235706091 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.235724926 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.237390995 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.237405062 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.237457037 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.237742901 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.237760067 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.239706993 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.239734888 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.239793062 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.240390062 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.240408897 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.241033077 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.241055012 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.241107941 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.241322994 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.241336107 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.246319056 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.246346951 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.246412992 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.246681929 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.246706963 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.268301010 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:34.268357038 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:34.268436909 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:34.268791914 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:34.268821955 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:34.299920082 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.299945116 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.300010920 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.300246954 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.300270081 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.310003042 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.310054064 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:34.310379028 CET	49840	443	192.168.2.4	142.250.186.98
Oct 28, 2024 20:14:34.310384989 CET	443	49840	142.250.186.98	192.168.2.4
Oct 28, 2024 20:14:34.311701059 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.311728954 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:34.311789036 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.312026024 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:34.312048912 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:34.339672089 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:34.339709044 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:34.339771032 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:34.340428114 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:34.340454102 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:34.370834112 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:34.370893955 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:34.370970964 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:34.371390104 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:34.371417046 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:34.383266926 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383343935 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383364916 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383409977 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.383413076 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383443117 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.383443117 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383519888 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.383603096 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.383687019 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.384219885 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.384242058 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.384248972 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.384279013 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.384291887 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.384294033 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.384336948 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.393143892 CET	49844	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.393167973 CET	443	49844	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.393599987 CET	49843	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:34.393615007 CET	443	49843	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:34.672936916 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:34.719331980 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:34.746659040 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.746727943 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.746798992 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.747833014 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:34.747858047 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:34.825797081 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:34.826257944 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:34.826355934 CET	443	49831	216.239.32.181	192.168.2.4
Oct 28, 2024 20:14:34.826409101 CET	49831	443	192.168.2.4	216.239.32.181
Oct 28, 2024 20:14:34.886642933 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.886887074 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.886899948 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.888111115 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.888457060 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.888550997 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:34.888562918 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:34.935332060 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.034094095 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.034959078 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.036684990 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.036700010 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.036858082 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.036900997 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.038047075 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.038131952 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.039808035 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.039904118 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.040115118 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.040131092 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.040153027 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.040189028 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.040260077 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.040359974 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.040371895 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.040652990 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.040738106 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.040745974 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.041488886 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.042268038 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.042399883 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.042406082 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.042438030 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.048429966 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.048851967 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.048875093 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.049357891 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.050105095 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.050199032 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.050204992 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.068095922 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.068336964 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.068351984 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.071888924 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.071964025 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.072916031 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.073077917 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.073092937 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.074398041 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.074817896 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.074848890 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.078134060 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.078396082 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.078471899 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.078779936 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.078876019 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.078882933 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.078949928 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.083354950 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.095340014 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.115326881 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.125220060 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.125240088 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.125262022 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.125297070 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.126683950 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.127042055 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.127065897 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.127552986 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127577066 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127588987 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127630949 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127652884 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.127666950 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127696037 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127722025 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.127737045 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.127737045 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.127819061 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.127819061 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.128299952 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.129055977 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.129149914 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.129393101 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.130593061 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.130750895 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.130759954 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.132205963 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.132258892 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.132270098 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.132272959 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.132302046 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.132322073 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.132340908 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.132370949 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.132380009 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.132392883 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.132462978 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.133071899 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.133137941 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.133157969 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.133567095 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.133588076 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.133728027 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.133734941 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.134737968 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.134809971 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.135075092 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.135137081 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.135282993 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.135298967 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.144026041 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.145070076 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.145267010 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.145278931 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.145965099 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.146416903 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.146436930 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.146548033 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.146559000 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.146737099 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.146802902 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.147082090 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.147161007 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.147198915 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.147893906 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.147963047 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.148226976 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.148309946 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.148365974 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.148386002 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.150103092 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.150202036 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.150574923 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.150656939 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.150662899 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.150739908 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.152520895 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.152687073 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.152695894 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.152976036 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.153491974 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.153537035 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.153660059 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.154027939 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.154261112 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.154278994 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.155731916 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.155806065 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.156508923 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.156593084 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.157031059 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.157042980 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.175332069 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.187344074 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.199322939 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.199700117 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.199887037 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.199903011 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.201339960 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.201405048 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.201673985 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.201757908 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.201766014 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.234205961 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.234205961 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.234210014 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.234213114 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.234227896 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.234232903 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.234231949 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.234260082 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.242932081 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.242943048 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.242980957 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.243015051 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.243027925 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.243071079 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.243144035 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.243602037 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.244010925 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.244040012 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.245084047 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.245152950 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.245523930 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.245587111 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.245750904 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.245770931 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.247349977 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.247617006 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.247643948 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.247692108 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.247720957 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.247731924 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.247762918 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.247770071 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.247838020 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.248366117 CET	49849	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.248380899 CET	443	49849	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.250444889 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.250546932 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.253009081 CET	49868	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.253041029 CET	443	49868	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.255723000 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.255743980 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.256072044 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.256350040 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.256357908 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.279122114 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.305648088 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305710077 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305730104 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305751085 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305769920 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.305778980 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305830002 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.305835962 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305900097 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.305922031 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.305972099 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.313581944 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313642025 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313663960 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313718081 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313749075 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.313771009 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313796043 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.313853025 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.313920021 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.314773083 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.314798117 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.314798117 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.314805984 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.314811945 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.314810038 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.314838886 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.328485012 CET	49850	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.328491926 CET	443	49850	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.329735041 CET	49851	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.329760075 CET	443	49851	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335109949 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335136890 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335156918 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335184097 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.335196018 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335226059 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.335345030 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.335551023 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.335942984 CET	49854	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.335951090 CET	443	49854	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341701984 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341728926 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341747999 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341774940 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.341779947 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341805935 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341814995 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.341852903 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.341862917 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.341944933 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.342197895 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.342825890 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.342842102 CET	443	49853	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.342854023 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.342910051 CET	49853	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.375617981 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.375628948 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.379072905 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.379103899 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.379337072 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.379767895 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.379791975 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.379863024 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.380387068 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.380403996 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.380543947 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.380635977 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.380647898 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.381634951 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.381649017 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.381850958 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.381860971 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.387147903 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.387430906 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.387475967 CET	443	49869	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.387626886 CET	49869	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.389657021 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.389683008 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.389791012 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.390331984 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.390348911 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.392810106 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.392868042 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.394992113 CET	49855	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:35.395004988 CET	443	49855	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:35.398096085 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.398107052 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.398212910 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.398771048 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.398791075 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.399022102 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.399411917 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.399425030 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.400425911 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.400444984 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.421369076 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:35.421386003 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:35.421499968 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:35.421695948 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:35.421709061 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:35.424753904 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.424814939 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.424880981 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.424899101 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.424978971 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.425024986 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.425404072 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.425470114 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.438030958 CET	49857	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.438066959 CET	443	49857	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.438361883 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.438437939 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.438585043 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.439887047 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.439919949 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.476900101 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.476953983 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.476989031 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.476991892 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.477013111 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.477046013 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.533304930 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.533376932 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.533420086 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.533457041 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.533478022 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.533518076 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.533555031 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.541996956 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.542284012 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542341948 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542382956 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542401075 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542406082 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.542428970 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542455912 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.542473078 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542480946 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.542494059 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542511940 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542521000 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.542536020 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.542548895 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.542562962 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.543975115 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.543993950 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544013023 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544048071 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.544069052 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544086933 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544095039 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.544106007 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544122934 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.544131041 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.544145107 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.544171095 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.549078941 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549218893 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549231052 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549253941 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549263954 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549273014 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549280882 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.549294949 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549324036 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.549329042 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.549371004 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.550940990 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551016092 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551038027 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551070929 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551083088 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.551116943 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551158905 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551163912 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.551177979 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551193953 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551214933 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.551234961 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.551260948 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.551260948 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.552618980 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552673101 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552707911 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552726984 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552735090 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.552755117 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552776098 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.552793980 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552812099 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552830935 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552848101 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.552861929 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.552887917 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.554204941 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554225922 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554244041 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554291964 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.554292917 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554313898 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554331064 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554332972 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.554352045 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.554372072 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.554400921 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.554400921 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.560017109 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560040951 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560050964 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560074091 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560081959 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560085058 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560094118 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.560106993 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.560139894 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.560193062 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.566211939 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.566242933 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.566293001 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.566306114 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.566369057 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.566812038 CET	49865	443	192.168.2.4	203.114.55.134
Oct 28, 2024 20:14:35.566819906 CET	443	49865	203.114.55.134	192.168.2.4
Oct 28, 2024 20:14:35.605930090 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.606103897 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.606344938 CET	49870	443	192.168.2.4	142.250.185.66
Oct 28, 2024 20:14:35.606357098 CET	443	49870	142.250.185.66	192.168.2.4
Oct 28, 2024 20:14:35.612550974 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.612574100 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.612575054 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.612576962 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.613712072 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.613815069 CET	443	49871	142.250.186.100	192.168.2.4
Oct 28, 2024 20:14:35.613892078 CET	49871	443	192.168.2.4	142.250.186.100
Oct 28, 2024 20:14:35.628411055 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:35.628428936 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:35.628635883 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:35.628948927 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:35.628957987 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:35.644920111 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.645175934 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.645191908 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.646301031 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.646616936 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.646717072 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.646728039 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.646792889 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.669003010 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.669054985 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.669083118 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.669095993 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.669126034 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.670300007 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.670365095 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.670368910 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.670393944 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.670425892 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.673815012 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.679703951 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.679727077 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.679769993 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.679780960 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.679789066 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.679815054 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.679841995 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.679869890 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.685828924 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685838938 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685858965 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685878038 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685889959 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685897112 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.685911894 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.685944080 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.685951948 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686007023 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.686513901 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686538935 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686556101 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686582088 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.686628103 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686635017 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.686646938 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686677933 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686687946 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.686693907 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.686745882 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687369108 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687387943 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687429905 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687448025 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687449932 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687479019 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687509060 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687536955 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687608957 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687613964 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687623978 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687644958 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687654018 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687681913 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687689066 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.687737942 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.687757015 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.691946983 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.691971064 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.691987991 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.692013979 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.692049026 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.692063093 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.692069054 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.692094088 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.692118883 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.692145109 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.692162991 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.783304930 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.783304930 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.804608107 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.804641962 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.804691076 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.804711103 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.804730892 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.804749012 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.804769993 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.804804087 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.806477070 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.806495905 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.806535959 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.806562901 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.806596041 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.806602955 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.806679010 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.816344023 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.816354036 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.816375017 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.816385984 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.816414118 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.816423893 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.816477060 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.817553997 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.817578077 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.817610979 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.817616940 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.817666054 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823158979 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823193073 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823266029 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823337078 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823374033 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823376894 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823416948 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823417902 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823435068 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823476076 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823512077 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823517084 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.823563099 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.823568106 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.824644089 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.824681044 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.824698925 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.824721098 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.824743032 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.830797911 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.830820084 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.830885887 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.830887079 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.830919981 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.830954075 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.830975056 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.830986023 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.832256079 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.832305908 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.832326889 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.832353115 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.832396030 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.913347006 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.913747072 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.913748026 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.940241098 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.940293074 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.940335989 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.940354109 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.940386057 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.940397024 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.941883087 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.941940069 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.941953897 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.941962957 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.942001104 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.942027092 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.952488899 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.952555895 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.952560902 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.952605963 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.952629089 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.952677011 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.953880072 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.953938961 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.953960896 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.953978062 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.954008102 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.954037905 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.957545042 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.957617998 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.957638979 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.957670927 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.957694054 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.957714081 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.958901882 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.958945990 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.958981991 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.958996058 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.959038019 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.959059954 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.960469007 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.960474968 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.960496902 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.960508108 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.960535049 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.960541964 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.960583925 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.960611105 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.961951971 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.961958885 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.961982965 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.962014914 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.962019920 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.962075949 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.966809034 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.966829062 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.966869116 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.966886997 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.966902018 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.966933966 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.966943979 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967247963 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.967801094 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967820883 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967859983 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967879057 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.967886925 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967936993 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.967945099 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.967989922 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.969531059 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.969573975 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.969635963 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.969647884 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:35.969691992 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.969715118 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:35.975436926 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.975451946 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.976584911 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.976686001 CET	443	49874	142.250.185.194	192.168.2.4
Oct 28, 2024 20:14:35.976835012 CET	49874	443	192.168.2.4	142.250.185.194
Oct 28, 2024 20:14:35.993679047 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.994343042 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.994349957 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.994832993 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.995858908 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:35.995953083 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:35.996542931 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.039336920 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.074697018 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.074747086 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.074779987 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.074796915 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.074839115 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.074847937 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.075464964 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.075508118 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.075546980 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.075556040 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.075588942 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.075598955 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.076673031 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.076716900 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.076730967 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.076740980 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.076771021 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.076792955 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.089359045 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.089405060 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.089464903 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.089487076 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.089510918 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.089541912 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.090039968 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.090090036 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.090101957 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.090115070 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.090143919 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.090167046 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.091027021 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.091068983 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.091097116 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.091105938 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.091162920 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.091193914 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.093445063 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.093497038 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.093565941 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.093626976 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.093682051 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.093682051 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.094237089 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.094279051 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.094343901 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.094412088 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.094454050 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.094476938 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.096657991 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.096704006 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.096748114 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.096760035 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.096796989 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.096818924 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.097901106 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.097943068 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.098014116 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.098021030 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.098068953 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.098087072 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.105285883 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.105350018 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.105379105 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.105401993 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.105433941 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.105452061 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.106338978 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.106383085 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.106415987 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.106429100 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.106462955 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.106481075 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.107058048 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.107115030 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.107131958 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.107151985 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.107181072 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.107306004 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.107615948 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.114703894 CET	49864	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.114737988 CET	443	49864	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.115281105 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.115341902 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.115423918 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.115936041 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.115966082 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.210309029 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.210361004 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.210381031 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.210395098 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.210431099 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.210443974 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.211011887 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211050987 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211083889 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.211091995 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211117029 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.211144924 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.211858988 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211901903 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211951017 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.211960077 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.211988926 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.212012053 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.225977898 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226025105 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226078987 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.226109028 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226135969 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.226160049 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.226639032 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226680040 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226707935 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.226715088 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.226757050 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.227610111 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.227649927 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.227678061 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.227688074 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.227722883 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.227746964 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.228418112 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228461027 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228475094 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.228482962 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228526115 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.228542089 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228599072 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228616953 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.228641033 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.228663921 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.228684902 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.229187012 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.229242086 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.229253054 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.229269981 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.229300976 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.229320049 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.230210066 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.230251074 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.230283022 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.230289936 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.230331898 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.230350018 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.232589960 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.232635021 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.232671022 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.232677937 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.232716084 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.232734919 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.233642101 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.233685017 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.233717918 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.233722925 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.233764887 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.233793020 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.234344959 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.234385967 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.234420061 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.234425068 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.234452009 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.234477043 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.234920979 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.234958887 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.234989882 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.234996080 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.235045910 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.235052109 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.235093117 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.235148907 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.235193968 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.235225916 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.235254049 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.235256910 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.235292912 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.235297918 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.235330105 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.235344887 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.245255947 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.245287895 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.245331049 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.245335102 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.245385885 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.253532887 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:36.264229059 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.270677090 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.271694899 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.276350975 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.276741982 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.279407024 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.281927109 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.281943083 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.282274961 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.282286882 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.282551050 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.282563925 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.282789946 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.282805920 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.283004999 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.283015966 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.283972025 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.284179926 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.284216881 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.284226894 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.284595013 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:36.284606934 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:36.285573959 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.285636902 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.285953999 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.286022902 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.286112070 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:36.286171913 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:36.286245108 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.286323071 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.287950039 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.288031101 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.340954065 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.342746019 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.342802048 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.343142986 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.344094038 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.344371080 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.344597101 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.344974995 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345200062 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345257044 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345272064 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.345280886 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345340967 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.345575094 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:36.345608950 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345653057 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345695972 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.345702887 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.345717907 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.345747948 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.345944881 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:36.346712112 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.346731901 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.346752882 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.346792936 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.346798897 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.346831083 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.346868992 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.347062111 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.347434044 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.347454071 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.347479105 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.347512007 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.347518921 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.347549915 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.347575903 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.347820044 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.349617958 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.350003958 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.350075960 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.350263119 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.350769043 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.350784063 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.351032972 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.351052046 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.351113081 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:36.351128101 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:36.351288080 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.351300955 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.351360083 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.351376057 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.352119923 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.352159023 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.353564978 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.353591919 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.353662014 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.353667974 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.353697062 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.353724003 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.361773968 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.361860991 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.361890078 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.395332098 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.395356894 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.397799969 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:36.397799969 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.397826910 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.399596930 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.403340101 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.413299084 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.477416039 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.705254078 CET	49861	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.705272913 CET	443	49861	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.851239920 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.851346016 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.851449013 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.852382898 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.852421999 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.870927095 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.870939016 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.870980978 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871015072 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871022940 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871069908 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871715069 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871740103 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.871756077 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.871773958 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871787071 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.871809959 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871834040 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871861935 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871882915 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.871882915 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.871891022 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871891022 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871895075 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.871927023 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.871948957 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.871964931 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.871989012 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.872236013 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872263908 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872304916 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.872312069 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872345924 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.872514963 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872555971 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872601986 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.872633934 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.872667074 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.872693062 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873157978 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.873189926 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873209000 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873249054 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.873266935 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873272896 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873311043 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.873315096 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873343945 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873366117 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873388052 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873418093 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873424053 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873430014 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873464108 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873475075 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873512030 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873518944 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873531103 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873554945 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873567104 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873589039 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873603106 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873640060 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873658895 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.873778105 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.873845100 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.874699116 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.874722004 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.874764919 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.874771118 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.874794006 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.874804974 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.874815941 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.874842882 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.874878883 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875045061 CET	49876	443	192.168.2.4	13.107.246.45
Oct 28, 2024 20:14:36.875052929 CET	443	49876	13.107.246.45	192.168.2.4
Oct 28, 2024 20:14:36.875204086 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875245094 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875276089 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875297070 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875324011 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875407934 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875415087 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875437975 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875478029 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875490904 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875504971 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875511885 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.875590086 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.875590086 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.876009941 CET	49860	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.876039982 CET	443	49860	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.876106024 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.876147985 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.876178980 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.876188993 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.876189947 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:36.876252890 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.876538038 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.876564026 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.876667023 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877093077 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877120972 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877162933 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877170086 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877204895 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877227068 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877468109 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877496004 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877526045 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877532005 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.877609968 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.877609968 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.878164053 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.878185034 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.878230095 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.878235102 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.878274918 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.878868103 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:36.878887892 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:36.879111052 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.879132032 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.879168987 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.879177094 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.879224062 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.879767895 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:36.879822969 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:36.879961967 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.879986048 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.880012035 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.880017996 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.880040884 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.880072117 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.880388021 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.880403996 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.880728006 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881138086 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881158113 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881161928 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881202936 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881206036 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881211996 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881256104 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881264925 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881293058 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881324053 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881350040 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881370068 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881378889 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881401062 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881409883 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.881437063 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881458044 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.881813049 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882095098 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882113934 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882142067 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882148027 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882206917 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882275105 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882314920 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882337093 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882344007 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882369995 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882392883 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882669926 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882710934 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882720947 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882738113 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.882783890 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.882822990 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883114100 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883135080 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883162975 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883169889 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883204937 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883224964 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883759022 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883800030 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883833885 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:36.883835077 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883842945 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.883872986 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883899927 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.883907080 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:36.884206057 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884247065 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884269953 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884277105 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884306908 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884330988 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884650946 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884676933 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884706020 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884711027 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884753942 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884888887 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884908915 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884932995 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.884938955 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.884979963 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885162115 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:36.885171890 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:36.885289907 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885328054 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885353088 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885360003 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885390997 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885421038 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885474920 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885514021 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885540009 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885546923 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885576963 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885598898 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.885973930 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.885993958 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886020899 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886028051 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886066914 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886595011 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886640072 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886673927 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886682034 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886714935 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886739969 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886832952 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886841059 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886858940 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886888981 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886893988 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886910915 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886918068 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886945009 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.886977911 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.886981010 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.887025118 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.887034893 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887057066 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887106895 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.887113094 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887166977 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.887507915 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887536049 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887562990 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.887569904 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.887612104 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.888369083 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.888389111 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.888428926 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.888433933 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.888463020 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.888489962 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.889276028 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.889295101 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.889324903 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.889331102 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.889369011 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.890063047 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.890090942 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.890114069 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.890120029 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.890166044 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891015053 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891033888 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891071081 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891076088 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891149998 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891149998 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891266108 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891285896 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891334057 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891365051 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891369104 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.891422033 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.891746044 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.892115116 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.892134905 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.892185926 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.892191887 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.892240047 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.892353058 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.895366907 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.897917986 CET	49858	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.897927999 CET	443	49858	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.898541927 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.898576021 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.898679018 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.899672985 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.899689913 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.910842896 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.910871029 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.910907030 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.910913944 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.910979986 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.911525011 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.911545992 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.911592007 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.911597013 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.911619902 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.911647081 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.912178040 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912198067 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912247896 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.912255049 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912295103 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.912695885 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912715912 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912750006 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.912755966 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.912796021 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.912817955 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913152933 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913172960 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913211107 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913217068 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913259029 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913280010 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913672924 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913695097 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913727045 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913733959 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913760900 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913783073 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913788080 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913800955 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913839102 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913844109 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913882971 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.913886070 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.913924932 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.919744968 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.920623064 CET	49859	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.920629025 CET	443	49859	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.921073914 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.921096087 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.921154022 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.921681881 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:36.921698093 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:36.986761093 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:37.024337053 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.024960041 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.024990082 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.025470018 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.025878906 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.025959015 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.026123047 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.067332983 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.109550953 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:37.131406069 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131463051 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131500006 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131519079 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131556988 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.131568909 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131598949 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131603003 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.131761074 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.131820917 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.133037090 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133095026 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133116961 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133133888 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133162022 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.133167028 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133194923 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133203983 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.133243084 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.133251905 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.133354902 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135263920 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135329962 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.135341883 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135360956 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135377884 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135392904 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.135410070 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135437012 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.135523081 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.135572910 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.135989904 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136014938 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136028051 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136044025 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136053085 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136065006 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136118889 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.136138916 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136153936 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.136154890 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.136199951 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.159447908 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:37.159461021 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:37.176451921 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:37.187197924 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:37.187294006 CET	443	49886	64.233.166.156	192.168.2.4
