Edit tour

Windows Analysis Report
https://cninaspwebprb.icu

Overview

General Information

Sample URL:	https://cninaspwebprb.icu
Analysis ID:	1502254
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains suspicious base64 encoded javascript

HTML page contains obfuscated script src

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprb.icu/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1968,i,16311935120300516305,16399617042518779315,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4710Host: login.live.com

Source: chromecache_85.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_85.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_94.1.dr, chromecache_69.1.dr, chromecache_71.1.dr	String found in binary or memory: http://www.idangero.us/
Source: chromecache_94.1.dr, chromecache_69.1.dr, chromecache_71.1.dr	String found in binary or memory: http://www.idangero.us/sliders/swiper/
Source: chromecache_87.1.dr, chromecache_86.1.dr	String found in binary or memory: http://www.sucaihuo.com/
Source: chromecache_76.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_76.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_70.1.dr, chromecache_80.1.dr	String found in binary or memory: https://www.mangren.com/mps.gov.cnV5/
Source: chromecache_70.1.dr, chromecache_80.1.dr	String found in binary or memory: https://www.yunmd.net/toolbar/allToolvarV5/help.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.2:443 -> 192.168.2.16:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.73.194.208:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.136.2:443 -> 192.168.2.16:49726 version: TLS 1.2

Source: classification engine

Classification label: sus21.phis.win@18/65@16/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprb.icu/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1968,i,16311935120300516305,16399617042518779315,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1968,i,16311935120300516305,16399617042518779315,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://cninaspwebprb.icu	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
http://www.idangero.us/	0%	URL Reputation	safe
https://cninaspwebprn.icu/c-assets/css/font-awesome.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570217.js	0%	Avira URL Cloud	safe
http://www.idangero.us/sliders/swiper/	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570212.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/8229979.jpg	0%	Avira URL Cloud	safe
http://www.idangero.us/sliders/swiper/	0%	Virustotal		Browse
https://cninaspwebprn.icu/index_files/7601024.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/8221087.js	0%	Avira URL Cloud	safe
http://www.sucaihuo.com/	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fcninaspwebprn.icu&oit=3&cp=21&pgcl=4&gs_rn=42&psi=A-BHRQIvUdko_ht_&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/favicon.ico	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7569191.png	0%	Avira URL Cloud	safe
https://www.yunmd.net/toolbar/allToolvarV5/help.html	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/dialog-new/logo.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7569190.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570255.png	0%	Avira URL Cloud	safe
http://www.sucaihuo.com/	0%	Virustotal		Browse
https://cninaspwebprn.icu/c-assets/js/land.js	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570214.css	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Virustotal		Browse
https://cninaspwebprn.icu/index_files/8574863.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570216.js	0%	Avira URL Cloud	safe
https://www.mangren.com/mps.gov.cnV5/	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570238.png	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570215.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/css/style.css?1714115086	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/img/22.gif	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.251.37.14	true	false	unknown
cninaspwebprn.icu	45.135.232.98	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
cninaspwebprb.icu	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cninaspwebprn.icu/c-assets/css/font-awesome.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/	true		unknown
https://cninaspwebprn.icu/index_files/7570212.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570217.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/8229979.jpg	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7601024.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/8221087.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7569191.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/favicon.ico	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fcninaspwebprn.icu&oit=3&cp=21&pgcl=4&gs_rn=42&psi=A-BHRQIvUdko_ht_&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/css/bootstrap.min.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/dialog-new/logo.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7569190.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570255.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/js/land.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570214.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/8574863.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570216.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570238.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570215.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/css/style.css?1714115086	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/img/22.gif	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_85.1.dr	false	URL Reputation: safe	unknown
http://www.idangero.us/sliders/swiper/	chromecache_94.1.dr, chromecache_69.1.dr, chromecache_71.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.sucaihuo.com/	chromecache_87.1.dr, chromecache_86.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://getbootstrap.com/)	chromecache_76.1.dr	false	URL Reputation: safe	unknown
https://www.yunmd.net/toolbar/allToolvarV5/help.html	chromecache_70.1.dr, chromecache_80.1.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_85.1.dr	false	URL Reputation: safe	unknown
https://www.mangren.com/mps.gov.cnV5/	chromecache_70.1.dr, chromecache_80.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_76.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.idangero.us/	chromecache_94.1.dr, chromecache_69.1.dr, chromecache_71.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
45.135.232.98	cninaspwebprn.icu	Russian Federation	49392	ASBAXETNRU	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1502254
Start date and time:	2024-08-31 20:35:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 1m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://cninaspwebprb.icu
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.phis.win@18/65@16/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.46, 64.233.166.84, 216.58.206.67, 34.104.35.123, 216.58.212.138, 142.250.185.170, 172.217.16.138, 142.250.184.234, 172.217.18.10, 142.250.186.42, 142.250.185.234, 142.250.186.74, 216.58.206.42, 142.250.184.202, 216.58.206.74, 142.250.185.202, 172.217.16.202, 142.250.181.234, 142.250.185.74, 142.250.186.138
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, login.live.com, settings-win.data.microsoft.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:35:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.982785859923867
Encrypted:	false
SSDEEP:	48:8RddTFB8HyidAKZdA1FehwiZUklqehny+3:8x35Uy
MD5:	B83FB25D33A26C5BAFF69D8C08689FD0
SHA1:	CBAEBE0980D076FD044AAA303D42E1AED27B7F80
SHA-256:	2A97EF282301607FFF27CD09926562F155F7ED5E755F27CC740733968F981CFB
SHA-512:	D5EAE793858F0F20E515F42A026AAC019E584404851B74E94977715473C5250A79C5082E77493B2D48EFB57EA8BA55A589AAC0906BA80CD8A4A3C12FD6F6930C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....;o.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Ys............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:35:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.00035752330703
Encrypted:	false
SSDEEP:	48:8oddTFB8HyidAKZdA1seh/iZUkAQkqehEy+2:8W3P9QVy
MD5:	80418515456AE6A668EBDE8B14512B00
SHA1:	BFE151654D80324CBD7F2701F416B1A976C27ADA
SHA-256:	C006FC1EC4981C69E1D566630F02088F854F26F87C9E9B316D89B443253F159D
SHA-512:	84DDCAC582627BA9487D3306AEC133F9C307817A675E7CA76DC152C4B847BB0B52445A9D0AF011EAAA9D4B3F2019472E53432B2F1999EEA8D53B3AE0276A6DBE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......d.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Ys............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.00788424287284
Encrypted:	false
SSDEEP:	48:8xddTFBAHyidAKZdA14meh7sFiZUkmgqeh7sqy+BX:8R3nnwy
MD5:	16DCD9F1E4D217AEB9295311C8D3E3CF
SHA1:	59B1C851582B4867B22B083F22DBF8C886F0E8A3
SHA-256:	C5B7339162E65D1930853B9D4BA40EC67533BD5E9A3C2F023D40B8776445C7EC
SHA-512:	25F0E16F5BE166229822DB16C19C88A2089B3CE269AC5F45A6A55E62DC6EA17E208292C18F2B9CA7DEDF8F1D857EACB56D009AF636DE96F0B80D1CFC3D8D7279
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:35:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9967307313346994
Encrypted:	false
SSDEEP:	48:8bddTFB8HyidAKZdA1TehDiZUkwqehIy+R:8b38iy
MD5:	F1458A1933C79ECF0F74626273A034CE
SHA1:	613F188A995CACCFC20C72B9460DE2EED7FF682B
SHA-256:	54FB58812A68DA87F2720E788834AC606612C3332204164F8979E76FE139F263
SHA-512:	271B3424B70EB11F7F944ACEAD66A769CE3AE56A74E4F54CD8BC5B172F2B2E403D8AE8092FE496D44DE3207DEBFB2544C8CDEB5F3A32D0EBAAD686B8415DC7E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....5_.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Ys............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:35:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9855347973650037
Encrypted:	false
SSDEEP:	48:8WddTFB8HyidAKZdA1dehBiZUk1W1qehGy+C:8U3s9my
MD5:	E05D975D02578DC575BDC25A17AAF6F2
SHA1:	D80CF1C9FFEE3E66374778C62A3863654A6FB590
SHA-256:	D01BCD1746A62EAC9DCFE550778A897EF3656E17B1BD197599C63A8060DE5EF7
SHA-512:	4E6D612791D58AEEA28AED0332D31FCD080660365E4CB034B201B795EC8907A399A8101147EEC4269DDDCEA467FC79968598F2696284C402713BBC23FA083A0E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....%.i.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Ys............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:35:36 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.992518471856213
Encrypted:	false
SSDEEP:	48:8jddTFB8HyidAKZdA1duTeehOuTbbiZUk5OjqehOuTbwy+yT+:8T3eTfTbxWOvTbwy7T
MD5:	E43B8DE5C2D32866CB9343D08D6F7ABE
SHA1:	7273EBF5F282CAA1FD880A1DCAB9D90A246EB5E0
SHA-256:	8E15E5EFA4E6018265C28CC7F7C4C8AC0C94AC8FADF82B55B00237B33165BEAB
SHA-512:	403CEA2382071E3364362E0D4ED73EDC11CCA46FA0238AB9986CF2C5497B1397DEF3146B4522BDF9D09492D5CF6F432D3871C524CA8401C695CE3F0DE3B1F333
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....mW.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Yi.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Ys............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........u.T......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.790845598755483
Encrypted:	false
SSDEEP:	3:uwiX9/nQNTw2lHTfhn7J83gk2R29sNkfCGL1V3:uXp2dTfliwk2R29+KFr
MD5:	67CB5C2B21330E1A04AB21495174529C
SHA1:	9DEFE49D814A48D127DAA3389F16062CFBF3DCC6
SHA-256:	97AE9EB8A286DC0B77986CF6E3F6D335C3D98E8B2572A022503119D5C81920CC
SHA-512:	521B459BA3EDA4A95CDCD4A87EF86EA58D48C2F4D1DF8937ED99C47C5DCE5A5DD75E59E0C3E8DF1153A780DA4B2D0F9026860D96C637DE9B2056B070E8C0556D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkpYFbdvde0JxIFDYdpQbYSBQ1ZBwtHEjMJdsO1H6l-CDMSBQ2s-byWEgUN2tRvsRIFDU7RYJQSBQ2AEkcWEgUNRbEUcxIFDfRo16ISEAlm0OiPGo_hvxIFDaNT6cw=?alt=proto
Preview:	ChIKBw2HaUG2GgAKBw1ZBwtHGgAKNgoHDaz5vJYaAAoHDdrUb7EaAAoHDU7RYJQaAAoHDYASRxYaAAoHDUWxFHMaAAoHDfRo16IaAAoJCgcNo1PpzBoA

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	79320
Entropy (8bit):	7.992517213796813
Encrypted:	true
SSDEEP:	1536:F6IzshSeVzBdMpJ527amih/5l60WqYO1RMiSc6nEWbzOSXIw1BH4l:FrzsAeVzBs2Kh/NzYOkif6nZz1d1ta
MD5:	ADAFCCAB87F40B603BE14119829783E1
SHA1:	D676A0C5F696449BC068A48E31C351B2828EE83D
SHA-256:	09AC41C0DF92A37BC2F7324A071247898E6A31550452B5E04312CE50AF4334F9
SHA-512:	9FD44A117A0B362877F9B68087EFE22CB7D24A8EDC0F69E17D6D41AEA949EDE0C4E29EFDCF88087A3D4FD12AFBFE5A1CEA46FC5392D08BEA620FECCA92E5A7E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...=......0.... .IDATx...k.Yz.t...}{w..}.Sw.9M2.@..!..HRe..`JK.&j.?.jiIA..S.."V.%...REYV....$ ....1.0..B..CO.gvw.t....u_...........<.Y.>\.q......}.U..A...@......j>.....+..uO5PU.n...\1.O..Z..g.1..s...Q...............>.>e.....y..s.8b......b...W.\|._..g.u.y...U\s....b^'P.h.'......ZO.0t..3_+hdjv.8...n..BR..q}.8Qd,...z.Z3.>.<z...}...u.C#.R......I......:..F........k>X7...#d.[.W...=..4.y....}......&....:@....9.MP8p...%._r..@^..9`.9.N...1s...l....4.E..G...ZSwD......=.s....P#.....=..CzB.Z+....^C....X:H.@.Bz.$N....9..9.y.x^.....8....Z\|j.G.8I..^.s=...e'.....R.....X.F@.~._../9o.>u.[F..k......<.......-.NS..e...f.8.N.^...h...=..P..u...@.k...s...=..I#..p.. M.G.D....H...3i....K}<...~...DL..b...el.P.r.EO#~..!....g.j...k..4.a...V.:...u...'.HI.A^.....a...'..I..l...%g.......u.~g7.#..q.;8......o...1r.....;...rb]'.:.V%.H.S_.l.z{..'.......nh-......B.jc82u.K ]\XR#+..Ob.p.l...f..Y....Q%y_4........$/.+.d[g...qHNs9...$..K......k..q.g9..

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7931443269714
Encrypted:	false
SSDEEP:	24:o2kscvkPqdHiJFRR88LV0OtXW100cB/0QHEE/:X+v5iL88L+Ok1pcB/ok
MD5:	2EBF54D6BE73C227F780830EB51FA35D
SHA1:	CA24BC1D8BDA1D149FC97B1E21C2880F67EBE83F
SHA-256:	BC87C1E813B4B81B23BB1A13372125C0923BB05C73A3DA22524CF4C03E7D9B5D
SHA-512:	861F06C8F21C62B6ADEDEF325E59A7356E7BDDF8224E8774AC0AB41BB3E3E531E7269E0510C874CB682CDF57C05A7158614D80E201C87A8C01A06D859AC76AF9
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ........................................L.&....t.............6.\(4.HU.4............................4...n...R.. ..."...#y..;....8..+7..)A.b................................,...@...?...2...#.......%...5.\|................. .....5y.............#...)...:....^.......6.X............... .......'~...........V...P.......'..3...-...^.................=...............$...#...'...2...3...=...T...g...T..N....3.......)....8...5...k......!...#...,....n...M..&^..^...V..........L(....}.........................."...............V...c...u......V.....]..........................................4...I...^...)..>#....w...............^.......8...8..............&...A...v...I...)....................................&..........8...$...........!.......?.......T.......S...6.......L.......V..:...^...........>..0.........#...........e..+}...........9..+...D...9...............0..^!........I.......$...........b..'...(...:..@.......................F....................(...0.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15976
Entropy (8bit):	5.135331704450937
Encrypted:	false
SSDEEP:	384:sfbJ2SMki8JUvG1JDVxClqthMeBr8VaNfVa3l1U5Pg1la595a1spdshqy2JLYZmz:sfbJ2SMki8JUvG1JD4qTlg8B8SJltmJo
MD5:	9DC214886720FB934025EF5F37603564
SHA1:	CAE4AE70FFCE7F241ABA70FB28216DD8E82435F1
SHA-256:	A7844E9CE418E18036FFF961A14B324CADD4C79347425D822821D33A51D761B2
SHA-512:	3A26CB8AF22BCB0F9116BEC206DC201E4D0183BEC226320630E3F0EE5848283BFDC69022D5D566E78409C6979C62021CC5BE85C737AD8225116109AD25DF087D
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7601024.css
Preview:	..*{...margin: 0;...padding: 0;..}...bg {...width: 100%;...min-width: 1100px;...overflow: hidden;..}.....w1100 {...width: 1100px;...margin: 0 auto;..}.....wrap{...margin-bottom: 40px;..}...toptitle{...text-align: center;...padding: 15px 0 25px 0;..}...toptitle .title1{...font-size: 34px;...line-height: 40px;...color: #243187;.....}...toptitle .title2{...font-size: 18px;...padding-top: 5px;...color: #162582;..}.....lunbo{...width: 618px;...height: 412px;...position: relative;...overflow: hidden;..}.....lunbo .hd ul{...position: absolute;...bottom: 18px;...right: 24px;...z-index: 99;..}.....lunbo .hd ul li{...display: inline-block;...float: left;...width: 11px;...height: 11px;...} ...lunbo .hd ul li span{...display: inline-block;...width: 6px;...height: 6px;...background-color: #626262;...border-radius: 100%;...cursor: pointer;.....}...lunbo .hd ul li.on{...margin-right: 5px;..}...lunbo .hd ul li.on span{...margin-top: -2.5px;...width: 11px;...height: 11px;...background-color: #FFFFFF;..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	79320
Entropy (8bit):	7.992517213796813
Encrypted:	true
SSDEEP:	1536:F6IzshSeVzBdMpJ527amih/5l60WqYO1RMiSc6nEWbzOSXIw1BH4l:FrzsAeVzBs2Kh/NzYOkif6nZz1d1ta
MD5:	ADAFCCAB87F40B603BE14119829783E1
SHA1:	D676A0C5F696449BC068A48E31C351B2828EE83D
SHA-256:	09AC41C0DF92A37BC2F7324A071247898E6A31550452B5E04312CE50AF4334F9
SHA-512:	9FD44A117A0B362877F9B68087EFE22CB7D24A8EDC0F69E17D6D41AEA949EDE0C4E29EFDCF88087A3D4FD12AFBFE5A1CEA46FC5392D08BEA620FECCA92E5A7E9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8574863.png
Preview:	.PNG........IHDR...L...=......0.... .IDATx...k.Yz.t...}{w..}.Sw.9M2.@..!..HRe..`JK.&j.?.jiIA..S.."V.%...REYV....$ ....1.0..B..CO.gvw.t....u_...........<.Y.>\.q......}.U..A...@......j>.....+..uO5PU.n...\1.O..Z..g.1..s...Q...............>.>e.....y..s.8b......b...W.\|._..g.u.y...U\s....b^'P.h.'......ZO.0t..3_+hdjv.8...n..BR..q}.8Qd,...z.Z3.>.<z...}...u.C#.R......I......:..F........k>X7...#d.[.W...=..4.y....}......&....:@....9.MP8p...%._r..@^..9`.9.N...1s...l....4.E..G...ZSwD......=.s....P#.....=..CzB.Z+....^C....X:H.@.Bz.$N....9..9.y.x^.....8....Z\|j.G.8I..^.s=...e'.....R.....X.F@.~._../9o.>u.[F..k......<.......-.NS..e...f.8.N.^...h...=..P..u...@.k...s...=..I#..p.. M.G.D....H...3i....K}<...~...DL..b...el.P.r.EO#~..!....g.j...k..4.a...V.:...u...'.HI.A^.....a...'..I..l...%g.......u.~g7.#..q.;8......o...1r.....;...rb]'.:.V%.H.S_.l.z{..'.......nh-......B.jc82u.K ]\XR#+..Ob.p.l...f..Y....Q%y_4........$/.+.d[g...qHNs9...$..K......k..q.g9..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3137
Entropy (8bit):	4.917151642318642
Encrypted:	false
SSDEEP:	48:ePc2e1dDGQiDu4elTsgeTrxjSvNxyMa+fwmB:eUhPGM4STsgeZWwMPp
MD5:	9DA646E05BC74DCAE4B7568BD1E570DB
SHA1:	95BF8DFEA48F53373131996BE7821F295B42DE30
SHA-256:	FBD1EBC8AD24A533074A4A5001E04131F66AFFB9A341D93E53A820847BBED820
SHA-512:	3C7E4D7CC7F87B63DFA91B2F945D89281EA048A27CAA01E663B7741E7C10B16BCE1B752D837544CAA624AFF6BE6957F83104AF0E54D87E75A42DB42C6F606D4E
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570215.css
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015././ ===============================================================.Basic Swiper Styles .================================================================/..swiper-container {..margin:0 auto;..position:relative;..overflow:hidden;..direction:ltr;..-webkit-backface-visibility:hidden;..-moz-backface-visibility:hidden;..-ms-backface-visibility:hidden;..-o-backface-visibility:hidden;..backface-visibility:hidden;../ Fix of Webkit flickering */..z-index:1;.}..swiper-wrapper {..position:relative;..width:100%;..-webkit-transition-property:-webkit-transform, left, top;..-webkit-transition-duration:0s;..-webkit-transform:translate3d(0px,0,0);..-webkit-transition-timing-function:ease;....-moz-transi

