Edit tour

Windows Analysis Report
Network Firewall.exe

Overview

General Information

Sample name:	Network Firewall.exe
Analysis ID:	1618600
MD5:	955d9da448d22b73a143cf065ee0f99a
SHA1:	6fc614ad518f9d8547178769570179d3ad2cdb38
SHA256:	923d0c9cd9b18221136d761dffdd376889c4e84ebf1ee51d423c8184dbc9607c
Infos:

Detection

Score:	18
Range:	0 - 100
Confidence:	80%

Signatures

AI detected suspicious Javascript

Allocates memory with a write watch (potentially for evading sandboxes)

Creates a process in suspended mode (likely to inject code)

HTML page contains hidden javascript code

IP address seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64_ra

Network Firewall.exe (PID: 7020 cmdline: "C:\Users\user\Desktop\Network Firewall.exe" MD5: 955D9DA448D22B73A143CF065EE0F99A)

chrome.exe (PID: 5564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://vtechies.us/nstatus/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,15026090044200556791,4749236296812470480,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Data Obfuscation
• Boot Survival
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Anti Debugging
• HIPS / PFW / Operating System Protection Evasion
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 1.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://obseu.seaskydvd.com/ct?id=80705&url=http%3... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be executing a function called `__ctcg_ct_80705_exec` and passing it an object containing potentially sensitive data. This suggests the script is engaging in malicious activities, such as collecting user information and executing remote code. The overall behavior is highly suspicious and indicative of a high-risk script.

Source: http://vtechies.us/nstatus/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon
Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon
Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon
Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon
Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon
Source: http://vtechies.us/nstatus/	HTTP Parser: No favicon

Source: Network Firewall.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Network Firewall.exe

Static PE information: certificate valid

Source: Network Firewall.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:

Binary string: d:\V-PC\WPF\New Project Related\Raghav Sir\Network_Security\Network Security\Network Security\obj\Debug\Network Security.pdb source: Network Firewall.exe

Source: Joe Sandbox View	IP Address: 18.66.121.138 18.66.121.138
Source: Joe Sandbox View	IP Address: 18.66.121.138 18.66.121.138
Source: Joe Sandbox View	IP Address: 34.251.101.162 34.251.101.162
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 18.66.121.190 18.66.121.190
Source: Joe Sandbox View	IP Address: 18.66.121.190 18.66.121.190

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.79.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.114
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1Host: euob.seaskydvd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtechies.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://vtechies.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1Host: euob.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2C000003%2C001244%2Cbucket018%2Cbucket088%2Cbucket089&client=dp-mobile-teaminternet01&r=m&hl=en&rpbu=http%3A%2F%2Fvtechies.us%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTgsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3YjUxY2MyZDFiNGN8fHwxNzM5OTIyNjI2Ljg5MjF8ZmQwOGE4ZjkzMjg3MzcwZWJkZjc1NzYzZjNiYzdhMDIwNjM2ZDE0NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGYzYWM4ZjE2NTY0MDg4OTAwZmI0MDVmMjk2M2U3OTNhNzljYzM3Njd8MHxkcC1tb2JpbGUtdGVhbWludGVybmV0MDF8MHwwfDU4Mzc4ODM5NTl8fHx8&terms=Cloud%20Storage%2CIdentity%20Theft%20Protection%2CVtech%20Monitor%2CTelephone%20Vtech&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-oo-1808423912321928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=671739922628149&num=0&output=afd_ads&domain_name=vtechies.us&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1739922628151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=725223537&rurl=http%3A%2F%2Fvtechies.us%2Fnstatus%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://vtechies.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct?id=80705&url=http%3A%2F%2Fvtechies.us%2Fnstatus%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=f3ac8f16564088900fb405f2963e793a79cc3767&tsf=0&tsfmi=&tsfu=&cb=1739922628116&hl=1&op=0&ag=300509663&rand=13502221611950785126065810090202909806907058826758579250268002771281662251596222958528&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct?id=80705&url=http%3A%2F%2Fvtechies.us%2Fnstatus%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=f3ac8f16564088900fb405f2963e793a79cc3767&tsf=0&tsfmi=&tsfu=&cb=1739922628116&hl=1&op=0&ag=300509663&rand=13502221611950785126065810090202909806907058826758579250268002771281662251596222958528&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=yViDxCxbW9&ts=1072&cb=1739922629188 HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://vtechies.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=yViDxCxbW9&ts=1072&cb=1739922629188 HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
Source: global traffic	HTTP traffic detected: GET /nstatus/ HTTP/1.1Host: vtechies.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://vtechies.us/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://vtechies.us/nstatus/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munin/a/ls?t=67b51cc2&token=f3ac8f16564088900fb405f2963e793a79cc3767 HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://vtechies.us/nstatus/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://vtechies.us/nstatus/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Source: global traffic	HTTP traffic detected: GET /munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://vtechies.us/nstatus/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: vtechies.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA

Source: global traffic	DNS traffic detected: DNS query: vtechies.us
Source: global traffic	DNS traffic detected: DNS query: euob.seaskydvd.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: obseu.seaskydvd.com
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /mon HTTP/1.1Host: obseu.seaskydvd.comConnection: keep-aliveContent-Length: 2796sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: http://vtechies.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://vtechies.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd

Source: Network Firewall.exe	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: Network Firewall.exe	String found in binary or memory: http://ocsp.thawte.com0
Source: Network Firewall.exe	String found in binary or memory: http://sf.symcb.com/sf.crl0f
Source: Network Firewall.exe	String found in binary or memory: http://sf.symcb.com/sf.crt0
Source: Network Firewall.exe	String found in binary or memory: http://sf.symcd.com0&
Source: Network Firewall.exe	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: Network Firewall.exe	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: Network Firewall.exe	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: Network Firewall.exe, 00000001.00000002.2470611858.000000001E00D000.00000004.00000020.00020000.00000000.sdmp, Network Firewall.exe, 00000001.00000002.2465898842.0000000002E9F000.00000004.00000800.00020000.00000000.sdmp, Network Firewall.exe, 00000001.00000002.2471001860.000000001E2C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/
Source: Network Firewall.exe, 00000001.00000002.2471605839.000000001E3EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/As
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/EIJ
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E26E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/F
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/UserWdtPy
Source: Network Firewall.exe	String found in binary or memory: http://vtechies.us/nstatus/W/Network
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E26E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/b
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/dllJIO
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/yI
Source: Network Firewall.exe, 00000001.00000002.2471001860.000000001E2C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vtechies.us/nstatus/~
Source: Network Firewall.exe	String found in binary or memory: https://d.symcb.com/cps0%
Source: Network Firewall.exe	String found in binary or memory: https://d.symcb.com/rpa0
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443

Source: Network Firewall.exe, 00000001.00000000.1208974634.000000000098A000.00000002.00000001.01000000.00000006.sdmp	Binary or memory string: OriginalFilenameNetwork Security.exeD vs Network Firewall.exe
Source: Network Firewall.exe	Binary or memory string: OriginalFilenameNetwork Security.exeD vs Network Firewall.exe

Source: Network Firewall.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: classification engine

Classification label: clean18.winEXE@16/31@38/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe

Mutant created: NULL

Source: Network Firewall.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: Network Firewall.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.98%

Source: C:\Users\user\Desktop\Network Firewall.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Network Firewall.exe "C:\Users\user\Desktop\Network Firewall.exe"
Source: C:\Users\user\Desktop\Network Firewall.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://vtechies.us/nstatus/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,15026090044200556791,4749236296812470480,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\Network Firewall.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://vtechies.us/nstatus/	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,15026090044200556791,4749236296812470480,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: msvcp140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: msctfui.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: d3dcompiler_47.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{41945702-8302-44A6-9445-AC98E8AFA086}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.9.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\Network Firewall.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\UrlAssociations

Jump to behavior

Source: Network Firewall.exe

Static PE information: certificate valid

Source: Network Firewall.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: Network Firewall.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: Network Firewall.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Binary string: d:\V-PC\WPF\New Project Related\Raghav Sir\Network_Security\Network Security\Network Security\obj\Debug\Network Security.pdb source: Network Firewall.exe

Source: C:\Users\user\Desktop\Network Firewall.exe	Code function: 1_2_00007FFECD2C6E7A push eax; retf	1_2_00007FFECD2C6E7B
Source: C:\Users\user\Desktop\Network Firewall.exe	Code function: 1_2_00007FFECD2C01B2 push E95D494Ch; ret	1_2_00007FFECD2C01C9
Source: C:\Users\user\Desktop\Network Firewall.exe	Code function: 1_2_00007FFECD2C7202 push eax; retf	1_2_00007FFECD2C7203

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe	Memory allocated: ED0000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Memory allocated: 1ACF0000 memory reserve \| memory write watch			Jump to behavior

Source: Network Firewall.exe, 00000001.00000002.2470611858.000000001E00D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: Network Firewall.exe, 00000001.00000002.2470611858.000000001E00D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\DosDevices\D:

Source: C:\Users\user\Desktop\Network Firewall.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://vtechies.us/nstatus/

Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Users\user\Desktop\Network Firewall.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguili.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\segoeuii.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguibl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguibli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\segoeuiz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\Network Firewall.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Network Firewall.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Network Firewall.exe	0%	Virustotal		Browse
Network Firewall.exe	0%	ReversingLabs

Source	Detection	Scanner	Label
http://vtechies.us/nstatus/yI	0%	Avira URL Cloud	safe
http://vtechies.us/munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/b	0%	Avira URL Cloud	safe
https://obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=yViDxCxbW9&ts=1072&cb=1739922629188	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/UserWdtPy	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/W/Network	0%	Avira URL Cloud	safe
http://vtechies.us/munin/a/ls?t=67b51cc2&token=f3ac8f16564088900fb405f2963e793a79cc3767	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/As	0%	Avira URL Cloud	safe
https://obseu.seaskydvd.com/mon	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/EIJ	0%	Avira URL Cloud	safe
http://vtechies.us/munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk	0%	Avira URL Cloud	safe
http://vtechies.us/favicon.ico	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/F	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/dllJIO	0%	Avira URL Cloud	safe
http://vtechies.us/nstatus/~	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
euob.seaskydvd.com	108.138.26.67	true	false	high
syndicatedsearch.goog	142.250.186.142	true	false	high
www.google.com	142.250.184.228	true	false	high
obseu.seaskydvd.com	34.251.101.162	true	false	high
googlehosted.l.googleusercontent.com	142.250.185.129	true	false	high
vtechies.us	185.53.177.50	true	false	high
d38psrni17bvxu.cloudfront.net	18.66.121.190	true	false	high
afs.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		high
http://vtechies.us/munin/a/ls?t=67b51cc2&token=f3ac8f16564088900fb405f2963e793a79cc3767	false	Avira URL Cloud: safe	unknown
http://vtechies.us/munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk	false	Avira URL Cloud: safe	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff	false		high
https://obseu.seaskydvd.com/tracker/tc_imp.gif?e=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&cri=yViDxCxbW9&ts=1072&cb=1739922629188	false	Avira URL Cloud: safe	unknown
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false		high
http://vtechies.us/nstatus/	false		unknown
https://obseu.seaskydvd.com/mon	false	Avira URL Cloud: safe	unknown
http://vtechies.us/favicon.ico	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false		high
http://vtechies.us/munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk	false	Avira URL Cloud: safe	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://vtechies.us/nstatus/yI	Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog	chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	false		high
http://vtechies.us/nstatus/b	Network Firewall.exe, 00000001.00000002.2471001860.000000001E26E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ocsp.thawte.com0	Network Firewall.exe	false		high
http://vtechies.us/nstatus/UserWdtPy	Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vtechies.us/nstatus/W/Network	Network Firewall.exe	false	Avira URL Cloud: safe	unknown
http://vtechies.us/nstatus/As	Network Firewall.exe, 00000001.00000002.2471605839.000000001E3EE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vtechies.us/nstatus/EIJ	Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.thawte.com/ThawteTimestampingCA.crl0	Network Firewall.exe	false		high
http://vtechies.us/nstatus/F	Network Firewall.exe, 00000001.00000002.2471001860.000000001E26E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vtechies.us/nstatus/~	Network Firewall.exe, 00000001.00000002.2471001860.000000001E2C2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vtechies.us/nstatus/dllJIO	Network Firewall.exe, 00000001.00000002.2471001860.000000001E242000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_72.10.dr, chromecache_78.10.dr, chromecache_80.10.dr, chromecache_82.10.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
18.66.121.138	unknown	United States	3	MIT-GATEWAYSUS	false
34.251.101.162	obseu.seaskydvd.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.66.121.190	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
185.53.177.50	vtechies.us	Germany	61969	TEAMINTERNET-ASDE	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
108.138.26.67	euob.seaskydvd.com	United States	16509	AMAZON-02US	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
54.75.69.192	unknown	United States	16509	AMAZON-02US	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1618600
Start date and time:	2025-02-19 00:49:33 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Network Firewall.exe
Detection:	CLEAN
Classification:	clean18.winEXE@16/31@38/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 83% Number of executed functions: 16 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.57.20, 172.217.16.131, 142.250.185.142, 74.125.133.84, 172.217.16.206, 216.58.206.66, 142.250.184.226, 172.217.16.142, 142.250.184.206, 172.217.18.14, 142.250.186.142, 172.217.18.3, 142.250.185.206, 216.58.206.78, 142.250.186.78, 172.217.23.110, 2.19.106.160, 13.107.246.45, 52.149.20.212
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, slscr.update.microsoft.com, partner.googleadservices.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Execution Graph export aborted for target Network Firewall.exe, PID 7020 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	https://serv.wpdevcloud.com/wp-admin/user/Netflix/captcha/index.php	Get hash	malicious	Unknown	Browse
	https://pinkbearng.com/auth-authentification/edw/	Get hash	malicious	Unknown	Browse
	https://skillhireau.firebaseapp.com/	Get hash	malicious	Unknown	Browse
	https://m-facebookk.com.vn/2IUtSVyo6tpfbeUouUeOsV	Get hash	malicious	Unknown	Browse
	https://pear-01.dvberg.eu.org/	Get hash	malicious	Unknown	Browse
	http://case-id-1000292829206149.keetkotoun.com/	Get hash	malicious	Unknown	Browse
	http://case-id-1000292829264908.mashstaffing.com/	Get hash	malicious	Unknown	Browse
	http://verification-center-00225526.iwantfoundation.org/	Get hash	malicious	Unknown	Browse
	http://crypto-support.pages.dev/wallets.html	Get hash	malicious	HTMLPhisher	Browse
	http://manoj-madavarapu.github.io/Netflix-clone/	Get hash	malicious	HTMLPhisher	Browse
18.66.121.190	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://api.myuhchvision.com/	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://www.www.cascotiaonlinemobile.com/	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	https://hoo.be/rachelcook	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://shelp1.org/	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
18.66.121.138	https://heuristic-knuth-588d37.netlify.app/?naps/	Get hash	malicious	HTMLPhisher	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://xapp.2excite.com/	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://chart.wwwoaretirement.com	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://purch.order.no/	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
	http://go.staticvisit.net	Get hash	malicious	Unknown	Browse	d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
34.251.101.162	https://pdfsnippingtool.en.download.it/#:~:text=PDF%20Snipping%20Tool%20is%20a,or%20the%20entire%20page%20itself.	Get hash	malicious	Unknown	Browse
	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse
	http://omfgtizdie-sad.blogspot.jp/?m=1	Get hash	malicious	Unknown	Browse
	https://sheels.com/	Get hash	malicious	Unknown	Browse
	https://nuance-pdf-professional2.software.informer.com/7.2/	Get hash	malicious	Unknown	Browse
	http://www.finanzamthessen.de	Get hash	malicious	Unknown	Browse
	https://walli.shanga.co/image/view/?id=1375	Get hash	malicious	Unknown	Browse
	FiddlerSetup.5.0.20245.10105-latest.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse
	http://samobile.net/content/offsite_article.html?url=https%3A%2F%2Fsepedatua.com%2F158983%2Fsecure-redirect%23cnichols%2Bderickdermatology.com&headline=New+Jerusalem%2C+The+by+Chesterton%2C+G.+K	Get hash	malicious	Captcha Phish	Browse
	Pmendon.ext_Reord_Adjustment.docx	Get hash	malicious	Captcha Phish	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
obseu.seaskydvd.com	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse	54.75.69.192
euob.seaskydvd.com	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse	108.138.26.67
syndicatedsearch.goog	http://ringcentral.co	Get hash	malicious	Unknown	Browse	172.217.18.14
	http://s7g10.scene7-large.com	Get hash	malicious	Unknown	Browse	172.217.18.110
	https://bafybeiapgh4ue5jhezdin5eetliugobtaj6ktvugeeungdat4rjzvovq2i.ipfs.flk-ipfs.xyz/?client#dlhistoric_mea@maryland.gov	Get hash	malicious	Unknown	Browse	142.250.186.142
	http://fedx-express.top/	Get hash	malicious	Unknown	Browse	216.58.206.46
	http://ecovvorxusa.com/palcemlmxzcnanw.html	Get hash	malicious	Unknown	Browse	216.58.206.46
	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse	172.217.18.14
	https://mettamaskklooginn.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	142.250.186.142
	https://mettamasklloginnn.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	172.217.16.206
	https://locksmithkatytx.com/cgi-bin#example@email.com	Get hash	malicious	Unknown	Browse	216.58.206.78
	http://metmskextnsion.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	142.250.186.78
www.google.com	https://serv.wpdevcloud.com/wp-admin/user/Netflix/captcha/index.php	Get hash	malicious	Unknown	Browse	216.58.212.132
	https://pinkbearng.com/auth-authentification/edw/	Get hash	malicious	Unknown	Browse	172.217.18.4
	https://skillhireau.firebaseapp.com/	Get hash	malicious	Unknown	Browse	172.217.18.4
	https://m-facebookk.com.vn/2IUtSVyo6tpfbeUouUeOsV	Get hash	malicious	Unknown	Browse	142.250.186.132
	http://case-id-1000292829206149.keetkotoun.com/	Get hash	malicious	Unknown	Browse	172.217.16.196
	http://case-id-1000292829264908.mashstaffing.com/	Get hash	malicious	Unknown	Browse	172.217.18.4
	http://verification-center-00225526.iwantfoundation.org/	Get hash	malicious	Unknown	Browse	172.217.16.196
	http://crypto-support.pages.dev/wallets.html	Get hash	malicious	HTMLPhisher	Browse	142.250.185.164
	http://manoj-madavarapu.github.io/Netflix-clone/	Get hash	malicious	HTMLPhisher	Browse	172.217.18.4
	http://verification-center-00225358.iwantfoundation.org/	Get hash	malicious	Unknown	Browse	172.217.18.4
d38psrni17bvxu.cloudfront.net	https://support.ringcentral.co	Get hash	malicious	Unknown	Browse	18.66.121.190
	https://sheels.com/	Get hash	malicious	Unknown	Browse	18.66.121.69
	https://heuristic-knuth-588d37.netlify.app/?naps/	Get hash	malicious	HTMLPhisher	Browse	18.66.121.135
	http://api.myuhchvision.com/	Get hash	malicious	Unknown	Browse	18.66.121.190
	http://www.www.cascotiaonlinemobile.com/	Get hash	malicious	Unknown	Browse	18.66.121.190
	http://www.finanzamthessen.de	Get hash	malicious	Unknown	Browse	108.158.71.217
	https://walli.shanga.co/image/view/?id=1375	Get hash	malicious	Unknown	Browse	18.161.66.117
	http://svchorst.com	Get hash	malicious	Unknown	Browse	108.158.71.113
	http://begantotireo.xyz	Get hash	malicious	Unknown	Browse	108.158.71.61
	http://begantotireo.xyz	Get hash	malicious	Unknown	Browse	108.158.71.217