Oct 28, 2024 20:14:37.187623024 CET	49886	443	192.168.2.4	64.233.166.156
Oct 28, 2024 20:14:37.281279087 CET	49881	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.281300068 CET	443	49881	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.282439947 CET	49878	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.282454967 CET	443	49878	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.282989025 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:37.283005953 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:37.311284065 CET	49882	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.311292887 CET	443	49882	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.313010931 CET	49883	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.313030958 CET	443	49883	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.323367119 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:37.323497057 CET	443	49888	216.58.212.132	192.168.2.4
Oct 28, 2024 20:14:37.323590040 CET	49888	443	192.168.2.4	216.58.212.132
Oct 28, 2024 20:14:37.349426985 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.349442959 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.349514961 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.358664989 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.358676910 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.360843897 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.360866070 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.361090899 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.361960888 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.361979961 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.374228954 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.374238968 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.374481916 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.375078917 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.375089884 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446398020 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446413994 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446425915 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446425915 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446435928 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446450949 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446465015 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446481943 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446502924 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446521997 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446527004 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446561098 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446576118 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446587086 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446600914 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446616888 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446616888 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.446643114 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446645975 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446688890 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.446970940 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447014093 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447016001 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447035074 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447052002 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447071075 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447086096 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447091103 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447094917 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447096109 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447137117 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447139025 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447146893 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447155952 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447156906 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447165012 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447165966 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447179079 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447182894 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447196007 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447204113 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447206020 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447261095 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447329044 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447359085 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447360992 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447379112 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447387934 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447458029 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.447459936 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.447618961 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.454541922 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.454560041 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.454654932 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.454674006 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.498517036 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.517925978 CET	49890	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.517987967 CET	443	49890	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.518093109 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.518110991 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.518182039 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.528796911 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.528811932 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.529566050 CET	49879	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.529589891 CET	443	49879	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.532624960 CET	49877	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.532634020 CET	443	49877	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.542471886 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.542488098 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.542557955 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.542578936 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.542634010 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.544588089 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.544605017 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.544665098 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.544681072 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.544735909 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.562043905 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.562062979 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.562231064 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.562671900 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.562685013 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.576641083 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.576706886 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.576916933 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.577541113 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.577572107 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.678472996 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.678488016 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.678564072 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.678595066 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.678657055 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.679678917 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.679693937 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.679760933 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.679775953 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.679845095 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.682188034 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.682202101 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.682291031 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.682306051 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.682363987 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.744132996 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.754144907 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.764755964 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.764770031 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.765014887 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.765060902 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.765392065 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.766268015 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.766338110 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.766711950 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.766783953 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.786436081 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.787023067 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.808876991 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.811252117 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.811356068 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.811827898 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.811839104 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.812057018 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.812072039 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.812350988 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.812558889 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.812572002 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.813657045 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.813698053 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.813729048 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.813774109 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.813827038 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.813843966 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.813914061 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.813932896 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.814155102 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.815025091 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.815040112 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.815121889 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.815136909 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.815191984 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.826689005 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.826802015 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.827847004 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.827949047 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.828052044 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.828061104 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.828102112 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.828114986 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.855329990 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.870323896 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.870330095 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.948535919 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.948554039 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.948620081 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.948647976 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.948713064 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.949347019 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.949362040 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.949434042 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.949449062 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.949495077 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.950351954 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.950366020 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.950437069 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.950449944 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.950505972 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.951706886 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.951719999 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.951769114 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.951783895 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:37.951826096 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.951848030 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:37.993266106 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.075103998 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.075124979 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.075131893 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.075160980 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.075181961 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.075229883 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.075277090 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.076174021 CET	49891	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.076212883 CET	443	49891	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.076668978 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.076723099 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.076805115 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.077743053 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.077769995 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.084600925 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.084614992 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.084698915 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.084714890 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.084768057 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.084791899 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.085203886 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.085216999 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.085278034 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.085292101 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.085355997 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.086066008 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.086085081 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.086164951 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.086179018 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.086225033 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.086982965 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.086997032 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.087053061 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.087066889 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.087120056 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.093689919 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.093724012 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.093733072 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.093755960 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.093823910 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.093827963 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.093875885 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.094830990 CET	49893	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.094846010 CET	443	49893	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.095309019 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.095356941 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.095421076 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.134310961 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.134331942 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.187979937 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:38.188051939 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:38.188148022 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:38.198002100 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:38.198051929 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:38.200160980 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.200201988 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.200282097 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.200737000 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.200754881 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211174965 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211209059 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211220980 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211245060 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211263895 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.211270094 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211278915 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211302996 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211318970 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.211337090 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.211338043 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.211359978 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.212745905 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.212755919 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.212781906 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.212812901 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.212820053 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.212861061 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.212867975 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.212939024 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.219747066 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.219760895 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.219825983 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.219845057 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.219897032 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.220266104 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.220280886 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.220345020 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.220359087 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.220410109 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221084118 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221098900 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221160889 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221174002 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221208096 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221215963 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221237898 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221246958 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221259117 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.221276999 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221370935 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.221993923 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.222007036 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.222060919 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.222076893 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.222130060 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.224698067 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224721909 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224731922 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224749088 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224756956 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224772930 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224785089 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.224802017 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224833965 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.224859953 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.224864006 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224881887 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.224925995 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.225994110 CET	49892	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.226005077 CET	443	49892	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.226613045 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.226628065 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.226737976 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.227533102 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.227545023 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.237502098 CET	49894	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.237513065 CET	443	49894	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.237950087 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.237988949 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.238135099 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.240758896 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.240784883 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626573086 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626590014 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626662970 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.626699924 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626768112 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.626877069 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626878977 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626890898 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.626945972 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.626988888 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627002954 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627053976 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627087116 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627098083 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627147913 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627171993 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627211094 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627212048 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627224922 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627253056 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627350092 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627372980 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627384901 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627450943 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627464056 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627520084 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627533913 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627597094 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627791882 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627808094 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627863884 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627866983 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627878904 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627902985 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.627908945 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627929926 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.627955914 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.628014088 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.628081083 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.628329992 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.628467083 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.628720999 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.628758907 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.628808022 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.628830910 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.628837109 CET	49887	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.628861904 CET	443	49887	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.629149914 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.629173040 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.629303932 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.629535913 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.629544020 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.629832029 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.629864931 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630120993 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630167007 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630400896 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.630413055 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630553007 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.630620956 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.630628109 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630800962 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.630810976 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.630959988 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.630976915 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631022930 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631081104 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.631131887 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631310940 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.631403923 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631515980 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.631695032 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631797075 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.631803989 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.631881952 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.632047892 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.632304907 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.632396936 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.632484913 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.634567976 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.634645939 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.634880066 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.634968042 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.634978056 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.635057926 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.671335936 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.675329924 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.679574013 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.679596901 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.727559090 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.727561951 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.727576971 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894289017 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894310951 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894362926 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894366026 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894390106 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894423962 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894432068 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894443989 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894453049 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894453049 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894503117 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894516945 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894542933 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894542933 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894550085 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894573927 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.894623041 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.894665003 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895149946 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895200968 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895221949 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895241976 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895258904 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895275116 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895293951 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895307064 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895324945 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895458937 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895534039 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895819902 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895854950 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895864010 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895910025 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895920038 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895941019 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.895947933 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.895997047 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.896922112 CET	49896	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.896934986 CET	443	49896	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898312092 CET	49898	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.898322105 CET	443	49898	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898621082 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898694038 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898761034 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.898778915 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898798943 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898845911 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.898854971 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898940086 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.898989916 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.900341034 CET	49910	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.900394917 CET	443	49910	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.900470972 CET	49910	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.900660992 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.900681019 CET	443	49899	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.900696039 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.900726080 CET	49899	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.901097059 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.901112080 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.901312113 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.901878119 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.901942968 CET	443	49912	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902003050 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902307034 CET	49910	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902333975 CET	443	49910	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902436972 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902466059 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902483940 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902501106 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902518034 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902564049 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902661085 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902796030 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902808905 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.902821064 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902884007 CET	49900	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.902889967 CET	443	49900	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.904164076 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.904194117 CET	443	49912	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.905932903 CET	49913	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.906014919 CET	443	49913	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.906033039 CET	49897	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.906044006 CET	443	49897	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.906091928 CET	49913	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.907259941 CET	49913	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.907293081 CET	443	49913	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.908124924 CET	49914	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.908147097 CET	443	49914	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.908215046 CET	49914	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.908404112 CET	49901	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.908425093 CET	443	49901	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.908875942 CET	49914	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.908900023 CET	443	49914	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.910231113 CET	49915	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.910254002 CET	443	49915	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.910320997 CET	49915	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.910558939 CET	49915	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.910579920 CET	443	49915	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.939238071 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.939680099 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.939697981 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.940067053 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.941196918 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.941268921 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:38.941365004 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:38.987330914 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.010586977 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.018228054 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.018244028 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.019428015 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.044334888 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.074881077 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.075115919 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.075150013 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.075268984 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.075413942 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.076020002 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.079068899 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.079168081 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.083658934 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.093161106 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.093183994 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.093961000 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.094168901 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.094199896 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.096781015 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.096849918 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.134289026 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.139355898 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.179465055 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.179477930 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.202470064 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.202491045 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.202498913 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.202539921 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.202563047 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.202581882 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.202650070 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.303368092 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.303673029 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.335628033 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.336710930 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336740971 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336750031 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336771965 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336796045 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336817980 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.336841106 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336855888 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.336859941 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.336885929 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.336922884 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.449156046 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.451647043 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.490660906 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.506642103 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.578943968 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.578957081 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.579739094 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.579925060 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.580008984 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.580281019 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.580624104 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.580924988 CET	49905	443	192.168.2.4	74.125.133.155
Oct 28, 2024 20:14:39.580964088 CET	443	49905	74.125.133.155	192.168.2.4
Oct 28, 2024 20:14:39.583487988 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.583493948 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.583647966 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.583678961 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.585573912 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.585632086 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.585735083 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.585747957 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.585792065 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.586827993 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.586913109 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.587027073 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.587043047 CET	443	49906	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.587196112 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.587202072 CET	443	49907	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.587367058 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.587397099 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.587433100 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.587723970 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.587732077 CET	443	49909	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.589077950 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.589261055 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.589833021 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.589862108 CET	443	49908	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.619700909 CET	49903	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.619725943 CET	443	49903	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.620788097 CET	49916	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.620816946 CET	443	49916	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.620887995 CET	49916	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.621263981 CET	49904	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.621273994 CET	443	49904	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.621824026 CET	49917	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.621846914 CET	443	49917	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.621982098 CET	49917	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.623236895 CET	49916	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.623251915 CET	443	49916	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.623809099 CET	49917	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.623827934 CET	443	49917	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.720541000 CET	49906	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.720804930 CET	49908	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.758733034 CET	49907	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.758917093 CET	49909	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.770047903 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.771769047 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.771780014 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.772891045 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.773570061 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.773741961 CET	443	49911	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.773893118 CET	49911	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.782188892 CET	443	49912	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.785593033 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.785640955 CET	443	49912	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.786768913 CET	443	49912	219.94.174.138	192.168.2.4
Oct 28, 2024 20:14:39.787348032 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.787451029 CET	49912	443	192.168.2.4	219.94.174.138
Oct 28, 2024 20:14:39.787465096 CET	443	49912	219.94.174.138	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 28, 2024 20:14:17.067148924 CET	192.168.2.4	1.1.1.1	0x2c91	Standard query (0)	www.yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:17.067251921 CET	192.168.2.4	1.1.1.1	0x9603	Standard query (0)	www.yamanoue-hotel.co.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:18.081054926 CET	192.168.2.4	1.1.1.1	0x80b9	Standard query (0)	www.yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:19.051589012 CET	192.168.2.4	1.1.1.1	0x1162	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:19.051779985 CET	192.168.2.4	1.1.1.1	0x1db9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:19.088222027 CET	192.168.2.4	1.1.1.1	0xe7ae	Standard query (0)	www.yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:19.088546991 CET	192.168.2.4	1.1.1.1	0xeb94	Standard query (0)	www.yamanoue-hotel.co.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:22.006886005 CET	192.168.2.4	1.1.1.1	0x24ef	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.007421970 CET	192.168.2.4	1.1.1.1	0x83c4	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:22.010730982 CET	192.168.2.4	1.1.1.1	0xeb08	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.011022091 CET	192.168.2.4	1.1.1.1	0x2776	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:22.012130022 CET	192.168.2.4	1.1.1.1	0x396c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.012429953 CET	192.168.2.4	1.1.1.1	0xdf9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:23.067605019 CET	192.168.2.4	1.1.1.1	0x80be	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.088248968 CET	192.168.2.4	1.1.1.1	0x11de	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:24.273878098 CET	192.168.2.4	1.1.1.1	0xfbd2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.274317026 CET	192.168.2.4	1.1.1.1	0xd685	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:24.275351048 CET	192.168.2.4	1.1.1.1	0x1e6f	Standard query (0)	www.yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.275533915 CET	192.168.2.4	1.1.1.1	0x9c39	Standard query (0)	www.yamanoue-hotel.co.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:24.379386902 CET	192.168.2.4	1.1.1.1	0x40fd	Standard query (0)	www.googleoptimize.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.379563093 CET	192.168.2.4	1.1.1.1	0xbed7	Standard query (0)	www.googleoptimize.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:25.285984039 CET	192.168.2.4	1.1.1.1	0xffcc	Standard query (0)	www.yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:25.286103010 CET	192.168.2.4	1.1.1.1	0x967f	Standard query (0)	www.yamanoue-hotel.co.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:26.635303020 CET	192.168.2.4	1.1.1.1	0x2674	Standard query (0)	yamanoue-hotel.co.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:26.635484934 CET	192.168.2.4	1.1.1.1	0xba82	Standard query (0)	yamanoue-hotel.co.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:28.805866003 CET	192.168.2.4	1.1.1.1	0x30ff	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:28.806010008 CET	192.168.2.4	1.1.1.1	0x7673	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:29.983444929 CET	192.168.2.4	1.1.1.1	0x12a4	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:29.983927011 CET	192.168.2.4	1.1.1.1	0x5c15	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:30.121253014 CET	192.168.2.4	1.1.1.1	0xfc29	Standard query (0)	uh.nakanohito.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.121459007 CET	192.168.2.4	1.1.1.1	0x49f6	Standard query (0)	uh.nakanohito.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:30.716437101 CET	192.168.2.4	1.1.1.1	0x6679	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.716610909 CET	192.168.2.4	1.1.1.1	0x9581	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:14:31.858975887 CET	192.168.2.4	1.1.1.1	0x583b	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:31.859282017 CET	192.168.2.4	1.1.1.1	0xce7a	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:32.203248024 CET	192.168.2.4	1.1.1.1	0xbc95	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:32.203490019 CET	192.168.2.4	1.1.1.1	0xd82e	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:32.918884993 CET	192.168.2.4	1.1.1.1	0x3c1e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:32.919079065 CET	192.168.2.4	1.1.1.1	0x7e48	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:34.181830883 CET	192.168.2.4	1.1.1.1	0xc252	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.182041883 CET	192.168.2.4	1.1.1.1	0x3dc8	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:34.248370886 CET	192.168.2.4	1.1.1.1	0x99d1	Standard query (0)	uh.nakanohito.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.248665094 CET	192.168.2.4	1.1.1.1	0xe685	Standard query (0)	uh.nakanohito.jp	65	IN (0x0001)	false
Oct 28, 2024 20:14:34.290306091 CET	192.168.2.4	1.1.1.1	0x8b79	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.290560007 CET	192.168.2.4	1.1.1.1	0x78e	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:14:34.330398083 CET	192.168.2.4	1.1.1.1	0xbad2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.330847979 CET	192.168.2.4	1.1.1.1	0xd7c2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:35.397527933 CET	192.168.2.4	1.1.1.1	0xe9cb	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.397659063 CET	192.168.2.4	1.1.1.1	0x24bd	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:14:35.411916971 CET	192.168.2.4	1.1.1.1	0x37d2	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.412026882 CET	192.168.2.4	1.1.1.1	0xa044	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:14:35.618875980 CET	192.168.2.4	1.1.1.1	0xac5e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.619143009 CET	192.168.2.4	1.1.1.1	0x3709	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 28, 2024 20:14:53.673300982 CET	192.168.2.4	1.1.1.1	0x1395	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:53.673300982 CET	192.168.2.4	1.1.1.1	0xf5db	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:14:58.003289938 CET	192.168.2.4	1.1.1.1	0x23db	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:58.003914118 CET	192.168.2.4	1.1.1.1	0x7de8	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:15:25.755167007 CET	192.168.2.4	1.1.1.1	0xead1	Standard query (0)	uh0.nakanohito.jp	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:25.755356073 CET	192.168.2.4	1.1.1.1	0xe144	Standard query (0)	uh0.nakanohito.jp	65	IN (0x0001)	false
Oct 28, 2024 20:15:33.094454050 CET	192.168.2.4	1.1.1.1	0xaeb3	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.094682932 CET	192.168.2.4	1.1.1.1	0x4542	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 28, 2024 20:15:33.095077038 CET	192.168.2.4	1.1.1.1	0xf73b	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.095391989 CET	192.168.2.4	1.1.1.1	0xf8e0	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:15:33.199129105 CET	192.168.2.4	1.1.1.1	0x8da	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.199335098 CET	192.168.2.4	1.1.1.1	0x8a11	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 28, 2024 20:15:33.253360033 CET	192.168.2.4	1.1.1.1	0x8768	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.253492117 CET	192.168.2.4	1.1.1.1	0xf487	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 28, 2024 20:15:34.684817076 CET	192.168.2.4	1.1.1.1	0xb6b3	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:34.685091972 CET	192.168.2.4	1.1.1.1	0x3e65	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 28, 2024 20:15:36.426835060 CET	192.168.2.4	1.1.1.1	0xffb5	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:36.426987886 CET	192.168.2.4	1.1.1.1	0xe639	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 28, 2024 20:15:36.573026896 CET	192.168.2.4	1.1.1.1	0xb24	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:36.573157072 CET	192.168.2.4	1.1.1.1	0x7bb	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 28, 2024 20:15:37.728358030 CET	192.168.2.4	1.1.1.1	0xb199	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:37.728358984 CET	192.168.2.4	1.1.1.1	0x6ed0	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 28, 2024 20:14:17.867870092 CET	1.1.1.1	192.168.2.4	0x9603	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:18.137392998 CET	1.1.1.1	192.168.2.4	0x2c91	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:18.137392998 CET	1.1.1.1	192.168.2.4	0x2c91	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:18.876705885 CET	1.1.1.1	192.168.2.4	0x80b9	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:18.876705885 CET	1.1.1.1	192.168.2.4	0x80b9	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:19.060534000 CET	1.1.1.1	192.168.2.4	0x1162	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:19.060594082 CET	1.1.1.1	192.168.2.4	0x1db9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 20:14:19.862441063 CET	1.1.1.1	192.168.2.4	0xe7ae	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:19.862441063 CET	1.1.1.1	192.168.2.4	0xe7ae	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:20.345369101 CET	1.1.1.1	192.168.2.4	0xeb94	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:22.014457941 CET	1.1.1.1	192.168.2.4	0x24ef	No error (0)	www.googleoptimize.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018798113 CET	1.1.1.1	192.168.2.4	0x2776	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018938065 CET	1.1.1.1	192.168.2.4	0xeb08	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018938065 CET	1.1.1.1	192.168.2.4	0xeb08	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018938065 CET	1.1.1.1	192.168.2.4	0xeb08	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018938065 CET	1.1.1.1	192.168.2.4	0xeb08	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.018938065 CET	1.1.1.1	192.168.2.4	0xeb08	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.019248009 CET	1.1.1.1	192.168.2.4	0x396c	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.019248009 CET	1.1.1.1	192.168.2.4	0x396c	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.019248009 CET	1.1.1.1	192.168.2.4	0x396c	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:22.019248009 CET	1.1.1.1	192.168.2.4	0x396c	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.075731993 CET	1.1.1.1	192.168.2.4	0x80be	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:23.075731993 CET	1.1.1.1	192.168.2.4	0x80be	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.075731993 CET	1.1.1.1	192.168.2.4	0x80be	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.075731993 CET	1.1.1.1	192.168.2.4	0x80be	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.075731993 CET	1.1.1.1	192.168.2.4	0x80be	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:23.096463919 CET	1.1.1.1	192.168.2.4	0x11de	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:24.283262968 CET	1.1.1.1	192.168.2.4	0xfbd2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.283262968 CET	1.1.1.1	192.168.2.4	0xfbd2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.283262968 CET	1.1.1.1	192.168.2.4	0xfbd2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.283262968 CET	1.1.1.1	192.168.2.4	0xfbd2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:24.388946056 CET	1.1.1.1	192.168.2.4	0x40fd	No error (0)	www.googleoptimize.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:25.291413069 CET	1.1.1.1	192.168.2.4	0x9c39	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:25.788868904 CET	1.1.1.1	192.168.2.4	0x1e6f	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:25.788868904 CET	1.1.1.1	192.168.2.4	0x1e6f	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:26.049249887 CET	1.1.1.1	192.168.2.4	0xffcc	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:26.049249887 CET	1.1.1.1	192.168.2.4	0xffcc	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:26.324114084 CET	1.1.1.1	192.168.2.4	0x967f	No error (0)	www.yamanoue-hotel.co.jp	yamanoue-hotel.co.jp		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:27.388444901 CET	1.1.1.1	192.168.2.4	0x2674	No error (0)	yamanoue-hotel.co.jp		219.94.174.138	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:28.813616037 CET	1.1.1.1	192.168.2.4	0x30ff	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:28.814213037 CET	1.1.1.1	192.168.2.4	0x7673	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 20:14:29.990936995 CET	1.1.1.1	192.168.2.4	0x12a4	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:29.990936995 CET	1.1.1.1	192.168.2.4	0x12a4	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:29.991797924 CET	1.1.1.1	192.168.2.4	0x5c15	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:29.991797924 CET	1.1.1.1	192.168.2.4	0x5c15	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:14:29.991797924 CET	1.1.1.1	192.168.2.4	0x5c15	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:14:30.091283083 CET	1.1.1.1	192.168.2.4	0x7d59	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.091283083 CET	1.1.1.1	192.168.2.4	0x7d59	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.141123056 CET	1.1.1.1	192.168.2.4	0xfc29	No error (0)	uh.nakanohito.jp		203.114.55.135	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725577116 CET	1.1.1.1	192.168.2.4	0x6679	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725577116 CET	1.1.1.1	192.168.2.4	0x6679	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725577116 CET	1.1.1.1	192.168.2.4	0x6679	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725577116 CET	1.1.1.1	192.168.2.4	0x6679	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725900888 CET	1.1.1.1	192.168.2.4	0x9581	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:30.725900888 CET	1.1.1.1	192.168.2.4	0x9581	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:31.866506100 CET	1.1.1.1	192.168.2.4	0x583b	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:31.866506100 CET	1.1.1.1	192.168.2.4	0x583b	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:31.866506100 CET	1.1.1.1	192.168.2.4	0x583b	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:31.866506100 CET	1.1.1.1	192.168.2.4	0x583b	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:31.866506100 CET	1.1.1.1	192.168.2.4	0x583b	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:32.211774111 CET	1.1.1.1	192.168.2.4	0xbc95	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:32.926265955 CET	1.1.1.1	192.168.2.4	0x3c1e	No error (0)	googleads.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:32.926284075 CET	1.1.1.1	192.168.2.4	0x7e48	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 28, 2024 20:14:34.189232111 CET	1.1.1.1	192.168.2.4	0xc252	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.189232111 CET	1.1.1.1	192.168.2.4	0xc252	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.189232111 CET	1.1.1.1	192.168.2.4	0xc252	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.189232111 CET	1.1.1.1	192.168.2.4	0xc252	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.267610073 CET	1.1.1.1	192.168.2.4	0x99d1	No error (0)	uh.nakanohito.jp		203.114.55.134	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298063993 CET	1.1.1.1	192.168.2.4	0x78e	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298063993 CET	1.1.1.1	192.168.2.4	0x78e	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298779964 CET	1.1.1.1	192.168.2.4	0x8b79	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298779964 CET	1.1.1.1	192.168.2.4	0x8b79	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298779964 CET	1.1.1.1	192.168.2.4	0x8b79	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.298779964 CET	1.1.1.1	192.168.2.4	0x8b79	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.338613987 CET	1.1.1.1	192.168.2.4	0xbad2	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:34.338890076 CET	1.1.1.1	192.168.2.4	0xd7c2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 28, 2024 20:14:34.583457947 CET	1.1.1.1	192.168.2.4	0xf53b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:34.583457947 CET	1.1.1.1	192.168.2.4	0xf53b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.404933929 CET	1.1.1.1	192.168.2.4	0x24bd	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:35.405555010 CET	1.1.1.1	192.168.2.4	0xe9cb	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:35.420994043 CET	1.1.1.1	192.168.2.4	0x37d2	No error (0)	stats.g.doubleclick.net		64.233.166.156	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.420994043 CET	1.1.1.1	192.168.2.4	0x37d2	No error (0)	stats.g.doubleclick.net		64.233.166.154	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.420994043 CET	1.1.1.1	192.168.2.4	0x37d2	No error (0)	stats.g.doubleclick.net		64.233.166.157	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.420994043 CET	1.1.1.1	192.168.2.4	0x37d2	No error (0)	stats.g.doubleclick.net		64.233.166.155	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.626719952 CET	1.1.1.1	192.168.2.4	0xac5e	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:35.627350092 CET	1.1.1.1	192.168.2.4	0x3709	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 28, 2024 20:14:50.138545036 CET	1.1.1.1	192.168.2.4	0x8f79	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:50.138545036 CET	1.1.1.1	192.168.2.4	0x8f79	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:14:53.681478024 CET	1.1.1.1	192.168.2.4	0x1395	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:53.681478024 CET	1.1.1.1	192.168.2.4	0x1395	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:53.682399988 CET	1.1.1.1	192.168.2.4	0xf5db	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:53.682399988 CET	1.1.1.1	192.168.2.4	0xf5db	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:58.011034966 CET	1.1.1.1	192.168.2.4	0x23db	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:58.011034966 CET	1.1.1.1	192.168.2.4	0x23db	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:58.012434959 CET	1.1.1.1	192.168.2.4	0x7de8	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:14:58.012434959 CET	1.1.1.1	192.168.2.4	0x7de8	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:00.656590939 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:00.656590939 CET	1.1.1.1	192.168.2.4	0xd2be	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:25.766005039 CET	1.1.1.1	192.168.2.4	0xead1	No error (0)	uh0.nakanohito.jp		203.114.55.140	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:29.213953018 CET	1.1.1.1	192.168.2.4	0xce1	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:29.213953018 CET	1.1.1.1	192.168.2.4	0xce1	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102336884 CET	1.1.1.1	192.168.2.4	0xaeb3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102336884 CET	1.1.1.1	192.168.2.4	0xaeb3	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102350950 CET	1.1.1.1	192.168.2.4	0x4542	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102350950 CET	1.1.1.1	192.168.2.4	0x4542	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:15:33.102350950 CET	1.1.1.1	192.168.2.4	0x4542	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:15:33.102485895 CET	1.1.1.1	192.168.2.4	0xf73b	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102485895 CET	1.1.1.1	192.168.2.4	0xf73b	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102485895 CET	1.1.1.1	192.168.2.4	0xf73b	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102485895 CET	1.1.1.1	192.168.2.4	0xf73b	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102790117 CET	1.1.1.1	192.168.2.4	0xf8e0	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.102790117 CET	1.1.1.1	192.168.2.4	0xf8e0	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207684040 CET	1.1.1.1	192.168.2.4	0x8da	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207684040 CET	1.1.1.1	192.168.2.4	0x8da	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207684040 CET	1.1.1.1	192.168.2.4	0x8da	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207684040 CET	1.1.1.1	192.168.2.4	0x8da	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207684040 CET	1.1.1.1	192.168.2.4	0x8da	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:33.207695007 CET	1.1.1.1	192.168.2.4	0x8a11	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:33.260942936 CET	1.1.1.1	192.168.2.4	0x8768	No error (0)	td.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:34.692202091 CET	1.1.1.1	192.168.2.4	0xb6b3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:34.692202091 CET	1.1.1.1	192.168.2.4	0xb6b3	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:34.692665100 CET	1.1.1.1	192.168.2.4	0x3e65	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:34.692665100 CET	1.1.1.1	192.168.2.4	0x3e65	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:15:34.692665100 CET	1.1.1.1	192.168.2.4	0x3e65	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 28, 2024 20:15:36.518551111 CET	1.1.1.1	192.168.2.4	0xe639	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:36.520252943 CET	1.1.1.1	192.168.2.4	0xffb5	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:36.580848932 CET	1.1.1.1	192.168.2.4	0x7bb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:36.581974030 CET	1.1.1.1	192.168.2.4	0xb24	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:36.581974030 CET	1.1.1.1	192.168.2.4	0xb24	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Oct 28, 2024 20:15:37.736325026 CET	1.1.1.1	192.168.2.4	0x6ed0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:37.736382008 CET	1.1.1.1	192.168.2.4	0xb199	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 28, 2024 20:15:37.736382008 CET	1.1.1.1	192.168.2.4	0xb199	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	219.94.174.138	80	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 28, 2024 20:14:18.147061110 CET	439	OUT	GET / HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 28, 2024 20:14:19.084172010 CET	426	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 28 Oct 2024 19:14:18 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 217 Connection: keep-alive Location: https://www.yamanoue-hotel.co.jp/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.yamanoue-hotel.co.jp/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	219.94.174.138	80	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 28, 2024 20:15:03.158221006 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:21 UTC	667	OUT	GET / HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:21 UTC	184	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.6.40
2024-10-28 19:14:21 UTC	16200	IN	Data Raw: 61 33 64 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 6f 70 74 69 6d 69 7a 65 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 2e 6a 73 3f 69 64 3d 4f 50 54 2d 4b 58 52 50 38 4b 54 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 21 2d 2d 20 47 6f 6f 67 6c 65 20 54 61 67 20 4d 61 6e 61 67 65 72 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 73 2c 6c 2c 69 29 7b 77 5b 6c 5d 3d 77 5b 6c 5d 7c 7c 5b 5d 3b 77 5b 6c 5d 2e 70 75 73 68 28 7b 27 67 74 6d 2e 73 74 61 72 74 27 3a 0d 0a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 27 67 74 6d 2e 6a 73 27 7d Data Ascii: a3d8<!doctype html><html><head><script src="https://www.googleoptimize.com/optimize.js?id=OPT-KXRP8KT"></script>... Google Tag Manager --><script>(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'}
2024-10-28 19:14:21 UTC	16384	IN	Data Raw: 61 76 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 72 65 73 74 61 75 72 61 6e 74 2f 6d 6f 6e 63 61 76 65 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 6d 67 20 76 69 65 77 5f 6c 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 69 6d 61 67 65 73 2f 6e 65 77 2f 69 6d 67 5f 67 6e 61 76 5f 72 65 73 74 30 39 2e 6a 70 67 22 20 61 6c 74 3d 22 e8 91 a1 e8 90 84 e9 85 92 e3 81 90 e3 82 89 e3 83 a2 e3 83 b3 e3 82 ab e3 83 bc e3 83 b4 22 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: av"><a href="https://www.yamanoue-hotel.co.jp/restaurant/moncave/"> <p class="img view_l"><img src="https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest09.jpg" alt=""></p>
2024-10-28 19:14:22 UTC	9368	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 72 65 73 74 61 75 72 61 6e 74 2f 68 69 6c 6c 74 6f 70 2f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 69 6d 67 20 76 69 65 77 5f 6c 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 69 6d 61 67 65 73 2f 6e 65 77 2f 69 6d 67 5f 67 6e 61 76 5f 72 65 73 74 30 36 2e 6a 70 67 22 20 61 6c 74 3d 22 e3 82 b3 e3 83 bc e3 83 92 e3 83 bc e3 83 91 e3 83 bc e3 83 a9 e3 83 bc e3 83 92 e3 83 ab e3 83 88 e3 83 83 e3 83 97 22 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: <a href="https://www.yamanoue-hotel.co.jp/restaurant/hilltop/"> <p class="img view_l"><img src="https://www.yamanoue-hotel.co.jp/images/new/img_gnav_rest06.jpg" alt=""></p>
2024-10-28 19:14:22 UTC	13077	IN	Data Raw: 33 33 30 64 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6d 65 2d 69 6e 66 6f 22 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 78 74 5f 77 72 70 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6d 65 2d 69 6e 66 6f 2d 74 74 6c 22 3e 0d 0a 09 09 09 3c 68 32 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 33 30 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 22 3e e3 80 90 e5 b1 b1 e3 81 ae e4 b8 8a e3 83 9b e3 83 86 e3 83 ab 20 3c 62 72 20 63 6c 61 73 73 3d 22 76 69 65 77 5f 73 70 22 3e e5 85 a8 e9 a4 a8 e4 bc 91 e9 a4 a8 e3 81 ae e3 81 8a e7 9f a5 e3 82 89 e3 81 9b e3 80 91 3c 2f 68 32 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 0d 0a 20 20 20 20 20 20 20 Data Ascii: 330d<div class="home-info"><div class="txt_wrp"> <div class="home-info-ttl"><h2 style="text-align:center; margin:0 0 30px; font-size:24px;"> <br class="view_sp"></h2></div>
2024-10-28 19:14:22 UTC	1536	IN	Data Raw: 35 66 39 0d 0a 3c 75 6c 3e 0a 09 09 3c 6c 69 3e 0a 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 32 35 31 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6d 67 20 63 6c 61 73 73 3d 22 61 6c 70 68 61 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 64 61 74 61 73 2f 6e 65 77 73 2f 69 6d 61 67 65 73 2f 31 5f 30 32 30 32 34 30 39 32 34 31 32 35 39 33 34 5f 69 67 52 74 68 2e 70 6e 67 22 20 61 6c 74 3d 22 e6 98 8e e6 b2 bb e5 ba a7 20 e5 b1 b1 e3 81 ae e4 b8 8a e3 83 9b e3 83 86 e3 83 ab e5 92 8c e9 a3 9f e6 96 99 e7 90 86 e9 95 b7 Data Ascii: 5f9<ul><li><a href="https://www.yamanoue-hotel.co.jp/information/251"><img class="alpha" src="https://www.yamanoue-hotel.co.jp/datas/news/images/1_020240924125934_igRth.png" alt="
2024-10-28 19:14:22 UTC	16384	IN	Data Raw: 34 37 61 66 0d 0a 09 3c 64 6c 3e 0a 09 09 09 3c 64 74 3e 32 30 32 33 2e 31 31 2e 33 30 3c 2f 64 74 3e 0a 09 09 3c 64 64 3e 0a 09 09 09 3c 70 3e e3 83 ac e3 82 b9 e3 83 88 e3 83 a9 e3 83 b3 3c 2f 70 3e 0a 09 09 09 3c 68 33 3e 3c 61 20 68 72 65 66 3d 22 2e 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 32 33 37 22 3e e3 83 ac e3 82 b9 e3 83 88 e3 83 a9 e3 83 b3 e5 ad a3 e7 af 80 e3 83 a1 e3 83 8b e3 83 a5 e3 83 bc ef bc 88 e5 86 ac ef bc 89 e3 81 ae e3 81 94 e6 a1 88 e5 86 85 3c 2f 61 3e 3c 2f 68 33 3e 0a 09 09 3c 2f 64 64 3e 0a 09 09 09 3c 64 74 3e 32 30 32 33 2e 31 31 2e 31 36 3c 2f 64 74 3e 0a 09 09 3c 64 64 3e 0a 09 09 09 3c 70 3e e3 83 ac e3 82 b9 e3 83 88 e3 83 a9 e3 83 b3 3c 2f 70 3e 0a 09 09 09 3c 68 33 3e 3c 61 20 68 72 65 66 3d 22 2e 2f 69 6e 66 6f 72 6d Data Ascii: 47af<dl><dt>2023.11.30</dt><dd><p></p><h3><a href="./information/237"></a></h3></dd><dt>2023.11.16</dt><dd><p></p><h3><a href="./inform
2024-10-28 19:14:22 UTC	1975	IN	Data Raw: 61 20 68 72 65 66 3d 22 2e 2f 73 74 61 79 2f 70 6c 61 6e 2f 22 3e e6 bb 9e e5 9c a8 e3 82 b9 e3 83 88 e3 83 bc e3 83 aa e3 83 bc 3c 2f 61 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 21 2d 2d 20 53 74 61 79 20 2f 20 53 54 41 52 54 20 20 2d 2d 3e 0d 0a 0d 0a 3c 21 2d 2d 20 41 43 43 45 53 53 20 2f 20 53 54 41 52 54 20 20 2d 2d 3e 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 6d 65 2d 61 63 63 65 73 73 22 3e 0d 0a 20 20 20 20 3c 68 32 3e e3 82 a2 e3 82 af e3 82 bb e3 82 b9 e3 83 bb e3 81 8a e5 95 8f e3 81 84 e5 90 88 e3 82 8f e3 81 9b 3c 2f 68 32 3e 0d 0a 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 Data Ascii: a href="./stay/plan/"></a></div> </div> </div> </div></div>... Stay / START -->... ACCESS / START --><div class="home-access"> <h2></h2> <div>
2024-10-28 19:14:22 UTC	9484	IN	Data Raw: 32 35 30 34 0d 0a 3c 21 2d 2d 20 46 4f 4f 54 45 52 20 2f 20 53 54 41 52 54 20 20 2d 2d 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 5f 62 6e 72 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 78 5f 62 6e 72 32 22 20 69 64 3d 22 6a 73 5f 73 6c 69 64 65 72 5f 6c 6e 6b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 69 6e 66 6f 72 6d 61 74 69 6f 6e 2f 39 31 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d Data Ascii: 2504... FOOTER / START --><div class="footer"> <div class="con_bnr2"> <div class="box_bnr2" id="js_slider_lnk"> <div class="slide"><a href="https://www.yamanoue-hotel.co.jp/information/91"><img src="https://www.yamanoue-
2024-10-28 19:14:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 19:14:22 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=163919 Date: Mon, 28 Oct 2024 19:14:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49749	151.101.1.229	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	582	OUT	GET /npm/slick-carousel@1.8.0/slick/slick.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:22 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1667 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 1.8.0 X-JSD-Version-Type: version ETag: W/"683-E/53FuTIPGgo9536hBWxqWpKKdk" Accept-Ranges: bytes Age: 2261367 Date: Mon, 28 Oct 2024 19:14:22 GMT X-Served-By: cache-fra-etou8220058-FRA, cache-dfw-kdfw8210020-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4d 69 6e 69 66 69 65 64 20 62 79 20 6a 73 44 65 6c 69 76 72 20 75 73 69 6e 67 20 63 6c 65 61 6e 2d 63 73 73 20 76 35 2e 33 2e 32 2e 0a 20 2a 20 4f 72 69 67 69 6e 61 6c 20 66 69 6c 65 3a 20 2f 6e 70 6d 2f 73 6c 69 63 6b 2d 63 61 72 6f 75 73 65 6c 40 31 2e 38 2e 30 2f 73 6c 69 63 6b 2f 73 6c 69 63 6b 2e 63 73 73 0a 20 2a 0a 20 2a 20 44 6f 20 4e 4f 54 20 75 73 65 20 53 52 49 20 77 69 74 68 20 64 79 6e 61 6d 69 63 61 6c 6c 79 20 67 65 6e 65 72 61 74 65 64 20 66 69 6c 65 73 21 20 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6a 73 64 65 6c 69 76 72 2e 63 6f 6d 2f 75 73 69 6e 67 2d 73 72 69 2d 77 69 74 68 2d 64 79 6e 61 6d 69 63 2d 66 69 6c 65 73 0a 20 2a 2f 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 Data Ascii: /** * Minified by jsDelivr using clean-css v5.3.2. * Original file: /npm/slick-carousel@1.8.0/slick/slick.css * * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files */.slick-slide
2024-10-28 19:14:22 UTC	289	IN	Data Raw: 63 6b 2d 73 6c 69 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 6c 69 63 6b 2d 6c 6f 61 64 69 6e 67 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 73 6c 69 63 6b 2d 76 65 72 74 69 63 61 6c 20 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 73 6c 69 63 6b 2d 61 72 72 6f 77 2e 73 6c 69 63 6b 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 2f 73 6d 2f 66 62 33 65 64 33 35 31 63 64 35 63 30 66 31 66 33 30 66 38 38 37 37 38 65 65 31 66 39 62 30 35 36 35 39 38 65 Data Ascii: ck-slide{display:block}.slick-loading .slick-slide{visibility:hidden}.slick-vertical .slick-slide{display:block;height:auto;border:1px solid transparent}.slick-arrow.slick-hidden{display:none}/*# sourceMappingURL=/sm/fb3ed351cd5c0f1f30f88778ee1f9b056598e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49750	151.101.1.229	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	567	OUT	GET /npm/slick-carousel@1.8.0/slick/slick.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:22 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42863 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.8.0 X-JSD-Version-Type: version ETag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs" Accept-Ranges: bytes Age: 464199 Date: Mon, 28 Oct 2024 19:14:22 GMT X-Served-By: cache-fra-etou8220140-FRA, cache-dfw-kdal2120025-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 7c 7c 7b 7d 3b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 Data Ascii: !function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 78 3a 30 2c 24 6e 65 78 74 41 72 72 6f 77 3a 6e 75 6c 6c 2c 24 70 72 65 76 41 72 72 6f 77 3a 6e 75 6c 6c 2c 73 63 72 6f 6c 6c 69 6e 67 3a 21 31 2c 73 6c 69 64 65 43 6f 75 6e 74 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 54 72 61 63 6b 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 73 3a 6e 75 6c 6c 2c 73 6c 69 64 69 6e 67 3a 21 31 2c 73 6c 69 64 65 4f 66 66 73 65 74 3a 30 2c 73 77 69 70 65 4c 65 66 74 3a 6e 75 6c 6c 2c 73 77 69 70 69 6e 67 3a 21 31 2c 24 6c 69 73 74 3a 6e 75 6c 6c 2c 74 6f 75 63 68 4f 62 6a 65 63 74 3a 7b 7d 2c 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3a 21 31 2c 75 6e 73 6c 69 63 6b 65 64 3a 21 31 7d 2c 69 2e 65 78 74 65 6e 64 28 6e 2c 6e 2e 69 6e 69 74 69 61 6c 73 29 2c 6e 2e 61 63 74 69 76 65 42 Data Ascii: x:0,$nextArrow:null,$prevArrow:null,scrolling:!1,slideCount:null,slideWidth:null,$slideTrack:null,$slides:null,sliding:!1,slideOffset:0,swipeLeft:null,swiping:!1,$list:null,touchObject:{},transformsEnabled:!1,unslicked:!1},i.extend(n,n.initials),n.activeB
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 63 65 55 69 64 3d 65 2b 2b 2c 6e 2e 68 74 6d 6c 45 78 70 72 3d 2f 5e 28 3f 3a 5c 73 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 29 24 2f 2c 6e 2e 72 65 67 69 73 74 65 72 42 72 65 61 6b 70 6f 69 6e 74 73 28 29 2c 6e 2e 69 6e 69 74 28 21 30 29 7d 7d 28 29 29 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 41 44 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 66 69 6e 64 28 22 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 2e 61 74 74 72 28 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 7d 29 2e 66 69 6e 64 28 22 61 2c 20 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 2c 20 73 65 6c 65 63 74 22 29 2e 61 74 74 72 28 7b 74 61 62 69 6e 64 65 78 3a 22 30 22 7d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: ceUid=e++,n.htmlExpr=/^(?:\s(<[\w\W]+>)[^>])$/,n.registerBreakpoints(),n.init(!0)}}()).prototype.activateADA=function(){this.$slideTrack.find(".slick-active").attr({"aria-hidden":"false"}).find("a, input, button, select").attr({tabindex:"0"})},e.prototy
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 61 73 69 6e 67 2c 74 29 3a 21 31 3d 3d 3d 73 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 3f 28 21 30 3d 3d 3d 73 2e 6f 70 74 69 6f 6e 73 2e 72 74 6c 26 26 28 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 3d 2d 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 29 2c 69 28 7b 61 6e 69 6d 53 74 61 72 74 3a 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 7d 29 2e 61 6e 69 6d 61 74 65 28 7b 61 6e 69 6d 53 74 61 72 74 3a 65 7d 2c 7b 64 75 72 61 74 69 6f 6e 3a 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 65 61 73 69 6e 67 3a 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 73 74 65 70 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 3d 4d 61 74 68 2e 63 65 69 6c 28 69 29 2c 21 31 3d 3d 3d 73 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3f 28 6f 5b 73 2e 61 6e 69 6d 54 79 70 65 5d 3d Data Ascii: asing,t):!1===s.cssTransitions?(!0===s.options.rtl&&(s.currentLeft=-s.currentLeft),i({animStart:s.currentLeft}).animate({animStart:e},{duration:s.options.speed,easing:s.options.easing,step:function(i){i=Math.ceil(i),!1===s.options.vertical?(o[s.animType]=
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 6f 72 2c 69 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 70 6c 61 79 53 70 65 65 64 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 65 3d 69 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2b 69 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3b 69 2e 70 61 75 73 65 64 7c 7c 69 2e 69 6e 74 65 72 72 75 70 74 65 64 7c 7c 69 2e 66 6f 63 75 73 73 65 64 Data Ascii: or,i.options.autoplaySpeed))},e.prototype.autoPlayClear=function(){var i=this;i.autoPlayTimer&&clearInterval(i.autoPlayTimer)},e.prototype.autoPlayIterator=function(){var i=this,e=i.currentSlide+i.options.slidesToScroll;i.paused\|\|i.interrupted\|\|i.focussed
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 67 65 74 44 6f 74 43 6f 75 6e 74 28 29 3b 65 2b 3d 31 29 74 2e 61 70 70 65 6e 64 28 69 28 22 3c 6c 69 20 2f 3e 22 29 2e 61 70 70 65 6e 64 28 6f 2e 6f 70 74 69 6f 6e 73 2e 63 75 73 74 6f 6d 50 61 67 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 2c 65 29 29 29 3b 6f 2e 24 64 6f 74 73 3d 74 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 44 6f 74 73 29 2c 6f 2e 24 64 6f 74 73 2e 66 69 6e 64 28 22 6c 69 22 29 2e 66 69 72 73 74 28 29 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 24 73 6c 69 64 65 73 3d 65 2e 24 73 6c 69 64 65 72 2e 63 68 69 6c 64 72 65 6e 28 65 Data Ascii: getDotCount();e+=1)t.append(i("<li />").append(o.options.customPaging.call(this,o,e)));o.$dots=t.appendTo(o.options.appendDots),o.$dots.find("li").first().addClass("slick-active")}},e.prototype.buildOut=function(){var e=this;e.$slides=e.$slider.children(e
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 6c 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 3b 74 2b 2b 29 7b 76 61 72 20 63 3d 69 2a 72 2b 28 65 2a 6c 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 2b 74 29 3b 6e 2e 67 65 74 28 63 29 26 26 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 67 65 74 28 63 29 29 7d 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 7d 6c 2e 24 73 6c 69 64 65 72 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 6f 29 2c 6c 2e 24 73 6c 69 64 65 72 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 73 73 28 7b 77 69 64 74 68 3a 31 30 30 2f 6c 2e 6f 70 74 69 6f 6e 73 2e 73 Data Ascii: ement("div");for(t=0;t<l.options.slidesPerRow;t++){var c=ir+(el.options.slidesPerRow+t);n.get(c)&&a.appendChild(n.get(c))}d.appendChild(a)}o.appendChild(d)}l.$slider.empty().append(o),l.$slider.children().children().children().css({width:100/l.options.s
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 69 64 65 29 2c 72 2e 72 65 66 72 65 73 68 28 65 29 2c 6c 3d 73 29 2c 65 7c 7c 21 31 3d 3d 3d 6c 7c 7c 72 2e 24 73 6c 69 64 65 72 2e 74 72 69 67 67 65 72 28 22 62 72 65 61 6b 70 6f 69 6e 74 22 2c 5b 72 2c 6c 5d 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 2c 73 2c 6e 2c 72 3d 74 68 69 73 2c 6c 3d 69 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 3b 73 77 69 74 63 68 28 6c 2e 69 73 28 22 61 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 2e 69 73 28 22 6c 69 22 29 7c 7c 28 6c 3d 6c 2e 63 6c 6f 73 65 73 74 28 22 6c 69 22 29 29 2c 6e 3d 72 2e 73 6c 69 64 65 43 6f 75 6e 74 25 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 Data Ascii: ide),r.refresh(e),l=s),e\|\|!1===l\|\|r.$slider.trigger("breakpoint",[r,l])}},e.prototype.changeSlide=function(e,t){var o,s,n,r=this,l=i(e.currentTarget);switch(l.is("a")&&e.preventDefault(),l.is("li")\|\|(l=l.closest("li")),n=r.slideCount%r.options.slidesToScr
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 65 2e 24 70 72 65 76 41 72 72 6f 77 26 26 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 65 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 21 30 3d 3d 3d 65 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 26 26 28 65 2e 24 70 72 65 76 41 72 72 6f 77 26 26 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 73 6c 69 63 6b 22 2c 65 2e 6b 65 79 48 61 6e 64 6c 65 72 29 2c 65 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 73 6c 69 Data Ascii: e.$prevArrow&&e.$prevArrow.off("click.slick",e.changeSlide),e.$nextArrow&&e.$nextArrow.off("click.slick",e.changeSlide),!0===e.options.accessibility&&(e.$prevArrow&&e.$prevArrow.off("keydown.slick",e.keyHandler),e.$nextArrow&&e.$nextArrow.off("keydown.sli
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 69 64 65 72 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 69 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 21 31 3d 3d 3d 74 68 69 73 2e 73 68 6f 75 6c 64 43 6c 69 63 6b 26 26 28 69 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 69 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 2c 74 2e 74 6f 75 63 68 4f 62 6a 65 63 74 3d 7b 7d 2c 74 2e 63 6c 65 61 6e 55 70 45 76 65 6e 74 73 28 29 2c 69 28 22 Data Ascii: ider.empty().append(i))},e.prototype.clickHandler=function(i){!1===this.shouldClick&&(i.stopImmediatePropagation(),i.stopPropagation(),i.preventDefault())},e.prototype.destroy=function(e){var t=this;t.autoPlayClear(),t.touchObject={},t.cleanUpEvents(),i("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	151.101.130.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	538	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:22 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 465984 Date: Mon, 28 Oct 2024 19:14:22 GMT X-Served-By: cache-lga21952-LGA, cache-dfw-kdal2120102-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1730142863.776106,VS0,VE1 Vary: Accept-Encoding
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 4f 66 2c 0a 09 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 0a 09 63 6f 72 65 5f 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 63 6f 72 65 5f 74 72 69 6d 20 3d 20 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 Data Ascii: Of,core_toString = class2type.toString,core_hasOwn = class2type.hasOwnProperty,core_trim = core_version.trim,// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor '
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 65 72 0a 09 63 6f 6d 70 6c 65 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 20 67 6f 6f 64 20 65 6e 6f 75 67 68 20 66 6f 72 20 75 73 20 74 6f 20 63 61 6c 6c 20 74 68 65 20 64 6f 6d 20 72 65 61 64 79 20 69 6e 20 6f 6c 64 49 45 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 3d 20 22 6c 6f 61 64 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 29 20 7b 0a 09 09 09 64 65 74 61 63 68 28 29 3b 0a 09 09 09 6a 51 75 65 72 79 2e 72 65 61 64 79 28 29 3b 0a 09 09 Data Ascii: ercompleted = function( event ) {// readyState === "complete" is good enough for us to call the dom ready in oldIEif ( document.addEventListener \|\| event.type === "load" \|\| document.readyState === "complete" ) {detach();jQuery.ready();