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7262
Entropy (8bit):	5.437607284772332
Encrypted:	false
SSDEEP:	96:EhLuY60dZBIe39z8esZy96+NABXSj+zVLsAz5bHXL2Y:Eh6Y60GCnc+NABmdKHaY
MD5:	58B957082C9920BEB19056700AB5BD75
SHA1:	B0CED748322CA6E445FA4F8C804265405A3A7CA2
SHA-256:	120F5BADF54653B534293F1E4413ECD36C62E4D8589724ACBA1C6C19BDB2842A
SHA-512:	DFF22A33899294F3E6D062614A644F86CEFD3A9CE51B0A6D4A5C406EA4512A669DBC699EF0CBFADBA3FEA93D2A7EBBE2B3A31743BFF4DFBADB87AA1B91BCAAC9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8221087.js
Preview:	try{...var esdTipLink1 = document.createElement("a");...esdTipLink1.setAttribute("href","javascript:void(0);");...esdTipLink1.appendChild(document.createTextNode("............,.Alt.........."));...esdTipLink1.tabIndex="7";...esdTipLink1.id="esdTipLink1";...esdTipLink1.target="_blank"...esdTipLink1.style.setProperty("max-width","0px","important");...esdTipLink1.style.setProperty("float","left","important");...esdTipLink1.style.setProperty("border","0px","important");...esdTipLink1.style.setProperty("padding","0px","important");...esdTipLink1.style.setProperty("margin","0px","important");...esdTipLink1.style.setProperty("width","0px","important");...esdTipLink1.style.setProperty("height","0px","important");...esdTipLink1.style.setProperty("overflow","hidden","important");...esdTipLink1.style.setProperty("display","block","important");...esdTipLink1.style.setProperty("left","0","important");...esdTipLink1.style.setProperty("top","0","important

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32018)
Category:	downloaded
Size (bytes):	46354
Entropy (8bit):	5.3743688373906515
Encrypted:	false
SSDEEP:	768:eJboOBwtxaCM9mwh9MTJlbaWNMZ8vyHMOzFGV8oJ04:4oOBwt4uTOZ8vyHMOf4
MD5:	756E0F300D80E502F84C0881DAD9995B
SHA1:	EC97FC02C665EF9A6DF5E9ABD14417573BFFCE64
SHA-256:	0B5595E4E06B5279B5EEC574C2A3AEE7BEA92E1BC16AF3B49D0680111DFD23B7
SHA-512:	EB434EA5A5585064B6450D620CF689AC9ABFF4350D059F3E7528A8B7A9C09CCA0BE297EDFAB9AD7A81A652405D038B257CBC828FB8617F45DA4BB5F9F9261D4A
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570216.js
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015.*/.var Swiper=function(a,b){"use strict";function c(a,b){return document.querySelectorAll?(b\|\|document).querySelectorAll(a):jQuery(a,b)}function d(a){return"[object Array]"===Object.prototype.toString.apply(a)?!0:!1}function e(){var a=G-J;return b.freeMode&&(a=G-J),b.slidesPerView>D.slides.length&&!b.centeredSlides&&(a=0),0>a&&(a=0),a}function f(){function a(a){var c,d,e=function(){"undefined"!=typeof D&&null!==D&&(void 0!==D.imagesLoaded&&D.imagesLoaded++,D.imagesLoaded===D.imagesToLoad.length&&(D.reInit(),b.onImagesReady&&D.fireCallback(b.onImagesReady,D)))};a.complete?e():(d=a.currentSrc\|\|a.getAttribute("src"),d?(c=new Image,c.onload=e,c.onerror=e,c.src=d):e())}var d=D.h.addEventListener

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336), with CRLF line terminators
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	4.999870397528071
Encrypted:	false
SSDEEP:	12:AahAIWZh5X+o0uCAzIsTza/2Au6WSyfmC4K9E8BIL2FtmY27tmBrTw22rTwtmdbz:ADImX9WezaCfHJBIL2Ft2RoH2bqgn
MD5:	94D15215CFB82E973D4659EA7664CF3C
SHA1:	33DE30CA2A32A1A6CE6B99EDA2C1C2B4EDBFCB92
SHA-256:	4CA473B9F5B66BDE027957816173898AEEF51DF0D517946C2F5F25BD8CE98FD3
SHA-512:	8CC537F99475B2C12425C6B8386ECC84F8D85D833BB0E9DA8BF3C32FB504EE534AC62576AE35891413B1F6D6B7FE351F5C4FE022520597FF0EFD44B6DA17C315
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/js/land.js
Preview:	$().ready(function (e) {.. var si = setInterval(function (e) {.. if ($('.successRow a').length) {.. $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-index:100;"><iframe width="100%;" frameborder="0" style="width: 100%;height:100%;border: 0;" src="./' + lpAlias + '/index.php?confirm=' + $('.successRow a').attr('href') + '"></iframe></div>');.... clearInterval(si);.. }.... });....});....function fullscreenExit() {.. if (document.exitFullscreen) {.. document.exitFullscreen();.. } else if (document.webkitExitFullscreen) {.. document.webkitExitFullscreen();.. } else if (document.mozCancelFullScreen) {.. document.mozCancelFullScreen();.. } else if (document.msExitFullscreen) {.. document.msExitFullscreen();.. }..}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (352)
Category:	downloaded
Size (bytes):	9796
Entropy (8bit):	5.016993364994656
Encrypted:	false
SSDEEP:	192:NgcUP4//FHGa+p0F21DG4x8tJV1E2/gXa5nR0huEyRYQjKexFhT:6kFx+p0FQJ8tJ7EKgXadihuEyRYQjKet
MD5:	76E3EC999ED23869EF65A9F85AC04809
SHA1:	A39E6105A1B84E06D92B6ADB1E657D3292822DC3
SHA-256:	C2056253BDDE441D18ABD7DE45DD2B81310A048B16ED59D299C645499AE8C749
SHA-512:	9F7FB037B3820AD6C96C315FAC0888CAA5E312E61780D2F0A279E617C8CC6402FE94D1F36EE7EC3798BBB4CECFA9BA27037016AC31D05066089C6645D691E4E1
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/css/style.css?1714115086
Preview:	@font-face {. font-family: 'Font Awesome 5 Brands';. font-style: normal;. font-weight: normal;. font-display: auto;. src: url("/c-assets/webfonts/fa-brands-400.eot");. src: url("/c-assets/webfonts/fa-brands-400.eot?#iefix") format("embedded-opentype"), url("/c-assets/webfonts/fa-brands-400.woff2") format("woff2"), url("/c-assets/webfonts/fa-brands-400.woff") format("woff"), url("/c-assets/webfonts/fa-brands-400.ttf") format("truetype"), url("/c-assets/webfonts/fa-brands-400.svg#fontawesome") format("svg");.}...fab {. font-family: 'Font Awesome 5 Brands';.}..@font-face {. font-family: 'Font Awesome 5 Free';. font-style: normal;. font-weight: 400;. font-display: auto;. src: url("/c-assets/webfonts/fa-regular-400.eot");. src: url("/c-assets/webfonts/fa-regular-400.eot?#iefix") format("embedded-opentype"), url("/c-assets/webfonts/fa-regular-400.woff2") format("woff2"), url("/c-assets/webfonts/fa-regular-400.woff") format("woff"), url("/c-assets/webfon

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7931443269714
Encrypted:	false
SSDEEP:	24:o2kscvkPqdHiJFRR88LV0OtXW100cB/0QHEE/:X+v5iL88L+Ok1pcB/ok
MD5:	2EBF54D6BE73C227F780830EB51FA35D
SHA1:	CA24BC1D8BDA1D149FC97B1E21C2880F67EBE83F
SHA-256:	BC87C1E813B4B81B23BB1A13372125C0923BB05C73A3DA22524CF4C03E7D9B5D
SHA-512:	861F06C8F21C62B6ADEDEF325E59A7356E7BDDF8224E8774AC0AB41BB3E3E531E7269E0510C874CB682CDF57C05A7158614D80E201C87A8C01A06D859AC76AF9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/favicon.ico
Preview:	............ .h.......(....... ..... ........................................L.&....t.............6.\(4.HU.4............................4...n...R.. ..."...#y..;....8..+7..)A.b................................,...@...?...2...#.......%...5.\|................. .....5y.............#...)...:....^.......6.X............... .......'~...........V...P.......'..3...-...^.................=...............$...#...'...2...3...=...T...g...T..N....3.......)....8...5...k......!...#...,....n...M..&^..^...V..........L(....}.........................."...............V...c...u......V.....]..........................................4...I...^...)..>#....w...............^.......8...8..............&...A...v...I...)....................................&..........8...$...........!.......?.......T.......S...6.......L.......V..:...^...........>..0.........#...........e..+}...........9..+...D...9...............0..^!........I.......$...........b..'...(...:..@.......................F....................(...0.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 68, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3871
Entropy (8bit):	7.926380055231519
Encrypted:	false
SSDEEP:	96:bg3eGfYjFH9qAHA4rZDhr77Sj/tMeEGKbiqPy:IQjBQAgMDhr77Si3Ly
MD5:	30A97280BB5E9A7407063CF3C858579C
SHA1:	D7B0733BABCAEF56F19B5DEE550E83A97476A7A2
SHA-256:	CDF4937729B37D2A376B9EC054F6C614B156126164AB6113E0271EF224A20121
SHA-512:	0F21F4B6551FF467E5F3DD86C8079688F64B62203291AF0C0772DC60D1F428C8C97723BC5B6EB00FEDC18911B45D1849F995995ADB081B6D0CBD1C764353412E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...D......f......IDATh..[kl.Wv..h..GC...d...h.a..G.u.u.......Im.G..... .?.]t..Z.E.Bi.EZ...m.m.&..u..I..+o..D..9.).T..E...dQ....;.\|I.L9.@pf..=.;..s.s..={..........vo.k..@(..C.&...!.O....h....!BJ.T..2..!.3AN..+.J..S.)...b...(.`....8.%._.?.Rj....".D....+..S.$.B...!D/.h+.u...r....\|..].H...u..S..(.i._....+......Y(.QJ.)...!.\.d#.F.YF...+..h..........!w.h.-.@uiV.fG..B..l..`.+8.!..k^...x.....z..\|...Y.z.e.aI..A>T.!Em%..q9...H.H.......G......2.\b.j.....b..e^...#._y.P.1.4....%g.e.......~.C~..1."......<..#7.......?..8.niJ%....q.z..;^....b....J)%..y...d.O]...E..W.kw.!e^....F.........=.......1..cd?....=.e.(.Q..RJ.......?.....(.UD..D..[d3....b..=...`7.j. [$>..X5...W.....!.@W>.r.?.-R.2....._.uR.7:. .I.........~.y..F..q2.`9A.T.4.v.W..l....~.>.B.V.v..k.(..C(.\|..G.7M.G..[..*..."..Ie.{.6.YFv..&...J5U..mT.....=.......\".hW.%...Ql;.=..T. ...4.e.A..1.s.,..!..g_...g.2.o.e...xH5U.E....5.v.{P.!..(..6)%.{...tC.Y..W6Yyv.....1cY.O.ox....@..<.!.x

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65319), with CRLF line terminators
Category:	downloaded
Size (bytes):	147219
Entropy (8bit):	5.0720974289846845
Encrypted:	false
SSDEEP:	1536:5/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26D:5/Riz7G3q3SYiLENM6HN26D
MD5:	EE31284DB334624FD07DE2B800E8581C
SHA1:	64D00A8DD2162B47B2775A183F6C1A1414256FBD
SHA-256:	B86F79CC25B53970826C3521C508996A877F15F01B2E32C8DBB975B66B705D77
SHA-512:	819B8106CA21E757D9A102B78F36ABEC86477B26133D2ECC04E9C1A54B9D9216BBEF936FB06DF37D980BBE50DC106A352EA356DA9FAFF71EDBAB0919BAA0FCA0
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/css/bootstrap.min.css
Preview:	/!.. Bootstrap v4.3.1 (https://getbootstrap.com/).. * Copyright 2011-2019 The Bootstrap Authors.. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-si

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3297)
Category:	downloaded
Size (bytes):	3302
Entropy (8bit):	5.830640213966622
Encrypted:	false
SSDEEP:	96:oJkli0H6666g8kQxLf8mk7dEf6OI+Fgfffffo:oJS3H6666g8kQ91g6I+1
MD5:	F45DCD3F3AE8D848869DC51EB6ED3329
SHA1:	C730A252CB5900CE6470234C2069B12AB01E5E93
SHA-256:	5B1A82F3213E4E91B3300321709632F783F98528B3F8719A776E8FE90CCB850B
SHA-512:	16CFB5E13F3C30154F0BAC7B7CF89C41897A78BA1FA65BF8FFBC5B32AD323114082307CFAC53F7A1359AA562844AD3760C3539AC06FD152060C9C5740FE59C6C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["mlb","capri sun pouches","nyt connections hints august 31","nasa astronauts stuck in space station","black facebook app icon","yeti casket cooler","bergen catholic vs img academy football","apple iphone 16 pro max release date"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"google:entityinfo":"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

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 85, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22131
Entropy (8bit):	7.976392613692222
Encrypted:	false
SSDEEP:	384:WUxUVQ7xCd8qj8fCLxtK3fLQ0hQyV0c/5GQ+xHC4zDgEImT4d4CLVJ2khe:fUVQtC7tw3fXQyX/5GQ+U6XhT4uCVfhe
MD5:	FF2C9870CEF88219844CFAD5EA1CC437
SHA1:	E35226A56033C097AA9A6E6E9D6A9D40B9984EC1
SHA-256:	7E61569BFBDCFF69293063DA8BBF29B9DBBFAB042F7C0845124B888F9AB8D70D
SHA-512:	417F0958E9D561CC2A03E939CC54F0A6409B92DDF8B63E57701520196E156D9FF2B267AA41E88A801F3BF5CC16D8A45B0DB39A038C811DBE3BF50A7A68263756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#...U........D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:5E95BE135C0E11EE922FCEA895EAD05E" xmpMM:InstanceID="xmp.iid:5E95BE125C0E11EE922FCEA895EAD05E" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5033BE62BDC511EBAB7A8A3B4833747B" stRef:documentID="xmp.did:5033BE63BDC511EBAB7A8A3B4833747B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...=..R.IDATx......y........q.A...I.&ESMi%K..i...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 143, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17025
Entropy (8bit):	7.945279172992637
Encrypted:	false
SSDEEP:	384:g16vxBAjtlYlkAD/mtPiQiOA7c47uonhOy5KeYl:g1uxBAjkWPiqAA47uonhOyYl
MD5:	0FB14F96267BD59C3A64EA4409904254
SHA1:	CE077AF2ABF435DC924BFEDFF7E325A2BAF182EE
SHA-256:	76D2AE8959E8F4713A3B7267A2545754C93841961312C118948B8AF59808FB42
SHA-512:	F9E0A58765762BBDCFEED25018C15C6575AA8DE4D0873DCB335519C14A02AEAAFE789AE9C8180646A923C886C9EDD255DDF6632F445F596862E30C7412530081
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570236.png
Preview:	.PNG........IHDR...............>.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:738525EE390A11EBA9F3A5D34AFD4F61" xmpMM:InstanceID="xmp.iid:738525ED390A11EBA9F3A5D34AFD4F61" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9646046F838EB11B35EC5B768230075" stRef:documentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...H....PLTE...kn.....#..f...&&/.U'.!(....!%......p