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MIT-GATEWAYSUS	https://cyriacscaria234.wixsite.com/netzero-mail-service	Get hash	malicious	Unknown	Browse	18.66.27.79
	https://atlanticwaste.sharefile.com/public/share/web-scc72ae51fb864535b26f2da47d39a751	Get hash	malicious	Unknown	Browse	18.173.205.118
	http://orcaslicer.net	Get hash	malicious	Unknown	Browse	18.173.205.44
	4R4m984y6e.msi	Get hash	malicious	Unknown	Browse	18.173.132.23
	https://pdfsnippingtool.en.download.it/#:~:text=PDF%20Snipping%20Tool%20is%20a,or%20the%20entire%20page%20itself.	Get hash	malicious	Unknown	Browse	18.65.39.3
	$ROO3EY9.msi	Get hash	malicious	Unknown	Browse	18.66.122.127
	zte	Get hash	malicious	Unknown	Browse	19.235.112.78
	http://myprepaidblance.com	Get hash	malicious	Unknown	Browse	18.172.103.101
	https://cinematicbakers-editoring-4cf.notion.site/Baker-Construction-Services-Shared-Document-19e659013a49808f8f46e4274245e60f	Get hash	malicious	HTMLPhisher	Browse	18.66.102.102
	BegaX1kjb6.exe	Get hash	malicious	Unknown	Browse	18.173.205.117
MIT-GATEWAYSUS	https://cyriacscaria234.wixsite.com/netzero-mail-service	Get hash	malicious	Unknown	Browse	18.66.27.79
	https://atlanticwaste.sharefile.com/public/share/web-scc72ae51fb864535b26f2da47d39a751	Get hash	malicious	Unknown	Browse	18.173.205.118
	http://orcaslicer.net	Get hash	malicious	Unknown	Browse	18.173.205.44
	4R4m984y6e.msi	Get hash	malicious	Unknown	Browse	18.173.132.23
	https://pdfsnippingtool.en.download.it/#:~:text=PDF%20Snipping%20Tool%20is%20a,or%20the%20entire%20page%20itself.	Get hash	malicious	Unknown	Browse	18.65.39.3
	$ROO3EY9.msi	Get hash	malicious	Unknown	Browse	18.66.122.127
	zte	Get hash	malicious	Unknown	Browse	19.235.112.78
	http://myprepaidblance.com	Get hash	malicious	Unknown	Browse	18.172.103.101
	https://cinematicbakers-editoring-4cf.notion.site/Baker-Construction-Services-Shared-Document-19e659013a49808f8f46e4274245e60f	Get hash	malicious	HTMLPhisher	Browse	18.66.102.102
	BegaX1kjb6.exe	Get hash	malicious	Unknown	Browse	18.173.205.117
AMAZON-02US	https://m-facebookk.com.vn/2IUtSVyo6tpfbeUouUeOsV	Get hash	malicious	Unknown	Browse	35.78.34.186
	AgentSetup_New+Managed+Device.exe	Get hash	malicious	Unknown	Browse	35.164.164.104
	http://crypto-support.pages.dev/wallets.html	Get hash	malicious	HTMLPhisher	Browse	18.245.86.9
	https://crypto-support.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	18.245.86.7
	http://www.pagina.pro/help-facebook-support-business-authentication-accountscenter-checkpoint-next/	Get hash	malicious	Unknown	Browse	13.35.58.93
	21 Layer Microsoft security.exe	Get hash	malicious	Unknown	Browse	65.9.66.84
	s57VlxH5.bat	Get hash	malicious	Quasar	Browse	18.197.239.109
	https://attreminder.webflow.io/	Get hash	malicious	Unknown	Browse	18.244.20.221
	https://vincents-superb-site-f068ac.webflow.io/	Get hash	malicious	Unknown	Browse	18.244.20.221
	https://cc68b94d-d9d0-4a03-bf37-d58a3335e1ce.p.reviewstudio.com/ref=ap_frn_logo	Get hash	malicious	Unknown	Browse	18.245.32.110

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 18 22:50:28 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9864815188708524
Encrypted:	false
SSDEEP:	48:8vdKVTqdiJHOidAKZdA1FehwiZUklqeh6y+3:80V2ga5y
MD5:	D1DAEA7BE635F656EBA26E2D82A5D747
SHA1:	7D473FA264F1E0AC22DA413A2C291B5EC7CFA61B
SHA-256:	E8DBBB514F5EE80EBAC83929730F4C2F5188536D3863E9EBF382DC5206F48C5A
SHA-512:	7C9BEBDF9E46B6B5E879EAB71B1FA3799797B69E703534C4E02B7F53AEFBC74395FE4FD5AE18B0DC50D3CA4D469D6414271461F4D0CCFC79E0F30F4C44EAD038
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....z..._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRZN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 18 22:50:28 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9986123662258644
Encrypted:	false
SSDEEP:	48:8RdKVTqdiJHOidAKZdA1seh/iZUkAQkqehpy+2:82V2gU9Q8y
MD5:	58D1151827D2A829F03DAA93238ADB95
SHA1:	7D5E3E274FB6DE14FF50E24F6F3207F682113700
SHA-256:	C599FB7AEC52575F624A10773AE224052F3500CFE4B3018C3BDE859B383724BF
SHA-512:	CB279C090D5FA250A834E7FEA90034C3F73347586E6E23C58BADF0B7AB4625AA1D6BD28A87292311F6F7C34D4CBA4FABC071561238680AD86FDF216224EC86E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....9&.._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRZN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.0084177770408
Encrypted:	false
SSDEEP:	48:8BdKVTqdiAHOidAKZdA14meh7sFiZUkmgqeh7sTy+BX:8mV2gbnFy
MD5:	69C63F9D6F02C41666BF49841DBDA898
SHA1:	9DA5315346F2019792EDF55446D95D70F7B5A9F0
SHA-256:	82C8203B30F26D929CA75CAE746314886D523C999F03E920340C03DCDF6D380C
SHA-512:	0A0BA8CD81DCD8BF72F5B12B75740E6A837D1391F9C67854138CD714593539EB62BCDD8D88B840693BC4010760E86F91382A9F406F23FB716E62F8E8B96BF8D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 18 22:50:28 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9969127007242866
Encrypted:	false
SSDEEP:	48:8cdKVTqdiJHOidAKZdA1TehDiZUkwqeh9y+R:8DV2gPry
MD5:	C184F5BC0D44E5C8690ADF690AEAF8BF
SHA1:	D1D2DF662467FD4176081AB4BDEA549C623C692D
SHA-256:	2B53396ADDF398CE04DC08DA229162EB85B494E8947E17490783D5FC0826ADF5
SHA-512:	D4D1497D7F45B097F502BA668E2C0ACF68ECF801AF90DE49A776C36F4353C2E0DB1574E931EB7323E7C53FB52253B4B1A415CC63E2E2432D4F2224231C6FDDEC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....2.._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRZN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 18 22:50:28 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9853705650520705
Encrypted:	false
SSDEEP:	48:8edKVTqdiJHOidAKZdA1dehBiZUk1W1qeh/y+C:8VV2gP9fy
MD5:	F2407DF07F921C6FBCD3071DE238EC60
SHA1:	AD2FB86032664F858EC2777E883A5B4B6F42BF90
SHA-256:	84294CDEBE98F7E4E942749AC1231F25D0795554E738F0A7D372B5E02A04990E
SHA-512:	818C2113671868279AF79BDDC283F31DB536D03CFC02A7194675B21CFD6831086C3CFE3199DA611D491539C436C0D070B229403BAF9ABF24C8A0169D3F7F5FCF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........_...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRZN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Feb 18 22:50:27 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9971490079324203
Encrypted:	false
SSDEEP:	48:8ldKVTqdiJHOidAKZdA1duTeehOuTbbiZUk5OjqehOuTbFy+yT+:8iV2gzTfTbxWOvTbFy7T
MD5:	DF9422BCCC02A0F128FBBF43B2139709
SHA1:	67134FC72ED894FF5337B200A405186E06D7809E
SHA-256:	CBDEB267321AD231153160272EB40357289419D9EC97BAAF79CF93B7A8EF41EE
SHA-512:	D57CFBDE0BCDFC0281F6DB8DC1C817FB896DF773D1F4F32C24A0FA12290B8E47FF50339744204B24D4BF6FE1814E55DDB71DE2E954B390A28EC9630A49093E41
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........_...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRZ7.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRZM.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRZM.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRZM............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRZN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	dropped
Size (bytes):	376
Entropy (8bit):	5.459763606550969
Encrypted:	false
SSDEEP:	6:xWzPVWVF/bh6YSQsdV2FWJaJPFH1NG7M+f0BmbhCk1JBUnHrX2FWJaJPFH1NGAen:xWBW/bvS5qOaLXG7uBmbAk1cHrAOaLXy
MD5:	DB35F6EA985BFD3A72A636B880A3D540
SHA1:	F3358DA9B7EBDF3C91AF9E9ABAA3565EAEFED9D6
SHA-256:	2B95CEC24F203141C1B3B4A2B3FCD5B34002B0F34C68307C12193F711A17148F
SHA-512:	156214911B9CBDEBC1F92206E840212D835A21ED1F86E16C6A4F7311FF98732EB8E8D453CC20B1E4EF71A2AF737E95917CDF8896A8F20F29E3C27E4C62C77746
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=998e912c5c34c8d7:T=1739922630:RT=1739922630:S=ALNI_MYQ_qWWD-RmBDwV4KeAZ8_Pg55PGw","_expires_":1773618630,"_path_":"/","_domain_":"vtechies.us","_version_":1},{"_value_":"UID=0000103889c38390:T=1739922630:RT=1739922630:S=ALNI_MYCPA--0ldo8QCqB7DJ_scqzD0LOA","_expires_":1773618630,"_path_":"/","_domain_":"vtechies.us","_version_":2}]});

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	109112
Entropy (8bit):	5.431584498897824
Encrypted:	false
SSDEEP:	1536:fe/WyHUt2iNXyUuivboi6ZMYqSyxYc0YtORlHshybHKgOLoJNGRkaLJESBb5q1wP:2lH00ebjYqSzJcsKP+18j1Ue
MD5:	5FC4E2AA18AE2EDC0C7AF1FB6A8D02F3
SHA1:	11A6F9DDA3AE49F9A27929D530ABD569FD0235D5
SHA-256:	07F03CBAEDBB190476EDE7B1F66FF2032800B10B0C3709F6F090C51F70FAE8EE
SHA-512:	9F3EEE7A357183549435B21FB9B754F2D8F55AA743E23154011756E98FF421901122227C7A21E202BE669C9F8006BBD7C19D3BDE2F29F27282903B6483F2A838
Malicious:	false
Reputation:	low
Preview:	!function(){var t={807:function(t,n,r){var e=r(331),i=r(539),a=e.domU,c=e.u,o=e.util,u=window,f=document,v=u.navigator,s=function(t,n){for(var r="",e=0;e<t.length;e++)r+=String.fromCharCode(t[e]-n);return r};t.exports=function(t,n,r,e,l){try{if(l=l\|\|{},r=r\|\|{},n&&!0===n.excAsync)return;var d=0,h={},_=a.o(),p=function(n,r){if(r=r\|\|{},h[n]?h[n]++:h[n]=1,!(h[n]>3)){var e={e:t,ev:n,c:++d,co:c._(h),et:a.o()-_};for(var i in r)e[i]=r[i];o.S("dc/1",e)}},y=!!u.chrome\|\|"Google Inc."===o.I();!function(){if(!l.C&&n.ck&&l.k&&y&&u.Blob&&u.Worker){var t=[s([102,114,113,105,108,106,120,117,100,101,111,104],3),s([102,111,118,110,102,115,98,99,109,102],1),s([110,108,123],7),s([126,127,108,110,118],11),s([104,116,115,120,116,113,106],5),s([103,104,101,120,106],3),"",!1,s([72,117,117,114,117],3)];a.A(t,(function(t,n){var r=!1;try{var e=new self[t[8]],i={};i[t[0]]=t[7],i[t[1]]=t[7],i[t[2]]=function(){return r=!0,t[6]},Object.defineProperty(e,t[3],i),self[t[4]][t[5]](e)}catch(t){}n(r)}),(function(t){t&&p("c

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	109112
Entropy (8bit):	5.431584498897824
Encrypted:	false
SSDEEP:	1536:fe/WyHUt2iNXyUuivboi6ZMYqSyxYc0YtORlHshybHKgOLoJNGRkaLJESBb5q1wP:2lH00ebjYqSzJcsKP+18j1Ue
MD5:	5FC4E2AA18AE2EDC0C7AF1FB6A8D02F3
SHA1:	11A6F9DDA3AE49F9A27929D530ABD569FD0235D5
SHA-256:	07F03CBAEDBB190476EDE7B1F66FF2032800B10B0C3709F6F090C51F70FAE8EE
SHA-512:	9F3EEE7A357183549435B21FB9B754F2D8F55AA743E23154011756E98FF421901122227C7A21E202BE669C9F8006BBD7C19D3BDE2F29F27282903B6483F2A838
Malicious:	false
URL:	https://euob.seaskydvd.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
Preview:	!function(){var t={807:function(t,n,r){var e=r(331),i=r(539),a=e.domU,c=e.u,o=e.util,u=window,f=document,v=u.navigator,s=function(t,n){for(var r="",e=0;e<t.length;e++)r+=String.fromCharCode(t[e]-n);return r};t.exports=function(t,n,r,e,l){try{if(l=l\|\|{},r=r\|\|{},n&&!0===n.excAsync)return;var d=0,h={},_=a.o(),p=function(n,r){if(r=r\|\|{},h[n]?h[n]++:h[n]=1,!(h[n]>3)){var e={e:t,ev:n,c:++d,co:c._(h),et:a.o()-_};for(var i in r)e[i]=r[i];o.S("dc/1",e)}},y=!!u.chrome\|\|"Google Inc."===o.I();!function(){if(!l.C&&n.ck&&l.k&&y&&u.Blob&&u.Worker){var t=[s([102,114,113,105,108,106,120,117,100,101,111,104],3),s([102,111,118,110,102,115,98,99,109,102],1),s([110,108,123],7),s([126,127,108,110,118],11),s([104,116,115,120,116,113,106],5),s([103,104,101,120,106],3),"",!1,s([72,117,117,114,117],3)];a.A(t,(function(t,n){var r=!1;try{var e=new self[t[8]],i={};i[t[0]]=t[7],i[t[1]]=t[7],i[t[2]]=function(){return r=!0,t[6]},Object.defineProperty(e,t[3],i),self[t[4]][t[5]](e)}catch(t){}n(r)}),(function(t){t&&p("c

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1869)
Category:	dropped
Size (bytes):	149173
Entropy (8bit):	5.5287365126555965
Encrypted:	false
SSDEEP:	1536:1uzTdnqedsv7KnTi/xW7UENc+o2rUKohu0g0WnhM0JXg3gF/BGGH00AHw3yWMfov:0RJUKouhBXgu3f3yb7v3hqpr9
MD5:	BB18096E90217BF0EE719EC000D70189
SHA1:	90E43818423D628E6A8E2B4F583022435EC90F88
SHA-256:	E916E21560B961DB649AD4BEB284151077DD98681F79482A24FC09FB2AF5EE19
SHA-512:	798EB8C42CB29D72AFD503E31E15F9B7EFB91D1A71F2E105A6B0E6BC66CD52EC761A8037E49E1904D585D0ADF1A58298ED3B54E0922578E4AC2851DAB0D9FB4C
Malicious:	false
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":50,"heterodyne_test":851,

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 15726
Category:	downloaded
Size (bytes):	5830
Entropy (8bit):	7.9630672123255115
Encrypted:	false
SSDEEP:	96:PBuOzQSndsA+sEhpxJjm24Ndk82eTpPU8tTUbpGaXZDeFwCAdhCLj1b/dXrDs/:PB3zbneAdEhpxNa/koTVUNG4QwBCLjLK
MD5:	DA35634EF8058AD6C68A47F2867E6B0A
SHA1:	83AF8E5CC4F2AF5345E63CDB82EF87311D081B14
SHA-256:	4CE70626D3D5E05268E5306E15D27C2913F45A5944AD6AAF210D0DEA0924BD12
SHA-512:	9FCC2A3E298318C909D357250A2212726FAB9E872253C6C072CDDDB6EC1C7AAD252666A2EA3569ABBB10268638B8EE7BB789656A00C5F8058652A51C8AA73994
Malicious:	false
URL:	http://vtechies.us/nstatus/
Preview:	......n....{kw.:..._.....m !P./......i.]=]....m.k...Y#.0..i{.Y..qW.[...fF3....]....@}.:.....21.9l......LK.I.s..m..F..pqv.Po<M...Y...Q.......\.../n....w.>..}V..+.v.7l....w..._....7-.{..{s{.6.M.R.._.T....^..o.cq.t=..........e..e......Wg~s.o_]<...Q..O.....s..:'#..b..Y.E..U.n..D.Rh.:..R}.j.0.L.b...rrrR..<R..........l.. ..G.p....9......q..\{...2./-....R..}.2...r.T!I....RcJ&..........dL....YD=.)vr....,b..z...s...hs..r:...S..#...5E`.g.A.1).R....e.3F.7.q(...?z...?....NZ..b%`.G...x:...?2...x.#....%. ......%e...B...A<N....bNU...i...>.v.W...O.....*..C=..VY;X.$.T.&&..M&..&&..~&.....8..iR.....@...q..>bN=.!\...n..5s...I.........+%g...1..WE......(d~XE.........m.Ue$.b0E..L7.v.;&..]sJ9.".._.r..=...c..k....2[..Z..t..\-.-...ZE.1...k+N.9."<.~......z~h.0.b..X.E.s.?.....X.....+...7....-9.A.=.....z..Q<..D..x...ufU..r.......v..UW.}...T....F....@.%..F..Q.....R.S.$.@.+1..;~X}_)...{.H...X9.^....]Xl.;....R1\|7.Q..p8$......d.....d..1?.{&.......`:9%_...