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 7b 0a 0a 09 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 68 74 6d 6c 29 20 2d 3e 20 24 28 61 72 72 61 79 29 0a 09 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 31 5d 20 29 20 7b 0a 09 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 20 3f 20 63 6f 6e 74 65 78 74 5b 30 5d 20 3a 20 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 09 09 09 2f 2f 20 73 63 72 69 70 74 73 20 69 73 20 74 72 75 65 20 66 6f 72 20 62 61 63 6b 2d 63 6f 6d 70 61 74 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2c 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 0a 09 09 09 09 09 09 6d 61 74 63 68 5b 31 5d 2c 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 Data Ascii: {// HANDLE: $(html) -> $(array)if ( match[1] ) {context = context instanceof jQuery ? context[0] : context;// scripts is true for back-compatjQuery.merge( this, jQuery.parseHTML(match[1],context && context.nodeT
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 65 63 74 6f 72 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 6a 51 75 65 72 79 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 20 69 73 20 6a 75 73 74 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 3a 20 24 28 63 6f 6e 74 65 78 74 29 2e 66 69 6e 64 28 65 78 70 72 29 0a 09 09 Data Ascii: ector;return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| rootjQuery ).find( selector );// HANDLE: $(expr, context)// (which is just equivalent to: $(context).find(expr)
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 Data Ascii: an array of elements and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 20 6a 51 75 65 72 79 20 6d 65 74 68 6f 64 2e 0a 09 70 75 73 68 3a 20 63 6f 72 65 5f 70 75 73 68 2c 0a 09 73 6f 72 74 3a 20 5b 5d 2e 73 6f 72 74 2c 0a 09 73 70 6c 69 63 65 3a 20 5b 5d 2e 73 70 6c 69 63 65 0a 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 73 72 63 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 Data Ascii: jQuery method.push: core_push,sort: [].sort,splice: [].splice};// Give the init function the jQuery prototype for later instantiationjQuery.fn.init.prototype = jQuery.fn;jQuery.extend = jQuery.fn.extend = function() {var src, copyIsArray, c
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 72 63 20 3a 20 5b 5d 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 20 26 26 20 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 72 63 29 20 3f 20 73 72 63 20 3a 20 7b 7d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f Data Ascii: rc : [];} else {clone = src && jQuery.isPlainObject(src) ? src : {};}// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't bring in undefined values} else if ( co
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 2c 20 64 65 63 72 65 6d 65 6e 74 2c 20 61 6e 64 20 77 61 69 74 20 69 66 20 6e 65 65 64 20 62 65 0a 09 09 69 66 20 28 20 77 61 69 74 20 21 3d 3d 20 74 72 75 65 20 26 26 20 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 20 3e 20 30 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 62 6f 75 6e 64 2c 20 74 6f 20 65 78 65 63 75 74 65 0a 09 09 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 64 6f 63 75 6d 65 6e 74 2c 20 5b 20 6a 51 75 65 72 79 20 5d 20 29 3b 0a 0a 09 09 2f 2f 20 54 72 69 67 67 65 72 20 61 6e 79 20 62 6f 75 6e 64 20 72 65 61 64 79 20 65 76 65 6e 74 73 0a 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 Data Ascii: , decrement, and wait if need beif ( wait !== true && --jQuery.readyWait > 0 ) {return;}// If there are functions bound, to executereadyList.resolveWith( document, [ jQuery ] );// Trigger any bound ready eventsif ( jQuery.fn.trigge
2024-10-28 19:14:22 UTC	1378	IN	Data Raw: 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 2f 2f 20 49 45 38 2c 39 Data Ascii: }try {// Not own constructor property must be Objectif ( obj.constructor &&!core_hasOwn.call(obj, "constructor") &&!core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) {return false;}} catch ( e ) {// IE8,9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	568	OUT	GET /common/css/import.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: text/css Content-Length: 286 Connection: close Last-Modified: Thu, 24 May 2018 11:38:41 GMT ETag: "11e-56cf217d0d240" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	286	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 69 6d 70 6f 72 74 2e 63 73 73 20 2a 2f 0a 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 72 65 73 65 74 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 64 65 66 61 75 6c 74 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 6c 61 79 6f 75 74 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 65 61 64 65 72 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 66 6f 6f 74 65 72 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 73 69 64 65 62 61 72 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 63 6c 61 73 73 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 70 61 72 74 73 2e Data Ascii: @charset "utf-8";/* Filenameimport.css */@import url("reset.css");@import url("default.css");@import url("layout.css");@import url("header.css");@import url("footer.css");@import url("sidebar.css");@import url("class.css");@import url("parts.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	559	OUT	GET /css/home.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: text/css Content-Length: 101854 Connection: close Last-Modified: Fri, 22 Mar 2024 02:21:35 GMT ETag: "18dde-614367b9de9c0" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	16149	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 68 6f 6d 65 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 2f 2a c2 a0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a e3 82 b9 e3 83 9e e3 83 9b ef bc 88 e7 b8 a6 ef bc 89 ef bc 86 e5 85 b1 e9 80 9a e8 a8 98 e8 bf b0 0d 0a 33 32 30 70 78 c2 a0 e2 86 92 c2 a0 34 37 39 70 78 ef bc 88 69 50 68 6f 6e 65 33 2c 34 2c 35 2c 36 2c 36 50 6c 75 73 2c 41 6e 64 72 6f 69 64 ef bc 89 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d c2 a0 2a 2f 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 Data Ascii: @charset "utf-8";/* Filenamehome.css //-----------------------------------------320px479pxiPhone3,4,5,6,6Plus,Android-----------------------------------------*/@media only screen and
2024-10-28 19:14:23 UTC	16384	IN	Data Raw: 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 23 74 63 2d 77 69 64 67 65 74 20 2e 74 63 2d 77 72 61 70 20 2e 74 63 2d 62 6f 64 79 20 2e 74 63 2d 77 72 61 70 2d 62 6f 6f 6b 20 2e 74 63 2d 62 6f 6f 6b 20 7b 0d 0a 09 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0d 0a 09 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 68 6f 6d 65 2d 72 65 73 65 72 76 65 20 2e 68 6f 6d 65 2d 72 65 73 65 72 76 65 2d 69 6e 6e 65 72 20 2e 62 6f 78 5f 74 61 62 20 23 70 61 6e 65 6c 20 3e 6c 69 20 23 74 63 2d 77 69 64 67 65 74 20 2e 74 63 2d 77 72 61 70 20 2e 74 63 2d 62 6f 64 79 20 2e 74 63 2d 74 69 6d 65 20 2e 74 63 2d 77 72 61 70 2d 69 6e 70 Data Ascii: media only screen and (min-width: 768px) {#tc-widget .tc-wrap .tc-body .tc-wrap-book .tc-book { padding: 0 15px; font-size: 15px;}.home-reserve .home-reserve-inner .box_tab #panel >li #tc-widget .tc-wrap .tc-body .tc-time .tc-wrap-inp
2024-10-28 19:14:23 UTC	16384	IN	Data Raw: 0d 0a 09 2e 73 70 2d 6e 6f 6e 65 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0d 0a 09 7d 0d 0a 09 2e 70 63 2d 6e 6f 6e 65 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 0d 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0d 0a 09 46 69 72 73 74 56 69 65 77 0d 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0d 0a 0d 0a 2e 68 6f 6d 65 2d 77 72 61 70 70 65 72 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 63 6f 6d 6d 6f 6e 2f 62 67 5f 64 65 63 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 35 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f Data Ascii: .sp-none{display:block;}.pc-none{display:none;}/* :::::::::::::::::::::FirstView::::::::::::::::::::: */.home-wrapper{margin-top:40px;background:url(../common/images/common/bg_deco.png) no-repeat center 50px;}/
2024-10-28 19:14:23 UTC	16384	IN	Data Raw: 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0d 0a 7d 0d 0a 2e 65 6c 65 6d 2d 63 6f 6e 76 65 72 73 69 6f 6e 2d 72 65 73 65 72 76 61 74 69 6f 6e 5f 69 74 65 6d 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 25 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 2e 65 6c 65 6d 2d 63 6f 6e 76 65 72 73 69 6f 6e 2d 72 65 73 65 72 76 61 74 69 6f 6e 5f 69 74 65 6d 20 61 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 34 66 33 33 32 31 3b 0d 0a 20 20 20 20 7d 0d 0a 2e 65 6c 65 6d 2d 63 6f 6e 76 65 72 73 69 6f 6e 2d 72 65 73 65 72 76 61 74 69 6f 6e 5f 69 74 65 6d 20 70 20 7b 0d 0a 20 20 Data Ascii: t-align: center; font-size: 17px;}.elem-conversion-reservation_item { float: left; width: 50%; margin-left: 0%; } .elem-conversion-reservation_item a { color:#4f3321; }.elem-conversion-reservation_item p {
2024-10-28 19:14:23 UTC	18	IN	Data Raw: 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 74 65 78 Data Ascii: align: center; tex
2024-10-28 19:14:23 UTC	16384	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 37 61 35 38 32 39 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 2c 20 30 70 78 20 31 30 70 78 20 33 30 70 78 20 2d 31 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 2c 20 30 70 78 20 31 30 70 78 20 33 30 70 78 20 2d 31 30 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 30 70 78 20 30 70 78 20 31 70 78 20 23 66 66 66 20 69 6e 73 65 74 2c Data Ascii: t-decoration: none; border: 1px solid #7a5829; -webkit-box-shadow: 0px 0px 0px 1px #fff inset, 0px 10px 30px -10px rgba(0, 0, 0, 0); -moz-box-shadow: 0px 0px 0px 1px #fff inset, 0px 10px 30px -10px rgba(0, 0, 0, 0); box-shadow: 0px 0px 0px 1px #fff inset,
2024-10-28 19:14:23 UTC	16384	IN	Data Raw: 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 3b 0d 0a 09 09 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0d 0a 09 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 2f 2a 20 74 61 62 e7 94 a8 2a 2f 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 34 70 78 29 20 7b 0d 0a 09 2e 63 6f 6e 5f 73 74 61 79 20 7b 0d 0a 09 7d 0d 0a 09 2e 63 6f Data Ascii: ;display:flex;-webkit-flex-direction:row-reverse;flex-direction:row-reverse;-webkit-align-items:center;align-items:center;}}/* tab*/@media only screen and (min-width: 768px) and (max-width: 1024px) {.con_stay {}.co
2024-10-28 19:14:23 UTC	3767	IN	Data Raw: 68 3a 20 34 30 70 78 3b 0d 0a 09 7d 0d 0a 20 20 7d 0d 0a 20 20 0d 0a 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 20 7b 0d 0a 09 23 6d 6f 64 61 6c 5f 65 6d 65 72 67 65 6e 63 79 20 2e 63 6c 6f 73 65 20 7b 0d 0a 09 20 20 77 69 64 74 68 3a 20 32 65 6d 3b 0d 0a 09 7d 0d 0a 20 20 7d 0d 0a 20 20 0d 0a 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 20 7b 0d 0a 09 23 6d 6f 64 61 6c 5f 65 6d 65 72 67 65 6e 63 79 20 2e 63 6c 6f 73 65 20 7b 0d 0a 09 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 09 7d 0d 0a 20 20 7d 0d 0a 20 20 0d 0a 20 20 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 Data Ascii: h: 40px;} } @media only screen and (max-width:767px) {#modal_emergency .close { width: 2em;} } @media only screen and (min-width:768px) {#modal_emergency .close { height: 40px;} } @media only screen and

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	576	OUT	GET /common/js/drawr/css/style.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: text/css Content-Length: 6816 Connection: close Last-Modified: Mon, 30 May 2022 08:18:51 GMT ETag: "1aa0-5e0364e5b10c0" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	6816	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 35 39 70 78 29 20 7b 0a 09 23 77 72 61 70 70 65 72 7b 0a 09 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 7d 0a 09 2f 2a 20 4d 65 6e 75 20 2a 2f 0a 09 2e 6e 61 76 44 72 61 77 72 20 7b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 31 65 62 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 09 77 69 64 74 68 3a 20 32 37 30 70 78 3b 0a 09 09 74 6f 70 3a 20 36 30 70 78 3b 0a 09 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 09 72 69 67 68 74 3a 20 2d 32 37 30 70 78 3b 0a 09 09 6f 76 65 72 66 6c 6f Data Ascii: @charset "utf-8";/* CSS Document /@media only screen and (max-width: 959px) {#wrapper{overflow:hidden;}/ Menu */.navDrawr {background-color:#f7f1eb;position: fixed;width: 270px;top: 60px;bottom: 0;right: -270px;overflo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	142.250.185.110	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	556	OUT	GET /optimize.js?id=OPT-KXRP8KT HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	1003	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Mon, 28 Oct 2024 19:14:23 GMT Expires: Mon, 28 Oct 2024 19:14:23 GMT Cache-Control: private, max-age=900 Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0"}],} Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:23 UTC	375	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 32 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 39 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 7b Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"2", "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":false},{
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 79 70 65 22 3a 33 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 32 38 34 30 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 78 73 22 2c 22 76 74 70 5f 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 22 3a 22 57 41 32 33 55 4b 47 38 52 76 47 6a 70 6a 33 46 39 70 49 47 45 77 22 2c 22 76 74 70 5f 73 65 63 74 69 6f 6e 73 22 3a 5b 22 6c 69 73 74 22 2c 32 5d 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 39 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 30 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 Data Ascii: ype":3,"function":"__c","vtp_value":"2840"},{"function":"__exs","vtp_measurementId":"WA23UKG8RvGjpj3F9pIGEw","vtp_sections":["list",2]},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 69 74 69 65 73 22 3a 7b 0a 22 5f 5f 63 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 65 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 0a 0a 7d 0a 2c 22 62 6c 6f 62 22 3a 7b 22 31 22 3a 22 32 22 7d 0a 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 7b 0a 22 5f 5f 63 22 3a 7b 7d 0a 2c 0a 22 5f 5f 65 22 3a 7b 22 72 65 61 64 5f 65 76 65 6e 74 5f 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 44 61 74 61 41 63 63 65 73 73 22 3a 22 73 70 65 63 69 66 69 63 22 2c 22 6b 65 79 50 61 74 74 65 72 6e 73 22 3a 5b 22 65 76 65 6e 74 22 5d 7d 7d 0a 0a 0a 7d 0a 0a 0a 0a 2c 22 73 65 63 75 72 69 74 79 5f 67 72 6f 75 70 73 22 3a 7b 0a 22 67 6f 6f 67 6c 65 22 3a 5b 0a 22 5f 5f 63 22 0a 2c 0a 22 5f 5f 65 22 0a 0a 5d 0a 0a 0a 7d 0a 0a Data Ascii: ities":{"__c":{"2":true,"4":true},"__e":{"2":true,"4":true}},"blob":{"1":"2"},"permissions":{"__c":{},"__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}},"security_groups":{"google":["__c","__e"]}
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 20 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6a 61 28 61 2c 61 29 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 Data Ascii: ka=function(a){return ja(a,a)},ja=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a},l=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")re
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 79 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 61 3b 74 68 69 73 2e 64 61 74 61 3d 62 7d 3b 76 61 72 20 41 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 Data Ascii: (){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var ya=this\|\|self;var za=function(a,b){this.type=a;this.data=b};var Aa=function(){t
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 6e 74 2e 73 65 74 28 61 2c 62 29 3a 74 68 69 73 2e 76 61 6c 75 65 73 2e 73 65 74 28 61 2c 62 29 29 7d 3b 0a 45 61 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 3f 74 68 69 73 2e 76 61 6c 75 65 73 2e 67 65 74 28 61 29 3a 74 68 69 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 67 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 3b 45 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 7c 7c 21 28 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 21 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 29 7d 3b 76 61 72 20 47 61 3d 66 75 6e 63 Data Ascii: nt.set(a,b):this.values.set(a,b))};Ea.prototype.get=function(a){return this.values.has(a)?this.values.get(a):this.parent?this.parent.get(a):void 0};Ea.prototype.has=function(a){return!!this.values.has(a)\|\|!(!this.parent\|\|!this.parent.has(a))};var Ga=func
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6e 61 7c 7c 74 68 69 73 2e 54 2e 73 65 74 28 61 2c 62 29 7d 3b 68 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 68 61 73 28 61 29 7d 3b 68 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 61 7c 7c 74 68 69 73 2e 54 2e 72 65 6d 6f 76 65 28 61 29 7d 3b 68 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 6b 61 28 29 7d 3b 68 2e 56 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 56 62 28 29 7d 3b 68 2e 43 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 43 62 28 29 7d 3b 68 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: nction(a,b){this.na\|\|this.T.set(a,b)};h.has=function(a){return this.T.has(a)};h.remove=function(a){this.na\|\|this.T.remove(a)};h.ka=function(){return this.T.ka()};h.Vb=function(){return this.T.Vb()};h.Cb=function(){return this.T.Cb()};h.Ga=function(){this.
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 65 5d 26 26 28 64 7c 3d 31 3c 3c 65 25 38 29 3b 64 3e 30 26 26 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 3b 72 65 74 75 72 6e 20 51 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2b 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 62 3d 54 61 2e 66 64 72 7c 7c 5b 5d 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 5d 26 26 61 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3e 30 3f 61 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 58 61 3d 5b 5d 2c 59 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 29 7b 72 65 74 75 72 6e 20 58 61 5b 61 5d 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 58 61 5b Data Ascii: e]&&(d\|=1<<e%8);d>0&&c.push(String.fromCharCode(d));return Qa(c.join("")).replace(/\.+$/,"")}function Wa(){for(var a=[],b=Ta.fdr\|\|[],c=0;c<b.length;c++)b[c]&&a.push(c);return a.length>0?a:void 0};var Xa=[],Ya={};function Za(a){return Xa[a]===void 0?!1:Xa[
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 6d 2e 22 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 7b 7d 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 3d 62 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 61 29 21 3d 3d 76 6f 69 64 20 30 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 62 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: m.";this.values={}};gb.prototype.set=function(a,b){this.values[this.prefix+a]=b};gb.prototype.get=function(a){return this.values[this.prefix+a]};gb.prototype.contains=function(a){return this.get(a)!==void 0};function qb(a,b,c){return a&&a.hasOwnProperty(
2024-10-28 19:14:23 UTC	1378	IN	Data Raw: 20 6e 3b 69 66 28 63 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 70 2b 22 3d 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 74 28 22 26 22 29 2e 6d 61 70 28 64 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 76 61 72 20 66 3d 62 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5b 3f 23 5d 2f 29 5b 30 5d 2c 67 3d 62 2e 73 65 61 72 63 68 2c 6b 3d 62 2e 68 61 73 68 3b 67 5b 30 5d 3d 3d 3d 22 3f 22 26 26 28 67 3d 67 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 6b 5b 30 5d 3d 3d 3d 22 23 22 26 26 28 6b 3d 6b 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 67 3d 65 28 67 29 3b 6b 3d 65 28 6b 29 3b 67 21 3d 3d 22 22 26 Data Ascii: n;if(c!==void 0)return p+"="+c}function e(n){return n.split("&").map(d).filter(function(p){return p!==void 0}).join("&")}var f=b.href.split(/[?#]/)[0],g=b.search,k=b.hash;g[0]==="?"&&(g=g.substring(1));k[0]==="#"&&(k=k.substring(1));g=e(g);k=e(k);g!==""&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	587	OUT	GET /common/js/drawr/css/font-awesome.min.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: text/css Content-Length: 26701 Connection: close Last-Modified: Tue, 08 May 2018 01:47:10 GMT ETag: "684d-56ba7f6ed2380" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	16151	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 34 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 34 2e 30 27 29 3b 73 72 63 3a 75 72 6c 28 27 2e 2e Data Ascii: /! Font Awesome 4.4.0 by @davegandy - //fontawesome.io - @fontawesome * License - //fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.4.0');src:url('..
2024-10-28 19:14:23 UTC	10550	IN	Data Raw: 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 74 61 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 64 22 7d 2e 66 61 2d 66 6c 69 63 6b 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 65 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-instagram:before{content:"\f16d"}.fa-flickr:before{content:"\f16e"}.fa-adn:before{content

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49742	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	567	OUT	GET /Data/searchPanel.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: text/css Content-Length: 2589 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:36 GMT ETag: "a1d-55a4fc1545900" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	2589	IN	Data Raw: 2f 2a e5 90 84 e9 a0 85 e7 9b ae e3 81 ae e9 a1 8c e7 9b ae 2a 2f 0a 2e 73 74 79 6c 65 5f 73 75 62 68 65 61 64 20 7b 0a 09 6d 61 72 67 69 6e 09 09 20 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 09 09 20 3a 20 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 09 20 3a 20 31 34 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 09 20 3a 20 62 6f 6c 64 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 46 30 3b 0a 7d 0a 2f 2a e5 90 84 e9 a0 85 e7 9b ae e6 9c ac e4 bd 93 e9 83 a8 e5 88 86 2a 2f 0a 2e 73 74 79 6c 65 5f 62 6c 6f 63 6b 5f 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 09 09 20 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 09 09 20 3a 20 30 20 35 70 78 3b 0a 09 66 6c 6f 61 74 09 09 20 3a 20 6c 65 66 74 3b 0a 09 64 69 73 70 6c 61 79 09 09 20 3a 20 62 6c 6f 63 6b 3b 0a 09 62 61 63 Data Ascii: //.style_subhead {margin : 0;padding : 0;font-size : 14px;font-weight : bold;background:#0F0;}//.style_block_area {margin : 0;padding : 0 5px;float : left;display : block;bac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-28 19:14:23 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150131 Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-28 19:14:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:23 UTC	560	OUT	GET /common/js/jquery.common2.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:23 UTC	246	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:23 GMT Content-Type: application/javascript Content-Length: 4715 Connection: close Last-Modified: Tue, 14 Mar 2023 01:31:37 GMT ETag: "126b-5f6d2304845ed" Accept-Ranges: bytes
2024-10-28 19:14:23 UTC	4715	IN	Data Raw: 24 28 77 69 6e 64 6f 77 29 2e 62 69 6e 64 28 22 73 63 72 6f 6c 6c 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 29 3b 0a 20 20 20 20 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 20 2b 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0a 20 20 20 20 69 66 20 28 20 28 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 2d 20 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 29 20 2f 20 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 3c 3d 20 30 2e 30 33 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 27 23 68 65 61 64 65 72 27 29 2e 66 61 64 65 4f 75 74 28 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e Data Ascii: $(window).bind("scroll", function() { scrollHeight = $(document).height(); scrollPosition = $(window).height() + $(window).scrollTop(); if ( (scrollHeight - scrollPosition) / scrollHeight <= 0.03) { $('#header').fadeOut(); $('.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	151.101.129.229	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:23 UTC	383	OUT	GET /npm/slick-carousel@1.8.0/slick/slick.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:24 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42863 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.8.0 X-JSD-Version-Type: version ETag: W/"a76f-O0GzvJVmhQFaNHoiOOcdsp36Dbs" Accept-Ranges: bytes Date: Mon, 28 Oct 2024 19:14:24 GMT Age: 464201 X-Served-By: cache-fra-etou8220140-FRA, cache-dfw-ktki8620052-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 69 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 69 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 69 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 53 6c 69 63 6b 7c 7c 7b 7d 3b 28 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 76 61 72 20 Data Ascii: !function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 78 3a 30 2c 24 6e 65 78 74 41 72 72 6f 77 3a 6e 75 6c 6c 2c 24 70 72 65 76 41 72 72 6f 77 3a 6e 75 6c 6c 2c 73 63 72 6f 6c 6c 69 6e 67 3a 21 31 2c 73 6c 69 64 65 43 6f 75 6e 74 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 54 72 61 63 6b 3a 6e 75 6c 6c 2c 24 73 6c 69 64 65 73 3a 6e 75 6c 6c 2c 73 6c 69 64 69 6e 67 3a 21 31 2c 73 6c 69 64 65 4f 66 66 73 65 74 3a 30 2c 73 77 69 70 65 4c 65 66 74 3a 6e 75 6c 6c 2c 73 77 69 70 69 6e 67 3a 21 31 2c 24 6c 69 73 74 3a 6e 75 6c 6c 2c 74 6f 75 63 68 4f 62 6a 65 63 74 3a 7b 7d 2c 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3a 21 31 2c 75 6e 73 6c 69 63 6b 65 64 3a 21 31 7d 2c 69 2e 65 78 74 65 6e 64 28 6e 2c 6e 2e 69 6e 69 74 69 61 6c 73 29 2c 6e 2e 61 63 74 69 76 65 42 Data Ascii: x:0,$nextArrow:null,$prevArrow:null,scrolling:!1,slideCount:null,slideWidth:null,$slideTrack:null,$slides:null,sliding:!1,slideOffset:0,swipeLeft:null,swiping:!1,$list:null,touchObject:{},transformsEnabled:!1,unslicked:!1},i.extend(n,n.initials),n.activeB
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 63 65 55 69 64 3d 65 2b 2b 2c 6e 2e 68 74 6d 6c 45 78 70 72 3d 2f 5e 28 3f 3a 5c 73 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 29 24 2f 2c 6e 2e 72 65 67 69 73 74 65 72 42 72 65 61 6b 70 6f 69 6e 74 73 28 29 2c 6e 2e 69 6e 69 74 28 21 30 29 7d 7d 28 29 29 2e 70 72 6f 74 6f 74 79 70 65 2e 61 63 74 69 76 61 74 65 41 44 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 66 69 6e 64 28 22 2e 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 2e 61 74 74 72 28 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 66 61 6c 73 65 22 7d 29 2e 66 69 6e 64 28 22 61 2c 20 69 6e 70 75 74 2c 20 62 75 74 74 6f 6e 2c 20 73 65 6c 65 63 74 22 29 2e 61 74 74 72 28 7b 74 61 62 69 6e 64 65 78 3a 22 30 22 7d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 Data Ascii: ceUid=e++,n.htmlExpr=/^(?:\s(<[\w\W]+>)[^>])$/,n.registerBreakpoints(),n.init(!0)}}()).prototype.activateADA=function(){this.$slideTrack.find(".slick-active").attr({"aria-hidden":"false"}).find("a, input, button, select").attr({tabindex:"0"})},e.prototy
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 61 73 69 6e 67 2c 74 29 3a 21 31 3d 3d 3d 73 2e 63 73 73 54 72 61 6e 73 69 74 69 6f 6e 73 3f 28 21 30 3d 3d 3d 73 2e 6f 70 74 69 6f 6e 73 2e 72 74 6c 26 26 28 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 3d 2d 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 29 2c 69 28 7b 61 6e 69 6d 53 74 61 72 74 3a 73 2e 63 75 72 72 65 6e 74 4c 65 66 74 7d 29 2e 61 6e 69 6d 61 74 65 28 7b 61 6e 69 6d 53 74 61 72 74 3a 65 7d 2c 7b 64 75 72 61 74 69 6f 6e 3a 73 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 65 61 73 69 6e 67 3a 73 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 73 74 65 70 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 3d 4d 61 74 68 2e 63 65 69 6c 28 69 29 2c 21 31 3d 3d 3d 73 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 3f 28 6f 5b 73 2e 61 6e 69 6d 54 79 70 65 5d 3d Data Ascii: asing,t):!1===s.cssTransitions?(!0===s.options.rtl&&(s.currentLeft=-s.currentLeft),i({animStart:s.currentLeft}).animate({animStart:e},{duration:s.options.speed,easing:s.options.easing,step:function(i){i=Math.ceil(i),!1===s.options.vertical?(o[s.animType]=
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 6f 72 2c 69 2e 6f 70 74 69 6f 6e 73 2e 61 75 74 6f 70 6c 61 79 53 70 65 65 64 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 69 2e 61 75 74 6f 50 6c 61 79 54 69 6d 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 6f 50 6c 61 79 49 74 65 72 61 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 74 68 69 73 2c 65 3d 69 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2b 69 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3b 69 2e 70 61 75 73 65 64 7c 7c 69 2e 69 6e 74 65 72 72 75 70 74 65 64 7c 7c 69 2e 66 6f 63 75 73 73 65 64 Data Ascii: or,i.options.autoplaySpeed))},e.prototype.autoPlayClear=function(){var i=this;i.autoPlayTimer&&clearInterval(i.autoPlayTimer)},e.prototype.autoPlayIterator=function(){var i=this,e=i.currentSlide+i.options.slidesToScroll;i.paused\|\|i.interrupted\|\|i.focussed
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 67 65 74 44 6f 74 43 6f 75 6e 74 28 29 3b 65 2b 3d 31 29 74 2e 61 70 70 65 6e 64 28 69 28 22 3c 6c 69 20 2f 3e 22 29 2e 61 70 70 65 6e 64 28 6f 2e 6f 70 74 69 6f 6e 73 2e 63 75 73 74 6f 6d 50 61 67 69 6e 67 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 2c 65 29 29 29 3b 6f 2e 24 64 6f 74 73 3d 74 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 6f 70 74 69 6f 6e 73 2e 61 70 70 65 6e 64 44 6f 74 73 29 2c 6f 2e 24 64 6f 74 73 2e 66 69 6e 64 28 22 6c 69 22 29 2e 66 69 72 73 74 28 29 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 61 63 74 69 76 65 22 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 65 2e 24 73 6c 69 64 65 73 3d 65 2e 24 73 6c 69 64 65 72 2e 63 68 69 6c 64 72 65 6e 28 65 Data Ascii: getDotCount();e+=1)t.append(i("<li />").append(o.options.customPaging.call(this,o,e)));o.$dots=t.appendTo(o.options.appendDots),o.$dots.find("li").first().addClass("slick-active")}},e.prototype.buildOut=function(){var e=this;e.$slides=e.$slider.children(e
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 66 6f 72 28 74 3d 30 3b 74 3c 6c 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 3b 74 2b 2b 29 7b 76 61 72 20 63 3d 69 2a 72 2b 28 65 2a 6c 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 50 65 72 52 6f 77 2b 74 29 3b 6e 2e 67 65 74 28 63 29 26 26 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 67 65 74 28 63 29 29 7d 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 7d 6c 2e 24 73 6c 69 64 65 72 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 6f 29 2c 6c 2e 24 73 6c 69 64 65 72 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 63 73 73 28 7b 77 69 64 74 68 3a 31 30 30 2f 6c 2e 6f 70 74 69 6f 6e 73 2e 73 Data Ascii: ement("div");for(t=0;t<l.options.slidesPerRow;t++){var c=ir+(el.options.slidesPerRow+t);n.get(c)&&a.appendChild(n.get(c))}d.appendChild(a)}o.appendChild(d)}l.$slider.empty().append(o),l.$slider.children().children().children().css({width:100/l.options.s
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 69 64 65 29 2c 72 2e 72 65 66 72 65 73 68 28 65 29 2c 6c 3d 73 29 2c 65 7c 7c 21 31 3d 3d 3d 6c 7c 7c 72 2e 24 73 6c 69 64 65 72 2e 74 72 69 67 67 65 72 28 22 62 72 65 61 6b 70 6f 69 6e 74 22 2c 5b 72 2c 6c 5d 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6f 2c 73 2c 6e 2c 72 3d 74 68 69 73 2c 6c 3d 69 28 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 3b 73 77 69 74 63 68 28 6c 2e 69 73 28 22 61 22 29 26 26 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 2e 69 73 28 22 6c 69 22 29 7c 7c 28 6c 3d 6c 2e 63 6c 6f 73 65 73 74 28 22 6c 69 22 29 29 2c 6e 3d 72 2e 73 6c 69 64 65 43 6f 75 6e 74 25 72 2e 6f 70 74 69 6f 6e 73 2e 73 6c 69 64 65 73 54 6f 53 63 72 Data Ascii: ide),r.refresh(e),l=s),e\|\|!1===l\|\|r.$slider.trigger("breakpoint",[r,l])}},e.prototype.changeSlide=function(e,t){var o,s,n,r=this,l=i(e.currentTarget);switch(l.is("a")&&e.preventDefault(),l.is("li")\|\|(l=l.closest("li")),n=r.slideCount%r.options.slidesToScr
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 65 2e 24 70 72 65 76 41 72 72 6f 77 26 26 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 65 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 63 6c 69 63 6b 2e 73 6c 69 63 6b 22 2c 65 2e 63 68 61 6e 67 65 53 6c 69 64 65 29 2c 21 30 3d 3d 3d 65 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 69 62 69 6c 69 74 79 26 26 28 65 2e 24 70 72 65 76 41 72 72 6f 77 26 26 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 73 6c 69 63 6b 22 2c 65 2e 6b 65 79 48 61 6e 64 6c 65 72 29 2c 65 2e 24 6e 65 78 74 41 72 72 6f 77 26 26 65 2e 24 6e 65 78 74 41 72 72 6f 77 2e 6f 66 66 28 22 6b 65 79 64 6f 77 6e 2e 73 6c 69 Data Ascii: e.$prevArrow&&e.$prevArrow.off("click.slick",e.changeSlide),e.$nextArrow&&e.$nextArrow.off("click.slick",e.changeSlide),!0===e.options.accessibility&&(e.$prevArrow&&e.$prevArrow.off("keydown.slick",e.keyHandler),e.$nextArrow&&e.$nextArrow.off("keydown.sli
2024-10-28 19:14:24 UTC	1378	IN	Data Raw: 69 64 65 72 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 69 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 21 31 3d 3d 3d 74 68 69 73 2e 73 68 6f 75 6c 64 43 6c 69 63 6b 26 26 28 69 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 69 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 2e 61 75 74 6f 50 6c 61 79 43 6c 65 61 72 28 29 2c 74 2e 74 6f 75 63 68 4f 62 6a 65 63 74 3d 7b 7d 2c 74 2e 63 6c 65 61 6e 55 70 45 76 65 6e 74 73 28 29 2c 69 28 22 Data Ascii: ider.empty().append(i))},e.prototype.clickHandler=function(i){!1===this.shouldClick&&(i.stopImmediatePropagation(),i.stopPropagation(),i.preventDefault())},e.prototype.destroy=function(e){var t=this;t.autoPlayClear(),t.touchObject={},t.cleanUpEvents(),i("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	552	OUT	GET /common/js/slider.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:24 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:24 GMT Content-Type: application/javascript Content-Length: 2064 Connection: close Last-Modified: Tue, 14 Mar 2023 02:16:10 GMT ETag: "810-5f6d2cfa7c139" Accept-Ranges: bytes
2024-10-28 19:14:24 UTC	2064	IN	Data Raw: 0d 0a 0d 0a 2f 2f 73 6c 69 64 65 72 20 61 63 63 6f 72 64 69 6f 6e 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 0d 0a 20 20 20 20 24 28 27 23 6a 73 5f 73 6c 69 64 65 72 5f 6d 76 27 29 2e 73 6c 69 63 6b 28 7b 0d 0a 20 20 20 20 20 20 20 20 66 61 64 65 20 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 72 72 6f 77 73 20 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f 70 6c 61 79 53 70 65 65 64 20 3a 20 33 35 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 73 70 65 65 64 20 3a 20 32 30 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 64 6f 74 73 20 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f Data Ascii: //slider accordiondocument.addEventListener("DOMContentLoaded", function (e) { $('#js_slider_mv').slick({ fade : true, arrows : false, autoplaySpeed : 3500, speed : 2000, dots : true, auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49757	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	571	OUT	GET /common/js/bgslide/jquery.bgswitcher.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:24 UTC	247	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:24 GMT Content-Type: application/javascript Content-Length: 11714 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "2dc2-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:24 UTC	11714	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 2e 42 67 53 77 69 74 63 68 65 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 20 30 2e 34 2e 33 0a 20 2a 20 40 61 75 74 68 6f 72 20 20 20 72 65 77 69 73 68 20 3c 72 65 77 69 73 68 2e 6f 72 67 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 77 69 73 68 2f 6a 71 75 65 72 79 2d 62 67 73 77 69 74 63 68 65 72 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 29 0a 20 2a 20 40 6c 69 6e 6b 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 77 69 73 68 2f 6a 71 75 65 72 79 2d 62 67 73 77 69 74 63 68 65 72 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: /! jQuery.BgSwitcher * * @version 0.4.3 * @author rewish <rewish.org@gmail.com> * @license MIT License (https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md) * @link https://github.com/rewish/jquery-bgswitcher */(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	557	OUT	GET /common/js/drawr/drawr.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:24 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:24 GMT Content-Type: application/javascript Content-Length: 3696 Connection: close Last-Modified: Mon, 30 May 2022 08:18:58 GMT ETag: "e70-5e0364ec5e080" Accept-Ranges: bytes
2024-10-28 19:14:24 UTC	3696	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 76 61 72 20 24 6e 61 76 09 3d 20 24 28 27 2e 6e 61 76 44 72 61 77 72 27 29 3b 0a 09 76 61 72 20 24 6e 61 76 42 74 6e 09 3d 20 24 28 27 2e 6e 61 76 44 72 61 77 72 42 74 6e 2c 20 2e 66 5f 6e 61 76 44 72 61 77 72 42 74 6e 27 29 3b 0a 09 76 61 72 20 24 73 70 65 65 64 09 3d 20 33 30 30 3b 0a 09 76 61 72 20 24 6e 61 76 57 09 3d 20 32 37 30 3b 0a 0a 09 2f 2f e3 82 b5 e3 83 96 e3 83 a1 e3 83 8b e3 83 a5 e3 83 bc e3 82 92 e9 9d 9e e8 a1 a8 e7 a4 ba e3 81 ab 0a 09 24 6e 61 76 2e 66 69 6e 64 28 27 2e 73 75 62 27 29 2e 68 69 64 65 28 29 3b 0a 0a 09 2f 2f 68 6f 76 65 72 e6 99 82 e3 81 ae e6 8c 99 e5 8b 95 0a 09 09 24 6e 61 76 2e 66 69 6e 64 28 27 Data Ascii: // JavaScript Document$(function () {var $nav= $('.navDrawr');var $navBtn= $('.navDrawrBtn, .f_navDrawrBtn');var $speed= 300;var $navW= 270;//$nav.find('.sub').hide();//hover$nav.find('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	588	OUT	GET /common/css/reset.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:24 GMT Content-Type: text/css Content-Length: 970 Connection: close Last-Modified: Thu, 07 Feb 2019 02:10:24 GMT ETag: "3ca-5814458600400" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	970	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 72 65 73 65 74 2e 63 73 73 20 2a 2f 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 64 69 76 2c 20 73 70 61 6e 2c 20 61 70 70 6c 65 74 2c 20 6f 62 6a 65 63 74 2c 20 69 66 72 61 6d 65 2c 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 20 70 72 65 2c 0a 61 2c 20 61 62 62 72 2c 20 61 63 72 6f 6e 79 6d 2c 20 61 64 64 72 65 73 73 2c 20 62 69 67 2c 20 63 69 74 65 2c 20 63 6f 64 65 2c 0a 64 65 6c 2c 20 64 66 6e 2c 20 65 6d 2c 20 69 6d 67 2c 20 69 6e 73 2c 20 6b 62 64 2c 20 71 2c 20 73 2c 20 73 61 6d 70 2c 0a 73 6d 61 6c 6c 2c 20 73 74 72 69 6b 65 2c 20 73 74 72 6f 6e 67 2c 20 73 75 62 2c 20 73 75 70 2c 20 Data Ascii: @charset "utf-8";/* Filenamereset.css */html, body, div, span, applet, object, iframe,h1, h2, h3, h4, h5, h6, p, blockquote, pre,a, abbr, acronym, address, big, cite, code,del, dfn, em, img, ins, kbd, q, s, samp,small, strike, strong, sub, sup,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	590	OUT	GET /common/css/default.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:24 GMT Content-Type: text/css Content-Length: 1825 Connection: close Last-Modified: Tue, 16 Jun 2020 00:11:19 GMT ETag: "721-5a82861f297c0" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	1825	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 64 65 66 61 75 6c 74 2e 63 73 73 20 2a 2f 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 42 4f 44 59 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 62 6f 64 79 7b 0a 09 63 6f 6c 6f 72 3a 23 34 66 33 33 32 31 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 20 22 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 22 2c 20 22 e6 b8 b8 e6 98 8e e6 9c 9d 22 2c 20 59 75 4d 69 6e 63 68 6f 2c 20 22 e3 83 92 e3 83 a9 e3 82 Data Ascii: @charset "utf-8";/* Filenamedefault.css // :::::::::::::::::::::::::::::::::::BODY::::::::::::::::::::::::::::::::::: */body{color:#4f3321;font-size:14px;line-height:1.6;font-family: "Times New Roman", "", YuMincho, "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	151.101.2.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:24 UTC	354	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	566	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 28 Oct 2024 19:14:24 GMT Age: 465986 X-Served-By: cache-lga21952-LGA, cache-dfw-kdal2120094-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 1 X-Timer: S1730142865.963048,VS0,VE2 Vary: Accept-Encoding
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 20 73 70 65 63 69 61 6c 2c 20 66 61 73 74 2c 20 63 61 73 65 20 66 6f 72 20 74 68 65 20 6d 6f 73 74 Data Ascii: i ], args );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.apply( obj[ i ], args );if ( value === false ) {break;}}}// A special, fast, case for the most
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 63 6f 6e 74 65 78 74 73 2c 20 76 61 6c 75 65 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 2c 20 70 72 6f 67 72 65 73 73 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 3b 0a 0a 09 09 2f 2f 20 61 64 64 20 6c 69 73 74 65 6e 65 72 73 20 74 6f 20 44 65 66 65 72 72 65 64 20 73 75 62 6f 72 64 69 6e 61 74 65 73 3b 20 74 72 65 61 74 20 6f 74 68 65 72 73 20 61 73 20 72 65 73 6f 6c 76 65 64 0a 09 09 69 66 20 28 20 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 20 6c 65 6e 67 74 68 20 29 3b 0a 09 09 Data Ascii: deferred.resolveWith( contexts, values );}};},progressValues, progressContexts, resolveContexts;// add listeners to Deferred subordinates; treat others as resolvedif ( length > 1 ) {progressValues = new Array( length );
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 65 6c 65 6d 20 3d 20 74 68 69 73 5b 30 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2f 20 47 65 74 73 20 61 6c 6c 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 6b 65 79 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 64 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 64 61 74 61 28 20 65 6c 65 6d 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 21 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 65 6c 65 6d 2c 20 22 70 61 72 73 65 64 41 74 74 72 73 22 20 29 20 29 20 7b 0a 09 09 09 09 09 61 74 74 72 73 20 3d 20 65 6c 65 6d 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 09 09 Data Ascii: elem = this[0],i = 0,data = null;// Gets all valuesif ( key === undefined ) {if ( this.length ) {data = jQuery.data( elem );if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) {attrs = elem.attributes;
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 0a 09 09 75 73 65 6d 61 70 3a 20 22 75 73 65 4d 61 70 22 2c 0a 09 09 66 72 61 6d 65 62 6f 72 64 65 72 3a 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 0a 09 09 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3a 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 0a 09 7d 2c 0a 0a 09 70 72 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 2c 20 68 6f 6f 6b 73 2c 20 6e 6f 74 78 6d 6c 2c 0a 09 09 09 6e 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 67 65 74 2f 73 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 6e 20 74 65 78 74 2c 20 63 6f 6d 6d 65 6e 74 20 61 6e 64 20 61 74 74 72 69 62 75 74 65 20 6e 6f 64 65 73 0a 09 09 69 Data Ascii: usemap: "useMap",frameborder: "frameBorder",contenteditable: "contentEditable"},prop: function( elem, name, value ) {var ret, hooks, notxml,nType = elem.nodeType;// don't get/set properties on text, comment and attribute nodesi
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 3e 20 31 20 3f 0a 09 09 09 09 62 75 62 62 6c 65 54 79 70 65 20 3a 0a 09 09 09 09 73 70 65 63 69 61 6c 2e 62 69 6e 64 54 79 70 65 20 7c 7c 20 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 6a 51 75 65 72 79 20 68 61 6e 64 6c 65 72 0a 09 09 09 68 61 6e 64 6c 65 20 3d 20 28 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 65 76 65 6e 74 73 22 20 29 20 7c 7c 20 7b 7d 20 29 5b 20 65 76 65 6e 74 2e 74 79 70 65 20 5d 20 26 26 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 68 61 6e 64 6c 65 22 20 29 3b 0a 09 09 09 69 66 20 28 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 09 09 68 61 6e 64 6c 65 2e 61 70 70 6c 79 28 20 63 75 72 2c 20 64 61 74 61 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 4e 61 74 69 76 65 20 68 61 6e 64 6c 65 72 0a 09 09 09 Data Ascii: > 1 ?bubbleType :special.bindType \|\| type;// jQuery handlerhandle = ( jQuery._data( cur, "events" ) \|\| {} )[ event.type ] && jQuery._data( cur, "handle" );if ( handle ) {handle.apply( cur, data );}// Native handler
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 72 61 64 69 6f 22 20 26 26 20 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 74 65 61 72 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 20 74 68 69 73 2c 20 22 2e 5f 63 68 61 6e 67 65 22 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 21 72 66 6f 72 6d 45 6c 65 6d 73 2e 74 65 73 74 28 20 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 7d 0a 0a 2f Data Ascii: (elem.type !== "radio" && elem.type !== "checkbox") ) {return event.handleObj.handler.apply( this, arguments );}},teardown: function() {jQuery.event.remove( this, "._change" );return !rformElems.test( this.nodeName );}};}/
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 76 61 72 20 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 69 64 20 29 3b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 70 61 72 65 6e 74 4e 6f 64 65 20 74 6f 20 63 61 74 63 68 20 77 68 65 6e 20 42 6c 61 63 6b 62 65 72 72 79 20 34 2e 36 20 72 65 74 75 72 6e 73 0a 09 09 09 09 2f 2f 20 6e 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 20 23 36 39 36 33 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 5b 6d 5d 20 3a 20 5b 5d 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 22 49 44 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 Data Ascii: var m = context.getElementById( id );// Check parentNode to catch when Blackberry 4.6 returns// nodes that are no longer in the document #6963return m && m.parentNode ? [m] : [];}};Expr.filter["ID"] = function( id ) {var attrI
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 6e 6f 64 65 5b 20 64 69 72 20 5d 29 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 6f 66 54 79 70 65 20 3f 20 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 20 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 2f 2f 20 52 65 76 65 72 73 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 3a 6f 6e 6c 79 2d 2a 20 28 69 66 20 77 65 20 68 61 76 65 6e 27 74 20 79 65 74 20 64 6f 6e 65 20 73 6f 29 0a 09 09 09 09 09 09 09 09 73 74 61 72 74 20 3d 20 64 69 72 20 3d 20 Data Ascii: while ( (node = node[ dir ]) ) {if ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) {return false;}}// Reverse direction for :only-* (if we haven't yet done so)start = dir =
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 20 29 20 3e 20 2d 31 3b 0a 09 09 7d 2c 20 69 6d 70 6c 69 63 69 74 52 65 6c 61 74 69 76 65 2c 20 74 72 75 65 20 29 2c 0a 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 28 20 21 6c 65 61 64 69 6e 67 52 65 6c 61 74 69 76 65 20 26 26 20 28 20 78 6d 6c 20 7c 7c 20 63 6f 6e 74 65 78 74 20 21 3d 3d 20 6f 75 74 65 72 6d 6f 73 74 43 6f 6e 74 65 78 74 20 29 20 29 20 7c 7c 20 28 0a 09 09 09 09 28 63 68 65 63 6b 43 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 29 2e 6e 6f 64 65 54 79 70 65 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 43 6f 6e 74 65 78 74 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 3a 0a 09 Data Ascii: elem ) > -1;}, implicitRelative, true ),matchers = [ function( elem, context, xml ) {return ( !leadingRelative && ( xml \|\| context !== outermostContext ) ) \|\| ((checkContext = context).nodeType ?matchContext( elem, context, xml ) :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49762	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:25 UTC	589	OUT	GET /common/css/layout.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:25 GMT Content-Type: text/css Content-Length: 1441 Connection: close Last-Modified: Wed, 23 Oct 2019 12:54:48 GMT ETag: "5a1-595936bfc9600" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	1441	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 6c 61 79 6f 75 74 2e 63 73 73 20 2a 2f 0a 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 57 52 41 50 50 45 52 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 0a 2e 63 6e 74 2d 77 72 61 70 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 7d 0a 0a 2e 63 6e 74 2d 77 72 61 70 2d 69 6e 6e 65 72 7b 0a 7d 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 53 45 43 54 49 4f 4e 0a 3a Data Ascii: @charset "utf-8";/* Filenamelayout.css // :::::::::::::::::::::::::::::::::::WRAPPER::::::::::::::::::::::::::::::::::: /.cnt-wrap{background:#FFF;padding: 0 15px;}.cnt-wrap-inner{}/ :::::::::::::::::::::::::::::::::::SECTION:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:25 UTC	589	OUT	GET /common/css/header.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:25 GMT Content-Type: text/css Content-Length: 44230 Connection: close Last-Modified: Wed, 01 Nov 2023 00:37:55 GMT ETag: "acc6-6090c7b7102f6" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	16151	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 68 65 61 64 65 72 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a e3 82 b9 e3 83 9e e3 83 9b ef bc 88 e7 b8 a6 ef bc 89 ef bc 86 e5 85 b1 e9 80 9a e8 a8 98 e8 bf b0 0d 0a 33 32 30 70 78 20 e2 86 92 20 34 37 39 70 78 ef bc 88 69 50 68 6f 6e 65 33 2c 34 2c 35 2c 36 2c 36 50 6c 75 73 2c 41 6e 64 72 6f 69 64 ef bc 89 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 Data Ascii: @charset "utf-8";/* Filenameheader.css // -----------------------------------------320px 479pxiPhone3,4,5,6,6Plus,Android----------------------------------------- */@media only screen and (
2024-10-28 19:14:25 UTC	16384	IN	Data Raw: 79 3a 20 22 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 22 2c 20 22 e6 b8 b8 e6 98 8e e6 9c 9d 22 2c 20 59 75 4d 69 6e 63 68 6f 2c 20 22 e3 83 92 e3 83 a9 e3 82 ae e3 83 8e e6 98 8e e6 9c 9d 20 50 72 6f 4e 20 57 33 22 2c 20 22 48 69 72 61 67 69 6e 6f 20 4d 69 6e 63 68 6f 20 50 72 6f 4e 22 2c 20 22 e3 83 a1 e3 82 a4 e3 83 aa e3 82 aa 22 2c 20 4d 65 69 72 79 6f 2c 20 73 65 72 69 66 3b 0d 0a 09 7d 0d 0a 09 23 68 6f 6d 65 70 61 67 65 20 23 62 6f 78 5f 63 6f 6e 73 74 72 75 63 74 69 6f 6e 20 7b 0d 0a 09 09 74 6f 70 3a 20 31 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7d 0d 0a 09 23 62 6f 78 5f 63 6f 6e 73 74 72 75 63 74 69 6f 6e 20 2e 74 78 74 20 7b 0d 0a 09 09 62 6f 72 64 65 72 Data Ascii: y: "Times New Roman", "", YuMincho, " ProN W3", "Hiragino Mincho ProN", "", Meiryo, serif;}#homepage #box_construction {top: 116px !important;position: absolute;}#box_construction .txt {border
2024-10-28 19:14:25 UTC	11695	IN	Data Raw: 62 73 6f 6c 75 74 65 3b 0d 0a 09 09 7a 2d 69 6e 64 65 78 3a 39 39 39 3b 0d 0a 09 09 74 6f 70 3a 34 65 6d 3b 0d 0a 09 7d 0d 0a 09 23 67 6e 61 76 5f 66 69 78 65 64 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 7d 0d 0a 09 23 67 6e 61 76 5f 66 69 78 65 64 20 2e 68 65 61 64 2d 69 6e 6e 65 72 7b 0d 0a 09 09 77 69 64 74 68 3a 39 35 25 3b 0d 0a 09 09 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 3b 0d 0a 09 09 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 0d 0a 09 09 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b Data Ascii: bsolute;z-index:999;top:4em;}#gnav_fixed{height:auto;}#gnav_fixed .head-inner{width:95%;max-width:1200px;margin:auto;padding:0 !important;display:-webkit-flex;display:flex;-webkit-justify-content:space-between;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	142.250.186.78	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:25 UTC	372	OUT	GET /optimize.js?id=OPT-KXRP8KT HTTP/1.1 Host: www.googleoptimize.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	1003	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control Vary: Accept-Encoding Date: Mon, 28 Oct 2024 19:14:25 GMT Expires: Mon, 28 Oct 2024 19:14:25 GMT Cache-Control: private, max-age=900 Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1169:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1169:0"}],} Server: Google Tag Manager X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:25 UTC	375	IN	Data Raw: 38 30 30 30 0d 0a 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 0a 76 61 72 20 64 61 74 61 20 3d 20 7b 0a 22 72 65 73 6f 75 72 63 65 22 3a 20 7b 0a 20 20 22 76 65 72 73 69 6f 6e 22 3a 22 32 22 2c 0a 20 20 0a 20 20 22 6d 61 63 72 6f 73 22 3a 5b 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 64 65 65 22 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 39 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 66 61 6c 73 65 7d 2c 7b Data Ascii: 8000// Copyright 2012 Google Inc. All rights reserved. (function(){var data = {"resource": { "version":"2", "macros":[{"function":"__e"},{"function":"__dee"},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":false},{
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 79 70 65 22 3a 33 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 22 32 38 34 30 22 7d 2c 7b 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 65 78 73 22 2c 22 76 74 70 5f 6d 65 61 73 75 72 65 6d 65 6e 74 49 64 22 3a 22 57 41 32 33 55 4b 47 38 52 76 47 6a 70 6a 33 46 39 70 49 47 45 77 22 2c 22 76 74 70 5f 73 65 63 74 69 6f 6e 73 22 3a 5b 22 6c 69 73 74 22 2c 32 5d 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 39 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3a 22 5f 5f 63 22 2c 22 76 74 70 5f 76 61 6c 75 65 22 3a 30 7d 2c 7b 22 76 74 70 5f 65 78 70 65 72 69 6d 65 6e 74 4b 65 79 22 3a 22 4f 50 54 2d 4b 58 52 50 38 4b 54 5f 4f 50 54 2d 57 58 36 52 Data Ascii: ype":3,"function":"__c","vtp_value":"2840"},{"function":"__exs","vtp_measurementId":"WA23UKG8RvGjpj3F9pIGEw","vtp_sections":["list",2]},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R9","function":"__c","vtp_value":0},{"vtp_experimentKey":"OPT-KXRP8KT_OPT-WX6R
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 69 74 69 65 73 22 3a 7b 0a 22 5f 5f 63 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 2c 0a 22 5f 5f 65 22 3a 7b 22 32 22 3a 74 72 75 65 2c 22 34 22 3a 74 72 75 65 7d 0a 0a 0a 7d 0a 2c 22 62 6c 6f 62 22 3a 7b 22 31 22 3a 22 32 22 7d 0a 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 7b 0a 22 5f 5f 63 22 3a 7b 7d 0a 2c 0a 22 5f 5f 65 22 3a 7b 22 72 65 61 64 5f 65 76 65 6e 74 5f 64 61 74 61 22 3a 7b 22 65 76 65 6e 74 44 61 74 61 41 63 63 65 73 73 22 3a 22 73 70 65 63 69 66 69 63 22 2c 22 6b 65 79 50 61 74 74 65 72 6e 73 22 3a 5b 22 65 76 65 6e 74 22 5d 7d 7d 0a 0a 0a 7d 0a 0a 0a 0a 2c 22 73 65 63 75 72 69 74 79 5f 67 72 6f 75 70 73 22 3a 7b 0a 22 67 6f 6f 67 6c 65 22 3a 5b 0a 22 5f 5f 63 22 0a 2c 0a 22 5f 5f 65 22 0a 0a 5d 0a 0a 0a 7d 0a 0a Data Ascii: ities":{"__c":{"2":true,"4":true},"__e":{"2":true,"4":true}},"blob":{"1":"2"},"permissions":{"__c":{},"__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}},"security_groups":{"google":["__c","__e"]}
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 20 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6a 61 28 61 2c 61 29 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 Data Ascii: ka=function(a){return ja(a,a)},ja=function(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a},l=function(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")re
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 79 61 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 74 79 70 65 3d 61 3b 74 68 69 73 2e 64 61 74 61 3d 62 7d 3b 76 61 72 20 41 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 Data Ascii: (){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var ya=this\|\|self;var za=function(a,b){this.type=a;this.data=b};var Aa=function(){t
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 6e 74 2e 73 65 74 28 61 2c 62 29 3a 74 68 69 73 2e 76 61 6c 75 65 73 2e 73 65 74 28 61 2c 62 29 29 7d 3b 0a 45 61 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 3f 74 68 69 73 2e 76 61 6c 75 65 73 2e 67 65 74 28 61 29 3a 74 68 69 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 70 61 72 65 6e 74 2e 67 65 74 28 61 29 3a 76 6f 69 64 20 30 7d 3b 45 61 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 76 61 6c 75 65 73 2e 68 61 73 28 61 29 7c 7c 21 28 21 74 68 69 73 2e 70 61 72 65 6e 74 7c 7c 21 74 68 69 73 2e 70 61 72 65 6e 74 2e 68 61 73 28 61 29 29 7d 3b 76 61 72 20 47 61 3d 66 75 6e 63 Data Ascii: nt.set(a,b):this.values.set(a,b))};Ea.prototype.get=function(a){return this.values.has(a)?this.values.get(a):this.parent?this.parent.get(a):void 0};Ea.prototype.has=function(a){return!!this.values.has(a)\|\|!(!this.parent\|\|!this.parent.has(a))};var Ga=func
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6e 61 7c 7c 74 68 69 73 2e 54 2e 73 65 74 28 61 2c 62 29 7d 3b 68 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 68 61 73 28 61 29 7d 3b 68 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 61 7c 7c 74 68 69 73 2e 54 2e 72 65 6d 6f 76 65 28 61 29 7d 3b 68 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 6b 61 28 29 7d 3b 68 2e 56 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 56 62 28 29 7d 3b 68 2e 43 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 54 2e 43 62 28 29 7d 3b 68 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e Data Ascii: nction(a,b){this.na\|\|this.T.set(a,b)};h.has=function(a){return this.T.has(a)};h.remove=function(a){this.na\|\|this.T.remove(a)};h.ka=function(){return this.T.ka()};h.Vb=function(){return this.T.Vb()};h.Cb=function(){return this.T.Cb()};h.Ga=function(){this.
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 65 5d 26 26 28 64 7c 3d 31 3c 3c 65 25 38 29 3b 64 3e 30 26 26 63 2e 70 75 73 68 28 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 29 3b 72 65 74 75 72 6e 20 51 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2b 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5b 5d 2c 62 3d 54 61 2e 66 64 72 7c 7c 5b 5d 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 5d 26 26 61 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3e 30 3f 61 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 58 61 3d 5b 5d 2c 59 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 29 7b 72 65 74 75 72 6e 20 58 61 5b 61 5d 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 58 61 5b Data Ascii: e]&&(d\|=1<<e%8);d>0&&c.push(String.fromCharCode(d));return Qa(c.join("")).replace(/\.+$/,"")}function Wa(){for(var a=[],b=Ta.fdr\|\|[],c=0;c<b.length;c++)b[c]&&a.push(c);return a.length>0?a:void 0};var Xa=[],Ya={};function Za(a){return Xa[a]===void 0?!1:Xa[
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 6d 2e 22 3b 74 68 69 73 2e 76 61 6c 75 65 73 3d 7b 7d 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 3d 62 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 68 69 73 2e 70 72 65 66 69 78 2b 61 5d 7d 3b 67 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 61 29 21 3d 3d 76 6f 69 64 20 30 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 71 62 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: m.";this.values={}};gb.prototype.set=function(a,b){this.values[this.prefix+a]=b};gb.prototype.get=function(a){return this.values[this.prefix+a]};gb.prototype.contains=function(a){return this.get(a)!==void 0};function qb(a,b,c){return a&&a.hasOwnProperty(
2024-10-28 19:14:25 UTC	1378	IN	Data Raw: 20 6e 3b 69 66 28 63 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 70 2b 22 3d 22 2b 63 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 73 70 6c 69 74 28 22 26 22 29 2e 6d 61 70 28 64 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 20 70 21 3d 3d 76 6f 69 64 20 30 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 76 61 72 20 66 3d 62 2e 68 72 65 66 2e 73 70 6c 69 74 28 2f 5b 3f 23 5d 2f 29 5b 30 5d 2c 67 3d 62 2e 73 65 61 72 63 68 2c 6b 3d 62 2e 68 61 73 68 3b 67 5b 30 5d 3d 3d 3d 22 3f 22 26 26 28 67 3d 67 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 6b 5b 30 5d 3d 3d 3d 22 23 22 26 26 28 6b 3d 6b 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 67 3d 65 28 67 29 3b 6b 3d 65 28 6b 29 3b 67 21 3d 3d 22 22 26 Data Ascii: n;if(c!==void 0)return p+"="+c}function e(n){return n.split("&").map(d).filter(function(p){return p!==void 0}).join("&")}var f=b.href.split(/[?#]/)[0],g=b.search,k=b.hash;g[0]==="?"&&(g=g.substring(1));k[0]==="#"&&(k=k.substring(1));g=e(g);k=e(k);g!==""&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:25 UTC	589	OUT	GET /common/css/footer.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:25 GMT Content-Type: text/css Content-Length: 14489 Connection: close Last-Modified: Tue, 13 Feb 2024 00:02:28 GMT ETag: "3899-611381c20cf05" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	14489	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 66 6f 6f 74 65 72 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 2f 2a c2 a0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a e3 82 b9 e3 83 9e e3 83 9b ef bc 88 e7 b8 a6 ef bc 89 ef bc 86 e5 85 b1 e9 80 9a e8 a8 98 e8 bf b0 0d 0a 33 32 30 70 78 c2 a0 e2 86 92 c2 a0 34 37 39 70 78 ef bc 88 69 50 68 6f 6e 65 33 2c 34 2c 35 2c 36 2c 36 50 6c 75 73 2c 41 6e 64 72 6f 69 64 ef bc 89 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d c2 a0 2a 2f 0d 0a 0d 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: @charset "utf-8";/* Filenamefooter.css //-----------------------------------------320px479pxiPhone3,4,5,6,6Plus,Android-----------------------------------------// ---------------

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49765	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:25 UTC	590	OUT	GET /common/css/sidebar.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:25 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:25 GMT Content-Type: text/css Content-Length: 1001 Connection: close Last-Modified: Fri, 20 Apr 2018 04:13:45 GMT ETag: "3e9-56a3fea017040" Accept-Ranges: bytes
2024-10-28 19:14:25 UTC	1001	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 73 69 64 65 62 61 72 2e 63 73 73 20 2a 2f 0a 0a 2f 2a c2 a0 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 0a 0a e3 82 b9 e3 83 9e e3 83 9b ef bc 88 e7 b8 a6 ef bc 89 ef bc 86 e5 85 b1 e9 80 9a e8 a8 98 e8 bf b0 20 0a 33 32 30 70 78 c2 a0 e2 86 92 c2 a0 34 37 39 70 78 ef bc 88 69 50 68 6f 6e 65 33 2c 34 2c 35 2c 36 2c 36 50 6c 75 73 2c 41 6e 64 72 6f 69 64 ef bc 89 20 0a 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d c2 a0 2a 2f 20 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a Data Ascii: @charset "utf-8";/* Filenamesidebar.css //----------------------------------------- 320px479pxiPhone3,4,5,6,6Plus,Android -----------------------------------------/ / ::::::::::::::::::::

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49769	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	588	OUT	GET /common/css/class.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: text/css Content-Length: 5855 Connection: close Last-Modified: Fri, 20 Apr 2018 04:13:44 GMT ETag: "16df-56a3fe9f22e00" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	5855	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 63 6c 61 73 73 2e 63 73 73 20 2a 2f 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 54 58 54 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 0a 2e 73 70 6c 7b 2f 2a 20 e6 b3 a8 e9 87 88 ef bc 9a e3 82 b5 e3 82 a4 e3 82 ba 31 32 70 78 ef bc 88 e3 82 b0 e3 83 ac e3 83 bc ef bc 89 20 2a 2f 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 7d 0a 2e 66 77 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 7d 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a Data Ascii: @charset "utf-8";/* Filenameclass.css // :::::::::::::::::::::::::::::::::::TXT::::::::::::::::::::::::::::::::::: /.spl{/ 12px /font-size:12px;}.fwb{font-weight:bold;}/ :::::::::::::::::::::::::::::

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	588	OUT	GET /common/css/parts.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: text/css Content-Length: 5096 Connection: close Last-Modified: Fri, 28 Feb 2020 04:19:46 GMT ETag: "13e8-59f9b25c57c80" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	5096	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 70 61 72 74 73 2e 63 73 73 20 2a 2f 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 42 72 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 0a 2e 62 72 43 6c 65 61 72 2d 70 63 7b 0a 09 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0a 09 54 65 78 74 53 65 74 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0a 2e 74 61 78 41 74 74 7b Data Ascii: @charset "utf-8";/* Filenameparts.css // :::::::::::::::::::::::::::::::::::Br::::::::::::::::::::::::::::::::::: /.brClear-pc{display:none;}/ :::::::::::::::::::::::::::::::::::TextSet::::::::::::::::::::::::::::::::::: */.taxAtt{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	587	OUT	GET /common/css/form.css HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.yamanoue-hotel.co.jp/common/css/import.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: text/css Content-Length: 628 Connection: close Last-Modified: Thu, 10 Mar 2022 02:27:17 GMT ETag: "274-5d9d3f3e8cb40" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	628	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 75 74 66 2d 38 22 3b 0d 0a 2f 2a 20 46 69 6c 65 6e 61 6d 65 ef bc 9a 66 6f 72 6d 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 2f 2a 20 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 0d 0a 09 53 65 6c 65 63 74 0d 0a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 3a 20 2a 2f 0d 0a 0d 0a 73 65 6c 65 63 74 20 7b 2f 2a 20 52 45 53 45 54 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 73 65 6c 65 63 74 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 33 70 78 20 31 30 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 Data Ascii: @charset "utf-8";/* Filenameform.css // :::::::::::::::::::::::::::::::::::Select::::::::::::::::::::::::::::::::::: /select {/ RESET */}select{padding:3px 10px;font-size:16px;vertical-align:middle;}@media only scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49772	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	629	OUT	GET /common/images/header/ico_english.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: image/png Content-Length: 1817 Connection: close Last-Modified: Fri, 12 Apr 2019 07:33:53 GMT ETag: "719-586505315da40" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	1817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 17 08 06 00 00 00 e9 ed b6 9f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49773	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	627	OUT	GET /common/images/header/head_logo.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: image/png Content-Length: 6741 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "1a55-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	6741	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 71 08 06 00 00 00 6f 1a 9e e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR,qotEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	375	OUT	GET /common/js/jquery.common2.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	246	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: application/javascript Content-Length: 4715 Connection: close Last-Modified: Tue, 14 Mar 2023 01:31:37 GMT ETag: "126b-5f6d2304845ed" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	4715	IN	Data Raw: 24 28 77 69 6e 64 6f 77 29 2e 62 69 6e 64 28 22 73 63 72 6f 6c 6c 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 68 65 69 67 68 74 28 29 3b 0a 20 20 20 20 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 20 2b 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3b 0a 20 20 20 20 69 66 20 28 20 28 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 2d 20 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 29 20 2f 20 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 3c 3d 20 30 2e 30 33 29 20 7b 0a 20 20 20 20 20 20 20 20 24 28 27 23 68 65 61 64 65 72 27 29 2e 66 61 64 65 4f 75 74 28 29 3b 0a 20 20 20 20 20 20 20 20 24 28 27 2e Data Ascii: $(window).bind("scroll", function() { scrollHeight = $(document).height(); scrollPosition = $(window).height() + $(window).scrollTop(); if ( (scrollHeight - scrollPosition) / scrollHeight <= 0.03) { $('#header').fadeOut(); $('.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49774	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	367	OUT	GET /common/js/slider.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: application/javascript Content-Length: 2064 Connection: close Last-Modified: Tue, 14 Mar 2023 02:16:10 GMT ETag: "810-5f6d2cfa7c139" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	2064	IN	Data Raw: 0d 0a 0d 0a 2f 2f 73 6c 69 64 65 72 20 61 63 63 6f 72 64 69 6f 6e 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 0d 0a 20 20 20 20 24 28 27 23 6a 73 5f 73 6c 69 64 65 72 5f 6d 76 27 29 2e 73 6c 69 63 6b 28 7b 0d 0a 20 20 20 20 20 20 20 20 66 61 64 65 20 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 72 72 6f 77 73 20 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f 70 6c 61 79 53 70 65 65 64 20 3a 20 33 35 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 73 70 65 65 64 20 3a 20 32 30 30 30 2c 0d 0a 20 20 20 20 20 20 20 20 64 6f 74 73 20 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 61 75 74 6f Data Ascii: //slider accordiondocument.addEventListener("DOMContentLoaded", function (e) { $('#js_slider_mv').slick({ fade : true, arrows : false, autoplaySpeed : 3500, speed : 2000, dots : true, auto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49775	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	386	OUT	GET /common/js/bgslide/jquery.bgswitcher.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	247	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: application/javascript Content-Length: 11714 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "2dc2-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	11714	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 2e 42 67 53 77 69 74 63 68 65 72 0a 20 2a 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 20 30 2e 34 2e 33 0a 20 2a 20 40 61 75 74 68 6f 72 20 20 20 72 65 77 69 73 68 20 3c 72 65 77 69 73 68 2e 6f 72 67 40 67 6d 61 69 6c 2e 63 6f 6d 3e 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 77 69 73 68 2f 6a 71 75 65 72 79 2d 62 67 73 77 69 74 63 68 65 72 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 2e 6d 64 29 0a 20 2a 20 40 6c 69 6e 6b 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 72 65 77 69 73 68 2f 6a 71 75 65 72 79 2d 62 67 73 77 69 74 63 68 65 72 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: /! jQuery.BgSwitcher * * @version 0.4.3 * @author rewish <rewish.org@gmail.com> * @license MIT License (https://github.com/rewish/jquery-bgswitcher/blob/master/LICENSE.md) * @link https://github.com/rewish/jquery-bgswitcher */(function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49777	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:26 UTC	372	OUT	GET /common/js/drawr/drawr.js HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:26 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:26 GMT Content-Type: application/javascript Content-Length: 3696 Connection: close Last-Modified: Mon, 30 May 2022 08:18:58 GMT ETag: "e70-5e0364ec5e080" Accept-Ranges: bytes
2024-10-28 19:14:26 UTC	3696	IN	Data Raw: 2f 2f 20 4a 61 76 61 53 63 72 69 70 74 20 44 6f 63 75 6d 65 6e 74 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 76 61 72 20 24 6e 61 76 09 3d 20 24 28 27 2e 6e 61 76 44 72 61 77 72 27 29 3b 0a 09 76 61 72 20 24 6e 61 76 42 74 6e 09 3d 20 24 28 27 2e 6e 61 76 44 72 61 77 72 42 74 6e 2c 20 2e 66 5f 6e 61 76 44 72 61 77 72 42 74 6e 27 29 3b 0a 09 76 61 72 20 24 73 70 65 65 64 09 3d 20 33 30 30 3b 0a 09 76 61 72 20 24 6e 61 76 57 09 3d 20 32 37 30 3b 0a 0a 09 2f 2f e3 82 b5 e3 83 96 e3 83 a1 e3 83 8b e3 83 a5 e3 83 bc e3 82 92 e9 9d 9e e8 a1 a8 e7 a4 ba e3 81 ab 0a 09 24 6e 61 76 2e 66 69 6e 64 28 27 2e 73 75 62 27 29 2e 68 69 64 65 28 29 3b 0a 0a 09 2f 2f 68 6f 76 65 72 e6 99 82 e3 81 ae e6 8c 99 e5 8b 95 0a 09 09 24 6e 61 76 2e 66 69 6e 64 28 27 Data Ascii: // JavaScript Document$(function () {var $nav= $('.navDrawr');var $navBtn= $('.navDrawrBtn, .f_navDrawrBtn');var $speed= 300;var $navW= 270;//$nav.find('.sub').hide();//hover$nav.find('

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49779	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	649	OUT	GET /common/images/header/restaurant.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/common/css/header.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:27 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:27 GMT Content-Type: image/png Content-Length: 1758 Connection: close Last-Modified: Thu, 10 Mar 2022 01:32:33 GMT ETag: "6de-5d9d3302aee40" Accept-Ranges: bytes
2024-10-28 19:14:27 UTC	1758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRapHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	645	OUT	GET /common/images/header/bar_bg.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/common/css/header.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:27 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:27 GMT Content-Type: image/png Content-Length: 7808 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "1e80-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:27 UTC	7808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRPPtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49778	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	623	OUT	GET /images/mv/slide/panel_1-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:28 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:27 GMT Content-Type: image/jpeg Content-Length: 293051 Connection: close Last-Modified: Tue, 13 Feb 2024 00:07:05 GMT ETag: "478bb-611382ca60e0d" Accept-Ranges: bytes
2024-10-28 19:14:28 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 9a f2 cd 67 f6 7e 53 85 89 c8 8a c9 e3 47 53 f6 bf 95 9f 83 98 8d 09 05 f2 cd 94 fd d5 fc ae b7 b1 32 03 c5 21 de a7 fd 29 f9 5f 1e 93 6c 83 22 fc cb 95 3f 75 7f 2b a3 d3 2d 1c 89 39 17 2e a7 ee 9f 95 d0 e9 56 9e 82 bd aa 7f d2 af e6 2f 8f 49 b2 ff 00 2f 7b 95 3f e9 4f cc 59 1e 93 b6 6f 91 c1 a1 e6 9f ba bf 98 94 3a 1e d0 54 5b 04 f1 c4 b2 7f d2 9f 98 b7 f9 36 d3 47 f9 60 85 3f 74 fc a7 fc 93 68 63 fe 54 78 e1 4f 62 7e ea e2 cb 5d 17 68 25 ab c9 8e a1 9b 04 fd 26 2f 8f 49 da 89 3f 97 17 e2 c1 67 f5 57 13 fe 57 61 d8 db 8f b1 3f 46 2c 1d 2b 6f ff 00 77 1d 43 02 ca 69 89 7f 2e b6 cf a2 2e 39 26 aa e8 ec 6d d3 c2 28 9a 89 7e 0a d9 c6 3e e5 34 48 6c 61 fb 20 3a 6a 88 ec 6d 8c 22 07 0a 22 24 76 51 05 84 7b 91 52 8e c6 23 11 54 d1 28 ec a3 fb 3d 88 25 1d b4 1d Data Ascii: g~SGS2!)_l"?u+-9.V/I/{?OYo:T[6G`?thcTxOb~]h%&/I?gWWa?F,+owCi..9&m(~>4Hla :jm""$vQ{R#T(=%
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 63 83 1e 27 13 c9 02 80 8e b1 a8 36 44 8c 7d 88 32 61 18 96 20 02 09 a0 5a 0a 10 3a 88 ad 1c 77 7d 4a e2 2d 16 e3 8f 06 60 31 21 04 cc 8e 82 1d 8b b0 67 a2 8a a6 71 b9 28 91 00 cf 4a 29 69 0e ce d2 e3 07 00 05 ce b5 1b 1b 36 3c 24 8e fe d5 9b 5a 67 ed ec b8 a8 ef e6 b3 aa cd 88 61 80 24 d4 f0 52 d2 32 ad 42 2c f2 18 54 e6 b3 ad 32 2d c1 e4 00 a6 aa 00 a0 cc b3 6b 49 65 15 78 b4 75 30 c3 25 05 d6 9b 5d 28 47 cd c9 41 7e 98 99 b1 04 8c 41 18 20 cb b5 10 d4 c9 05 c2 d4 4b 11 9e 2a 0b a0 46 07 07 60 4f 14 17 46 d9 ae 6e 8a b0 44 38 71 86 1d e8 26 72 19 94 13 8c 46 28 2d d3 40 ca 09 c6 0e 82 50 81 0f cf 24 13 10 8b d4 57 32 82 51 80 88 e0 81 90 28 10 1a 46 4d dc 80 2c d4 35 54 48 1c b3 50 48 01 83 aa 24 22 46 01 8f 15 11 2d 21 bb 11 48 c5 c8 3e c5 44 a2 0b a8 Data Ascii: c'6D}2a Z:w}J-`1!gq(J)i6<$Zga$R2B,T2-kIexu0%](GA~A K*F`OFnD8q&rF(-@P$W2Q(FM,5THPH$"F-!H>D
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: dc 99 59 3e 11 e8 e2 cd d8 f5 6d e5 d9 46 42 12 36 b4 cc e0 5a 24 10 39 05 96 9e 37 eb 3f 17 ab 3a 93 0f f6 ec e7 b0 2d f3 e3 15 d1 fe 5c 5a 03 ae db 9c 9c e8 b5 36 39 46 98 a9 5a 8e 83 d5 30 9c bd 79 e9 c8 c3 c5 a6 13 9c 5a 84 78 b1 50 ae ac 5d 07 55 b8 d5 eb 39 71 27 27 59 57 9c 7e 6b 88 88 f4 bd 3e 20 45 da 0c 1c 37 b4 ad f2 cd 79 8e e8 91 76 24 03 48 f8 8f 7f 05 d1 96 0d f0 00 91 90 a7 ed 0a 82 ac 17 ec 75 7e 1e c0 0e e2 2f 8d 47 b7 24 a4 48 b6 99 50 ca 24 d4 91 47 e4 10 53 76 11 f2 cc a2 1c 0c 62 4f c5 20 c7 da 5b 07 74 f1 6c 28 1f 9a dd f1 23 27 a9 59 b9 72 c4 3c b0 e6 12 73 a4 be 5e f5 9e 2e 52 ab de 89 0e 99 6a 8d 58 0d 38 32 bc ff 00 b1 7c 4f a3 de 8d 99 5c 89 1f e6 98 88 c6 be f6 4e e1 19 1b ce 9d be df f5 6b 5b 5d 8d 9b 9b 9d c5 c8 01 6e d5 a8 Data Ascii: Y>mFB6Z$97?:-\Z69FZ0yZxP]U9q''YW~k> E7yv$Hu~/G$HP$GSvbO [tl(#'Yr<s^.RjX82\|O\Nk[]n
2024-10-28 19:14:28 UTC	18	IN	Data Raw: 39 f1 9a e5 2c 6d bf 11 70 46 52 d3 6c 53 1a d7 9e 4b Data Ascii: 9,mpFRlSK
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: a6 e2 37 3b 5d bd ab 66 16 ac db 0c 65 e2 96 04 fb 7e 27 d8 b1 6a b4 db e0 45 eb d1 1f 38 94 80 d3 9f e9 5b 88 d8 74 db 84 c5 a8 69 51 4a 36 0b 35 5b 0b 93 84 6d 82 65 a8 e3 c1 f9 ac 8e f3 f2 bf 79 6f 73 b4 df f9 53 06 36 af db 13 23 07 30 fb 38 7b 7d eb 3d 45 8f 3a f5 2d a1 7b ac f5 39 16 23 f1 37 0b 9c 01 d5 ec 5b e6 a5 73 75 94 88 72 c4 d3 35 db 58 77 fe 8a d8 ed 6d 1d 8d df 2c 0b d7 6e 44 ce e1 f9 be 6e 25 70 ee ba 48 f5 c9 c6 32 bb 22 46 88 81 41 87 78 c3 1e e1 da b9 2a a3 f2 c8 d3 50 cb 00 c7 9d 18 7f 64 76 a2 91 77 85 b9 1a 98 ea 85 a8 51 a3 99 a6 96 07 8f 84 73 41 45 eb 76 a0 04 86 20 13 11 07 38 9f b0 07 bc c4 7f 59 51 e7 bf 98 46 72 ea 3b 61 19 08 c7 c9 3a 01 66 7d 45 c8 21 83 ff 00 0c bd ab 7c b3 5c a5 bb 52 2d 13 0a bd 24 30 27 9e 03 fc 25 69 Data Ascii: 7;]fe~'jE8[tiQJ65[meyosS6#08{}=E:-{9#7[sur5Xwm,nDn%pH2"FAx*PdvwQsAEv 8YQFr;a:f}E!\|\R-$0'%i
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 88 e6 10 4c fe fc 98 66 05 10 48 48 44 30 8b 03 9f 15 04 e3 12 fa a5 f3 65 c9 51 38 b3 51 03 40 d9 00 e0 33 9f 98 b0 ed 41 20 30 41 20 11 52 02 88 24 06 68 18 1e ce 68 1a 06 29 4f 7a 01 01 5e ec 90 57 7c 60 c8 86 2b 10 51 51 20 07 3d e5 06 a7 75 d5 e1 b5 d5 b9 9c 3f d2 38 13 ba 48 04 02 5b 50 19 80 88 cb bf be d9 d9 b4 2f 5d bf 6e 16 59 c5 c9 48 00 47 17 28 6b 97 ea df 99 9e 92 d8 89 01 bc 1b 9b 83 0b 76 01 99 f6 8a 2d 4e 6d 4d 68 7f fb f5 74 17 20 6d 37 00 67 41 ed c5 6b fe 3d 27 ee 3a 1f 48 fa ef a3 7a 82 ed cd be dc ca d6 e2 dd 45 ab a1 a4 63 c4 71 0b 37 9b 16 57 4f 70 e9 b5 23 c0 15 95 51 b4 86 9b 11 e2 6b ed 50 5a c1 04 08 41 af df ee ae d8 9d b8 5b b4 6e 19 e2 d8 04 18 d7 7f 98 dc 1f e5 88 8c 71 41 8f d6 85 c9 ec 61 ac 80 73 23 0f 7a 9a af 1c f5 ed Data Ascii: LfHHD0eQ8Q@3A 0A R$hh)Oz^W\|`+QQ =u?8H[P/]nYHG(kv-NmMht m7gAk=':HzEcq7WOp#QkPZA[nqAas#z
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 6d bd 52 94 6d 69 8c dc 99 42 04 33 13 f6 b4 02 df d7 b3 2e e4 01 90 90 98 2d a2 f1 06 52 78 c8 4c c7 f6 a5 20 21 3e c9 88 cb 9a 08 c4 c6 24 d9 31 d2 23 8c bc 60 c7 be b7 6d 8e dd 50 40 bc ad c8 94 62 22 26 0f 8a d4 46 27 f7 ad e8 3f de b4 7b 62 82 33 89 ac a2 43 cc b1 6d 24 4a 4f 4f d9 84 e5 fd 89 f6 a0 d7 f5 0d 9c 6f c2 e4 ed c4 43 73 06 12 12 26 30 d4 30 d4 4b 4a 2f c2 7e d5 62 36 17 e1 74 09 4e 04 18 c6 20 4d df 54 03 7c a5 f5 48 47 f8 84 a1 cd 45 69 ee 48 7d fe 52 11 0c 48 61 89 e0 f4 ec 70 aa 32 3d 24 41 dd 38 8e 91 a4 02 5d c6 25 99 3a 39 6b 3d 59 b4 b1 63 a8 8b 96 00 84 af 44 ce 66 2c c4 bb 3d 1c 2d f1 52 c6 9a c7 8a f0 f3 29 d8 1c d5 74 cf 86 63 a7 f4 d9 84 a1 79 9e 5a 6e 46 45 d9 d8 0c 6a 4f bc 77 ae 3d b7 16 7a d7 0d a9 18 78 df dc 9f cf d3 a7 Data Ascii: mRmiB3.-RxL !>$1#`mP@b"&F'?{b3Cm$JOOoCs&00KJ/~b6tN MT\|HGEiH}RHap2=$A8]%:9k=YcDf,=-R)tcyZnFEjOw=zx
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 0c 2e bd 01 2f 4e ef 69 40 20 41 e6 26 28 33 56 7a 95 c2 ed 20 0e f6 71 34 00 57 b1 f1 5d 6d f8 67 ed b3 f5 11 96 8e 9b 28 e0 2c 47 44 85 08 22 46 a0 d0 85 38 3a 64 f4 2f 57 6e 6d ce 3b 7d e0 37 a1 22 23 0b cd e2 06 54 79 8f ac 29 d7 0b 3a 6f ef db 1e 6c b4 81 a4 97 a3 54 f2 3c 57 35 6b 7d 15 33 0e bd bf f0 9a 89 87 e1 e2 5a ef c4 8e e4 3c e3 56 31 3f 3c c6 7d ab 9b 6c 0d a4 4f f3 0e a2 24 5f 54 ac 97 35 70 60 45 7d 8a a3 3c 4e 40 83 20 06 a6 1a c8 61 de a2 89 5b 17 ef 68 90 20 69 70 46 0f c9 05 ad 72 04 5b a3 d6 32 25 9a 40 e5 28 e6 10 6f fd 37 ea 7d ef 4d 03 6b a6 5b 8d b4 5b 56 ce 52 f1 5b 07 3b 33 39 7e e1 50 7a 0f 4f ea 5b 2e a1 63 cf d9 dd 17 60 29 31 84 a0 78 4e 38 c4 f6 a8 ac ae c4 15 5f 3e 08 cb 84 87 c5 06 9f a8 02 3d 51 b1 ab 89 ed 6f c7 bc 4e Data Ascii: ./Ni@ A&(3Vz q4W]mg(,GD"F8:d/Wnm;}7"#Ty):olT<W5k}3Z<V1?<}lO$_T5p`E}<N@ a[h ipFr[2%@(o7}Mk[[VR[;39~PzO[.c`)1xN8_>=QoN
2024-10-28 19:14:28 UTC	16384	IN	Data Raw: 10 09 c3 3f d4 a8 7a e5 26 0e 01 70 68 a0 89 79 3c 89 a8 f9 8e 23 d8 a8 b3 c2 5c 1f 0b 02 18 1c 49 c0 20 00 9e 97 9e 98 b1 d3 a0 8a 10 38 13 82 22 33 d2 64 62 7e 62 18 1c 5c 0e 0a 88 c8 0d 36 e1 22 cd 53 41 51 fa 90 4c 90 25 29 12 5c 78 62 40 18 35 02 a1 6a 8c 98 c7 17 e5 4f a6 48 86 20 35 48 6b 32 96 20 fc 47 b5 06 e7 a6 7a 7b 7f be 6b 1b 5b 02 ed eb 9f 6c d3 4a e1 7b c7 59 cb 2f 7d e8 6f 51 f4 b8 f9 db 8d 9e bb 51 0e 4d a9 6a 64 9f d2 53 f2 bf 61 b8 e8 7b 4d b6 e0 75 5e 9d 77 cc 9c 48 b3 3b 91 90 0e 79 95 9b 2f d2 b9 8b 02 12 bf 18 86 8e b3 47 c9 f9 ae d7 c6 23 a2 de fa 2f 79 0e 9e 77 7e 7e da 53 94 5e 16 2d cc 48 81 8b 53 35 ca 7f 4f a6 af 2d 06 ce 31 1b 81 19 b4 27 1c a5 57 6c 82 df 55 23 d7 bd 25 e8 fd 86 eb a5 79 d7 22 27 3b 81 fc b3 cf 8a f3 75 d3 Data Ascii: ?z&phy<#\I 8"3db~b\6"SAQL%)\xb@5jOH 5Hk2 Gz{k[lJ{Y/}oQQMjdSa{Mu^wH;y/G#/yw~~S^-HS5O-1'WlU#%y"';u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49780	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	650	OUT	GET /common/images/common/bg_texture.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/common/css/default.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:27 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:27 GMT Content-Type: image/png Content-Length: 11553 Connection: close Last-Modified: Fri, 08 May 2020 07:22:37 GMT ETag: "2d21-5a51ddc95e940" Accept-Ranges: bytes
2024-10-28 19:14:27 UTC	11553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 6e 08 03 00 00 00 f1 85 d6 c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRnntEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49786	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	384	OUT	GET /common/images/header/ico_english.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:28 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:28 GMT Content-Type: image/png Content-Length: 1817 Connection: close Last-Modified: Fri, 12 Apr 2019 07:33:53 GMT ETag: "719-586505315da40" Accept-Ranges: bytes
2024-10-28 19:14:28 UTC	1817	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 17 08 06 00 00 00 e9 ed b6 9f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	649	OUT	GET /common/images/header/reserve_bg.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/common/css/header.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:28 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:28 GMT Content-Type: image/png Content-Length: 1842 Connection: close Last-Modified: Mon, 07 Mar 2022 03:35:24 GMT ETag: "732-5d9988dfd5700" Accept-Ranges: bytes
2024-10-28 19:14:28 UTC	1842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 32 08 06 00 00 00 90 c9 03 88 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR2pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49787	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	648	OUT	GET /common/images/common/mrk_white.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/common/css/header.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:28 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:28 GMT Content-Type: image/png Content-Length: 983 Connection: close Last-Modified: Tue, 13 Feb 2024 00:02:32 GMT ETag: "3d7-611381c657072" Accept-Ranges: bytes
2024-10-28 19:14:28 UTC	983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 07 08 06 00 00 00 2f 65 ec d0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR/etEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49788	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:27 UTC	382	OUT	GET /common/images/header/head_logo.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:28 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:28 GMT Content-Type: image/png Content-Length: 6741 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "1a55-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:28 UTC	6741	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 71 08 06 00 00 00 6f 1a 9e e8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR,qotEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49790	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	621	OUT	GET /common/images/header/head_logo.png HTTP/1.1 Host: yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:29 UTC	250	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 275 Connection: close Location: https://www.yamanoue-hotel.co.jp/common/images/header/head_logo.png
2024-10-28 19:14:29 UTC	275	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 61 6d 61 6e 6f 75 65 2d 68 6f 74 65 6c 2e 63 6f 2e 6a 70 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 68 65 61 64 65 72 2f 68 65 61 64 5f 6c 6f 67 6f 2e 70 6e 67 22 3e 68 65 72 65 3c 2f 61 3e 2e Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.yamanoue-hotel.co.jp/common/images/header/head_logo.png">here</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	625	OUT	GET /common/images/footer/pagetop.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:29 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/png Content-Length: 1231 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "4cf-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:29 UTC	1231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 25 00 00 00 13 08 06 00 00 00 17 bd c4 b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR%tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49794	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	623	OUT	GET /images/mv/slide/panel_6-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:29 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/jpeg Content-Length: 176022 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "2af96-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:29 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 83 c4 89 3e 62 aa 0f 27 92 f6 86 c7 7c e6 4c 0f 51 8a 9a 6b e5 37 bf 6e 27 6a f1 b9 b7 b8 48 05 d8 e2 92 46 bc 9e a6 c7 69 cd 6c e0 04 67 3f 4c 0c 8d 13 a9 56 58 f0 3d c1 7a 33 dc 89 c8 99 5c 18 b9 aa cd dc 59 8f 36 5b 81 08 7a 91 24 11 96 4a 4e 9a b1 ed f1 3e ed b9 b6 d3 fd 4a 0c 02 dc e9 ce f2 fa 9d b7 bf 81 80 32 92 ac 5e 5d 36 3d d9 1b f3 73 58 9c 18 a2 e3 d1 b3 ca 6d 2f 52 44 3f 75 07 07 2f c7 5a de db 98 b6 c5 4a d4 af 87 9f b6 2f cb 74 61 20 03 29 e2 df 93 b3 71 ed 19 0d b1 05 89 53 0f 27 c8 6e f8 1f 4b 74 41 04 07 c0 05 8b cb 5a db fd 36 10 b6 46 90 62 d5 ea a3 51 e4 6e b6 e2 13 3a 28 b9 d6 a2 ed 6c 6f 5d 83 86 1d 01 4c 5d 66 6d 18 c8 c6 61 88 58 bf 0d 0d 11 2b 22 70 3d 94 15 aa aa e8 d2 17 06 29 aa b3 21 21 82 dc e9 9f 16 57 a2 25 1a 0a ab 2a 58 Data Ascii: >b'\|LQk7n'jHFilg?LVX=z3\Y6[z$JN>J2^]6=sXm/RD?u/ZJ/ta )qS'nKtAZ6FbQn:(lo]L]fmaX+"p=)!!W%*X
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: c9 17 94 a4 5c 93 dc 95 8a d3 d0 db da 89 0e 14 57 6c 2d 81 92 83 51 01 d1 02 36 c2 05 e9 a0 34 14 0f 49 40 01 5c 10 3d 21 03 60 83 19 ca ad 1a a0 21 64 9a 95 71 1b 08 35 14 14 20 81 e9 64 09 90 0c 3a 20 34 84 01 80 25 03 11 21 50 4a 46 21 b1 41 20 4a 46 a1 06 d0 11 18 20 b0 c8 1b 20 68 18 74 0a a8 06 40 88 40 53 34 19 ce 46 54 8a 20 8d a7 a9 41 7e 99 c9 14 31 08 01 22 32 41 51 90 44 56 a0 82 c2 a1 d1 30 34 c1 32 98 18 62 a8 91 13 22 e5 06 b1 88 0a 51 a4 59 03 a2 07 a1 02 d2 80 00 a5 0e bd 12 01 30 3a 32 0c e7 27 a0 54 11 b5 99 41 a6 80 81 e8 50 1a 50 22 11 08 45 14 18 85 42 d2 80 11 2a 00 c8 85 50 9c 94 17 16 41 b0 62 16 40 c1 50 c2 88 a6 40 00 aa 99 0a 20 40 88 75 55 13 20 61 8a 08 8d b2 4d 53 46 a2 0d 82 22 80 2a 29 82 51 0d dd 14 dc 2a 06 40 32 60 61 Data Ascii: \Wl-Q64I@\=!`!dq5 d: 4%!PJF!A JF ht@@S4FT A~1"2AQDV042b"QY0:2'TAPP"EBPAb@P@ @uU aMSF")Q*@2`a
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 2e 92 05 20 a8 ce fe de 3a 08 06 b9 a0 e2 b1 7f 77 b2 12 fe da d5 9f 50 97 17 e7 6a 17 2e 47 fd d3 31 20 16 e7 58 ce 1d ce 63 9e bb 74 cf 75 7b fb b8 48 11 2b 17 c0 95 a2 0f fb 01 a2 0f 71 54 f2 a6 3b 79 1e 7a ce e3 85 1c 4e c7 60 36 76 ee 4a 33 dc e9 3e 53 20 c4 e9 1d e4 06 25 5b df c6 24 8e 3e 23 79 cc 71 17 7d 4d 95 cd 30 95 6e 59 90 7b 72 f1 1f 98 59 e7 ab 16 c7 46 eb 75 c9 72 9b e3 b9 dd 91 a8 00 21 08 b8 84 40 ca 20 92 a7 5d 69 23 ba dc 4c 62 c4 2c b4 b6 54 55 19 b3 59 13 21 0c 48 54 40 84 ae 1f 29 22 1f 45 45 8b 32 88 f2 90 73 ae 28 86 0c b3 8f e6 a2 8d 51 f0 f1 54 50 62 1f 24 00 18 66 a6 06 05 70 4c 42 6a d1 55 50 89 ab 20 00 28 03 28 80 e4 b7 57 41 91 32 ba f1 89 f2 e6 51 1a 42 d0 8b 30 a8 c4 9c d1 5a 1e 84 62 88 54 c1 14 8c 01 ab 31 f9 20 7a 3a Data Ascii: . :wPj.G1 Xctu{H+qT;yzN`6vJ3>S %[$>#yq}M0nY{rYFur!@ ]i#Lb,TUY!HT@)"EE2s(QTPb$fpLBjUP ((WA2QB0ZbT1 z:
2024-10-28 19:14:30 UTC	18	IN	Data Raw: 7a 7f 8a 2a c1 1d 68 aa 05 06 37 2e d7 4c 5f 56 0e 3f Data Ascii: z*h7.L_V?