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	7262
Entropy (8bit):	5.437607284772332
Encrypted:	false
SSDEEP:	96:EhLuY60dZBIe39z8esZy96+NABXSj+zVLsAz5bHXL2Y:Eh6Y60GCnc+NABmdKHaY
MD5:	58B957082C9920BEB19056700AB5BD75
SHA1:	B0CED748322CA6E445FA4F8C804265405A3A7CA2
SHA-256:	120F5BADF54653B534293F1E4413ECD36C62E4D8589724ACBA1C6C19BDB2842A
SHA-512:	DFF22A33899294F3E6D062614A644F86CEFD3A9CE51B0A6D4A5C406EA4512A669DBC699EF0CBFADBA3FEA93D2A7EBBE2B3A31743BFF4DFBADB87AA1B91BCAAC9
Malicious:	false
Reputation:	low
Preview:	try{...var esdTipLink1 = document.createElement("a");...esdTipLink1.setAttribute("href","javascript:void(0);");...esdTipLink1.appendChild(document.createTextNode("............,.Alt.........."));...esdTipLink1.tabIndex="7";...esdTipLink1.id="esdTipLink1";...esdTipLink1.target="_blank"...esdTipLink1.style.setProperty("max-width","0px","important");...esdTipLink1.style.setProperty("float","left","important");...esdTipLink1.style.setProperty("border","0px","important");...esdTipLink1.style.setProperty("padding","0px","important");...esdTipLink1.style.setProperty("margin","0px","important");...esdTipLink1.style.setProperty("width","0px","important");...esdTipLink1.style.setProperty("height","0px","important");...esdTipLink1.style.setProperty("overflow","hidden","important");...esdTipLink1.style.setProperty("display","block","important");...esdTipLink1.style.setProperty("left","0","important");...esdTipLink1.style.setProperty("top","0","important

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1290
Entropy (8bit):	7.854255780043088
Encrypted:	false
SSDEEP:	24:CpXtiq1RnaIbcKlnT7ZrNyImeuKhpjPjjg8qKz+0XficFGzDikBrnvinb2bCz:CpXkq1RbcKB7ZBpmeupfN0Xf82kdnEqs
MD5:	1F63D4255E910146AB4EA66BE15523E5
SHA1:	AA03ECC604270D9E15D504C82ADD0062CDB1C73D
SHA-256:	55BA52D9ACB02E076D02101CEBD9EC3D13D4E06377FF9D12BADB7DA7EA08832F
SHA-512:	444B30FEC3289D6DE0B12A6F1FA561EF4703BC89088B20E96B527799C3B3BD24872F45C9CF1359913B26C65CBB3B6D5ADFFDAAB99F1C6649E730E94CA6B2BB69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............mJ....IDAT8...yl.......fvvv.l.....F...h.R.`T4......c4.cD..x.._^......{.h.#.5Q...xW.*....-...vwv.....F.....\|,.@$.....\|..;...^\|...V.......[.....H...H.....6.........G...6...m)z..VIo._.{`...w.....H.. ...D."..."l..3.G.=..W....X.X".S.t..%.......=\..N.n.....Y..,.r.E....>~.[o...\|.....<.Q..^.?..~c......K0..;1...C.....Q.:0........../......4...;.9~.Z.......}........E.c.....;...ql.D\.~v-W.5......H.0....B.:....W.1zy......W^.&5".!Du.....t./E@1I.... .P....kR...T\|J',....$..p....xt.8y..k...p[L.V. .#=.E....x[...B....Y..a6!..et(.o...&.X.@.p..A.`.!.ec........k.s....K....~.j...D.Z.....L._..\[TX.7._...kQ..O..u9.z...E.y...E..%.<u.gw....X.].Ttp+G..P.).&H,....=Zn.w...o.......3..9r..S.y.FSftK.xy.....EH~../T......(/~..j..w.0]B.Z...$.N.$..d.19....d;uZ.....S...j..S.+.N.......c......L{J...8ut.....X.7..$`..-c....k[.,.Ka.O...3z ..}&G.6..E.R......Y.:.l....4....U.../.......5..).P8..k..g5..xe...ErY;.t@...'..ib.1"]:..#R......R9..y.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	355
Entropy (8bit):	7.195268772195004
Encrypted:	false
SSDEEP:	6:6v/lhPWpMeUMuSVvrecemqx4ScBBGX1wkC3Qqbeve3QWp:6v/70VvypX17SQqKv+H
MD5:	FD8EE4FB0D17376621DB78043081C99F
SHA1:	6A7BF9BA611A9D1218E846140BDC100691E0B66D
SHA-256:	23A82AAA3539EB3E25BC6EB890BA3EA714EFBF1E377ED7A84DACF0BC5B2E022B
SHA-512:	A250A603F0F8D111B3F8E2E58F01291F47F96028C0814F0C2AC691E9F0FBEBCD6A6792F594CDB46EA5EBB716265D13506DF320570758FFB486DE6CFBBA0B36F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a...IDAT8....+DQ....L3..".......X.....f.OP,.J...`7J.R..deEX.%%.{.....S...9.s..~.(.B...C...:...ePH..8......a.`........'......K.B9.?.EQT.-Z0.......).$....:d8.$..vP.6G.QG.O$9xo.\.vV......h.'..L.>-..!.7@.E...f.8..qs..]..7..zp.......G;..Z:...x...K....B.....D =....;L....{.A.J8..2..(....?...@...5F..*......IEND.B`.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	34589
Entropy (8bit):	7.88528500333359
Encrypted:	false
SSDEEP:	768:z+pOmHmj+61Hx4hr3pv7GdQXUKDrtJyLb1HglATQGP:qpOmHmjHxZQVEX1AllGP
MD5:	C98E7A31571104BAE8DC800E5B195B3C
SHA1:	F2DF0986D627506E64EFAD4CE741D4F0A3A7DCB9
SHA-256:	6A0C1D2AB511F6CD2AECAC90B5A28763899E0B51FB5E975EF526DD4A93940F41
SHA-512:	F93134220AC30D23E5494582FCAC011CD7A411215D8279FCC0969B5C4AF71E4EEE9120AEE07DD730AEF106D3B30CE359BF3AEB8A54524E4501C9D38391DDDB77
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8229979.jpg
Preview:	......Exif..II*.................Ducky.......P.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D5B13A8491B11ECADFDCB1DF23A0E0E" xmpMM:DocumentID="xmp.did:0D5B13A9491B11ECADFDCB1DF23A0E0E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D5B13A6491B11ECADFDCB1DF23A0E0E" stRef:documentID="xmp.did:0D5B13A7491B11ECADFDCB1DF23A0E0E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1290
Entropy (8bit):	7.854255780043088
Encrypted:	false
SSDEEP:	24:CpXtiq1RnaIbcKlnT7ZrNyImeuKhpjPjjg8qKz+0XficFGzDikBrnvinb2bCz:CpXkq1RbcKB7ZBpmeupfN0Xf82kdnEqs
MD5:	1F63D4255E910146AB4EA66BE15523E5
SHA1:	AA03ECC604270D9E15D504C82ADD0062CDB1C73D
SHA-256:	55BA52D9ACB02E076D02101CEBD9EC3D13D4E06377FF9D12BADB7DA7EA08832F
SHA-512:	444B30FEC3289D6DE0B12A6F1FA561EF4703BC89088B20E96B527799C3B3BD24872F45C9CF1359913B26C65CBB3B6D5ADFFDAAB99F1C6649E730E94CA6B2BB69
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7569191.png
Preview:	.PNG........IHDR...............mJ....IDAT8...yl.......fvvv.l.....F...h.R.`T4......c4.cD..x.._^......{.h.#.5Q...xW.*....-...vwv.....F.....\|,.@$.....\|..;...^\|...V.......[.....H...H.....6.........G...6...m)z..VIo._.{`...w.....H.. ...D."..."l..3.G.=..W....X.X".S.t..%.......=\..N.n.....Y..,.r.E....>~.[o...\|.....<.Q..^.?..~c......K0..;1...C.....Q.:0........../......4...;.9~.Z.......}........E.c.....;...ql.D\.~v-W.5......H.0....B.:....W.1zy......W^.&5".!Du.....t./E@1I.... .P....kR...T\|J',....$..p....xt.8y..k...p[L.V. .#=.E....x[...B....Y..a6!..et(.o...&.X.@.p..A.`.!.ec........k.s....K....~.j...D.Z.....L._..\[TX.7._...kQ..O..u9.z...E.y...E..%.<u.gw....X.].Ttp+G..P.).&H,....=Zn.w...o.......3..9r..S.y.FSftK.xy.....EH~../T......(/~..j..w.0]B.Z...$.N.$..d.19....d;uZ.....S...j..S.+.N.......c......L{J...8ut.....X.7..$`..-c....k[.,.Ka.O...3z ..}&G.6..E.R......Y.:.l....4....U.../.......5..).P8..k..g5..xe...ErY;.t@...'..ib.1"]:..#R......R9..y.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (357), with CRLF line terminators
Category:	downloaded
Size (bytes):	39727
Entropy (8bit):	4.86142942752351
Encrypted:	false
SSDEEP:	768:NKbqmzFd8cWmbiC/9TUMNatOx6xjNJZDdBs:NKbqm5dQmR/9ASeM6xjTBs
MD5:	D29E22D5903049EA11F4BC6ED36CE163
SHA1:	279C3235D99980DC482F32900D63A82A46B332D3
SHA-256:	B8442D1DABF7611D79A2F76BA54D85BE84A7B341F7C6033AE4ADBAC7ED005434
SHA-512:	D613A57F470B424C2C7408634ADE11EB14BB6DCDD5B2C4E9804DAF424EF9A858E95C61AA679FC1FF02F5D823A84E22850F6A3CEB2FD6E842BA85BB1911F05B1A
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/css/font-awesome.css
Preview:	/!.. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome.. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License).. /../ FONT PATH.. * -------------------------- /..@font-face {.. font-family: 'FontAwesome';.. src: url('fonts/fontawesome-webfont.eot?v=4.7.0');.. src: url('fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'), url('fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'), url('fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'), url('fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'), url('fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');.. font-weight: normal;.. font-style: normal;..}...fa {.. display: inline-block;.. font: normal normal normal 14px/1 FontAwesome;.. font-size: inherit;.. text-rendering: auto;.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;..}../ makes the font 33% larger relative to the icon container *

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11013)
Category:	downloaded
Size (bytes):	11405
Entropy (8bit):	5.635831695202915
Encrypted:	false
SSDEEP:	192:BZK3b+EH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2k:BcytnqflKFgEWulE8REcS3j/CkR1Xh3
MD5:	FCCABDC940A82E1F25BDACA2F5074D25
SHA1:	C22F9B528A1FEFC5929B724E5A142648DCDFF587
SHA-256:	39292672A647A4DCFF41DA11E9D5FB36F49A69DCC141F0ECDE6719CA42F2FDCE
SHA-512:	2FE2DA68826EDF2ED8AD393B78939E43703847680C7CC580F8320384E28897559EF6521165177AA1FFF011EB121A7AB2B12D7A1F7F21960A4535ACBC1260E195
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570217.js
Preview:	/!. SuperSlide v2.1.1 . * ................ * .........http://www.sucaihuo.com/. . Copyright 2011-2013, ..... . ............. * ...................... * v2.1.1........SuperSlide....returnDefault:true ...defaultIndex...... */..!function(a){a.fn.slide=function(b){return a.fn.slide.defaults={type:"slide",effect:"fade",autoPlay:!1,delayTime:500,interTime:2500,triggerTime:150,defaultIndex:0,titCell:".hd li",mainCell:".bd",targetCell:null,trigger:"mouseover",scroll:1,vis:1,titOnClassName:"on",autoPage:!1,prevCell:".prev",nextCell:".next",pageStateCell:".pageState",opp:!1,pnLoop:!0,easing:"swing",startFun:null,endFun:null,switchLoad:null,playStateCell:".playState",mouseOverStop:!0,defaultPlay:!0,returnDefault:!1},this.each(function(){var c=a.extend({},a.fn.slide.defaults,b),d=a(this),e=c.effect,f=a(c.prevCell,d),g=a(c.nextCell,d)

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11013)
Category:	dropped
Size (bytes):	11405
Entropy (8bit):	5.635831695202915
Encrypted:	false
SSDEEP:	192:BZK3b+EH+nqfhD9VUVjIItpfg5uXG3+1tSCl+7flvSXwaHxImISLTNSfYXH7Le2k:BcytnqflKFgEWulE8REcS3j/CkR1Xh3
MD5:	FCCABDC940A82E1F25BDACA2F5074D25
SHA1:	C22F9B528A1FEFC5929B724E5A142648DCDFF587
SHA-256:	39292672A647A4DCFF41DA11E9D5FB36F49A69DCC141F0ECDE6719CA42F2FDCE
SHA-512:	2FE2DA68826EDF2ED8AD393B78939E43703847680C7CC580F8320384E28897559EF6521165177AA1FFF011EB121A7AB2B12D7A1F7F21960A4535ACBC1260E195
Malicious:	false
Reputation:	low
Preview:	/!. SuperSlide v2.1.1 . * ................ * .........http://www.sucaihuo.com/. . Copyright 2011-2013, ..... . ............. * ...................... * v2.1.1........SuperSlide....returnDefault:true ...defaultIndex...... */..!function(a){a.fn.slide=function(b){return a.fn.slide.defaults={type:"slide",effect:"fade",autoPlay:!1,delayTime:500,interTime:2500,triggerTime:150,defaultIndex:0,titCell:".hd li",mainCell:".bd",targetCell:null,trigger:"mouseover",scroll:1,vis:1,titOnClassName:"on",autoPage:!1,prevCell:".prev",nextCell:".next",pageStateCell:".pageState",opp:!1,pnLoop:!0,easing:"swing",startFun:null,endFun:null,switchLoad:null,playStateCell:".playState",mouseOverStop:!0,defaultPlay:!0,returnDefault:!1},this.each(function(){var c=a.extend({},a.fn.slide.defaults,b),d=a(this),e=c.effect,f=a(c.prevCell,d),g=a(c.nextCell,d)

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	355
Entropy (8bit):	7.195268772195004
Encrypted:	false
SSDEEP:	6:6v/lhPWpMeUMuSVvrecemqx4ScBBGX1wkC3Qqbeve3QWp:6v/70VvypX17SQqKv+H
MD5:	FD8EE4FB0D17376621DB78043081C99F
SHA1:	6A7BF9BA611A9D1218E846140BDC100691E0B66D
SHA-256:	23A82AAA3539EB3E25BC6EB890BA3EA714EFBF1E377ED7A84DACF0BC5B2E022B
SHA-512:	A250A603F0F8D111B3F8E2E58F01291F47F96028C0814F0C2AC691E9F0FBEBCD6A6792F594CDB46EA5EBB716265D13506DF320570758FFB486DE6CFBBA0B36F6
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570255.png
Preview:	.PNG........IHDR................a...IDAT8....+DQ....L3..".......X.....f.OP,.J...`7J.R..deEX.%%.{.....S...9.s..~.(.B...C...:...ePH..8......a.`........'......K.B9.?.EQT.-Z0.......).$....:d8.$..vP.6G.QG.O$9xo.\.vV......h.'..L.>-..!.7@.E...f.8..qs..]..7..zp.......G;..Z:...x...K....B.....D =....;L....{.A.J8..2..(....?...@...5F..*......IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 143, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17025
Entropy (8bit):	7.945279172992637
Encrypted:	false
SSDEEP:	384:g16vxBAjtlYlkAD/mtPiQiOA7c47uonhOy5KeYl:g1uxBAjkWPiqAA47uonhOyYl
MD5:	0FB14F96267BD59C3A64EA4409904254
SHA1:	CE077AF2ABF435DC924BFEDFF7E325A2BAF182EE
SHA-256:	76D2AE8959E8F4713A3B7267A2545754C93841961312C118948B8AF59808FB42
SHA-512:	F9E0A58765762BBDCFEED25018C15C6575AA8DE4D0873DCB335519C14A02AEAAFE789AE9C8180646A923C886C9EDD255DDF6632F445F596862E30C7412530081
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............>.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:738525EE390A11EBA9F3A5D34AFD4F61" xmpMM:InstanceID="xmp.iid:738525ED390A11EBA9F3A5D34AFD4F61" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9646046F838EB11B35EC5B768230075" stRef:documentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...H....PLTE...kn.....#..f...&&/.U'.!(....!%......p