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1869)
Category:	downloaded
Size (bytes):	149166
Entropy (8bit):	5.52882212948067
Encrypted:	false
SSDEEP:	1536:6uzTdnqedsv7KnTi/xW7UENc+o2rUKohu0g0WnhM0JXg3gF/BGGH00AHw3yWMfov:pRJUKouhBXgu3f3yb7v3hqpr9
MD5:	586F15E8F442A30EFC40BDB32D30CF53
SHA1:	719796AE36076324B1FB7B8C72BB50449DBCB30F
SHA-256:	7DF00E71CB5CC3F307F8841D0EBAAB7E69779F307130DFFA071358BBFDE3C819
SHA-512:	24B6CFA9DD79988F76D6B043610CB55B841AE6B8A7059EAA1CFF54736B59AC0E462355A5ED4BF7F9E62250249E3FEC4FAF611E3A502D1F650501046A72B31D3C
Malicious:	false
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":50,"heterodyne_test":851,"ivt_ch

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14081)
Category:	downloaded
Size (bytes):	14933
Entropy (8bit):	5.479072780121383
Encrypted:	false
SSDEEP:	192:2E12iMpgbLLghuzV/wWr9TG2zTGyTGFzBG/56:2ni0dAKogzBQ56
MD5:	C1C2C5C4E9ECE9D7D2668409BBB9505A
SHA1:	2D52404F16A431BAC3D98EA89A89AEBDD88A912C
SHA-256:	AE50C5FEED8C87DEC6DF47ADCA6DD4B7A20DD57E183A72DF7455D546F98DCC57
SHA-512:	588A7098A913E51C7DA4DFCD5055587A1BFE3F6B65A7880A06A37D8CC7438DE487F9FDDE6DC6055FF1277320853A9D201CAD25F130F2B0228129DB8F6701F335
Malicious:	false
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2C000003%2C001244%2Cbucket018%2Cbucket088%2Cbucket089&client=dp-mobile-teaminternet01&r=m&hl=en&rpbu=http%3A%2F%2Fvtechies.us%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTgsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3YjUxY2MyZDFiNGN8fHwxNzM5OTIyNjI2Ljg5MjF8ZmQwOGE4ZjkzMjg3MzcwZWJkZjc1NzYzZjNiYzdhMDIwNjM2ZDE0NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGYzYWM4ZjE2NTY0MDg4OTAwZmI0MDVmMjk2M2U3OTNhNzljYzM3Njd8MHxkcC1tb2JpbGUtdGVhbWludGVybmV0MDF8MHwwfDU4Mzc4ODM5NTl8fHx8&terms=Cloud%20Storage%2CIdentity%20Theft%20Protection%2CVtech%20Monitor%2CTelephone%20Vtech&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-oo-1808423912321928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=671739922628149&num=0&output=afd_ads&domain_name=vtechies.us&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1739922628151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=725223537&rurl=http%3A%2F%2Fvtechies.us%2Fnstatus%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1869)
Category:	downloaded
Size (bytes):	149173
Entropy (8bit):	5.5287365126555965
Encrypted:	false
SSDEEP:	1536:1uzTdnqedsv7KnTi/xW7UENc+o2rUKohu0g0WnhM0JXg3gF/BGGH00AHw3yWMfov:0RJUKouhBXgu3f3yb7v3hqpr9
MD5:	BB18096E90217BF0EE719EC000D70189
SHA1:	90E43818423D628E6A8E2B4F583022435EC90F88
SHA-256:	E916E21560B961DB649AD4BEB284151077DD98681F79482A24FC09FB2AF5EE19
SHA-512:	798EB8C42CB29D72AFD503E31E15F9B7EFB91D1A71F2E105A6B0E6BC66CD52EC761A8037E49E1904D585D0ADF1A58298ED3B54E0922578E4AC2851DAB0D9FB4C
Malicious:	false
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":50,"heterodyne_test":851,

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (376), with no line terminators
Category:	downloaded
Size (bytes):	376
Entropy (8bit):	5.418949466605877
Encrypted:	false
SSDEEP:	6:xWzP/WZLWhuru2Yg37DGxLX2F/PFH1NG7M+f05tUlhuru2Yg3wg/kV7Y+UioppV7:xWYWhuru2n39lXG7u5mlhuru2n3wgkgH
MD5:	CCA4C0811137232510069B4F5BECE903
SHA1:	E50B6A85D132F6C7DF28B71732564C9ABA04FDB0
SHA-256:	B20CD9F6D94743D5ED4A7C13479C8B6B53F40F61DECEC1A4B102F56E25AE5697
SHA-512:	558ACC2CF1748A13FED8554E7059E7D57350CC7C8ED2A484A59359276339EF7C22724EFA21052BD2470BA109649C69B9462335E4D81492F50B24529D784376CE
Malicious:	false
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=vtechies.us&client=dp-mobile-teaminternet01&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA","_expires_":1773618629,"_path_":"/","_domain_":"vtechies.us","_version_":1},{"_value_":"UID=0000103889a5239c:T=1739922629:RT=1739922629:S=ALNI_MZvEL4C60OQH4_L3WKDnn3p3qKHfQ","_expires_":1773618629,"_path_":"/","_domain_":"vtechies.us","_version_":2}]});

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1869)
Category:	dropped
Size (bytes):	149166
Entropy (8bit):	5.528835575211705
Encrypted:	false
SSDEEP:	1536:TuzTdnqedsv7KnTi/xW7UENc+o2rUKohu0g0WnhM0JXg3gF/BGGH00AHw3yWMfov:iRJUKouhBXgu3f3yb7v3hqpr9
MD5:	6BB76AD13BC3A976A3500B0AF395A13B
SHA1:	E7A603589233FD0A26DD32DDC2435204E74CB62A
SHA-256:	A2F67745F4D6E7061BCBC3B9ECDB8FB9E67B787D404C6F34DD627C6590673DD8
SHA-512:	60E5BAAFE72A8DC271629B1AF5F16EAAA84E77A8027A13EAAC9EEB3A834E07EEFC7C9C79A08B02846135DCEE5FB5FADD919471963B86A82BAEAD5FAABD3C3B1C
Malicious:	false
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":50,"heterodyne_test":851,"ivt_ch

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.22555717311303
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.98% Win32 Executable (generic) a (10002005/4) 49.93% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	Network Firewall.exe
File size:	141'584 bytes
MD5:	955d9da448d22b73a143cf065ee0f99a
SHA1:	6fc614ad518f9d8547178769570179d3ad2cdb38
SHA256:	923d0c9cd9b18221136d761dffdd376889c4e84ebf1ee51d423c8184dbc9607c
SHA512:	bef33d44a25442c549d845aef88f3572bbd930de5e1d948b557ccad6c53f82e37672b7878629a89ac85b44e75142d50c54905fa1de2cc8185d439287e53628c0
SSDEEP:	1536:aXEkN8ge0fpsaSP55PQHegP/VEbdV5bEOWL:ac0fSaWT6m5bEOQ
TLSH:	D1D3B860A2EDC715D6E84AB8C671D2F80A793D0AD966C20F37C53C8B7DF23B18621756
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L.....HU.................f............... ........@.. ....................................@................................

File Icon


Icon Hash:	88b2313830308417

Static PE Info

General

Entrypoint:	0x4185ae
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x5548B811 [Tue May 5 12:31:13 2015 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	29/10/2014 20:00:00 22/10/2015 19:59:59
Subject Chain	CN=VTECH SOFTWARE SOLUTION INC, OU=IT DEPARTMENT, O=VTECH SOFTWARE SOLUTION INC, L=Melrose, S=Massachusetts, C=US
Version:	3
Thumbprint MD5:	57C0A3CF58AFC837E51D0AB4985B9E67
Thumbprint SHA-1:	E83F142B7B52F3CC1E552EBFF993AFB9CF8AE63C
Thumbprint SHA-256:	511D87B43FB059C9C617FE9873CDB114539ED379A9E7276BC964BF881A6F7105
Serial:	75A644DD189BD27F7E4D441EAFC91C5F

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1855c	0x4f	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x1a000	0xa468	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x21000	0x1910	.rsrc
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x26000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x18424	0x1c	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x165b4	0x16600	5767ef03657d70e08737cbeaa6e4a035	False	0.26696709148044695	data	4.628665473113389	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x1a000	0xa468	0xa600	92be1c5d2866c993f417ba49b16de9e1	False	0.08010165662650602	data	2.332123304027543	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x26000	0xc	0x200	2f82fcc81edaf825dc7d9b61d1893419	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x1a478	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864	0.04721988648307757
RT_GROUP_ICON	0x23920	0x14	data	1.25
RT_VERSION	0x1a130	0x348	data	0.4154761904761905
RT_MANIFEST	0x23938	0xb2a	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.3561931420573828

Imports

DLL	Import
mscoree.dll	_CorExeMain

Version Infos

Description	Data
Translation	0x0000 0x04b0
FileDescription	Network Security
FileVersion	1.0.*
InternalName	Network Security.exe
LegalCopyright	Copyright Network Security 2015. All rights reserved.
OriginalFilename	Network Security.exe
ProductName	Network Security
ProductVersion	1.0.*
Assembly Version	1.0.5603.32436