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 01 dd 14 42 d6 9f f7 be 81 05 80 7f 6e 88 8a 01 aa 28 0a 03 50 a8 27 e3 92 08 f5 6d 9f d3 72 25 b1 00 82 7e 88 00 62 7e 29 81 82 d4 cf aa 03 49 20 d1 cf d1 02 95 b1 16 2c cf 9c 68 82 58 87 02 4e 7b a0 cf 71 01 72 c4 ec dd 00 c6 e8 30 60 6b 5e c5 67 ae 7c a5 97 f2 b2 e3 f3 be 47 db fc 17 3f b7 dd 71 bb fb 31 bf 3b 13 95 ad c5 88 36 b8 ce dd 40 31 c7 a1 07 ba f8 56 5f 5f 59 f9 7a fc be 1f 97 f3 3f 64 4e f3 86 b3 c9 fb 5b d7 b1 ba b8 27 ab 8c de 98 ce 40 42 4c 63 51 e5 eb 8a f4 71 fc 9f 9c eb eb fa 3c bc 7f 23 ae f9 9d 73 ce 5b f8 bf 6f cb 7d c9 ed ef 73 7b 67 7f 18 6f ec 9b 17 a3 43 38 34 ad 48 48 09 69 6c 3c c3 f9 64 17 d1 fe 3f 7c f5 3e 1d 7b df b7 9d 6a 3b 5d e4 f5 ed 4c 76 5c 87 ff 00 eb c8 b5 9b bf fc 9c 8f e8 3f ec ca 8b b7 d3 0d 05 9b 77 01 fe e2 d4 Data Ascii: Bn(P'mr%~b~)I ,hXN{qr0`k^g\|G?q1;6@1V__Yz?dN['@BLcQq<#s[o}s{goC84HHil<d?\|>{j;]Lv\?w
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 4f 45 c3 db ed fc 46 7b eb 23 f4 8b 3b 20 34 42 21 a2 28 07 65 e5 79 7a fa 17 76 9a a7 2a 28 92 7c 32 3c 79 94 d8 60 15 8b 8d 2d 71 57 a4 58 07 59 b5 71 e8 d9 e2 b4 07 96 59 2c d1 a1 85 ab 63 c1 67 0d 72 6e 37 96 62 18 64 b2 ba f8 3d d1 1c af b8 a7 5d 50 b5 21 6e 11 35 18 d5 74 ef af 0e 3f bb e9 ff 00 1b 8c 9a fa 3f b8 3b 98 ed b8 6d af 1b b7 2d 3b ed 02 07 f9 22 2a b8 ff 00 1b 99 e5 a4 bb 74 bd 9f 66 d7 13 c0 dd dd ca 9a 81 91 26 87 4c 54 f7 7b 2f 5d af b2 fd 47 9b f6 f7 67 73 98 f7 75 ce 57 74 1e dd b2 6f 17 c2 9f a4 2e df c9 ea 71 c4 e6 1b 93 5f b1 42 f7 f7 17 49 35 5e 0e 5e 6b 5d 22 db 0a 2e b2 a1 82 62 ba 4a 58 af ee 74 2e b2 b1 63 ec 7d a3 c4 44 5a ff 00 51 dc 40 7a b3 ff 00 84 08 c0 75 5b e6 e9 23 e8 e4 40 5b 8a e2 df 6f 36 7b 78 19 6e 2e c2 d8 6c Data Ascii: OEF{#; 4B!(eyzv(\|2<y`-qWXYqY,cgrn7bd=]P!n5t??;m-;"tf&LT{/]GgsuWto.q_BI5^^k]".bJXt.c}DZQ@zu[#@[o6{xn.l
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 40 b1 74 1e 96 d2 fb 32 e9 2b 16 3d cd 9d c9 cc 07 2c 32 6f c9 74 95 cf a7 bb b4 b9 e5 88 c3 b2 e9 2b 95 8f 5e c4 b0 21 6d ce bb ed 4c 86 5b 8c 57 65 a9 12 1d 58 cd 74 c2 6b 48 e9 84 b0 7c 3a a3 2d e3 20 dd 4a 23 40 41 1e 15 40 c9 ef e2 80 70 10 65 76 e5 a7 22 86 48 33 8d 97 04 c8 90 83 71 19 c4 52 41 00 75 67 1f 92 09 06 38 12 dd 90 53 bb 36 08 2b c5 07 26 fc 91 6a 4a a3 93 86 d8 70 da 61 ca f2 1c 87 f6 f6 ec 5e d1 3d b0 89 32 95 1c 56 24 c9 8b d5 a2 ba 73 27 da 57 d3 f2 7b 3d 8e f7 75 7f 8b df ee 7d 5d ee f2 df ad b0 91 80 84 6d 36 a1 18 c0 82 65 fc af 2e ab a5 9f 86 5e 47 2b c7 ed 46 ff 00 76 36 f6 b9 1b d6 f6 ba 63 7a 7b 5b d0 16 e3 28 db 8c a4 d1 94 64 5f 33 dd 4b 02 da f1 1b 61 ba db 8d e4 79 1d be de ef 9f d6 bf ba b5 e9 69 11 d7 53 00 0d 47 42 ea Data Ascii: @t2+=,2ot+^!mL[WeXtkH\|:- J#@A@pev"H3qRAug8S6+&jJpa^=2V$s'W{=u}]m6e.^G+Fv6cz{[(d_3KayiSGB
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: eb 80 b3 97 a2 eb 1c 7a 8f 7f 6a 41 03 25 b8 e3 5e a5 93 40 57 47 3a ee b6 45 0a 23 aa 12 0e 8c ba ad b3 22 37 89 70 b4 2f 24 64 66 81 0a 3a 8a 0e 0a a2 4c 4b ba 82 48 aa 04 1c 20 65 99 02 64 01 8d 50 06 21 04 18 d1 02 64 53 31 18 a0 5a aa a0 bf e5 55 0a 8c a2 a5 c3 d1 00 31 41 58 84 0d 10 b4 c4 94 53 d0 1f 14 12 23 21 81 74 06 b9 81 50 86 22 52 99 2d 80 41 b5 b0 00 41 6f 45 50 22 80 6a e8 1b a0 aa a2 1b a0 64 97 40 81 f9 a0 60 a0 1d 90 65 3b 8e 74 84 0e 16 a2 31 aa 0b d2 32 54 1a 64 33 40 f5 11 52 a0 7a c3 a0 a0 43 62 a8 65 00 81 a0 79 51 10 3d 3c 14 11 72 f0 03 ba 2b 38 89 48 ea 28 37 8d 03 2a 00 7e 68 03 2a a8 60 2c d8 7c 55 08 00 81 11 21 9b a8 18 9b 0a 85 43 d6 1d 41 7a 81 18 aa 80 10 c8 14 8b 55 06 32 94 a4 58 60 a2 b4 b7 00 03 66 82 b0 aa a8 1d 03 Data Ascii: zjA%^@WG:E#"7p/$df:LKH edP!dS1ZU1AXS#!tP"R-AAoEP"jd@`e;t12Td3@RzCbeyQ=<r+8H(7~h`,\|U!CAzU2X`f
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 34 6d 03 80 c7 25 9a dc 6d 6c b7 75 8a d4 74 db 2e 57 2a d4 74 db 21 73 ad c6 f0 38 2e 75 b8 e8 b6 70 fa 2e 75 b8 e8 b6 07 45 cf a6 a3 78 32 c5 6a 34 04 15 95 86 14 53 a6 48 01 f4 42 17 f1 40 22 91 1f 25 51 25 0a 28 80 f1 44 19 22 84 0b f2 55 08 a0 44 2a 11 fa a2 17 ec ca 84 7a 04 12 42 a8 47 16 54 22 0a 22 68 3c 15 43 1d d1 5b da 9b 11 f8 2c 63 71 eb ec 2f e0 09 59 8d eb d4 b7 3c 15 d1 a0 25 99 22 26 6c 47 7c 96 91 8d c9 11 8e 4a 8e 79 49 9d f0 ea ae 1a 82 43 8e 89 8d ca cb 70 1c 3e 3d 1d 49 7e 56 c7 99 ba b7 09 02 f8 f7 5a e3 ab 2b 9d e5 e3 6f ac 06 a5 25 96 4b d1 c7 4e 1d c7 99 23 38 d0 92 4f 75 e8 98 e7 b6 01 1d 54 3f 54 dc 25 6d 0b 5e 9d 62 7c b9 85 9b d6 ba f2 d2 46 26 2f 13 5c c1 58 8d aa de f3 d3 68 c8 d3 a2 9d 7a f4 f3 c6 d6 c0 9d c7 7a 0c 02 c7 Data Ascii: 4m%mlut.Wt!s8.up.uEx2j4SHB@"%Q%(D"UDzBGT""h<C[,cq/Y<%"&lG\|JyICp>=I~VZ+o%KN#8OuT?T%m^b\|F&/\Xhzz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	623	OUT	GET /images/mv/slide/panel_5-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:29 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/jpeg Content-Length: 480891 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "7567b-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:29 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 6a 42 9d 19 84 00 e5 56 2f e3 ef f1 1a cf 36 b3 65 c0 11 86 47 c4 37 68 e7 aa c9 63 48 9e 9d d3 cb 20 c5 55 43 6b a1 f0 f6 7a e9 c0 e3 cd 73 31 bc 92 a9 ba 83 c4 05 fb 6b 0a 7b 8e 98 f6 99 7d b6 2f 3b a9 5e c6 cc b8 84 8f 49 ae 99 3a 63 f5 32 5d c4 99 ae c1 79 5d 7c 44 d8 b1 ac e0 8b a8 5f 62 46 90 05 8d ca c9 dc a7 b2 85 71 ce c1 ac a8 99 4c 6a de f8 bd fe 8a 53 22 06 03 a7 c2 a7 55 a1 60 dc 9e 5c bc 3d 7f 65 74 e4 fc 31 2e e0 fe 53 a9 2a d6 23 88 ae 2a 1b 44 b5 b3 05 f8 84 bb 72 9e 61 63 d8 6a e0 2c b6 09 6f 32 4b 2e ea 42 58 79 71 3a 4a 8d c7 85 c1 15 ab 30 81 e6 7b e8 2b b4 ad f5 f1 0b 7a 3c 55 d1 87 b8 59 3b 4d 95 95 71 62 0a 6c 56 35 f5 fb b5 c3 2b b3 78 d8 a3 11 fc 45 07 51 7b 9a a3 49 58 33 3e 08 9d 5a 4e 65 fc 35 e6 e5 23 53 61 da 6b 6a e8 72 ee Data Ascii: jBV/6eG7hcH UCkzs1k{}/;^I:c2]y]\|D_bFqLjS"U`\=et1.S#Dracj,o2K.BXyq:J0{+z<UY;MqblV5+xEQ{IX3>ZNe5#Sakjr
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 94 ff 00 4f f2 27 8e 54 8b a1 39 f1 a9 2d 51 a1 8f 60 d9 36 ed 9a 5d b2 1c 58 e4 83 1d 24 2f 2c a8 1a 49 64 0a 6f 23 13 a8 f4 01 59 66 cf 29 4a e3 84 12 30 dd 0d b4 ed bb ab 6f 2d 9f 1f 9a d1 26 1f 92 e1 8a b2 96 8c 6a 08 ae cf 2e 6e 31 4d 19 e1 55 65 9d c5 f2 76 88 5f 6a 95 4c f8 c6 ed 80 14 7f 78 1c d8 a3 01 f7 87 6d 75 7e 9b e7 45 45 a9 23 1f 2f c6 6d a6 82 8b b0 75 06 d5 d2 ec 26 cd 58 51 e3 79 27 db 48 2e 63 42 38 73 7d d6 23 b2 b8 33 cf 1b 9d 68 74 e2 ad 28 5c 79 f7 e8 f6 4c 2f 35 a3 87 6c 92 28 d7 e2 e1 b9 9d 21 3d ea 74 07 b2 f5 33 84 1c f5 63 8c 9a 5a 22 b6 46 e9 8f b6 ee 58 f2 6d d1 79 78 84 08 06 35 ee d2 6b ef 31 ed 63 da 6b d6 f2 bc 18 ac 2a 49 9c 58 7c 89 39 b8 b2 f3 6e d8 8d d4 38 d9 52 09 71 a1 82 17 59 4c d1 94 20 93 a7 7d fd 95 e4 63 c7 Data Ascii: O'T9-Q`6]X$/,Ido#Yf)J0o-&j.n1MUev_jLxmu~EE#/mu&XQy'H.cB8s}#3ht(\yL/5l(!=t3cZ"FXmyx5k1ck*IX\|9n8RqYL }c
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 2c 82 af c3 5f ec 5c cc 7c 97 ec 60 6e a4 8c bc 60 0f 74 44 a7 d3 7b 57 34 19 e9 a0 0e c0 4f 9a 3d 75 ae 4b 94 ac 7a 4e 2b 93 b0 3d f8 1b 8a d5 f6 9c 5f 79 82 ea 29 0a 6c 10 fa 32 1f ec 35 96 1b 9d 59 42 3d 17 20 6e 87 81 af ee bb 5e fe b3 c2 a7 c9 5e f6 11 d8 ce 30 5f 8d 94 0e 05 ce 9e da 75 f6 9b a3 d2 7a 50 f2 ed ff 00 89 60 a8 08 00 0a d6 0c e0 ce b5 03 6e 56 69 f7 42 ba 8f 2a f5 ca fb 8e 98 f6 a3 0f 10 0d d5 38 b6 b8 27 1c f3 5b b2 ba d3 ff 00 5f a9 0e e1 3d c8 c7 f0 c5 49 d6 e3 4a c6 37 2d 17 3a 71 dd 64 66 5b 79 6a 01 bf a8 eb 55 14 2c 81 9d dc 7e 34 56 b7 8a 40 c0 1e 04 11 55 23 38 18 1e 9a 0e 3a ea 04 b5 ca 99 c0 b1 ec d7 b6 b6 9f e1 fe c1 2b 9a 6d cd b9 b1 24 07 54 0c 6c 7d 20 d7 0e e8 de 25 2d 91 c0 98 0b e8 fe 1e ee 35 ba b9 33 b1 a3 cc 58 97 Data Ascii: ,_\\|`n`tD{W4O=uKzN+=_y)l25YB= n^^0_uzP`nViB*8'[_=IJ7-:qdf[yjU,~4V@U#8:+m$Tl} %-53X
2024-10-28 19:14:30 UTC	18	IN	Data Raw: e0 5d 95 c2 e8 47 13 c7 db 5a 4e e5 2b 1a ec ec e8 17 Data Ascii: ]GZN+
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 6f e5 57 b3 12 01 d2 fa d6 ad 68 73 2b 98 dd e5 cf e4 f1 dc 8d 72 1b 43 ea a8 c1 dc 6d 92 c1 5e 84 c8 e5 e8 57 ef 59 58 80 3d 75 3e 52 ff 00 63 14 6c 80 32 64 73 e5 31 0b db af d3 56 a1 a1 a7 59 be d9 32 e3 8f 6d 27 43 71 af b2 88 a3 0c 97 01 ee 19 0e 64 cf 03 c3 cf 1d c0 ee ac 5a f7 1a a7 a1 93 84 93 d5 58 7a 5c f9 27 4a ec ff 00 d6 f9 99 ee 1b dd 3c c1 8c c8 45 ae d7 07 d3 58 46 85 21 7a 7a 43 1c a5 92 fc e0 78 aa e9 a8 a4 16 df e5 72 91 17 04 5d c5 c5 29 04 0c 2e ca 42 75 96 0b 5b 4f 3e 40 47 6d bd 35 d1 3f c3 66 6b b8 d4 ee d2 10 b9 a0 ae a6 5f c3 23 ba f5 c7 15 63 54 ca 7b 74 81 6e 24 5b dc 76 56 89 6a 13 7a 04 f2 f2 7f 8f 8d 40 f7 80 b9 3c 08 ad 25 63 28 dc c7 6f c5 06 07 38 ed 99 47 b0 3d 56 1e ef 43 49 d8 d7 65 73 b6 35 d4 28 56 8d 45 c1 d6 d6 ae Data Ascii: oWhs+rCm^WYX=u>Rcl2ds1VY2m'CqdZXz\'J<EXF!zzCxr]).Bu[O>@Gm5?fk_#cT{tn$[vVjz@<%c(o8G=VCIes5(VE
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: d5 95 c6 3d 3f 2b 15 e6 95 5e cb a7 03 db 5c 49 7b 4d 5b 7d 74 03 21 7f 85 c8 24 68 f1 f2 a8 1d 9c 2a b1 95 30 6f 48 c8 a3 66 9c db 57 dc 25 1f 45 ad 5d 1e 4a d5 72 33 c4 f4 61 ce a8 27 9e 06 23 40 8a 7d 9a 8b d6 2e e5 61 7a 19 fc f9 00 dc 76 01 7f f5 e0 03 dd a3 0a e8 c4 b4 97 22 66 f5 45 1d ce 49 46 43 15 12 32 ab 31 36 90 80 6f e8 a2 34 b1 2d 32 0d ba f2 a4 c9 a9 0c a4 5b 98 f6 fa ea e5 a1 37 08 fc b7 9b 1b 03 78 dd b2 72 62 79 b0 e3 9d 52 58 d0 80 fc 2e 39 49 d2 e0 8e 15 59 df 6f 23 38 45 be a4 83 b3 f5 0e 2c d9 72 88 30 9f ca c2 6c 81 1c d2 b0 52 af 26 91 15 55 26 e7 94 9e 6a cd d2 2b 98 a3 17 37 4e 05 29 1d 7c fd 85 54 f9 77 ce 65 50 75 bb 08 eb 38 ad 25 c8 ea 93 d5 1a 3d ab c4 b9 a7 9a c1 50 dc 76 db 85 73 25 72 b2 3b 02 43 35 e4 40 c4 22 a3 13 e8 Data Ascii: =?+^\I{M[}t!$h*0oHfW%E]Jr3a'#@}.azv"fEIFC216o4-2[7xrbyRX.9IYo#8E,r0lR&U&j+7N)\|TwePu8%=Pvs%r;C5@"
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: d4 9c 67 26 fd 82 e6 b3 7f 83 ea 69 f7 7a 1a 1c c7 65 82 25 b9 d5 98 fa 3c 3a 57 2a 55 46 9f 71 5f 0a 64 8f 1c 73 2f 14 78 ed db 7b 16 bd 5c 55 53 14 8c ff 00 46 2f f8 46 7b 7f f5 c4 03 eb ae 9f 2a eb 91 18 ac cd 06 6a 9f 3f 1c b9 e6 f3 0a 86 3d d6 e1 5c 8c b5 62 9f 52 87 ff 00 2b 4d 72 2e 3c cb f7 9b 03 7a e8 c5 de 8c e5 66 58 e9 d2 57 64 d8 48 1e 21 00 fb 34 a8 cd de f9 8e 1d a5 3d c5 88 cf 62 75 b9 b1 fe 5a 58 ee 5e c4 50 2b 0f 98 3b 5a ae bf c2 38 37 d7 d7 ad 6e ff 00 0d f3 46 5f 72 e4 1c 91 8a e0 c8 ba db cc 20 f7 6b 5c 7b 1b ee 51 c7 76 6c 7c 80 da 58 00 3b c0 d2 d5 a4 16 84 cc 1d d1 a9 fe 0f b9 95 36 27 39 b5 ec e3 5b 79 57 5c 88 c2 5f df 4f 31 80 92 39 ae 2f 6f 45 65 16 5c 56 80 5d ec 04 dc 76 5b 9b 28 ca 53 ea d2 ba b1 59 f2 32 c9 75 cc 28 c1 88 Data Ascii: g&ize%<:WUFq_ds/x{\USF/F{j?=\bR+Mr.<zfXWdH!4=buZX^P+;Z87nF_r k\{Qvl\|X;6'9[yW\_O19/oEe\V]v[(SY2u(
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 20 0b d7 44 7b 64 65 3b a0 86 e0 1d f3 f7 16 46 36 0e dc 74 b8 e7 ac 37 65 ec 81 a4 ff 00 07 96 80 92 39 18 0f 52 8b d6 90 ba 26 76 62 e1 34 67 a3 b6 00 56 c6 36 98 96 ef 37 15 79 5f b9 8b 1a 08 e1 b1 f8 b9 49 62 05 ae c7 d0 6b 96 4b 53 a6 1d a3 b6 b8 b9 8f 53 dd b9 42 64 63 b0 5f 40 00 7e 9a bc bd ab 97 f3 22 1d de a4 f2 02 21 c4 63 a6 bd 9a 9f 7b 8d ab 95 b3 74 81 bd 57 e6 1d e3 67 49 08 1f 8f 1a e9 e9 04 5e bb 3c 6e d9 1c b9 bb 91 36 c1 cb cd 99 de aa 40 f6 31 ac b3 1a c0 8f 73 0a 7a 6f 29 89 b8 59 22 0b df ef de b4 c3 74 39 93 bc 8a dd 4d 94 97 08 4c 83 c5 d9 a2 0d 05 65 4f 62 2d 85 70 43 8d a7 2d 8b 68 49 b8 f5 9d 3e 8a c7 ee 43 97 68 11 56 ef b2 1f e6 ce 0f b2 43 5b c9 e9 21 70 2e ed 1c a3 74 8c f3 73 78 92 e7 d6 6f 58 c8 d2 27 9b ab 7e 03 f7 09 32 Data Ascii: D{de;F6t7e9R&vb4gV67y_IbkKSSBdc_@~"!c{tWgI^<n6@1szo)Y"t9MLeOb-pC-hI>ChVC[!p.tsxoX'~2
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 5c ff 00 7a e4 8d a3 db ea c1 fd 32 01 79 ff 00 58 ee 1b 6d 87 fd 63 d6 b9 7f 93 33 87 f3 44 bd 66 3f 8b ca ef bb 5c fd 35 3e 3d 91 79 ac 1d 90 2f e6 5b ad cf ff 00 9b 31 2d eb 31 c7 58 ec bf b9 95 bb e4 65 f0 6d fe 60 88 1e c8 b2 0f b7 e1 de ba 5f 69 84 bb 82 db b9 51 b5 6d c0 9e 18 30 8b 1f 48 15 94 3b 9f 33 5d bd 0d 27 ca 76 1f 96 60 0b ea 8d 98 47 a7 f1 14 10 6b 2f 2f 46 fd 05 82 c9 1a af 9a 73 89 37 2c c2 c6 fc f8 2d 63 ea 89 05 66 9d 67 5e 46 98 55 22 97 33 cd b7 39 19 36 3c 82 00 21 31 e6 25 58 5c 1d 06 9e da df 17 e2 07 91 d8 cf 5d 82 6e 9b de fe 42 ed 7d 52 db 16 0e d1 bc 64 ce 71 e3 1b 5c 2b 8b 07 9a b9 2f 1b b9 8d 2c be 38 e2 24 de fa d7 a5 e4 46 2e 35 a6 a7 85 8d be aa 57 43 57 f2 ea 75 1b 1a 82 7b 47 da d5 c5 8d 5c d6 6c d6 cb 99 8f 04 6a d3 Data Ascii: \z2yXmc3Df?\5>=y/[1-1Xem`_iQm0H;3]'v`Gk//Fs7,-cfg^FU"396<!1%X\]nB}Rdq\+/,8$F.5WCWu{G\lj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49798	142.250.186.100	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	958	OUT	POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=187711794.1730142868&auid=1831589210.1730142868&npa=0&gtm=45He4ao0v78713577za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&tft=1730142867929&tfd=11754&apve=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:29 UTC	477	IN	HTTP/1.1 200 OK Vary: Origin Vary: X-Origin Vary: Referer Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: text/html Server: scaffolding on HTTPServer2 Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Access-Control-Expose-Headers: vary,vary,vary,date,server,content-length Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49797	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	623	OUT	GET /images/mv/slide/panel_7-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:30 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/jpeg Content-Length: 744197 Connection: close Last-Modified: Wed, 03 Apr 2024 03:11:01 GMT ETag: "b5b05-61528927ffb40" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: e4 cd 33 ad ad 2f e4 8a e6 6b 28 4f 6a d0 f2 bb 98 0a aa a6 c0 17 3e 9c 8b 0a 7d ba aa d3 af 40 56 69 64 b3 b4 ce dc f6 59 72 17 02 5b 56 83 84 88 e4 02 d1 c6 45 11 18 0a 89 96 95 15 d8 f4 d4 44 bc 03 fb 96 35 1b 87 f2 4c ae 16 51 75 88 bc e0 f2 72 52 92 2a 48 92 44 e7 92 ab c7 20 2a 0a 91 e8 35 a7 07 3d f8 dc ad 4c 1f 1b 7f 6b c1 b5 c5 f9 16 69 6f 2e 6d ee ee 92 38 7c 82 0b 2c cd d5 c4 b6 43 e9 e3 b3 31 1b 79 c3 5b 57 83 46 bc 55 4b 0d b8 d5 86 bd be 0f 75 6d ce 7a c4 fc 0e 67 ed 94 28 76 6a 93 d7 2d ea 18 be 37 89 c1 67 ef e2 c6 c8 22 8a f6 04 9d 71 9c 8c 82 25 49 28 5e 27 35 e5 11 e5 b5 77 1f 76 bd 0e 2f 6d 5e 2b bd af 0d 4c 1c f6 f7 3f 96 ba 65 3d 42 0e ba 8c 9c 49 19 df ee d4 b1 96 98 f8 83 db ba d6 a4 ff 00 b4 6b 3b 33 5e 80 b7 2a 55 77 f8 ea 88 60 Data Ascii: 3/k(Oj>}@VidYr[VED5LQurRHD 5=Lkio.m8\|,C1y[WFUKumzg(vj-7g"q%I(^'5wv/m^+L?e=BIk;3^*Uw`
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: d9 bf 10 d5 3f da 69 47 f7 2c 1e df 95 37 92 63 ae 23 56 ca 34 46 ad 2a 5e 08 c5 b3 14 21 97 bd 22 fb 96 3a fc f4 f4 db d7 5c e9 a8 2d d2 35 5f fb 49 e7 9e 51 90 83 ea ac 66 76 9e 09 09 59 de f6 61 dd b6 a4 ea 19 56 f6 d3 73 24 37 0c 0f 37 51 58 bd ab d0 6b 5a 2c 19 b6 d8 18 b5 5e e5 c4 48 b3 41 24 36 67 b7 6f 1b 89 ee 71 f0 b0 63 ce d6 43 5f ae c6 cd ca 85 4d 4a 7f 0d 9b d4 98 0b fd 9a be 68 7c 70 88 b2 93 5b 3d bd c5 cc 0b 67 16 2d af 38 c5 dd 57 0d de e2 43 72 6e 9b ed d3 53 73 4a 69 fc de a8 f4 0c 8d 9e 56 6b de d2 1c ad f4 89 db 69 65 b7 96 1b 28 9d 66 46 0a 04 2a 47 16 56 5d fe 3d 74 26 d0 a2 96 e9 5f 9d bf ec cc bf ee 0d 85 cd 87 8f cb 03 d9 e5 97 9c b6 b3 4f 2d d5 e2 5c 40 a3 b9 da 06 48 f9 96 27 db 45 21 7a e9 d5 f7 9f 43 3b 25 d3 6f c9 ff 00 13 Data Ascii: ?iG,7c#V4F^!":\-5_IQfvYaVs$77QXkZ,^HA$6goqcC_MJh\|p[=g-8WCrnSsJiVkie(fFGV]=t&_O-\@H'E!zC;%o
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 34 1d 69 f6 eb 2f 75 ee 3f 1d 59 af 07 0e f6 68 71 7e 3f 34 96 24 cd 06 2f f3 96 12 bd eb c3 dd 8c ad 6b 5e 29 ed 2d 51 cb 5f 33 6f 77 c8 ec f2 cf 72 bc 74 84 93 af a3 ff 00 b1 66 6c 25 8a c1 2f ed f1 98 c1 14 47 ea 9e 78 ae 25 95 56 18 6b de 59 0a 21 e2 8c 3a ea 2d cd 67 86 ec 5e c8 ca db e8 49 0e 6b 21 0d d4 96 f0 5b e1 e1 1d a1 73 cb f5 07 8d 08 af 6e 83 d9 b9 a0 1f c3 58 ba a5 d0 bd f6 fe b5 f5 1d 7f 95 cd e0 fc 76 ff 00 31 90 16 a5 da e6 25 b3 44 ba b8 64 90 5c ca 12 18 4c 84 02 02 73 f6 d0 1d b4 2a ce 52 1d b9 1a 85 bf 50 bb df f5 5c d7 36 fd a9 f1 2b 35 b9 7a c9 1e 42 e5 9c a1 4a 32 54 2d 78 f2 a3 1f bb 49 3f 00 9f 7b 95 f9 5b ef 32 30 35 ad b1 82 e0 c2 d6 a2 f7 e8 2f 9a e2 73 6b 74 e5 26 68 e1 99 42 31 09 cb a9 fb b7 d0 9a ed 1e 82 87 67 8b 6e f5 Data Ascii: 4i/u?Yhq~?4$/k^)-Q_3owrtfl%/Gx%VkY!:-g^Ik![snXv1%Dd\Ls*RP\6+5zBJ2T-xI?{[205/skt&hB1gn
2024-10-28 19:14:30 UTC	18	IN	Data Raw: 5d 6d ec bd 9d 79 2c d3 62 b7 3a a5 26 1d a5 7a 01 f9 Data Ascii: ]my,b:&z
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 0d 9f 93 f8 dc 4b 86 bc b9 06 da ca 71 91 8b b6 e8 25 0d 39 ed 09 6d e4 04 39 59 00 1c 95 4e cd d4 6b 4e 55 cb c2 f6 23 1a 2e 3e 57 b9 76 8f 06 f3 1b e4 f8 a9 b1 96 93 5c e4 6d da fe 77 22 ed 47 b2 56 b8 96 4e 21 9e 20 07 b9 c7 12 c4 0a 13 be bd 7f 6b ee 2a e8 a5 fd c7 1f b9 ab de 95 6a da 82 de 40 55 99 18 6e a4 ab 0f b4 1a 6b ac e7 21 9a de d6 69 e1 b8 96 08 9e e2 dd 84 90 dc 14 1d c5 60 08 04 38 f7 74 3d 0e a5 f1 a6 e6 24 d2 bc d6 4a 27 00 39 3f 1f c4 64 a6 8e 7b bb 7a 5d 44 15 56 e5 0f 17 28 0d 42 38 dd 5c 7a 6e 35 cf cf ed b8 f9 1c b4 6b ed fd cb e3 7d ce 38 bb 7c 71 5c 96 0a c2 da 0c cd a4 cd 2d bf 05 28 26 b7 94 f6 e5 b5 92 ac 7f c2 7f 6b 75 aa 8d 65 7f 6e ab f7 57 f7 23 7f f7 96 b6 2c e1 40 57 91 e1 e0 ce d9 3d 8f d5 b5 bf 09 7b d0 c8 47 35 2c 01 Data Ascii: Kq%9m9YNkNU#.>Wv\mw"GVN! k*j@Unk!i`8t=$J'9?d{z]DV(B8\zn5k}8\|q\-(&kuenW#,@W={G5,
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: d6 56 6d 96 9a 01 7b 6c 64 d6 69 74 5e 6b 5b c3 35 6e 2a 80 c4 22 6a 15 92 26 0d c9 f9 1a f2 52 bf c7 4d 5f a6 a6 57 b4 74 12 cd a0 b3 2f 71 0c 71 ca ce b2 08 79 16 00 2b 7b 0d 28 c3 71 d7 7e 9b 75 1a 1d 98 59 be 83 31 8f 6e b3 01 75 14 92 db db 32 35 d4 0a 78 34 91 09 01 95 43 8f 91 9a 33 ed 3e 87 a6 b4 ad 92 b2 6c a5 76 b5 46 da 6f 3a b3 31 5e 59 e2 e2 37 76 b9 89 e3 b9 c8 64 b2 71 2d c5 c8 81 01 ff 00 a7 dc 72 a8 94 c6 c0 37 7b 66 71 5f 5d 7a 17 f7 69 55 a4 73 7e 1b 59 c4 ed 4b a6 93 e4 c6 3d f4 89 63 77 14 73 48 b6 17 57 05 6e ad 23 e4 2d ea 87 95 bc a9 1f b8 10 bc 99 47 a8 1b 57 7d 71 56 dd 3b 9b 2a be a4 f8 ab a1 2e 16 fe 12 23 37 16 89 21 87 bd 1a b0 fa 79 78 ac 8a a5 ff 00 12 fc c3 8d 19 7a e8 dd b7 e6 69 ca 92 aa 79 90 3b 4b 5b cb c7 75 b2 b6 79 Data Ascii: Vm{ldit^k[5n"j&RM_Wt/qqy+{(q~uY1nu25x4C3>lvFo:1^Y7vdq-r7{fq_]ziUs~YK=cwsHWn#-GW}qV;.#7!yxziy;K[uy
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 32 a8 fe a8 f8 32 ef 4e ba f0 1d 19 9f 27 06 d6 9d 46 4b 7c f8 d8 d8 62 af 05 de 32 75 30 dc 40 2a eb 27 10 78 bf 62 61 e8 a6 85 7a e8 48 bb 45 9e 86 c2 ce 4b 0f 29 c4 c7 3c d6 ab 6b 93 b7 8c 0b 5b d8 02 02 78 80 15 e2 91 3a a8 e8 63 7e 9a 2c 61 7a 5a af 3a 19 1b fb cb 88 f2 ad 0c b8 98 e0 bd ef 13 2d ab 46 b2 5a cf 11 fc 0a 3e 6f 78 eb c4 d7 d4 53 52 ec d6 4a aa 69 17 be 45 82 c4 e4 65 b2 cc 72 b8 5b 67 4e dc 82 33 4b 91 2c 2b 44 05 e8 c3 bb 18 1c 5a ab ef 02 a7 7d f4 52 ce 05 4e 56 ad 0d 12 5d e3 b2 49 66 b7 98 cb 9b 5c c5 aa 14 79 df 81 b6 b8 e6 87 da c5 14 94 49 14 1f 74 88 db ec 69 a8 e4 ae e5 06 97 49 e1 60 c4 5b 64 4a 79 15 c4 79 38 64 89 5e 56 5b db 59 8f 19 89 72 49 f7 ff 00 36 f5 0d 4e bb e9 da 9b 2a 9a d5 17 54 eb 5f 21 19 1c 15 e9 58 ee ac 22 Data Ascii: 22N'FK\|b2u0@'xbazHEK)<k[x:c~,azZ:-FZ>oxSRJiEer[gN3K,+DZ}RNV]If\yItiI`[dJyy8d^V[YrI6NT_!X"
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 09 c9 9a 25 04 85 f6 91 bf a0 3a 72 c9 49 76 af af f1 1c d6 57 8f 6d 1a 5d 47 95 32 13 18 70 b3 c7 fd 40 41 07 63 fc c2 ba 6d b1 25 5e cb d4 73 e2 b2 4d 32 95 4c b1 8f 89 e4 45 da 29 2d 51 4f 5d 24 27 b7 c0 21 c7 5d c8 97 62 d6 db 36 66 e7 2a b1 fa d4 50 66 00 0e 5f 3f 4e 9b d3 4f 22 c7 48 12 e3 1c e1 2d 22 b9 c4 e5 25 92 49 14 46 cf 7e a0 09 82 13 ca a2 40 7d 0f 4d 0c 37 43 e8 65 ff 00 70 f1 99 28 bc 6f 2d 74 f6 77 f6 f6 51 43 6c b1 ac 97 a2 58 84 82 7f 7b c9 1f 26 e4 08 65 03 4f 8e 37 93 78 db fc a7 97 3f 01 75 0d 3a b2 4a a3 ef 50 1a 9a fa 0f f8 e7 ff 00 db f2 3c 7f 7b fb 3e 63 c8 3a f7 91 e5 09 a6 26 37 a9 d3 00 1b 91 4c d6 2f fe 5b bf fe d6 ba f3 f9 bf fc f4 f9 9d fc 3f fe 0b 87 a8 eb ae e4 70 b1 4e 98 86 d3 d7 44 01 d4 d1 03 3b 40 1d 4d 31 89 4d 00 Data Ascii: %:rIvWm]G2p@Acm%^sM2LE)-QO]$'!]b6f*Pf_?NO"H-"%IF~@}M7Cep(o-twQClX{&eO7x?u:JP<{>c:&7L/[?pND;@M1M
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: ab 74 ed 65 42 c7 e4 1e 59 e3 77 77 69 7f fa b6 77 c7 8a 5f f7 88 92 4c 8b 58 c8 08 9f 84 a4 d6 44 b7 94 87 64 75 2c b5 24 1e 35 d5 a9 b2 cf 43 75 55 5a ee ab cf 52 92 1b 1b cb dc b4 50 e3 ed 99 ee 2f 9d 16 3c 7c 47 df 29 7a 32 2a 53 7a b3 74 a7 f0 d7 23 ec 4b 57 79 4b 22 2d d2 e4 6d be 86 f6 dd 63 b8 59 25 ed a4 6b c4 21 72 2a 8f 1d 79 6d 24 75 23 ae e7 57 1b 48 8d a9 d8 3d ef ec 3e 9e 1b 3c 95 b4 92 c3 00 11 19 97 ff 00 33 0b 6e 63 92 22 db 50 8f 6b 23 7a 0d 67 5b 98 ee 7b 9d 90 4e 0b 2b 82 c6 32 64 2f 2d 2e 67 b4 86 46 e5 67 0b 85 59 22 78 d8 20 95 8f b9 09 97 86 ea 78 ff 00 1a 68 e1 8d c5 3e 4b 7e d4 94 b4 5f fe d9 3f 90 41 04 16 d3 78 e7 eb 78 4b fb be e5 a1 ee 8b 49 a3 c8 c7 ec 32 58 5d 16 4e 33 85 21 7b 7c a8 db 57 5d 7c 0e 5c c1 d5 c9 c7 75 c6 92 Data Ascii: teBYwwiw_LXDdu,$5CuUZRP/<\|G)z2Szt#KWyK"-mcY%k!rym$u#WH=><3nc"Pk#zg[{N+2d/-.gFgY"x xh>K~_?AxxKI2X]N3!{\|W]\|\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49801	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	623	OUT	GET /images/mv/slide/panel_2-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:30 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/jpeg Content-Length: 233663 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:42 GMT ETag: "390bf-5dcacb9213480" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 2d c3 15 78 2c 5a dc 8d 2b 5b 5a d3 05 c7 6d 9b 91 ad 6b 69 96 0b 95 d9 a9 1a b6 f6 c0 0c 06 2b 95 d9 a8 d9 db 2c 75 48 09 18 2c 5a ae ce c6 dc 36 31 40 b9 65 a5 af 4d 66 d4 38 47 55 32 17 e5 ab c1 22 64 1b 60 02 a9 91 e8 84 ca e5 3c 36 e2 b9 2d 46 6d 5a 64 2b 71 8b 4e 30 e0 b5 94 33 d1 e8 aa e5 56 e2 1c 0e 0b 15 65 66 ba 11 53 82 36 19 6e 2a a6 55 21 b6 ab 72 53 26 48 2d 69 c1 65 72 5f 40 0e 08 64 a6 21 42 aa 29 dd c4 2a a5 ad 46 45 cc 3e 6a ad 4a 2a ba 20 73 0b 48 89 d0 36 b8 26 44 46 13 54 0f 0d a2 00 aa 21 79 54 41 20 c1 6a 22 a3 db fd 0b 42 33 19 2a a6 0c 30 9c 95 c9 83 0c 0a e5 30 8d d0 1f 62 d6 4c 22 74 04 1c 96 a5 67 07 47 19 c0 73 52 d1 29 8d 67 2a 5f 4c 05 2d 54 d0 43 57 29 49 1a f6 90 f4 59 aa bc c8 85 54 54 12 30 03 ed 5d 75 29 f6 67 c9 ed 53 Data Ascii: -x,Z+[Zmki+,uH,Z61@eMf8GU2"d`<6-FmZd+qN03VefS6nU!rS&H-ier_@d!B)FE>jJ* sH6&DFT!yTA j"B300bL"tgGsR)g_L-TCW)IYTT0]u)gS
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 5d ac 8e 9c d7 11 d6 3b 2c f1 5f 77 18 98 78 50 bc 71 5c ec 6a 20 33 69 34 aa c6 5a c0 74 f5 56 d3 05 61 d4 92 65 0a e6 25 d4 ca 32 29 8a ce 55 3c 06 a5 6a 5c a5 68 42 40 5d 7c 7a 39 54 86 43 45 f3 fd ae 0f 28 d6 b5 6a dc 46 e0 29 87 e6 0b c3 c7 c3 17 6a 87 72 db 9a e6 b8 53 07 0c 09 e6 bd 1c 9c 1f 23 8f 93 0f 3e df 2c a4 6d cb 67 63 7e 0f 2c 83 92 bc 17 a6 1e c6 c6 d4 d2 e0 c9 99 ca 8f 1f b5 67 c7 ab 1b df 82 dd bd d4 90 c9 2c 44 e4 6a 12 71 c4 bd 5d c7 6e df c3 f2 71 80 e1 5a 79 bc 57 a3 d5 e7 fd 2a f9 fe cf 1d b5 73 76 dd 23 89 80 35 c3 51 05 7b bd cf 7b ce cc 39 70 f0 fc de 79 b9 5d 3e 6b 97 b8 f3 5f 36 ed 6f 5a fa 7a 6b 88 ab 1c 9c d2 35 52 96 c7 33 68 ec c6 45 6a 56 7b 1f 6d 13 98 68 ef 61 5b 86 d5 3d cb c8 d2 d4 de b3 ac 57 99 fa 9d d0 61 ee 58 8d Data Ascii: ];,_wxPq\j 3i4ZtVae%2)U<j\hB@]\|z9TCE(jF)jrS#>,mgc~,g,Djq]nqZyW*sv#5Q{{9py]>k_6oZzk5R3hEjV{mha[=WaX
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: e5 e4 ad ab 5b 4a d0 90 bd 3a ea e1 6b 4e 1b 60 06 4b d3 a6 8e 5b 6e b9 1c 34 5e ad 38 9c 76 dd 3b 58 bd 7a 70 b9 da 78 62 f5 6b c1 18 bb 1c 18 17 69 c7 22 64 b4 5b 91 02 01 00 82 29 e0 64 cc 2d 70 f0 2b 8f 3f 04 de 7e 2d e9 bd d6 b0 ee 6d 4b 1e 5a 46 4b f3 dc ba 5d 6e 2b df ae d9 8a 33 5b ae 16 36 80 46 5a 68 b9 e3 02 cd be 74 2b a6 b5 1a 10 b7 25 d6 46 76 5b 62 ef ab 8d 4d 18 c5 75 d5 ce a6 0b d5 a4 73 4a 06 0b e9 6b 31 1c e9 55 02 01 00 80 40 20 10 08 04 02 04 76 4b 3b cc c5 88 25 18 2f 9d c9 1d 75 62 6f 0c ad 08 5e 5e 57 a3 47 37 7a da 02 57 87 77 ab 4a e6 37 1b a6 c6 e2 17 2c 3b eb 58 b7 57 4c 7b 48 aa d6 ba f5 6f 2e 7f 70 78 35 35 5e 9d 59 ae 4f 78 78 0d 22 b9 9f b1 7a b8 e3 95 72 57 3e 79 4f 25 ea 8e 35 1b 5a 02 18 4a c0 d2 a2 a7 63 58 b2 b1 6e de Data Ascii: [J:kN`K[n4^8v;Xzpxbki"d[)d-p+?~-mKZFK]n+3[6FZht+%Fv[bMusJk1U@ vK;%/ubo^^WG7zWwJ7,;XWL{Ho.px55^YOxx"zrW>yO%5ZJcXn
2024-10-28 19:14:30 UTC	18	IN	Data Raw: a3 e8 70 fd 37 1f 37 97 77 a6 d5 69 fc 3e 1d e2 1b 91 Data Ascii: p77wi>
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 0d ad dc 14 85 9a 0b 84 97 01 d8 c4 5c 3e 1a 85 eb f4 b9 bc ba 5e ee bc 91 3f d3 5d b5 ad b2 9f 75 ba 94 32 08 48 0d 8f 2a 91 89 3e c5 e1 fd d3 9f ea 9c 73 bd 6f 8a 74 cb a2 b0 75 fd eb af b7 e8 9a d8 f6 f8 00 6c c5 f8 6b d6 43 5a d6 f5 d2 71 5e de 3e 3f 1d 31 7e 0e 7b 6d 33 27 cd 7e 0b 38 db 68 fb 73 fd c8 24 35 a3 88 76 2d 3e e5 f2 b9 67 87 26 5d a6 d9 8e 3a f7 6f bb bc be 8e ca 26 ea 95 ae 31 d7 85 2b 9a fb 3a 6f 26 b9 72 da 75 75 d6 db 60 96 fa d3 6f 80 56 db 6f a3 75 70 74 b4 ab 9d ec 5e 4b 73 4b b6 26 5e 8d b0 4a e0 c9 2d f4 7f 85 3e 56 b8 f1 70 18 ae fe b6 f7 36 7f 92 be 7f 2c f8 fc 5c b7 7f 5c 46 fb c9 18 c3 48 60 b6 6b 18 46 42 ae c5 78 3d fc 5e 49 8f fc 64 8f 6f a5 3e 9e bf 36 75 c6 ef 1c 16 14 b7 79 32 02 d9 5f 10 1e 63 10 8e b9 f5 2b 86 f3 af Data Ascii: \>^?]u2H*>sotulkCZq^>?1~{m3'~8hs$5v->g&]:o&1+:o&ruu`oVoupt^KsK&^J->Vp6,\\FH`kFBx=^Ido>6uy2_c+
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: d1 43 db 5f c3 bb b7 71 9d 8f 3f 2b 76 59 70 e0 71 a1 02 81 9e 15 aa e1 c9 ea ce 2e 5b f2 73 fd 6f 3e 39 f3 74 f7 7b d4 3b 7d 8c 4e 75 1f 73 39 d3 6f 05 71 71 26 9e e0 be b7 1f 3c d3 8a 5f 8d ec f2 4e 1f 2d af ca 1b bb c7 05 a6 c1 23 26 76 97 1d 3e 61 c6 67 3b 57 fa 49 ed f8 e9 c1 65 fe d5 38 ed db 93 31 83 f3 e2 c6 fe 59 20 84 cd 2d e3 63 30 72 0e 22 8f 72 fc f6 db dd 39 2d 93 ef c7 fd de df 0f 2d 7a de c9 fb 6e d9 c2 6b 9b c9 73 8a ad 04 f1 79 2b a7 ad a4 96 ed ff 00 8f f5 63 9f 6e 92 4f 8a cc f0 7a 77 4f 63 9d 59 08 ae ae 4d 23 15 c7 db d7 c6 f8 af 1d cc cb 9f f9 1f e2 97 57 f6 4c 34 82 1a 6a a7 37 34 d2 ab 97 1f 5b b6 ae f6 f8 c9 5f 33 fd 5b bf 82 ef be 77 18 e1 c5 b6 86 3b 36 1e 0d 64 0c 02 83 c5 c4 92 be d7 ed 9a 67 8f 3f 0a bc b5 c2 dc b0 06 95 f6 Data Ascii: C_q?+vYpq.[so>9t{;}Nus9oqq&<_N-#&v>ag;WIe81Y -c0r"r9--znksy+cnOzwOcYM#WL4j74[_3[w;6dg?