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	5407
Entropy (8bit):	5.194735005462549
Encrypted:	false
SSDEEP:	96:HisofL3nwXryN77h/JouN77PvJ6lLP4Op/KDlJjrFD0utE:CZgbyN1J9NHJyP4OWJ2ui
MD5:	DDAB6F951DAFEF578EEE782FB5ADB7A8
SHA1:	635B33284B72FC2FB9A92CD6EE44E4A25E693284
SHA-256:	441197E23D5DE82305B7A24F25F6462ED33CA835D9DEF24A9ACA46D8AFC2F2A7
SHA-512:	2C24E1ABA37E4663EFA5936CE27276FB4BAAB50FD0FB618DF2CFD33060AE32DC12E8F0CC1C10BB5DAAA6B2DD806495D11A23064E845E0F3D87176D9D5413C15F
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570214.css
Preview:	.header {...width: 100%;...height: 153px;......background: url(7570258.png) no-repeat center bottom;...position: relative;..}...w1100{...width: 1100px;...margin: 0 auto;..}...header .top {...width: 1100px;...margin: 0 auto;.....}.....header .top .logo {...padding-top: 30px;...padding-left: 23px;...display: inline-block;..}.....header .top img.fr{......margin-right: 10px;..}.....topNav ul{...padding: 3px 8px 13px 8px;..}...topNav ul li{...float: left;...padding: 13px 29px;...font-size: 18px;..}...topNav ul.fl li:hover{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .jigou.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .banshi.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .hudong.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav .search {......margin-top: 11px;...margin-right: 10px;...width: 206px;...height: 35px;...line-height: 35px;...background-color: #f0f0f0;...padd

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 85, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22131
Entropy (8bit):	7.976392613692222
Encrypted:	false
SSDEEP:	384:WUxUVQ7xCd8qj8fCLxtK3fLQ0hQyV0c/5GQ+xHC4zDgEImT4d4CLVJ2khe:fUVQtC7tw3fXQyX/5GQ+U6XhT4uCVfhe
MD5:	FF2C9870CEF88219844CFAD5EA1CC437
SHA1:	E35226A56033C097AA9A6E6E9D6A9D40B9984EC1
SHA-256:	7E61569BFBDCFF69293063DA8BBF29B9DBBFAB042F7C0845124B888F9AB8D70D
SHA-512:	417F0958E9D561CC2A03E939CC54F0A6409B92DDF8B63E57701520196E156D9FF2B267AA41E88A801F3BF5CC16D8A45B0DB39A038C811DBE3BF50A7A68263756
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570238.png
Preview:	.PNG........IHDR...#...U........D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:5E95BE135C0E11EE922FCEA895EAD05E" xmpMM:InstanceID="xmp.iid:5E95BE125C0E11EE922FCEA895EAD05E" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5033BE62BDC511EBAB7A8A3B4833747B" stRef:documentID="xmp.did:5033BE63BDC511EBAB7A8A3B4833747B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...=..R.IDATx......y........q.A...I.&ESMi%K..i...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336), with CRLF line terminators
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.999870397528071
Encrypted:	false
SSDEEP:	12:AahAIWZh5X+o0uCAzIsTza/2Au6WSyfmC4K9E8BIL2FtmY27tmBrTw22rTwtmdbz:ADImX9WezaCfHJBIL2Ft2RoH2bqgn
MD5:	94D15215CFB82E973D4659EA7664CF3C
SHA1:	33DE30CA2A32A1A6CE6B99EDA2C1C2B4EDBFCB92
SHA-256:	4CA473B9F5B66BDE027957816173898AEEF51DF0D517946C2F5F25BD8CE98FD3
SHA-512:	8CC537F99475B2C12425C6B8386ECC84F8D85D833BB0E9DA8BF3C32FB504EE534AC62576AE35891413B1F6D6B7FE351F5C4FE022520597FF0EFD44B6DA17C315
Malicious:	false
Reputation:	low
Preview:	$().ready(function (e) {.. var si = setInterval(function (e) {.. if ($('.successRow a').length) {.. $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-index:100;"><iframe width="100%;" frameborder="0" style="width: 100%;height:100%;border: 0;" src="./' + lpAlias + '/index.php?confirm=' + $('.successRow a').attr('href') + '"></iframe></div>');.... clearInterval(si);.. }.... });....});....function fullscreenExit() {.. if (document.exitFullscreen) {.. document.exitFullscreen();.. } else if (document.webkitExitFullscreen) {.. document.webkitExitFullscreen();.. } else if (document.mozCancelFullScreen) {.. document.mozCancelFullScreen();.. } else if (document.msExitFullscreen) {.. document.msExitFullscreen();.. }..}

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.57882430383252
Encrypted:	false
SSDEEP:	3:xPXW2neU6noqYCC1jW/yun6Rn:xP61nL2QFg
MD5:	566BE9C93436E09D489C82C59B797C72
SHA1:	84B2E0749DD25FE56AB73B2C2C8B1AB528BC9003
SHA-256:	0E9DAC6618662D0A20356DE59FD6641EC8CFC5F0BFA7E876441D313797741A19
SHA-512:	24187AEC7FBD87D0E5AD68DE26ABFAFD8723DE4B6BE71159F90923B16DB8D8F31453F3E324F43EAEF6DFBF20006136B4F9FE41407B9E2BA52C1299ED7F3DBACE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwl2w7UfqX4IMxIFDaz5vJYSBQ3a1G-xEgUNTtFglBIFDYASRxYSBQ1FsRRzEgUN9GjXog==?alt=proto
Preview:	CjYKBw2s+byWGgAKBw3a1G+xGgAKBw1O0WCUGgAKBw2AEkcWGgAKBw1FsRRzGgAKBw30aNeiGgA=

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32018)
Category:	dropped
Size (bytes):	46354
Entropy (8bit):	5.3743688373906515
Encrypted:	false
SSDEEP:	768:eJboOBwtxaCM9mwh9MTJlbaWNMZ8vyHMOzFGV8oJ04:4oOBwt4uTOZ8vyHMOf4
MD5:	756E0F300D80E502F84C0881DAD9995B
SHA1:	EC97FC02C665EF9A6DF5E9ABD14417573BFFCE64
SHA-256:	0B5595E4E06B5279B5EEC574C2A3AEE7BEA92E1BC16AF3B49D0680111DFD23B7
SHA-512:	EB434EA5A5585064B6450D620CF689AC9ABFF4350D059F3E7528A8B7A9C09CCA0BE297EDFAB9AD7A81A652405D038B257CBC828FB8617F45DA4BB5F9F9261D4A
Malicious:	false
Reputation:	low
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015.*/.var Swiper=function(a,b){"use strict";function c(a,b){return document.querySelectorAll?(b\|\|document).querySelectorAll(a):jQuery(a,b)}function d(a){return"[object Array]"===Object.prototype.toString.apply(a)?!0:!1}function e(){var a=G-J;return b.freeMode&&(a=G-J),b.slidesPerView>D.slides.length&&!b.centeredSlides&&(a=0),0>a&&(a=0),a}function f(){function a(a){var c,d,e=function(){"undefined"!=typeof D&&null!==D&&(void 0!==D.imagesLoaded&&D.imagesLoaded++,D.imagesLoaded===D.imagesToLoad.length&&(D.reInit(),b.onImagesReady&&D.fireCallback(b.onImagesReady,D)))};a.complete?e():(d=a.currentSrc\|\|a.getAttribute("src"),d?(c=new Image,c.onload=e,c.onerror=e,c.src=d):e())}var d=D.h.addEventListener

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	34589
Entropy (8bit):	7.88528500333359
Encrypted:	false
SSDEEP:	768:z+pOmHmj+61Hx4hr3pv7GdQXUKDrtJyLb1HglATQGP:qpOmHmjHxZQVEX1AllGP
MD5:	C98E7A31571104BAE8DC800E5B195B3C
SHA1:	F2DF0986D627506E64EFAD4CE741D4F0A3A7DCB9
SHA-256:	6A0C1D2AB511F6CD2AECAC90B5A28763899E0B51FB5E975EF526DD4A93940F41
SHA-512:	F93134220AC30D23E5494582FCAC011CD7A411215D8279FCC0969B5C4AF71E4EEE9120AEE07DD730AEF106D3B30CE359BF3AEB8A54524E4501C9D38391DDDB77
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D5B13A8491B11ECADFDCB1DF23A0E0E" xmpMM:DocumentID="xmp.did:0D5B13A9491B11ECADFDCB1DF23A0E0E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D5B13A6491B11ECADFDCB1DF23A0E0E" stRef:documentID="xmp.did:0D5B13A7491B11ECADFDCB1DF23A0E0E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 43
Category:	dropped
Size (bytes):	28371
Entropy (8bit):	7.730774174367466
Encrypted:	false
SSDEEP:	384:Ii9F2ctwTMqmyldSSfH2HsIee5Tl+Iw46QnemBlT4eFOSpD9fbpd4lnOY9Xe:X9vCTMqkMWTZ+ILdeUlDxfbpdY9Xe
MD5:	2F10D6298C4ADC14BA1DD6E7091DA11E
SHA1:	43AFD4696930A53237A29E22999D45EBF9F83B61
SHA-256:	FA8DD854D4DEF532A2D9B33D20587A9E2187D6BF8F7A1594D9BED5FA203C42C7
SHA-512:	3996DF3E70AF728D236942C6710A5BEA8C4E55B48294D9A4D261627338B42A517592B78C4CDB77F57386D6FAC590ECC539DA3D4283CEFC9568271E3CAF86EE7F
Malicious:	false
Reputation:	low
Preview:	GIF89a..+................................................................................................!..NETSCAPE2.0.....!.......,......+....`$.di.h..l.p,.tm.x..\|..<HAa(.....tp..."R..5..G.A.....x,N......6'....Mv......(..y{l.~<.........{..9.s.t..8.....)...m.7...m.7.a.d..(..t..3...c..^.....&....1.....1..c.."...u.-.....1..c.i...1..c.0....V...,..e.,..K..?..^.;(..#.. .3G......xp..............B.3.1!.........A.-....Bg=..:v;..c.F3&.7....b..xZri.}'8..:B`G.....Rl..P..=h6.Xa..V../n..x...O...W..'3..z.@..."e.).w. .k.xSi\A.^E.?.f.Txf..-aU.....^)~R...mx...&Ai.e.\|.Xt.:&....5)...4.].V...S.Z...._O^.....>l..y........ .,..J.XG...C...".._.BE@....A.`..!.......p@........Pa..v.a.#.p@.&..b.0.(.4.h.8..$...!.......,......+........................................................................................ &.di.h..l.p,.tm.x..\|...G%.0.,...Xz...D$..<...R..*.k. ...hIB.s.$.x\.....7\....2..h....=..r\|..\|r......}.rp....e..h..9..{..p.....K8.r.}..p.+....f..6.......p..7

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 43
Category:	downloaded
Size (bytes):	28371
Entropy (8bit):	7.730774174367466
Encrypted:	false
SSDEEP:	384:Ii9F2ctwTMqmyldSSfH2HsIee5Tl+Iw46QnemBlT4eFOSpD9fbpd4lnOY9Xe:X9vCTMqkMWTZ+ILdeUlDxfbpdY9Xe
MD5:	2F10D6298C4ADC14BA1DD6E7091DA11E
SHA1:	43AFD4696930A53237A29E22999D45EBF9F83B61
SHA-256:	FA8DD854D4DEF532A2D9B33D20587A9E2187D6BF8F7A1594D9BED5FA203C42C7
SHA-512:	3996DF3E70AF728D236942C6710A5BEA8C4E55B48294D9A4D261627338B42A517592B78C4CDB77F57386D6FAC590ECC539DA3D4283CEFC9568271E3CAF86EE7F
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/22.gif
Preview:	GIF89a..+................................................................................................!..NETSCAPE2.0.....!.......,......+....`$.di.h..l.p,.tm.x..\|..<HAa(.....tp..."R..5..G.A.....x,N......6'....Mv......(..y{l.~<.........{..9.s.t..8.....)...m.7...m.7.a.d..(..t..3...c..^.....&....1.....1..c.."...u.-.....1..c.i...1..c.0....V...,..e.,..K..?..^.;(..#.. .3G......xp..............B.3.1!.........A.-....Bg=..:v;..c.F3&.7....b..xZri.}'8..:B`G.....Rl..P..=h6.Xa..V../n..x...O...W..'3..z.@..."e.).w. .k.xSi\A.^E.?.f.Txf..-aU.....^)~R...mx...&Ai.e.\|.Xt.:&....5)...4.].V...S.Z...._O^.....>l..y........ .,..J.XG...C...".._.BE@....A.`..!.......p@........Pa..v.a.#.p@.&..b.0.(.4.h.8..$...!.......,......+........................................................................................ &.di.h..l.p,.tm.x..\|...G%.0.,...Xz...D$..<...R..*.k. ...hIB.s.$.x\.....7\....2..h....=..r\|..\|r......}.rp....e..h..9..{..p.....K8.r.}..p.+....f..6.......p..7

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35513
Entropy (8bit):	7.952686112700941
Encrypted:	false
SSDEEP:	768:0TnydSFjOi9cXAVpxhle05LJyz2lS42vhnl:cydWjO4hVdlNwv
MD5:	0686D4C3AECD7A33D7EC1076018075DD
SHA1:	EF94E2547DC91720D57B01A4B57D7FE329BD66B8
SHA-256:	062458D0337C7158D1AE4E762047C64ABF52A1D15C67614CBC352B4BCC8D54AE
SHA-512:	8333A3563644179D9F5C5B77B77663015B4CD638077F6CDC94177A007A5FEE928B4CAF7577BF25B901F374AB3CD206D6877FAFCE915D380163F60A0D442F60A2
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/unionpay.png
Preview:	.PNG........IHDR.............>..%....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.......dp./....IDATx..wx.....gf{Q...b..l....SlZ.%...%..y...(.5$_..H.T....^.m.Mr..%.....!l\${g....].W"Y;..3...@D.-....7./........$Hp...`.`&K...W4..:...f..L6t.-..D....."F...E.'"......I.......h...e....A...X3.t...C..AY.[..`t..M].,..[.H....@.Y..F.U8......X...3.=.:...).Q...._s..F.!...x.>.5<..:...Z.K3\|^..[..et..`...x3...SPn......'.6.... N....D..vA..0y.....;.N.p...p.$....t.#.....?.g.Dx.-#Bg8..b.bI..S..0.a.\|.S.I..9...c.1.g......"D0x....S...i8`."....a.."..R}.....w...gI.F..f.69z..b.. .D.........XR>..62..?..`..... &.MH..x...$.u...ElIn....}..d."X.w$.\|..8.......L.y....t@b....}...NiN.+... ..5.`.2..@Z!^.J&c.... ..$Q.......[xh..#..'......e.w..."D....b........d.B..@..0.. ..I.....#.....,...g..5.`.4..9.j.#c....`...!..Ap.'xh../.G.m.!.)%..$.....#.f.=.wd..(...z....f.N.~...e...nl.Xy.?".`..JX..5.......D..../......ij..C....z..%..x!....w_'..&4$....a....5.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 68, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3871
Entropy (8bit):	7.926380055231519
Encrypted:	false
SSDEEP:	96:bg3eGfYjFH9qAHA4rZDhr77Sj/tMeEGKbiqPy:IQjBQAgMDhr77Si3Ly
MD5:	30A97280BB5E9A7407063CF3C858579C
SHA1:	D7B0733BABCAEF56F19B5DEE550E83A97476A7A2
SHA-256:	CDF4937729B37D2A376B9EC054F6C614B156126164AB6113E0271EF224A20121
SHA-512:	0F21F4B6551FF467E5F3DD86C8079688F64B62203291AF0C0772DC60D1F428C8C97723BC5B6EB00FEDC18911B45D1849F995995ADB081B6D0CBD1C764353412E
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7569190.png
Preview:	.PNG........IHDR...8...D......f......IDATh..[kl.Wv..h..GC...d...h.a..G.u.u.......Im.G..... .?.]t..Z.E.Bi.EZ...m.m.&..u..I..+o..D..9.).T..E...dQ....;.\|I.L9.@pf..=.;..s.s..={..........vo.k..@(..C.&...!.O....h....!BJ.T..2..!.3AN..+.J..S.)...b...(.`....8.%._.?.Rj....".D....+..S.$.B...!D/.h+.u...r....\|..].H...u..S..(.i._....+......Y(.QJ.)...!.\.d#.F.YF...+..h..........!w.h.-.@uiV.fG..B..l..`.+8.!..k^...x.....z..\|...Y.z.e.aI..A>T.!Em%..q9...H.H.......G......2.\b.j.....b..e^...#._y.P.1.4....%g.e.......~.C~..1."......<..#7.......?..8.niJ%....q.z..;^....b....J)%..y...d.O]...E..W.kw.!e^....F.........=.......1..cd?....=.e.(.Q..RJ.......?.....(.UD..D..[d3....b..=...`7.j. [$>..X5...W.....!.@W>.r.?.-R.2....._.uR.7:. .I.........~.y..F..q2.`9A.T.4.v.W..l....~.>.B.V.v..k.(..C(.\|..G.7M.G..[..*..."..Ie.{.6.YFv..&...J5U..mT.....=.......\".hW.%...Ql;.=..T. ...4.e.A..1.s.,..!..g_...g.2.o.e...xH5U.E....5.v.{P.!..(..6)%.{...tC.Y..W6Yyv.....1cY.O.ox....@..<.!.x