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 621
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 00:50:02.035932064 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:02.339404106 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:02.947477102 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:04.157390118 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:05.642642975 CET	49691	80	192.168.2.16	184.30.131.245
Feb 19, 2025 00:50:05.642765045 CET	49689	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:06.562279940 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:10.206085920 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:10.508450985 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:11.113450050 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:11.368505955 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:12.325423956 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:14.672658920 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:14.736438036 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:14.975426912 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:15.581458092 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:16.793458939 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:19.198492050 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:19.547465086 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:20.970516920 CET	49673	443	192.168.2.16	204.79.197.203
Feb 19, 2025 00:50:24.002461910 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:26.276789904 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.277534962 CET	49791	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.281790972 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.281873941 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.282597065 CET	80	49791	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.282610893 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.282670021 CET	49791	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.287663937 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991559982 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991573095 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991585016 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991600990 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991612911 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.991648912 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.991698980 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:26.991993904 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.992043972 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:26.992044926 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.024627924 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.024684906 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.024750948 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.024980068 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.024997950 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.037465096 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.049223900 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.056051016 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.056272984 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.056520939 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.062758923 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.106986046 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.110740900 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.117163897 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.309796095 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.314235926 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.321445942 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.334485054 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.337765932 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.337802887 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.337863922 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.338061094 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.338077068 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.341377020 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.341465950 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.341650963 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.349750042 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.514799118 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:27.560511112 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:27.677316904 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677520990 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677531004 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677541018 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677572966 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677592993 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.677666903 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.677674055 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677685022 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677695990 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677706003 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677716017 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.677731991 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.677732944 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.677762985 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.682698011 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:50:27.696388960 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:27.701421976 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:27.701497078 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:27.701687098 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:27.706655979 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:27.734529972 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:50:27.788044930 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.788330078 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.788338900 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.789355040 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.789436102 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.790371895 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.790445089 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.790530920 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.831337929 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.845539093 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.845558882 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:27.893150091 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:27.987607956 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.987900019 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.987907887 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.988791943 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.988857985 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.989883900 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.989979029 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.990150928 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:27.990154982 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:27.995244026 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:28.033598900 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.049498081 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:28.065471888 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065535069 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065556049 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065602064 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065639019 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.065642118 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065666914 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065675020 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.065696001 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.065701962 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.065713882 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.065762997 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.151959896 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.152023077 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.152076960 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.152097940 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.152132034 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.152149916 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.157721043 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.157769918 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.157812119 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.157819986 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.157849073 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.157871008 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.242981911 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243009090 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243088007 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.243104935 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243144035 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.243520975 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243535995 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243583918 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.243590117 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.243629932 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.245100021 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.245115995 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.245157957 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.245165110 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.245187998 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.245222092 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.247734070 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.247769117 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.247788906 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.247793913 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.247813940 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.247836113 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.247862101 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.247994900 CET	49799	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.248006105 CET	443	49799	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.255726099 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255779028 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255816936 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255852938 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255861998 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.255886078 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255913019 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.255914927 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.256000042 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.256339073 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.257116079 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.257339954 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.257364988 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.261465073 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.261531115 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.261543989 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.279877901 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.279906988 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.279972076 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.280117989 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:28.280131102 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:28.303487062 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.347954035 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.347984076 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.347996950 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348009109 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348037004 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348038912 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:28.348050117 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348063946 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348074913 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348078966 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:28.348082066 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.348102093 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:28.348150969 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:28.348282099 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.348378897 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.348414898 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.348458052 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.348589897 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.348591089 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.348664045 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.350636959 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.350907087 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.350927114 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.357244015 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.357342005 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.357391119 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.363280058 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.363373041 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.363389015 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.369450092 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.369582891 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.369596958 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.375359058 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.375607967 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.375621080 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.381551027 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.381618977 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.381632090 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.387264967 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.387339115 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.387351036 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.393801928 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.393896103 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.393909931 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.431260109 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.431277990 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:50:28.431355953 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:50:28.435358047 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435404062 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435445070 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435465097 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.435491085 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435503006 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435508966 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.435595989 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.435623884 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435939074 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435973883 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.435998917 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.436014891 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.436081886 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.436660051 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.442208052 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.442266941 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.442291021 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.442306995 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.442378044 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.448668957 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.454211950 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.454303026 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.454303980 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.454324007 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.454380989 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.460289001 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.466140985 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.466170073 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.466219902 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.466253996 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.466367006 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.472152948 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.478013992 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.478043079 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.478100061 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.478118896 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.478172064 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.484023094 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.488804102 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.488857985 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.488872051 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.495975971 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.495995998 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.496026993 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.496040106 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.496094942 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.498265982 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.502587080 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.502605915 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.502670050 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.502685070 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.502736092 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.506808043 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.511077881 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.511111021 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.511146069 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.511157990 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.511490107 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.515163898 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.519243956 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.519314051 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.519325972 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.523533106 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.523561001 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.523622990 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.523634911 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.523689985 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.526124954 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.528628111 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.528657913 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.528687000 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.528700113 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.528774977 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.531032085 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.533533096 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.533565044 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.533592939 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.533603907 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.533616066 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.533653975 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.536046028 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.536154032 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.536164999 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.538625002 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.538690090 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.538702011 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.541105032 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.541168928 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.541181087 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.543559074 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.543682098 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.543694973 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.546052933 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.546132088 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.546144962 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.548614979 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.548754930 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.548767090 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.551081896 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.551145077 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.551157951 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.553567886 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.553694010 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.553704977 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.556138039 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.556240082 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.556253910 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.558605909 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.558691025 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.558705091 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.561093092 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.561268091 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.561279058 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.563618898 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.563710928 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.563721895 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.566162109 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.566247940 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.566250086 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.566303968 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.572282076 CET	49808	443	192.168.2.16	172.217.16.196
Feb 19, 2025 00:50:28.572313070 CET	443	49808	172.217.16.196	192.168.2.16
Feb 19, 2025 00:50:28.588099957 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:28.588193893 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:28.588284016 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:28.588450909 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:28.588484049 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:28.591248989 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:28.591290951 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:28.591351986 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:28.591784000 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:28.591801882 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:28.608123064 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:28.608154058 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:28.608336926 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:28.608525991 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:28.608536959 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.017415047 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.018266916 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.018342018 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.019593000 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.019673109 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.020148039 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.020248890 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.020339966 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.020358086 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.065480947 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.160466909 CET	49678	443	192.168.2.16	20.189.173.10
Feb 19, 2025 00:50:29.238835096 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.239037037 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.239061117 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.240108013 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.240175009 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.240451097 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.240513086 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.241173983 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.241185904 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.257127047 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.257714033 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.257759094 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.258783102 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.258869886 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.259253025 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.259332895 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.259443045 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.259460926 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.287494898 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.303464890 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.308973074 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309009075 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309016943 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309034109 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309082031 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.309123039 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309140921 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.309154987 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.309191942 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.390866041 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.390891075 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.391088009 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.391088963 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.391138077 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.391195059 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.398705959 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.398729086 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.398796082 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.398804903 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.398900032 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.407598972 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.407833099 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.407852888 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.409090996 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.409161091 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.410068035 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.410140038 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.410254955 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.410289049 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.462481022 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.462496042 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.478809118 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.478847027 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.478936911 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.478981018 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.479001999 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.479146957 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.480118036 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.480138063 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.480210066 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.480220079 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.480266094 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.482034922 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.482062101 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.482132912 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.482146025 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.482183933 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.489833117 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.489917994 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.489933014 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.489954948 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.489980936 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.489984989 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.490041971 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.490170002 CET	49816	443	192.168.2.16	108.138.26.67
Feb 19, 2025 00:50:29.490189075 CET	443	49816	108.138.26.67	192.168.2.16
Feb 19, 2025 00:50:29.510485888 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.522044897 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522099018 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522121906 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522149086 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522171974 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.522175074 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522186995 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522198915 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.522224903 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.522233009 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522651911 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.522697926 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.522706985 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.523682117 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523746014 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523793936 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523840904 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523869991 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.523906946 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523916960 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.523922920 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.523968935 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.527846098 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.527900934 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.527915955 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.528181076 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.528237104 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.528294086 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.528322935 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.536236048 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.536317110 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.536331892 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.549983025 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.550052881 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.550067902 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.550154924 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.550215960 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.550295115 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.550295115 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.550331116 CET	443	49821	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.550396919 CET	49821	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.558680058 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.558718920 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.558778048 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.559148073 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:29.559165955 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:29.574471951 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.613656044 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620249033 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620275974 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620294094 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.620310068 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620309114 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.620327950 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620337963 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.620357990 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.620388985 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.620414972 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.620429993 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.620469093 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.620486975 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.620498896 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.620505095 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.621141911 CET	49818	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.621154070 CET	443	49818	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.624536991 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.624593019 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.624607086 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.629781008 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.629837036 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.629920959 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.630142927 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.630162001 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.632864952 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.633024931 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.633038044 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.634496927 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.634521008 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.634618998 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.634836912 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:29.634855986 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:29.636282921 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.636327982 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.636341095 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.642524004 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.642580032 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.642591953 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.648631096 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.648699045 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.648710966 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.654619932 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.654681921 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.654695034 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.660764933 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.660846949 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.660859108 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.700483084 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.700504065 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711235046 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711333036 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.711347103 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711452961 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711502075 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.711507082 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711615086 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711729050 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711777925 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.711783886 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.711822033 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.712054968 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.712210894 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.712261915 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.712269068 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.715904951 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.715996027 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.716008902 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.721796036 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.721863985 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.721877098 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.728204012 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.728264093 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.728276968 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.733971119 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.734031916 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.734045982 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.740115881 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.740176916 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.740190029 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.746092081 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.746145010 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.746159077 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.751853943 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.751934052 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.751946926 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.756994963 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.757049084 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.757061958 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.761836052 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.761909008 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.761921883 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.766588926 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.766731024 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.766742945 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.770894051 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.770950079 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.770961046 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.775343895 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.775402069 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.775413036 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.779556990 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.779608011 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.779619932 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.783588886 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.783674955 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.783688068 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.787729979 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.787781000 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.787794113 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.792118073 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.792174101 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.792187929 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.798729897 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.798779011 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.798800945 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.798814058 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.798950911 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.801520109 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.801743031 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.801793098 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.801805019 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.804327965 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.804385900 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.804398060 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.807030916 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.807080984 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.807105064 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.807117939 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.807163954 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.809550047 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.812170029 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.812221050 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.812247992 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.812261105 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.812303066 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.814893007 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.817581892 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.817639112 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.817651987 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.820281982 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.820338011 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.820350885 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.822938919 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.822990894 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.823003054 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.825627089 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.825711966 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.825721979 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.825735092 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.825779915 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.828284979 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.830955029 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.831013918 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.831026077 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.833798885 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.833858967 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.833872080 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.837172985 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.837248087 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.837255955 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.837285042 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.837327003 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.838886976 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.842509985 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.842570066 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.842582941 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.842840910 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:29.842910051 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.843045950 CET	49819	443	192.168.2.16	142.250.186.164
Feb 19, 2025 00:50:29.843061924 CET	443	49819	142.250.186.164	192.168.2.16
Feb 19, 2025 00:50:30.187978983 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.188304901 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.188328981 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.188679934 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.189181089 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.189254045 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.189347029 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.231338024 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.242475986 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.421293974 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.421628952 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.421658039 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.423125982 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.423209906 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.423499107 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.423583984 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.423762083 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.423779011 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.442756891 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.443089962 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.443144083 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.443656921 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.443978071 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.444055080 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.444166899 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.444188118 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.466492891 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.468240976 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.468292952 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.468338966 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.468353987 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.468378067 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.468473911 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.468482018 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.474183083 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.474239111 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.474255085 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.474483967 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.474673986 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.474683046 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.480700016 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.480784893 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.480799913 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.527503967 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.527528048 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.555378914 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.555432081 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.555471897 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.555493116 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.555552959 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.557013988 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.563388109 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.563436031 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.563462019 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.563477993 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.563539982 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.570347071 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.575747013 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.575814009 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.575829983 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.582164049 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.582226992 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.582253933 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.582269907 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.582313061 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.588356972 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.595833063 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.595875978 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.595910072 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.595925093 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.595973015 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.601923943 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.608671904 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.608709097 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.608727932 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.608742952 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.609095097 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.615086079 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.622759104 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.622833014 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.622893095 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.622909069 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.622961998 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.623388052 CET	49834	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.623408079 CET	443	49834	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.639163971 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.639230013 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.639331102 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.639579058 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.639594078 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.642083883 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642128944 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642158985 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642158031 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.642174959 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642210007 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.642231941 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642308950 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.642314911 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642549038 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.642635107 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.642642975 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.644058943 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.644141912 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.644155025 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.648720980 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.648916960 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.648930073 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.654551029 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.654616117 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.654630899 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.660352945 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.660408974 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.660423040 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.666156054 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.666224003 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.666239023 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.671853065 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.671900034 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.671914101 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.677190065 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.677269936 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.677285910 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.682553053 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.682641983 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.682661057 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.687799931 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.687975883 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.687990904 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.693028927 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.693119049 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.693139076 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.698039055 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.698627949 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.698642015 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.702693939 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.702774048 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.702788115 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.707349062 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.707465887 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.707479954 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.711785078 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.711844921 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.711859941 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.715950012 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.716104984 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.716119051 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.719975948 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.720038891 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.720052004 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.723725080 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.723782063 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.723795891 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.727691889 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.727758884 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.727772951 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.731451988 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.731498957 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.731512070 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.735318899 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.735371113 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.735384941 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.737746000 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.737793922 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.737796068 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.737808943 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.737853050 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.739918947 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.742228985 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.742270947 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.742270947 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.742285013 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.742330074 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.744600058 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.746882915 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.746937037 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.746944904 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.746956110 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.746993065 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.747772932 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.747925997 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.748080969 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.748282909 CET	49833	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.748310089 CET	443	49833	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.749277115 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.750891924 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.750926018 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.751086950 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.751353979 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:30.751370907 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:30.751492023 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.751543999 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.751597881 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.751611948 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.751657009 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.753734112 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.756206036 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.756249905 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.756253004 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.756267071 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.756530046 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.758443117 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.760698080 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.760739088 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.760752916 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.763029099 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.763087988 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.763101101 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.765333891 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.765377045 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.765378952 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.765398979 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.765458107 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.767662048 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.767721891 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.767843008 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.767855883 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.767927885 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.767972946 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.768080950 CET	49829	443	192.168.2.16	142.250.186.46