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: fa 65 9f 01 2c 0f 75 c8 85 b8 68 04 83 c3 1c 96 3c 2f 97 8b 53 6e 99 63 df 6f 27 6c b5 81 91 33 d6 9a e6 76 c5 14 63 37 17 1c 7e c5 f2 79 39 76 d7 6f a7 e6 f4 69 c5 36 eb 7e 11 4b be f6 e8 af 21 b7 bb 63 7c ed a4 6f 1c 74 93 c5 7a 3d ef b6 6f 1a f5 36 f1 b7 5a 97 b6 76 9b 5d a6 de ef 7c 91 a1 d2 06 7a 56 ed 02 95 0d f8 43 47 37 38 e9 5e 9f 43 59 c7 a6 dc db 75 f9 7f 6f c5 9f 63 92 ef 67 1c fe 24 bc bc 6d a7 6d 19 9d a9 b7 3b 83 4d 35 0a 3f 53 8e a9 49 1f d6 c3 c1 78 75 db 1c 16 ed f7 72 7c ff 00 fe af ef e9 fc 1a 9a e7 93 13 b6 bf da 1c 01 b8 db f6 cb f6 8a cc d8 c4 1e d7 60 17 9b 6f ab 5d 36 ff 00 c7 a7 f8 2f 6d b6 d7 f8 b4 37 08 5b 67 15 b4 30 67 13 5c e9 5d c6 a4 53 ef 5e 9f 67 8b 59 35 d6 77 d7 ad 72 e2 da dc da 8f d3 11 db c2 f6 8d 52 ca 4b 1a 3f 78 Data Ascii: e,uh</Snco'l3vc7~y9voi6~K!c\|otz=o6Zv]\|zVCG78^CYuocg$mm;M5?SIxur\|`o]6/m7[g0g\]S^gY5wrRK?x
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 5f ed 37 4f ac 57 b2 7a b1 c8 fe 32 83 aa 37 f4 d4 d3 45 ec f5 f7 9c 57 1f e5 bf d4 e7 d7 cb 5c fc 63 bf a3 a4 b8 96 46 0d 45 ac 11 db 8e b5 cf de bb d9 e5 2e d7 e3 d9 e2 ed d1 b9 b7 da 8b 6b 60 dc 35 ba ae 79 1c 5c 73 5f 5b d4 e0 fd 2e 3f c5 e5 e5 df ca b3 ec e7 8e 5d cf e6 98 41 88 83 6f ab 9b 81 26 bf b1 7c 5f 4b d9 d7 7f 67 cf e1 d7 4f e3 f3 ff 00 a3 d3 c9 a5 9c 78 f8 f7 35 f7 17 37 3b cc b1 b0 d2 08 9a 23 0c e6 6b 57 38 fd c1 63 9f 9b 7e 6f 72 eb 2f d1 a4 9a e3 e7 f1 b7 fe 91 75 d3 5d 78 e5 bd ef 53 37 92 7f 8d d9 87 7f 76 d8 5e 7d a4 80 bd 5f bb 5f f5 35 9f 09 2b 3e b7 d9 7f 32 4b b5 c5 73 e8 cb 21 ca 56 16 b7 86 86 1a fd b9 af 95 a7 0f 9d 9b 5f fc a7 f2 8e 9f ab 8c c9 f2 79 0f fe 64 37 52 de c1 8e da 3f 23 5d b9 c6 c0 6b f1 69 0e 79 af d8 ba fa 3a Data Ascii: _7OWz27EW\cFE.k`5y\s_[.?]Ao&\|_KgOx57;#kW8c~or/u]xS7v^}__5+>2Ks!V_yd7R?#]kiy:
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 2f 42 f1 82 f3 ed 1b 8b b0 49 45 cf 0a b0 0a 40 a4 d4 2e 91 0c 71 5d 24 44 6e 38 2e 92 22 17 b8 d1 6e 44 53 99 fc 17 6d 35 66 d5 72 ef 72 eb ac 66 ab ca fc f1 5d 75 89 55 64 7d 30 5d 64 65 5a 49 30 e8 ba 48 cd aa 92 49 55 d6 46 72 ad 2c b4 15 5d 26 ac 5a a9 6f 77 69 16 e3 6d 35 ec 06 ea ca 39 98 fb ab 60 e2 c3 2c 4d 70 2f 8c 3d b8 b7 53 6a 2a 32 5e 8d 24 70 da bd 0a 5b 2f fc b7 dd 5c 9b bf e2 9b ed 8d bc ad d7 fc 32 38 d8 e7 44 f3 8e 81 2b d9 2d 40 cb 12 7f ac bd 38 d1 e6 ce e2 cf 7d ff 00 cb 55 8d a1 63 bb 7b 7e dd 6e 00 f2 be f6 58 e2 af 9a b8 9b 5b 88 da 28 0d 3e 0f e7 4c e9 f2 2c df e6 f3 2b a9 ac dd 7d 70 fb 26 3e 2b 27 4a f3 6d 1c 87 53 db 11 71 d0 d7 38 66 43 69 52 b8 d7 6d 4f 6b aa 16 5b 24 99 2b 12 bd 43 e9 5f 6c ec 7b d7 6a ee d7 f6 7b 1d ae f9 Data Ascii: /BIE@.q]$Dn8."nDSm5frrf]uUd}0]deZI0HIUFr,]&Zowim59`,Mp/=Sj*2^$p[/\28D+-@8}Uc{~nX[(>L,+}p&>+'JmSq8fCiRmOk[$+C_l{j{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49800	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:29 UTC	623	OUT	GET /images/mv/slide/panel_4-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:30 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:29 GMT Content-Type: image/jpeg Content-Length: 210938 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "337fa-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 60 35 01 2c b4 88 aa d0 69 1c d6 e4 66 b4 8f 2a 2d 05 00 ac 0a af 9a 40 cb 96 69 46 ca 0a 64 a1 45 48 02 51 29 1e 1d a9 8a 8a 28 0c a8 84 ea e9 5f f5 4d 9f f8 f6 ff 00 be 17 6f af fe e6 bf ea 9f d5 cf bf fd bd bf 95 7e 3e 25 29 07 fd a4 d0 e0 bd 0c 7b 34 85 d2 21 21 20 e0 bd 30 22 aa c9 91 1a a5 ea 18 30 03 1f c1 6b 58 32 a0 49 10 76 05 cb f3 41 9c 96 a6 89 c0 c8 bb f2 ef 55 42 41 c6 43 80 cf b1 2b da a8 30 67 38 57 4e 6e b2 d4 aa 04 09 e0 5f b3 35 2c ae 02 5a 74 81 9f 8d 13 18 6a 62 44 71 26 35 ae 26 bc 51 86 b2 28 08 62 43 61 fa 2b 0d 65 44 92 ee 3c a3 26 aa 59 54 40 c0 50 64 19 95 69 58 63 5c 00 fb 14 27 a9 d2 7a 8d bb 5a b6 fb 8a da 9f d2 73 89 5a b7 31 9e 65 e1 c5 bb 90 95 eb 91 80 78 1a 02 46 4b 97 97 4b e4 5a 80 88 61 db 8b a7 0c e5 a8 05 f9 e4 02 Data Ascii: `5,if*-@iFdEHQ)(_Mo~>%){4!! 0"0kX2IvAUBAC+0g8WNn_5,ZtjbDq&5&Q(bCa+eD<&YT@PdiXc\'zZsZ1exFKKZa
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: a8 8c 92 cb c4 ea 15 be ce b8 ec f4 69 5f 19 d7 40 fe 4d da 54 47 0e 4b 96 be 2b be d1 f0 17 2e 1f e5 48 90 c0 92 0c 7b f1 5e 8d 3c 3c db 5e 5a c0 81 23 21 81 60 d5 3c 95 61 74 db 9b 4b 17 2f 5e 20 05 64 c7 46 a0 72 70 38 2d 7c 33 8a 89 f9 49 d2 69 40 e4 ac c8 a9 7f 26 e4 4e 2e 38 fd cb 9e da 37 3b 2b 48 75 00 68 4d 43 53 b5 71 df aa bd 3a f6 b7 86 e6 2c 4c 8b be 55 c5 79 f6 eb 77 d3 b6 36 8d d8 ea f2 90 48 e0 bc fb 68 ef ae f9 3f 59 a8 ee 28 b9 d8 eb 2b 48 de 2e 6b 5e 0b 1b 6a dc ad 6d df cc 9a 64 eb 8e da af 67 44 2f 93 cf ec eb cf 7a eb 7a ec da 37 81 ed c5 5e b5 64 dc e3 9f c1 67 d4 e5 42 78 57 b5 52 62 2b 55 a8 65 55 61 2a 33 e1 9a 73 c8 7b fd 0d 86 d8 6e 36 b2 7d c5 a9 11 ba db 92 c2 e5 bc 62 47 35 ed eb d6 5d 73 af 99 e6 7e af 2f 66 d8 db 17 c5 f1 Data Ascii: i_@MTGK+.H{^<<^Z#!`<atK/^ dFrp8-\|3Ii@&N.87;+HuhMCSq:,LUyw6Hh?Y(+H.k^jmdgD/zz7^dgBxWRb+UeUa*3s{n6}bG5]s~/f
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: f3 13 86 6f 4f b9 74 d6 e2 2d 66 5d 7d 3b a4 6e 77 77 05 bb 70 33 9b 86 84 6b e2 b9 77 fd 8d 74 9c bd 3d 7f 52 ec fb 8e 89 ec 5b b6 c0 dc f5 28 0b 76 c3 35 91 f5 48 8f ed 72 5f 2f b3 ec 5d a6 67 87 d2 d3 6d 75 e2 79 7d 3c 36 7b 78 48 01 6f 47 f6 40 14 f0 5f 32 7d 0e bb b5 db 69 9b 5d 36 ee db 1e 5e b7 48 b5 62 1b 8d 72 0d 30 08 6c a4 25 4a af a3 f4 3e bf 56 9b db ac c5 f0 f0 fd ad f6 ba e3 e1 8e fb a7 ef ec ca 57 6d 11 e8 0c b1 20 85 f3 7e ff 00 d2 fb 3d 7b 5d fa af ec 75 ea ee eb db 8b fd cf 96 ea dd 42 5a 0c e5 2c 0b 47 91 5f 0b 4b b6 fb 67 6b 9a fb 5f 5b a3 9c 38 a1 ef 5e a0 23 0b 72 b9 13 2b 6c 41 cc b7 15 f5 ff 00 f6 7b e4 92 6d e1 e8 bf e2 7a f9 b8 f2 f6 af ff 00 a8 fb ed d5 af 46 46 36 6c cd bd 51 6c 00 e5 6f ee 7f 94 fb 5d da fa e7 d6 7f 0e 32 f9 Data Ascii: oOt-f]};nwwp3kwt=R[(v5Hr_/]gmuy}<6{xHoG@_2}i]6^Hbr0l%J>VWm ~={]uBZ,G_Kgk_[8^#r+lA{mzFF6lQlo]2
2024-10-28 19:14:30 UTC	18	IN	Data Raw: 49 27 24 14 d7 00 99 19 2d 32 91 a2 7d 68 cb af 6b b4 Data Ascii: I'$-2}hk
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 91 aa fa 1f 5b eb e7 97 97 bb bb 0f 4e d5 93 6e 8b ec e9 a4 d5 f2 f7 df da ba 2c db 95 d9 69 18 71 5d 18 7a fb 6d bc 6d 41 6a 39 da e6 df ef 74 c0 80 58 05 9d b6 c3 5a eb 97 c9 75 21 fc 83 23 29 11 10 be 67 77 66 5e fe ad 30 f0 c4 22 2f 68 b2 1c c8 d0 e2 57 2e 9e bb b5 77 ec df d6 3d 3b 50 16 21 a2 38 fe e9 2f a7 ac f5 8f 9d b5 cd 7a 5d 33 a5 dc bf 70 4e 6f a4 60 ba 6b ae 59 b7 0f ab db 6d a1 66 00 10 c0 2e f1 c2 dc b9 7a 9f 50 8d 98 11 1c 4a e7 be f8 6b 4d 72 f8 ae ab 7e 7b 9b 84 3d 0b f7 af 9d db d9 6b e8 75 69 87 9d fc 60 25 da bc f5 e9 95 43 6e 1a 82 9f 14 60 7b 34 8e da ac ce d5 aa 7d 47 b3 41 b7 1f 8a 30 3d 9a 47 6e 1d 88 ed 4f aa cb 41 b7 7c 43 26 41 6a c6 d8 1c 45 56 a6 a3 d9 63 6a fd e5 33 51 ec d6 3b 2e 4b 53 46 7d 9b c3 65 85 16 bd 19 f6 6d 0d Data Ascii: [Nn,iq]zmmAj9tXZu!#)gwf^0"/hW.w=;P!8/z]3pNo`kYmf.zPJkMr~{=kui`%Cn`{4}GA0=GnOA\|C&AjEVcj3Q;.KSF}em
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: b3 4a 48 42 22 0e 3e 01 48 91 94 4b 51 11 59 20 a6 a4 96 ee 59 44 5b f0 51 2c 16 09 d3 83 26 50 38 27 28 2a 54 4e 33 ee 56 72 85 3c 32 49 14 40 0e 33 a7 6a 25 24 af 94 31 5a 90 1e 4e 94 54 64 a3 a7 14 c4 61 b0 4c 07 de a8 8f 2c 31 5b 64 76 a9 02 43 d7 05 04 9e 3c 95 78 29 22 8a 08 23 3e 09 0c e4 07 0e f4 c2 ca 51 fb 66 9a 18 ce 15 fb d2 63 9a 70 38 71 54 a2 b0 95 ac be 2b 52 8c 30 9d 81 54 a9 18 ca cd 19 dc 26 5e 13 29 d9 18 80 40 fd ca 4c a5 61 89 32 c1 8f cd 6b 2c e1 94 ad f0 e7 da b5 28 41 80 7e 44 63 97 34 ca 51 38 63 8a d6 58 a5 a2 45 8e 63 20 cf da a9 54 8f 57 da 10 8f fe ef e8 8c 70 df ed bb ff 00 ad 05 d7 eb df fc 9a ff 00 aa 38 fd 89 ff 00 8f 6f e5 7f a3 f3 cb 5d 36 16 ae d1 eb f5 0e 07 9f e0 bc 3b 77 5b 1f 42 75 cc f2 ed 8d a8 ca 1a 4e 42 b5 7a Data Ascii: JHB">HKQY YD[Q,&P8'(*TN3Vr<2I@3j%$1ZNTdaL,1[dvC<x)"#>Qfcp8qT+R0T&^)@La2k,(A~Dc4Q8cXEc TWp8o]6;w[BuNBz
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 72 79 3d a0 e1 81 7c f0 e6 57 9a f2 f4 49 87 94 cc 49 ec 7f c5 63 d5 ac 99 89 32 20 b1 24 57 b5 6b 55 6f 06 22 70 20 00 18 0c 0b a3 03 26 c3 cd 1a c4 91 c3 ec ca c1 c9 4a 24 01 10 1c 8c 87 c9 d5 8e 19 b4 cc 64 08 11 04 45 9f 0a a6 6a 2d e5 a6 89 16 71 e6 03 0e 4b 2d 98 8c 65 20 18 08 e5 c4 a7 6b 46 41 89 a5 3f ee 8e 0b 1c 9a cd a0 09 38 64 cb a4 f0 cc a0 5b a1 c4 00 e4 72 c9 5a b5 60 b9 17 25 c0 04 8a 03 9a d0 cf 0c f4 97 20 d4 81 57 19 a5 91 1b 62 46 34 76 39 e2 d8 a7 2c 86 3a 8b 80 d9 b7 35 64 88 c0 3b 9e cc 54 27 0b 63 aa 44 c6 ac 72 cd 39 e4 ec b0 08 94 7c be 62 03 8c 93 90 d8 44 ea 69 0c 30 2e a3 f2 61 f4 c8 35 7c 7c 15 2f 0c d6 91 05 c1 62 33 07 b5 2b 2b ad 1f 8e 3c 68 91 95 88 dc 00 3e 67 10 c1 9d 14 c2 02 40 91 91 cf 10 9a 25 44 83 c5 80 c7 2f 8a Data Ascii: ry=\|WIIc2 $WkUo"p &J$dEj-qK-e kFA?8d[rZ`% WbF4v9,:5d;T'cDr9\|bDi0.a5\|\|/b3++<h>g@%D/
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: ff 00 f2 78 3e c6 b2 4e 18 f4 9d dd bd dd c1 6e 52 63 23 e6 00 1f a7 92 eb db db 23 1d 7a 5b c3 bf 75 7b 6b 6e 73 b3 02 40 94 9a 72 1c 3b 69 d8 bc 1b 76 cf 6c d7 b7 4e bf 5d 78 6f 6a fe d6 fe 31 11 80 02 30 6c d8 50 8e 0b c3 db d9 7d b3 1d b4 d7 8c 56 57 6d 03 7a 12 7f dc f4 6a fd c8 fc db 79 17 49 6b be de e0 5a 81 8f d4 4b b9 e1 c1 72 db bf 6b 1d b5 d3 0f 3e f4 a3 30 5a b5 24 e5 8d 15 32 2e bc a6 7b 43 7a d1 16 9c c6 2d a9 b8 83 50 cb a6 93 9c b9 db 85 58 b1 38 da 89 6d 32 6a 3f 0c 97 3e cb ca eb b5 d7 66 d6 90 26 64 1c 9f 2a e3 b6 df 0e 92 3a 8c 0e 8d 62 b2 27 b2 ab 94 bc e1 5e 23 d2 db 74 e9 1b 62 45 c1 cc af 36 fd bc 8d 79 e5 57 76 31 b7 30 46 39 fe 08 9d 99 8b 6a f4 ac c6 2c 00 c0 8c fc 17 9f 61 ac cb 1b a6 30 26 95 c1 df ee 5a d7 97 4f 56 32 dc 08 Data Ascii: x>NnRc##z[u{kns@r;ivlN]xoj10lP}VWmzjyIkZKrk>0Z$2.{Cz-PX8m2j?>f&d*:b'^#tbE6yWv10F9j,a0&ZOV2
2024-10-28 19:14:30 UTC	16384	IN	Data Raw: 3e 42 68 99 55 9c ab d9 bd 67 a9 6f bf cc 3f 93 b8 9d df 4a c8 95 bd 4d 43 5a 85 4a ac 78 fb 7e b3 d6 77 71 36 ae ee e7 3b 73 0d 28 96 62 0a 32 70 f6 b6 30 f4 e0 01 46 4b b7 58 56 56 14 24 0a 42 9d 49 40 85 23 0a 4a 0c a4 60 29 28 04 a5 80 14 32 b1 10 a0 b1 10 ac 25 88 04 a5 88 05 23 10 0a 47 e9 85 21 a0 29 0f 4c 29 0f 4c 29 11 b4 38 29 24 d9 1c 15 84 47 6f 14 61 20 ed 47 05 61 65 27 6b c9 18 39 49 db 72 56 16 52 76 fc 91 ea 7d 92 76 e5 1e a7 d9 06 c7 24 7a 9f 64 9b 05 1e a7 d8 bd 2e 48 f5 5e c8 96 de 27 10 8f 56 a6 cc a5 b2 b4 7f 68 58 bd 71 a9 d9 59 4f a6 59 96 4b 37 a6 56 e7 75 8e 7b 9d 1e 27 05 cb 6f ab 1d 35 fb 55 cd 73 a3 cc 60 b8 df a8 ed 3e db 9a 7d 32 f0 fd ab 8e df 52 bb 4f b5 18 4f 65 31 fb 48 5c 6f d6 76 d7 ec 46 32 da c8 65 55 cb 6f ae e9 3b Data Ascii: >BhUgo?JMCZJx~wq6;s(b2p0FKXVV$BI@#J`)(2%#G!)L)L)8)$Goa Gae'k9IrVRv}v$zd.H^'VhXqYOYK7Vu{'o5Us`>}2ROOe1H\ovF2eUo;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49805	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	426	OUT	GET /common/images/header/restaurant.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/png Content-Length: 1758 Connection: close Last-Modified: Thu, 10 Mar 2022 01:32:33 GMT ETag: "6de-5d9d3302aee40" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	1758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 16 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDRapHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49806	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	422	OUT	GET /common/images/header/bar_bg.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	233	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/png Content-Length: 7808 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "1e80-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	7808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 03 00 00 00 b9 cf 02 9f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRPPtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49804	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	426	OUT	GET /common/images/common/bg_texture.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/png Content-Length: 11553 Connection: close Last-Modified: Fri, 08 May 2020 07:22:37 GMT ETag: "2d21-5a51ddc95e940" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	11553	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6e 00 00 00 6e 08 03 00 00 00 f1 85 d6 c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRnntEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49809	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	421	OUT	GET /images/mv/slide/panel_1-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/jpeg Content-Length: 293051 Connection: close Last-Modified: Tue, 13 Feb 2024 00:07:05 GMT ETag: "478bb-611382ca60e0d" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:31 UTC	16298	IN	Data Raw: 9a f2 cd 67 f6 7e 53 85 89 c8 8a c9 e3 47 53 f6 bf 95 9f 83 98 8d 09 05 f2 cd 94 fd d5 fc ae b7 b1 32 03 c5 21 de a7 fd 29 f9 5f 1e 93 6c 83 22 fc cb 95 3f 75 7f 2b a3 d3 2d 1c 89 39 17 2e a7 ee 9f 95 d0 e9 56 9e 82 bd aa 7f d2 af e6 2f 8f 49 b2 ff 00 2f 7b 95 3f e9 4f cc 59 1e 93 b6 6f 91 c1 a1 e6 9f ba bf 98 94 3a 1e d0 54 5b 04 f1 c4 b2 7f d2 9f 98 b7 f9 36 d3 47 f9 60 85 3f 74 fc a7 fc 93 68 63 fe 54 78 e1 4f 62 7e ea e2 cb 5d 17 68 25 ab c9 8e a1 9b 04 fd 26 2f 8f 49 da 89 3f 97 17 e2 c1 67 f5 57 13 fe 57 61 d8 db 8f b1 3f 46 2c 1d 2b 6f ff 00 77 1d 43 02 ca 69 89 7f 2e b6 cf a2 2e 39 26 aa e8 ec 6d d3 c2 28 9a 89 7e 0a d9 c6 3e e5 34 48 6c 61 fb 20 3a 6a 88 ec 6d 8c 22 07 0a 22 24 76 51 05 84 7b 91 52 8e c6 23 11 54 d1 28 ec a3 fb 3d 88 25 1d b4 1d Data Ascii: g~SGS2!)_l"?u+-9.V/I/{?OYo:T[6G`?thcTxOb~]h%&/I?gWWa?F,+owCi..9&m(~>4Hla :jm""$vQ{R#T(=%
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: ff 00 a5 52 1c e3 09 d0 3e a3 9e 4e 13 05 12 b7 28 d4 61 27 a8 ab a6 22 5a bf 5a 2a e8 4c 44 d4 e3 4e f5 51 3c 9a 94 c4 8f a9 04 81 6c ea 31 6c 02 a2 b9 0a 8a 7c a2 8f 9b a0 3c b7 90 24 d3 80 c6 88 24 23 a4 4a ac 2b 47 c9 54 57 53 2f 10 76 c5 f3 0b 2a 99 d2 63 83 1e 27 13 c9 02 80 8e b1 a8 36 44 8c 7d 88 32 61 18 96 20 02 09 a0 5a 0a 10 3a 88 ad 1c 77 7d 4a e2 2d 16 e3 8f 06 60 31 21 04 cc 8e 82 1d 8b b0 67 a2 8a a6 71 b9 28 91 00 cf 4a 29 69 0e ce d2 e3 07 00 05 ce b5 1b 1b 36 3c 24 8e fe d5 9b 5a 67 ed ec b8 a8 ef e6 b3 aa cd 88 61 80 24 d4 f0 52 d2 32 ad 42 2c f2 18 54 e6 b3 ad 32 2d c1 e4 00 a6 aa 00 a0 cc b3 6b 49 65 15 78 b4 75 30 c3 25 05 d6 9b 5d 28 47 cd c9 41 7e 98 99 b1 04 8c 41 18 20 cb b5 10 d4 c9 05 c2 d4 4b 11 9e 2a 0b a0 46 07 07 60 4f 14 Data Ascii: R>N(a'"ZZLDNQ<l1l\|<$$#J+GTWS/vc'6D}2a Z:w}J-`1!gq(J)i6<$Zga$R2B,T2-kIexu0%](GA~A K*F`O
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: e9 ef e4 4c 33 83 2c 39 a0 c9 b8 1a d9 0e 63 c4 f0 0a 8f 2a fc bc d2 7d 61 d5 e6 00 90 10 b8 cf 4a 79 aa df 11 57 a2 21 b8 e9 fb fe b3 d7 b7 16 67 0e 99 6e 17 00 b8 05 26 7c da 88 44 d6 4d c5 2d 18 9e a5 ea 3b 2e a7 eb fe 99 7b 69 70 dd b5 23 b6 8b e1 5d 4e dc 99 59 3e 11 e8 e2 cd d8 f5 6d e5 d9 46 42 12 36 b4 cc e0 5a 24 10 39 05 96 9e 37 eb 3f 17 ab 3a 93 0f f6 ec e7 b0 2d f3 e3 15 d1 fe 5c 5a 03 ae db 9c 9c e8 b5 36 39 46 98 a9 5a 8e 83 d5 30 9c bd 79 e9 c8 c3 c5 a6 13 9c 5a 84 78 b1 50 ae ac 5d 07 55 b8 d5 eb 39 71 27 27 59 57 9c 7e 6b 88 88 f4 bd 3e 20 45 da 0c 1c 37 b4 ad f2 cd 79 8e e8 91 76 24 03 48 f8 8f 7f 05 d1 96 0d f0 00 91 90 a7 ed 0a 82 ac 17 ec 75 7e 1e c0 0e e2 2f 8d 47 b7 24 a4 48 b6 99 50 ca 24 d4 91 47 e4 10 53 76 11 f2 cc a2 1c 0c 62 Data Ascii: L3,9c*}aJyW!gn&\|DM-;.{ip#]NY>mFB6Z$97?:-\Z69FZ0yZxP]U9q''YW~k> E7yv$Hu~/G$HP$GSvb
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 88 8f 2c 90 2a e7 35 ca b4 f0 cd b8 07 7c 1b f6 62 5e 99 e6 ba fd 32 f5 1f cb ab 66 de df 79 70 10 0e bb 6d 9b d0 9e 6b 9f 4d 47 71 18 93 10 c0 b1 a9 ad 1f 88 51 55 ee 6e 69 14 20 98 96 02 39 03 92 23 c3 7f 30 05 c8 fa a3 7e 09 2f 13 1d 4e ff 00 b2 1b 17 5d 39 f1 9a e5 2c 6d bf 11 70 46 52 d3 6c 53 1a d7 9e 4b a6 e2 37 3b 5d bd ab 66 16 ac db 0c 65 e2 96 04 fb 7e 27 d8 b1 6a b4 db e0 45 eb d1 1f 38 94 80 d3 9f e9 5b 88 d8 74 db 84 c5 a8 69 51 4a 36 0b 35 5b 0b 93 84 6d 82 65 a8 e3 c1 f9 ac 8e f3 f2 bf 79 6f 73 b4 df f9 53 06 36 af db 13 23 07 30 fb 38 7b 7d eb 3d 45 8f 3a f5 2d a1 7b ac f5 39 16 23 f1 37 0b 9c 01 d5 ec 5b e6 a5 73 75 94 88 72 c4 d3 35 db 58 77 fe 8a d8 ed 6d 1d 8d df 2c 0b d7 6e 44 ce e1 f9 be 6e 25 70 ee ba 48 f5 c9 c6 32 bb 22 46 88 81 Data Ascii: ,*5\|b^2fypmkMGqQUni 9#0~/N]9,mpFRlSK7;]fe~'jE8[tiQJ65[meyosS6#08{}=E:-{9#7[sur5Xwm,nDn%pH2"F
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 0c 35 b5 48 8f 01 cf 97 d1 b0 40 f6 d1 31 d2 f3 d3 10 18 11 8f 16 23 e9 dc a5 12 12 bb 68 ca ed 83 e5 de 8c 09 14 77 cd b9 fd 3b 50 76 9e 8f f5 c5 fb 56 6c ec 7a a1 37 04 62 c6 f1 f9 b9 37 1e c3 dc b3 62 eb d0 b6 fb 9b 1b 8b 11 bd 66 e4 67 66 78 4c 61 d9 c9 65 4a de ee c5 db d3 b3 6a 42 77 6d 16 b9 0c 08 a3 e7 88 e6 10 4c fe fc 98 66 05 10 48 48 44 30 8b 03 9f 15 04 e3 12 fa a5 f3 65 c9 51 38 b3 51 03 40 d9 00 e0 33 9f 98 b0 ed 41 20 30 41 20 11 52 02 88 24 06 68 18 1e ce 68 1a 06 29 4f 7a 01 01 5e ec 90 57 7c 60 c8 86 2b 10 51 51 20 07 3d e5 06 a7 75 d5 e1 b5 d5 b9 9c 3f d2 38 13 ba 48 04 02 5b 50 19 80 88 cb bf be d9 d9 b4 2f 5d bf 6e 16 59 c5 c9 48 00 47 17 28 6b 97 ea df 99 9e 92 d8 89 01 bc 1b 9b 83 0b 76 01 99 f6 8a 2d 4e 6d 4d 68 7f fb f5 74 17 20 Data Ascii: 5H@1#hw;PvVlz7b7bfgfxLaeJjBwmLfHHD0eQ8Q@3A 0A R$hh)Oz^W\|`+QQ =u?8H[P/]nYHG(kv-NmMht
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 8c 20 1a e5 69 e0 34 d5 10 f1 ef 0c ad 1b 1b 77 66 36 b1 8e 98 c6 82 80 06 98 6f d8 73 6e 7f d5 22 4a 2b 53 d4 63 09 db 26 20 89 45 84 a9 a8 63 c4 b4 e3 d9 27 0b 51 9a de 74 96 9f 4f 16 27 03 a6 e4 8b 01 e2 27 97 97 26 8c db f7 08 92 cd 69 9b 6b 54 35 5f d6 27 18 78 4d f0 64 25 1e 52 b8 46 b8 7f 0d d8 91 cd 41 6d bd 52 94 6d 69 8c dc 99 42 04 33 13 f6 b4 02 df d7 b3 2e e4 01 90 90 98 2d a2 f1 06 52 78 c8 4c c7 f6 a5 20 21 3e c9 88 cb 9a 08 c4 c6 24 d9 31 d2 23 8c bc 60 c7 be b7 6d 8e dd 50 40 bc ad c8 94 62 22 26 0f 8a d4 46 27 f7 ad e8 3f de b4 7b 62 82 33 89 ac a2 43 cc b1 6d 24 4a 4f 4f d9 84 e5 fd 89 f6 a0 d7 f5 0d 9c 6f c2 e4 ed c4 43 73 06 12 12 26 30 d4 30 d4 4b 4a 2f c2 7e d5 62 36 17 e1 74 09 4e 04 18 c6 20 4d df 54 03 7c a5 f5 48 47 f8 84 a1 cd Data Ascii: i4wf6osn"J+Sc& Ec'QtO''&ikT5_'xMd%RFAmRmiB3.-RxL !>$1#`mP@b"&F'?{b3Cm$JOOoCs&00KJ/~b6tN MT\|HG
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: cc b0 30 8c 64 3d a1 5e 3d 4e bc 71 bd 14 93 77 66 3e 66 9c 58 70 f1 76 49 6f a6 63 63 d7 b7 1d 5b 63 d4 a5 ba da dd 33 da ca 31 6b 46 b1 89 01 a4 ce 4a 9c e5 f8 ab 5a 6d ad cf 3c de bd 28 f8 a7 73 5b 0e 67 9b fc 16 ba 98 91 de df 80 bb 18 02 e0 b7 86 4d 57 6c 39 85 c9 b5 96 f5 46 dc 80 8b db 90 12 0d e2 03 8a 0c 2e bd 01 2f 4e ef 69 40 20 41 e6 26 28 33 56 7a 95 c2 ed 20 0e f6 71 34 00 57 b1 f1 5d 6d f8 67 ed b3 f5 11 96 8e 9b 28 e0 2c 47 44 85 08 22 46 a0 d0 85 38 3a 64 f4 2f 57 6e 6d ce 3b 7d e0 37 a1 22 23 0b cd e2 06 54 79 8f ac 29 d7 0b 3a 6f ef db 1e 6c b4 81 a4 97 a3 54 f2 3c 57 35 6b 7d 15 33 0e bd bf f0 9a 89 87 e1 e2 5a ef c4 8e e4 3c e3 56 31 3f 3c c6 7d ab 9b 6c 0d a4 4f f3 0e a2 24 5f 54 ac 97 35 70 60 45 7d 8a a3 3c 4e 40 83 20 06 a6 1a c8 Data Ascii: 0d=^=Nqwf>fXpvIocc[c31kFJZm<(s[gMWl9F./Ni@ A&(3Vz q4W]mg(,GD"F8:d/Wnm;}7"#Ty):olT<W5k}3Z<V1?<}lO$_T5p`E}<N@
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 81 87 b1 00 7b 3b 90 2c dc d5 f2 40 f8 b2 06 c4 f2 40 55 00 ff 00 a9 01 5a a0 4c 0d 0d 0f 14 0c 81 99 40 17 a0 18 fd 48 03 88 73 e2 55 09 b3 75 9a a6 5f 4d 3b d0 20 58 30 2c c8 25 f1 40 32 a0 aa 07 55 04 7b d0 26 40 51 b1 f6 a0 5e 27 0c 69 9a 01 9d 86 00 e2 c8 08 16 93 12 d4 66 40 ee 12 c4 0c 31 3d a8 11 bb 11 10 09 c3 3f d4 a8 7a e5 26 0e 01 70 68 a0 89 79 3c 89 a8 f9 8e 23 d8 a8 b3 c2 5c 1f 0b 02 18 1c 49 c0 20 00 9e 97 9e 98 b1 d3 a0 8a 10 38 13 82 22 33 d2 64 62 7e 62 18 1c 5c 0e 0a 88 c8 0d 36 e1 22 cd 53 41 51 fa 90 4c 90 25 29 12 5c 78 62 40 18 35 02 a1 6a 8c 98 c7 17 e5 4f a6 48 86 20 35 48 6b 32 96 20 fc 47 b5 06 e7 a6 7a 7b 7f be 6b 1b 5b 02 ed eb 9f 6c d3 4a e1 7b c7 59 cb 2f 7d e8 6f 51 f4 b8 f9 db 8d 9e bb 51 0e 4d a9 6a 64 9f d2 53 f2 bf 61 Data Ascii: {;,@@UZL@HsUu_M; X0,%@2U{&@Q^'if@1=?z&phy<#\I 8"3db~b\6"SAQL%)\xb@5jOH 5Hk2 Gz{k[lJ{Y/}oQQMjdSa
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: cd 05 c0 46 30 00 00 35 17 66 76 3d a8 25 10 04 65 47 88 3e 10 38 05 04 88 0d 83 8c 47 2e 28 03 16 8e 42 47 16 41 1d 34 67 62 10 47 3e c4 07 35 40 80 ef 40 90 32 81 51 90 08 04 09 00 50 44 a0 54 ef 40 d0 01 fb 95 07 c3 8a 06 10 15 50 08 04 02 01 04 80 50 74 3f 97 e3 ff 00 5e 7a 73 87 f3 3d 9f fb c4 14 be 35 3d 72 39 1e 1c 57 16 8b 0e fc 90 37 ad 50 15 40 8f 12 a8 1c fe 94 03 55 c9 40 72 08 1b 38 c3 9a 05 23 2c 32 40 c1 a3 20 58 73 08 09 37 3e 4c 80 2f 88 a0 40 12 0a 81 31 40 d8 9a 3b a0 79 b3 f6 b2 a1 b6 39 f2 40 eb 41 87 0a 62 aa 11 07 ff 00 67 f4 29 56 09 0c 08 0e e1 96 44 45 46 2a 85 5a d6 88 11 f6 f3 40 d8 e3 90 c9 04 8d 46 a3 83 d4 20 53 0e 41 7a e0 0e 48 13 4c 87 05 88 21 a4 80 12 d1 73 54 2b 20 5f 4c 80 21 f8 e9 38 a0 84 e3 21 31 93 97 32 74 0a 7e Data Ascii: F05fv=%eG>8G.(BGA4gbG>5@@2QPDT@PPt?^zs=5=r9W7P@U@r8#,2@ Xs7>L/@1@;y9@Abg)VDEF*Z@F SAzHL!sT+ _L!8!12t~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49814	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	425	OUT	GET /common/images/common/mrk_white.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	231	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/png Content-Length: 983 Connection: close Last-Modified: Tue, 13 Feb 2024 00:02:32 GMT ETag: "3d7-611381c657072" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 07 08 06 00 00 00 2f 65 ec d0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR/etEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49810	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	623	OUT	GET /images/mv/slide/panel_3-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:31 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/jpeg Content-Length: 458708 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:42 GMT ETag: "6ffd4-5dcacb9213480" Accept-Ranges: bytes
2024-10-28 19:14:31 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 46 d7 e4 f7 ff 00 af f8 80 76 e3 66 0f af 1a 4a cf 2e c5 d7 66 55 7a 43 98 ff 00 06 f5 1f 15 c9 b1 22 18 e4 f2 b2 bb bc 99 bc 0f 7f a0 de a5 eb 28 d9 a9 3e ad f4 ae 4e ee 3f 23 05 8d db 12 42 53 db 1c 9a 8b 7b 2f 5b 60 b4 a8 3c be e6 b0 e4 91 90 3c 46 b4 66 08 ae ca eb 50 cb 42 4c 35 fa be ea 40 35 40 c2 02 80 08 01 40 05 6a 00 51 40 04 28 01 45 00 28 a0 02 a6 07 50 02 d0 02 d0 07 50 02 da 81 1d 6a 06 75 02 3a 80 3b b2 80 14 0a 60 75 00 2d 00 75 00 75 00 2d 00 2d 00 25 00 28 14 00 a0 50 02 da 80 16 d4 08 eb 50 02 da 98 c5 14 00 54 08 20 28 01 c5 a6 84 15 a8 03 27 ea b8 39 53 c9 47 36 26 42 a2 08 11 7c 89 10 32 13 76 37 b8 b3 0a e6 cd b9 be 2d 8a 94 ce e7 61 50 67 e3 96 61 da d8 d2 80 df e6 49 6f be b3 93 48 24 45 ea 3c 24 d3 24 4d 86 7f fa a2 36 55 ff 00 Data Ascii: FvfJ.fUzC"(>N?#BS{/[`<<FfPBL5@5@@jQ@(E(PPju:;`u-uu--%(PPT ('9SG6&B\|2v7-aPgaIoH$E<$$M6U
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 96 ae 6b 23 74 c8 d9 b1 c8 91 dc 83 bf 46 07 b7 ad c1 f6 52 63 47 a1 4a 06 46 04 4f f1 79 b1 2b 12 4f ef 28 35 d7 65 28 e4 ab 86 58 63 85 ff 00 0f 8a c7 f0 2e a7 4d 40 b5 6d 55 f4 99 b7 a8 e7 a7 07 ff 00 25 1c 66 a3 fa fd 9f ca dd 6a 71 fa d0 ef e9 67 c4 e0 1b 8b 56 87 60 e8 ed d6 93 28 31 48 a4 38 b7 d7 bc d2 29 1b 2f 94 1f fd f4 bd 3a 3f fa a4 7f a8 f4 9e c3 b6 cf fd ac c2 65 b5 b3 72 47 fd f4 bf eb 9a d9 a3 93 1b d1 1c 8e 34 d7 43 50 d1 ba 63 be 16 52 0f 43 a1 fa 69 17 b9 ef bf 29 3d 41 fa ce 0f 8e 32 bd e6 c6 0d c6 e4 9f e4 fe 91 3f d9 db 59 ad 2e 65 9e b3 59 3d 32 61 af fd 3b ab a1 9c 03 26 90 c4 a4 02 8a 00 21 40 0a 28 01 40 a6 02 d0 02 8a 04 15 00 70 a6 02 d0 02 8a 00 ea 00 ea 00 5a 00 5a 00 ea 40 75 31 0b 40 1d 40 0b 40 1d 40 c5 14 c0 ea 00 e1 40 Data Ascii: k#tFRcGJFOy+O(5e(Xc.M@mU%fjqgV`(1H8)/:?erG4CPcRCi)=A2?Y.eY=2a;&!@(@pZZ@u1@@@@@
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: e3 40 4d f6 01 7e b6 d2 9c 84 0c e4 e2 a2 c2 4a 93 61 a0 04 dc 6b a5 12 28 03 1b 19 bf 4c 84 6b 70 74 bd b5 aa e4 27 50 fc b7 0d 72 b6 ec 1f e5 a7 22 81 ac 50 55 a6 be 84 b6 87 dd 48 63 52 78 33 51 fa 8d ec 08 f7 a5 08 09 a1 94 f5 3a 77 50 04 6c 8e 37 8f 9e e6 58 14 b7 ef 28 da df 58 b5 27 54 ca 56 6b 62 bb 27 d2 b8 65 4b 45 2c 89 fc 37 0d f7 d6 4f 12 34 59 99 06 1f 4d 49 2c 7b e1 c9 dc 09 36 59 14 8f 87 da 2f 53 ec fc 4a f7 be 00 3f a7 b9 64 6b f9 42 41 6b 12 8c 09 23 e9 b5 4f b2 ca f7 51 03 23 0f 3a 0f 14 98 d2 2d b4 00 a9 fd 95 16 ab 45 ab 26 44 2d fb e3 6b 74 f1 5e ff 00 55 66 cb 16 e0 df 68 eb d2 d4 00 ab 18 53 b8 6a 7b 4d 31 30 fa 8e e1 de 68 01 96 01 58 5f a0 e9 ed ee a9 18 fc 08 54 92 47 51 6b 7e da aa 92 d8 e3 25 d5 b4 17 3a 0e db 53 81 48 c3 63 Data Ascii: @M~Jak(Lkpt'Pr"PUHcRx3Q:wPl7X(X'TVkb'eKE,7O4YMI,{6Y/SJ?dkBAk#OQ#:-E&D-kt^UfhSj{M10hX_TGQk~%:SHc
2024-10-28 19:14:31 UTC	18	IN	Data Raw: 2f d9 4a 11 52 ca 2c 7e 0f d3 5c 86 4f 1b 8b 3f 31 3e Data Ascii: /JR,~\O?1>
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: 37 25 97 3a ac 78 71 e1 19 c1 70 4d 97 cc 12 a7 51 ad ed a5 55 6a 9f 52 5d 9a e8 7a af ae 38 6e 12 39 38 b6 e5 a4 9d 70 31 92 d3 9c 6c 5b f9 ae 00 50 5f 20 1f 01 d3 e1 37 ae 9b a5 d4 e6 ab 7d 03 83 8f c4 cd f4 44 5c 7f a7 73 8e df 3d a5 85 a5 de b2 84 f3 1a e1 96 25 77 ea 6d 7d b6 a6 96 9a 04 eb a9 27 d2 1c 2f 21 c5 09 f2 39 2e 42 29 a0 ca 88 a4 24 4b 21 d4 1d 74 95 52 9d 50 ac e4 c5 f1 ac 04 8d ef a8 2c b6 6d 45 48 ca 3e 67 b6 98 1a 9e 73 03 97 cb f4 77 a7 d7 8e 6d 92 2c 4a 64 fc e4 83 43 18 b6 ae c9 7a d1 ec 66 b7 33 1f f2 f7 ac ff 00 ed 7f fc ba 0f ff 00 7b 53 0c a9 46 97 87 e3 f9 7c 5f 44 fa 81 39 16 dd 23 46 cd 1f e7 24 fe 10 9a ea 8c f6 aa 4b 42 5e e6 3b 8b 1a 0a c9 9a a2 c1 85 4b 18 db 0a 43 1a 75 a0 63 0c b4 80 65 d6 90 c8 f2 2d 21 91 26 5a 91 95 Data Ascii: 7%:xqpMQUjR]z8n98p1l[P_ 7}D\s=%wm}'/!9.B)$K!tRP,mEH>gswm,JdCzf3{SF\|_D9#F$KB^;KCuce-!&Z
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: b0 03 8d 3c 43 c4 4d ad 62 07 87 53 d2 b9 d3 6d ea 09 96 3c 77 2d 0f 19 93 1b 65 63 2e 4e 3c 6a 4e 44 67 4b 31 1a 7b 3c 35 bd 3e 9d cd 16 84 1c d9 f1 3d 4e d9 0a ca f8 0b 1a 8d 86 18 d9 80 65 d4 2b fb 0f 50 6f 5d 94 b2 6b 41 c1 21 bd 5b c8 b7 11 8f 89 32 b4 79 f1 c8 a5 50 90 e3 64 46 c6 37 53 6b 30 ec 37 e9 54 f4 52 34 50 7a 82 18 a5 8a 2c 0c 82 ab fa e6 69 1e 53 a2 93 72 49 5f 69 72 3e 8a e0 c1 5e 56 96 6e ed 08 97 0e 7c e9 85 89 8d 14 a6 49 e7 8d 71 a3 67 70 8a ad 10 b4 d2 38 ea 6d df d3 b6 bd 03 9c bc e3 7d 11 85 fa 7c 78 d4 66 66 45 13 ac b9 fc 86 d6 53 23 1b 92 31 51 80 ba b1 3e 22 dd 9d 2a 64 65 cf 25 8f e9 2c 8e 2d b8 be 3e 08 a0 2d 1f e5 4e a0 17 5d 0e ae 35 62 00 be e0 68 e3 e2 0a d0 78 de 6f 1d 97 81 cd f1 98 99 59 27 2f c9 c4 94 41 39 b5 cc 45 Data Ascii: <CMbSm<w-ec.N<jNDgK1{<5>=Ne+Po]kA![2yPdF7Sk07TR4Pz,iSrI_ir>^Vn\|Iqgp8m}\|xffES#1Q>"*de%,->-N]5bhxoY'/A9E
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: c8 e4 f8 f3 27 93 3e 71 fc 0a 4b ad c7 f9 b5 e6 db 5a af fb ad 3f 23 a7 66 ff 00 ed 50 39 8a db b2 f9 4c b6 3a 02 98 ca 7d 88 37 3f fa 4f 54 b5 c8 fe 10 bf 8b 07 a5 52 f9 8c 60 b0 4e 10 e4 be 9f aa 91 e7 37 fd d2 de 1f f4 56 b1 c0 e6 6d e2 db 2f 26 f1 e1 a0 3c 70 fd 3f a7 e3 95 f4 69 f7 e4 3f fe d1 8b 7f ab 51 db 6d cb c6 58 f2 fa a3 e4 0f a7 90 c7 c0 24 c7 47 c9 32 4e df fb 46 36 fb 2b 3e db 5a cf f7 36 cb cd ea 8f 02 1f 02 a2 4e 4b 92 c8 ef 98 44 a7 d9 12 85 fb c9 ab b3 d4 9e 81 e4 5e 6e 7f 1a 3e aa ae ce 7d c8 b6 fd b5 86 7d 78 af 89 a5 34 4d 92 39 d9 2c b1 fb 37 37 d4 2b 5a f5 64 21 ce 25 7c ae 2a 23 fc 1b 8f d2 2f 5c d8 b6 34 be e5 5f 18 2f c8 ef 6e 91 c5 7b fb 5d af 4f 3b fa 92 1d 76 26 f3 4d b5 62 53 d8 4b 1f a0 56 b8 d1 21 f0 88 17 8e 88 5a c5 86 Data Ascii: '>qKZ?#fP9L:}7?OTR`N7Vm/&<p?i?QmX$G2NF6+>Z6NKD^n>}}x4M9,77+Zd!%\|*#/\4_/n{]O;v&MbSKV!Z
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: d7 71 73 f4 c5 97 d9 59 1a 19 16 3f df 3e af be 98 1a 3c 2f f8 79 3d d5 0c 68 67 8e f8 72 87 f1 0f f5 29 3d 8a 20 fa 7c df 14 7b 8f df 48 6c 95 92 3c 47 f9 47 df 49 8d 15 c3 ff 00 8a 3f f2 fe ca 9e a5 74 0e 5f 86 61 fc 07 ef a4 34 47 53 a0 f7 50 32 c3 86 ff 00 8a 3e ef d8 69 a2 58 1c 39 f0 37 f3 fe da ba 93 63 4d 09 f1 1a 09 26 e1 ff 00 5d 3d b2 8a aa 89 97 4d 40 c0 a0 40 c3 fd 49 ff 00 9f f6 0a 01 06 7a d0 04 47 fe a4 9f cd fb 28 10 b0 7f c5 47 ee 6f ba 81 92 cd 00 44 e3 be 26 fe 41 f7 9a 6c 48 97 48 a1 69 01 0a 0f fe 22 fe f7 3f 75 57 42 56 e4 e6 a9 28 8d 9d ff 00 0a df cc bf 7d 31 30 1c 91 c7 43 6e dd b7 a3 a8 ba 11 a7 f8 13 be f4 c0 8b 8b 12 ac fd 4f e6 ef 53 f4 8b d2 b0 54 8d 87 75 8b 2e 39 34 06 32 6e 3a 78 18 1a e6 ae 92 74 3d 60 c7 7a 84 2a 66 41 Data Ascii: qsY?></y=hgr)= \|{Hl<GGI?t_a4GSP2>iX97cM&]=M@@IzG(GoD&AlHHi"?uWBV(}10CnOSTu.942n:xt=`z*fA
2024-10-28 19:14:31 UTC	16384	IN	Data Raw: dd 8f 96 b2 35 82 df cb 63 b4 a2 b7 87 56 ee ae 5f d1 51 be 2f d2 66 f1 f5 65 2c 5c 86 77 29 98 30 b9 2c 65 fd 2f 24 0f 9f c4 92 02 95 0a 08 c9 59 2d b8 49 d0 ab 7b 6b b3 1f 69 4a d5 70 d1 a2 93 8d 3a 19 3f 57 7a 62 5e 33 3b f4 d8 8e d9 f8 d3 ed 38 53 20 0d 29 dc bf 03 81 fe d1 6f 5d 75 72 a4 96 88 fc ef 3d 16 57 15 1f 0f c8 27 9b 9b 85 02 f9 99 51 9d db a4 8d 83 17 65 24 d8 90 76 b1 fc 4d 4d 3d 00 af c4 c2 53 8d fe 25 24 a9 9e ba 2c 84 6b e4 f9 82 c3 61 ea 48 bd b4 ed ad 2a 81 b2 ef 83 e5 62 e3 f8 e6 9a 6c f8 62 68 66 0d 3c 99 08 4b 4c 15 49 51 08 00 dc 2f 43 bb 5a 9e 3a 89 99 6e 47 9d 8b 90 e5 55 78 f8 66 c9 91 1b cd 7c c6 50 14 06 b8 2b 0c 2b e1 5d d7 b6 e7 24 fb 2b a6 d6 95 1d 0e 7a d7 59 35 be a2 93 3c fa 69 67 c8 6f 3a 68 1e 23 b1 80 d8 51 97 50 4a Data Ascii: 5cV_Q/fe,\w)0,e/$Y-I{kiJp:?Wzb^3;8S )o]ur=W'Qe$vMM=S%$,kaH*blbhf<KLIQ/CZ:nGUxf\|P++]$+zY5<igo:h#QPJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49812	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:30 UTC	426	OUT	GET /common/images/header/reserve_bg.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:30 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:30 GMT Content-Type: image/png Content-Length: 1842 Connection: close Last-Modified: Mon, 07 Mar 2022 03:35:24 GMT ETag: "732-5d9988dfd5700" Accept-Ranges: bytes
2024-10-28 19:14:30 UTC	1842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 82 00 00 00 32 08 06 00 00 00 90 c9 03 88 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 e7 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR2pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49820	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:31 UTC	627	OUT	GET /common/images/footer/foot_logo.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:31 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:31 GMT Content-Type: image/png Content-Length: 2398 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "95e-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:31 UTC	2398	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 89 00 00 00 37 08 03 00 00 00 0f 3a 99 fe 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR7:tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49821	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:31 UTC	423	OUT	GET /common/images/footer/pagetop.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868
2024-10-28 19:14:31 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:31 GMT Content-Type: image/png Content-Length: 1231 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "4cf-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:31 UTC	1231	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 25 00 00 00 13 08 06 00 00 00 17 bd c4 b3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR%tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49816	157.240.0.6	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:31 UTC	545	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:31 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-UpBPYbV4' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-28 19:14:31 UTC	1695	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-28 19:14:31 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-28 19:14:32 UTC	14656	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-28 19:14:32 UTC	16384	IN	Data Raw: 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 Data Ascii: "?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"
2024-10-28 19:14:32 UTC	16384	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 Data Ascii: urn function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.nu
2024-10-28 19:14:32 UTC	16384	IN	Data Raw: 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 66 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 Data Ascii: f"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefined":i(f))==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typ
2024-10-28 19:14:32 UTC	1727	IN	Data Raw: 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c 65 6e 67 74 68 3e 30 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f Data Ascii: [a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).length>0}function p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}functio
2024-10-28 19:14:32 UTC	14657	IN	Data Raw: 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 Data Ascii: tsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(f),function(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null})
2024-10-28 19:14:32 UTC	16384	IN	Data Raw: 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 2c 6a 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 Data Ascii: =b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET"),j=f.getFbeventsModules("signalsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b
2024-10-28 19:14:32 UTC	16384	IN	Data Raw: 21 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b Data Ascii: !=="object"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function s(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=="object"&&typeof a!=="string"\|\|Array.isArray(a)\|\|a==null)throw new g();return a}}function t(){return function(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49819	203.114.55.135	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:31 UTC	534	OUT	GET /uhj2/uh.js HTTP/1.1 Host: uh.nakanohito.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:32 UTC	335	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:31 GMT Content-Type: application/javascript Content-Length: 32315 Last-Modified: Fri, 31 May 2024 06:24:50 GMT Connection: close ETag: "66596d32-7e3b" Expires: Mon, 28 Oct 2024 22:14:31 GMT Cache-Control: max-age=10800 Cache_Control: public Accept-Ranges: bytes
2024-10-28 19:14:32 UTC	16049	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 73 2c 61 29 7b 69 66 28 21 72 5b 73 5d 29 7b 69 66 28 21 74 5b 73 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 61 26 26 63 29 72 65 74 75 72 6e 20 63 28 73 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 73 2c 21 30 29 3b 76 61 72 20 6c 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 6c 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6c 7d 76 61 72 20 75 3d 72 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 Data Ascii: !function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var l=new Error("Cannot find module '"+s+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[s]={exports:{}};t[s][0].ca
2024-10-28 19:14:32 UTC	16266	IN	Data Raw: 3a 22 62 72 6f 77 73 65 72 22 3d 3d 55 73 65 72 6c 6f 63 61 6c 2e 45 6e 74 72 79 2e 63 68 65 63 6b 42 72 6f 77 73 65 72 28 29 2c 4d 6f 64 65 53 74 64 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 22 42 61 63 6b 43 6f 6d 70 61 74 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 7d 2c 55 73 65 72 6c 6f 63 61 6c 2e 45 6e 74 72 79 2e 4f 73 3d 7b 69 4f 73 3a 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 69 70 61 64 22 29 21 3d 2d 31 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 69 70 68 6f 6e 65 22 29 21 3d 2d 31 2c 41 6e 64 72 6f 69 64 3a 6e 61 76 69 67 Data Ascii: :"browser"==Userlocal.Entry.checkBrowser(),ModeStd:document.compatMode&&"BackCompat"!=document.compatMode},Userlocal.Entry.Os={iOs:navigator.userAgent.toLowerCase().indexOf("ipad")!=-1\|\|navigator.userAgent.toLowerCase().indexOf("iphone")!=-1,Android:navig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49825	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:32 UTC	622	OUT	GET /images/new/img_gnav_con01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:33 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:32 GMT Content-Type: image/jpeg Content-Length: 25082 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:21 GMT ETag: "61fa-5e3186c679040" Accept-Ranges: bytes
2024-10-28 19:14:33 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm
2024-10-28 19:14:33 UTC	8933	IN	Data Raw: 98 94 d4 f4 62 f3 b6 ca 56 a4 0e 54 af 8e 85 6e 5e 2c 6b 57 fa 06 a7 1b 26 4d 97 ea 34 e4 2c e5 68 d9 cc 89 1b c4 48 08 3e f5 f8 9a d0 95 3b 14 ff 00 99 fe 9d 51 bf ba 3d a8 bf 52 fd 3d b7 ff 00 b7 fa 03 db cc 5d 96 16 68 f2 98 8b 30 97 56 52 ad cd b5 c3 1a 86 92 32 08 55 26 8b 43 cb ca 1f 54 3b ad 7d 1f 53 46 15 76 e8 14 b1 f9 5b 7b eb 61 2a 34 52 db dc a0 9d 05 28 c6 29 00 63 bc 16 00 36 e2 6b ba 6f a5 6b aa 36 d0 b2 b5 14 1b 84 9a d7 7b b2 89 23 3e 00 2a 75 3c 68 08 8d 6a 41 fe 19 39 f8 ea 32 db 1e 10 96 39 27 86 59 12 04 65 82 e0 09 92 72 c1 43 2b 72 e2 dd 3a 54 78 9a ee e7 b7 42 6a 18 4d d1 de 18 e0 e9 7c b4 c8 ca f1 30 d8 59 f7 3b 15 a1 0c 1e 40 14 d6 9f 66 23 a7 d5 39 43 74 16 98 e0 63 1c a2 27 7b 94 15 5b 74 27 a8 a0 f3 ad 77 1e 1e e0 83 52 d4 8e Data Ascii: bVTn^,kW&M4,hH>;Q=R=]h0VR2U&CT;}SFv[{a4R()c6kok6{#>u<hjA929'YerC+r:TxBjM\|0Y;@f#9Ctc'{[t'wR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49823	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:32 UTC	622	OUT	GET /images/new/img_gnav_con02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:32 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:32 GMT Content-Type: image/jpeg Content-Length: 5693 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:21 GMT ETag: "163d-5e3186c679040" Accept-Ranges: bytes
2024-10-28 19:14:32 UTC	5693	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49824	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:32 UTC	623	OUT	GET /images/new/img_gnav_stay01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:33 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:32 GMT Content-Type: image/jpeg Content-Length: 17119 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:39 GMT ETag: "42df-5e3186d7a38c0" Accept-Ranges: bytes
2024-10-28 19:14:33 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm
2024-10-28 19:14:33 UTC	970	IN	Data Raw: 4d 17 63 ee 5a 06 6d 0b 67 70 52 5c a9 ec 8e 28 9f e2 d6 57 bd 4d 0a 02 81 0a 53 94 8f 4d 22 67 80 94 68 b4 de 7f 63 2b 6b b4 32 62 e7 c9 6d 87 ba 68 69 af 1b 72 e5 47 73 4b d3 52 cd b8 96 5d 54 b1 21 da 73 32 85 4b 3d 30 fe da 7a af c8 cf ee 34 e1 af 89 9b d6 72 22 df 56 e7 95 6b bc 7a 1a ce f7 ec 6b 12 16 d1 29 9f 75 2e 23 8c c4 b1 02 1a 4f b9 36 8e c5 42 ff 00 c9 4e 62 6d ea 65 57 3f 69 55 5d b9 28 0e 2a a6 8c 87 82 50 78 a9 23 bc 3d d0 dc ad d1 9c 27 b3 28 0a 65 4d 28 85 20 b6 e2 73 c0 a1 43 b7 23 04 a6 3e 2d 0f 69 2f d7 db 79 06 86 eb 59 4c 46 5e 53 ee 27 e8 9c 43 c7 57 ba 45 2b 59 75 2c 74 3c d7 e6 55 1e 94 d2 ee 6a dc 32 4b 8b 0e 8f f2 81 8c 2d e3 e3 ec 6b 5c 96 ee 35 dc bb d7 76 6f 17 e9 97 b9 2e 0e 5c 17 4c 0a 29 d0 52 10 13 ab 32 12 9e 27 a6 0a Data Ascii: McZmgpR\(WMSM"ghc+k2bmhirGsKR]T!s2K=0z4r"Vkzk)u.#O6BNbmeW?iU](*Px#='(eM( sC#>-i/yYLF^S'CWE+Yu,t<Uj2K-k\5vo.\L)R2'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49822	13.107.246.45	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:32 UTC	536	OUT	GET /tag/8618shaoqp HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:33 UTC	528	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 19:14:33 GMT Content-Type: application/x-javascript Content-Length: 740 Connection: close Cache-Control: no-cache, no-store Expires: -1 Set-Cookie: CLID=643d1d536f214e709483fc18a9990413.20241028.20251028; expires=Tue, 28 Oct 2025 19:14:32 GMT; path=/; secure; samesite=none; httponly Request-Context: appId=cid-v1:e97341f6-8fff-46a6-9229-fbbfe0892c78 x-azure-ref: 20241028T191432Z-16849878b78fssff8btnns3b1400000005t0000000008a01 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-28 19:14:33 UTC	740	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49828	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:32 UTC	623	OUT	GET /images/new/img_gnav_stay02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:32 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:32 GMT Content-Type: image/jpeg Content-Length: 8110 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:39 GMT ETag: "1fae-5e3186d7a38c0" Accept-Ranges: bytes
2024-10-28 19:14:32 UTC	8110	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49830	216.239.32.181	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	1378	OUT	POST /g/collect?v=2&tid=G-RFKGKFWG67&gtm=45je4ao0v881287644z878713577za200zb78713577&_p=1730142863379&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848&cid=42326441.1730142869&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1730142870&sct=1&seg=0&dl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&dt=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&en=page_view&_fv=1&_ss=1&tfd=14766 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:33 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Date: Mon, 28 Oct 2024 19:14:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49835	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	623	OUT	GET /images/new/img_gnav_stay03.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:34 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:33 GMT Content-Type: image/jpeg Content-Length: 10681 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:40 GMT ETag: "29b9-5e3186d897b00" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	10681	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49839	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	794	OUT	GET /images/new/img_gnav_stay04.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:34 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:33 GMT Content-Type: image/jpeg Content-Length: 8040 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:40 GMT ETag: "1f68-5e3186d897b00" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	8040	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49834	142.250.185.194	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	988	OUT	GET /td/ga/rul?tid=G-RFKGKFWG67&gacid=42326441.1730142869&gtm=45je4ao0v881287644z878713577za200zb78713577&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533422~101823848&z=187887619 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:34 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 28-Oct-2024 19:29:33 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-28 19:14:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49833	142.250.185.194	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	1467	OUT	GET /td/rul/705351937?random=1730142871314&cv=11&fst=1730142871314&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:34 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 28-Oct-2024 19:29:33 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-28 19:14:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49841	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	794	OUT	GET /images/new/img_gnav_stay05.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:34 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:34 GMT Content-Type: image/jpeg Content-Length: 8937 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "22e9-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	8937	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49842	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	794	OUT	GET /images/new/img_gnav_stay06.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:34 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:34 GMT Content-Type: image/jpeg Content-Length: 7794 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "1e72-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	7794	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49840	142.250.186.98	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:33 UTC	1343	OUT	GET /pagead/viewthroughconversion/705351937/?random=1730142871314&cv=11&fst=1730142871314&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:34 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 28-Oct-2024 19:29:34 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:34 UTC	536	IN	Data Raw: 31 32 65 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12ee(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-28 19:14:34 UTC	1378	IN	Data Raw: 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 Data Ascii: l",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))br