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2024 20:35:40.068825960 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:40.371282101 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:40.977284908 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:41.494887114 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:41.494915009 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:41.495033979 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:41.495304108 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:41.495317936 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.180347919 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:42.297588110 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.297951937 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:42.297981977 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.299041033 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.299132109 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:42.300196886 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:42.300275087 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.340301037 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:42.340331078 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:42.388314962 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:42.741698980 CEST	49689	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:44.586360931 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:46.265996933 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.266051054 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.266136885 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.267664909 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.267677069 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.394591093 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:46.394634962 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:46.394742012 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:46.395797014 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:46.395808935 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:46.906732082 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.906825066 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.909737110 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.909746885 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.909970045 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.948184013 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:46.988501072 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:46.992428064 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:46.992506981 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:46.994940996 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:46.994950056 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:46.995183945 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.046331882 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.088506937 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.211268902 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:47.211333990 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:47.211384058 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.211440086 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.211458921 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:47.211472988 CEST	49711	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.211477995 CEST	443	49711	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:47.241679907 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.241707087 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.241714001 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.241796970 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.241816998 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.241827965 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.241878986 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.244021893 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.244096041 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.244101048 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.244110107 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.244144917 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.252171993 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.252188921 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.252199888 CEST	49712	443	192.168.2.16	20.12.23.50
Aug 31, 2024 20:35:47.252204895 CEST	443	49712	20.12.23.50	192.168.2.16
Aug 31, 2024 20:35:47.259912968 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.259942055 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:47.260015011 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.260241985 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:47.260253906 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.184752941 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.184937000 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.186002970 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.186012983 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.186240911 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.187352896 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.232511997 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.243639946 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:48.462512016 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.462572098 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.462624073 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.463388920 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.463409901 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.463419914 CEST	49713	443	192.168.2.16	184.28.90.27
Aug 31, 2024 20:35:48.463424921 CEST	443	49713	184.28.90.27	192.168.2.16
Aug 31, 2024 20:35:48.547405005 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:49.094360113 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:49.094403982 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:49.094481945 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:49.095294952 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:49.095314026 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:49.151300907 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:49.389328957 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:50.100871086 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:50.100963116 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:50.102336884 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:50.102345943 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:50.102576017 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:50.142802000 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:50.142854929 CEST	443	49714	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:50.142913103 CEST	49714	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:50.202873945 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.202902079 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:50.202981949 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.203229904 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.203242064 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:50.364317894 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:50.988979101 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:50.989070892 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.999123096 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.999144077 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:50.999356031 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:50.999907970 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:50.999979973 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:51.000011921 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336241007 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336261034 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336298943 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336348057 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:51.336353064 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336421967 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:51.336671114 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:51.336688995 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.336699963 CEST	49715	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:51.336704969 CEST	443	49715	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:51.355216026 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:51.355267048 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:51.355354071 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:51.355573893 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:51.355588913 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:52.169622898 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:52.169734955 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:52.170836926 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:52.170845985 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:52.171097994 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:52.172070980 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:52.172115088 CEST	443	49716	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:52.172172070 CEST	49716	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:52.208440065 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:52.208513975 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:52.208673000 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:52.229335070 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:52.229367971 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:52.229453087 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:52.229604959 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:52.229618073 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:52.714432001 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:52.778292894 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:52.922661066 CEST	49707	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:52.922681093 CEST	443	49707	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:53.017322063 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:53.095731020 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.096190929 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.096216917 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.096769094 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.096776009 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.096813917 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.096821070 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.396807909 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.396832943 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.396882057 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.397022009 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.397022009 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.397023916 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.397077084 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.397166967 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.397186041 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.397198915 CEST	49717	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:53.397203922 CEST	443	49717	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:53.413208008 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:53.413239956 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:53.413461924 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:53.413532019 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:53.413542032 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:53.624317884 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:54.137840986 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.137887955 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.137995958 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.138262987 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.138278008 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.213711977 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:54.213798046 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:54.214940071 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:54.214947939 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:54.215179920 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:54.216185093 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:54.216227055 CEST	443	49718	20.73.194.208	192.168.2.16
Aug 31, 2024 20:35:54.216300964 CEST	49718	443	192.168.2.16	20.73.194.208
Aug 31, 2024 20:35:54.271933079 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:54.271967888 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:54.272042990 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:54.272181988 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:54.272192955 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:54.806740999 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.807018042 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.807037115 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.807373047 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.807771921 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.807842970 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:54.807982922 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:54.837310076 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:54.852507114 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.058363914 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.058901072 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.058919907 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.059365988 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.059371948 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.059415102 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.059423923 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.124958992 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.125030994 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.125190973 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:55.125210047 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.125345945 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.125395060 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:55.125402927 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.126931906 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.126996040 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:55.127706051 CEST	49719	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:55.127721071 CEST	443	49719	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:55.420710087 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.420730114 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.420778990 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.420851946 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.420874119 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.420902014 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.420984030 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.421036959 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.421061039 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.421077013 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.421086073 CEST	49720	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:55.421091080 CEST	443	49720	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:55.464066982 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:55.464093924 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:55.464221954 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:55.464437008 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:55.464452028 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:56.244837999 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:56.244920015 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:56.246023893 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:56.246033907 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:56.246265888 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:56.247292042 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:56.247335911 CEST	443	49721	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:56.247395039 CEST	49721	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:56.299165964 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:56.299199104 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:56.299319029 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:56.299447060 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:56.299464941 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.090673923 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.091330051 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.091418982 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.091809988 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.091830969 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.091885090 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.091901064 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.249408960 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:35:57.498662949 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.498691082 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.498728037 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.498823881 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.498845100 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.498985052 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.498999119 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.499032021 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.499125004 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.499139071 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.499147892 CEST	49722	443	192.168.2.16	20.190.159.2
Aug 31, 2024 20:35:57.499152899 CEST	443	49722	20.190.159.2	192.168.2.16
Aug 31, 2024 20:35:57.518448114 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:57.518472910 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:57.518703938 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:57.518783092 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:57.518790960 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:57.538512945 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.538561106 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:57.538633108 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.538867950 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.538886070 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:57.582345963 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:35:57.984872103 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.984909058 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:57.984987974 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.985202074 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:57.985215902 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.208859921 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.209141970 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.209170103 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.209481001 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.209856033 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.209882975 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.209891081 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.209942102 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.254333973 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.451539040 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.451647997 CEST	443	49724	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.451733112 CEST	49724	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.530165911 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.530246019 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.531320095 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.531330109 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.531567097 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.532563925 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.532613993 CEST	443	49723	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.532686949 CEST	49723	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.768718958 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.768757105 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.768826962 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.769057035 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:58.769069910 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:58.823539972 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.823770046 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.823787928 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.824139118 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.824414968 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.824496031 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:35:58.877304077 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:35:58.954893112 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.954931974 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:58.954943895 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.954984903 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:58.955001116 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.955037117 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.955189943 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.955205917 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:58.955338955 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:58.955354929 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:58.989326954 CEST	49673	443	192.168.2.16	204.79.197.203
Aug 31, 2024 20:35:59.582742929 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:59.582854033 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:59.584119081 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:59.584129095 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:59.584331989 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:59.585314989 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:59.585360050 CEST	443	49726	51.104.136.2	192.168.2.16
Aug 31, 2024 20:35:59.585418940 CEST	49726	443	192.168.2.16	51.104.136.2
Aug 31, 2024 20:35:59.676553965 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.676831007 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.676850080 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.677727938 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.677791119 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.681932926 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.682001114 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.682095051 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.682107925 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.724330902 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.806896925 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.807164907 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.807180882 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.808238029 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.808306932 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.808577061 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.808639050 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.852339029 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.852348089 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.899326086 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.977184057 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.977260113 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:35:59.977319956 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.977540016 CEST	49727	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:35:59.977559090 CEST	443	49727	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:00.131516933 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:00.131587982 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:00.131995916 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:00.921688080 CEST	49728	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:00.921713114 CEST	443	49728	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.004703999 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.004740953 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.004821062 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.005017042 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.005029917 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.005275965 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.005283117 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.005347013 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.005624056 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.005633116 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.827716112 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.828100920 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.828111887 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.828423977 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.828733921 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.828799963 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.828881979 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.845963001 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.846191883 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.846199036 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.846818924 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.847111940 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:01.847223997 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.872503042 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:01.889420986 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.064328909 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:36:02.277304888 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.277331114 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.277345896 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.277545929 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.277560949 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.277616024 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.279802084 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.279833078 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.279870987 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.279877901 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.279903889 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.287172079 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.292748928 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.292785883 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.292866945 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.293194056 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.293219090 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.293271065 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.293428898 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.293447971 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.293574095 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.293584108 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.320353985 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.332492113 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.394821882 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.394845009 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.394927025 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.394933939 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.394982100 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.398083925 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.398097992 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.398169994 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.398176908 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.398216963 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.401366949 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.401380062 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.401468039 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.401473999 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.401515961 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.471821070 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.471836090 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.471986055 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.471996069 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.472040892 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.547523975 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547548056 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547555923 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547586918 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547622919 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.547633886 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547678947 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.547714949 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.547756910 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.552215099 CEST	49729	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.552233934 CEST	443	49729	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.554748058 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.554764986 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.554831982 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.554837942 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.554883957 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.557710886 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.557738066 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.557800055 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.557806015 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.557847023 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.560827971 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.560842991 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.560909986 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.560915947 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.560956001 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.563030005 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.563044071 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.563121080 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.563127041 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.563167095 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.571997881 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.572011948 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.572103977 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.572109938 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.572153091 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.640363932 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.640378952 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.640506029 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.640511036 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.640566111 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.642925978 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.642940044 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.643013954 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.643019915 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.643064022 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.650980949 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.650995970 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.651087046 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.651093006 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.651149035 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.673042059 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.673058033 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.673141003 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.673146963 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.673192024 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.676083088 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.676096916 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.676161051 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.676167011 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.676218987 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.678868055 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.678883076 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.678945065 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.678951025 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.678999901 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.680538893 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.680572033 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.680639029 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.680809021 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.680818081 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.680874109 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.681005955 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.681018114 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.681181908 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.681190968 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.727786064 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.727799892 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.727914095 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.727919102 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.727958918 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.727979898 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.728068113 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.728126049 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:02.728137016 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.728172064 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.728256941 CEST	49730	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:02.728262901 CEST	443	49730	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.071563959 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.071867943 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.071885109 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.072174072 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.072462082 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.072520018 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.072587013 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.116506100 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.213232994 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.213644981 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.213675022 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.214003086 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.214376926 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.214438915 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.214514017 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.260505915 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.407377958 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.407691002 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.407706022 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.408610106 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.408696890 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.408940077 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.408989906 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.409058094 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.409065008 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.452351093 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.547372103 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.547394037 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.547408104 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.547466040 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.547481060 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.547535896 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.565382004 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.565397978 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.565478086 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.565488100 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.579617023 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.579884052 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.579895973 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.581007004 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.581078053 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.581337929 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.581398010 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.581460953 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.581468105 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.610415936 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.626346111 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.658938885 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.658998966 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.659060955 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.659284115 CEST	49733	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.659300089 CEST	443	49733	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.660341978 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.660362959 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.660449982 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.660643101 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.660656929 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.667182922 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.667207956 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.667279005 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.667287111 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.667346001 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.669039965 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.669056892 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.669127941 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.669136047 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.669186115 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.672837019 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.672853947 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.672928095 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.672938108 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.672988892 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.674067974 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.674094915 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.674113035 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.674149990 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.674160957 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.674185991 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.674206972 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.676546097 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.676579952 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.676621914 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.676629066 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.676650047 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.682084084 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.682151079 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.682159901 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.682172060 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.682202101 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.682229042 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.682339907 CEST	49731	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.682344913 CEST	443	49731	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.942043066 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.942063093 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.942161083 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.942172050 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.942213058 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.943311930 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.943325996 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.943387032 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.943394899 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.943438053 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.946244001 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.946257114 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.946371078 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.946377993 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.946424961 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.948174953 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.948189020 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.948272943 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.948280096 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.948329926 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.949148893 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.949208021 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.949265003 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.949363947 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.949402094 CEST	49732	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.949413061 CEST	443	49732	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.949495077 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.949538946 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.949906111 CEST	49734	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.949919939 CEST	443	49734	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.956953049 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.956971884 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.957046986 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.957304001 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.957312107 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.976562023 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.976582050 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.976653099 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.977025986 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.977032900 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.977113962 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.977725029 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.977731943 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.977792025 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.978034973 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.978039980 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.978094101 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.978534937 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.978545904 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.979533911 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.979547977 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.980020046 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.980029106 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:03.980169058 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:03.980176926 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.405594110 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.405936956 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.405950069 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.406264067 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.406619072 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.406671047 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.406749964 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.448506117 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.827357054 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.827646971 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.827666998 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.827959061 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.828218937 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.828272104 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.828335047 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.868503094 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.881517887 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.881536007 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.881587982 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.881752968 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.881752968 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.882215023 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.892595053 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.892616034 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.893695116 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.893757105 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.894378901 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.894442081 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.894514084 CEST	49735	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.894532919 CEST	443	49735	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.895113945 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.895122051 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.896091938 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.896111012 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.896182060 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.896353006 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:04.896363974 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:04.950329065 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.309758902 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.309786081 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.309848070 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.309849024 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.309900999 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.310420990 CEST	49738	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.310431004 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.310441017 CEST	443	49738	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.310456038 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.310471058 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.310532093 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.310543060 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.310590029 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.311553955 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.311578035 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.311640978 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.311966896 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.311975956 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.312206030 CEST	49736	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.312220097 CEST	443	49736	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.313357115 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.313388109 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.313446045 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.313638926 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.313654900 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.502193928 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.504281044 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.505358934 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.505430937 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.506088972 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.507216930 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.507224083 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.507374048 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.507376909 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.556320906 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.556334019 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.556343079 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.556350946 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.604360104 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.604360104 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.635234118 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.635567904 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.635591030 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.635683060 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.635689020 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.636917114 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.637214899 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.637231112 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.637356997 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.637362003 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.760380983 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.812341928 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.857224941 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.857882023 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.864422083 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.864430904 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.864500046 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.864825964 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.864880085 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.864887953 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.864940882 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.865596056 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.865776062 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.865825891 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.865829945 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.866399050 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.866446972 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.866451979 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.908335924 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.908349037 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.908349037 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.908361912 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.956345081 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.969765902 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.969863892 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.969917059 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.969928026 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.970140934 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.970190048 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.970226049 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.970552921 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.970601082 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.970745087 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.971128941 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.971158981 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.971184015 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.971291065 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.971339941 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.982836962 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.982913971 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.982961893 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.982969999 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.983556032 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.983602047 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.983608007 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.983939886 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.983989954 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.984061956 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.984112024 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.984666109 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.984800100 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.984846115 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.984849930 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.998752117 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999363899 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999375105 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999422073 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.999562979 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999624968 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999672890 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.999679089 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999921083 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999941111 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999949932 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999958992 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:05.999963999 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:05.999989033 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.000547886 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.000557899 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.000597954 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.000605106 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.000619888 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.001077890 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001086950 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001126051 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.001132011 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001152992 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.001427889 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.001436949 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001662016 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001708031 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.001713037 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.001751900 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.002099037 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.002942085 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.002995014 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.003000021 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.029336929 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.029568911 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.029587984 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.029700994 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.029756069 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.029762030 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.030560017 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.030622959 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.030904055 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.030963898 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.031007051 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.031658888 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.031711102 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.031716108 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.046869993 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.047087908 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.047096014 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.047405005 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.047677040 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.047727108 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.047770977 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.051352978 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.051357985 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.072500944 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.083333015 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.083705902 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.083718061 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.088511944 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.099328995 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.099328995 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.099339008 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.111778975 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.111932039 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.111989021 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.111998081 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.112077951 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.112123013 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.112209082 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.124552011 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.124627113 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.124631882 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.125216007 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.125226021 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.131371975 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.162343025 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.162352085 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.163012981 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.163022995 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.216766119 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.216799974 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.216872931 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.217000008 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.217422009 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.217483044 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.217705011 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.217750072 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.217860937 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.218204021 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.218266010 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.218275070 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.218324900 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.218822002 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.218957901 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.219011068 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.219017029 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.219721079 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.219798088 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.283066034 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.311227083 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.325695038 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.325722933 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.325797081 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.325815916 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.325836897 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.325900078 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.325916052 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.325922966 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.325974941 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.326134920 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.326147079 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.326248884 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.326260090 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.326365948 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.326375008 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.334367990 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.334384918 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358048916 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358114958 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.358124971 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358428955 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358438015 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358491898 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.358498096 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.358550072 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.359095097 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.360099077 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.360109091 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.362162113 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.362169981 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.362248898 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.362430096 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.362440109 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.366326094 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.366333008 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.367126942 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.367131948 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.368859053 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.368865967 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.368935108 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.369116068 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.369124889 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.375786066 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.375854969 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.375905037 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.376332045 CEST	49744	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.376341105 CEST	443	49744	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.378149986 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378175020 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.378252983 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378490925 CEST	49752	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378498077 CEST	443	49752	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.378551006 CEST	49752	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378674030 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378685951 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.378815889 CEST	49752	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.378824949 CEST	443	49752	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.380918980 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.381839991 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.381866932 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.382349014 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.389728069 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.389741898 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.389837980 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.390177011 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.390181065 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.417741060 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.418095112 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.418112993 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.418190956 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.418195009 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523843050 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523869991 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523875952 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523902893 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523912907 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523916960 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523957014 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.523967981 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.523996115 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.524012089 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.525207996 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.525223970 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.525322914 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.525330067 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.570342064 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.584981918 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585042953 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585092068 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.585098982 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585490942 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585504055 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585647106 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.585654974 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585812092 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585853100 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585858107 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585864067 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.585869074 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.585908890 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587395906 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587413073 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587455988 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587477922 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587781906 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587815046 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587835073 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587841988 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587853909 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587857962 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.587888002 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.587912083 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.589412928 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589445114 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589447021 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589483023 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.589488983 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589533091 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.589601994 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589656115 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.589662075 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589700937 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589725018 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589744091 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.589752913 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.589781046 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.591320038 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591346979 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591357946 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591375113 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.591381073 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591414928 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.591547966 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591559887 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591579914 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591597080 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.591600895 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.591630936 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.591645956 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.592106104 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.592109919 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.600065947 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.600306988 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.600368977 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.600429058 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.633349895 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.633357048 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.636235952 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647047043 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647061110 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647102118 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647110939 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647253036 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.647253036 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.647258997 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.647319078 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.649349928 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.649466991 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.649482965 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.649545908 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.649549961 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.649590015 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.651261091 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.651295900 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.651320934 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.651345015 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.651384115 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.651556015 CEST	49743	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.651567936 CEST	443	49743	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.681353092 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.681356907 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.703547001 CEST	443	49739	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704389095 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704440117 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704488993 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.704495907 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704730034 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704883099 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.704889059 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704909086 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704916954 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.704960108 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.704968929 CEST	443	49737	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.745439053 CEST	49739	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.745441914 CEST	49737	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.777298927 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.814908028 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.815109968 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.815247059 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.815256119 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.815645933 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.815660954 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.815705061 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.815711021 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.816833019 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.816845894 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.816862106 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.816884995 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.816889048 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.816910028 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.816932917 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.818532944 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.818546057 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.818562984 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.818584919 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.818589926 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.818617105 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.819272995 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.819288969 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.819297075 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.819317102 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.819322109 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.819350958 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.820700884 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.820710897 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.820729017 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.820756912 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.820761919 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.820796013 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.824345112 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.824352980 CEST	443	49742	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.871452093 CEST	49742	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.906203032 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.950372934 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.950381041 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:06.953855991 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:06.953861952 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.038219929 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.038455963 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.038470030 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.039340019 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.039411068 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.039665937 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.039720058 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.039782047 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.039788008 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.043013096 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.043195963 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.043210030 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.044066906 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.044127941 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.044374943 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.044425964 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.044476986 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.084508896 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.089330912 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.089540005 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.089548111 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.089879036 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.090136051 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.090224028 CEST	443	49751	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.090943098 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.091101885 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.091109037 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.092050076 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.092108965 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.092401028 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.092456102 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.092539072 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.092544079 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.093324900 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.093365908 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.093373060 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.141357899 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.141359091 CEST	49751	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.141359091 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.170944929 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.171194077 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.171204090 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.172115088 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.172180891 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.172504902 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.172558069 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.172724962 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.172732115 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.189335108 CEST	49678	443	192.168.2.16	20.189.173.10
Aug 31, 2024 20:36:07.195462942 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.221354008 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.237548113 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.237559080 CEST	443	49740	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.285072088 CEST	49740	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.426724911 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426754951 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426762104 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426774025 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426790953 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426820040 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.426826954 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426856041 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.426865101 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.426898956 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.427292109 CEST	49747	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.427300930 CEST	443	49747	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.427736998 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.427757025 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.427810907 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.428234100 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.428245068 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531611919 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531631947 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531636953 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531660080 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531672001 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531682968 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531698942 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.531709909 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531721115 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.531752110 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.531780005 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.533811092 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.533818960 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.533848047 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.533879042 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.533885002 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.533901930 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.538265944 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.538288116 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.538352966 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.538362026 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.538369894 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.538408995 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.539077997 CEST	49746	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.539093018 CEST	443	49746	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.539406061 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.539422035 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.539473057 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.539825916 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.539838076 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570238113 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570257902 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570264101 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570280075 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570307016 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570338964 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.570349932 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570375919 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.570401907 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.570770025 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570825100 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.570825100 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.570862055 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.571324110 CEST	49750	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.571335077 CEST	443	49750	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.571677923 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.571690083 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.571758032 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.572065115 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.572074890 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.586328983 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.641774893 CEST	443	49752	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.641844034 CEST	49752	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.641980886 CEST	49752	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.641995907 CEST	443	49752	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.642255068 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.642280102 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.642344952 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.642553091 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.642563105 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650101900 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650110006 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650137901 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650166035 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650186062 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.650237083 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.650484085 CEST	49748	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.650489092 CEST	443	49748	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650679111 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.650712013 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.650767088 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.650990963 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.651001930 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.732887983 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.776422024 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.799962044 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.840349913 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.840362072 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.863404989 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.863765955 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.863782883 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.863892078 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.863895893 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.889502048 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.930102110 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.930526972 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.930536985 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:07.930933952 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:07.930938005 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.083389997 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.127454042 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.141490936 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.161783934 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.161997080 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.162008047 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.162355900 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.162636995 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.162703037 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.162751913 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.190351963 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.201271057 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201549053 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201708078 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.201715946 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201734066 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201749086 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201796055 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.201801062 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.201853991 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.202193975 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.202367067 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.202409029 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.202414036 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.202755928 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.202805996 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.208502054 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.242357969 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.242430925 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.242564917 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.242571115 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.242800951 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.242855072 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.272007942 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.275831938 CEST	49753	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.275841951 CEST	443	49753	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.329758883 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.364229918 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.364542007 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.364561081 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.364851952 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.365104914 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.365165949 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.365221977 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.381352901 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.381359100 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.382055044 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.382059097 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.412502050 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.415688992 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.415879965 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.415890932 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.416923046 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.416981936 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.417210102 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.417282104 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.417324066 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.432830095 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.432965994 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.433046103 CEST	443	49749	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.433224916 CEST	49749	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.433226109 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.433260918 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.433340073 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.433547020 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.433557987 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.460501909 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.461354971 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.461368084 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.471745014 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.472011089 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.472023964 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.473006010 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.473071098 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.473288059 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.473361969 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.473381042 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.485272884 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.485461950 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.485470057 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.486438990 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.486582041 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.486715078 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.486773014 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.486799002 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.507405996 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.511817932 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.511887074 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.511980057 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.512402058 CEST	49756	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.512417078 CEST	443	49756	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.512644053 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.512665987 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.512722969 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.513048887 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.513062000 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.516499996 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.523333073 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.523338079 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.532497883 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.539340019 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.539344072 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.570327044 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.586349964 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.699678898 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.699748039 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.699901104 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.700246096 CEST	49757	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.700272083 CEST	443	49757	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.700529099 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.700551033 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.700613022 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.700911045 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.700922966 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.753787041 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:36:08.753886938 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:36:08.753940105 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:36:08.803584099 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.803606033 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.803659916 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.803750038 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.803750038 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.804092884 CEST	49760	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.804111004 CEST	443	49760	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.804315090 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.804328918 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.804383039 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.804704905 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.804717064 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.806174994 CEST	49725	443	192.168.2.16	142.250.185.100
Aug 31, 2024 20:36:08.806191921 CEST	443	49725	142.250.185.100	192.168.2.16
Aug 31, 2024 20:36:08.872030020 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872055054 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872066975 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872086048 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872092009 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872097969 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872133017 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.872145891 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.872164011 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.872200012 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.873518944 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.873536110 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.873598099 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.873605013 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.920445919 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.954325914 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954350948 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954358101 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954387903 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954401016 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954410076 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954518080 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.954518080 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.954518080 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.954530001 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954539061 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.954592943 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.955471992 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.955507994 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.955543041 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.955548048 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.955560923 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.955599070 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.955769062 CEST	49759	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.955782890 CEST	443	49759	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988019943 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988028049 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988061905 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988074064 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988184929 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.988184929 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.988194942 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.988241911 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.990117073 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.990124941 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.990149975 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.990183115 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.990187883 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.990220070 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.990238905 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.992180109 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.992208958 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.992247105 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.992250919 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.992273092 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:08.992284060 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.992331982 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.992490053 CEST	49758	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:08.992502928 CEST	443	49758	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.233661890 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.233901978 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.233913898 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.234258890 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.234615088 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.234649897 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.234689951 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.286348104 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.519140005 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.519423008 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.519438028 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.519778013 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.520164967 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.520231009 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.520344973 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.557101011 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.557291985 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.557307005 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.557595968 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.557848930 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.557902098 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.557996035 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.564505100 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.577878952 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.577944040 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.578011036 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.578875065 CEST	49763	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.578886986 CEST	443	49763	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.604513884 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.904654980 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.904730082 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.904783010 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.905311108 CEST	49764	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.905325890 CEST	443	49764	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.993756056 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.993792057 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.993807077 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.993858099 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.993870020 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.993921995 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.996443987 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.996459961 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.996521950 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.996530056 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.997258902 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.997323036 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.997337103 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.997354031 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:09.997405052 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.997498035 CEST	49765	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:09.997513056 CEST	443	49765	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:11.665375948 CEST	49680	80	192.168.2.16	192.229.211.108
Aug 31, 2024 20:36:12.791291952 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:12.837347031 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:12.837369919 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:12.878359079 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:12.920547009 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:12.924105883 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:12.924123049 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:12.924259901 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:12.924264908 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.137373924 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.182455063 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.255338907 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.255386114 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.255525112 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.255548000 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.255559921 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.255609989 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.256061077 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.256794930 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.256848097 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.256879091 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.258987904 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.259042025 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.259048939 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.259258032 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.259314060 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.259320974 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.310360909 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.310368061 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.358347893 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.374068975 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.374111891 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.374166012 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.374274969 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.374371052 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.374546051 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.374772072 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.374825954 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.375036955 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375089884 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.375117064 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375360012 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375391006 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375417948 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.375427008 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375526905 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.375835896 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375850916 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.375911951 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.376291037 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.376410961 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.376411915 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.376421928 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.376471996 CEST	49762	443	192.168.2.16	45.135.232.98
Aug 31, 2024 20:36:13.376485109 CEST	443	49762	45.135.232.98	192.168.2.16
Aug 31, 2024 20:36:13.421356916 CEST	49762	443	192.168.2.16	45.135.232.98