Feb 19, 2025 00:50:30.768095970 CET	443	49829	142.250.186.46	192.168.2.16
Feb 19, 2025 00:50:30.779620886 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:30.786175013 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:30.978883028 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:30.982310057 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:30.985368013 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:30.988960981 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:30.991713047 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.001048088 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.001105070 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.001173973 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.001261950 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.001306057 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.001357079 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.001374006 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.001420975 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.001498938 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.001688004 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.001703024 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.001899004 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.001914978 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.002084017 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.002096891 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.178427935 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.181147099 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.183743954 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:31.190327883 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.225610971 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:31.375374079 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.416515112 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:31.428680897 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.429044008 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.429085016 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.430218935 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.430722952 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.430845022 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.430855989 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.430896044 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.430906057 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.431020975 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.480514050 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.548158884 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.548500061 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.548536062 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.549290895 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.549628973 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.549700975 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.549829960 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.549850941 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.637656927 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.637978077 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.638005972 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.639020920 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.639086008 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.639411926 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.639463902 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.674813986 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.675115108 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.675142050 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.675939083 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.675960064 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.676033974 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.676043034 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.676080942 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.676731110 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.677279949 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.677622080 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.677668095 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678122997 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.678181887 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678191900 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678200006 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678273916 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.678294897 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678333998 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.678355932 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.678764105 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.678774118 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.678802967 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.679828882 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.679905891 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.679995060 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.680010080 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.688045979 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.688348055 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.688412905 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.688481092 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.688494921 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:31.688574076 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.688574076 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.688611984 CET	443	49840	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.688678980 CET	49840	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.691560030 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.691602945 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.691677094 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.691972971 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.691987991 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.720489979 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.720526934 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.736484051 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:31.840014935 CET	80	49791	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.840079069 CET	49791	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:31.856841087 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.856937885 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.856997013 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.857593060 CET	49842	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:31.857621908 CET	443	49842	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:31.859991074 CET	49791	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:31.866007090 CET	80	49791	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:31.939426899 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.939657927 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.939734936 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.940408945 CET	49847	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.940455914 CET	443	49847	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.952389956 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.952527046 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.952579021 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.953421116 CET	49846	443	192.168.2.16	142.250.185.129
Feb 19, 2025 00:50:31.953440905 CET	443	49846	142.250.185.129	192.168.2.16
Feb 19, 2025 00:50:31.954123020 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.954150915 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:31.954328060 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.954406977 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.954412937 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:31.956032038 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.956098080 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:31.956176996 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.956552029 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:31.956585884 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.487411976 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.487725019 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.487742901 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.488874912 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.489306927 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.489487886 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.490115881 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.531349897 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.589565992 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.592470884 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.593425989 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.593468904 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.593528032 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.593561888 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.593892097 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.593905926 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.593961954 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.593981028 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.594033957 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.594192982 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.594218016 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.594268084 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.594276905 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.594300985 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.594321012 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.594610929 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.594794989 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.594872952 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.595098972 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.595113039 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.595268965 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.595519066 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.595616102 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.595623016 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.595784903 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.646115065 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.646147013 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.646156073 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.666831970 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.667032957 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.667272091 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.670856953 CET	49852	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.670876980 CET	443	49852	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.691487074 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.757453918 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.757572889 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.757699966 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.757946968 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:32.757970095 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:32.862874031 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.862984896 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.863229990 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.863780022 CET	49856	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.863799095 CET	443	49856	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.866734028 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.866822004 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:32.866899014 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.867479086 CET	49857	443	192.168.2.16	142.250.185.65
Feb 19, 2025 00:50:32.867508888 CET	443	49857	142.250.185.65	192.168.2.16
Feb 19, 2025 00:50:33.574307919 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.574649096 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.574681997 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.575042963 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.575361013 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.575431108 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.575571060 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.575608015 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.575645924 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.617499113 CET	49680	80	192.168.2.16	192.229.211.108
Feb 19, 2025 00:50:33.839869976 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.839957952 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.840027094 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.840373039 CET	49864	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.840388060 CET	443	49864	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.843528032 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.843584061 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:33.843664885 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.843900919 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:33.843919992 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.631339073 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.631756067 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.631793022 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.632230997 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.632733107 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.632864952 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.632935047 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.679342985 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.793503046 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.793559074 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.793694973 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.794006109 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.794023037 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.808691978 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.808787107 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:34.808851004 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.809434891 CET	49871	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:34.809454918 CET	443	49871	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.614818096 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.615170956 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.615190983 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.615701914 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.616008997 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.616091013 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.616163015 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.616218090 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.616251945 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.806601048 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.806673050 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.806742907 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.807107925 CET	49877	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.807123899 CET	443	49877	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.809839964 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.809880018 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:35.809967995 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.810163975 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:35.810179949 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.608925104 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.609215975 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:36.609250069 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.609616041 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.609925985 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:36.609996080 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.610061884 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:36.655333042 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.786541939 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.786632061 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:36.786700964 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:36.787306070 CET	49883	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:36.787343979 CET	443	49883	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:39.874336004 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:39.874377012 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:39.874490023 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:39.874793053 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:39.874809027 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.673618078 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.673969984 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.673984051 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.674338102 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.674674034 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.674741983 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.674829960 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.674829960 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.674849987 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.932740927 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.932828903 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.932914972 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.934633970 CET	49910	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.934654951 CET	443	49910	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.936578989 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.936644077 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:40.936737061 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.936948061 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:40.936961889 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.554438114 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:41.554517984 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:41.554584026 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:41.625304937 CET	80	49693	217.20.57.36	192.168.2.16
Feb 19, 2025 00:50:41.625482082 CET	49693	80	192.168.2.16	217.20.57.36
Feb 19, 2025 00:50:41.625571012 CET	49693	80	192.168.2.16	217.20.57.36
Feb 19, 2025 00:50:41.630858898 CET	80	49693	217.20.57.36	192.168.2.16
Feb 19, 2025 00:50:41.758167028 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.758459091 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:41.758477926 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.758843899 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.759150982 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:41.759217978 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.759294987 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:41.799345970 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.944895029 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.944978952 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:41.945061922 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:41.945631027 CET	49917	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:41.945657969 CET	443	49917	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:42.430366993 CET	49845	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:50:42.430407047 CET	443	49845	142.250.186.132	192.168.2.16
Feb 19, 2025 00:50:44.688690901 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:44.688752890 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:44.688828945 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:44.689114094 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:44.689125061 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.522869110 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.523169994 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.523235083 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.523667097 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.524032116 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.524116993 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.524204016 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.524245977 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.524287939 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.788439035 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.788538933 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.788630962 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.789061069 CET	49942	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.789089918 CET	443	49942	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.792825937 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.792877913 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:45.793226957 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.793541908 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:45.793555975 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.180165052 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:46.180288076 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:46.375114918 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:46.375245094 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:46.415321112 CET	49807	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:46.415361881 CET	49790	80	192.168.2.16	185.53.177.50
Feb 19, 2025 00:50:46.420483112 CET	80	49807	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:46.420497894 CET	80	49790	185.53.177.50	192.168.2.16
Feb 19, 2025 00:50:46.602880955 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.603327990 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.603355885 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.603724003 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.604096889 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.604161024 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.604249954 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.651329994 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.651622057 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.729685068 CET	49701	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.729762077 CET	49698	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.729799032 CET	49694	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.729882002 CET	49700	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.729927063 CET	49699	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.729962111 CET	49695	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.730009079 CET	49697	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.730046034 CET	49696	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.737435102 CET	80	49701	2.23.79.3	192.168.2.16
Feb 19, 2025 00:50:46.737447977 CET	80	49698	2.23.79.3	192.168.2.16
Feb 19, 2025 00:50:46.737457991 CET	80	49694	184.30.131.114	192.168.2.16
Feb 19, 2025 00:50:46.737478018 CET	80	49700	184.30.131.114	192.168.2.16
Feb 19, 2025 00:50:46.737488985 CET	80	49699	184.30.131.114	192.168.2.16
Feb 19, 2025 00:50:46.737521887 CET	49701	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.737561941 CET	49694	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.737587929 CET	49698	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.737598896 CET	49700	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.737613916 CET	49699	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.738575935 CET	80	49695	2.23.79.3	192.168.2.16
Feb 19, 2025 00:50:46.738586903 CET	80	49697	184.30.131.114	192.168.2.16
Feb 19, 2025 00:50:46.738595009 CET	80	49696	184.30.131.114	192.168.2.16
Feb 19, 2025 00:50:46.738631010 CET	49695	80	192.168.2.16	2.23.79.3
Feb 19, 2025 00:50:46.738641024 CET	49697	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.738675117 CET	49696	80	192.168.2.16	184.30.131.114
Feb 19, 2025 00:50:46.795135021 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.795236111 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:46.795320988 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.795972109 CET	49952	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:46.795989037 CET	443	49952	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:59.697674990 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:59.697715044 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:50:59.697828054 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:59.698093891 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:50:59.698102951 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.487273932 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.487641096 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.487653017 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.488004923 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.488301992 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.488358974 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.488441944 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.488471985 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.488507986 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.747983932 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.748080015 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.748142958 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.748502970 CET	50024	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.748522997 CET	443	50024	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.751466990 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.751523972 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:00.751616955 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.751841068 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:00.751859903 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.572429895 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.572853088 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:01.572892904 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.573467970 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.573795080 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:01.573862076 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.573937893 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:01.615338087 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.753086090 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.753175974 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:01.753390074 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:01.753981113 CET	50025	443	192.168.2.16	34.251.101.162
Feb 19, 2025 00:51:01.754005909 CET	443	50025	34.251.101.162	192.168.2.16
Feb 19, 2025 00:51:12.688625097 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:51:12.693650007 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:51:13.439699888 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:51:13.444740057 CET	80	49809	18.66.121.138	192.168.2.16
Feb 19, 2025 00:51:29.695463896 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:29.695519924 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:29.695632935 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:29.695856094 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:29.695868969 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.523232937 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.523555994 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.523600101 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.524010897 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.524308920 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.524382114 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.524449110 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.524485111 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.524523020 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.789238930 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.789333105 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.789402008 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.789902925 CET	50027	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.789921999 CET	443	50027	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.802594900 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.802640915 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:30.802722931 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.802938938 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:30.802953959 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.044907093 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.044958115 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.045078039 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.045352936 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.045370102 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.729001045 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.729465008 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.729496002 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.729825020 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.730170965 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.730230093 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:31.746536970 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.746804953 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.746828079 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.747194052 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.747468948 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.747535944 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.747575045 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.776721954 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:31.791342020 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.792690992 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.929712057 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.929807901 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:31.929874897 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.930475950 CET	50028	443	192.168.2.16	54.75.69.192
Feb 19, 2025 00:51:31.930500031 CET	443	50028	54.75.69.192	192.168.2.16
Feb 19, 2025 00:51:41.631840944 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:41.631930113 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:41.632034063 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:42.430047035 CET	50029	443	192.168.2.16	142.250.186.132
Feb 19, 2025 00:51:42.430084944 CET	443	50029	142.250.186.132	192.168.2.16
Feb 19, 2025 00:51:57.700803995 CET	49800	80	192.168.2.16	18.66.121.190
Feb 19, 2025 00:51:57.708201885 CET	80	49800	18.66.121.190	192.168.2.16
Feb 19, 2025 00:51:58.450764894 CET	49809	80	192.168.2.16	18.66.121.138
Feb 19, 2025 00:51:58.458725929 CET	80	49809	18.66.121.138	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2025 00:50:26.244254112 CET	53	49954	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:26.252234936 CET	57274	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:26.252532959 CET	58050	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:26.269558907 CET	53	58050	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:26.275547028 CET	53	64817	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:26.276176929 CET	53	57274	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.004492998 CET	52107	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.004931927 CET	56145	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.014421940 CET	53	56145	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.023983955 CET	53	52107	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.034617901 CET	50258	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.034801960 CET	62959	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.045155048 CET	53	62959	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.048554897 CET	53	50258	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.264858007 CET	53	50834	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.315954924 CET	52338	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.316416025 CET	61738	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.316716909 CET	52056	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.316852093 CET	63432	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.325624943 CET	53	52338	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.325637102 CET	53	61738	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.327657938 CET	51534	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.327934980 CET	60300	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.328577042 CET	53	52056	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.336082935 CET	53	63432	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.336992979 CET	53	51534	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.337218046 CET	53	60300	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.685436010 CET	53189	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.685693979 CET	52000	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:27.694200039 CET	53	52000	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:27.695852041 CET	53	53189	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.251521111 CET	59070	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.251779079 CET	63449	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.259215117 CET	53	63449	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.270574093 CET	62582	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.270704985 CET	59530	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.278075933 CET	53	62582	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.278119087 CET	53	59530	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.279380083 CET	53	59070	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.571815968 CET	50646	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.571993113 CET	56337	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.579387903 CET	53	56337	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.583754063 CET	52989	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.583904028 CET	54000	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.587594986 CET	53	50646	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.590729952 CET	53	52989	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.590811968 CET	53	54000	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.599590063 CET	61447	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.599721909 CET	64935	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:28.606905937 CET	53	64935	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:28.607152939 CET	53	61447	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:29.625200033 CET	64144	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:29.625571966 CET	57234	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:29.633038998 CET	53	64144	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:29.633127928 CET	53	57234	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:30.770576000 CET	59426	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.770804882 CET	61594	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.779692888 CET	53	59426	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:30.780858994 CET	53	61594	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:30.989339113 CET	51904	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.989587069 CET	56679	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.990803957 CET	65254	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.991058111 CET	56081	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:30.999450922 CET	53	51904	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:31.000155926 CET	53	56081	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:31.000191927 CET	53	65254	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:31.000713110 CET	53	56679	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:31.943886042 CET	64228	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:31.944025993 CET	56320	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:50:31.952661037 CET	53	56320	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:31.953502893 CET	53	64228	1.1.1.1	192.168.2.16
Feb 19, 2025 00:50:44.235285044 CET	53	63604	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:03.055571079 CET	53	52991	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:06.374433994 CET	138	138	192.168.2.16	192.168.2.255
Feb 19, 2025 00:51:25.353302002 CET	53	55809	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:26.164985895 CET	53	55517	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:29.687052965 CET	51938	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:51:29.687251091 CET	55760	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:51:29.694775105 CET	53	51938	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:29.694803953 CET	53	55760	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:30.792824984 CET	57960	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:51:30.792977095 CET	65145	53	192.168.2.16	1.1.1.1
Feb 19, 2025 00:51:30.801914930 CET	53	57960	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:30.801932096 CET	53	65145	1.1.1.1	192.168.2.16
Feb 19, 2025 00:51:55.409925938 CET	53	51165	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 19, 2025 00:50:27.336142063 CET	192.168.2.16	1.1.1.1	c1ed	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 19, 2025 00:50:26.252234936 CET	192.168.2.16	1.1.1.1	0x18f2	Standard query (0)	vtechies.us	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:26.252532959 CET	192.168.2.16	1.1.1.1	0x2954	Standard query (0)	vtechies.us	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.004492998 CET	192.168.2.16	1.1.1.1	0x147f	Standard query (0)	euob.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.004931927 CET	192.168.2.16	1.1.1.1	0x51eb	Standard query (0)	euob.seaskydvd.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.034617901 CET	192.168.2.16	1.1.1.1	0xd477	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.034801960 CET	192.168.2.16	1.1.1.1	0xc21c	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.315954924 CET	192.168.2.16	1.1.1.1	0xe01a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.316416025 CET	192.168.2.16	1.1.1.1	0x973c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.316716909 CET	192.168.2.16	1.1.1.1	0xa5d4	Standard query (0)	vtechies.us	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.316852093 CET	192.168.2.16	1.1.1.1	0x8868	Standard query (0)	vtechies.us	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.327657938 CET	192.168.2.16	1.1.1.1	0x7009	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.327934980 CET	192.168.2.16	1.1.1.1	0x8c63	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:27.685436010 CET	192.168.2.16	1.1.1.1	0x3790	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.685693979 CET	192.168.2.16	1.1.1.1	0x939f	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Feb 19, 2025 00:50:28.251521111 CET	192.168.2.16	1.1.1.1	0xf522	Standard query (0)	euob.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.251779079 CET	192.168.2.16	1.1.1.1	0x8a52	Standard query (0)	euob.seaskydvd.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:28.270574093 CET	192.168.2.16	1.1.1.1	0xd9c7	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.270704985 CET	192.168.2.16	1.1.1.1	0xb6d7	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Feb 19, 2025 00:50:28.571815968 CET	192.168.2.16	1.1.1.1	0xdf9e	Standard query (0)	obseu.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.571993113 CET	192.168.2.16	1.1.1.1	0x895	Standard query (0)	obseu.seaskydvd.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:28.583754063 CET	192.168.2.16	1.1.1.1	0xebee	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.583904028 CET	192.168.2.16	1.1.1.1	0x70dc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:28.599590063 CET	192.168.2.16	1.1.1.1	0xe9df	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.599721909 CET	192.168.2.16	1.1.1.1	0xcb64	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Feb 19, 2025 00:50:29.625200033 CET	192.168.2.16	1.1.1.1	0x5669	Standard query (0)	obseu.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:29.625571966 CET	192.168.2.16	1.1.1.1	0xef54	Standard query (0)	obseu.seaskydvd.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:30.770576000 CET	192.168.2.16	1.1.1.1	0x8fda	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:30.770804882 CET	192.168.2.16	1.1.1.1	0x2000	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Feb 19, 2025 00:50:30.989339113 CET	192.168.2.16	1.1.1.1	0xe9ba	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:30.989587069 CET	192.168.2.16	1.1.1.1	0xac4c	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:30.990803957 CET	192.168.2.16	1.1.1.1	0x7755	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:30.991058111 CET	192.168.2.16	1.1.1.1	0xea70	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 19, 2025 00:50:31.943886042 CET	192.168.2.16	1.1.1.1	0x29bc	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:31.944025993 CET	192.168.2.16	1.1.1.1	0x6029	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Feb 19, 2025 00:51:29.687052965 CET	192.168.2.16	1.1.1.1	0xd4d7	Standard query (0)	obseu.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:29.687251091 CET	192.168.2.16	1.1.1.1	0x3758	Standard query (0)	obseu.seaskydvd.com	65	IN (0x0001)	false
Feb 19, 2025 00:51:30.792824984 CET	192.168.2.16	1.1.1.1	0x5507	Standard query (0)	obseu.seaskydvd.com	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:30.792977095 CET	192.168.2.16	1.1.1.1	0xa1db	Standard query (0)	obseu.seaskydvd.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 19, 2025 00:50:26.276176929 CET	1.1.1.1	192.168.2.16	0x18f2	No error (0)	vtechies.us		185.53.177.50	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.023983955 CET	1.1.1.1	192.168.2.16	0x147f	No error (0)	euob.seaskydvd.com		108.138.26.67	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.023983955 CET	1.1.1.1	192.168.2.16	0x147f	No error (0)	euob.seaskydvd.com		108.138.26.49	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.023983955 CET	1.1.1.1	192.168.2.16	0x147f	No error (0)	euob.seaskydvd.com		108.138.26.71	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.023983955 CET	1.1.1.1	192.168.2.16	0x147f	No error (0)	euob.seaskydvd.com		108.138.26.117	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.048554897 CET	1.1.1.1	192.168.2.16	0xd477	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.048554897 CET	1.1.1.1	192.168.2.16	0xd477	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.048554897 CET	1.1.1.1	192.168.2.16	0xd477	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.048554897 CET	1.1.1.1	192.168.2.16	0xd477	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.325624943 CET	1.1.1.1	192.168.2.16	0xe01a	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.325637102 CET	1.1.1.1	192.168.2.16	0x973c	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 19, 2025 00:50:27.328577042 CET	1.1.1.1	192.168.2.16	0xa5d4	No error (0)	vtechies.us		185.53.177.50	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.336992979 CET	1.1.1.1	192.168.2.16	0x7009	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.337218046 CET	1.1.1.1	192.168.2.16	0x8c63	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 19, 2025 00:50:27.695852041 CET	1.1.1.1	192.168.2.16	0x3790	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.695852041 CET	1.1.1.1	192.168.2.16	0x3790	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.695852041 CET	1.1.1.1	192.168.2.16	0x3790	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:27.695852041 CET	1.1.1.1	192.168.2.16	0x3790	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.278075933 CET	1.1.1.1	192.168.2.16	0xd9c7	No error (0)	syndicatedsearch.goog		142.250.186.142	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.279380083 CET	1.1.1.1	192.168.2.16	0xf522	No error (0)	euob.seaskydvd.com		108.138.26.67	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.279380083 CET	1.1.1.1	192.168.2.16	0xf522	No error (0)	euob.seaskydvd.com		108.138.26.71	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.279380083 CET	1.1.1.1	192.168.2.16	0xf522	No error (0)	euob.seaskydvd.com		108.138.26.49	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.279380083 CET	1.1.1.1	192.168.2.16	0xf522	No error (0)	euob.seaskydvd.com		108.138.26.117	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.587594986 CET	1.1.1.1	192.168.2.16	0xdf9e	No error (0)	obseu.seaskydvd.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.587594986 CET	1.1.1.1	192.168.2.16	0xdf9e	No error (0)	obseu.seaskydvd.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.587594986 CET	1.1.1.1	192.168.2.16	0xdf9e	No error (0)	obseu.seaskydvd.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.590729952 CET	1.1.1.1	192.168.2.16	0xebee	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:28.590811968 CET	1.1.1.1	192.168.2.16	0x70dc	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 19, 2025 00:50:28.607152939 CET	1.1.1.1	192.168.2.16	0xe9df	No error (0)	syndicatedsearch.goog		142.250.186.46	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:29.633038998 CET	1.1.1.1	192.168.2.16	0x5669	No error (0)	obseu.seaskydvd.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:29.633038998 CET	1.1.1.1	192.168.2.16	0x5669	No error (0)	obseu.seaskydvd.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:29.633038998 CET	1.1.1.1	192.168.2.16	0x5669	No error (0)	obseu.seaskydvd.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:30.779692888 CET	1.1.1.1	192.168.2.16	0x8fda	No error (0)	syndicatedsearch.goog		142.250.186.142	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:30.999450922 CET	1.1.1.1	192.168.2.16	0xe9ba	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 19, 2025 00:50:30.999450922 CET	1.1.1.1	192.168.2.16	0xe9ba	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.129	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:31.000155926 CET	1.1.1.1	192.168.2.16	0xea70	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 19, 2025 00:50:31.000191927 CET	1.1.1.1	192.168.2.16	0x7755	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:50:31.000713110 CET	1.1.1.1	192.168.2.16	0xac4c	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 19, 2025 00:50:31.952661037 CET	1.1.1.1	192.168.2.16	0x6029	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 19, 2025 00:50:31.953502893 CET	1.1.1.1	192.168.2.16	0x29bc	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 19, 2025 00:50:31.953502893 CET	1.1.1.1	192.168.2.16	0x29bc	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:29.694775105 CET	1.1.1.1	192.168.2.16	0xd4d7	No error (0)	obseu.seaskydvd.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:29.694775105 CET	1.1.1.1	192.168.2.16	0xd4d7	No error (0)	obseu.seaskydvd.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:29.694775105 CET	1.1.1.1	192.168.2.16	0xd4d7	No error (0)	obseu.seaskydvd.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:30.801914930 CET	1.1.1.1	192.168.2.16	0x5507	No error (0)	obseu.seaskydvd.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:30.801914930 CET	1.1.1.1	192.168.2.16	0x5507	No error (0)	obseu.seaskydvd.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Feb 19, 2025 00:51:30.801914930 CET	1.1.1.1	192.168.2.16	0x5507	No error (0)	obseu.seaskydvd.com		3.248.162.96	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