2024-10-28 19:14:34 UTC	1378	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 Data Ascii: e(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R(
2024-10-28 19:14:34 UTC	1378	IN	Data Raw: 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 Data Ascii: pics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.sr
2024-10-28 19:14:34 UTC	184	IN	Data Raw: 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 47 77 43 61 37 4c 37 64 46 42 75 6d 51 50 48 6d 38 47 68 4a 39 46 59 6d 46 6d 4a 58 39 7a 48 73 38 4a 4a 42 6c 67 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 32 34 38 36 33 39 35 33 39 36 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 6uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSGwCa7L7dFBumQPHm8GhJ9FYmFmJX9zHs8JJBlg\x26random\x3d2486395396\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-10-28 19:14:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49843	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:34 UTC	794	OUT	GET /images/new/img_gnav_stay07.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:34 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:34 GMT Content-Type: image/jpeg Content-Length: 8010 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "1f4a-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	8010	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49844	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:34 UTC	794	OUT	GET /images/new/img_gnav_stay08.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:34 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:34 GMT Content-Type: image/jpeg Content-Length: 8536 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "2158-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:34 UTC	8536	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49831	216.239.32.181	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:34 UTC	1385	OUT	POST /g/collect?v=2&tid=G-QJ6BW8XGJP&gtm=45je4ao0v9134487267za200&_p=1730142863379&_gaz=1&gcd=13l3l3l3l2l1&npa=0&dma=0&tag_exp=101533421~101823848&ul=en-us&sr=1280x1024&cid=42326441.1730142869&_ng=1&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EBAI&_s=1&dl=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&dt=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&sid=1730142873&sct=1&seg=0&en=page_view&_fv=1&_ss=1&_ee=1&tfd=17622 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:34 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Date: Mon, 28 Oct 2024 19:14:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49849	13.107.246.45	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:34 UTC	606	OUT	GET /s/0.7.49/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=643d1d536f214e709483fc18a9990413.20241028.20251028
2024-10-28 19:14:35 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 19:14:34 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65959 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 24 Oct 2024 01:20:43 GMT ETag: "0x8DCF3CA14C9A428" x-ms-request-id: 3e36e740-301e-003f-6254-28e678000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20241028T191434Z-r197bdfb6b4skzzvqpzzd3xetg00000004w000000000594q Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 39 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 3a 75 2c 70 72 65 76 69 6f 75 73 3a 63 2c 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 64 61 74 61 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 2c 68 61 73 68 3a 6e 75 6c 6c 2c 72 65 67 69 6f 6e 3a 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 Data Ascii: parent:u,previous:c,children:[],data:n,selector:null,hash:null,region:l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){ca
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 22 3a 47 72 28 38 2c 74 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 66 66 65 72 22 3a 47 72 28 37 2c 74 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 29 2c 47 72 28 31 34 2c 74 2e 69 74 65 6d 43 6f 6e 64 69 74 69 6f 6e 29 2c 47 72 28 31 33 2c 74 2e 70 72 69 63 65 43 75 72 72 65 6e 63 79 29 2c 47 72 28 31 32 2c 74 2e 73 6b 75 29 2c 57 28 31 33 2c 5a 6e 28 74 2e 70 72 69 63 65 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 72 61 6e 64 22 3a 47 72 28 36 2c 74 2e 6e 61 6d 65 29 7d 6e 75 6c 6c 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 Data Ascii: ":Gr(8,t.name);break;case"offer":Gr(7,t.availability),Gr(14,t.itemCondition),Gr(13,t.priceCurrency),Gr(12,t.sku),W(13,Zn(t.price));break;case"brand":Gr(6,t.name)}null!==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(ty
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 73 65 76 65 72 69 74 79 29 2c 73 72 28 65 2c 21 31 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 31 3a 53 74 26 26 28 65 2e 70 75 73 68 28 53 74 2e 69 64 29 2c 65 2e 70 75 73 68 28 53 74 2e 74 61 72 67 65 74 29 2c 65 2e 70 75 73 68 28 53 74 2e 63 68 65 63 6b 73 75 6d 29 2c 73 72 28 65 2c 21 31 29 29 7d 72 65 74 75 72 6e 5b 32 5d 7d 29 29 7d 29 29 7d 76 61 72 20 62 72 2c 77 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 2c 65 2c 6e 2c 61 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 75 6c 6c 29 3b 76 61 72 20 69 3d 6e 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 Data Ascii: severity),sr(e,!1));break;case 41:St&&(e.push(St.id),e.push(St.target),e.push(St.checksum),sr(e,!1))}return[2]}))}))}var br,wr={};function kr(t,e,n,a,r){void 0===n&&(n=null),void 0===a&&(a=null),void 0===r&&(r=null);var i=n?"".concat(n,"\|").concat(a):"";t
2024-10-28 19:14:35 UTC	1042	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 26 26 21 74 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 28 57 69 28 74 29 2c 7a 69 28 29 2c 62 74 28 29 2c 24 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 69 28 74 2e 73 74 61 72 74 29 28 29 7d 29 29 2c 6e 75 6c 6c 3d 3d 3d 74 26 26 69 6f 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6f 28 29 7b 50 69 28 29 26 26 28 24 69 2e 73 6c 69 63 65 28 29 2e 72 65 76 65 72 73 65 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 69 28 74 2e 73 74 6f 70 29 28 29 7d 29 29 2c 77 74 28 29 2c 48 69 28 29 2c 76 6f 69 64 20 30 21 3d 3d 61 6f 26 26 28 61 6f 5b 72 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 Data Ascii: "!=typeof WeakMap&&!t}catch(t){return!1}}()&&(Wi(t),zi(),bt(),$i.forEach((function(t){return Oi(t.start)()})),null===t&&io())}function eo(){Pi()&&($i.slice().reverse().forEach((function(t){return Oi(t.stop)()})),wt(),Hi(),void 0!==ao&&(ao[ro]=function(){(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49855	74.125.133.155	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	923	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-118123153-1&cid=42326441.1730142869&jid=1695172240&gjid=346098584&_gid=1202056417.1730142869&_u=aGDAiEAjBAAAAGAAI~&z=990716309 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-28 19:14:35 UTC	999	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Mon, 28 Oct 2024 19:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-28 19:14:35 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49868	13.107.246.45	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	417	OUT	GET /tag/8618shaoqp HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=643d1d536f214e709483fc18a9990413.20241028.20251028
2024-10-28 19:14:35 UTC	379	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: application/x-javascript Content-Length: 689 Connection: close Cache-Control: no-cache, no-store Expires: -1 Request-Context: appId=cid-v1:e55edbbe-e22b-46b4-8313-9ee2a4e71d12 x-azure-ref: 20241028T191435Z-15b8d89586fmhkw429ba5n22m800000006x0000000006zfc X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	689	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 61 2c 72 2c 69 2c 74 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 28 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 6c 61 72 69 74 79 2e 6d 73 2f 63 2e 67 69 66 22 7d 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 73 79 6e 63 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 73 79 6e 63 29 3b 69 66 28 61 5b 63 5d 2e 76 7c 7c 61 5b 63 5d 2e 74 29 72 65 74 75 72 6e 20 61 5b 63 5d 28 22 65 76 65 6e 74 22 2c 63 2c 22 64 75 70 2e 22 2b 69 2e 70 72 6f 6a 65 63 74 49 64 29 3b 61 5b 63 5d 2e 74 3d 21 30 2c 28 74 3d 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 29 2e Data Ascii: !function(c,l,a,r,i,t,y){function sync(){(new Image).src="https://c.clarity.ms/c.gif"}"complete"==document.readyState?sync():window.addEventListener("load",sync);if(a[c].v\|\|a[c].t)return a[c]("event",c,"dup."+i.projectId);a[c].t=!0,(t=l.createElement(r)).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49850	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	794	OUT	GET /images/new/img_gnav_stay09.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:35 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 8590 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "218e-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	8590	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49851	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	794	OUT	GET /images/new/img_gnav_stay10.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869
2024-10-28 19:14:35 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 7383 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "1cd7-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	7383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49854	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	820	OUT	GET /images/new/img_gnav_stay11.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 8205 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:43 GMT ETag: "200d-5e3186db741c0" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	8205	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49853	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	820	OUT	GET /images/new/img_gnav_stay12.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 9698 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:43 GMT ETag: "25e2-5e3186db741c0" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	9698	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49858	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	575	OUT	GET /images/mv/slide/panel_5-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 480891 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "7567b-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:35 UTC	16298	IN	Data Raw: 6a 42 9d 19 84 00 e5 56 2f e3 ef f1 1a cf 36 b3 65 c0 11 86 47 c4 37 68 e7 aa c9 63 48 9e 9d d3 cb 20 c5 55 43 6b a1 f0 f6 7a e9 c0 e3 cd 73 31 bc 92 a9 ba 83 c4 05 fb 6b 0a 7b 8e 98 f6 99 7d b6 2f 3b a9 5e c6 cc b8 84 8f 49 ae 99 3a 63 f5 32 5d c4 99 ae c1 79 5d 7c 44 d8 b1 ac e0 8b a8 5f 62 46 90 05 8d ca c9 dc a7 b2 85 71 ce c1 ac a8 99 4c 6a de f8 bd fe 8a 53 22 06 03 a7 c2 a7 55 a1 60 dc 9e 5c bc 3d 7f 65 74 e4 fc 31 2e e0 fe 53 a9 2a d6 23 88 ae 2a 1b 44 b5 b3 05 f8 84 bb 72 9e 61 63 d8 6a e0 2c b6 09 6f 32 4b 2e ea 42 58 79 71 3a 4a 8d c7 85 c1 15 ab 30 81 e6 7b e8 2b b4 ad f5 f1 0b 7a 3c 55 d1 87 b8 59 3b 4d 95 95 71 62 0a 6c 56 35 f5 fb b5 c3 2b b3 78 d8 a3 11 fc 45 07 51 7b 9a a3 49 58 33 3e 08 9d 5a 4e 65 fc 35 e6 e5 23 53 61 da 6b 6a e8 72 ee Data Ascii: jBV/6eG7hcH UCkzs1k{}/;^I:c2]y]\|D_bFqLjS"U`\=et1.S#Dracj,o2K.BXyq:J0{+z<UY;MqblV5+xEQ{IX3>ZNe5#Sakjr
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 24 8f 1a 07 43 ce d7 5e 66 4b ea 06 9a d1 e4 f8 f3 95 12 d8 58 b2 c5 54 21 83 bf 6d 32 f5 6a e4 c5 90 85 26 c7 30 ac 87 c2 14 91 7e 52 5b 96 d7 b5 65 f0 ca 38 a4 9a 2d cd 39 2a 13 f5 9e d7 14 92 e1 67 e2 cb e4 cd 9b 34 78 19 12 46 6e ac b2 9e 55 72 47 6a 7d 94 ff 00 4f f2 27 8e 54 8b a1 39 f1 a9 2d 51 a1 8f 60 d9 36 ed 9a 5d b2 1c 58 e4 83 1d 24 2f 2c a8 1a 49 64 0a 6f 23 13 a8 f4 01 59 66 cf 29 4a e3 84 12 30 dd 0d b4 ed bb ab 6f 2d 9f 1f 9a d1 26 1f 92 e1 8a b2 96 8c 6a 08 ae cf 2e 6e 31 4d 19 e1 55 65 9d c5 f2 76 88 5f 6a 95 4c f8 c6 ed 80 14 7f 78 1c d8 a3 01 f7 87 6d 75 7e 9b e7 45 45 a9 23 1f 2f c6 6d a6 82 8b b0 75 06 d5 d2 ec 26 cd 58 51 e3 79 27 db 48 2e 63 42 38 73 7d d6 23 b2 b8 33 cf 1b 9d 68 74 e2 ad 28 5c 79 f7 e8 f6 4c 2f 35 a3 87 6c 92 28 Data Ascii: $C^fKXT!m2j&0~R[e8-9*g4xFnUrGj}O'T9-Q`6]X$/,Ido#Yf)J0o-&j.n1MUev_jLxmu~EE#/mu&XQy'H.cB8s}#3ht(\yL/5l(
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: db 27 45 e5 93 20 86 89 1a e4 73 2b f8 74 b6 8c 49 22 a2 11 ac 87 27 a1 db c4 a3 17 11 21 62 9c b0 44 a8 ab fa c1 05 f5 f4 8b 51 0d 58 3d 11 0e cd 02 3e df b6 e2 c6 40 26 3e 79 39 47 06 7b b3 7d 46 9e 47 ee 6c 20 b4 35 bd 28 54 f5 76 ca 8a b6 3f 17 09 24 f7 2c 82 af c3 5f ec 5c cc 7c 97 ec 60 6e a4 8c bc 60 0f 74 44 a7 d3 7b 57 34 19 e9 a0 0e c0 4f 9a 3d 75 ae 4b 94 ac 7a 4e 2b 93 b0 3d f8 1b 8a d5 f6 9c 5f 79 82 ea 29 0a 6c 10 fa 32 1f ec 35 96 1b 9d 59 42 3d 17 20 6e 87 81 af ee bb 5e fe b3 c2 a7 c9 5e f6 11 d8 ce 30 5f 8d 94 0e 05 ce 9e da 75 f6 9b a3 d2 7a 50 f2 ed ff 00 89 60 a8 08 00 0a d6 0c e0 ce b5 03 6e 56 69 f7 42 ba 8f 2a f5 ca fb 8e 98 f6 a3 0f 10 0d d5 38 b6 b8 27 1c f3 5b b2 ba d3 ff 00 5f a9 0e e1 3d c8 c7 f0 c5 49 d6 e3 4a c6 37 2d 17 3a Data Ascii: 'E s+tI"'!bDQX=>@&>y9G{}FGl 5(Tv?$,_\\|`n`tD{W4O=uKzN+=_y)l25YB= n^^0_uzP`nViB*8'[_=IJ7-:
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 9b f3 b8 88 0e 0a 79 00 16 fa e9 e4 d2 88 51 dd 85 a2 9a 25 8e 16 0a 4b 3c ca bc 2d 76 2c 00 1e aa ce 31 ab 0c 8e 88 d8 74 d2 48 37 ed 8c a8 0c 01 c2 24 0e ce 7c f0 58 fb 05 7a 18 5f bd 73 38 72 76 be 46 67 77 89 f9 15 9d 83 0f 21 74 1a 1e 1c 6b ca a9 ee c6 e0 5d 95 c2 e8 47 13 c7 db 5a 4e e5 2b 1a ec ec e8 17 6f e5 57 b3 12 01 d2 fa d6 ad 68 73 2b 98 dd e5 cf e4 f1 dc 8d 72 1b 43 ea a8 c1 dc 6d 92 c1 5e 84 c8 e5 e8 57 ef 59 58 80 3d 75 3e 52 ff 00 63 14 6c 80 32 64 73 e5 31 0b db af d3 56 a1 a1 a7 59 be d9 32 e3 8f 6d 27 43 71 af b2 88 a3 0c 97 01 ee 19 0e 64 cf 03 c3 cf 1d c0 ee ac 5a f7 1a a7 a1 93 84 93 d5 58 7a 5c f9 27 4a ec ff 00 d6 f9 99 ee 1b dd 3c c1 8c c8 45 ae d7 07 d3 58 46 85 21 7a 7a 43 1c a5 92 fc e0 78 aa e9 a8 a4 16 df e5 72 91 17 04 5d Data Ascii: yQ%K<-v,1tH7$\|Xz_s8rvFgw!tk]GZN+oWhs+rCm^WYX=u>Rcl2ds1VY2m'CqdZXz\'J<EXF!zzCxr]
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: d5 a7 99 75 c8 9c 56 66 9f a8 e5 71 9a ab d8 cc 6d eb d2 b9 64 aa 56 2b 00 ba 89 9c 74 74 b7 23 c4 5e fd e7 c2 6b a7 0f 7a 26 56 61 6e 8d 9d 57 6a d8 c3 11 61 86 bc de cb d4 66 fc 56 2f fd 60 dd f4 01 b9 3f 20 e0 da 58 fd 15 30 b9 a2 ed 29 cf cb fe 7e c2 4e 50 6f 85 31 23 b0 78 07 0a e9 92 ff 00 5c 8c a2 fd c8 d5 95 c6 3d 3f 2b 15 e6 95 5e cb a7 03 db 5c 49 7b 4d 5b 7d 74 03 21 7f 85 c8 24 68 f1 f2 a8 1d 9c 2a b1 95 30 6f 48 c8 a3 66 9c db 57 dc 25 1f 45 ad 5d 1e 4a d5 72 33 c4 f4 61 ce a8 27 9e 06 23 40 8a 7d 9a 8b d6 2e e5 61 7a 19 fc f9 00 dc 76 01 7f f5 e0 03 dd a3 0a e8 c4 b4 97 22 66 f5 45 1d ce 49 46 43 15 12 32 ab 31 36 90 80 6f e8 a2 34 b1 2d 32 0d ba f2 a4 c9 a9 0c a4 5b 98 f6 fa ea e5 a1 37 08 fc b7 9b 1b 03 78 dd b2 72 62 79 b0 e3 9d 52 58 d0 Data Ascii: uVfqmdV+tt#^kz&VanWjafV/`? X0)~NPo1#x\=?+^\I{M[}t!$h*0oHfW%E]Jr3a'#@}.azv"fEIFC216o4-2[7xrbyRX
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 48 81 e2 f0 f4 a4 5e 8c 33 fd 83 5c 92 ee 08 9a 0c 66 89 76 d8 0b b5 8f c3 c7 af 67 f7 62 bc bf bb d4 f7 59 99 8e da dc 71 d0 b7 6f 1a de 37 25 d8 8b 2a 42 fd 5d b0 71 f7 5c 0f 45 89 ad 5f 64 8c d5 d0 7b 3d d5 f6 ec a4 d6 fc dc c3 d1 73 5c b1 46 b2 01 ed a1 84 f1 5f ef b7 2d eb a1 6e 67 22 d6 d6 0b fc c2 c7 e6 d4 9c 67 26 fd 82 e6 b3 7f 83 ea 69 f7 7a 1a 1c c7 65 82 25 b9 d5 98 fa 3c 3a 57 2a 55 46 9f 71 5f 0a 64 8f 1c 73 2f 14 78 ed db 7b 16 bd 5c 55 53 14 8c ff 00 46 2f f8 46 7b 7f f5 c4 03 eb ae 9f 2a eb 91 18 ac cd 06 6a 9f 3f 1c b9 e6 f3 0a 86 3d d6 e1 5c 8c b5 62 9f 52 87 ff 00 2b 4d 72 2e 3c cb f7 9b 03 7a e8 c5 de 8c e5 66 58 e9 d2 57 64 d8 48 1e 21 00 fb 34 a8 cd de f9 8e 1d a5 3d c5 88 cf 62 75 b9 b1 fe 5a 58 ee 5e c4 50 2b 0f 98 3b 5a ae bf c2 Data Ascii: H^3\fvgbYqo7%B]q\E_d{=s\F_-ng"g&ize%<:WUFq_ds/x{\USF/F{*j?=\bR+Mr.<zfXWdH!4=buZX^P+;Z
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 15 cd d9 90 01 5c f1 55 66 e8 0b be df e2 f6 45 3a 85 ca 1a 77 d7 66 35 a3 e4 73 e4 ba 0e e7 78 77 1c f5 e2 14 9b 7b 2b 9d 96 9e 88 13 b7 ad c4 f7 ee 6e 3d d6 e3 56 27 66 45 d2 f0 db 6e ea 7d 75 69 11 38 69 a4 80 d6 d9 9d b9 18 41 16 37 17 be 0e 38 00 96 d6 b9 e2 b5 37 76 2b 64 46 c9 bd 74 b1 6b dc ce 79 81 ef 20 0b d7 44 7b 64 65 3b a0 86 e0 1d f3 f7 16 46 36 0e dc 74 b8 e7 ac 37 65 ec 81 a4 ff 00 07 96 80 92 39 18 0f 52 8b d6 90 ba 26 76 62 e1 34 67 a3 b6 00 56 c6 36 98 96 ef 37 15 79 5f b9 8b 1a 08 e1 b1 f8 b9 49 62 05 ae c7 d0 6b 96 4b 53 a6 1d a3 b6 b8 b9 8f 53 dd b9 42 64 63 b0 5f 40 00 7e 9a bc bd ab 97 f3 22 1d de a4 f2 02 21 c4 63 a6 bd 9a 9f 7b 8d ab 95 b3 74 81 bd 57 e6 1d e3 67 49 08 1f 8f 1a e9 e9 04 5e bb 3c 6e d9 1c b9 bb 91 36 c1 cb cd 99 Data Ascii: \UfE:wf5sxw{+n=V'fEn}ui8iA787v+dFtky D{de;F6t7e9R&vb4gV67y_IbkKSSBdc_@~"!c{tWgI^<n6
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: b1 7e 41 7d bf 18 85 31 c8 8d 1a 05 bd ee a6 e6 e3 d7 59 ee 50 27 a8 f2 92 1e 9b dc dd 5b 56 82 54 01 4d ec cc 02 8b fe f6 b5 b6 08 d7 22 23 23 f6 b3 2f f2 e5 57 97 0c 11 71 f1 59 bf 56 22 d7 77 97 bf 25 fc 48 f1 6d ea ca 65 ad d4 db 73 7f f5 90 9f fd e0 a6 bb 5f 22 f2 77 20 f3 82 36 2c 97 bf 1d c3 2c 11 fd 31 5c ff 00 7a e4 8d a3 db ea c1 fd 32 01 79 ff 00 58 ee 1b 6d 87 fd 63 d6 b9 7f 93 33 87 f3 44 bd 66 3f 8b ca ef bb 5c fd 35 3e 3d 91 79 ac 1d 90 2f e6 5b ad cf ff 00 9b 31 2d eb 31 c7 58 ec bf b9 95 bb e4 65 f0 6d fe 60 88 1e c8 b2 0f b7 e1 de ba 5f 69 84 bb 82 db b9 51 b5 6d c0 9e 18 30 8b 1f 48 15 94 3b 9f 33 5d bd 0d 27 ca 76 1f 96 60 0b ea 8d 98 47 a7 f1 14 10 6b 2f 2f 46 fd 05 82 c9 1a af 9a 73 89 37 2c c2 c6 fc f8 2d 63 ea 89 05 66 9d 67 5e 46 Data Ascii: ~A}1YP'[VTM"##/WqYV"w%Hmes_"w 6,,1\z2yXmc3Df?\5>=y/[1-1Xem`_iQm0H;3]'v`Gk//Fs7,-cfg^F
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 2a 23 85 c9 b6 6d 3a 0f 01 46 e1 0e 4c cb ce 91 5a 56 07 ef 31 70 aa 2b 8f 3b ae 87 44 34 55 3d 13 2d 6d bd e3 86 b1 fc 09 ae 2d ae 92 37 0a 85 da 62 d7 b8 23 b0 4a 3f 32 cb 8f b1 72 a4 03 87 6c 66 93 5a a6 53 7b 05 7a b2 4f 2f 69 06 d7 b4 11 68 09 07 59 8f 75 5c 76 21 81 f3 66 b6 e3 8c 02 a9 f0 65 95 36 d7 85 24 bd ac 46 83 60 7b ef 19 eb ca 07 29 8b 51 c4 dd 07 1a 1e c0 8c f6 5c 78 cb d3 f9 65 d8 b0 59 33 09 ec 1e fa 5f 87 75 3a 6a 82 a1 88 5a 16 8f 0c ad 8b 6b 63 db ac 49 52 ec 58 bd 4a 54 6c 78 cb cb cc 4e e1 8c 40 22 fa f2 9d 69 c6 c2 77 2a ec 45 0e e9 9e cc 87 c1 1c 77 24 a8 d0 46 4f 7d 34 b4 13 65 dd e8 3b 66 e0 f2 b7 28 19 42 e3 b0 f8 3d 14 c4 8a f8 51 3f e6 f2 12 f7 be 34 0b c3 f5 59 4f 1a 96 f4 28 3b 8a 07 e5 e5 7b 08 94 5b db 49 03 31 5b 0b c6 Data Ascii: #m:FLZV1p+;D4U=-m-7b#J?2rlfZS{zO/ihYu\v!fe6$F`{)Q\xeY3_u:jZkcIRXJTlxN@"iwEw$FO}4e;f(B=Q?4YO(;{[I1[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49859	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	575	OUT	GET /images/mv/slide/panel_7-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 744197 Connection: close Last-Modified: Wed, 03 Apr 2024 03:11:01 GMT ETag: "b5b05-61528927ffb40" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:35 UTC	16298	IN	Data Raw: e4 cd 33 ad ad 2f e4 8a e6 6b 28 4f 6a d0 f2 bb 98 0a aa a6 c0 17 3e 9c 8b 0a 7d ba aa d3 af 40 56 69 64 b3 b4 ce dc f6 59 72 17 02 5b 56 83 84 88 e4 02 d1 c6 45 11 18 0a 89 96 95 15 d8 f4 d4 44 bc 03 fb 96 35 1b 87 f2 4c ae 16 51 75 88 bc e0 f2 72 52 92 2a 48 92 44 e7 92 ab c7 20 2a 0a 91 e8 35 a7 07 3d f8 dc ad 4c 1f 1b 7f 6b c1 b5 c5 f9 16 69 6f 2e 6d ee ee 92 38 7c 82 0b 2c cd d5 c4 b6 43 e9 e3 b3 31 1b 79 c3 5b 57 83 46 bc 55 4b 0d b8 d5 86 bd be 0f 75 6d ce 7a c4 fc 0e 67 ed 94 28 76 6a 93 d7 2d ea 18 be 37 89 c1 67 ef e2 c6 c8 22 8a f6 04 9d 71 9c 8c 82 25 49 28 5e 27 35 e5 11 e5 b5 77 1f 76 bd 0e 2f 6d 5e 2b bd af 0d 4c 1c f6 f7 3f 96 ba 65 3d 42 0e ba 8c 9c 49 19 df ee d4 b1 96 98 f8 83 db ba d6 a4 ff 00 b4 6b 3b 33 5e 80 b7 2a 55 77 f8 ea 88 60 Data Ascii: 3/k(Oj>}@VidYr[VED5LQurRHD 5=Lkio.m8\|,C1y[WFUKumzg(vj-7g"q%I(^'5wv/m^+L?e=BIk;3^*Uw`
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: e4 64 2a f6 d1 a3 5f 90 15 a8 5d c7 5d 65 0e 3f 80 5b 92 b3 fc 9f 37 fc 4c e7 9c db 5c c7 e3 97 eb 25 a6 4e ce 35 9e cc 85 ba bf 5b 98 95 59 f8 01 24 61 da a1 a4 42 01 f4 3a b5 a1 11 5e 9b 3e 4d bf fa 98 2f 15 69 c7 95 e3 1a 97 aa c2 ee 25 4f a4 e0 40 3c b7 d9 bf 10 d5 3f da 69 47 f7 2c 1e df 95 37 92 63 ae 23 56 ca 34 46 ad 2a 5e 08 c5 b3 14 21 97 bd 22 fb 96 3a fc f4 f4 db d7 5c e9 a8 2d d2 35 5f fb 49 e7 9e 51 90 83 ea ac 66 76 9e 09 09 59 de f6 61 dd b6 a4 ea 19 56 f6 d3 73 24 37 0c 0f 37 51 58 bd ab d0 6b 5a 2c 19 b6 d8 18 b5 5e e5 c4 48 b3 41 24 36 67 b7 6f 1b 89 ee 71 f0 b0 63 ce d6 43 5f ae c6 cd ca 85 4d 4a 7f 0d 9b d4 98 0b fd 9a be 68 7c 70 88 b2 93 5b 3d bd c5 cc 0b 67 16 2d af 38 c5 dd 57 0d de e2 43 72 6e 9b ed d3 53 73 4a 69 fc de a8 f4 0c Data Ascii: d_]]e?[7L\%N5[Y$aB:^>M/i%O@<?iG,7c#V4F^!":\-5_IQfvYaVs$77QXkZ,^HA$6goqcC_MJh\|p[=g-8WCrnSsJi
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: d4 c1 72 71 dc e8 03 88 1a 02 08 e4 43 50 69 51 e9 a6 98 9a 1a 05 40 fb 34 c5 03 c4 55 eb b8 d2 91 a4 38 25 36 e9 a5 23 81 ea a0 1d 12 32 60 84 91 4e 9a 96 38 27 48 c5 37 d2 90 39 e3 1d 29 a1 30 02 9a dc f2 e9 f7 6a 95 85 b4 82 48 91 54 bc a7 8c 48 0b 3d 37 34 1d 69 f6 eb 2f 75 ee 3f 1d 59 af 07 0e f6 68 71 7e 3f 34 96 24 cd 06 2f f3 96 12 bd eb c3 dd 8c ad 6b 5e 29 ed 2d 51 cb 5f 33 6f 77 c8 ec f2 cf 72 bc 74 84 93 af a3 ff 00 b1 66 6c 25 8a c1 2f ed f1 98 c1 14 47 ea 9e 78 ae 25 95 56 18 6b de 59 0a 21 e2 8c 3a ea 2d cd 67 86 ec 5e c8 ca db e8 49 0e 6b 21 0d d4 96 f0 5b e1 e1 1d a1 73 cb f5 07 8d 08 af 6e 83 d9 b9 a0 1f c3 58 ba a5 d0 bd f6 fe b5 f5 1d 7f 95 cd e0 fc 76 ff 00 31 90 16 a5 da e6 25 b3 44 ba b8 64 90 5c ca 12 18 4c 84 02 02 73 f6 d0 1d b4 Data Ascii: rqCPiQ@4U8%6#2`N8'H79)0jHTH=74i/u?Yhq~?4$/k^)-Q_3owrtfl%/Gx%VkY!:-g^Ik![snXv1%Dd\Ls
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: c1 77 6c 9a 2f 1d b7 bd f2 1b 9b 7f 13 fa cb 6b 0b 7b 69 ae 72 16 0f 2c 2d 27 e6 98 87 7e 3e 71 fb d1 64 44 af c2 a3 5d 5e de 8f 96 bf 8d 0f 9a ca 93 c8 db c5 47 f8 37 8b 61 33 97 7f 47 98 c9 0b 3b 89 5d d6 d2 ce 15 26 69 aa 18 ab 42 e7 db ed 2b 52 0f a1 eb 5d 6d ec bd 9d 79 2c d3 62 b7 3a a5 26 1d a5 7a 01 f9 0d 9f 93 f8 dc 4b 86 bc b9 06 da ca 71 91 8b b6 e8 25 0d 39 ed 09 6d e4 04 39 59 00 1c 95 4e cd d4 6b 4e 55 cb c2 f6 23 1a 2e 3e 57 b9 76 8f 06 f3 1b e4 f8 a9 b1 96 93 5c e4 6d da fe 77 22 ed 47 b2 56 b8 96 4e 21 9e 20 07 b9 c7 12 c4 0a 13 be bd 7f 6b ee 2a e8 a5 fd c7 1f b9 ab de 95 6a da 82 de 40 55 99 18 6e a4 ab 0f b4 1a 6b ac e7 21 9a de d6 69 e1 b8 96 08 9e e2 dd 84 90 dc 14 1d c5 60 08 04 38 f7 74 3d 0e a5 f1 a6 e6 24 d2 bc d6 4a 27 00 39 3f Data Ascii: wl/k{ir,-'~>qdD]^G7a3G;]&iB+R]my,b:&zKq%9m9YNkNU#.>Wv\mw"GVN! k*j@Unk!i`8t=$J'9?
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 37 54 c9 ab 69 84 5e e4 2c b1 f3 dc 5b e1 24 b9 9b 01 c1 1f b5 92 8e 35 95 26 70 0c 8b 1b 46 59 46 ff 00 23 03 ee 1a 56 a2 f9 85 de e7 9c 22 a6 ee 4b 19 2e 63 78 95 c5 17 89 67 ab 30 a7 ca 6b be cb fe cd 0f 41 2b c3 8e 85 be 37 14 21 b4 7e cd d5 b3 e5 63 a7 7b 1a fe f7 92 27 05 95 a2 71 bb 48 0d 3d 83 7a 6e 36 d6 56 6d 96 9a 01 7b 6c 64 d6 69 74 5e 6b 5b c3 35 6e 2a 80 c4 22 6a 15 92 26 0d c9 f9 1a f2 52 bf c7 4d 5f a6 a6 57 b4 74 12 cd a0 b3 2f 71 0c 71 ca ce b2 08 79 16 00 2b 7b 0d 28 c3 71 d7 7e 9b 75 1a 1d 98 59 be 83 31 8f 6e b3 01 75 14 92 db db 32 35 d4 0a 78 34 91 09 01 95 43 8f 91 9a 33 ed 3e 87 a6 b4 ad 92 b2 6c a5 76 b5 46 da 6f 3a b3 31 5e 59 e2 e2 37 76 b9 89 e3 b9 c8 64 b2 71 2d c5 c8 81 01 ff 00 a7 dc 72 a8 94 c6 c0 37 7b 66 71 5f 5d 7a 17 Data Ascii: 7Ti^,[$5&pFYF#V"K.cxg0kA+7!~c{'qH=zn6Vm{ldit^k[5n*"j&RM_Wt/qqy+{(q~uY1nu25x4C3>lvFo:1^Y7vdq-r7{fq_]z
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 95 ca a0 36 f2 33 30 0f 15 57 97 17 00 87 3d 1a ba db 8e 89 2c 31 59 ee d5 47 c0 b4 14 e8 35 a0 87 07 f6 8a e9 8c 81 dc 93 b6 a5 81 13 36 fa 60 32 bb d4 e8 01 b5 fe f3 a4 08 52 68 3e dd 00 13 85 7f fa e6 38 7f f8 4c 3f fd b0 6a 79 3f 6b f8 0e af 28 f9 7b 17 e6 f6 17 b6 a3 1f e4 06 47 50 38 c7 93 55 ac ca 29 4e 32 a8 fe a8 f8 32 ef 4e ba f0 1d 19 9f 27 06 d6 9d 46 4b 7c f8 d8 d8 62 af 05 de 32 75 30 dc 40 2a eb 27 10 78 bf 62 61 e8 a6 85 7a e8 48 bb 45 9e 86 c2 ce 4b 0f 29 c4 c7 3c d6 ab 6b 93 b7 8c 0b 5b d8 02 02 78 80 15 e2 91 3a a8 e8 63 7e 9a 2c 61 7a 5a af 3a 19 1b fb cb 88 f2 ad 0c b8 98 e0 bd ef 13 2d ab 46 b2 5a cf 11 fc 0a 3e 6f 78 eb c4 d7 d4 53 52 ec d6 4a aa 69 17 be 45 82 c4 e4 65 b2 cc 72 b8 5b 67 4e dc 82 33 4b 91 2c 2b 44 05 e8 c3 bb 18 1c Data Ascii: 630W=,1YG56`2Rh>8L?jy?k({GP8U)N22N'FK\|b2u0@*'xbazHEK)<k[x:c~,azZ:-FZ>oxSRJiEer[gN3K,+D
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: ec d6 37 e8 b2 3a 33 84 55 75 e5 15 57 97 db a5 8e e6 b4 b5 df ee da fe 86 da fa d2 e2 09 6e 5e fb 1b 9c 86 ce 61 12 2a db 5d 47 30 24 6c e6 41 dc 3c 47 3e 34 3a 4f e2 55 54 f4 ab f9 ff 00 10 e8 db 2c 2f 96 ab 9f 16 b4 7e 7f 99 0b 12 db 71 db 7a 6f 5d 25 6f 25 be 35 ac 57 d7 f8 85 a4 77 32 49 39 8e 2c c8 95 8a 09 c9 9a 25 04 85 f6 91 bf a0 3a 72 c9 49 76 af af f1 1c d6 57 8f 6d 1a 5d 47 95 32 13 18 70 b3 c7 fd 40 41 07 63 fc c2 ba 6d b1 25 5e cb d4 73 e2 b2 4d 32 95 4c b1 8f 89 e4 45 da 29 2d 51 4f 5d 24 27 b7 c0 21 c7 5d c8 97 62 d6 db 36 66 e7 2a b1 fa d4 50 66 00 0e 5f 3f 4e 9b d3 4f 22 c7 48 12 e3 1c e1 2d 22 b9 c4 e5 25 92 49 14 46 cf 7e a0 09 82 13 ca a2 40 7d 0f 4d 0c 37 43 e8 65 ff 00 70 f1 99 28 bc 6f 2d 74 f6 77 f6 f6 51 43 6c b1 ac 97 a2 58 84 Data Ascii: 7:3UuWn^a]G0$lA<G>4:OUT,/~qzo]%o%5Ww2I9,%:rIvWm]G2p@Acm%^sM2LE)-QO]$'!]b6fPf_?NO"H-"%IF~@}M7Cep(o-twQClX
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 7e 88 a5 ca 64 7c d6 e3 c3 6c f2 79 2e 3e 47 e3 77 71 bc 18 fb b9 e5 69 1b 1f 76 49 5e da 4a a7 b9 14 e1 53 e4 7a a3 a9 1a c2 dc 96 b2 ce 86 f6 f6 b4 e3 b2 b4 e6 df e0 4f 6f e1 76 19 58 2e ae 7c 7f 2e 6e 6c 6c 4a cc 70 e2 ea 28 32 76 f1 8b 65 9a 39 53 be 62 85 cc 33 b3 46 fc 28 47 a7 5d 42 e1 76 72 98 5f 97 8e ab 74 ed 65 42 c7 e4 1e 59 e3 77 77 69 7f fa b6 77 c7 8a 5f f7 88 92 4c 8b 58 c8 08 9f 84 a4 d6 44 b7 94 87 64 75 2c b5 24 1e 35 d5 a9 b2 cf 43 75 55 5a ee ab cf 52 92 1b 1b cb dc b4 50 e3 ed 99 ee 2f 9d 16 3c 7c 47 df 29 7a 32 2a 53 7a b3 74 a7 f0 d7 23 ec 4b 57 79 4b 22 2d d2 e4 6d be 86 f6 dd 63 b8 59 25 ed a4 6b c4 21 72 2a 8f 1d 79 6d 24 75 23 ae e7 57 1b 48 8d a9 d8 3d ef ec 3e 9e 1b 3c 95 b4 92 c3 00 11 19 97 ff 00 33 0b 6e 63 92 22 db 50 8f Data Ascii: ~d\|ly.>GwqivI^JSzOovX.\|.nllJp(2ve9Sb3F(G]Bvr_teBYwwiw_LXDdu,$5CuUZRP/<\|G)z2Szt#KWyK"-mcY%k!rym$u#WH=><3nc"P
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: d4 60 50 03 b6 b9 6f 57 ab 37 a3 4b 4d 40 63 c7 1b bb a9 25 83 0e 5e ea d6 19 26 bf 79 98 3d b4 49 c0 00 de ee 4a 19 80 5e 5d 5e a3 5c cd 4e 88 dd 4f 56 2f 8f f8 3d 8c 77 96 57 d7 92 1c 81 43 75 7b 35 fd c5 64 b5 2f 68 51 5d e8 47 b6 34 90 f6 c2 6c 59 e9 d1 46 b2 5c 69 3c 95 6e 48 58 40 fe 45 9f be bb c8 44 26 b8 9a ef 19 61 33 ae 22 d6 45 45 8c 1d 98 f1 11 2a c6 ac 2b 57 61 bf e1 07 5c 9c b7 6d 92 ab 0b 0c a3 bf 8e e5 66 56 6b 86 b3 50 85 a6 56 ac a1 25 24 9e 6d b9 66 e3 5a f1 2d b9 a7 a6 b9 41 02 5d 5f b5 ac 29 d9 04 c5 2b b3 3d fc 80 77 5e 6f fd e9 27 e7 a1 6a 9e 3b 69 34 e4 d1 26 ca 1c 9c f8 b1 3f 60 28 b4 e3 00 59 04 4a ec 6e 08 15 2c f5 2d eb ee df 56 93 2a 08 20 bf fa 2f a7 4b 58 e3 91 a3 32 10 5c d0 17 3c 47 27 a5 36 5e 54 d5 24 3d b2 5f 4f e4 d6 Data Ascii: `PoW7KM@c%^&y=IJ^]^\NOV/=wWCu{5d/hQ]G4lYF\i<nHX@ED&a3"EE+Wa\mfVkPV%$mfZ-A]_)+=w^o'j;i4&?`(YJn,-V /KX2\<G'6^T$=_O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49869	74.125.133.155	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	900	OUT	POST /g/collect?v=2&tid=G-RFKGKFWG67&cid=42326441.1730142869&gtm=45je4ao0v881287644z878713577za200zb78713577&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533422~101823848 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-28 19:14:35 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Date: Mon, 28 Oct 2024 19:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49861	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	575	OUT	GET /images/mv/slide/panel_4-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 210938 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "337fa-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 60 35 01 2c b4 88 aa d0 69 1c d6 e4 66 b4 8f 2a 2d 05 00 ac 0a af 9a 40 cb 96 69 46 ca 0a 64 a1 45 48 02 51 29 1e 1d a9 8a 8a 28 0c a8 84 ea e9 5f f5 4d 9f f8 f6 ff 00 be 17 6f af fe e6 bf ea 9f d5 cf bf fd bd bf 95 7e 3e 25 29 07 fd a4 d0 e0 bd 0c 7b 34 85 d2 21 21 20 e0 bd 30 22 aa c9 91 1a a5 ea 18 30 03 1f c1 6b 58 32 a0 49 10 76 05 cb f3 41 9c 96 a6 89 c0 c8 bb f2 ef 55 42 41 c6 43 80 cf b1 2b da a8 30 67 38 57 4e 6e b2 d4 aa 04 09 e0 5f b3 35 2c ae 02 5a 74 81 9f 8d 13 18 6a 62 44 71 26 35 ae 26 bc 51 86 b2 28 08 62 43 61 fa 2b 0d 65 44 92 ee 3c a3 26 aa 59 54 40 c0 50 64 19 95 69 58 63 5c 00 fb 14 27 a9 d2 7a 8d bb 5a b6 fb 8a da 9f d2 73 89 5a b7 31 9e 65 e1 c5 bb 90 95 eb 91 80 78 1a 02 46 4b 97 97 4b e4 5a 80 88 61 db 8b a7 0c e5 a8 05 f9 e4 02 Data Ascii: `5,if*-@iFdEHQ)(_Mo~>%){4!! 0"0kX2IvAUBAC+0g8WNn_5,ZtjbDq&5&Q(bCa+eD<&YT@PdiXc\'zZsZ1exFKKZa
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: a8 8c 92 cb c4 ea 15 be ce b8 ec f4 69 5f 19 d7 40 fe 4d da 54 47 0e 4b 96 be 2b be d1 f0 17 2e 1f e5 48 90 c0 92 0c 7b f1 5e 8d 3c 3c db 5e 5a c0 81 23 21 81 60 d5 3c 95 61 74 db 9b 4b 17 2f 5e 20 05 64 c7 46 a0 72 70 38 2d 7c 33 8a 89 f9 49 d2 69 40 e4 ac c8 a9 7f 26 e4 4e 2e 38 fd cb 9e da 37 3b 2b 48 75 00 68 4d 43 53 b5 71 df aa bd 3a f6 b7 86 e6 2c 4c 8b be 55 c5 79 f6 eb 77 d3 b6 36 8d d8 ea f2 90 48 e0 bc fb 68 ef ae f9 3f 59 a8 ee 28 b9 d8 eb 2b 48 de 2e 6b 5e 0b 1b 6a dc ad 6d df cc 9a 64 eb 8e da af 67 44 2f 93 cf ec eb cf 7a eb 7a ec da 37 81 ed c5 5e b5 64 dc e3 9f c1 67 d4 e5 42 78 57 b5 52 62 2b 55 a8 65 55 61 2a 33 e1 9a 73 c8 7b fd 0d 86 d8 6e 36 b2 7d c5 a9 11 ba db 92 c2 e5 bc 62 47 35 ed eb d6 5d 73 af 99 e6 7e af 2f 66 d8 db 17 c5 f1 Data Ascii: i_@MTGK+.H{^<<^Z#!`<atK/^ dFrp8-\|3Ii@&N.87;+HuhMCSq:,LUyw6Hh?Y(+H.k^jmdgD/zz7^dgBxWRb+UeUa*3s{n6}bG5]s~/f
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: f3 13 86 6f 4f b9 74 d6 e2 2d 66 5d 7d 3b a4 6e 77 77 05 bb 70 33 9b 86 84 6b e2 b9 77 fd 8d 74 9c bd 3d 7f 52 ec fb 8e 89 ec 5b b6 c0 dc f5 28 0b 76 c3 35 91 f5 48 8f ed 72 5f 2f b3 ec 5d a6 67 87 d2 d3 6d 75 e2 79 7d 3c 36 7b 78 48 01 6f 47 f6 40 14 f0 5f 32 7d 0e bb b5 db 69 9b 5d 36 ee db 1e 5e b7 48 b5 62 1b 8d 72 0d 30 08 6c a4 25 4a af a3 f4 3e bf 56 9b db ac c5 f0 f0 fd ad f6 ba e3 e1 8e fb a7 ef ec ca 57 6d 11 e8 0c b1 20 85 f3 7e ff 00 d2 fb 3d 7b 5d fa af ec 75 ea ee eb db 8b fd cf 96 ea dd 42 5a 0c e5 2c 0b 47 91 5f 0b 4b b6 fb 67 6b 9a fb 5f 5b a3 9c 38 a1 ef 5e a0 23 0b 72 b9 13 2b 6c 41 cc b7 15 f5 ff 00 f6 7b e4 92 6d e1 e8 bf e2 7a f9 b8 f2 f6 af ff 00 a8 fb ed d5 af 46 46 36 6c cd bd 51 6c 00 e5 6f ee 7f 94 fb 5d da fa e7 d6 7f 0e 32 f9 Data Ascii: oOt-f]};nwwp3kwt=R[(v5Hr_/]gmuy}<6{xHoG@_2}i]6^Hbr0l%J>VWm ~={]uBZ,G_Kgk_[8^#r+lA{mzFF6lQlo]2
2024-10-28 19:14:35 UTC	18	IN	Data Raw: 49 27 24 14 d7 00 99 19 2d 32 91 a2 7d 68 cb af 6b b4 Data Ascii: I'$-2}hk
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 91 aa fa 1f 5b eb e7 97 97 bb bb 0f 4e d5 93 6e 8b ec e9 a4 d5 f2 f7 df da ba 2c db 95 d9 69 18 71 5d 18 7a fb 6d bc 6d 41 6a 39 da e6 df ef 74 c0 80 58 05 9d b6 c3 5a eb 97 c9 75 21 fc 83 23 29 11 10 be 67 77 66 5e fe ad 30 f0 c4 22 2f 68 b2 1c c8 d0 e2 57 2e 9e bb b5 77 ec df d6 3d 3b 50 16 21 a2 38 fe e9 2f a7 ac f5 8f 9d b5 cd 7a 5d 33 a5 dc bf 70 4e 6f a4 60 ba 6b ae 59 b7 0f ab db 6d a1 66 00 10 c0 2e f1 c2 dc b9 7a 9f 50 8d 98 11 1c 4a e7 be f8 6b 4d 72 f8 ae ab 7e 7b 9b 84 3d 0b f7 af 9d db d9 6b e8 75 69 87 9d fc 60 25 da bc f5 e9 95 43 6e 1a 82 9f 14 60 7b 34 8e da ac ce d5 aa 7d 47 b3 41 b7 1f 8a 30 3d 9a 47 6e 1d 88 ed 4f aa cb 41 b7 7c 43 26 41 6a c6 d8 1c 45 56 a6 a3 d9 63 6a fd e5 33 51 ec d6 3b 2e 4b 53 46 7d 9b c3 65 85 16 bd 19 f6 6d 0d Data Ascii: [Nn,iq]zmmAj9tXZu!#)gwf^0"/hW.w=;P!8/z]3pNo`kYmf.zPJkMr~{=kui`%Cn`{4}GA0=GnOA\|C&AjEVcj3Q;.KSF}em
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: b3 4a 48 42 22 0e 3e 01 48 91 94 4b 51 11 59 20 a6 a4 96 ee 59 44 5b f0 51 2c 16 09 d3 83 26 50 38 27 28 2a 54 4e 33 ee 56 72 85 3c 32 49 14 40 0e 33 a7 6a 25 24 af 94 31 5a 90 1e 4e 94 54 64 a3 a7 14 c4 61 b0 4c 07 de a8 8f 2c 31 5b 64 76 a9 02 43 d7 05 04 9e 3c 95 78 29 22 8a 08 23 3e 09 0c e4 07 0e f4 c2 ca 51 fb 66 9a 18 ce 15 fb d2 63 9a 70 38 71 54 a2 b0 95 ac be 2b 52 8c 30 9d 81 54 a9 18 ca cd 19 dc 26 5e 13 29 d9 18 80 40 fd ca 4c a5 61 89 32 c1 8f cd 6b 2c e1 94 ad f0 e7 da b5 28 41 80 7e 44 63 97 34 ca 51 38 63 8a d6 58 a5 a2 45 8e 63 20 cf da a9 54 8f 57 da 10 8f fe ef e8 8c 70 df ed bb ff 00 ad 05 d7 eb df fc 9a ff 00 aa 38 fd 89 ff 00 8f 6f e5 7f a3 f3 cb 5d 36 16 ae d1 eb f5 0e 07 9f e0 bc 3b 77 5b 1f 42 75 cc f2 ed 8d a8 ca 1a 4e 42 b5 7a Data Ascii: JHB">HKQY YD[Q,&P8'(*TN3Vr<2I@3j%$1ZNTdaL,1[dvC<x)"#>Qfcp8qT+R0T&^)@La2k,(A~Dc4Q8cXEc TWp8o]6;w[BuNBz
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 72 79 3d a0 e1 81 7c f0 e6 57 9a f2 f4 49 87 94 cc 49 ec 7f c5 63 d5 ac 99 89 32 20 b1 24 57 b5 6b 55 6f 06 22 70 20 00 18 0c 0b a3 03 26 c3 cd 1a c4 91 c3 ec ca c1 c9 4a 24 01 10 1c 8c 87 c9 d5 8e 19 b4 cc 64 08 11 04 45 9f 0a a6 6a 2d e5 a6 89 16 71 e6 03 0e 4b 2d 98 8c 65 20 18 08 e5 c4 a7 6b 46 41 89 a5 3f ee 8e 0b 1c 9a cd a0 09 38 64 cb a4 f0 cc a0 5b a1 c4 00 e4 72 c9 5a b5 60 b9 17 25 c0 04 8a 03 9a d0 cf 0c f4 97 20 d4 81 57 19 a5 91 1b 62 46 34 76 39 e2 d8 a7 2c 86 3a 8b 80 d9 b7 35 64 88 c0 3b 9e cc 54 27 0b 63 aa 44 c6 ac 72 cd 39 e4 ec b0 08 94 7c be 62 03 8c 93 90 d8 44 ea 69 0c 30 2e a3 f2 61 f4 c8 35 7c 7c 15 2f 0c d6 91 05 c1 62 33 07 b5 2b 2b ad 1f 8e 3c 68 91 95 88 dc 00 3e 67 10 c1 9d 14 c2 02 40 91 91 cf 10 9a 25 44 83 c5 80 c7 2f 8a Data Ascii: ry=\|WIIc2 $WkUo"p &J$dEj-qK-e kFA?8d[rZ`% WbF4v9,:5d;T'cDr9\|bDi0.a5\|\|/b3++<h>g@%D/
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: ff 00 f2 78 3e c6 b2 4e 18 f4 9d dd bd dd c1 6e 52 63 23 e6 00 1f a7 92 eb db db 23 1d 7a 5b c3 bf 75 7b 6b 6e 73 b3 02 40 94 9a 72 1c 3b 69 d8 bc 1b 76 cf 6c d7 b7 4e bf 5d 78 6f 6a fe d6 fe 31 11 80 02 30 6c d8 50 8e 0b c3 db d9 7d b3 1d b4 d7 8c 56 57 6d 03 7a 12 7f dc f4 6a fd c8 fc db 79 17 49 6b be de e0 5a 81 8f d4 4b b9 e1 c1 72 db bf 6b 1d b5 d3 0f 3e f4 a3 30 5a b5 24 e5 8d 15 32 2e bc a6 7b 43 7a d1 16 9c c6 2d a9 b8 83 50 cb a6 93 9c b9 db 85 58 b1 38 da 89 6d 32 6a 3f 0c 97 3e cb ca eb b5 d7 66 d6 90 26 64 1c 9f 2a e3 b6 df 0e 92 3a 8c 0e 8d 62 b2 27 b2 ab 94 bc e1 5e 23 d2 db 74 e9 1b 62 45 c1 cc af 36 fd bc 8d 79 e5 57 76 31 b7 30 46 39 fe 08 9d 99 8b 6a f4 ac c6 2c 00 c0 8c fc 17 9f 61 ac cb 1b a6 30 26 95 c1 df ee 5a d7 97 4f 56 32 dc 08 Data Ascii: x>NnRc##z[u{kns@r;ivlN]xoj10lP}VWmzjyIkZKrk>0Z$2.{Cz-PX8m2j?>f&d*:b'^#tbE6yWv10F9j,a0&ZOV2
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 3e 42 68 99 55 9c ab d9 bd 67 a9 6f bf cc 3f 93 b8 9d df 4a c8 95 bd 4d 43 5a 85 4a ac 78 fb 7e b3 d6 77 71 36 ae ee e7 3b 73 0d 28 96 62 0a 32 70 f6 b6 30 f4 e0 01 46 4b b7 58 56 56 14 24 0a 42 9d 49 40 85 23 0a 4a 0c a4 60 29 28 04 a5 80 14 32 b1 10 a0 b1 10 ac 25 88 04 a5 88 05 23 10 0a 47 e9 85 21 a0 29 0f 4c 29 0f 4c 29 11 b4 38 29 24 d9 1c 15 84 47 6f 14 61 20 ed 47 05 61 65 27 6b c9 18 39 49 db 72 56 16 52 76 fc 91 ea 7d 92 76 e5 1e a7 d9 06 c7 24 7a 9f 64 9b 05 1e a7 d8 bd 2e 48 f5 5e c8 96 de 27 10 8f 56 a6 cc a5 b2 b4 7f 68 58 bd 71 a9 d9 59 4f a6 59 96 4b 37 a6 56 e7 75 8e 7b 9d 1e 27 05 cb 6f ab 1d 35 fb 55 cd 73 a3 cc 60 b8 df a8 ed 3e db 9a 7d 32 f0 fd ab 8e df 52 bb 4f b5 18 4f 65 31 fb 48 5c 6f d6 76 d7 ec 46 32 da c8 65 55 cb 6f ae e9 3b Data Ascii: >BhUgo?JMCZJx~wq6;s(b2p0FKXVV$BI@#J`)(2%#G!)L)L)8)$Goa Gae'k9IrVRv}v$zd.H^'VhXqYOYK7Vu{'o5Us`>}2ROOe1H\ovF2eUo;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49860	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	575	OUT	GET /images/mv/slide/panel_2-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 233663 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:42 GMT ETag: "390bf-5dcacb9213480" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 2d c3 15 78 2c 5a dc 8d 2b 5b 5a d3 05 c7 6d 9b 91 ad 6b 69 96 0b 95 d9 a9 1a b6 f6 c0 0c 06 2b 95 d9 a8 d9 db 2c 75 48 09 18 2c 5a ae ce c6 dc 36 31 40 b9 65 a5 af 4d 66 d4 38 47 55 32 17 e5 ab c1 22 64 1b 60 02 a9 91 e8 84 ca e5 3c 36 e2 b9 2d 46 6d 5a 64 2b 71 8b 4e 30 e0 b5 94 33 d1 e8 aa e5 56 e2 1c 0e 0b 15 65 66 ba 11 53 82 36 19 6e 2a a6 55 21 b6 ab 72 53 26 48 2d 69 c1 65 72 5f 40 0e 08 64 a6 21 42 aa 29 dd c4 2a a5 ad 46 45 cc 3e 6a ad 4a 2a ba 20 73 0b 48 89 d0 36 b8 26 44 46 13 54 0f 0d a2 00 aa 21 79 54 41 20 c1 6a 22 a3 db fd 0b 42 33 19 2a a6 0c 30 9c 95 c9 83 0c 0a e5 30 8d d0 1f 62 d6 4c 22 74 04 1c 96 a5 67 07 47 19 c0 73 52 d1 29 8d 67 2a 5f 4c 05 2d 54 d0 43 57 29 49 1a f6 90 f4 59 aa bc c8 85 54 54 12 30 03 ed 5d 75 29 f6 67 c9 ed 53 Data Ascii: -x,Z+[Zmki+,uH,Z61@eMf8GU2"d`<6-FmZd+qN03VefS6nU!rS&H-ier_@d!B)FE>jJ* sH6&DFT!yTA j"B300bL"tgGsR)g_L-TCW)IYTT0]u)gS
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 5d ac 8e 9c d7 11 d6 3b 2c f1 5f 77 18 98 78 50 bc 71 5c ec 6a 20 33 69 34 aa c6 5a c0 74 f5 56 d3 05 61 d4 92 65 0a e6 25 d4 ca 32 29 8a ce 55 3c 06 a5 6a 5c a5 68 42 40 5d 7c 7a 39 54 86 43 45 f3 fd ae 0f 28 d6 b5 6a dc 46 e0 29 87 e6 0b c3 c7 c3 17 6a 87 72 db 9a e6 b8 53 07 0c 09 e6 bd 1c 9c 1f 23 8f 93 0f 3e df 2c a4 6d cb 67 63 7e 0f 2c 83 92 bc 17 a6 1e c6 c6 d4 d2 e0 c9 99 ca 8f 1f b5 67 c7 ab 1b df 82 dd bd d4 90 c9 2c 44 e4 6a 12 71 c4 bd 5d c7 6e df c3 f2 71 80 e1 5a 79 bc 57 a3 d5 e7 fd 2a f9 fe cf 1d b5 73 76 dd 23 89 80 35 c3 51 05 7b bd cf 7b ce cc 39 70 f0 fc de 79 b9 5d 3e 6b 97 b8 f3 5f 36 ed 6f 5a fa 7a 6b 88 ab 1c 9c d2 35 52 96 c7 33 68 ec c6 45 6a 56 7b 1f 6d 13 98 68 ef 61 5b 86 d5 3d cb c8 d2 d4 de b3 ac 57 99 fa 9d d0 61 ee 58 8d Data Ascii: ];,_wxPq\j 3i4ZtVae%2)U<j\hB@]\|z9TCE(jF)jrS#>,mgc~,g,Djq]nqZyW*sv#5Q{{9py]>k_6oZzk5R3hEjV{mha[=WaX
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: e5 e4 ad ab 5b 4a d0 90 bd 3a ea e1 6b 4e 1b 60 06 4b d3 a6 8e 5b 6e b9 1c 34 5e ad 38 9c 76 dd 3b 58 bd 7a 70 b9 da 78 62 f5 6b c1 18 bb 1c 18 17 69 c7 22 64 b4 5b 91 02 01 00 82 29 e0 64 cc 2d 70 f0 2b 8f 3f 04 de 7e 2d e9 bd d6 b0 ee 6d 4b 1e 5a 46 4b f3 dc ba 5d 6e 2b df ae d9 8a 33 5b ae 16 36 80 46 5a 68 b9 e3 02 cd be 74 2b a6 b5 1a 10 b7 25 d6 46 76 5b 62 ef ab 8d 4d 18 c5 75 d5 ce a6 0b d5 a4 73 4a 06 0b e9 6b 31 1c e9 55 02 01 00 80 40 20 10 08 04 02 04 76 4b 3b cc c5 88 25 18 2f 9d c9 1d 75 62 6f 0c ad 08 5e 5e 57 a3 47 37 7a da 02 57 87 77 ab 4a e6 37 1b a6 c6 e2 17 2c 3b eb 58 b7 57 4c 7b 48 aa d6 ba f5 6f 2e 7f 70 78 35 35 5e 9d 59 ae 4f 78 78 0d 22 b9 9f b1 7a b8 e3 95 72 57 3e 79 4f 25 ea 8e 35 1b 5a 02 18 4a c0 d2 a2 a7 63 58 b2 b1 6e de Data Ascii: [J:kN`K[n4^8v;Xzpxbki"d[)d-p+?~-mKZFK]n+3[6FZht+%Fv[bMusJk1U@ vK;%/ubo^^WG7zWwJ7,;XWL{Ho.px55^YOxx"zrW>yO%5ZJcXn
2024-10-28 19:14:35 UTC	18	IN	Data Raw: a3 e8 70 fd 37 1f 37 97 77 a6 d5 69 fc 3e 1d e2 1b 91 Data Ascii: p77wi>
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 0d ad dc 14 85 9a 0b 84 97 01 d8 c4 5c 3e 1a 85 eb f4 b9 bc ba 5e ee bc 91 3f d3 5d b5 ad b2 9f 75 ba 94 32 08 48 0d 8f 2a 91 89 3e c5 e1 fd d3 9f ea 9c 73 bd 6f 8a 74 cb a2 b0 75 fd eb af b7 e8 9a d8 f6 f8 00 6c c5 f8 6b d6 43 5a d6 f5 d2 71 5e de 3e 3f 1d 31 7e 0e 7b 6d 33 27 cd 7e 0b 38 db 68 fb 73 fd c8 24 35 a3 88 76 2d 3e e5 f2 b9 67 87 26 5d a6 d9 8e 3a f7 6f bb bc be 8e ca 26 ea 95 ae 31 d7 85 2b 9a fb 3a 6f 26 b9 72 da 75 75 d6 db 60 96 fa d3 6f 80 56 db 6f a3 75 70 74 b4 ab 9d ec 5e 4b 73 4b b6 26 5e 8d b0 4a e0 c9 2d f4 7f 85 3e 56 b8 f1 70 18 ae fe b6 f7 36 7f 92 be 7f 2c f8 fc 5c b7 7f 5c 46 fb c9 18 c3 48 60 b6 6b 18 46 42 ae c5 78 3d fc 5e 49 8f fc 64 8f 6f a5 3e 9e bf 36 75 c6 ef 1c 16 14 b7 79 32 02 d9 5f 10 1e 63 10 8e b9 f5 2b 86 f3 af Data Ascii: \>^?]u2H*>sotulkCZq^>?1~{m3'~8hs$5v->g&]:o&1+:o&ruu`oVoupt^KsK&^J->Vp6,\\FH`kFBx=^Ido>6uy2_c+
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: d1 43 db 5f c3 bb b7 71 9d 8f 3f 2b 76 59 70 e0 71 a1 02 81 9e 15 aa e1 c9 ea ce 2e 5b f2 73 fd 6f 3e 39 f3 74 f7 7b d4 3b 7d 8c 4e 75 1f 73 39 d3 6f 05 71 71 26 9e e0 be b7 1f 3c d3 8a 5f 8d ec f2 4e 1f 2d af ca 1b bb c7 05 a6 c1 23 26 76 97 1d 3e 61 c6 67 3b 57 fa 49 ed f8 e9 c1 65 fe d5 38 ed db 93 31 83 f3 e2 c6 fe 59 20 84 cd 2d e3 63 30 72 0e 22 8f 72 fc f6 db dd 39 2d 93 ef c7 fd de df 0f 2d 7a de c9 fb 6e d9 c2 6b 9b c9 73 8a ad 04 f1 79 2b a7 ad a4 96 ed ff 00 8f f5 63 9f 6e 92 4f 8a cc f0 7a 77 4f 63 9d 59 08 ae ae 4d 23 15 c7 db d7 c6 f8 af 1d cc cb 9f f9 1f e2 97 57 f6 4c 34 82 1a 6a a7 37 34 d2 ab 97 1f 5b b6 ae f6 f8 c9 5f 33 fd 5b bf 82 ef be 77 18 e1 c5 b6 86 3b 36 1e 0d 64 0c 02 83 c5 c4 92 be d7 ed 9a 67 8f 3f 0a bc b5 c2 dc b0 06 95 f6 Data Ascii: C_q?+vYpq.[so>9t{;}Nus9oqq&<_N-#&v>ag;WIe81Y -c0r"r9--znksy+cnOzwOcYM#WL4j74[_3[w;6dg?