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2024 20:35:36.637574911 CEST	59520	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:36.637721062 CEST	60593	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:36.661992073 CEST	53	59520	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:36.663440943 CEST	53	60593	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:36.700601101 CEST	53	57939	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:36.703174114 CEST	53	61459	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:36.711556911 CEST	63498	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:36.722127914 CEST	53	63498	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:36.777404070 CEST	52785	53	192.168.2.16	8.8.8.8
Aug 31, 2024 20:35:36.777672052 CEST	50406	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:36.799755096 CEST	53	52785	8.8.8.8	192.168.2.16
Aug 31, 2024 20:35:36.800153971 CEST	53	50406	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:37.708898067 CEST	53	50224	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:37.781760931 CEST	50917	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:37.781888962 CEST	50719	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:37.793236971 CEST	53	50917	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:37.793967009 CEST	53	50719	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:41.486355066 CEST	56107	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:41.486491919 CEST	61522	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:41.493822098 CEST	53	56107	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:41.493946075 CEST	53	61522	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:42.808247089 CEST	49658	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:42.808373928 CEST	60541	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:42.818360090 CEST	53	49658	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:42.818468094 CEST	53	60541	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:42.819116116 CEST	65034	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:42.837435961 CEST	53	65034	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:54.697026968 CEST	53	63819	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:58.459059000 CEST	62874	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:58.459247112 CEST	61419	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:35:58.783546925 CEST	53	61419	1.1.1.1	192.168.2.16
Aug 31, 2024 20:35:58.954083920 CEST	53	62874	1.1.1.1	192.168.2.16
Aug 31, 2024 20:36:06.004766941 CEST	55507	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:36:06.005095959 CEST	53988	53	192.168.2.16	1.1.1.1
Aug 31, 2024 20:36:06.121237040 CEST	53	53988	1.1.1.1	192.168.2.16
Aug 31, 2024 20:36:06.325175047 CEST	53	55507	1.1.1.1	192.168.2.16
Aug 31, 2024 20:36:06.398202896 CEST	53	50629	1.1.1.1	192.168.2.16
Aug 31, 2024 20:36:13.445301056 CEST	53	64015	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 31, 2024 20:35:36.637574911 CEST	192.168.2.16	1.1.1.1	0x9492	Standard query (0)	cninaspwebprb.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.637721062 CEST	192.168.2.16	1.1.1.1	0xb4c	Standard query (0)	cninaspwebprb.icu	65	IN (0x0001)	false
Aug 31, 2024 20:35:36.711556911 CEST	192.168.2.16	1.1.1.1	0x3ba2	Standard query (0)	cninaspwebprb.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.777404070 CEST	192.168.2.16	8.8.8.8	0xae2f	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.777672052 CEST	192.168.2.16	1.1.1.1	0x45b4	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:37.781760931 CEST	192.168.2.16	1.1.1.1	0x2cd3	Standard query (0)	cninaspwebprb.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:37.781888962 CEST	192.168.2.16	1.1.1.1	0xa215	Standard query (0)	cninaspwebprb.icu	65	IN (0x0001)	false
Aug 31, 2024 20:35:41.486355066 CEST	192.168.2.16	1.1.1.1	0x9c87	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:41.486491919 CEST	192.168.2.16	1.1.1.1	0x7bc4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 31, 2024 20:35:42.808247089 CEST	192.168.2.16	1.1.1.1	0x36d2	Standard query (0)	cninaspwebprb.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:42.808373928 CEST	192.168.2.16	1.1.1.1	0x3fda	Standard query (0)	cninaspwebprb.icu	65	IN (0x0001)	false
Aug 31, 2024 20:35:42.819116116 CEST	192.168.2.16	1.1.1.1	0xd179	Standard query (0)	cninaspwebprb.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:58.459059000 CEST	192.168.2.16	1.1.1.1	0xc77a	Standard query (0)	cninaspwebprn.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:58.459247112 CEST	192.168.2.16	1.1.1.1	0xac6f	Standard query (0)	cninaspwebprn.icu	65	IN (0x0001)	false
Aug 31, 2024 20:36:06.004766941 CEST	192.168.2.16	1.1.1.1	0xd50f	Standard query (0)	cninaspwebprn.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:36:06.005095959 CEST	192.168.2.16	1.1.1.1	0x5a23	Standard query (0)	cninaspwebprn.icu	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 31, 2024 20:35:36.661992073 CEST	1.1.1.1	192.168.2.16	0x9492	Name error (3)	cninaspwebprb.icu	none	none	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.663440943 CEST	1.1.1.1	192.168.2.16	0xb4c	Name error (3)	cninaspwebprb.icu	none	none	65	IN (0x0001)	false
Aug 31, 2024 20:35:36.722127914 CEST	1.1.1.1	192.168.2.16	0x3ba2	Name error (3)	cninaspwebprb.icu	none	none	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.799755096 CEST	8.8.8.8	192.168.2.16	0xae2f	No error (0)	google.com		142.251.37.14	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:36.800153971 CEST	1.1.1.1	192.168.2.16	0x45b4	No error (0)	google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:37.793236971 CEST	1.1.1.1	192.168.2.16	0x2cd3	Name error (3)	cninaspwebprb.icu	none	none	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:37.793967009 CEST	1.1.1.1	192.168.2.16	0xa215	Name error (3)	cninaspwebprb.icu	none	none	65	IN (0x0001)	false
Aug 31, 2024 20:35:41.493822098 CEST	1.1.1.1	192.168.2.16	0x9c87	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:41.493946075 CEST	1.1.1.1	192.168.2.16	0x7bc4	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 31, 2024 20:35:42.818360090 CEST	1.1.1.1	192.168.2.16	0x36d2	Name error (3)	cninaspwebprb.icu	none	none	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:42.818468094 CEST	1.1.1.1	192.168.2.16	0x3fda	Name error (3)	cninaspwebprb.icu	none	none	65	IN (0x0001)	false
Aug 31, 2024 20:35:42.837435961 CEST	1.1.1.1	192.168.2.16	0xd179	Name error (3)	cninaspwebprb.icu	none	none	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:35:58.954083920 CEST	1.1.1.1	192.168.2.16	0xc77a	No error (0)	cninaspwebprn.icu		45.135.232.98	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:36:06.325175047 CEST	1.1.1.1	192.168.2.16	0xd50f	No error (0)	cninaspwebprn.icu		45.135.232.98	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