vtechies.us

euob.seaskydvd.com

www.google.com

syndicatedsearch.goog

obseu.seaskydvd.com

d38psrni17bvxu.cloudfront.net

https:

afs.googleusercontent.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49790	185.53.177.50	80	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2025 00:50:26.282610893 CET	434	OUT	GET /nstatus/ HTTP/1.1 Host: vtechies.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:26.991559982 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Content-Encoding: gzip Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_cR3vSHyYML0l+SotfePjqfa3FZJ4TABJrAXlzJPPgGEUo/x6/agSxGBVTEPCcTNCeu0G8fKVMZd3nQm2SJ2Suw== X-Buckets: bucket018,bucket088,bucket089 X-Domain: vtechies.us X-Language: english X-Pcrew-Blocked-Reason: X-Pcrew-Ip-Organization: CenturyLink X-Subdomain: X-Template: tpl_CleanPeppermintBlack_twoclick Data Raw: 31 32 65 31 0d 0a 1f 8b 08 00 00 09 6e 88 00 ff e4 7b 6b 77 da 3a b3 f0 e7 9d 5f a1 d2 f5 c4 f0 96 8b 6d 20 21 50 a7 2f 09 b9 90 1d 93 1b 69 02 5d 3d 5d c2 96 8d c0 b7 6d 89 6b 1e fe fb 59 23 1b 30 97 f6 69 7b f6 59 fb c3 71 57 13 5b a3 19 8d 66 46 33 a3 91 f2 f1 5d e3 ee bc dd b9 bf 40 7d ee 3a a7 07 1f e1 17 32 31 c7 39 6c f6 1c df 18 0e c9 4c 4b e9 97 93 49 e3 a1 73 f3 a7 df 6d f6 c7 46 ab fe 70 71 76 f6 50 6f 3c 4d ea 93 a7 fa cd 59 fd f6 af 51 e3 f2 a2 fd fa e8 c9 d7 a1 5c b6 9e ef 8f 2f 6e da c7 c7 d3 8e 77 ef 3e f6 02 7d 56 1a 0f 2b 7f 76 e8 b5 37 6c 05 c4 f4 06 77 f5 d6 8d 81 5f 1b af c6 9f 0f 37 2d d9 7b fd b3 7b 73 7b dc 36 e8 4d a3 52 f7 af 5f ff 54 ca 95 f3 fa e4 a2 5e 7f d0 b4 6f c6 63 71 fc 74 3d eb e8 b7 b2 f3 e1 c9 e7 16 b9 1f fc 65 e1 e2 65 f7 a6 d4 ae 9f dd 84 f5 57 67 7e 73 7f 6f 5f 5d Data Ascii: 12e1n{kw:_m !P/i]=]mkY#0i{YqW[fF3]@}:219lLKIsmFpqvPo<MYQ\/nw>}V+v7lw_7-{{s{6MR_T^ocqt=eeWg~so_]
Feb 19, 2025 00:50:26.991573095 CET	224	IN	Data Raw: 3c fb 85 e9 51 01 db 4f d3 ab b3 cf ed 8b fb 73 a3 dd 3a 27 23 f9 aa 62 fd f9 59 ef 9a 45 ef c1 55 9f 6e d4 a7 d1 44 d3 52 68 ea 3a 1e d3 52 7d ce 83 6a a1 30 99 4c f2 93 62 de 0f ed 82 72 72 72 52 98 82 3c 52 c8 c1 9e ad a5 88 97 02 09 11 6c 9e Data Ascii: <QOs:'#bYEUnDRh:R}j0LbrrrR<Rl Gp9q\{2/-R}2rT!I.RcJ&dLYD=)vr,bzshsr:S#5E`gA.1)Re3F7q
Feb 19, 2025 00:50:26.991585016 CET	1236	IN	Data Raw: 28 a3 b7 83 3f 7a d8 18 da a1 3f f2 cc 2a 1a 85 4e 5a 2a 14 cc 62 25 60 a1 47 95 e3 de 78 3a ca 1b 8e 3f 32 ad d0 f7 78 de 23 bc c0 fb c4 25 ac 20 c8 b0 82 a0 93 b7 a9 25 65 90 e7 e7 42 12 10 cc 91 41 3c 4e c2 da c1 1f 62 4e 55 a4 14 83 69 ed e0 Data Ascii: (?z?NZb%`Gx:?2x#% %eBA<NbNUi>vWO*C=VY;X$T&&M&&&~&8iR@q>bN=!\n5sI+%g1WE(d~XE.mUe$b0EL7v;&]sJ9"_
Feb 19, 2025 00:50:26.991600990 CET	1236	IN	Data Raw: fd bc 3e 6b 9d d7 67 ad f3 a6 6d aa ce d0 bc b2 4f 9a 83 a6 dc 1c 94 2a c6 d5 a5 8c cf cf 86 f7 4f 37 2d fd bc 3e c1 8d a6 6c 0e 9a f2 53 e3 ec a8 49 97 7c df 8c 7a 6a d9 69 d2 ca 87 fb eb b3 be 79 65 db dd 86 4c db ed e7 d1 5d c3 b6 5b e7 a5 a9 Data Ascii: >kgmOO7->lSI\|zjiyeL][>LYNxkVn>az~w^&cmM2Lwg?U0#MbW},$4)vX>'`d?sb{aM} Bmv"e`T?
Feb 19, 2025 00:50:26.991612911 CET	448	IN	Data Raw: db ac e3 7d 1e 60 f5 b3 ac 37 ec d2 ed d5 8d d2 51 b9 63 36 ea a5 bb d7 69 c5 ba 9e 56 ac 46 a7 d8 19 3c 4f 3b aa 3e eb 36 2e 69 eb aa 55 b1 ae 27 d3 d6 5c 2f df b5 9b b3 d6 a0 a9 de 0e ec b2 ee 4d dd 6e e3 61 76 f7 d2 99 76 1b 8f 4e eb ea d1 ed Data Ascii: }`7Qc6iVF<O;>6.iU'\/MnavvNb%a:taRz2'qVo=[8_4zCt~gwvGi&w7azymuxj8XWeq}R%/ez3zkyknPd4
Feb 19, 2025 00:50:26.991993904 CET	1236	IN	Data Raw: db c0 87 71 ee c4 5e 03 da df a4 60 d4 6b 8a 60 6d 06 39 4e 30 54 4e 49 e8 11 2e 2b 52 56 0a 09 1b 39 9c dd 63 9b 9c 61 46 9e 43 47 aa 7e 4f bc 52 e1 13 67 9a 94 15 9e f5 52 d4 db a1 33 0e 29 76 a4 ac e4 07 9c ba 10 83 49 e8 b2 a5 3b 96 5c 3c 85 Data Ascii: q^`k`m9N0TNI.+RV9caFCG~ORgR3)vI;\<[/UQIJ=66axwQ<,ORV0uIAwrgcF4,EM'vwEdQ,b?)g[Gzeont51A{GIM4hZ
Feb 19, 2025 00:50:26.992043972 CET	189	IN	Data Raw: 82 a9 04 d3 64 7b 74 54 b5 09 08 0d a4 81 8c c4 22 fc c6 85 4f 03 3b 68 60 4e d2 99 bc 4d 78 9b ba 24 9d a9 6d ee 0d e1 26 9e 67 9e f7 a9 63 a6 a9 6b 6f 19 e6 62 f1 33 fe 62 25 9c 5f 70 13 db 72 fd 45 77 30 4d a6 8c 59 f4 b6 5b 99 aa 22 09 6c ae Data Ascii: d{tT"O;h`NMx$m&gckob3b%_prEw0MY["lZ($&0(u>t_nywIkZ_EFQx](p_UgyKjwD
Feb 19, 2025 00:50:27.106986046 CET	1009	IN	Data Raw: 33 65 35 0d 0a ae 5d 9f 74 dd a6 ac 37 3e bb fa 60 a8 ea ea 73 f1 ae dd ea b7 e6 ce a0 33 d7 8b ad 81 09 05 e7 a1 71 ae f0 9e 7a 13 f4 ae 9e b9 79 f5 b9 2f 8a ec 50 6c 77 a1 88 7e 19 f1 d7 78 2e e9 73 a3 74 d7 d0 cb ad b6 23 f8 92 b2 7d d0 0a f1 Data Ascii: 3e5]t7>`s3qzy/Plw~x.st#}pRE,I)QS\q"d\JB\|N,%B=BicHaY7Wm2ckk<%rf`K\|;2-ab)6"{b0>@CW+
Feb 19, 2025 00:50:27.110740900 CET	487	OUT	GET /munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://vtechies.us/nstatus/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:27.309796095 CET	521	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: browserjs
Feb 19, 2025 00:50:27.314235926 CET	370	OUT	GET /munin/a/ls?t=67b51cc2&token=f3ac8f16564088900fb405f2963e793a79cc3767 HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://vtechies.us/nstatus/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:27.514799118 CET	891	IN	HTTP/1.1 201 Created Server: nginx Date: Tue, 18 Feb 2025 23:50:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: Access-Control-Max-Age: 86400 Charset: utf-8 Status: 201 Created X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NeMkNWdk4IGmhyXUmrc+l7+bKH8iEoO249vyma5N2ixdKVqisUm09YItCh0T4B0bncs+yGe3S49UBU4SuFL+fQ== X-Log-Success: 67b51cc3d4a8f0dec907b023
Feb 19, 2025 00:50:30.779620886 CET	692	OUT	GET /munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://vtechies.us/nstatus/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Feb 19, 2025 00:50:30.978883028 CET	523	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:30 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: answercheck
Feb 19, 2025 00:50:30.985368013 CET	554	OUT	GET /favicon.ico HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://vtechies.us/nstatus/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Feb 19, 2025 00:50:31.181147099 CET	230	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:31 GMT Content-Type: image/x-icon Content-Length: 0 Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT Connection: keep-alive ETag: "670f7248-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49800	18.66.121.190	80	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2025 00:50:27.056520939 CET	424	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:27.677316904 CET	467	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Tue, 18 Feb 2025 11:05:01 GMT Accept-Ranges: bytes Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "czzekhpxmtxd8rz" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2f72de1f504b6784c7adb04e7fe314f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: L3u7nkWB05eXLxmzIWS1IiYwGBWqm7YDGKRziAKg0mvjiqS_T_E0jw== Age: 45926
Feb 19, 2025 00:50:27.677520990 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Feb 19, 2025 00:50:27.677531004 CET	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Feb 19, 2025 00:50:27.677541018 CET	448	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Feb 19, 2025 00:50:27.677572966 CET	1236	IN	Data Raw: 4e d6 49 28 dc 85 d1 2e 0f f7 76 bc 83 3b b6 53 b3 b8 ce 14 06 77 71 b4 4b c4 bd 0d ef e0 be 1a d7 52 09 dd 53 e1 2e 90 76 99 b8 fb f3 0e ee d8 4e e8 9e 1a f7 db 7e 7c 42 22 a3 32 71 f7 e5 1d dc af c4 c8 01 aa 1d 97 55 5b e1 7e db 4b 42 11 95 8a Data Ascii: NI(.v;SwqKRS.vN~\|B"2qU[~KB#.v1r(O9C{/^q]i{<Rht;=i?k>ht7Fl6D~jc;]pWOw
Feb 19, 2025 00:50:27.677674055 CET	1236	IN	Data Raw: 50 be 3e 3f 09 ee 03 78 7f 41 1e ed e9 70 6f c0 bb 37 ed 25 e0 ce 75 26 ca d5 ed 93 e0 3e b0 da cf 35 25 a3 3d 25 ee 35 79 6f 41 7b 11 b8 73 24 92 f2 f4 ce 24 b8 b7 e6 7d f6 50 42 70 53 e2 5e 83 f7 56 b4 97 81 3b ba 13 b6 0b c4 bd c3 fb 76 49 b4 Data Ascii: P>?xApo7%u&>5%=%5yoA{s$$}PBpS^V;vI}-i/wS.L{iO9I+daM&hs:qGwvWk~)2q=p_{(K;(U=]^x4>='J{Ys$R$
Feb 19, 2025 00:50:27.677685022 CET	1236	IN	Data Raw: 8b a4 7d 85 f7 1a 07 64 5a e0 de e5 fd d9 63 52 3b fe 85 dd 5c 4b 25 ca 93 85 cb aa 7f 29 95 f6 4e cf 1e 58 6a 88 75 43 dc 5f ff e0 dc f9 37 a4 f2 be f5 b9 b9 93 52 63 ed 13 ad f4 b0 d8 65 3a f7 dc 56 a9 b4 bf 71 fe dc 07 af 47 c4 bd 43 7b 37 99 Data Ascii: }dZcR;\K%)NXjuC_7Rce:VqGC{7o}Y;r"yHkYaV5.yJ{Cx_]6\|n_(wG(.wt'l ho{-_?WWi;].}w*zp@k>
Feb 19, 2025 00:50:27.677695990 CET	1236	IN	Data Raw: 0d f7 7a b4 27 e6 dd 89 a3 bd 0d ef 73 d8 4e 84 ee 89 71 af 4f 7b b7 b3 c6 70 6f 44 bb 3f ef 3a 71 87 02 b2 57 39 b8 6f bd a7 a9 6e 89 78 77 29 fe 87 1a d3 ee cb bb 46 dc b9 96 4a e8 ae 17 f7 ad 5f f7 d1 2d 89 ba ee ae bb c6 ce 0a a4 dd 8f f7 39 Data Ascii: z'sNqO{poD?:qW9onxw)FJ_-9l'G{?sW{>n'}dw#ea;'y?;qxoM{[:qoO{$JU`7]7z7Z=y_K>
Feb 19, 2025 00:50:27.677706003 CET	1236	IN	Data Raw: c3 a2 0e dc 83 f3 3e 16 52 dd 41 b8 07 a5 3d 30 ef b5 68 17 82 fb e2 0f 58 a9 44 cd fa c1 a2 1a dc 83 f2 3e 16 5a dd 4a dc 97 22 34 96 94 76 29 b8 33 8a 80 a8 59 07 16 35 e1 1e 8c f7 b1 18 ea f6 e1 be 14 a9 b1 84 b4 8b c1 9d 8d 77 a2 26 bd b9 a8 Data Ascii: >RA=0hXD>ZJ"4v)3Y5w& :"6vA;:h_E%h;ixJ.:ycIh;J]h*P{$vY;.{;%9T{cSf5y.wt'dxOG{RI8
Feb 19, 2025 00:50:27.677716017 CET	1236	IN	Data Raw: 2c 2b 22 4d bd 16 66 e5 3f 31 fd 9e 54 dd 3c 78 77 86 68 7f 7c ea c8 34 ba 13 61 bb 67 47 a6 1e 7f c2 0e ef ce 10 ed 53 c1 70 47 77 a2 f2 6c ef e0 de c9 0c ef ce 10 ed 01 71 9f 9e 66 c5 10 e9 e8 f2 74 50 dc cd f0 ee 2c d0 fe c4 d4 4a 01 71 47 77 Data Ascii: ,+"Mf?1T<xwh\|4agGSpGwlqftP,JqGw"\GHbwg;QYnz?)sfqGwl^z!CD%>;CC3DtT;(=<~vtl;=l%3w;CG"w;CG}z,k}
Feb 19, 2025 00:50:27.682698011 CET	1039	IN	Data Raw: d0 b8 b3 72 88 a4 67 1a f7 76 bc 3b 43 b4 87 c5 fd 7a d6 0d 91 fc ae 37 8d 7b 9b 91 91 ce 10 ed 41 71 67 9c 0c 91 8a ae b5 8d bb 3f ef ce 10 ed 21 71 c7 76 a2 e2 76 66 a4 c2 e6 c7 bb 07 ee 33 8f 4f 4d 99 c7 9d 15 43 54 9c ee 47 c4 d2 e6 c3 bb 33 Data Ascii: rgv;Cz7{Aqg?!qvvf3OMCTG3D{@Y/D~D0nyokh'wNO}?q"j!i4DT_shDrx52A;Q_$Wg"v"t4<Dxwzi{>#*-7]8X""x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49807	185.53.177.50	80	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2025 00:50:27.341650963 CET	449	OUT	GET /munin/a/tr/browserjs?domain=vtechies.us&toggle=browserjs&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:27.995244026 CET	521	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: browserjs
Feb 19, 2025 00:50:30.982310057 CET	654	OUT	GET /munin/a/tr/answercheck/yes?domain=vtechies.us&caf=1&toggle=answercheck&answer=yes&uid=MTczOTkyMjYyNi44NTk6M2UwNGFkMWY1MzJmYzRmMzVlMGUwMGE1ZGQwY2EzYTJlZjhmMjkyOGJiZDkwMGIzNDE0NmZjNGU1YTcyNDM0Njo2N2I1MWNjMmQxYjdk HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Feb 19, 2025 00:50:31.178427935 CET	523	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: answercheck
Feb 19, 2025 00:50:31.183743954 CET	455	OUT	GET /favicon.ico HTTP/1.1 Host: vtechies.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1739922628.zFiUf4BHW9IJbT8b; _cq_suid=1.1739922628.Dl0UYh70aJ99lbVQ; __gsas=ID=762fe18e03ffe5ac:T=1739922629:RT=1739922629:S=ALNI_MbdEZMCbri840y6BfU521lfsI7jBA
Feb 19, 2025 00:50:31.375374079 CET	230	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 18 Feb 2025 23:50:31 GMT Content-Type: image/x-icon Content-Length: 0 Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT Connection: keep-alive ETag: "670f7248-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49809	18.66.121.138	80	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2025 00:50:27.701687098 CET	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 19, 2025 00:50:28.347954035 CET	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Tue, 18 Feb 2025 11:05:01 GMT Accept-Ranges: bytes Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "czzekhpxmtxd8rz" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 16aa5c15345b1c0756b83a5ae8ee765e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: Fxt2YmI4vGwPqPHWf5Z17tcDmM8UVX9PV0GPVum_7f4RWA2-94fmfQ== Age: 45927 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Feb 19, 2025 00:50:28.347984076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 Data Ascii: ttRNS
Feb 19, 2025 00:50:28.347996950 CET	1236	IN	Data Raw: 2e ee f0 4e 44 d0 ae 88 f6 fa b8 c3 3b 11 41 bb 1a da 9b e0 0e ef 44 04 ed 4a 68 6f 86 3b bc 13 11 b4 e7 ea e5 53 8d b8 6e 86 bb 74 de ff ea 9a 92 62 21 52 fc 8a 5a 52 7f 28 9a f6 6d 0d b1 6e 8a bb 6c de 37 ef 2d a9 af 20 0f c5 ee 2b 45 2d a9 cd Data Ascii: .ND;ADJho;Sntb!RZR(mnl7- +E-h]2ew/Pv?^NQ+m=}y1Tm{O}q{y;aaioD}Abvwyc2qoG{[;37HD^pM{{e^&x'KP
Feb 19, 2025 00:50:28.348009109 CET	1236	IN	Data Raw: 80 bb 3e da bf 59 e5 78 25 ee 6a 79 2f 18 77 46 0e 50 a0 3e 03 ee 16 68 1f 88 bb 52 de cb c5 9d 6b a9 14 ac 6b c0 dd 00 ed 43 70 3f 78 f0 9b bf 52 c7 fb 66 6c 27 42 f7 a0 b8 bf ac 93 f6 a1 b8 2b e4 bd 54 dc e1 88 c2 06 ee 57 69 df a6 94 f6 11 b8 Data Ascii: >Yx%jy/wFP>hRkkCp?xRfl'B+TWiL"+}3{ U^R{s-nnk~!-ov"to'^w5ov"tokpgEgen}w3rvG}_w49@LiP..
Feb 19, 2025 00:50:28.348037004 CET	1236	IN	Data Raw: ef d1 de ed 70 81 b8 5f a1 3d 28 ef e5 e0 be 09 73 28 55 9b c0 dd 97 f6 ac bc bb fc b4 07 e4 7d 82 ef 76 a2 e0 3d 0a ee cd f6 da 8f af e7 ed 70 41 b8 6f a4 3d 18 ef 13 d8 4e 84 ee 39 71 bf 65 b6 82 b7 c3 85 e0 fe cb 63 d5 05 e0 7d 02 db 89 d0 3d Data Ascii: p_=(s(U}v=pAo=N9qec}=7p=e5?q};(KxwhI`{+(uho}J.Z'IZpM{poB{7{EmiOMi8$t{sS
Feb 19, 2025 00:50:28.348050117 CET	1236	IN	Data Raw: 9e 85 f7 2a da 75 e0 ce c6 3b 95 d8 c3 27 75 e2 9e 81 f7 da b4 77 3b bb d4 18 f7 46 b4 27 e7 bd 9a 76 25 b8 9f fc 1f 56 3a 95 d6 8d 27 d5 e2 9e 98 f7 b7 17 1b d2 3b 90 77 17 86 f6 a4 bc 1f 7f 7e 76 56 33 ee 7c bb 13 df ed 9a 70 4f c8 fb db 0b 1e Data Ascii: u;'uw;F'v%V:';w~vV3\|pO=iW;vE{3p=hW;=wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{
Feb 19, 2025 00:50:28.348063946 CET	1236	IN	Data Raw: 17 48 7b 1d de e7 d8 92 21 42 f7 48 b8 c7 a3 bd 25 ef 55 b4 0f c0 dd 9b f7 b8 b4 8f e6 7d 0e db 89 e4 65 02 f7 b8 b4 f7 78 f7 1b 19 b9 7f ac 5a f1 01 b8 7b f1 1e 9f f6 51 bc 2b c1 9d 91 03 54 58 2f aa c7 3d 3e ed 9e bc f7 2e a3 36 c3 bd 31 ef 69 Data Ascii: H{!BH%U}exZ{Q+TX/=>.61ihnH7ihoh{`\J1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->
Feb 19, 2025 00:50:28.348074913 CET	1236	IN	Data Raw: ed 70 1f ca 7b 7a da b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 Data Ascii: p{z>zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV
Feb 19, 2025 00:50:28.348082066 CET	659	IN	Data Raw: 77 22 f3 b6 8f c6 5d 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 Data Ascii: w"]1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|
Feb 19, 2025 00:50:28.431260109 CET	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;
Feb 19, 2025 00:50:28.431277990 CET	59	IN	Data Raw: 11 b8 13 11 11 b8 13 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 81 3b 11 11 b8 f3 13 10 11 d9 eb ff 05 18 00 7f b6 1d fa 08 34 f3 8d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: ;;;;;4IENDB`