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: fa 65 9f 01 2c 0f 75 c8 85 b8 68 04 83 c3 1c 96 3c 2f 97 8b 53 6e 99 63 df 6f 27 6c b5 81 91 33 d6 9a e6 76 c5 14 63 37 17 1c 7e c5 f2 79 39 76 d7 6f a7 e6 f4 69 c5 36 eb 7e 11 4b be f6 e8 af 21 b7 bb 63 7c ed a4 6f 1c 74 93 c5 7a 3d ef b6 6f 1a f5 36 f1 b7 5a 97 b6 76 9b 5d a6 de ef 7c 91 a1 d2 06 7a 56 ed 02 95 0d f8 43 47 37 38 e9 5e 9f 43 59 c7 a6 dc db 75 f9 7f 6f c5 9f 63 92 ef 67 1c fe 24 bc bc 6d a7 6d 19 9d a9 b7 3b 83 4d 35 0a 3f 53 8e a9 49 1f d6 c3 c1 78 75 db 1c 16 ed f7 72 7c ff 00 fe af ef e9 fc 1a 9a e7 93 13 b6 bf da 1c 01 b8 db f6 cb f6 8a cc d8 c4 1e d7 60 17 9b 6f ab 5d 36 ff 00 c7 a7 f8 2f 6d b6 d7 f8 b4 37 08 5b 67 15 b4 30 67 13 5c e9 5d c6 a4 53 ef 5e 9f 67 8b 59 35 d6 77 d7 ad 72 e2 da dc da 8f d3 11 db c2 f6 8d 52 ca 4b 1a 3f 78 Data Ascii: e,uh</Snco'l3vc7~y9voi6~K!c\|otz=o6Zv]\|zVCG78^CYuocg$mm;M5?SIxur\|`o]6/m7[g0g\]S^gY5wrRK?x
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 5f ed 37 4f ac 57 b2 7a b1 c8 fe 32 83 aa 37 f4 d4 d3 45 ec f5 f7 9c 57 1f e5 bf d4 e7 d7 cb 5c fc 63 bf a3 a4 b8 96 46 0d 45 ac 11 db 8e b5 cf de bb d9 e5 2e d7 e3 d9 e2 ed d1 b9 b7 da 8b 6b 60 dc 35 ba ae 79 1c 5c 73 5f 5b d4 e0 fd 2e 3f c5 e5 e5 df ca b3 ec e7 8e 5d cf e6 98 41 88 83 6f ab 9b 81 26 bf b1 7c 5f 4b d9 d7 7f 67 cf e1 d7 4f e3 f3 ff 00 a3 d3 c9 a5 9c 78 f8 f7 35 f7 17 37 3b cc b1 b0 d2 08 9a 23 0c e6 6b 57 38 fd c1 63 9f 9b 7e 6f 72 eb 2f d1 a4 9a e3 e7 f1 b7 fe 91 75 d3 5d 78 e5 bd ef 53 37 92 7f 8d d9 87 7f 76 d8 5e 7d a4 80 bd 5f bb 5f f5 35 9f 09 2b 3e b7 d9 7f 32 4b b5 c5 73 e8 cb 21 ca 56 16 b7 86 86 1a fd b9 af 95 a7 0f 9d 9b 5f fc a7 f2 8e 9f ab 8c c9 f2 79 0f fe 64 37 52 de c1 8e da 3f 23 5d b9 c6 c0 6b f1 69 0e 79 af d8 ba fa 3a Data Ascii: _7OWz27EW\cFE.k`5y\s_[.?]Ao&\|_KgOx57;#kW8c~or/u]xS7v^}__5+>2Ks!V_yd7R?#]kiy:
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 2f 42 f1 82 f3 ed 1b 8b b0 49 45 cf 0a b0 0a 40 a4 d4 2e 91 0c 71 5d 24 44 6e 38 2e 92 22 17 b8 d1 6e 44 53 99 fc 17 6d 35 66 d5 72 ef 72 eb ac 66 ab ca fc f1 5d 75 89 55 64 7d 30 5d 64 65 5a 49 30 e8 ba 48 cd aa 92 49 55 d6 46 72 ad 2c b4 15 5d 26 ac 5a a9 6f 77 69 16 e3 6d 35 ec 06 ea ca 39 98 fb ab 60 e2 c3 2c 4d 70 2f 8c 3d b8 b7 53 6a 2a 32 5e 8d 24 70 da bd 0a 5b 2f fc b7 dd 5c 9b bf e2 9b ed 8d bc ad d7 fc 32 38 d8 e7 44 f3 8e 81 2b d9 2d 40 cb 12 7f ac bd 38 d1 e6 ce e2 cf 7d ff 00 cb 55 8d a1 63 bb 7b 7e dd 6e 00 f2 be f6 58 e2 af 9a b8 9b 5b 88 da 28 0d 3e 0f e7 4c e9 f2 2c df e6 f3 2b a9 ac dd 7d 70 fb 26 3e 2b 27 4a f3 6d 1c 87 53 db 11 71 d0 d7 38 66 43 69 52 b8 d7 6d 4f 6b aa 16 5b 24 99 2b 12 bd 43 e9 5f 6c ec 7b d7 6a ee d7 f6 7b 1d ae f9 Data Ascii: /BIE@.q]$Dn8."nDSm5frrf]uUd}0]deZI0HIUFr,]&Zowim59`,Mp/=Sj*2^$p[/\28D+-@8}Uc{~nX[(>L,+}p&>+'JmSq8fCiRmOk[$+C_l{j{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49864	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	575	OUT	GET /images/mv/slide/panel_6-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/jpeg Content-Length: 176022 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "2af96-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 83 c4 89 3e 62 aa 0f 27 92 f6 86 c7 7c e6 4c 0f 51 8a 9a 6b e5 37 bf 6e 27 6a f1 b9 b7 b8 48 05 d8 e2 92 46 bc 9e a6 c7 69 cd 6c e0 04 67 3f 4c 0c 8d 13 a9 56 58 f0 3d c1 7a 33 dc 89 c8 99 5c 18 b9 aa cd dc 59 8f 36 5b 81 08 7a 91 24 11 96 4a 4e 9a b1 ed f1 3e ed b9 b6 d3 fd 4a 0c 02 dc e9 ce f2 fa 9d b7 bf 81 80 32 92 ac 5e 5d 36 3d d9 1b f3 73 58 9c 18 a2 e3 d1 b3 ca 6d 2f 52 44 3f 75 07 07 2f c7 5a de db 98 b6 c5 4a d4 af 87 9f b6 2f cb 74 61 20 03 29 e2 df 93 b3 71 ed 19 0d b1 05 89 53 0f 27 c8 6e f8 1f 4b 74 41 04 07 c0 05 8b cb 5a db fd 36 10 b6 46 90 62 d5 ea a3 51 e4 6e b6 e2 13 3a 28 b9 d6 a2 ed 6c 6f 5d 83 86 1d 01 4c 5d 66 6d 18 c8 c6 61 88 58 bf 0d 0d 11 2b 22 70 3d 94 15 aa aa e8 d2 17 06 29 aa b3 21 21 82 dc e9 9f 16 57 a2 25 1a 0a ab 2a 58 Data Ascii: >b'\|LQk7n'jHFilg?LVX=z3\Y6[z$JN>J2^]6=sXm/RD?u/ZJ/ta )qS'nKtAZ6FbQn:(lo]L]fmaX+"p=)!!W%*X
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: c9 17 94 a4 5c 93 dc 95 8a d3 d0 db da 89 0e 14 57 6c 2d 81 92 83 51 01 d1 02 36 c2 05 e9 a0 34 14 0f 49 40 01 5c 10 3d 21 03 60 83 19 ca ad 1a a0 21 64 9a 95 71 1b 08 35 14 14 20 81 e9 64 09 90 0c 3a 20 34 84 01 80 25 03 11 21 50 4a 46 21 b1 41 20 4a 46 a1 06 d0 11 18 20 b0 c8 1b 20 68 18 74 0a a8 06 40 88 40 53 34 19 ce 46 54 8a 20 8d a7 a9 41 7e 99 c9 14 31 08 01 22 32 41 51 90 44 56 a0 82 c2 a1 d1 30 34 c1 32 98 18 62 a8 91 13 22 e5 06 b1 88 0a 51 a4 59 03 a2 07 a1 02 d2 80 00 a5 0e bd 12 01 30 3a 32 0c e7 27 a0 54 11 b5 99 41 a6 80 81 e8 50 1a 50 22 11 08 45 14 18 85 42 d2 80 11 2a 00 c8 85 50 9c 94 17 16 41 b0 62 16 40 c1 50 c2 88 a6 40 00 aa 99 0a 20 40 88 75 55 13 20 61 8a 08 8d b2 4d 53 46 a2 0d 82 22 80 2a 29 82 51 0d dd 14 dc 2a 06 40 32 60 61 Data Ascii: \Wl-Q64I@\=!`!dq5 d: 4%!PJF!A JF ht@@S4FT A~1"2AQDV042b"QY0:2'TAPP"EBPAb@P@ @uU aMSF")Q*@2`a
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 2e 92 05 20 a8 ce fe de 3a 08 06 b9 a0 e2 b1 7f 77 b2 12 fe da d5 9f 50 97 17 e7 6a 17 2e 47 fd d3 31 20 16 e7 58 ce 1d ce 63 9e bb 74 cf 75 7b fb b8 48 11 2b 17 c0 95 a2 0f fb 01 a2 0f 71 54 f2 a6 3b 79 1e 7a ce e3 85 1c 4e c7 60 36 76 ee 4a 33 dc e9 3e 53 20 c4 e9 1d e4 06 25 5b df c6 24 8e 3e 23 79 cc 71 17 7d 4d 95 cd 30 95 6e 59 90 7b 72 f1 1f 98 59 e7 ab 16 c7 46 eb 75 c9 72 9b e3 b9 dd 91 a8 00 21 08 b8 84 40 ca 20 92 a7 5d 69 23 ba dc 4c 62 c4 2c b4 b6 54 55 19 b3 59 13 21 0c 48 54 40 84 ae 1f 29 22 1f 45 45 8b 32 88 f2 90 73 ae 28 86 0c b3 8f e6 a2 8d 51 f0 f1 54 50 62 1f 24 00 18 66 a6 06 05 70 4c 42 6a d1 55 50 89 ab 20 00 28 03 28 80 e4 b7 57 41 91 32 ba f1 89 f2 e6 51 1a 42 d0 8b 30 a8 c4 9c d1 5a 1e 84 62 88 54 c1 14 8c 01 ab 31 f9 20 7a 3a Data Ascii: . :wPj.G1 Xctu{H+qT;yzN`6vJ3>S %[$>#yq}M0nY{rYFur!@ ]i#Lb,TUY!HT@)"EE2s(QTPb$fpLBjUP ((WA2QB0ZbT1 z:
2024-10-28 19:14:35 UTC	18	IN	Data Raw: 7a 7f 8a 2a c1 1d 68 aa 05 06 37 2e d7 4c 5f 56 0e 3f Data Ascii: z*h7.L_V?
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 01 dd 14 42 d6 9f f7 be 81 05 80 7f 6e 88 8a 01 aa 28 0a 03 50 a8 27 e3 92 08 f5 6d 9f d3 72 25 b1 00 82 7e 88 00 62 7e 29 81 82 d4 cf aa 03 49 20 d1 cf d1 02 95 b1 16 2c cf 9c 68 82 58 87 02 4e 7b a0 cf 71 01 72 c4 ec dd 00 c6 e8 30 60 6b 5e c5 67 ae 7c a5 97 f2 b2 e3 f3 be 47 db fc 17 3f b7 dd 71 bb fb 31 bf 3b 13 95 ad c5 88 36 b8 ce dd 40 31 c7 a1 07 ba f8 56 5f 5f 59 f9 7a fc be 1f 97 f3 3f 64 4e f3 86 b3 c9 fb 5b d7 b1 ba b8 27 ab 8c de 98 ce 40 42 4c 63 51 e5 eb 8a f4 71 fc 9f 9c eb eb fa 3c bc 7f 23 ae f9 9d 73 ce 5b f8 bf 6f cb 7d c9 ed ef 73 7b 67 7f 18 6f ec 9b 17 a3 43 38 34 ad 48 48 09 69 6c 3c c3 f9 64 17 d1 fe 3f 7c f5 3e 1d 7b df b7 9d 6a 3b 5d e4 f5 ed 4c 76 5c 87 ff 00 eb c8 b5 9b bf fc 9c 8f e8 3f ec ca 8b b7 d3 0d 05 9b 77 01 fe e2 d4 Data Ascii: Bn(P'mr%~b~)I ,hXN{qr0`k^g\|G?q1;6@1V__Yz?dN['@BLcQq<#s[o}s{goC84HHil<d?\|>{j;]Lv\?w
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 4f 45 c3 db ed fc 46 7b eb 23 f4 8b 3b 20 34 42 21 a2 28 07 65 e5 79 7a fa 17 76 9a a7 2a 28 92 7c 32 3c 79 94 d8 60 15 8b 8d 2d 71 57 a4 58 07 59 b5 71 e8 d9 e2 b4 07 96 59 2c d1 a1 85 ab 63 c1 67 0d 72 6e 37 96 62 18 64 b2 ba f8 3d d1 1c af b8 a7 5d 50 b5 21 6e 11 35 18 d5 74 ef af 0e 3f bb e9 ff 00 1b 8c 9a fa 3f b8 3b 98 ed b8 6d af 1b b7 2d 3b ed 02 07 f9 22 2a b8 ff 00 1b 99 e5 a4 bb 74 bd 9f 66 d7 13 c0 dd dd ca 9a 81 91 26 87 4c 54 f7 7b 2f 5d af b2 fd 47 9b f6 f7 67 73 98 f7 75 ce 57 74 1e dd b2 6f 17 c2 9f a4 2e df c9 ea 71 c4 e6 1b 93 5f b1 42 f7 f7 17 49 35 5e 0e 5e 6b 5d 22 db 0a 2e b2 a1 82 62 ba 4a 58 af ee 74 2e b2 b1 63 ec 7d a3 c4 44 5a ff 00 51 dc 40 7a b3 ff 00 84 08 c0 75 5b e6 e9 23 e8 e4 40 5b 8a e2 df 6f 36 7b 78 19 6e 2e c2 d8 6c Data Ascii: OEF{#; 4B!(eyzv(\|2<y`-qWXYqY,cgrn7bd=]P!n5t??;m-;"tf&LT{/]GgsuWto.q_BI5^^k]".bJXt.c}DZQ@zu[#@[o6{xn.l
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: 40 b1 74 1e 96 d2 fb 32 e9 2b 16 3d cd 9d c9 cc 07 2c 32 6f c9 74 95 cf a7 bb b4 b9 e5 88 c3 b2 e9 2b 95 8f 5e c4 b0 21 6d ce bb ed 4c 86 5b 8c 57 65 a9 12 1d 58 cd 74 c2 6b 48 e9 84 b0 7c 3a a3 2d e3 20 dd 4a 23 40 41 1e 15 40 c9 ef e2 80 70 10 65 76 e5 a7 22 86 48 33 8d 97 04 c8 90 83 71 19 c4 52 41 00 75 67 1f 92 09 06 38 12 dd 90 53 bb 36 08 2b c5 07 26 fc 91 6a 4a a3 93 86 d8 70 da 61 ca f2 1c 87 f6 f6 ec 5e d1 3d b0 89 32 95 1c 56 24 c9 8b d5 a2 ba 73 27 da 57 d3 f2 7b 3d 8e f7 75 7f 8b df ee 7d 5d ee f2 df ad b0 91 80 84 6d 36 a1 18 c0 82 65 fc af 2e ab a5 9f 86 5e 47 2b c7 ed 46 ff 00 76 36 f6 b9 1b d6 f6 ba 63 7a 7b 5b d0 16 e3 28 db 8c a4 d1 94 64 5f 33 dd 4b 02 da f1 1b 61 ba db 8d e4 79 1d be de ef 9f d6 bf ba b5 e9 69 11 d7 53 00 0d 47 42 ea Data Ascii: @t2+=,2ot+^!mL[WeXtkH\|:- J#@A@pev"H3qRAug8S6+&jJpa^=2V$s'W{=u}]m6e.^G+Fv6cz{[(d_3KayiSGB
2024-10-28 19:14:35 UTC	16384	IN	Data Raw: eb 80 b3 97 a2 eb 1c 7a 8f 7f 6a 41 03 25 b8 e3 5e a5 93 40 57 47 3a ee b6 45 0a 23 aa 12 0e 8c ba ad b3 22 37 89 70 b4 2f 24 64 66 81 0a 3a 8a 0e 0a a2 4c 4b ba 82 48 aa 04 1c 20 65 99 02 64 01 8d 50 06 21 04 18 d1 02 64 53 31 18 a0 5a aa a0 bf e5 55 0a 8c a2 a5 c3 d1 00 31 41 58 84 0d 10 b4 c4 94 53 d0 1f 14 12 23 21 81 74 06 b9 81 50 86 22 52 99 2d 80 41 b5 b0 00 41 6f 45 50 22 80 6a e8 1b a0 aa a2 1b a0 64 97 40 81 f9 a0 60 a0 1d 90 65 3b 8e 74 84 0e 16 a2 31 aa 0b d2 32 54 1a 64 33 40 f5 11 52 a0 7a c3 a0 a0 43 62 a8 65 00 81 a0 79 51 10 3d 3c 14 11 72 f0 03 ba 2b 38 89 48 ea 28 37 8d 03 2a 00 7e 68 03 2a a8 60 2c d8 7c 55 08 00 81 11 21 9b a8 18 9b 0a 85 43 d6 1d 41 7a 81 18 aa 80 10 c8 14 8b 55 06 32 94 a4 58 60 a2 b4 b7 00 03 66 82 b0 aa a8 1d 03 Data Ascii: zjA%^@WG:E#"7p/$df:LKH edP!dS1ZU1AXS#!tP"R-AAoEP"jd@`e;t12Td3@RzCbeyQ=<r+8H(7~h`,\|U!CAzU2X`f
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 34 6d 03 80 c7 25 9a dc 6d 6c b7 75 8a d4 74 db 2e 57 2a d4 74 db 21 73 ad c6 f0 38 2e 75 b8 e8 b6 70 fa 2e 75 b8 e8 b6 07 45 cf a6 a3 78 32 c5 6a 34 04 15 95 86 14 53 a6 48 01 f4 42 17 f1 40 22 91 1f 25 51 25 0a 28 80 f1 44 19 22 84 0b f2 55 08 a0 44 2a 11 fa a2 17 ec ca 84 7a 04 12 42 a8 47 16 54 22 0a 22 68 3c 15 43 1d d1 5b da 9b 11 f8 2c 63 71 eb ec 2f e0 09 59 8d eb d4 b7 3c 15 d1 a0 25 99 22 26 6c 47 7c 96 91 8d c9 11 8e 4a 8e 79 49 9d f0 ea ae 1a 82 43 8e 89 8d ca cb 70 1c 3e 3d 1d 49 7e 56 c7 99 ba b7 09 02 f8 f7 5a e3 ab 2b 9d e5 e3 6f ac 06 a5 25 96 4b d1 c7 4e 1d c7 99 23 38 d0 92 4f 75 e8 98 e7 b6 01 1d 54 3f 54 dc 25 6d 0b 5e 9d 62 7c b9 85 9b d6 ba f2 d2 46 26 2f 13 5c c1 58 8d aa de f3 d3 68 c8 d3 a2 9d 7a f4 f3 c6 d6 c0 9d c7 7a 0c 02 c7 Data Ascii: 4m%mlut.Wt!s8.up.uEx2j4SHB@"%Q%(D"UDzBGT""h<C[,cq/Y<%"&lG\|JyICp>=I~VZ+o%KN#8OuT?T%m^b\|F&/\Xhzz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49857	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	579	OUT	GET /common/images/footer/foot_logo.png HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:35 UTC	232	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: image/png Content-Length: 2398 Connection: close Last-Modified: Fri, 29 Sep 2017 08:24:20 GMT ETag: "95e-55a4fc0603500" Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	2398	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 89 00 00 00 37 08 03 00 00 00 0f 3a 99 fe 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR7:tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49865	203.114.55.134	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	350	OUT	GET /uhj2/uh.js HTTP/1.1 Host: uh.nakanohito.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:35 UTC	335	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:35 GMT Content-Type: application/javascript Content-Length: 32315 Last-Modified: Fri, 31 May 2024 06:24:50 GMT Connection: close ETag: "66596d32-7e3b" Expires: Mon, 28 Oct 2024 22:14:35 GMT Cache-Control: max-age=10800 Cache_Control: public Accept-Ranges: bytes
2024-10-28 19:14:35 UTC	16049	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 73 2c 61 29 7b 69 66 28 21 72 5b 73 5d 29 7b 69 66 28 21 74 5b 73 5d 29 7b 76 61 72 20 63 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 61 26 26 63 29 72 65 74 75 72 6e 20 63 28 73 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 73 2c 21 30 29 3b 76 61 72 20 6c 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 6c 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 6c 7d 76 61 72 20 75 3d 72 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 Data Ascii: !function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var l=new Error("Cannot find module '"+s+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[s]={exports:{}};t[s][0].ca
2024-10-28 19:14:35 UTC	16266	IN	Data Raw: 3a 22 62 72 6f 77 73 65 72 22 3d 3d 55 73 65 72 6c 6f 63 61 6c 2e 45 6e 74 72 79 2e 63 68 65 63 6b 42 72 6f 77 73 65 72 28 29 2c 4d 6f 64 65 53 74 64 3a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 22 42 61 63 6b 43 6f 6d 70 61 74 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 7d 2c 55 73 65 72 6c 6f 63 61 6c 2e 45 6e 74 72 79 2e 4f 73 3d 7b 69 4f 73 3a 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 69 70 61 64 22 29 21 3d 2d 31 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 69 70 68 6f 6e 65 22 29 21 3d 2d 31 2c 41 6e 64 72 6f 69 64 3a 6e 61 76 69 67 Data Ascii: :"browser"==Userlocal.Entry.checkBrowser(),ModeStd:document.compatMode&&"BackCompat"!=document.compatMode},Userlocal.Entry.Os={iOs:navigator.userAgent.toLowerCase().indexOf("ipad")!=-1\|\|navigator.userAgent.toLowerCase().indexOf("iphone")!=-1,Android:navig

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49870	142.250.185.66	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	1199	OUT	GET /pagead/viewthroughconversion/705351937/?random=1730142871314&cv=11&fst=1730142871314&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-28 19:14:35 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUm0mRbrg3TOGqXjI4YhMN7BbVvysHOwA6p2gP7crawDDZBXH4V4rl6C8zcW; expires=Wed, 28-Oct-2026 19:14:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:35 UTC	367	IN	Data Raw: 31 32 66 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 12ff(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-28 19:14:35 UTC	1378	IN	Data Raw: 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 Data Ascii: b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];re
2024-10-28 19:14:35 UTC	1378	IN	Data Raw: 2b 2b 29 69 66 28 4c 3d 4c 5b 4b 5b 4d 5d 5d 2c 4c 3d 3d 6e 75 6c 6c 29 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d Data Ascii: ++)if(L=L[K[M]],L==null){H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=
2024-10-28 19:14:35 UTC	1378	IN	Data Raw: 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 77 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 Data Ascii: tch==="function"){var I=w(Object,"assign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba
2024-10-28 19:14:35 UTC	370	IN	Data Raw: 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 5c 78 32 36 75 61 6d 62 5c 78 33 64 30 5c 78 32 36 75 61 6d 5c 78 33 64 5c 78 32 36 75 61 70 5c 78 33 64 57 69 6e 64 6f 77 73 5c 78 32 36 75 61 70 76 5c 78 33 64 31 30 2e 30 2e 30 5c 78 32 36 75 61 77 5c 78 33 64 30 5c 78 32 36 66 6c 65 64 67 65 5c 78 33 64 31 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 Data Ascii: x26uafvl\x3dGoogle%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132\x26uamb\x3d0\x26uam\x3d\x26uap\x3dWindows\x26uapv\x3d10.0.0\x26uaw\x3d0\x26fledge\x3d1\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7
2024-10-28 19:14:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49871	142.250.186.100	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	1471	OUT	GET /pagead/1p-user-list/705351937/?random=1730142871314&cv=11&fst=1730142000000&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dFBumQPHm8GhJ9FYmFmJX9zHs8JJBlg&random=2486395396&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-28 19:14:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49874	142.250.185.194	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	1015	OUT	GET /td/ga/rul?tid=G-QJ6BW8XGJP&gacid=42326441.1730142869&gtm=45je4ao0v9134487267za200&dma=0&gcd=13l3l3l3l2l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=101533421~101823848&z=975873594 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-28 19:14:35 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlVgz64wkSOJPHrqXQyJJZKXme8rHWE9XcgQHFucZLiEx6xWgdyUibwkEJk; expires=Wed, 28-Oct-2026 19:14:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-28 19:14:35 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-28 19:14:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49876	13.107.246.45	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:35 UTC	422	OUT	GET /s/0.7.49/clarity.js HTTP/1.1 Host: www.clarity.ms Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CLID=643d1d536f214e709483fc18a9990413.20241028.20251028
2024-10-28 19:14:36 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 28 Oct 2024 19:14:36 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 65959 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Thu, 24 Oct 2024 01:20:43 GMT ETag: "0x8DCF3CA14C9A428" x-ms-request-id: 1dd05538-301e-003f-1442-28e678000000 x-ms-version: 2018-03-28 Access-Control-Allow-Origin: * x-azure-ref: 20241028T191436Z-17c5cb586f626sn8grcgm1gf80000000040g000000004050 Cache-Control: public, max-age=86400 x-fd-int-roxy-purgeid: 51562430 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-28 19:14:36 UTC	15765	IN	Data Raw: 2f 2a 20 63 6c 61 72 69 74 79 2d 6a 73 20 76 30 2e 37 2e 34 39 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2f 63 6c 61 72 69 74 79 20 28 4c 69 63 65 6e 73 65 3a 20 4d 49 54 29 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 73 72 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 63 72 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 6c 72 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 61 72 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f Data Ascii: /* clarity-js v0.7.49: https://github.com/microsoft/clarity (License: MIT) */!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__pro
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 3a 75 2c 70 72 65 76 69 6f 75 73 3a 63 2c 63 68 69 6c 64 72 65 6e 3a 5b 5d 2c 64 61 74 61 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 6e 75 6c 6c 2c 68 61 73 68 3a 6e 75 6c 6c 2c 72 65 67 69 6f 6e 3a 6c 2c 6d 65 74 61 64 61 74 61 3a 7b 61 63 74 69 76 65 3a 21 30 2c 73 75 73 70 65 6e 64 3a 21 31 2c 70 72 69 76 61 63 79 3a 66 2c 70 6f 73 69 74 69 6f 6e 3a 6e 75 6c 6c 2c 66 72 61 75 64 3a 64 2c 73 69 7a 65 3a 6e 75 6c 6c 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 61 3d 65 2e 64 61 74 61 2c 72 3d 65 2e 6d 65 74 61 64 61 74 61 2c 69 3d 72 2e 70 72 69 76 61 63 79 2c 6f 3d 61 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 7b 7d 2c 75 3d 61 2e 74 61 67 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 73 77 69 74 63 68 28 21 30 29 7b 63 61 Data Ascii: parent:u,previous:c,children:[],data:n,selector:null,hash:null,region:l,metadata:{active:!0,suspend:!1,privacy:f,position:null,fraud:d,size:null}},function(t,e,n){var a=e.data,r=e.metadata,i=r.privacy,o=a.attributes\|\|{},u=a.tag.toUpperCase();switch(!0){ca
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 22 3a 47 72 28 38 2c 74 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 6f 66 66 65 72 22 3a 47 72 28 37 2c 74 2e 61 76 61 69 6c 61 62 69 6c 69 74 79 29 2c 47 72 28 31 34 2c 74 2e 69 74 65 6d 43 6f 6e 64 69 74 69 6f 6e 29 2c 47 72 28 31 33 2c 74 2e 70 72 69 63 65 43 75 72 72 65 6e 63 79 29 2c 47 72 28 31 32 2c 74 2e 73 6b 75 29 2c 57 28 31 33 2c 5a 6e 28 74 2e 70 72 69 63 65 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 72 61 6e 64 22 3a 47 72 28 36 2c 74 2e 6e 61 6d 65 29 7d 6e 75 6c 6c 21 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 4b 6e 28 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 5a 6e 28 74 2c 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 31 29 2c 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 79 Data Ascii: ":Gr(8,t.name);break;case"offer":Gr(7,t.availability),Gr(14,t.itemCondition),Gr(13,t.priceCurrency),Gr(12,t.sku),W(13,Zn(t.price));break;case"brand":Gr(6,t.name)}null!==r&&"object"==typeof r&&Kn(r)}}function Zn(t,e){if(void 0===e&&(e=1),null!==t)switch(ty
2024-10-28 19:14:36 UTC	16384	IN	Data Raw: 73 65 76 65 72 69 74 79 29 2c 73 72 28 65 2c 21 31 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 31 3a 53 74 26 26 28 65 2e 70 75 73 68 28 53 74 2e 69 64 29 2c 65 2e 70 75 73 68 28 53 74 2e 74 61 72 67 65 74 29 2c 65 2e 70 75 73 68 28 53 74 2e 63 68 65 63 6b 73 75 6d 29 2c 73 72 28 65 2c 21 31 29 29 7d 72 65 74 75 72 6e 5b 32 5d 7d 29 29 7d 29 29 7d 76 61 72 20 62 72 2c 77 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 72 28 74 2c 65 2c 6e 2c 61 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 75 6c 6c 29 3b 76 61 72 20 69 3d 6e 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 7c 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 22 22 3b 74 Data Ascii: severity),sr(e,!1));break;case 41:St&&(e.push(St.id),e.push(St.target),e.push(St.checksum),sr(e,!1))}return[2]}))}))}var br,wr={};function kr(t,e,n,a,r){void 0===n&&(n=null),void 0===a&&(a=null),void 0===r&&(r=null);var i=n?"".concat(n,"\|").concat(a):"";t
2024-10-28 19:14:36 UTC	1042	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 26 26 21 74 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 28 57 69 28 74 29 2c 7a 69 28 29 2c 62 74 28 29 2c 24 69 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 69 28 74 2e 73 74 61 72 74 29 28 29 7d 29 29 2c 6e 75 6c 6c 3d 3d 3d 74 26 26 69 6f 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6f 28 29 7b 50 69 28 29 26 26 28 24 69 2e 73 6c 69 63 65 28 29 2e 72 65 76 65 72 73 65 28 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 69 28 74 2e 73 74 6f 70 29 28 29 7d 29 29 2c 77 74 28 29 2c 48 69 28 29 2c 76 6f 69 64 20 30 21 3d 3d 61 6f 26 26 28 61 6f 5b 72 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 Data Ascii: "!=typeof WeakMap&&!t}catch(t){return!1}}()&&(Wi(t),zi(),bt(),$i.forEach((function(t){return Oi(t.start)()})),null===t&&io())}function eo(){Pi()&&($i.slice().reverse().forEach((function(t){return Oi(t.stop)()})),wt(),Hi(),void 0!==ao&&(ao[ro]=function(){(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49881	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 12914 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:35 GMT ETag: "3272-5e3186d3d2fc0" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	12914	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49879	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest12.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 15246 Connection: close Last-Modified: Mon, 26 Aug 2024 02:08:46 GMT ETag: "3b8e-6208c9aea52c3" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	15246	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 50 00 b4 03 00 11 00 01 11 01 02 11 01 ff c4 01 a2 00 00 02 01 03 05 01 00 00 00 00 00 00 00 00 00 00 08 0a 06 05 07 09 00 01 02 03 04 0b 01 00 02 02 02 01 05 00 00 00 00 00 00 00 00 00 00 06 08 05 07 03 04 09 00 01 02 0a 0b 10 00 01 03 02 02 04 04 03 05 09 81 00 00 00 00 Data Ascii: AdobedP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49886	64.233.166.156	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	655	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-118123153-1&cid=42326441.1730142869&jid=1695172240&gjid=346098584&_gid=1202056417.1730142869&_u=aGDAiEAjBAAAAGAAI~&z=990716309 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-28 19:14:37 UTC	928	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Mon, 28 Oct 2024 19:14:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgdc:149:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgdc:149:0"}],} Server: Golfe2 Content-Length: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-28 19:14:37 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49883	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 9408 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:35 GMT ETag: "24c0-5e3186d3d2fc0" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	9408	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49882	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest03.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 9716 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:36 GMT ETag: "25f4-5e3186d4c7200" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	9716	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49878	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest05.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 7500 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "1d4c-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	7500	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49877	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	910	OUT	GET /images/new/img_gnav_rest04.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:37 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 29589 Connection: close Last-Modified: Fri, 30 Jun 2023 00:20:03 GMT ETag: "7395-5ff4dc73e5a45" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	16149	IN	Data Raw: ff d8 ff e1 1b 52 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 36 3a 31 33 20 31 35 3a 35 34 3a 35 31 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 b4 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: RExifMM*bj(1r2i''Adobe Photoshop 23.5 (Windows)2023:06:13 15:54:51P"
2024-10-28 19:14:37 UTC	13440	IN	Data Raw: 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 31 37 3a 34 36 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 Data Ascii: reSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49887	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	575	OUT	GET /images/mv/slide/panel_3-pc.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:37 UTC	237	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 458708 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:42 GMT ETag: "6ffd4-5dcacb9213480" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: 46 d7 e4 f7 ff 00 af f8 80 76 e3 66 0f af 1a 4a cf 2e c5 d7 66 55 7a 43 98 ff 00 06 f5 1f 15 c9 b1 22 18 e4 f2 b2 bb bc 99 bc 0f 7f a0 de a5 eb 28 d9 a9 3e ad f4 ae 4e ee 3f 23 05 8d db 12 42 53 db 1c 9a 8b 7b 2f 5b 60 b4 a8 3c be e6 b0 e4 91 90 3c 46 b4 66 08 ae ca eb 50 cb 42 4c 35 fa be ea 40 35 40 c2 02 80 08 01 40 05 6a 00 51 40 04 28 01 45 00 28 a0 02 a6 07 50 02 d0 02 d0 07 50 02 da 81 1d 6a 06 75 02 3a 80 3b b2 80 14 0a 60 75 00 2d 00 75 00 75 00 2d 00 2d 00 25 00 28 14 00 a0 50 02 da 80 16 d4 08 eb 50 02 da 98 c5 14 00 54 08 20 28 01 c5 a6 84 15 a8 03 27 ea b8 39 53 c9 47 36 26 42 a2 08 11 7c 89 10 32 13 76 37 b8 b3 0a e6 cd b9 be 2d 8a 94 ce e7 61 50 67 e3 96 61 da d8 d2 80 df e6 49 6f be b3 93 48 24 45 ea 3c 24 d3 24 4d 86 7f fa a2 36 55 ff 00 Data Ascii: FvfJ.fUzC"(>N?#BS{/[`<<FfPBL5@5@@jQ@(E(PPju:;`u-uu--%(PPT ('9SG6&B\|2v7-aPgaIoH$E<$$M6U
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: 96 ae 6b 23 74 c8 d9 b1 c8 91 dc 83 bf 46 07 b7 ad c1 f6 52 63 47 a1 4a 06 46 04 4f f1 79 b1 2b 12 4f ef 28 35 d7 65 28 e4 ab 86 58 63 85 ff 00 0f 8a c7 f0 2e a7 4d 40 b5 6d 55 f4 99 b7 a8 e7 a7 07 ff 00 25 1c 66 a3 fa fd 9f ca dd 6a 71 fa d0 ef e9 67 c4 e0 1b 8b 56 87 60 e8 ed d6 93 28 31 48 a4 38 b7 d7 bc d2 29 1b 2f 94 1f fd f4 bd 3a 3f fa a4 7f a8 f4 9e c3 b6 cf fd ac c2 65 b5 b3 72 47 fd f4 bf eb 9a d9 a3 93 1b d1 1c 8e 34 d7 43 50 d1 ba 63 be 16 52 0f 43 a1 fa 69 17 b9 ef bf 29 3d 41 fa ce 0f 8e 32 bd e6 c6 0d c6 e4 9f e4 fe 91 3f d9 db 59 ad 2e 65 9e b3 59 3d 32 61 af fd 3b ab a1 9c 03 26 90 c4 a4 02 8a 00 21 40 0a 28 01 40 a6 02 d0 02 8a 04 15 00 70 a6 02 d0 02 8a 00 ea 00 ea 00 5a 00 5a 00 ea 40 75 31 0b 40 1d 40 0b 40 1d 40 c5 14 c0 ea 00 e1 40 Data Ascii: k#tFRcGJFOy+O(5e(Xc.M@mU%fjqgV`(1H8)/:?erG4CPcRCi)=A2?Y.eY=2a;&!@(@pZZ@u1@@@@@
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: e3 40 4d f6 01 7e b6 d2 9c 84 0c e4 e2 a2 c2 4a 93 61 a0 04 dc 6b a5 12 28 03 1b 19 bf 4c 84 6b 70 74 bd b5 aa e4 27 50 fc b7 0d 72 b6 ec 1f e5 a7 22 81 ac 50 55 a6 be 84 b6 87 dd 48 63 52 78 33 51 fa 8d ec 08 f7 a5 08 09 a1 94 f5 3a 77 50 04 6c 8e 37 8f 9e e6 58 14 b7 ef 28 da df 58 b5 27 54 ca 56 6b 62 bb 27 d2 b8 65 4b 45 2c 89 fc 37 0d f7 d6 4f 12 34 59 99 06 1f 4d 49 2c 7b e1 c9 dc 09 36 59 14 8f 87 da 2f 53 ec fc 4a f7 be 00 3f a7 b9 64 6b f9 42 41 6b 12 8c 09 23 e9 b5 4f b2 ca f7 51 03 23 0f 3a 0f 14 98 d2 2d b4 00 a9 fd 95 16 ab 45 ab 26 44 2d fb e3 6b 74 f1 5e ff 00 55 66 cb 16 e0 df 68 eb d2 d4 00 ab 18 53 b8 6a 7b 4d 31 30 fa 8e e1 de 68 01 96 01 58 5f a0 e9 ed ee a9 18 fc 08 54 92 47 51 6b 7e da aa 92 d8 e3 25 d5 b4 17 3a 0e db 53 81 48 c3 63 Data Ascii: @M~Jak(Lkpt'Pr"PUHcRx3Q:wPl7X(X'TVkb'eKE,7O4YMI,{6Y/SJ?dkBAk#OQ#:-E&D-kt^UfhSj{M10hX_TGQk~%:SHc
2024-10-28 19:14:37 UTC	18	IN	Data Raw: 2f d9 4a 11 52 ca 2c 7e 0f d3 5c 86 4f 1b 8b 3f 31 3e Data Ascii: /JR,~\O?1>
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: 37 25 97 3a ac 78 71 e1 19 c1 70 4d 97 cc 12 a7 51 ad ed a5 55 6a 9f 52 5d 9a e8 7a af ae 38 6e 12 39 38 b6 e5 a4 9d 70 31 92 d3 9c 6c 5b f9 ae 00 50 5f 20 1f 01 d3 e1 37 ae 9b a5 d4 e6 ab 7d 03 83 8f c4 cd f4 44 5c 7f a7 73 8e df 3d a5 85 a5 de b2 84 f3 1a e1 96 25 77 ea 6d 7d b6 a6 96 9a 04 eb a9 27 d2 1c 2f 21 c5 09 f2 39 2e 42 29 a0 ca 88 a4 24 4b 21 d4 1d 74 95 52 9d 50 ac e4 c5 f1 ac 04 8d ef a8 2c b6 6d 45 48 ca 3e 67 b6 98 1a 9e 73 03 97 cb f4 77 a7 d7 8e 6d 92 2c 4a 64 fc e4 83 43 18 b6 ae c9 7a d1 ec 66 b7 33 1f f2 f7 ac ff 00 ed 7f fc ba 0f ff 00 7b 53 0c a9 46 97 87 e3 f9 7c 5f 44 fa 81 39 16 dd 23 46 cd 1f e7 24 fe 10 9a ea 8c f6 aa 4b 42 5e e6 3b 8b 1a 0a c9 9a a2 c1 85 4b 18 db 0a 43 1a 75 a0 63 0c b4 80 65 d6 90 c8 f2 2d 21 91 26 5a 91 95 Data Ascii: 7%:xqpMQUjR]z8n98p1l[P_ 7}D\s=%wm}'/!9.B)$K!tRP,mEH>gswm,JdCzf3{SF\|_D9#F$KB^;KCuce-!&Z
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: b0 03 8d 3c 43 c4 4d ad 62 07 87 53 d2 b9 d3 6d ea 09 96 3c 77 2d 0f 19 93 1b 65 63 2e 4e 3c 6a 4e 44 67 4b 31 1a 7b 3c 35 bd 3e 9d cd 16 84 1c d9 f1 3d 4e d9 0a ca f8 0b 1a 8d 86 18 d9 80 65 d4 2b fb 0f 50 6f 5d 94 b2 6b 41 c1 21 bd 5b c8 b7 11 8f 89 32 b4 79 f1 c8 a5 50 90 e3 64 46 c6 37 53 6b 30 ec 37 e9 54 f4 52 34 50 7a 82 18 a5 8a 2c 0c 82 ab fa e6 69 1e 53 a2 93 72 49 5f 69 72 3e 8a e0 c1 5e 56 96 6e ed 08 97 0e 7c e9 85 89 8d 14 a6 49 e7 8d 71 a3 67 70 8a ad 10 b4 d2 38 ea 6d df d3 b6 bd 03 9c bc e3 7d 11 85 fa 7c 78 d4 66 66 45 13 ac b9 fc 86 d6 53 23 1b 92 31 51 80 ba b1 3e 22 dd 9d 2a 64 65 cf 25 8f e9 2c 8e 2d b8 be 3e 08 a0 2d 1f e5 4e a0 17 5d 0e ae 35 62 00 be e0 68 e3 e2 0a d0 78 de 6f 1d 97 81 cd f1 98 99 59 27 2f c9 c4 94 41 39 b5 cc 45 Data Ascii: <CMbSm<w-ec.N<jNDgK1{<5>=Ne+Po]kA![2yPdF7Sk07TR4Pz,iSrI_ir>^Vn\|Iqgp8m}\|xffES#1Q>"*de%,->-N]5bhxoY'/A9E
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: c8 e4 f8 f3 27 93 3e 71 fc 0a 4b ad c7 f9 b5 e6 db 5a af fb ad 3f 23 a7 66 ff 00 ed 50 39 8a db b2 f9 4c b6 3a 02 98 ca 7d 88 37 3f fa 4f 54 b5 c8 fe 10 bf 8b 07 a5 52 f9 8c 60 b0 4e 10 e4 be 9f aa 91 e7 37 fd d2 de 1f f4 56 b1 c0 e6 6d e2 db 2f 26 f1 e1 a0 3c 70 fd 3f a7 e3 95 f4 69 f7 e4 3f fe d1 8b 7f ab 51 db 6d cb c6 58 f2 fa a3 e4 0f a7 90 c7 c0 24 c7 47 c9 32 4e df fb 46 36 fb 2b 3e db 5a cf f7 36 cb cd ea 8f 02 1f 02 a2 4e 4b 92 c8 ef 98 44 a7 d9 12 85 fb c9 ab b3 d4 9e 81 e4 5e 6e 7f 1a 3e aa ae ce 7d c8 b6 fd b5 86 7d 78 af 89 a5 34 4d 92 39 d9 2c b1 fb 37 37 d4 2b 5a f5 64 21 ce 25 7c ae 2a 23 fc 1b 8f d2 2f 5c d8 b6 34 be e5 5f 18 2f c8 ef 6e 91 c5 7b fb 5d af 4f 3b fa 92 1d 76 26 f3 4d b5 62 53 d8 4b 1f a0 56 b8 d1 21 f0 88 17 8e 88 5a c5 86 Data Ascii: '>qKZ?#fP9L:}7?OTR`N7Vm/&<p?i?QmX$G2NF6+>Z6NKD^n>}}x4M9,77+Zd!%\|*#/\4_/n{]O;v&MbSKV!Z
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: d7 71 73 f4 c5 97 d9 59 1a 19 16 3f df 3e af be 98 1a 3c 2f f8 79 3d d5 0c 68 67 8e f8 72 87 f1 0f f5 29 3d 8a 20 fa 7c df 14 7b 8f df 48 6c 95 92 3c 47 f9 47 df 49 8d 15 c3 ff 00 8a 3f f2 fe ca 9e a5 74 0e 5f 86 61 fc 07 ef a4 34 47 53 a0 f7 50 32 c3 86 ff 00 8a 3e ef d8 69 a2 58 1c 39 f0 37 f3 fe da ba 93 63 4d 09 f1 1a 09 26 e1 ff 00 5d 3d b2 8a aa 89 97 4d 40 c0 a0 40 c3 fd 49 ff 00 9f f6 0a 01 06 7a d0 04 47 fe a4 9f cd fb 28 10 b0 7f c5 47 ee 6f ba 81 92 cd 00 44 e3 be 26 fe 41 f7 9a 6c 48 97 48 a1 69 01 0a 0f fe 22 fe f7 3f 75 57 42 56 e4 e6 a9 28 8d 9d ff 00 0a df cc bf 7d 31 30 1c 91 c7 43 6e dd b7 a3 a8 ba 11 a7 f8 13 be f4 c0 8b 8b 12 ac fd 4f e6 ef 53 f4 8b d2 b0 54 8d 87 75 8b 2e 39 34 06 32 6e 3a 78 18 1a e6 ae 92 74 3d 60 c7 7a 84 2a 66 41 Data Ascii: qsY?></y=hgr)= \|{Hl<GGI?t_a4GSP2>iX97cM&]=M@@IzG(GoD&AlHHi"?uWBV(}10CnOSTu.942n:xt=`z*fA
2024-10-28 19:14:37 UTC	16384	IN	Data Raw: dd 8f 96 b2 35 82 df cb 63 b4 a2 b7 87 56 ee ae 5f d1 51 be 2f d2 66 f1 f5 65 2c 5c 86 77 29 98 30 b9 2c 65 fd 2f 24 0f 9f c4 92 02 95 0a 08 c9 59 2d b8 49 d0 ab 7b 6b b3 1f 69 4a d5 70 d1 a2 93 8d 3a 19 3f 57 7a 62 5e 33 3b f4 d8 8e d9 f8 d3 ed 38 53 20 0d 29 dc bf 03 81 fe d1 6f 5d 75 72 a4 96 88 fc ef 3d 16 57 15 1f 0f c8 27 9b 9b 85 02 f9 99 51 9d db a4 8d 83 17 65 24 d8 90 76 b1 fc 4d 4d 3d 00 af c4 c2 53 8d fe 25 24 a9 9e ba 2c 84 6b e4 f9 82 c3 61 ea 48 bd b4 ed ad 2a 81 b2 ef 83 e5 62 e3 f8 e6 9a 6c f8 62 68 66 0d 3c 99 08 4b 4c 15 49 51 08 00 dc 2f 43 bb 5a 9e 3a 89 99 6e 47 9d 8b 90 e5 55 78 f8 66 c9 91 1b cd 7c c6 50 14 06 b8 2b 0c 2b e1 5d d7 b6 e7 24 fb 2b a6 d6 95 1d 0e 7a d7 59 35 be a2 93 3c fa 69 67 c8 6f 3a 68 1e 23 b1 80 d8 51 97 50 4a Data Ascii: 5cV_Q/fe,\w)0,e/$Y-I{kiJp:?Wzb^3;8S )o]ur=W'Qe$vMM=S%$,kaH*blbhf<KLIQ/CZ:nGUxf\|P++]$+zY5<igo:h#QPJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49888	216.58.212.132	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:36 UTC	1227	OUT	GET /pagead/1p-user-list/705351937/?random=1730142871314&cv=11&fst=1730142000000&bg=ffffff&guid=ON&async=1&gtm=45be4ao0z878713577za201zb78713577&gcd=13l3l3l3l1l1&dma=0&tag_exp=101533421~101823848&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.yamanoue-hotel.co.jp%2F&hn=www.googleadservices.com&frm=0&tiba=%E5%B1%B1%E3%81%AE%E4%B8%8A%E3%83%9B%E3%83%86%E3%83%AB%20HILLTOP%20HOTEL%20%E5%BE%A1%E8%8C%B6%E3%83%8E%E6%B0%B4%E3%83%BB%E7%A5%9E%E4%BF%9D%E7%94%BA%E3%80%90%E5%85%AC%E5%BC%8F%E3%80%91&npa=0&pscdl=noapi&auid=1831589210.1730142868&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dFBumQPHm8GhJ9FYmFmJX9zHs8JJBlg&random=2486395396&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-28 19:14:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 28 Oct 2024 19:14:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-28 19:14:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49890	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:37 UTC	574	OUT	GET /images/new/img_gnav_con02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:37 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 5693 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:21 GMT ETag: "163d-5e3186c679040" Accept-Ranges: bytes
2024-10-28 19:14:37 UTC	5693	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49891	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:37 UTC	575	OUT	GET /images/new/img_gnav_stay02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 8110 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:39 GMT ETag: "1fae-5e3186d7a38c0" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	8110	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49892	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:37 UTC	574	OUT	GET /images/new/img_gnav_con01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:38 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 25082 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:21 GMT ETag: "61fa-5e3186c679040" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm
2024-10-28 19:14:38 UTC	8933	IN	Data Raw: 98 94 d4 f4 62 f3 b6 ca 56 a4 0e 54 af 8e 85 6e 5e 2c 6b 57 fa 06 a7 1b 26 4d 97 ea 34 e4 2c e5 68 d9 cc 89 1b c4 48 08 3e f5 f8 9a d0 95 3b 14 ff 00 99 fe 9d 51 bf ba 3d a8 bf 52 fd 3d b7 ff 00 b7 fa 03 db cc 5d 96 16 68 f2 98 8b 30 97 56 52 ad cd b5 c3 1a 86 92 32 08 55 26 8b 43 cb ca 1f 54 3b ad 7d 1f 53 46 15 76 e8 14 b1 f9 5b 7b eb 61 2a 34 52 db dc a0 9d 05 28 c6 29 00 63 bc 16 00 36 e2 6b ba 6f a5 6b aa 36 d0 b2 b5 14 1b 84 9a d7 7b b2 89 23 3e 00 2a 75 3c 68 08 8d 6a 41 fe 19 39 f8 ea 32 db 1e 10 96 39 27 86 59 12 04 65 82 e0 09 92 72 c1 43 2b 72 e2 dd 3a 54 78 9a ee e7 b7 42 6a 18 4d d1 de 18 e0 e9 7c b4 c8 ca f1 30 d8 59 f7 3b 15 a1 0c 1e 40 14 d6 9f 66 23 a7 d5 39 43 74 16 98 e0 63 1c a2 27 7b 94 15 5b 74 27 a8 a0 f3 ad 77 1e 1e e0 83 52 d4 8e Data Ascii: bVTn^,kW&M4,hH>;Q=R=]h0VR2U&CT;}SFv[{a4R()c6kok6{#>u<hjA929'YerC+r:TxBjM\|0Y;@f#9Ctc'{[t'wR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49893	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:37 UTC	575	OUT	GET /images/new/img_gnav_stay04.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 8040 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:40 GMT ETag: "1f68-5e3186d897b00" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	8040	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49894	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:37 UTC	575	OUT	GET /images/new/img_gnav_stay01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:38 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:37 GMT Content-Type: image/jpeg Content-Length: 17119 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:39 GMT ETag: "42df-5e3186d7a38c0" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm
2024-10-28 19:14:38 UTC	970	IN	Data Raw: 4d 17 63 ee 5a 06 6d 0b 67 70 52 5c a9 ec 8e 28 9f e2 d6 57 bd 4d 0a 02 81 0a 53 94 8f 4d 22 67 80 94 68 b4 de 7f 63 2b 6b b4 32 62 e7 c9 6d 87 ba 68 69 af 1b 72 e5 47 73 4b d3 52 cd b8 96 5d 54 b1 21 da 73 32 85 4b 3d 30 fe da 7a af c8 cf ee 34 e1 af 89 9b d6 72 22 df 56 e7 95 6b bc 7a 1a ce f7 ec 6b 12 16 d1 29 9f 75 2e 23 8c c4 b1 02 1a 4f b9 36 8e c5 42 ff 00 c9 4e 62 6d ea 65 57 3f 69 55 5d b9 28 0e 2a a6 8c 87 82 50 78 a9 23 bc 3d d0 dc ad d1 9c 27 b3 28 0a 65 4d 28 85 20 b6 e2 73 c0 a1 43 b7 23 04 a6 3e 2d 0f 69 2f d7 db 79 06 86 eb 59 4c 46 5e 53 ee 27 e8 9c 43 c7 57 ba 45 2b 59 75 2c 74 3c d7 e6 55 1e 94 d2 ee 6a dc 32 4b 8b 0e 8f f2 81 8c 2d e3 e3 ec 6b 5c 96 ee 35 dc bb d7 76 6f 17 e9 97 b9 2e 0e 5c 17 4c 0a 29 d0 52 10 13 ab 32 12 9e 27 a6 0a Data Ascii: McZmgpR\(WMSM"ghc+k2bmhirGsKR]T!s2K=0z4r"Vkzk)u.#O6BNbmeW?iU](*Px#='(eM( sC#>-i/yYLF^S'CWE+Yu,t<Uj2K-k\5vo.\L)R2'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49896	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	974	OUT	GET /images/new/img_gnav_rest06.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 6869 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "1ad5-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	6869	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49898	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	974	OUT	GET /images/new/img_gnav_rest07.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 9131 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "23ab-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	9131	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49900	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	974	OUT	GET /images/new/img_gnav_rest08.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 7682 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:38 GMT ETag: "1e02-5e3186d6af680" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	7682	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49897	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	974	OUT	GET /images/new/img_gnav_rest09.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:38 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 10012 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:38 GMT ETag: "271c-5e3186d6af680" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	10012	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49899	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	575	OUT	GET /images/new/img_gnav_stay03.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:38 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 10681 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:40 GMT ETag: "29b9-5e3186d897b00" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	10681	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49901	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	974	OUT	GET /images/new/img_gnav_rest10.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:38 GMT Content-Type: image/jpeg Content-Length: 8279 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:38 GMT ETag: "2057-5e3186d6af680" Accept-Ranges: bytes
2024-10-28 19:14:38 UTC	8279	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49903	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:38 UTC	575	OUT	GET /images/new/img_gnav_stay06.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:39 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 7794 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "1e72-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	7794	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49904	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	575	OUT	GET /images/new/img_gnav_stay05.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:39 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 8937 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "22e9-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	8937	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49905	74.125.133.155	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	925	OUT	POST /g/collect?v=2&_ng=1&tid=G-QJ6BW8XGJP&cid=42326441.1730142869&gtm=45je4ao0v9134487267za200&aip=1&dma=0&gcd=13l3l3l3l2l1&npa=0&frm=0&tag_exp=101533421~101823848 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.yamanoue-hotel.co.jp X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlVgz64wkSOJPHrqXQyJJZKXme8rHWE9XcgQHFucZLiEx6xWgdyUibwkEJk