fs.microsoft.com

www.google.com

cninaspwebprn.icu

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49711	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 18:35:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=252593 Date: Sat, 31 Aug 2024 18:35:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49712	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:47 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+9zHyrbB7yZnKCN&MD=f7eodY5O HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-31 18:35:47 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e5912e65-5372-4045-b941-5996aeb61c65 MS-RequestId: 675df393-46f6-4218-ba61-68f60397ba6b MS-CV: 5hLE46uAMEWTprCI.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 31 Aug 2024 18:35:47 GMT Connection: close Content-Length: 24490
2024-08-31 18:35:47 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-31 18:35:47 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49713	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 18:35:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=252592 Date: Sat, 31 Aug 2024 18:35:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-31 18:35:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.16	49715	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:50 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-31 18:35:50 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-31 18:35:51 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sat, 31 Aug 2024 18:34:51 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_BL2 x-ms-request-id: b9ba238d-5c0e-4e71-b98c-29143e43fd3a PPServer: PPV: 30 H: BL02EPF0001D903 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sat, 31 Aug 2024 18:35:51 GMT Connection: close Content-Length: 10173
2024-08-31 18:35:51 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.16	49717	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:53 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-31 18:35:53 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-31 18:35:53 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sat, 31 Aug 2024 18:34:53 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: c2a7624f-9a1e-49dd-953c-d73cfd9f190d PPServer: PPV: 30 H: SN1PEPF0002F94E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sat, 31 Aug 2024 18:35:52 GMT Connection: close Content-Length: 10173
2024-08-31 18:35:53 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49719	142.250.185.100	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:54 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 18:35:55 UTC	1231	IN	HTTP/1.1 200 OK Date: Sat, 31 Aug 2024 18:35:55 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-6TIUsUWKEKupREPeJl3BKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-31 18:35:55 UTC	159	IN	Data Raw: 63 65 36 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6d 6c 62 22 2c 22 63 61 70 72 69 20 73 75 6e 20 70 6f 75 63 68 65 73 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 61 75 67 75 73 74 20 33 31 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 73 20 73 74 75 63 6b 20 69 6e 20 73 70 61 63 65 20 73 74 61 74 69 6f 6e 22 2c 22 62 6c 61 63 6b 20 66 61 63 65 62 6f 6f 6b 20 61 70 70 20 69 63 6f 6e 22 2c 22 79 65 74 69 20 63 61 73 6b 65 74 20 63 6f 6f 6c Data Ascii: ce6)]}'["",["mlb","capri sun pouches","nyt connections hints august 31","nasa astronauts stuck in space station","black facebook app icon","yeti casket cool
2024-08-31 18:35:55 UTC	1390	IN	Data Raw: 65 72 22 2c 22 62 65 72 67 65 6e 20 63 61 74 68 6f 6c 69 63 20 76 73 20 69 6d 67 20 61 63 61 64 65 6d 79 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 36 20 70 72 6f 20 6d 61 78 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 67 6f 6f Data Ascii: er","bergen catholic vs img academy football","apple iphone 16 pro max release date"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"goo
2024-08-31 18:35:55 UTC	1390	IN	Data Raw: 42 44 62 57 46 55 54 55 31 54 55 31 6f 72 57 6e 42 4e 4c 30 78 54 59 6e 46 46 4f 45 49 35 56 46 4e 31 52 33 4e 72 57 45 4a 35 53 58 4e 52 55 6e 56 4d 55 6e 46 4b 61 57 4a 4d 62 45 45 78 51 54 41 79 55 32 34 35 61 46 4e 54 61 32 4a 69 61 56 70 5a 52 7a 51 35 65 69 39 42 53 6b 31 4f 4e 6d 63 77 4b 31 52 79 53 47 68 73 55 6d 46 57 55 48 46 42 55 6b 39 56 63 47 78 77 55 45 73 72 57 45 4e 43 51 6c 52 6d 4d 55 5a 7a 64 6d 46 4e 61 47 34 79 61 58 42 56 56 7a 68 32 65 45 67 30 4b 31 59 30 4e 33 4d 34 4e 45 78 4c 59 31 68 31 53 45 39 72 62 33 68 54 63 46 68 46 52 7a 5a 35 55 46 51 79 61 6e 4e 68 61 6c 46 78 65 6b 74 72 53 32 34 32 53 7a 68 71 61 6e 4a 52 52 7a 46 47 62 46 4e 4e 61 57 4a 42 53 6c 4a 6a 59 6d 73 7a 53 45 74 4f 63 47 39 45 55 6b 55 78 54 6a 59 79 62 Data Ascii: BDbWFUTU1TU1orWnBNL0xTYnFFOEI5VFN1R3NrWEJ5SXNRUnVMUnFKaWJMbEExQTAyU245aFNTa2JiaVpZRzQ5ei9BSk1ONmcwK1RySGhsUmFWUHFBUk9VcGxwUEsrWENCQlRmMUZzdmFNaG4yaXBVVzh2eEg0K1Y0N3M4NExLY1h1SE9rb3hTcFhFRzZ5UFQyanNhalFxektrS242SzhqanJRRzFGbFNNaWJBSlJjYmszSEtOcG9EUkUxTjYyb
2024-08-31 18:35:55 UTC	370	IN	Data Raw: 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b Data Ascii: ":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[
2024-08-31 18:35:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.16	49720	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:55 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-31 18:35:55 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-31 18:35:55 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sat, 31 Aug 2024 18:34:55 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: ec26685a-0af9-43b8-9ddf-64376ccfd288 PPServer: PPV: 30 H: SN1PEPF0004014E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sat, 31 Aug 2024 18:35:55 GMT Connection: close Content-Length: 10173
2024-08-31 18:35:55 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.16	49722	20.190.159.2	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:57 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4710 Host: login.live.com
2024-08-31 18:35:57 UTC	4710	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-31 18:35:57 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sat, 31 Aug 2024 18:34:57 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: a268bf80-7094-4302-826e-64e382654be8 PPServer: PPV: 30 H: SN1PEPF0004014C V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sat, 31 Aug 2024 18:35:56 GMT Connection: close Content-Length: 10173
2024-08-31 18:35:57 UTC	10173	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49724	142.250.185.100	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:58 UTC	678	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fcninaspwebprn.icu&oit=3&cp=21&pgcl=4&gs_rn=42&psi=A-BHRQIvUdko_ht_&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49727	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:35:59 UTC	660	OUT	GET / HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49730	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:01 UTC	686	OUT	GET / HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 18:36:02 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache
2024-08-31 18:36:02 UTC	16025	IN	Data Raw: 31 66 30 30 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 Data Ascii: 1f00<!DOCTYPE html><html lang="en" dir="ltr"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title></title> <link rel="shortcut icon" href="favicon.ico"> <link rel="sty
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 69 59 57 4e 72 63 33 78 38 65 33 30 73 4b 48 52 6f 61 58 4d 75 58 32 4e 68 62 47 78 69 59 57 4e 72 63 31 73 69 4a 43 49 72 64 46 30 39 64 47 68 70 63 79 35 66 59 32 46 73 62 47 4a 68 59 32 74 7a 57 79 49 6b 49 69 74 30 58 58 78 38 57 31 30 70 4c 6e 42 31 63 32 67 6f 5a 53 6b 73 64 47 68 70 63 33 30 73 63 69 35 77 63 6d 39 30 62 33 52 35 63 47 55 75 0d 0a 32 30 30 30 0d 0a 62 32 35 6a 5a 54 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 30 4c 47 55 70 65 32 5a 31 62 6d 4e 30 61 57 39 75 49 47 34 6f 4b 58 74 30 61 47 6c 7a 4c 6d 39 6d 5a 69 68 30 4c 47 34 70 4c 47 55 75 59 58 42 77 62 48 6b 6f 64 47 68 70 63 79 78 68 63 6d 64 31 62 57 56 75 64 48 4d 70 66 58 4a 6c 64 48 56 79 62 69 42 75 4c 6d 5a 75 50 57 55 73 64 47 68 70 63 79 35 76 62 69 68 30 4c 47 34 70 4c 48 Data Ascii: iYWNrc3x8e30sKHRoaXMuX2NhbGxiYWNrc1siJCIrdF09dGhpcy5fY2FsbGJhY2tzWyIkIit0XXx8W10pLnB1c2goZSksdGhpc30sci5wcm90b3R5cGUu2000b25jZT1mdW5jdGlvbih0LGUpe2Z1bmN0aW9uIG4oKXt0aGlzLm9mZih0LG4pLGUuYXBwbHkodGhpcyxhcmd1bWVudHMpfXJldHVybiBuLmZuPWUsdGhpcy5vbih0LG4pLH
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 43 6c 37 59 53 67 6e 59 33 4a 6c 59 58 52 70 62 6d 63 67 64 48 4a 68 62 6e 4e 77 62 33 4a 30 49 43 49 6c 63 79 49 6e 4c 48 51 70 4f 33 5a 68 63 69 42 6c 50 57 38 6f 64 47 68 70 63 79 35 78 64 57 56 79 65 53 6b 37 5a 53 35 46 53 55 38 39 63 43 35 77 63 6d 39 30 62 32 4e 76 62 43 78 6c 4c 6e 52 79 59 57 35 7a 63 47 39 79 64 44 31 30 4f 33 5a 68 63 69 42 75 0d 0a 31 30 30 30 0d 0a 50 58 52 6f 61 58 4d 75 64 48 4a 68 62 6e 4e 77 62 33 4a 30 54 33 42 30 61 57 39 75 63 31 74 30 58 58 78 38 65 33 30 37 64 47 68 70 63 79 35 70 5a 43 59 6d 4b 47 55 75 63 32 6c 6b 50 58 52 6f 61 58 4d 75 61 57 51 70 4f 33 5a 68 63 69 42 79 50 57 35 6c 64 79 42 70 57 33 52 64 4b 48 74 78 64 57 56 79 65 54 70 6c 4c 48 4e 76 59 32 74 6c 64 44 Data Ascii: 9ZnVuY3Rpb24odCl7YSgnY3JlYXRpbmcgdHJhbnNwb3J0ICIlcyInLHQpO3ZhciBlPW8odGhpcy5xdWVyeSk7ZS5FSU89cC5wcm90b2NvbCxlLnRyYW5zcG9ydD10O3ZhciBu1000PXRoaXMudHJhbnNwb3J0T3B0aW9uc1t0XXx8e307dGhpcy5pZCYmKGUuc2lkPXRoaXMuaWQpO3ZhciByPW5ldyBpW3RdKHtxdWVyeTplLHNvY2tldD
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 76 62 69 39 76 59 33 52 6c 64 43 31 7a 64 48 4a 6c 59 57 30 69 50 54 30 39 5a 54 39 30 61 47 6c 7a 4c 6e 68 6f 63 69 35 79 5a 58 4e 77 62 32 35 7a 5a 58 78 38 64 47 68 70 63 79 35 34 61 48 49 75 63 6d 56 7a 63 47 39 75 63 32 56 55 5a 58 68 30 4f 6e 52 6f 61 58 4d 75 65 47 68 79 4c 6e 4a 6c 63 33 42 76 62 6e 4e 6c 56 47 56 34 64 48 31 6a 59 58 52 6a 61 43 68 75 4b 58 74 30 61 47 6c 7a 4c 6d 39 75 52 58 4a 79 62 33 49 6f 62 69 6c 39 62 6e 56 73 62 43 45 39 64 43 59 6d 64 47 68 70 63 79 35 76 62 6b 52 68 64 47 45 6f 64 43 6c 39 4c 47 6b 75 63 48 4a 76 64 47 39 30 65 58 42 6c 4c 6d 68 68 63 31 68 45 55 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 4a 6c 64 48 56 79 62 69 4a 31 62 6d 52 6c 5a 6d 6c 75 5a 57 51 69 49 54 31 30 65 58 42 6c 62 32 59 67 5a 53 Data Ascii: vbi9vY3RldC1zdHJlYW0iPT09ZT90aGlzLnhoci5yZXNwb25zZXx8dGhpcy54aHIucmVzcG9uc2VUZXh0OnRoaXMueGhyLnJlc3BvbnNlVGV4dH1jYXRjaChuKXt0aGlzLm9uRXJyb3Iobil9bnVsbCE9dCYmdGhpcy5vbkRhdGEodCl9LGkucHJvdG90eXBlLmhhc1hEUj1mdW5jdGlvbigpe3JldHVybiJ1bmRlZmluZWQiIT10eXBlb2YgZS
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 39 50 54 45 6d 4a 69 68 70 50 57 6b 75 63 33 56 69 63 33 52 79 61 57 35 6e 4b 44 41 73 61 53 35 73 5a 57 35 6e 64 47 67 74 4d 69 6b 72 49 6a 30 39 49 69 6b 73 61 58 30 73 5a 53 35 6b 5a 57 4e 76 5a 47 55 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 43 6c 37 64 6d 46 79 49 47 55 73 63 69 78 76 4c 47 6b 73 63 79 78 68 50 53 34 33 4e 53 70 30 4c 6d 78 6c 62 6d 64 30 61 43 78 6a 50 58 51 75 62 47 56 75 5a 33 52 6f 4c 48 41 39 4d 44 73 69 50 53 49 39 50 54 31 30 57 33 51 75 62 47 56 75 5a 33 52 6f 4c 54 46 64 4a 69 59 6f 59 53 30 74 4c 43 49 39 49 6a 30 39 50 58 52 62 64 43 35 73 5a 57 35 6e 64 47 67 74 4d 6c 30 6d 4a 6d 45 74 4c 53 6b 37 64 6d 46 79 49 48 55 39 62 6d 56 33 49 45 46 79 63 6d 46 35 51 6e 56 6d 5a 6d 56 79 4b 47 45 70 4c 47 67 39 62 6d 56 33 49 46 Data Ascii: 9PTEmJihpPWkuc3Vic3RyaW5nKDAsaS5sZW5ndGgtMikrIj09IiksaX0sZS5kZWNvZGU9ZnVuY3Rpb24odCl7dmFyIGUscixvLGkscyxhPS43NSp0Lmxlbmd0aCxjPXQubGVuZ3RoLHA9MDsiPSI9PT10W3QubGVuZ3RoLTFdJiYoYS0tLCI9Ij09PXRbdC5sZW5ndGgtMl0mJmEtLSk7dmFyIHU9bmV3IEFycmF5QnVmZmVyKGEpLGg9bmV3IF
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 37 44 51 6f 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 44 51 6f 68 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 53 78 30 4b 58 73 69 64 58 4e 6c 49 48 4e 30 63 6d 6c 6a 64 43 49 37 49 6d 39 69 61 6d 56 6a 64 43 49 39 50 58 52 35 63 47 56 76 5a 69 42 74 62 32 52 31 62 47 55 6d 4a 69 4a 76 59 6d 70 6c 59 33 51 69 50 54 31 30 0d 0a 32 30 30 30 0d 0a 65 58 42 6c 62 32 59 67 62 57 39 6b 64 57 78 6c 4c 6d 56 34 63 47 39 79 64 48 4d 2f 62 57 39 6b 64 57 78 6c 4c 6d 56 34 63 47 39 79 64 48 4d 39 5a 53 35 6b 62 32 4e 31 62 57 56 75 64 44 39 30 4b 47 55 73 49 54 41 70 4f 6d Data Ascii: 7DQo="></script> <script type="text/javascript" src="data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT102000eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOm
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 39 5a 53 6c 79 5a 58 52 31 63 6d 34 68 4d 44 74 79 5a 58 52 31 63 6d 34 68 4d 58 30 73 52 44 31 30 50 32 5a 31 62 6d 4e 30 61 57 39 75 4b 47 55 73 64 43 6c 37 61 57 59 6f 5a 54 30 39 50 58 51 70 63 6d 56 30 64 58 4a 75 49 47 77 39 49 54 41 73 4d 44 74 32 59 58 49 67 62 6a 30 68 5a 53 35 6a 62 32 31 77 59 58 4a 6c 52 47 39 6a 64 57 31 6c 62 6e 52 51 62 33 4e 70 64 47 6c 76 62 69 30 68 64 43 35 6a 62 32 31 77 59 58 4a 6c 52 47 39 6a 64 57 31 6c 62 6e 52 51 62 33 4e 70 64 47 6c 76 62 6a 74 79 5a 58 52 31 63 6d 34 67 62 6e 78 38 4b 44 45 6d 4b 47 34 39 4b 47 55 75 0d 0a 32 30 30 30 0d 0a 62 33 64 75 5a 58 4a 45 62 32 4e 31 62 57 56 75 64 48 78 38 5a 53 6b 39 50 53 68 30 4c 6d 39 33 62 6d 56 79 52 47 39 6a 64 57 31 6c 62 6e 52 38 66 48 51 70 50 32 55 75 59 32 Data Ascii: 9ZSlyZXR1cm4hMDtyZXR1cm4hMX0sRD10P2Z1bmN0aW9uKGUsdCl7aWYoZT09PXQpcmV0dXJuIGw9ITAsMDt2YXIgbj0hZS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbi0hdC5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbjtyZXR1cm4gbnx8KDEmKG49KGUu2000b3duZXJEb2N1bWVudHx8ZSk9PSh0Lm93bmVyRG9jdW1lbnR8fHQpP2UuY2
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 54 4c 6d 64 79 5a 58 41 6f 5a 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 4b 58 74 79 5a 58 52 31 63 6d 34 67 5a 54 30 39 50 57 34 68 50 54 31 79 66 53 6b 36 49 6e 4e 30 63 6d 6c 75 5a 79 49 68 50 58 52 35 63 47 56 76 5a 69 42 75 50 31 4d 75 5a 33 4a 6c 63 43 68 6c 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 55 70 65 33 4a 6c 64 48 56 79 62 69 30 78 50 47 6b 75 59 32 46 73 62 43 68 75 4c 47 55 70 49 54 30 39 63 6e 30 70 4f 6c 4d 75 5a 6d 6c 73 64 47 56 79 4b 47 34 73 5a 53 78 79 4b 58 31 54 4c 6d 5a 70 62 48 52 6c 63 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 4c 48 51 73 62 69 6c 37 64 6d 46 79 49 48 49 39 64 46 73 77 58 54 74 79 5a 58 52 31 63 6d 34 67 62 69 59 6d 4b 47 55 39 49 6a 70 75 62 33 51 6f 49 69 74 6c 4b 79 49 70 49 69 6b 73 4d 54 30 39 50 58 Data Ascii: TLmdyZXAoZSxmdW5jdGlvbihlKXtyZXR1cm4gZT09PW4hPT1yfSk6InN0cmluZyIhPXR5cGVvZiBuP1MuZ3JlcChlLGZ1bmN0aW9uKGUpe3JldHVybi0xPGkuY2FsbChuLGUpIT09cn0pOlMuZmlsdGVyKG4sZSxyKX1TLmZpbHRlcj1mdW5jdGlvbihlLHQsbil7dmFyIHI9dFswXTtyZXR1cm4gbiYmKGU9Ijpub3QoIitlKyIpIiksMT09PX
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 6f 62 7a 31 7a 4b 43 6b 76 64 58 78 38 4c 6a 55 70 4b 54 77 39 4d 43 59 6d 4b 47 45 39 4d 43 6b 73 59 79 38 39 62 7a 74 6a 4b 6a 30 79 4c 46 4d 75 63 33 52 35 62 47 55 6f 5a 53 78 30 4c 47 4d 72 62 43 6b 73 62 6a 31 75 66 48 78 62 58 58 31 79 5a 58 52 31 63 6d 34 67 62 69 59 6d 4b 47 4d 39 4b 32 4e 38 66 43 74 31 66 48 77 77 4c 47 6b 39 62 6c 73 78 58 54 39 6a 4b 79 68 75 57 7a 46 64 4b 7a 45 70 4b 6d 35 62 4d 6c 30 36 4b 32 35 62 4d 6c 30 73 63 69 59 6d 4b 48 49 75 64 57 35 70 64 44 31 73 4c 48 49 75 63 33 52 68 63 6e 51 39 59 79 78 79 4c 6d 56 75 5a 44 31 70 4b 53 6b 73 61 58 31 32 59 58 49 67 64 57 55 39 65 33 30 37 5a 6e 56 75 59 33 52 70 62 32 34 67 62 47 55 6f 5a 53 78 30 4b 58 74 6d 62 33 49 6f 64 6d 46 79 49 47 34 73 63 69 78 70 4c 47 38 73 59 53 Data Ascii: obz1zKCkvdXx8LjUpKTw9MCYmKGE9MCksYy89bztjKj0yLFMuc3R5bGUoZSx0LGMrbCksbj1ufHxbXX1yZXR1cm4gbiYmKGM9K2N8fCt1fHwwLGk9blsxXT9jKyhuWzFdKzEpKm5bMl06K25bMl0sciYmKHIudW5pdD1sLHIuc3RhcnQ9YyxyLmVuZD1pKSksaX12YXIgdWU9e307ZnVuY3Rpb24gbGUoZSx0KXtmb3IodmFyIG4scixpLG8sYS
2024-08-31 18:36:02 UTC	16384	IN	Data Raw: 64 53 35 75 62 32 52 6c 54 6d 46 74 5a 53 35 30 62 30 78 76 64 32 56 79 51 32 46 7a 5a 53 67 70 4b 53 59 6d 63 47 55 75 64 47 56 7a 64 43 68 7a 4c 6e 52 35 63 47 55 70 50 33 55 75 59 32 68 6c 59 32 74 6c 5a 44 31 7a 4c 6d 4e 6f 5a 57 4e 72 5a 57 51 36 49 6d 6c 75 63 48 56 30 49 69 45 39 50 57 77 6d 4a 69 4a 30 5a 58 68 30 59 58 4a 6c 59 53 49 68 50 54 31 73 66 48 77 6f 64 53 35 6b 5a 57 5a 68 64 57 78 30 56 6d 46 73 64 57 55 39 63 79 35 6b 5a 57 5a 68 64 57 78 30 56 6d 46 73 64 57 55 70 4f 32 6c 6d 4b 48 51 70 61 57 59 6f 62 69 6c 6d 62 33 49 6f 62 7a 31 76 66 48 78 32 5a 53 68 6c 4b 53 78 68 50 57 46 38 66 48 5a 6c 4b 47 4d 70 4c 48 49 39 4d 43 78 70 50 57 38 75 62 47 56 75 5a 33 52 6f 4f 33 49 38 0d 0a 38 30 30 30 0d 0a 61 54 74 79 4b 79 73 70 54 32 55 Data Ascii: dS5ub2RlTmFtZS50b0xvd2VyQ2FzZSgpKSYmcGUudGVzdChzLnR5cGUpP3UuY2hlY2tlZD1zLmNoZWNrZWQ6ImlucHV0IiE9PWwmJiJ0ZXh0YXJlYSIhPT1sfHwodS5kZWZhdWx0VmFsdWU9cy5kZWZhdWx0VmFsdWUpO2lmKHQpaWYobilmb3Iobz1vfHx2ZShlKSxhPWF8fHZlKGMpLHI9MCxpPW8ubGVuZ3RoO3I88000aTtyKyspT2U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49729	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:02 UTC	612	OUT	GET /c-assets/css/style.css?1714115086 HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:02 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:02 GMT Content-Type: text/css Content-Length: 9796 Last-Modified: Fri, 26 Apr 2024 07:04:46 GMT Connection: close ETag: "662b520e-2644" Accept-Ranges: bytes
2024-08-31 18:36:02 UTC	9796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 61 75 74 6f 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2f 63 2d 61 73 73 65 74 73 2f 77 65 62 66 6f 6e 74 73 2f 66 61 2d 62 72 61 6e 64 73 2d 34 30 30 2e 65 6f 74 22 29 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2f 63 2d 61 73 73 65 74 73 2f 77 65 62 66 6f 6e 74 73 2f 66 61 2d 62 72 61 6e 64 73 2d 34 30 30 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 Data Ascii: @font-face { font-family: 'Font Awesome 5 Brands'; font-style: normal; font-weight: normal; font-display: auto; src: url("/c-assets/webfonts/fa-brands-400.eot"); src: url("/c-assets/webfonts/fa-brands-400.eot?#iefix") format("embed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49732	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:03 UTC	609	OUT	GET /c-assets/css/bootstrap.min.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:03 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:03 GMT Content-Type: text/css Content-Length: 155670 Last-Modified: Mon, 18 Sep 2023 07:46:50 GMT Connection: close ETag: "6508006a-26016" Accept-Ranges: bytes
2024-08-31 18:36:03 UTC	16147	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 31 31 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 Data Ascii: s-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-xl-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-xl-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-xl-11{-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-wid
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 65 63 6b 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 66 65 65 64 62 61 63 6b 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 69 6e 76 61 6c 69 64 7e 2e 69 6e 76 61 6c 69 64 2d 74 6f 6f 6c 74 69 70 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 63 75 73 74 6f 6d Data Ascii: eck-label{color:#dc3545}.form-check-input.is-invalid~.invalid-feedback,.form-check-input.is-invalid~.invalid-tooltip,.was-validated .form-check-input:invalid~.invalid-feedback,.was-validated .form-check-input:invalid~.invalid-tooltip{display:block}.custom
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 77 29 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 6f 6c 6c 61 70 73 65 3a 6e 6f 74 28 2e 73 68 6f 77 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 6f 6c 6c 61 70 73 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 20 2e 33 35 73 20 65 61 73 65 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 63 6f 6c 6c 61 70 73 69 6e 67 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 64 72 6f 70 64 6f 77 6e 2c 2e 64 72 6f 70 6c 65 66 74 2c 2e 64 72 6f 70 72 69 67 68 74 2c 2e 64 72 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d Data Ascii: w){opacity:0}.collapse:not(.show){display:none}.collapsing{position:relative;height:0;overflow:hidden;transition:height .35s ease}@media (prefers-reduced-motion:reduce){.collapsing{transition:none}}.dropdown,.dropleft,.dropright,.dropup{position:relative}
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 63 75 73 74 6f 6d 2d 66 69 6c 65 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 33 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 29 3b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 63 6f 6e 74 65 6e 74 3a 22 42 72 6f 77 73 65 22 3b 62 61 63 6b 67 72 6f 75 Data Ascii: -color:#fff;border:1px solid #ced4da;border-radius:.25rem}.custom-file-label::after{position:absolute;top:0;right:0;bottom:0;z-index:3;display:block;height:calc(1.5em + .75rem);padding:.375rem .75rem;line-height:1.5;color:#495057;content:"Browse";backgrou
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 63 37 35 37 64 7d 2e 70 61 67 69 6e 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 70 61 67 65 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 Data Ascii: c757d}.pagination{display:-ms-flexbox;display:flex;padding-left:0;list-style:none;border-radius:.25rem}.page-link{position:relative;display:block;padding:.5rem .75rem;margin-left:-1px;line-height:1.25;color:#007bff;background-color:#fff;border:1px solid #
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 61 64 64 69 6e 67 3a 31 72 65 6d 7d 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 70 61 64 64 69 6e 67 3a 31 72 65 6d 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 2e 33 72 65 6d 7d 2e 6d 6f 64 61 Data Ascii: adding:1rem}.modal-footer{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;-ms-flex-pack:end;justify-content:flex-end;padding:1rem;border-top:1px solid #dee2e6;border-bottom-right-radius:.3rem;border-bottom-left-radius:.3rem}.moda
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 74 61 62 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 74 61 62 6c 65 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 74 61 62 6c 65 2d 63 65 6c 6c 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 63 65 6c 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 70 72 69 6e 74 2d 66 6c 65 78 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 21 69 6d 70 6f 72 74 61 6e Data Ascii: e-block{display:inline-block!important}.d-print-block{display:block!important}.d-print-table{display:table!important}.d-print-table-row{display:table-row!important}.d-print-table-cell{display:table-cell!important}.d-print-flex{display:-ms-flexbox!importan
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 66 69 78 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 6f 73 69 74 69 6f 6e 2d 73 74 69 63 6b 79 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 78 65 64 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 72 69 Data Ascii: mportant}.position-relative{position:relative!important}.position-absolute{position:absolute!important}.position-fixed{position:fixed!important}.position-sticky{position:-webkit-sticky!important;position:sticky!important}.fixed-top{position:fixed;top:0;ri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49731	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:03 UTC	608	OUT	GET /c-assets/css/font-awesome.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:03 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:03 GMT Content-Type: text/css Content-Length: 39727 Last-Modified: Mon, 18 Sep 2023 09:12:33 GMT Connection: close ETag: "65081481-9b2f" Accept-Ranges: bytes
2024-08-31 18:36:03 UTC	16149	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 0d 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0d 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwe
2024-08-31 18:36:03 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 38 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 6c 61 70 74 6f 70 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 39 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 61 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 6d 6f 62 69 6c 65 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 0d 0a 2e 66 61 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 62 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 63 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 71 75 6f 74 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 Data Ascii: ontent: "\f108";}.fa-laptop:before { content: "\f109";}.fa-tablet:before { content: "\f10a";}.fa-mobile-phone:before,.fa-mobile:before { content: "\f10b";}.fa-circle-o:before { content: "\f10c";}.fa-quote-left:before {
2024-08-31 18:36:03 UTC	7194	IN	Data Raw: 2d 6c 69 7a 61 72 64 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 38 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 73 70 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 39 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 70 6f 69 6e 74 65 72 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 61 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 70 65 61 63 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 62 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 74 72 61 64 65 6d 61 72 6b 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 63 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 72 65 67 69 Data Ascii: -lizard-o:before { content: "\f258";}.fa-hand-spock-o:before { content: "\f259";}.fa-hand-pointer-o:before { content: "\f25a";}.fa-hand-peace-o:before { content: "\f25b";}.fa-trademark:before { content: "\f25c";}.fa-regi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49733	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:03 UTC	653	OUT	GET /c-assets/dialog-new/logo.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49734	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:03 UTC	602	OUT	GET /index_files/7570212.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49735	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:04 UTC	602	OUT	GET /index_files/7570214.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:04 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:04 GMT Content-Type: text/css Content-Length: 5407 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-151f" Accept-Ranges: bytes
2024-08-31 18:36:04 UTC	5407	IN	Data Raw: 2e 68 65 61 64 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 35 33 70 78 3b 0d 0a 09 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 37 35 37 30 32 35 38 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 77 31 31 30 30 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 65 72 20 2e 74 6f 70 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 09 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 20 2e 74 6f 70 20 2e 6c 6f 67 6f 20 7b 0d 0a Data Ascii: .header {width: 100%;height: 153px;background: url(7570258.png) no-repeat center bottom;position: relative;}.w1100{width: 1100px;margin: 0 auto;}.header .top {width: 1100px;margin: 0 auto;}.header .top .logo {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49736	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:04 UTC	602	OUT	GET /index_files/7601024.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:05 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:05 GMT Content-Type: text/css Content-Length: 15976 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-3e68" Accept-Ranges: bytes
2024-08-31 18:36:05 UTC	15976	IN	Data Raw: 0d 0a 2a 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 2e 62 67 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 31 31 30 30 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 72 61 70 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 2e 74 6f 70 74 69 74 6c 65 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 30 20 32 35 70 78 20 30 3b 0d 0a 7d 0d 0a 2e 74 6f 70 Data Ascii: *{margin: 0;padding: 0;}.bg {width: 100%;min-width: 1100px;overflow: hidden;}.w1100 {width: 1100px;margin: 0 auto;}.wrap{margin-bottom: 40px;}.toptitle{text-align: center;padding: 15px 0 25px 0;}.top