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49799	108.138.26.67	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:27 UTC	553	OUT	GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1 Host: euob.seaskydvd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:28 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 109112 Connection: close Cache-Control: max-age=43200 Date: Tue, 18 Feb 2025 17:34:27 GMT ETag: "1aa38-Eab53aOuSfmieSnVMKvVaf0CNdU" Expires: Wed, 19 Feb 2025 05:34:27 GMT Server: Caddy Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 85ca8c4198fb707d10ecc2a784a315be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: E61xAlC90EB01fjCF8iD6kzOQhmN0jnHPNnozHgablqDfcOD0_zJUA== Age: 22560
2025-02-18 23:50:28 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 30 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 33 33 31 29 2c 69 3d 72 28 35 33 39 29 2c 61 3d 65 2e 64 6f 6d 55 2c 63 3d 65 2e 75 2c 6f 3d 65 2e 75 74 69 6c 2c 75 3d 77 69 6e 64 6f 77 2c 66 3d 64 6f 63 75 6d 65 6e 74 2c 76 3d 75 2e 6e 61 76 69 67 61 74 6f 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 22 22 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 72 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 5b 65 5d 2d 6e 29 3b 72 65 74 75 72 6e 20 72 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 65 2c 6c 29 7b 74 72 79 7b 69 66 28 6c 3d 6c 7c 7c 7b 7d 2c 72 3d Data Ascii: !function(){var t={807:function(t,n,r){var e=r(331),i=r(539),a=e.domU,c=e.u,o=e.util,u=window,f=document,v=u.navigator,s=function(t,n){for(var r="",e=0;e<t.length;e++)r+=String.fromCharCode(t[e]-n);return r};t.exports=function(t,n,r,e,l){try{if(l=l\|\|{},r=
2025-02-18 23:50:28 UTC	16384	IN	Data Raw: 72 29 7c 7c 28 72 2e 62 5f 3d 61 2e 64 74 28 6e 29 29 2c 65 5b 69 2e 63 74 5d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 2c 74 2e 64 63 3d 63 2e 41 74 28 63 2e 52 28 6f 2e 52 74 28 65 29 2c 63 2e 50 28 74 2e 65 29 25 31 32 38 29 29 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 29 29 7d 29 29 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 4f 74 3a 6b 7d 7d 2c 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 69 3d 64 6f 63 75 6d 65 6e 74 2c 61 3d 72 28 33 33 31 29 2e 75 74 69 6c 2c 63 3d 72 28 33 33 31 29 2e 75 2c 6f 3d 72 28 35 33 39 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 Data Ascii: r)\|\|(r.b_=a.dt(n)),e[i.ct]=JSON.stringify(r),t.dc=c.At(c.R(o.Rt(e),c.P(t.e)%128)))}))}catch(t){}}))}))};t.exports={Ot:k}},811:function(t,n,r){var e=window,i=document,a=r(331).util,c=r(331).u,o=r(539),u=function(t,n){for(var r=i.getElementsByTagName("scrip
2025-02-18 23:50:28 UTC	16384	IN	Data Raw: 51 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3d 3d 3d 74 6f 70 3b 72 65 74 75 72 6e 20 74 26 26 28 63 6e 3d 21 30 29 2c 74 7d 7d 2c 66 6e 3d 32 34 33 33 39 36 31 30 30 31 2c 76 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 63 2e 45 6e 28 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6e 3d 5f 74 28 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 67 65 74 29 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 79 74 28 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 67 65 74 29 3b 69 66 28 72 2e 6d 61 74 63 68 28 22 5b 22 2b 66 6e 29 29 72 65 74 75 72 6e 3b 68 74 28 33 39 2c 72 29 2c 63 6e 3d 21 30 7d 72 65 74 75 72 6e 20 6e 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 4a 28 75 2e 47 65 74 Data Ascii: Q.contentWindow===top;return t&&(cn=!0),t}},fn=2433961001,vn=function(){var t=c.En(HTMLIFrameElement.prototype),n=_t(t.contentWindow.get);if(n){var r=yt(t.contentWindow.get);if(r.match("["+fn))return;ht(39,r),cn=!0}return n},sn=function(){return c.J(u.Get
2025-02-18 23:50:28 UTC	16384	IN	Data Raw: 30 30 22 2c 22 36 32 31 2f 33 34 39 22 2c 22 35 36 39 2f 33 32 30 22 2c 22 37 34 2f 34 35 22 2c 22 33 39 2f 31 38 22 2c 22 38 31 32 2f 33 37 35 22 5d 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 2e 6d 61 74 63 68 4d 65 64 69 61 29 7b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6d 61 74 63 68 4d 65 64 69 61 28 74 29 26 26 6d 61 74 63 68 4d 65 64 69 61 28 74 29 2e 6d 61 74 63 68 65 73 7d 2c 72 3d 5b 5d 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 61 3d 69 2e 73 70 6c 69 74 28 22 2f 22 29 3b 61 3d 61 5b 31 5d 2b 22 2f 22 2b 61 5b 30 5d 2c Data Ascii: 00","621/349","569/320","74/45","39/18","812/375"];return JSON.stringify([function(){if("function"==typeof u.matchMedia){for(var n=function(t){return matchMedia(t)&&matchMedia(t).matches},r=[],e=0;e<t.length;e++){var i=t[e],a=i.split("/");a=a[1]+"/"+a[0],
2025-02-18 23:50:28 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 63 6b 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 76 61 72 20 6e 3d 61 2e 4f 6e 28 22 5f 63 71 5f 73 75 69 64 22 29 2c 72 3d 22 22 3b 72 65 74 75 72 6e 20 72 3d 6e 7c 7c 5b 22 31 22 2c 69 2e 45 74 28 61 2e 6f 28 29 2f 31 65 33 29 2c 69 2e 6e 74 28 31 36 29 5d 2e 6a 6f 69 6e 28 22 2e 22 29 2c 61 2e 75 72 28 22 5f 63 71 5f 73 75 69 64 22 2c 72 2c 74 2e 61 70 64 29 3f 72 3a 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 7d 7d 2c 70 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 63 6b 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 76 61 72 20 6e 3d 6f 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3b 69 66 28 69 2e 4a 28 6e 29 26 26 69 2e 4f 28 6e 2e 73 65 74 49 Data Ascii: unction(t){if(!t\|\|!t.ck)return"";try{var n=a.On("_cq_suid"),r="";return r=n\|\|["1",i.Et(a.o()/1e3),i.nt(16)].join("."),a.ur("_cq_suid",r,t.apd)?r:"-"}catch(t){return"-"}},pr:function(t){if(!t\|\|!t.ck)return"";try{var n=o.sessionStorage;if(i.J(n)&&i.O(n.setI
2025-02-18 23:50:28 UTC	16384	IN	Data Raw: 7d 2c 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 79 2e 45 74 28 74 5b 30 5d 2c 33 32 29 3b 72 65 74 75 72 6e 20 79 2e 45 74 28 79 2e 42 65 28 74 2e 73 75 62 73 74 72 69 6e 67 28 31 2b 6e 2c 74 2e 6c 65 6e 67 74 68 29 2c 2d 31 2a 6e 29 29 7d 2c 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 32 36 35 34 34 33 35 37 36 31 2c 6e 3d 32 32 34 36 38 32 32 35 31 39 2c 72 3d 33 32 36 36 34 38 39 39 31 37 2c 65 3d 33 37 34 37 36 31 33 39 33 2c 69 3d 34 32 39 34 39 30 31 37 36 30 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 33 29 3b 72 65 74 75 72 6e 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 72 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 32 29 Data Ascii: },ze:function(t){var n=y.Et(t[0],32);return y.Et(y.Be(t.substring(1+n,t.length),-1n))},P:function(){var t=2654435761,n=2246822519,r=3266489917,e=374761393,i=4294901760,a=function(t,n){var r=t.charCodeAt(n+3);return(r=256(r=256(r=256r+t.charCodeAt(n+2)
2025-02-18 23:50:28 UTC	11312	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 61 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 76 65 6e 64 6f 72 3f 66 2e 76 65 6e 64 6f 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 7d 2c 7a 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 70 6c 61 74 66 6f 72 6d 3f 66 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 7d 2c 52 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 3d 6e 7c 7c 22 22 3b 76 61 72 20 65 3d 5b 5d 2c 69 3d 72 3f 79 2e 62 72 28 7b 7d 2c 74 29 3a 74 Data Ascii: nction(){a.body.appendChild(r)}))}catch(t){}},I:function(){return f&&"string"==typeof f.vendor?f.vendor.toLowerCase():""},zi:function(){return f&&"string"==typeof f.platform?f.platform.toLowerCase():""},Rt:function(t,n,r){n=n\|\|"";var e=[],i=r?y.br({},t):t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49808	172.217.16.196	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:27 UTC	419	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:28 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 149166 Date: Tue, 18 Feb 2025 23:50:28 GMT Expires: Tue, 18 Feb 2025 23:50:28 GMT Cache-Control: private, max-age=3600 ETag: "6436313780320439530" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:28 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 33 36 39 30 34 32 31 30 34 33 31 35 37 38 36 33 35 34 30 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 33 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,1730
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 5f 61 61 Data Ascii: dl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 64 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 Data Ascii: de};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32A
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 Data Ascii: iterable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}fu
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 3a 67 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 67 3d 21 31 7d 67 3f 74 68 69 73 2e 79 66 28 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 Data Ascii: :g=!0;break a;default:g=!1}g?this.yf(h):this.Dd(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 62 28 66 75 6e 63 74 69 6f 6e 28 71 2c 74 29 7b 6c 3d 71 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 68 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b Data Ascii: b(function(q,t){l=q;m=t});this.hb(k(h,l),k(g,m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.hb=function(h,g){function k(){switch(l.A){case 1:h(l.Va);break;case 2:g(l.Va);break;default:throw Error("Unexpected state: "+
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 Data Ascii: value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.ge
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 76 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 Data Ascii: }function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=v(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 Data Ascii: is,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String
2025-02-18 23:50:28 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 Data Ascii: ototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49816	108.138.26.67	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:29 UTC	383	OUT	GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1 Host: euob.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:29 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 109112 Connection: close Cache-Control: max-age=43200 Date: Tue, 18 Feb 2025 17:34:27 GMT ETag: "1aa38-Eab53aOuSfmieSnVMKvVaf0CNdU" Expires: Wed, 19 Feb 2025 05:34:27 GMT Server: Caddy Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8109fadbc132b410ecc2c3df250d6144.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: GdzVE06FNeue5x2WBLG4dMKhKOswpzIgYhLZe1hgYhFDOcjlr3w9SA== Age: 22562
2025-02-18 23:50:29 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 38 30 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 33 33 31 29 2c 69 3d 72 28 35 33 39 29 2c 61 3d 65 2e 64 6f 6d 55 2c 63 3d 65 2e 75 2c 6f 3d 65 2e 75 74 69 6c 2c 75 3d 77 69 6e 64 6f 77 2c 66 3d 64 6f 63 75 6d 65 6e 74 2c 76 3d 75 2e 6e 61 76 69 67 61 74 6f 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 22 22 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 72 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 5b 65 5d 2d 6e 29 3b 72 65 74 75 72 6e 20 72 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 65 2c 6c 29 7b 74 72 79 7b 69 66 28 6c 3d 6c 7c 7c 7b 7d 2c 72 3d Data Ascii: !function(){var t={807:function(t,n,r){var e=r(331),i=r(539),a=e.domU,c=e.u,o=e.util,u=window,f=document,v=u.navigator,s=function(t,n){for(var r="",e=0;e<t.length;e++)r+=String.fromCharCode(t[e]-n);return r};t.exports=function(t,n,r,e,l){try{if(l=l\|\|{},r=
2025-02-18 23:50:29 UTC	16384	IN	Data Raw: 72 29 7c 7c 28 72 2e 62 5f 3d 61 2e 64 74 28 6e 29 29 2c 65 5b 69 2e 63 74 5d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 72 29 2c 74 2e 64 63 3d 63 2e 41 74 28 63 2e 52 28 6f 2e 52 74 28 65 29 2c 63 2e 50 28 74 2e 65 29 25 31 32 38 29 29 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 29 29 7d 29 29 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 4f 74 3a 6b 7d 7d 2c 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 69 3d 64 6f 63 75 6d 65 6e 74 2c 61 3d 72 28 33 33 31 29 2e 75 74 69 6c 2c 63 3d 72 28 33 33 31 29 2e 75 2c 6f 3d 72 28 35 33 39 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 Data Ascii: r)\|\|(r.b_=a.dt(n)),e[i.ct]=JSON.stringify(r),t.dc=c.At(c.R(o.Rt(e),c.P(t.e)%128)))}))}catch(t){}}))}))};t.exports={Ot:k}},811:function(t,n,r){var e=window,i=document,a=r(331).util,c=r(331).u,o=r(539),u=function(t,n){for(var r=i.getElementsByTagName("scrip
2025-02-18 23:50:29 UTC	16384	IN	Data Raw: 51 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3d 3d 3d 74 6f 70 3b 72 65 74 75 72 6e 20 74 26 26 28 63 6e 3d 21 30 29 2c 74 7d 7d 2c 66 6e 3d 32 34 33 33 39 36 31 30 30 31 2c 76 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 63 2e 45 6e 28 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6e 3d 5f 74 28 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 67 65 74 29 3b 69 66 28 6e 29 7b 76 61 72 20 72 3d 79 74 28 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 67 65 74 29 3b 69 66 28 72 2e 6d 61 74 63 68 28 22 5b 22 2b 66 6e 29 29 72 65 74 75 72 6e 3b 68 74 28 33 39 2c 72 29 2c 63 6e 3d 21 30 7d 72 65 74 75 72 6e 20 6e 7d 2c 73 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 4a 28 75 2e 47 65 74 Data Ascii: Q.contentWindow===top;return t&&(cn=!0),t}},fn=2433961001,vn=function(){var t=c.En(HTMLIFrameElement.prototype),n=_t(t.contentWindow.get);if(n){var r=yt(t.contentWindow.get);if(r.match("["+fn))return;ht(39,r),cn=!0}return n},sn=function(){return c.J(u.Get
2025-02-18 23:50:29 UTC	16384	IN	Data Raw: 30 30 22 2c 22 36 32 31 2f 33 34 39 22 2c 22 35 36 39 2f 33 32 30 22 2c 22 37 34 2f 34 35 22 2c 22 33 39 2f 31 38 22 2c 22 38 31 32 2f 33 37 35 22 5d 3b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 2e 6d 61 74 63 68 4d 65 64 69 61 29 7b 66 6f 72 28 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6d 61 74 63 68 4d 65 64 69 61 28 74 29 26 26 6d 61 74 63 68 4d 65 64 69 61 28 74 29 2e 6d 61 74 63 68 65 73 7d 2c 72 3d 5b 5d 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 65 5d 2c 61 3d 69 2e 73 70 6c 69 74 28 22 2f 22 29 3b 61 3d 61 5b 31 5d 2b 22 2f 22 2b 61 5b 30 5d 2c Data Ascii: 00","621/349","569/320","74/45","39/18","812/375"];return JSON.stringify([function(){if("function"==typeof u.matchMedia){for(var n=function(t){return matchMedia(t)&&matchMedia(t).matches},r=[],e=0;e<t.length;e++){var i=t[e],a=i.split("/");a=a[1]+"/"+a[0],
2025-02-18 23:50:29 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 63 6b 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 76 61 72 20 6e 3d 61 2e 4f 6e 28 22 5f 63 71 5f 73 75 69 64 22 29 2c 72 3d 22 22 3b 72 65 74 75 72 6e 20 72 3d 6e 7c 7c 5b 22 31 22 2c 69 2e 45 74 28 61 2e 6f 28 29 2f 31 65 33 29 2c 69 2e 6e 74 28 31 36 29 5d 2e 6a 6f 69 6e 28 22 2e 22 29 2c 61 2e 75 72 28 22 5f 63 71 5f 73 75 69 64 22 2c 72 2c 74 2e 61 70 64 29 3f 72 3a 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 7d 7d 2c 70 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 63 6b 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 76 61 72 20 6e 3d 6f 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 3b 69 66 28 69 2e 4a 28 6e 29 26 26 69 2e 4f 28 6e 2e 73 65 74 49 Data Ascii: unction(t){if(!t\|\|!t.ck)return"";try{var n=a.On("_cq_suid"),r="";return r=n\|\|["1",i.Et(a.o()/1e3),i.nt(16)].join("."),a.ur("_cq_suid",r,t.apd)?r:"-"}catch(t){return"-"}},pr:function(t){if(!t\|\|!t.ck)return"";try{var n=o.sessionStorage;if(i.J(n)&&i.O(n.setI
2025-02-18 23:50:29 UTC	16384	IN	Data Raw: 7d 2c 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 79 2e 45 74 28 74 5b 30 5d 2c 33 32 29 3b 72 65 74 75 72 6e 20 79 2e 45 74 28 79 2e 42 65 28 74 2e 73 75 62 73 74 72 69 6e 67 28 31 2b 6e 2c 74 2e 6c 65 6e 67 74 68 29 2c 2d 31 2a 6e 29 29 7d 2c 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 32 36 35 34 34 33 35 37 36 31 2c 6e 3d 32 32 34 36 38 32 32 35 31 39 2c 72 3d 33 32 36 36 34 38 39 39 31 37 2c 65 3d 33 37 34 37 36 31 33 39 33 2c 69 3d 34 32 39 34 39 30 31 37 36 30 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 33 29 3b 72 65 74 75 72 6e 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 28 72 3d 32 35 36 2a 72 2b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 2b 32 29 Data Ascii: },ze:function(t){var n=y.Et(t[0],32);return y.Et(y.Be(t.substring(1+n,t.length),-1n))},P:function(){var t=2654435761,n=2246822519,r=3266489917,e=374761393,i=4294901760,a=function(t,n){var r=t.charCodeAt(n+3);return(r=256(r=256(r=256r+t.charCodeAt(n+2)
2025-02-18 23:50:29 UTC	11312	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 61 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 49 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 76 65 6e 64 6f 72 3f 66 2e 76 65 6e 64 6f 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 7d 2c 7a 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 70 6c 61 74 66 6f 72 6d 3f 66 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 7d 2c 52 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 6e 3d 6e 7c 7c 22 22 3b 76 61 72 20 65 3d 5b 5d 2c 69 3d 72 3f 79 2e 62 72 28 7b 7d 2c 74 29 3a 74 Data Ascii: nction(){a.body.appendChild(r)}))}catch(t){}},I:function(){return f&&"string"==typeof f.vendor?f.vendor.toLowerCase():""},zi:function(){return f&&"string"==typeof f.platform?f.platform.toLowerCase():""},Rt:function(t,n,r){n=n\|\|"";var e=[],i=r?y.br({},t):t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49819	142.250.186.164	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:29 UTC	472	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:29 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 149166 Date: Tue, 18 Feb 2025 23:50:29 GMT Expires: Tue, 18 Feb 2025 23:50:29 GMT Cache-Control: private, max-age=3600 ETag: "7791820285717824869" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:29 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 33 36 39 30 34 32 31 30 34 33 31 35 37 38 36 33 35 34 30 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,1730
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 5f 61 61 Data Ascii: dl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 64 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 Data Ascii: de};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32A
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 Data Ascii: iterable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}fu
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 3a 67 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 67 3d 21 31 7d 67 3f 74 68 69 73 2e 79 66 28 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 Data Ascii: :g=!0;break a;default:g=!1}g?this.yf(h):this.Dd(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 62 28 66 75 6e 63 74 69 6f 6e 28 71 2c 74 29 7b 6c 3d 71 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 68 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b Data Ascii: b(function(q,t){l=q;m=t});this.hb(k(h,l),k(g,m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.hb=function(h,g){function k(){switch(l.A){case 1:h(l.Va);break;case 2:g(l.Va);break;default:throw Error("Unexpected state: "+
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 Data Ascii: value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.ge
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 76 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 Data Ascii: }function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=v(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 Data Ascii: is,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 Data Ascii: ototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49821	142.250.186.46	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:29 UTC	1792	OUT	GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2C000003%2C001244%2Cbucket018%2Cbucket088%2Cbucket089&client=dp-mobile-teaminternet01&r=m&hl=en&rpbu=http%3A%2F%2Fvtechies.us%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTgsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3YjUxY2MyZDFiNGN8fHwxNzM5OTIyNjI2Ljg5MjF8ZmQwOGE4ZjkzMjg3MzcwZWJkZjc1NzYzZjNiYzdhMDIwNjM2ZDE0NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGYzYWM4ZjE2NTY0MDg4OTAwZmI0MDVmMjk2M2U3OTNhNzljYzM3Njd8MHxkcC1tb2JpbGUtdGVhbWludGVybmV0MDF8MHwwfDU4Mzc4ODM5NTl8fHx8&terms=Cloud%20Storage%2CIdentity%20Theft%20Protection%2CVtech%20Monitor%2CTelephone%20Vtech&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-oo-1808423912321928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=671739922628149&num=0&output=afd_ads&domain_name=vtechies.us&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1739922628151&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:29 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Tue, 18 Feb 2025 23:50:29 GMT Expires: Tue, 18 Feb 2025 23:50:29 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-abYVbbyxB4gvlYxoPVt2vg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Downlink Accept-CH: RTT Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-18 23:50:29 UTC	546	IN	Data Raw: 33 61 35 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a55<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 65 3b 20 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: e; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidd
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 2e 6d 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a Data Ascii: -flex-negative:1; max-width: 100%;}.m_{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 Data Ascii: lign:start; -webkit-align-items:flex-start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-a
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 Data Ascii: -shrink:1; flex-shrink:1;}.si102{border-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 70 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 Data Ascii: p; -webkit-flex-wrap:wrap; flex-wrap:wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searc
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 Data Ascii: items:center; align-items:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 76 74 65 63 68 69 65 73 2e 75 73 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 67 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 33 59 6a 55 78 59 32 4d 79 5a 44 46 69 4e 47 4e 38 66 48 77 78 4e 7a 4d 35 4f 54 49 79 4e 6a 49 Data Ascii: -ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://vtechies.us/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTgsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3YjUxY2MyZDFiNGN8fHwxNzM5OTIyNjI
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 Data Ascii: -webkit-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https
2025-02-18 23:50:29 UTC	1390	IN	Data Raw: 77 4e 6a 4d 32 5a 44 45 30 4e 58 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 47 59 7a 59 57 4d 34 5a 6a 45 32 4e 54 59 30 4d 44 67 34 4f 54 41 77 5a 6d 49 30 4d 44 56 6d 4d 6a 6b 32 4d 32 55 33 4f 54 4e 68 4e 7a 6c 6a 59 7a 4d 33 4e 6a 64 38 4d 48 78 6b 63 43 31 74 62 32 4a 70 62 47 55 74 64 47 56 68 62 57 6c 75 64 47 56 79 62 6d 56 30 4d 44 46 38 4d 48 77 77 66 44 55 34 4d 7a 63 34 4f 44 4d 35 4e 54 6c 38 66 48 78 38 26 61 6d 70 3b 71 75 65 72 79 3d 56 74 65 63 68 2b 4d 6f 6e 69 74 6f 72 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 32 65 47 4a 38 72 54 4f Data Ascii: wNjM2ZDE0NXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fGYzYWM4ZjE2NTY0MDg4OTAwZmI0MDVmMjk2M2U3OTNhNzljYzM3Njd8MHxkcC1tb2JpbGUtdGVhbWludGVybmV0MDF8MHwwfDU4Mzc4ODM5NTl8fHx8&query=Vtech+Monitor&afdToken=ChMI2eGJ8rTO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49818	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:29 UTC	6232	OUT	GET /ct?id=80705&url=http%3A%2F%2Fvtechies.us%2Fnstatus%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=f3ac8f16564088900fb405f2963e793a79cc3767&tsf=0&tsfmi=&tsfu=&cb=1739922628116&hl=1&op=0&ag=300509663&rand=13502221611950785126065810090202909806907058826758579250268002771281662251596222958528&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obseu.seaskydvd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:29 UTC	437	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Tue, 18 Feb 2025 23:50:29 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd; Max-Age=29030400; Path=/; Expires=Tue, 20 Jan 2026 23:50:29 GMT; HttpOnly; Secure; SameSite=None Timing-Allow-Origin: http://vtechies.us Connection: close Transfer-Encoding: chunked
2025-02-18 23:50:29 UTC	742	IN	Data Raw: 63 38 35 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 38 30 37 30 35 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 38 30 37 30 35 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 Data Ascii: c85typeof __ctcg_ct_80705_exec === 'function' && __ctcg_ct_80705_exec({"tc":"37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd634920162572794
2025-02-18 23:50:29 UTC	2358	IN	Data Raw: 63 37 31 38 63 61 36 31 36 65 36 35 37 34 63 30 30 63 62 34 66 31 38 64 30 38 31 39 32 63 35 63 64 62 63 64 64 37 66 39 63 37 38 38 32 64 30 66 35 38 39 33 38 62 36 33 63 34 63 30 35 63 34 33 36 36 62 39 34 64 34 63 39 31 64 36 39 39 30 66 66 37 30 65 62 35 39 62 31 64 64 30 64 38 36 37 30 61 62 37 61 35 32 35 62 35 33 64 63 37 36 65 37 34 64 39 63 38 39 65 65 37 65 62 32 63 37 36 30 38 37 33 66 65 31 39 65 66 61 64 63 36 39 38 35 31 62 30 62 32 66 66 62 35 33 31 62 35 30 37 35 34 35 33 63 38 38 65 65 36 64 62 37 34 39 64 32 63 37 38 62 32 31 62 37 39 64 36 30 66 61 64 30 36 32 39 61 38 65 65 61 65 61 37 36 38 61 62 33 66 31 35 34 36 62 37 32 63 38 62 31 31 65 34 38 39 62 66 39 34 39 35 66 30 31 64 35 65 32 65 39 33 33 66 61 37 65 65 33 62 65 34 65 65 35 Data Ascii: c718ca616e6574c00cb4f18d08192c5cdbcdd7f9c7882d0f58938b63c4c05c4366b94d4c91d6990ff70eb59b1dd0d8670ab7a525b53dc76e74d9c89ee7eb2c760873fe19efadc69851b0b2ffb531b5075453c88ee6db749d2c78b21b79d60fad0629a8eeaea768ab3f1546b72c8b11e489bf9495f01d5e2e933fa7ee3be4ee5
2025-02-18 23:50:29 UTC	117	IN	Data Raw: 78 76 54 32 72 56 6e 65 73 63 49 36 6c 47 77 5a 77 57 39 57 33 77 73 48 30 47 75 70 30 5a 34 42 53 73 35 42 67 6f 62 72 76 66 6f 46 57 47 39 56 6e 49 4a 44 4f 53 42 4f 7a 50 39 79 41 3d 22 2c 22 72 65 71 22 3a 22 64 32 36 63 36 64 65 33 33 63 62 66 35 35 33 33 65 31 65 63 33 61 32 62 33 65 63 64 32 35 39 62 22 7d 2c 22 22 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: xvT2rVnescI6lGwZwW9W3wsH0Gup0Z4BSs5BgobrvfoFWG9VnIJDOSBOzP9yA=","req":"d26c6de33cbf5533e1ec3a2b3ecd259b"},"");0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49829	142.250.186.46	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:30 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:30 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 149173 Date: Tue, 18 Feb 2025 23:50:30 GMT Expires: Tue, 18 Feb 2025 23:50:30 GMT Cache-Control: private, max-age=3600 ETag: "11446539981154754184" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:30 UTC	672	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 33 36 39 30 34 32 31 30 34 33 31 35 37 38 36 33 35 34 30 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"3690421043157863540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,173014
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 68 Data Ascii: 00000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_ch
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 72 6e 20 74 68 69 73 2e 64 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 Data Ascii: rn this.de};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 Data Ascii: not an iterable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));ret
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 22 3a 67 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 67 3d 21 31 7d 67 3f 74 68 69 73 2e 79 66 28 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 Data Ascii: unction":g=!0;break a;default:g=!1}g?this.yf(h):this.Dd(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h)
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 6d 2c 6e 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 71 2c 74 29 7b 6c 3d 71 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 68 62 28 6b 28 68 2c 6c 29 2c 6b 28 67 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 56 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 Data Ascii: m,n=new b(function(q,t){l=q;m=t});this.hb(k(h,l),k(g,m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.hb=function(h,g){function k(){switch(l.A){case 1:h(l.Va);break;case 2:g(l.Va);break;default:throw Error("Unexpected s
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 62 61 28 6b 2c 68 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 Data Ascii: ba(k,h,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]])
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 76 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 Data Ascii: :void 0}}function e(g){this[0]={};this[1]=b();this.size=0;if(g){g=v(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.s
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f Data Ascii: urn c(this,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceo
2025-02-18 23:50:30 UTC	1390	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e Data Ascii: Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49834	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:30 UTC	6112	OUT	GET /ct?id=80705&url=http%3A%2F%2Fvtechies.us%2Fnstatus%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=f3ac8f16564088900fb405f2963e793a79cc3767&tsf=0&tsfmi=&tsfu=&cb=1739922628116&hl=1&op=0&ag=300509663&rand=13502221611950785126065810090202909806907058826758579250268002771281662251596222958528&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:30 UTC	276	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Tue, 18 Feb 2025 23:50:30 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Timing-Allow-Origin: undefined Connection: close Transfer-Encoding: chunked
2025-02-18 23:50:30 UTC	903	IN	Data Raw: 63 38 35 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 38 30 37 30 35 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 38 30 37 30 35 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 39 39 64 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 Data Ascii: c85typeof __ctcg_ct_80705_exec === 'function' && __ctcg_ct_80705_exec({"tc":"37dfbd8ee84e001269e7ce37e841899d9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd634920162572794
2025-02-18 23:50:30 UTC	2314	IN	Data Raw: 34 35 33 63 38 38 65 65 36 64 62 37 34 39 64 32 63 37 38 62 32 31 62 37 39 64 36 30 66 61 64 30 36 32 39 61 38 65 65 61 65 61 37 36 38 61 62 33 66 31 35 34 36 62 37 32 63 38 62 31 31 65 34 38 39 62 66 39 34 39 35 66 30 31 64 35 65 32 65 39 33 33 66 61 37 65 65 33 62 65 34 65 65 35 66 32 33 33 61 30 36 30 62 32 36 37 63 37 32 30 38 38 34 64 38 32 66 36 37 38 62 65 34 65 33 35 65 65 62 63 38 66 37 34 32 33 32 64 32 32 35 66 33 38 30 31 33 37 30 61 61 63 65 31 38 63 30 31 63 65 31 30 65 33 30 30 31 37 31 37 33 62 66 32 61 36 34 65 63 31 39 39 31 66 30 66 66 37 62 31 64 64 62 38 62 61 36 65 63 61 66 33 61 65 38 61 64 66 39 64 66 39 66 35 33 39 33 37 35 62 66 32 33 65 66 63 65 34 33 64 36 36 64 31 35 31 37 39 30 39 39 34 32 36 30 34 32 35 37 65 66 63 36 39 61 Data Ascii: 453c88ee6db749d2c78b21b79d60fad0629a8eeaea768ab3f1546b72c8b11e489bf9495f01d5e2e933fa7ee3be4ee5f233a060b267c720884d82f678be4e35eebc8f74232d225f3801370aace18c01ce10e30017173bf2a64ec1991f0ff7b1ddb8ba6ecaf3ae8adf9df9f539375bf23efce43d66d1517909942604257efc69a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49833	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:30 UTC	2200	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obseu.seaskydvd.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:30 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Tue, 18 Feb 2025 23:50:30 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-02-18 23:50:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49840	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:31 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 2796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:31 UTC	2796	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:50:31 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49842	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:31 UTC	1970	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:31 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Tue, 18 Feb 2025 23:50:31 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-02-18 23:50:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49846	142.250.185.129	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:31 UTC	744	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:31 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Feb 2025 23:50:31 GMT Expires: Wed, 19 Feb 2025 22:50:31 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:31 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49847	142.250.185.129	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:31 UTC	745	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:31 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Feb 2025 10:59:35 GMT Expires: Wed, 19 Feb 2025 09:59:35 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 46256 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:31 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49852	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:32 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:32 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49857	142.250.185.65	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:32 UTC	504	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:32 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Feb 2025 10:59:35 GMT Expires: Wed, 19 Feb 2025 09:59:35 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 46257 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:32 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49856	142.250.185.65	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:32 UTC	503	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 23:50:32 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 18 Feb 2025 23:50:31 GMT Expires: Wed, 19 Feb 2025 22:50:31 GMT Cache-Control: public, max-age=82800 Age: 1 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-18 23:50:32 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49864	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:33 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1602 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:33 UTC	1602	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:50:33 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49871	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:34 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:34 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49877	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:35 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1602 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:35 UTC	1602	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:50:35 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49883	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:36 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:36 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49910	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:40 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1755 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:40 UTC	1755	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:50:40 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:40 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49917	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:41 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:41 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:41 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49942	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:45 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1755 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:45 UTC	1755	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:50:45 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:45 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49952	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:50:46 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:50:46 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:50:46 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	50024	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:51:00 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1757 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:51:00 UTC	1757	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:51:00 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:51:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	50025	34.251.101.162	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:51:01 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:51:01 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:51:01 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	50027	54.75.69.192	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:51:30 UTC	662	OUT	POST /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive Content-Length: 1755 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://vtechies.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://vtechies.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:51:30 UTC	1755	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 37 63 65 33 37 65 38 34 31 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 36 31 31 38 61 36 64 32 32 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 64 38 62 38 34 38 65 30 36 37 66 36 63 31 32 61 62 37 39 37 30 30 64 38 35 33 64 64 36 33 34 39 32 30 31 36 32 35 37 32 37 39 34 35 37 30 34 30 61 33 35 30 35 35 37 63 32 62 62 33 38 31 62 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e7ce37e84188949225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674d8b848e067f6c12ab79700d853dd63492016257279457040a350557c2bb381b77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-02-18 23:51:30 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://vtechies.us Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:51:30 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	50028	54.75.69.192	443	3740	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-18 23:51:31 UTC	396	OUT	GET /mon HTTP/1.1 Host: obseu.seaskydvd.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=49771cc9e179269fe5bb4754e01845cd
2025-02-18 23:51:31 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Tue, 18 Feb 2025 23:51:31 GMT Connection: close