2024-10-28 19:14:39 UTC	855	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.yamanoue-hotel.co.jp Date: Mon, 28 Oct 2024 19:14:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49906	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	974	OUT	GET /images/new/img_gnav_rest13.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:39 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 26572 Connection: close Last-Modified: Fri, 30 Jun 2023 00:20:03 GMT ETag: "67cc-5ff4dc7391eb9" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	16149	IN	Data Raw: ff d8 ff e1 17 ba 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 36 3a 31 33 20 31 35 3a 35 35 3a 33 37 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 b4 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop 23.5 (Windows)2023:06:13 15:55:37P"
2024-10-28 19:14:39 UTC	10423	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49907	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	575	OUT	GET /images/new/img_gnav_stay08.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1
2024-10-28 19:14:39 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 8536 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "2158-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	8536	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49909	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	630	OUT	GET /images/new/img_gnav_stay07.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0
2024-10-28 19:14:39 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 8010 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:41 GMT ETag: "1f4a-5e3186d98bd40" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	8010	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49908	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	665	OUT	GET /images/new/img_gnav_stay09.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:39 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 8590 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "218e-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:39 UTC	8590	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49911	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	665	OUT	GET /images/new/img_gnav_stay10.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:40 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 7383 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:42 GMT ETag: "1cd7-5e3186da7ff80" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	7383	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49912	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	974	OUT	GET /images/new/img_gnav_rest11.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:40 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 7469 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:39 GMT ETag: "1d2d-5e3186d7a38c0" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	7469	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49914	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	973	OUT	GET /images/new/img_gnav_ban01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:40 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 17826 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:18 GMT ETag: "45a2-5e3186c39c980" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm
2024-10-28 19:14:40 UTC	1677	IN	Data Raw: 71 ce 02 a8 6e 93 a9 f7 47 c3 7f dd fb 2a 82 ad 73 3c b1 cb f8 9c de 2f 28 c5 e7 3c 68 c1 da bb fc c1 6c bb 05 6a e9 74 b8 8b 6c 36 ee 29 b5 42 f1 f3 29 1c 71 d9 0c 86 5a 9d f3 18 dd de 22 19 98 81 94 4a 14 6c 09 42 d4 5b 92 9f e1 75 55 54 25 57 91 5d 33 c3 36 4b 91 54 b7 92 05 9c 8c b1 25 3b 8e ba b6 f8 65 f4 0e cb 25 4a a2 45 32 66 33 90 f2 58 0b 4b 78 bc b1 41 3f 04 49 4f 16 ef d9 ee b3 3c 26 ff 00 c2 e5 2e 7b 68 4f e6 49 9a ac ef af d9 f9 27 28 84 59 0f 32 39 a6 0d 92 e6 5b 8d 25 6d ec 0a 43 e1 2f 25 06 e3 ae f6 fc 56 ed df ef 56 19 76 db 4f 2a a3 b1 6b ea 2d d4 73 d3 3f 4a 7d c0 26 5b cd 3c ce 4d 6a 57 82 dc 14 af e3 6a 1c 89 88 42 cf 4b ad 28 71 01 46 dd a6 8a df 6f 84 32 6f ec 25 fe fb 7a f5 35 42 18 78 7f 70 6d ee 4d 25 c5 6f 52 5a 2b 3a ee 52 14 Data Ascii: qnGs</(<hljtl6)B)qZ"JlB[uUT%W]36KT%;e%JE2f3XKxA?IO<&.{hOI'(Y29[%mC/%VVvOk-s?J}&[<MjWjBK(qFo2o%z5BxpmM%oRZ+:R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49915	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	973	OUT	GET /images/new/img_gnav_ban02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:40 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 6035 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:18 GMT ETag: "1793-5e3186c39c980" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	6035	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49913	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	973	OUT	GET /images/new/img_gnav_ban03.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:40 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 8446 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:19 GMT ETag: "20fe-5e3186c490bc0" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	8446	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49910	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:39 UTC	973	OUT	GET /images/new/img_gnav_ban04.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:40 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:39 GMT Content-Type: image/jpeg Content-Length: 7460 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:19 GMT ETag: "1d24-5e3186c490bc0" Accept-Ranges: bytes
2024-10-28 19:14:40 UTC	7460	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49916	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	665	OUT	GET /images/new/img_gnav_stay11.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 8205 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:43 GMT ETag: "200d-5e3186db741c0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	8205	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49919	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	665	OUT	GET /images/new/img_gnav_stay12.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 9698 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:43 GMT ETag: "25e2-5e3186db741c0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	9698	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49917	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	729	OUT	GET /images/new/img_gnav_rest01.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 12914 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:35 GMT ETag: "3272-5e3186d3d2fc0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	12914	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49920	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	729	OUT	GET /images/new/img_gnav_rest05.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 7500 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "1d4c-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	7500	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49921	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	729	OUT	GET /images/new/img_gnav_rest03.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 9716 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:36 GMT ETag: "25f4-5e3186d4c7200" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	9716	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49922	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	729	OUT	GET /images/new/img_gnav_rest02.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 9408 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:35 GMT ETag: "24c0-5e3186d3d2fc0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	9408	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49924	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	973	OUT	GET /images/new/img_gnav_ban05.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 8657 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:20 GMT ETag: "21d1-5e3186c584e00" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	8657	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49923	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	973	OUT	GET /images/new/img_gnav_ban06.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 7497 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:20 GMT ETag: "1d49-5e3186c584e00" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	7497	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49925	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:40 UTC	974	OUT	GET /images/mv/slide/panel_1-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 55419 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "d87b-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 27 fd 3c fb bc ca 41 6d bd ff 00 eb 14 14 38 45 b7 21 97 b8 fc d8 e2 ff 00 02 29 52 32 51 12 b9 61 05 b6 86 1f f7 85 76 f4 c7 b1 2f 72 2a c7 cb 92 06 cf 57 63 bd bb 49 16 dd f1 a9 fc f4 bd 34 1c 56 d3 c3 47 72 41 00 d9 86 87 46 35 cb ad b7 10 7b 5d 57 f9 97 22 b6 f2 dd 3a 78 9e b5 ae b5 12 33 f8 f0 4d 07 39 1c 53 c6 51 93 22 e5 1c 5b f1 e9 a5 74 b7 fe ac cd 8e e2 fb 9f 2b 17 97 c9 c3 c9 1f 98 c7 33 bc 68 df 8d 06 eb 0d 7b 40 ac 5e 3c 65 73 e5 ac 65 50 0d ed db b4 8a e4 d9 19 49 47 3d c0 dc 7c 45 07 62 10 31 a2 61 a3 14 4b 0e f1 6e b4 a3 47 ed bf 74 72 3c 43 16 5f 3e 1b 1b be 3b 93 b4 f6 5c 77 37 88 a9 85 7a 77 0b ce 71 fc b6 39 97 12 4f e2 20 1e b6 3b 11 ea 46 4f 4d c0 76 1e c2 2b 2a 24 0e 94 0e a8 18 e3 55 3d c7 f5 d5 15 7d 1f ea ff 00 f3 be a7 fa ea 88 Data Ascii: '<Am8E!)R2Qav/rWcI4VGrAF5{]W":x3M9SQ"[t+3h{@^<esePIG=\|Eb1aKnGtr<C_>;\w7zwq9O ;FOMv+$U=}
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 75 48 f7 33 86 3a 8b 1e bd f5 99 b6 aa 9f b7 37 9c b1 b0 83 d7 43 fd 93 57 a4 8d 2f 19 1c 8c 72 95 4d c8 75 0e c3 af ca 0f 5a c5 69 4b 19 6d cc 41 ff 00 2c 3c 80 df b6 d7 eb 57 d2 33 7c da b2 72 a5 65 3f c4 b7 9a fd 7e 63 5b e7 4c d5 cc a8 1e 2e 3e 32 1a d1 e4 61 fa eb 7f de 0e 15 c0 fb 81 a9 36 a9 bd b4 07 a1 97 76 eb 8f a0 ea 75 71 53 a2 0e 63 11 1f bc 22 7d a0 92 a1 6e 75 b1 24 eb 59 f4 d7 b7 7d 45 e5 12 59 38 fe 39 46 b8 91 96 91 bb 19 f2 1c 35 87 f7 12 af 11 3a 37 dc 52 46 7d 87 c3 2e e5 12 2e 4b b6 cb 8d db 76 5b 75 bb ae 3a d3 9d 97 4d 2f b6 66 dd c1 61 95 37 f2 93 a7 4b 6e 3a d6 2e da 8a 3f 50 3f fd b6 45 c1 b6 4c 7a 8f ec b0 bd 6b 8d a7 4c e7 3b 8f 1c dc 0f 08 2c 09 df 32 1b f6 82 41 b5 6b 9b e6 a5 10 e7 25 58 f1 f8 7b dc b7 ab 89 60 49 ec 60 2d Data Ascii: uH3:7CW/rMuZiKmA,<W3\|re?~c[L.>2a6vuqSc"}nu$Y}EY89F5:7RF}..Kv[u:M/fa7Kn:.?P?ELzkL;,2Ak%X{`I`-
2024-10-28 19:14:41 UTC	6502	IN	Data Raw: 5e 39 3f 33 1b 6e 56 b1 2b b8 74 3b 59 88 fb eb 19 55 ef e7 8d ff 00 d3 47 f2 fa 9f e1 c7 d7 bb a5 4c 2e 42 a3 f7 2f 2b 19 27 d5 72 4f 51 a0 fd 94 f9 89 93 5f dc bc bb 30 75 65 46 1f 8c 2a df f4 8a bf 30 ca ae 47 2d c9 64 9d d2 be f6 fd e2 a2 ae 22 65 50 be 4f 4f 57 6f 80 50 3f 4d aa 88 99 58 9f 39 b9 f1 a0 67 a0 3a 85 34 c8 e3 08 07 e5 b7 87 5a 07 2e 3b 5f 45 fd 34 c8 ef 45 87 cd d7 ef a0 4f 48 91 da 7e 15 43 4e 39 1a 5e dd d7 d6 99 0a 21 40 2e cd b4 f7 8a 99 0d b0 26 cb 77 1d e0 5b f5 d5 0f 8e 0d c7 56 58 87 ef 3b 6d fd 55 05 d5 c4 78 d2 df 9f 83 d3 3d 75 dd f7 dd 6f 53 22 33 c3 62 c9 73 fc c3 1c 9f 0d c3 f5 81 57 26 16 f8 fe 1f db 97 3f 9b 99 26 61 d9 ae bf 02 05 4b d5 31 16 5f 81 f6 34 f7 d9 97 97 c6 48 3f 15 d6 68 cf c0 11 7a 7d 53 11 5b fc 8d c6 ca Data Ascii: ^9?3nV+t;YUGL.B/+'rOQ_0ueF*0G-d"ePOOWoP?MX9g:4Z.;_E4EOH~CN9^!@.&w[VX;mUx=uoS"3bsW&?&aK1_4H?hz}S[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49926	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:41 UTC	974	OUT	GET /images/mv/slide/panel_2-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 54727 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "d5c7-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 13 b8 b1 d3 b8 73 38 dc 47 68 e3 c7 56 93 07 e4 bb 64 92 36 c8 ac 0f 8c bf d1 d2 b0 e1 55 5e 4d e8 75 39 7d 35 0e e4 66 c6 c5 e3 33 39 4c 46 db 9c 8a 3f 96 c1 72 7d 29 64 8e cf 92 7c 37 a4 4d b5 3f bd af 85 65 85 25 78 7b fe 81 79 6b cb af ec 59 f6 07 16 d3 f6 de 0c a8 40 c9 c0 0e b2 af d5 29 c6 90 13 15 af fb cc e7 e1 55 95 37 36 ae f5 33 c9 78 70 fa fe 63 b9 79 52 2e 32 49 c4 69 33 ae 42 c3 8e d6 b8 0e 48 41 73 e5 75 dc 4f b2 bc fa a9 6d fd b4 36 ae f1 e4 78 5f eb 07 71 67 a7 37 85 c2 71 6d 2c 31 71 b8 a1 b3 4a 68 64 ca c9 3e a3 17 23 c5 56 df 8d 7a ff 00 d6 d2 ae 8f 23 fe 5f a1 96 7b 5a 61 1e 78 d1 73 79 2d b9 9a 56 3e 6c e6 bd 17 97 1a 31 e1 76 0b 9b 83 91 89 b7 d7 02 ee 2e 3c 6a f1 e5 ad f6 22 f4 75 dc bc e3 3b 42 4c 88 12 63 90 15 5c 6e 00 0a e1 cd Data Ascii: s8GhVd6U^Mu9}5f39LF?r})d\|7M?e%x{ykY@)U763xpcyR.2Ii3BHAsuOm6x_qg7qm,1qJhd>#Vz#_{Zaxsy-V>l1v.<j"u;BLc\n
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 48 d8 87 90 7c a3 a2 f9 9a e3 c8 ce 8a 9a 58 81 b5 c7 4f 2f 0a e6 66 a4 d8 f0 67 e6 e4 0c 5c 0c 79 72 b2 18 12 22 85 19 de c3 a9 b2 82 6c 28 a6 37 67 09 49 16 ba 5a b3 43 85 d8 3c 86 e4 6e 73 37 1f 86 12 dd 61 86 56 13 64 ca c0 ed 02 3c 78 89 76 f9 be 5f 3f 65 74 d7 b1 7f c9 aa fe 7f 71 cf 6e e5 7f 15 25 27 0f db 1c 9f 37 dc 27 85 c4 1b 1d 0b 1c 89 e4 56 55 8a 34 36 67 70 c1 58 0f 20 40 35 38 7b 67 6b 71 2a f9 95 6b 25 5e 62 2e 07 23 91 86 32 62 cb 58 18 a8 c9 c7 6d f1 3f b5 5b 4a 8c 98 f8 b8 dc d2 96 95 23 1b 20 1f 1a ce 0d 46 89 01 36 fc 28 80 1c 1b 69 d7 a5 21 8e f5 94 78 d2 01 0c c8 35 bd 20 06 c8 cc 1d 2f 61 44 00 33 65 de c0 1d 2a a0 09 60 cb da dd 69 40 07 45 9e a3 ad 4c 00 44 5c 8f cc 00 e9 47 10 90 e8 f3 54 ad fa d4 ba 8e 46 64 e5 83 11 b5 55 6b Data Ascii: H\|XO/fg\yr"l(7gIZC<ns7aVd<xv_?etqn%'7'VU46gpX @58{gkqk%^b.#2bXm?[J# F6(i!x5 /aD3e`i@ELD\GTFdUk
2024-10-28 19:14:41 UTC	5810	IN	Data Raw: 1d 7a d8 8a df b9 a6 92 b7 a9 9e 2b 78 ec cb 55 9c f0 bc db 2c d1 fa 38 1c 88 ba 02 77 04 01 88 89 af e3 61 f2 9a 1a 57 ac a0 9e 36 86 5f 21 2a f5 89 a9 65 06 40 a8 68 61 d1 e4 0f 4c d4 c0 c0 9e 42 ce 75 a7 02 0d c4 73 7b 52 68 68 9b 37 e7 4b 0f 0a 49 01 41 9c 12 f6 3d 45 6b 56 4b 2b 32 65 11 40 48 d6 46 f9 63 5f 12 de ca a4 06 77 9d e4 3e df 1b d1 6b b3 0b 09 ca fd 4c 49 e9 7f 66 8b 5a d2 92 cc ef 68 24 e3 b0 52 1c 48 b1 a2 05 5d dc 6f b7 5b be ae 6f e6 17 4a 2d 66 dc b1 aa c2 83 4b ea 2a b0 08 36 a2 8b 28 1d 05 62 68 1b 87 2d a2 f6 d4 b0 1b 96 db a2 22 f7 3d 45 a8 40 52 49 26 a7 d9 5a 24 20 de 3b 26 ed b0 f4 35 2d 0c b1 70 46 a3 51 e7 50 00 39 bf e5 9f 1b f8 0a d1 09 98 2e 5e 07 c8 e4 22 74 62 8f 18 24 79 1f 9a bb 31 7d 2c e6 c8 a5 83 72 6d eb 63 bb 12 Data Ascii: z+xU,8waW6_!e@haLBus{Rhh7KIA=EkVK+2e@HFc_w>kLIfZh$RH]o[oJ-fK6(bh-"=E@RI&Z$ ;&5-pFQP9.^"tb$y1},rmc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49927	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:41 UTC	974	OUT	GET /images/mv/slide/panel_3-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:41 UTC	236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:41 GMT Content-Type: image/jpeg Content-Length: 76981 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "12cb5-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:41 UTC	16148	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 14 9f dd c7 dc 1f 36 00 23 8f f8 57 fb df d5 80 0b 1f e1 1f bb f4 61 0c 8a 3c ac bf 54 fd 38 62 07 6e 3f c3 5c 1e 34 d2 c0 7d d5 0d f4 62 6f b0 eb b9 8f dd a0 88 f5 15 cb 8e 37 30 3c 64 f6 51 1b 5a 7f eb 1c 72 dd 29 3a a8 df 12 81 0a d6 97 e8 a2 a1 e2 66 5f 21 d2 5a b8 cb c4 d7 c0 cf 7c 45 72 bd 3f 2a 8a ea 92 35 40 7c 8d 3c 15 03 f5 55 b0 75 12 d8 cf ec 90 28 b5 5a f7 0c 54 81 af db 99 22 fc 45 55 72 83 56 97 01 94 d3 3a 10 78 8c 74 50 e7 b8 db cb db 9d ca ef 9f 79 29 96 4a 51 6b 90 55 1c 15 40 c8 0f 36 06 c4 91 72 da d2 35 00 8c 21 93 48 b4 18 43 40 4d cd d6 ba 46 64 e4 06 10 cc fd c9 64 97 2a a4 a8 de 50 ca c0 fa c1 07 00 ca f2 c9 3b cf 5b a6 77 99 7c 2d cc 24 b0 a1 a5 0e ac f2 c2 63 46 9a ca 0b ab 3e 52 dc db c9 6e d2 28 74 12 a3 21 65 3c 18 6a 02 a3 Data Ascii: 6#Wa<T8bn?\4}bo70<dQZr):f_!Z\|Er?5@\|<Uu(ZT"EUrV:xtPy)JQkU@6r5!HC@MFddP;[w\|-$cF>Rn(t!e<j
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: fb b1 fb df d7 8d d6 c6 0f 70 a0 6a 47 11 f3 7c 85 b1 64 1e 63 d6 7b e5 ac 5d 59 73 66 53 4c ad 32 0e 67 24 30 24 a0 3e d9 39 7a 38 63 3b fd c6 b4 5a 01 3a 72 68 67 13 c6 0d 66 75 61 11 01 73 72 a6 80 0f 2e 63 0d ec 09 6a 78 8e f6 77 8b 5e a0 8a e6 38 e5 90 db 92 a0 ce d2 29 04 2b 55 4a bd 34 e9 ae aa 53 b7 19 df 1a 75 6b c4 d7 1d b8 dd 35 ba 35 1d 25 6f bb c7 b6 6e db ba d9 cb 7f 2d c4 11 ed d6 db 7e a0 5a e5 ae 58 23 90 10 96 14 89 4a 91 db aa bd f8 c5 b4 a1 1b 26 db 76 66 db 73 8e 3d af 61 17 1b 93 f2 77 28 f4 22 d8 cd 57 91 ae 18 52 33 1e 85 74 26 3e 15 a6 6d 5e fc a6 d5 fa a1 94 ee a0 f2 db 2d ea 2d 9f 79 6b 8e a1 29 3b a4 fe f7 b7 59 46 5c 8b 3b a0 c0 a3 4e 80 01 c8 41 e2 6b 7a ea 27 4f 0f 15 7a 2f 86 be 06 15 f0 66 c6 1e ad b0 7d 03 73 83 f9 92 32 Data Ascii: pjG\|dc{]YsfSL2g$0$>9z8c;Z:rhgfuasr.cjxw^8)+UJ4Suk55%on-~ZX#J&vfs=aw("WR3t&>m^--yk);YF\;NAkz'Oz/f}s2
2024-10-28 19:14:41 UTC	16384	IN	Data Raw: 5d 4f 33 2f f2 73 a5 17 c5 9a 57 b6 d9 5a 4b 68 de c6 d8 db 21 54 5b 54 8e 21 1a ab 54 0a 93 f8 9e d0 ab 6a ef c7 5b c7 56 a1 23 8e 99 ed 32 db 2b dd 74 8f 4d c6 5c 3d 85 cb 5c 46 5a 47 4d b5 80 02 0c 8a 3a f3 4b a1 f6 80 ec c6 76 c1 4f 33 a2 bd de 4f 14 09 db 6c f6 a1 16 f7 b7 59 89 23 9f 71 b4 96 da 39 67 40 19 39 57 11 dc 9e 66 8e d2 b6 c5 4d 07 b4 71 96 25 c2 cc db 3e 67 7a af 6e 81 8b 1f 86 17 fb 08 95 b6 30 77 8d c6 e2 28 24 b8 4d 11 01 14 e8 18 ba 47 e2 57 64 26 4a 56 80 91 8d 79 be ab 43 1a 56 91 f7 6a 6b 36 bd c2 e9 ed 84 17 f6 b7 7b 5d fa 0f c7 b0 be 8d f4 e5 95 63 95 86 89 13 cb 5f 3e 13 26 4d a7 47 dd 35 ba 48 c2 30 9c 05 54 51 48 3e 6c b3 c6 b4 31 bb d4 f3 6d ef 77 e8 49 3a 82 f5 22 db 8e d5 1d e4 8d 1d cc 6c e8 fb 6d e3 2b 65 2b 46 00 36 d2 Data Ascii: ]O3/sWZKh!T[T!Tj[V#2+tM\=\FZGM:KvO3OlY#q9g@9WfMq%>gzn0w($MGWd&JVyCVjk6{]c_>&MG5H0TQH>l1mwI:"lm+e+F6
2024-10-28 19:14:41 UTC	18	IN	Data Raw: eb 19 61 56 52 33 f1 12 4f af 18 d9 6c 5e 2b c3 6a 4f Data Ascii: aVR3Ol^+jO
2024-10-28 19:14:41 UTC	11663	IN	Data Raw: 38 d9 76 86 68 1a 17 98 68 83 96 cd 12 8a d5 69 e1 01 bc 95 a7 a3 1d 17 7a 90 af a4 01 ee f7 28 25 9a e9 1d 09 86 44 d4 a0 66 43 0a 05 34 3e ce aa 0a e2 d5 59 97 2d 41 6d e3 8b 25 d5 43 40 56 82 83 bb cb 8d 12 2d 90 24 92 c6 dc c8 1f 97 22 29 23 b0 82 28 68 bf 7a 98 b8 33 65 d4 bd ce 39 27 82 39 1c 15 06 55 1a 78 9e d0 32 ae a3 c7 11 1e 02 0a 33 c1 75 11 45 3e d5 41 07 22 0f 1c c1 ee c6 71 03 02 46 cd 14 c4 c8 45 7c a3 25 3e 6a 63 46 a4 72 4b 11 50 da 62 06 68 dc d5 87 06 20 65 40 c7 d9 a6 54 f3 e0 65 26 10 b7 b8 72 f1 db c6 00 28 c4 80 46 5a 48 2d 53 9f 01 5c be 6c 47 98 e4 ba f0 ee 11 16 36 b2 97 67 01 6a 83 c4 35 1c f2 27 4f b3 95 4f 9b 02 b2 7b 99 39 23 1b d5 cc 92 c8 b2 4c 12 92 06 d1 08 d0 19 54 33 32 00 a3 4d 3c 5a 73 23 b3 b3 0d d5 20 4e 4d 8f 4f Data Ascii: 8vhhiz(%DfC4>Y-Am%C@V-$")#(hz3e9'9Ux23uE>A"qFE\|%>jcFrKPbh e@Te&r(FZH-S\lG6gj5'OO{9#LT32M<Zs# NMO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49928	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest12.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 15246 Connection: close Last-Modified: Mon, 26 Aug 2024 02:08:46 GMT ETag: "3b8e-6208c9aea52c3" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	15246	IN	Data Raw: ff d8 ff db 00 84 00 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 01 01 02 02 02 02 02 02 02 02 02 03 02 03 03 03 03 02 03 03 04 04 04 04 04 03 05 05 05 05 05 05 07 07 07 07 07 08 08 08 08 08 08 08 08 08 08 01 01 01 01 02 02 02 05 03 03 05 07 05 04 05 07 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff dd 00 04 00 17 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 50 00 b4 03 00 11 00 01 11 01 02 11 01 ff c4 01 a2 00 00 02 01 03 05 01 00 00 00 00 00 00 00 00 00 00 08 0a 06 05 07 09 00 01 02 03 04 0b 01 00 02 02 02 01 05 00 00 00 00 00 00 00 00 00 00 06 08 05 07 03 04 09 00 01 02 0a 0b 10 00 01 03 02 02 04 04 03 05 09 81 00 00 00 00 Data Ascii: AdobedP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49930	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest04.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 29589 Connection: close Last-Modified: Fri, 30 Jun 2023 00:20:03 GMT ETag: "7395-5ff4dc73e5a45" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	16149	IN	Data Raw: ff d8 ff e1 1b 52 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 91 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 33 3a 30 36 3a 31 33 20 31 35 3a 35 34 3a 35 31 00 00 00 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 00 b4 a0 03 00 04 00 00 00 01 00 00 00 50 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: RExifMM*bj(1r2i''Adobe Photoshop 23.5 (Windows)2023:06:13 15:54:51P"
2024-10-28 19:14:42 UTC	13440	IN	Data Raw: 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 31 37 3a 34 36 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 Data Ascii: reSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79, 2022/06/13-17:46:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49929	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest06.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 6869 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "1ad5-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	6869	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49933	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest07.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 9131 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:37 GMT ETag: "23ab-5e3186d5bb440" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	9131	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49932	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest08.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 7682 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:38 GMT ETag: "1e02-5e3186d6af680" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	7682	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49931	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	729	OUT	GET /images/new/img_gnav_rest09.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 10012 Connection: close Last-Modified: Wed, 06 Jul 2022 00:55:38 GMT ETag: "271c-5e3186d6af680" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	10012	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 36 20 37 39 2e 31 36 34 37 35 33 2c 20 32 30 32 31 2f 30 32 2f 31 35 2d 31 31 3a 35 32 3a 31 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyFhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49934	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	974	OUT	GET /images/mv/slide/panel_4-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 42392 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:43 GMT ETag: "a598-5dcacb93076c0" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:42 UTC	16384	IN	Data Raw: 7b 98 47 a9 a3 85 71 5a 2c 5f 54 6e 8c de 5f a6 76 65 6d c3 b7 dd 25 e5 ed c6 c3 3d b5 e5 a4 25 cf 6d a5 bc ce 92 66 44 d3 99 6b c0 73 bf ed 25 63 93 0c cf 13 5c 79 a2 39 19 f6 7b 8e b1 42 57 0d ea 76 d6 c5 a7 dc 7a 56 16 46 e9 99 73 9b bb c9 cc 36 b1 ba 69 43 5c fd 0c 15 76 96 02 e7 1a 78 05 54 c6 de c4 5e e9 6e 7a 7d c7 6a ee 2d c7 b5 fb 7e 27 d9 b9 d7 7a e6 64 93 cc 34 3e 38 9a 6b 18 79 75 08 66 80 4d 4f 21 cd 77 e4 c5 7b e3 aa 8d 4e 0a 64 a5 6f 67 3a 14 2e 36 78 ac f6 a1 b9 5a 6e 31 df c3 1c fe d6 e0 c6 c7 31 ad 93 4e af 43 9c 7d 6d f1 a0 5c b9 7a e9 57 92 73 ac 1d 18 f3 b7 6e 2d 46 92 59 b0 ba 6c 8c 18 ae 26 8e b4 cb c1 e2 89 00 b9 4e 0b 44 84 64 df d7 49 56 aa 4b 67 95 bf bc 7c 6e d2 f3 e9 ae 04 70 5b d7 43 1b 22 c6 d7 2b 1e 07 ae b5 59 64 ba 37 a5 Data Ascii: {GqZ,_Tn_vem%=%mfDks%c\y9{BWvzVFs6iC\vxT^nz}j-~'zd4>8kyufMO!w{Ndog:.6xZn11NC}m\zWsn-FYl&NDdIVKg\|np[C"+Yd7
2024-10-28 19:14:42 UTC	9859	IN	Data Raw: a5 ee 6f 51 e5 e1 83 4b 35 12 68 d1 c0 57 20 ae 4c e0 b9 67 73 13 48 08 19 b1 0b da e6 d4 24 31 a5 95 6d 13 44 95 58 cb cb 59 fa f6 92 ba 19 a8 5b d4 61 a3 80 3c 8f 05 a2 70 45 94 88 76 df 3c d2 3a 59 9c e9 25 79 ab 9e f2 5c e2 7c 49 44 8a 0b a6 0b bb 8e 8b 6e 65 74 ac b7 60 8a 16 b8 e0 d6 0c 9a 13 91 24 69 5b c0 d6 34 00 10 05 b6 60 99 23 5a e5 42 61 87 04 c4 10 72 04 31 ae 4e 40 6b 1c 99 23 75 20 0f 25 50 bc e3 d2 04 94 86 85 b8 f8 a4 c6 01 49 8d 02 6b cd 21 c0 06 a9 0c 14 80 82 13 02 0a 40 0e 29 01 d4 44 0c ef da 88 80 90 80 44 01 20 20 09 4c 0e 08 11 35 1c 4d 00 cc a6 90 32 d6 e7 7b 6d db 3b 59 bc b9 d2 ed d6 e9 a3 da c0 4d 0c 4d 38 82 ef e6 76 74 f8 2b bb e3 a7 ee 66 54 5c dc fe d5 fa 9e 03 6e b3 bd ee 0b f7 5c 5e 6a 16 35 0f 9a 47 60 f9 6a 30 68 f0 Data Ascii: oQK5hW LgsH$1mDXY[a<pEv<:Y%y\\|IDnet`$i[4`#ZBar1N@k#u %PIk!@)DD L5M2{m;YMM8vt+fT\n\^j5G`j0h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49935	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	974	OUT	GET /images/mv/slide/panel_5-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 76564 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:44 GMT ETag: "12b14-5dcacb93fb900" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	16148	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:42 UTC	16384	IN	Data Raw: 49 3a 79 76 b4 3e 96 c2 84 8f 78 85 5a cf 69 c8 b1 e4 b8 0b e4 d2 0e 78 c9 99 96 37 f1 a0 de b5 53 c4 b2 64 05 29 fd dc 0c 66 04 39 d5 4f 5a 58 8e df 77 cc f9 c5 30 34 08 53 00 22 b3 1d cf 30 1e 5a 01 84 8e 41 79 8f 80 ff 00 1f b8 11 d9 af 3f f8 63 0c 62 97 6a d2 36 4d c9 23 00 95 48 7d 93 c6 ae 4d 70 c8 0c f4 31 9f c2 ae 45 68 03 5b 56 a7 ba 22 4f 1c 10 15 9b a4 11 cd b1 ef 29 4c da 45 1e 9e 70 ef c1 4f 13 68 71 d9 b5 c1 7d a7 c8 ae 3c c4 62 f2 43 43 23 4f 69 13 5e 6d 9b b5 a8 34 69 ac dc a0 e3 e3 88 09 17 f7 71 c7 5a 49 3f 89 d3 9a 65 1c 97 43 f1 5b 56 40 0a cb 67 1d 3c a1 59 86 2e a3 e9 7c c9 d7 d5 d0 b7 68 c4 b2 c9 1d 4a 09 16 1a 54 57 3d 43 e7 c4 13 a2 f9 95 61 b3 eb e5 69 94 78 6b 1a 0a 1f 1e 85 19 10 3c 9f 2e 27 11 99 63 b5 7c 42 e9 7d 9e c0 6d 97 Data Ascii: I:yv>xZix7Sd)f9OZXw04S"0ZAy?cbj6M#H}Mp1Eh[V"O)LEpOhq}<bCC#Oi^m4iqZI?eC[V@g<Y.\|hJTW=Caixk<.'c\|B}m
2024-10-28 19:14:42 UTC	16384	IN	Data Raw: c1 89 9a 21 c7 35 00 fe ab e5 8a 3c 81 17 91 67 0d 0b 46 69 98 90 d0 0f d0 38 e6 9f d3 ea 59 1e dc 80 1b 95 aa f6 af 34 d4 f9 42 e0 59 f0 6c d3 cd 13 5c 32 8b 95 2d 4c d1 89 15 cf db 5c 2c 16 18 7e 30 0c b3 1b 66 41 dc ae 49 e2 56 2c 85 69 4f 16 35 cf 05 d4 11 f2 65 75 e1 03 73 dc 35 7f 5e bf f4 d7 1d 16 7c 23 cb ea 42 5e 4f 98 24 07 ec c7 68 ac a3 2f 2b 36 2c c5 8f f5 03 98 d6 c9 7b 01 8a 31 e5 fa 38 75 99 3f b4 b1 b6 23 de 9c 81 99 6c cf 98 b0 c4 a7 91 58 66 1d 19 3f 89 27 d1 a5 a7 1f f8 98 83 f1 7f f2 2e bc ba 03 5c 65 35 ed 46 46 73 53 e6 45 c5 2d e4 b9 13 9e 6f 98 6f 45 be ab 1d e1 45 29 f8 5a f0 3f ef 06 2e f0 67 9f ba f0 47 4d e9 93 d3 1d 37 75 14 90 48 9b df 50 cb 53 1c 8a a7 dc ed 4f 84 e4 58 03 2b 8a f1 19 0f 38 c7 52 71 87 c6 5f 91 e5 c9 39 7c Data Ascii: !5<gFi8Y4BYl\2-L\,~0fAIV,iO5eus5^\|#B^O$h/+6,{18u?#lXf?'.\e5FFsSE-ooEE)Z?.gGM7uHPSOX+8Rq_9\|
2024-10-28 19:14:42 UTC	16384	IN	Data Raw: b3 01 fb d8 b6 db cb a0 9b 9f 0e a6 46 98 ee 38 03 ed e2 fe 1f 98 a3 c6 b9 83 e6 c4 a4 f1 a1 55 1c 0b 7d b3 af 3a 86 c0 28 4b c9 4a 27 d0 72 26 4a 1e cd 13 07 00 79 b1 39 ed 63 21 e1 b8 94 75 34 7b 77 c5 38 0c aa bb a5 84 2f 6a d4 13 7b a0 f7 59 28 38 35 08 92 36 3d f9 0c 72 cf 63 c0 e9 8e f5 ea 59 8f 88 50 c8 ae 2d ba 7e ce 58 c0 0f cd 96 ea 47 01 49 c8 f1 8b 8d 38 53 13 fd b2 59 b6 3f bf 27 96 44 12 fc 4d b9 56 06 3d bb 62 b5 3d a7 91 cd 6f 4e a6 7f 9b 0e b6 ab e2 2b bf f1 fc c8 cf c5 fe a7 d0 12 2d ea de c2 3c cd 2d 2c 23 04 7e b2 c6 0f cb 87 5b 5a 69 f9 88 ef 2e 3f a8 2d cf c5 2e a2 95 59 2e 3a 9f 77 9b bb 91 48 14 fa 0b 8f 9b 0e ac 3e 09 75 17 dd 8a e3 f2 45 45 df 56 5b dc fd fb 6e 97 a7 b5 ae 2f a8 5b bc 78 55 a9 86 56 25 c6 3f 23 3b d1 e0 fe 60 4f Data Ascii: F8U}:(KJ'r&Jy9c!u4{w8/j{Y(856=rcYP-~XGI8SY?'DMV=b=oN+-<-,#~[Zi.?-.Y.:wH>uEEV[n/[xUV%?#;`O
2024-10-28 19:14:42 UTC	18	IN	Data Raw: 9c e1 9a a0 f0 b9 19 64 5f 43 d3 3b 1c 64 6a b6 e6 f6 Data Ascii: d_C;dj
2024-10-28 19:14:42 UTC	11246	IN	Data Raw: 93 2b 33 0f 50 a6 39 65 b8 9b d4 73 11 f1 4a d6 da 2b 8d ae 3b 68 96 18 cc 52 97 48 c6 90 48 71 c7 bf 1e 8f f1 d2 74 95 4e 2d d2 c5 15 d3 ad 0d b2 d2 83 4a 50 7a 31 44 55 ac 8e c2 aa 79 69 98 d3 a1 72 3c 7d 91 8f 06 b8 9d 24 88 50 1a 13 9f 93 0a ea 60 a5 11 d3 21 a9 8f 10 71 17 50 8e 09 96 68 2b e7 cb 02 bf 13 0f 54 1a 72 42 0e 15 bf 89 87 72 8d 45 06 a0 78 d4 e0 77 06 84 86 3c b8 78 7e 6c 4d 48 22 68 8b 55 7d 92 3c bd f8 6a b3 12 98 ed 9d 69 2e 99 3f 4e 8d f3 e2 5d d2 59 60 10 69 3a 7b 69 9a a4 45 cb 6a 66 d1 36 9a 79 69 98 c5 63 bc b8 b5 af 31 5d b8 b0 29 ba 45 4a ff 00 0d 76 6b f5 5d 6a 3d 25 71 d1 1f e4 7f ba 22 3b 3c 18 1d c7 48 ee ea a4 a4 49 38 e0 39 4c 2a 7d 06 87 17 87 f2 16 9e ad 73 15 da 65 4d d6 cd 7f 0d 44 b6 d3 44 7b ca 12 3e 4a e3 aa 1b 88 Data Ascii: +3P9esJ+;hRHHqtN-JPz1DUyir<}$P`!qPh+TrBrExw<x~lMH"hU}<ji.?N]Y`i:{iEjf6yic1])EJvk]j=%q";<HI89L*}seMDD{>J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49936	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	974	OUT	GET /images/mv/slide/panel_6-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:42 UTC	235	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 43507 Connection: close Last-Modified: Fri, 15 Apr 2022 07:54:44 GMT ETag: "a9f3-5dcacb93fb900" Accept-Ranges: bytes
2024-10-28 19:14:42 UTC	16149	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:42 UTC	16384	IN	Data Raw: 69 4a 9c 82 a8 0e 98 79 d5 f8 78 0e 7e 28 0f 49 03 35 02 ab b8 85 41 07 0c 89 a2 06 73 88 34 6f cd f7 28 0d ac 68 1e 27 12 7c 55 43 90 69 81 45 03 9c f1 9e 3f 62 83 c3 fd 5c ff 00 71 52 f6 e6 ef 26 c1 da d0 c3 77 7d 6a 4b 37 3b e9 86 b6 47 20 ce 18 99 50 1c e6 fe 37 1c 8e 03 8a d4 8d 61 cd ec 1f ee c7 73 eb c5 6f bc 6d 31 5d 3d c4 34 18 eb 09 a9 c3 86 04 ab 75 92 64 91 ee bb 3f 7b db de db c7 2d ed 84 db 6f 51 ba 81 91 ec 95 b4 39 7c b4 76 5c da bc da fe ce 9b 5f 0d 6d d5 75 f6 d8 b1 de 76 4b f9 1f 1d 8e e1 6f 73 2c 46 92 c7 14 ad 2e 69 3c 1c da d4 2e d2 b0 bc 59 23 4d 0f da 15 44 6f 73 eb a4 67 c4 8e 08 1c 16 b4 53 11 ed 40 40 83 91 0a 06 23 98 40 2f 2d 68 a9 1e c1 e2 8a 4c 02 95 3f 31 cd 10 5e 61 c6 a8 a6 af bd 02 2e 03 12 08 03 34 40 b4 ea 3a 8e 1c 81 Data Ascii: iJyx~(I5As4o(h'\|UCiE?b\qR&w}jK7;G P7asom1]=4ud?{-oQ9\|v\_muvKos,F.i<.Y#MDosgS@@#@/-hL?1^a.4@:
2024-10-28 19:14:42 UTC	10974	IN	Data Raw: 9f 1a a7 28 9c 6b 3d f7 16 ba c0 89 ae 84 b0 79 b5 63 53 ec 4c c4 b9 4c 2f 6d 64 3d 3b 80 59 a8 0a 48 dc ab cc 84 cc 4c 55 86 ec b7 52 d2 4d b6 78 ee 47 e2 8c 50 3c 7b 8a ce 48 a5 2b 6e 2d 1e 45 dc 4e 15 c9 af 69 1f 02 b2 da 4e b5 87 f8 31 fc 9a be 63 9a 23 4a f9 ad 31 96 bd b8 9e 21 78 66 d5 ed db 59 87 21 b8 c6 d8 e6 2d 22 a1 d8 8a af a3 d5 73 1e 3d f3 15 44 a6 31 56 36 a4 e0 47 05 d2 eb 9f 6c eb be 3d 0d b2 36 4a fe 07 1f 82 cd d7 0e 99 c9 e2 9d f1 55 a4 89 19 c5 36 d2 53 5d ec f6 9d ad 85 ec 2e 8c e3 c9 73 b6 cb e5 d6 62 cf 08 9a ef 39 2f 25 9c 96 ec f1 e1 84 ec 71 2e f9 f5 72 2b 16 e3 e1 38 7f 25 20 8d df 30 c5 6f 47 2e c8 68 ec 2f 6e 21 9e e2 0b 79 26 b7 b4 6b 5d 75 2b 18 e7 36 26 b9 da 5a e9 1c 05 1a 0b 8d 01 3c 56 b1 59 9b fd b5 b6 7f 4d 3d 41 ee Data Ascii: (k=ycSLL/md=;YHLURMxGP<{H+n-ENiN1c#J1!xfY!-"s=D1V6Gl=6JU6S].sb9/%q.r+8% 0oG.h/n!y&k]u+6&Z<VYM=A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49937	219.94.174.138	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-28 19:14:42 UTC	974	OUT	GET /images/mv/slide/panel_7-sp.jpg HTTP/1.1 Host: www.yamanoue-hotel.co.jp Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.yamanoue-hotel.co.jp/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.1831589210.1730142868; _gid=GA1.3.1202056417.1730142869; _gat=1; _ga_RFKGKFWG67=GS1.1.1730142870.1.0.1730142870.60.0.0; _ga=GA1.1.42326441.1730142869; _dc_gtm_UA-118123153-1=1; _ga_QJ6BW8XGJP=GS1.3.1730142873.1.0.1730142873.60.0.0; _clck=62d801%7C2%7Cfqe%7C0%7C1762; _clsk=18wbezr%7C1730142876342%7C1%7C1%7Ct.clarity.ms%2Fcollect
2024-10-28 19:14:43 UTC	236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 28 Oct 2024 19:14:42 GMT Content-Type: image/jpeg Content-Length: 88007 Connection: close Last-Modified: Wed, 03 Apr 2024 03:11:01 GMT ETag: "157c7-61528927ffb40" Accept-Ranges: bytes
2024-10-28 19:14:43 UTC	16148	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 82 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 39 63 63 63 34 64 65 39 33 2c 20 32 30 32 32 2f 30 33 2f 31 34 2d 31 34 3a 30 37 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.9ccc4de93, 2022/03/14-14:07:22 "> <rdf:RDF
2024-10-28 19:14:43 UTC	16384	IN	Data Raw: 03 ea aa 2d 40 27 55 12 b5 03 2c c5 08 ad 38 f8 63 1c 0a 4b 7b 6d 95 d2 6e 31 b3 4c 04 bd 54 8e 29 94 99 63 69 94 a8 84 16 00 ad 17 56 b4 a9 a1 d3 42 28 31 75 5c cb 4d ea 8d e8 62 b9 9b 71 b1 dc 23 b8 31 5c dd 03 75 05 c3 46 24 63 77 0a 94 9e 34 58 84 64 4a 7a 48 d1 a2 d2 a6 94 cc 83 8d 22 5a 62 89 c4 bf e2 f2 68 6f 5b e6 e1 ba 5c 4b 2e f1 71 71 b8 6e 96 90 49 1b 5c 32 05 82 68 50 a5 c4 09 22 68 57 44 69 2a d5 e2 7d 20 d6 87 15 7d c9 c3 cb 46 74 db e9 98 5a ff 00 1f 8d 10 33 b5 c3 24 27 e2 e5 84 cf 78 5b a4 b1 80 59 d9 c2 93 5a 0d 34 24 69 1e 25 49 d3 98 c7 23 2a eb 82 e2 5d 97 6c 8f 6c be b7 8e 38 e9 15 bb b6 b9 64 b6 2f 23 2f 4d 5a 45 96 2d 45 5b a2 75 29 cc 06 d5 a8 1a 67 8d ad 54 b2 57 1c ff 00 2f c4 23 31 49 b7 dd db cf 0d b4 91 c9 75 0b 45 6d 77 6d Data Ascii: -@'U,8cK{mn1LT)ciVB(1u\Mbq#1\uF$cw4XdJzH"Zbho[\K.qqnI\2hP"hWDi} }FtZ3$'x[YZ4$i%I#]ll8d/#/MZE-E[u)gTW/#1IuEmwm
2024-10-28 19:14:43 UTC	16384	IN	Data Raw: ac 81 f6 67 8f 77 6b 71 5a a9 f3 3c fb 56 1b 44 dc 31 a9 24 8a 70 86 38 60 91 99 bb e9 0d 07 4d e3 79 50 8a 04 8f ca 05 6b e6 76 f0 ad 32 1f 5e 38 fb 99 88 89 f8 e2 69 b5 a8 31 f0 3b f7 ff 00 f3 f6 9f 93 5e 12 7e 5f f6 df ff 00 95 fc ab 8f 3b da dc fd 35 d3 e3 e6 75 f5 af d4 fe 3f 91 0e d9 35 ac 91 2b 47 72 c6 e6 78 8a a4 8b 45 67 8e 2f c3 21 cd 12 36 a6 b1 e5 a5 72 cb 1f 0d bf 5b 71 58 9f 8f 2f 32 b7 93 d0 4b 8b 0b 7b d9 23 b9 8b 49 9c af 15 ac 53 4c 75 66 24 20 b4 41 80 04 f9 bc 07 0a e2 eb 67 49 ad b0 bf 14 bf 98 d5 ba 6d 92 a5 95 e5 9d aa 0b d5 61 a0 3b 08 e0 9d 55 d6 32 e9 a8 a2 ab e6 ca b2 02 2a 0f 0c e9 cb 15 b9 b7 d5 6e 97 a7 81 a3 d7 51 fb a6 e5 b8 6e 57 08 2d 1d 6d 2f a4 25 27 8d 11 15 0a 32 fe 58 72 aa fa 7c 94 cd b8 65 c3 0f 6d 2a 2c fa 56 81 Data Ascii: gwkqZ<VD1$p8`MyPkv2^8i1;^~_;5u?5+GrxEg/!6r[qX/2K{#ISLuf$ AgIma;U2nQnW-m/%'2Xr\|em,V
2024-10-28 19:14:43 UTC	16384	IN	Data Raw: 7d a1 e7 96 42 01 0d 27 4c f9 17 a9 4d 5e 18 ea 5b 7c 67 07 2e 74 34 fb 2a e7 7c f8 e8 b6 cd e0 a0 fe 11 14 ee 97 4c c7 a9 24 b3 b9 53 a8 d3 42 04 1a d0 53 db e1 85 ba f0 3d aa b4 ca 03 b7 3e 61 46 d3 5c 3e ec 27 b9 04 6d 71 b4 ba 5a 47 b0 76 0a cc 9a 40 11 57 4a 39 93 d4 73 f0 c3 57 aa 0f 69 94 2e fb b7 be 44 d2 5b cf b5 6d d2 4f 11 54 91 de 19 9d 4f 40 b0 42 10 d5 40 05 d8 8f 7e 0f 6d f0 61 3c d0 41 63 73 de 37 d6 96 1f c4 60 b5 f8 4d c1 a6 b1 dc ad 92 02 94 89 fc d0 ce 13 82 05 25 90 93 c4 0a 9c e9 89 d2 72 35 57 83 ad e2 ef 2d dd 76 97 bd 96 dd 2d e4 99 ce f5 18 5e 9a b1 b3 91 5e dd aa 46 b0 ac d1 d3 da c1 4e 06 d2 90 54 6e 0b 9d d9 f1 13 ef 10 6c 50 58 c0 8f bc 45 1a 4d b8 47 25 00 82 da 57 92 68 8a 11 9b 14 6c 8f 0a 33 57 96 0a 5a 2b 21 7a cb 48 9f Data Ascii: }B'LM^[\|g.t4*\|L$SBS=>aF\>'mqZGv@WJ9sWi.D[mOTO@B@~ma<Acs7`M%r5W-v-^^FNTnlPXEMG%Whl3WZ+!zH
2024-10-28 19:14:43 UTC	18	IN	Data Raw: 30 77 b7 8e 2e e7 d8 64 95 74 d0 5c 80 d3 f9 c7 e5 49 Data Ascii: 0w.dt\I
2024-10-28 19:14:43 UTC	16384	IN	Data Raw: f4 8f 6e 29 7a 58 bf b8 f1 de e5 58 e6 de 55 00 27 54 4a 1b 50 a1 a9 67 a1 a1 e1 ec c7 5d 0e 46 b2 7a 75 cf 60 6c 5f 18 23 ea 4e 75 bd 02 d5 69 46 94 c7 e1 ff 00 6a 31 bc 1c 9d 6e 42 ad af 6a db b6 d4 30 5b c3 17 4e 49 5a 66 59 5f 3a b2 d3 9f 21 4a 63 83 7f 53 d0 ed dc d4 f0 ed d5 04 bb b2 a3 0f 54 29 99 f1 d2 e0 1c 74 6d 68 63 b9 a1 bc fd 8f 6c b3 3a 2d cb 88 a3 12 02 02 82 7c 86 3d 27 3c bc c1 cf d9 8b ea 9c 1c cd b8 3d 0b e5 f5 92 ec fd b9 23 06 79 90 5e ca 83 46 94 91 b5 40 99 31 3f 74 15 24 01 8e 7d d8 ea 3d 0e dd cd 08 b7 db fb e8 2f 45 dd 3f 0f 4a af 4d 88 af 12 72 c3 aa 56 2e cd d4 01 df a7 7b ad ca 09 9a 87 54 92 69 02 9f d9 31 e1 8d ea a0 e7 b3 96 58 b1 a3 45 09 d4 28 aa bc c7 03 99 c5 32 53 25 94 45 3f 71 c6 51 14 a6 91 e5 e2 32 2a 0f db 89 45 Data Ascii: n)zXXU'TJPg]Fzu`l_#NuiFj1nBj0[NIZfY_:!JcST)tmhcl:-\|='<=#y^F@1?t$}=/E?JMrV.{Ti1XE(2S%E?qQ2*E
2024-10-28 19:14:43 UTC	6305	IN	Data Raw: d0 c2 45 5d 5c 35 15 8e 83 55 29 cb 11 7a 97 54 90 43 a6 d8 af f5 28 4b 70 a5 ce 74 7f 7f df fd 78 92 dc 0d fe ec 1c 80 20 19 66 7f bc f1 15 cb 8e 11 21 57 64 fc 22 db 5e 83 f0 d2 10 57 ca e2 f4 93 ea c8 68 3f 46 78 9b 1a d7 40 91 d2 de b2 13 1c 12 82 8b 48 52 3b f3 4f 57 8b 7d fe 1f ec e2 50 db 25 36 31 33 8a 58 75 47 92 aa b0 5e 1a 0d 47 ce 2b 27 1f e6 c3 10 f9 2c 21 04 91 b7 dc b0 d5 e6 d3 6f 3f 93 c8 32 f3 4b cf 2f af 07 cc 24 a6 7f 84 02 d1 bc 32 c4 7c e0 c8 f1 38 2a 4b 7a 47 e2 1f 70 f7 60 55 6c 1b 30 3b bb 65 1b f4 50 2e cc 62 26 27 67 91 8a 49 a4 82 29 4a af 53 17 d2 d6 a4 26 9e 80 eb 7c b8 df 55 09 79 6d 91 73 25 ca 4d 4c fd ba 30 e0 6e d8 f0 33 f7 6e d6 b9 db 6c 92 ee 4b 9b 6b 88 a4 95 62 45 b7 d6 73 65 66 07 cc 15 69 e4 a7 1c 0e ad 6a 25 6a bd Data Ascii: E]\5U)zTC(Kptx f!Wd"^Wh?Fx@HR;OW}P%613XuG^G+',!o?2K/$2\|8*KzGp`Ul0;eP.b&'gI)JS&\|Uyms%ML0n3nlKkbEsefij%j

Target ID:	0
Start time:	15:14:10
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:14:13
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1904,i,9685926264043671241,3488216749291658935,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:14:16
Start date:	28/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.yamanoue-hotel.co.jp"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.yamanoue-hotel.co.jp/	HTTP Parser: No favicon
Source: https://www.yamanoue-hotel.co.jp/contact/other/	HTTP Parser: No favicon

Source: chromecache_166.2.dr	String found in binary or memory: <!-- <li class="no_icon"><a href="https://www.facebook.com/yamanouehotel/?fref=ts" target="_blank"><img src="./common/images/common/sns_fb.png" alt="Facebook" class="alpha"></a></li> --> equals www.facebook.com (Facebook)
Source: chromecache_166.2.dr	String found in binary or memory: <p class="alpha"><a href="https://www.facebook.com/yamanouehotel/?fref=ts" target="_blank"><img src="https://www.yamanoue-hotel.co.jp/common/images/common/sns_fb_ft.png" alt="Facebook"><span>Facebook</span></a></p> equals www.facebook.com (Facebook)
Source: chromecache_166.2.dr	String found in binary or memory: <li><a href="https://www.facebook.com/yamanoue.wedding" target="_blank"><img src="./common/images/common/snsico_fb.png" alt="facebook" class="alpha"></a></li> equals www.facebook.com (Facebook)
Source: chromecache_314.2.dr	String found in binary or memory: )","vtp_measurementIdOverride":"G-RFKGKFWG67","vtp_enableUserProperties":true,"vtp_enableMoreSettingsOption":true,"vtp_enableEuid":false,"vtp_migratedToV2":true,"vtp_demoV2":false,"tag_id":90},{"function":"__lcl","vtp_waitForTags":false,"vtp_checkValidation":false,"vtp_waitForTagsTimeout":"2000","vtp_uniqueTriggerId":"8713577_31","tag_id":91},{"function":"__html","metadata":["map"],"vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E!function(b,e,f,g,a,c,d){b.fbq\|\|(a=b.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},b._fbq\|\|(b._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],c=e.createElement(f),c.async=!0,c.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(c,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");fbq(\"init\",\"475221159740172\");fbq(\"set\",\"agent\",\"tmgoogletagmanager\",\"475221159740172\");fbq(\"track\",\"PageView\");\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=475221159740172\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n","vtp_supportDocumentWrite":false,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"tag_id":2},{"function":"__html","metadata":["map"],"setup_tags":["list",["tag",38,1]],"once_per_event":true,"vtp_html":"\u003Cscript\u003Efbq(\"track\",\"YamanoueYoyaku\");\u003C\/script\u003E","vtp_supportDocumentWrite":true,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"vtp_usePostscribe":true,"tag_id":5},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\n\u003Cscript type=\"text\/gtmscript\"\u003E(function(d,a){window.UserHeatTag=a;window[a]=window[a]\|\|function(){(window[a].q=window[a].q\|\|[]).push(arguments)};window[a].l=1*new Date;var b=document.createElement(\"script\"),c=document.getElementsByTagName(\"script\")[0];b.async=1;b.src=d;c.parentNode.insertBefore(b,c)})(\"\/\/uh.nakanohito.jp\/uhj2\/uh.js\",\"_uhtracker\");_uhtracker({id:\"uh6KpixOFs\"});\u003C\/script\u003E\n","vtp_supportDocumentWrite":false,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"tag_id":7},{"function":"__html","metadata":["map"],"setup_tags":["list",["tag",38,0]],"once_per_event":true,"vtp_html":"\u003Cscript\u003Efbq(\"track\",\"YamanoueWD_plan\");\u003C\/script\u003E","vtp_supportDocumentWrite":true,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"vtp_usePostscribe":true,"tag_id":21},{"function":"__html","metadata":["map"],"setup_tags":["list",["tag",38,0]],"once_per_event":true,"vtp_html":"\u003Cscript\u003Efbq(\"track\",\"YamanoueWD_fair\");\u003C\/script\u003E","vtp_supportDocumentWrite":true,"vtp_enableIframeMode":false,"vtp_enableEditJsMacroBehavior":false,"vtp_usePostscribe":true,"tag_id":22},{"function":"__html","metadata":["map"],"setup_tags":["list",["tag",38,0]],"once_per_event":true,"vtp_html":"\u003Cscript\u003Efbq(
Source: chromecache_319.2.dr, chromecache_271.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),qD=["www.youtube.com","www.youtube-nocookie.com"],rD,sD=!1; equals www.youtube.com (Youtube)
Source: chromecache_319.2.dr, chromecache_271.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Pe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(BD(w,"iframe_api")\|\|BD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!sD&&zD(x[A],p.Pe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_289.2.dr, chromecache_302.2.dr, chromecache_228.2.dr, chromecache_191.2.dr, chromecache_314.2.dr, chromecache_163.2.dr, chromecache_273.2.dr, chromecache_306.2.dr	String found in binary or memory: return b}oD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),qD=["www.youtube.com","www.youtube-nocookie.com"],rD,sD=!1; equals www.youtube.com (Youtube)
Source: chromecache_290.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_290.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_290.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.yamanoue-hotel.co.jp
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: yamanoue-hotel.co.jp
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: uh.nakanohito.jp
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: uh0.nakanohito.jp
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.yamanoue-hotel.co.jp

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Windows Analysis Report
http://www.yamanoue-hotel.co.jp