Statistics

Click to jump to process

Memory Usage

• Network Firewall.exe
• chrome.exe
• chrome.exe

Click to jump to process

High Level Behavior Distribution

• File
• Registry

Click to dive into process behavior distribution

Behavior

• Network Firewall.exe
• chrome.exe
• chrome.exe

Click to jump to process

Target ID:	1
Start time:	18:50:04
Start date:	18/02/2025
Path:	C:\Users\user\Desktop\Network Firewall.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Network Firewall.exe"
Imagebase:	0x970000
File size:	141'584 bytes
MD5 hash:	955D9DA448D22B73A143CF065EE0F99A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	18:50:23
Start date:	18/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://vtechies.us/nstatus/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	18:50:25
Start date:	18/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1904,i,15026090044200556791,4749236296812470480,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Function 00007FFECD2C74FB Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33ea834774681812d6d09c41a87a18fcbbfcd5a3eae3c814c3a437fa07662f7b
Instruction ID: 360cd423061719cce85731f81a65ca836642ba047bfc42be41ec47086bd61a75
Opcode Fuzzy Hash: 33ea834774681812d6d09c41a87a18fcbbfcd5a3eae3c814c3a437fa07662f7b
Instruction Fuzzy Hash: 9C419070A0864C8FEB58DF58D845BEDBBB0EB99311F00416EE05ED3251DB31A446CB41

Function 00007FFECD2C7858 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ab6280193ba06715f3fae7fb6f9fded7e05ee5b5022a557420a0dfe8782deef
Instruction ID: cf932423d0ff4a3af2c1258ce41994ec5d223f8f1c30c5d1f16cfaa1dc31b529
Opcode Fuzzy Hash: 0ab6280193ba06715f3fae7fb6f9fded7e05ee5b5022a557420a0dfe8782deef
Instruction Fuzzy Hash: DC31C691F0E46619F93C3A6618A25FD26908FC1312B44017AF0FE0A0F7FE4FAC09D1A6

Function 00007FFECD2C5359 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d48b5f8797fc47aeac49ad4605d5a23eb3b0e61fe647f3fc225bc0d60a821580
Instruction ID: 08bcb987f0b52a4d8f20eead30c3b5b4ad6449b9d040bf47d15a658f17fa1057
Opcode Fuzzy Hash: d48b5f8797fc47aeac49ad4605d5a23eb3b0e61fe647f3fc225bc0d60a821580
Instruction Fuzzy Hash: 64319A30D486698FEB19DFA498496FDBBF0EB88311F00057AE018E3191DB79A685CB90

Function 00007FFECD2C5505 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62c9ba5e5a533f1f8ac37019f67bad407fc3a2aa004a1af415e16a04924ec6db
Instruction ID: 5bd6ae6d4298ef56807838c9531d0a5675e129b4c8cb525c53ac0d287a52a60d
Opcode Fuzzy Hash: 62c9ba5e5a533f1f8ac37019f67bad407fc3a2aa004a1af415e16a04924ec6db
Instruction Fuzzy Hash: 57215770D086598FEB45EFA4D8587EDBBF0FB99310F0445BAE019E3192DB78A684CB40

Function 00007FFECD2C5435 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a5294503b29750c2d4607300443f192cc25821381a1d2dda7337fa7f91d42f1
Instruction ID: 12fc2f543327e62c25b02d2326bc034be9284b550da40e28455333a1e868f0c9
Opcode Fuzzy Hash: 7a5294503b29750c2d4607300443f192cc25821381a1d2dda7337fa7f91d42f1
Instruction Fuzzy Hash: 62218970D486598FEB55DFA8C8587EDBBF0EB99311F0045BAE058E2192DB789684CB40

Function 00007FFECD1AE345 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2473888467.00007FFECD1AD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD1AD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd1ad000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6f9410f558d30f3c28a21946315272434c03e42d05d0a219a695bea9d2790ee
Instruction ID: db03adf28ea3bb2703ebd68f3d98bed14f30210060efa9abe62e662224e4d0fa
Opcode Fuzzy Hash: b6f9410f558d30f3c28a21946315272434c03e42d05d0a219a695bea9d2790ee
Instruction Fuzzy Hash: AC115E3160CF088F9BA8DF2DE48595637E1FB98320B100A9FD45DC7265D731E891CB81

Function 00007FFECD2C5ECB Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e24768b936f4b27ef09651446d38b33ba32250bbca1716d35e52be0f14aca03
Instruction ID: fb874de07a439df63a87a357d6d7f3b2e700cc3d7968ac43cd651b70b4cf4d11
Opcode Fuzzy Hash: 1e24768b936f4b27ef09651446d38b33ba32250bbca1716d35e52be0f14aca03
Instruction Fuzzy Hash: 3911A570A1495DDFDF84EF98D888AACBBF1FF68301F00006AE409E7260DB74A841CB00

Function 00007FFECD2C6A60 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 709e4632c71f99d5eb2113f5e521758804e319f08cff64ebce53f52b7f7681b1
Instruction ID: 7021e74027cbc923b6f9780b6eda7d280ed1b43941b1a654278e8f33ee376010
Opcode Fuzzy Hash: 709e4632c71f99d5eb2113f5e521758804e319f08cff64ebce53f52b7f7681b1
Instruction Fuzzy Hash: 76F0A071B1491C4F6B64AAA8680D9FABBE4EB9C262B10013BF41CD3121EE2158168291

Function 00007FFECD2C08BC Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e8e8c88f8c95ed417d085004b2bd8ac7ce1544f7d24a9474f9e475d5c47bb9a
Instruction ID: 7bd09669913596dbf44f48d66768860e2944a0cd4858ea32454a9add4effef97
Opcode Fuzzy Hash: 4e8e8c88f8c95ed417d085004b2bd8ac7ce1544f7d24a9474f9e475d5c47bb9a
Instruction Fuzzy Hash: BBF03A35E0590D8FEB68DF98D4451EDF7B1FFC9316F800179E519E22A1DA3A5841CB80

Function 00007FFECD2C2370 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea6d137d72d34ae1be1f7030ac21b5b72d292392afe7c8dc12b6e5ee3967b586
Instruction ID: 1b8dbe78d02c8d352e61bbceacff8c54ae6b15a9a7728b110b9b1d027d502734
Opcode Fuzzy Hash: ea6d137d72d34ae1be1f7030ac21b5b72d292392afe7c8dc12b6e5ee3967b586
Instruction Fuzzy Hash: B6F0F872A0482D8FDF94EE98EC94AEDB7B5FB98365F14112AE009E3254DB3098058B50

Function 00007FFECD2C6891 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f905e6dde5a6e3b38d0b7dae6ae1fff22ff988c91603ca8e711ffad4d476745
Instruction ID: 853bb2867f577cd1486f1bc68d22fb5da96c82ce59d74cd956caf19f5fdce45f
Opcode Fuzzy Hash: 6f905e6dde5a6e3b38d0b7dae6ae1fff22ff988c91603ca8e711ffad4d476745
Instruction Fuzzy Hash: 89E0D841B4D6890FE769556808786543E819FD9311BC942FEE408CB2F3F80ECC058301

Function 00007FFECD2C0901 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ab26d134fe96d683a70176996859a645d888fc251faaee872f426ba8ee69cfe
Instruction ID: 7adb232eda46cc3b4ce819e3ea9cf6b7baf13d1c8ab683d4d0e977f2d72700fc
Opcode Fuzzy Hash: 2ab26d134fe96d683a70176996859a645d888fc251faaee872f426ba8ee69cfe
Instruction Fuzzy Hash: B2F0BE3140D68A4FE719EF248C54795BBA0FF86300F0400BAF469C60D1DA285A14CBA1

Function 00007FFECD2C22A9 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cec123e1703c76e3028f82bfd2aa036f6bbdf6c38d73cf70c7bc95803a7cdd3
Instruction ID: 30d3281a891b71dbc2f2385e826c202678748944520fff004037530696ead2c9
Opcode Fuzzy Hash: 0cec123e1703c76e3028f82bfd2aa036f6bbdf6c38d73cf70c7bc95803a7cdd3
Instruction Fuzzy Hash: ABF01C30918A8E8BE758EF1498102AAB7A1FF8A300F401579F42D921A1DF79A924CA41

Function 00007FFECD2C7BC0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: caec5f59851bd13dd7f3340e61ef42bf855651b62822c095c22ea3e182775393
Instruction ID: af03ed71fa50122a71e5e24e13b17511a6c8932afd8769dca11dce0e116d4a9a
Opcode Fuzzy Hash: caec5f59851bd13dd7f3340e61ef42bf855651b62822c095c22ea3e182775393
Instruction Fuzzy Hash: 9DD01204B2892B0AFA50A27C2C552B9D5C6EBC8B20F9444F1A01DC22C6DD1DDC420280

Function 00007FFECD2C6B5D Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac7f3c8b1babda77e505872a4c99d48faef47bf8f3920d297a4e604b7fc93bfb
Instruction ID: 87ee6dc4184b4e321aef52ac51d1b96a057e96533ddf83108bdc9eda964b3140
Opcode Fuzzy Hash: ac7f3c8b1babda77e505872a4c99d48faef47bf8f3920d297a4e604b7fc93bfb
Instruction Fuzzy Hash: 02C00210B2CA2642B62C6A281C6657861C3ABD8B616A440B9B41ED72EAEC197D0151C6

Function 00007FFECD2C6DD3 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2474448021.00007FFECD2C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFECD2C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffecd2c0000_Network Firewall.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 003917da22d1443cf0298a1b43219741a9823f70f6d53b4d3fe5255057cb56aa
Instruction ID: c36b4c6af330e7bc91bfad103b2024dff8e6d2406dd0697024c6aec422e75b80
Opcode Fuzzy Hash: 003917da22d1443cf0298a1b43219741a9823f70f6d53b4d3fe5255057cb56aa
Instruction Fuzzy Hash: 27C08C11A080259AE724AA5428000E8A2809B10320B0804B3E498AB583E80C2DC08297

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Network Firewall.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
Network Firewall.exe