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49738	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:04 UTC	602	OUT	GET /index_files/7570215.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:05 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:05 GMT Content-Type: text/css Content-Length: 3137 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-c41" Accept-Ranges: bytes
2024-08-31 18:36:05 UTC	3137	IN	Data Raw: 2f 2a 0a 20 2a 20 53 77 69 70 65 72 20 32 2e 37 2e 36 0a 20 2a 20 4d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 6c 69 64 65 72 73 2f 73 77 69 70 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 35 2c 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 20 54 68 65 20 69 44 61 6e 67 65 72 6f 2e 75 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 Data Ascii: /* * Swiper 2.7.6 * Mobile touch slider and framework with hardware accelerated transitions * * http://www.idangero.us/sliders/swiper/ * * Copyright 2010-2015, Vladimir Kharlampidi * The iDangero.us * http://www.idangero.us/ * * Licensed under G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49744	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:06 UTC	648	OUT	GET /index_files/7570255.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:06 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:06 GMT Content-Type: image/png Content-Length: 355 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-163" Accept-Ranges: bytes
2024-08-31 18:36:06 UTC	355	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 2a 49 44 41 54 38 8d 95 d3 cd 2b 44 51 18 06 f0 df 4c 33 ec 88 94 8d 22 0b 8b b1 93 92 94 d8 58 2a f9 cc de 8a ac ed 66 e6 4f 50 2c c4 4a 16 e2 0f 60 37 4a 94 52 b7 ac 64 65 45 58 90 25 25 8b 7b 2e b7 9b c6 cc 53 a7 de ce 39 cf 73 9e f3 7e e4 a2 28 92 42 09 0b 98 43 1f 9e c3 3a c5 0e 1e 65 50 48 c5 f3 38 0a f1 1b 1e f0 82 61 8c 60 05 bb a8 a4 05 f2 19 f2 27 d6 d0 81 01 8c a1 0d 4b f8 42 39 c4 3f c8 45 51 54 c4 2d 5a 30 83 eb ac cd 80 09 d4 f0 84 29 dc 24 0e a6 d1 8f cd 3a 64 38 c3 24 ba d1 99 76 50 0b 36 47 f1 51 47 e0 4f 24 39 78 6f 82 5c c1 76 56 a0 19 94 b0 9c 15 68 13 27 b1 11 4c e2 3e 2d b0 85 21 ac 37 40 9e 45 17 ce 93 8d 66 ca 38 8a 13 71 73 Data Ascii: PNGIHDRaIDAT8+DQL3"XfOP,J`7JRdeEX%%{.S9s~(BC:ePH8a`'KB9?EQT-Z0)$:d8$vP6GQGO$9xo\vVh'L>-!7@Ef8qs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49743	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:06 UTC	648	OUT	GET /index_files/8574863.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:06 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:06 GMT Content-Type: image/png Content-Length: 79320 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-135d8" Accept-Ranges: bytes
2024-08-31 18:36:06 UTC	16147	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 4c 00 00 00 3d 08 06 00 00 00 b7 30 fc cd 00 00 20 00 49 44 41 54 78 9c 84 bd 6b d0 ae 59 7a 16 74 dd cf f7 7d 7b 77 ef de 7d 9c 53 77 0f 39 4d 32 9d 40 80 cc 21 1c a4 48 52 65 f1 c3 60 4a 4b 0b 26 6a 95 3f 08 6a 69 49 41 90 2a 0b 53 f8 cb 8a 22 56 a9 25 a2 a5 04 52 45 59 56 00 0b 14 89 24 2a 20 01 d1 18 c2 31 c3 30 c3 10 42 92 e9 9e 43 4f a7 67 76 77 cf 74 ef de cf ed 8f 75 5f 87 f5 ee 06 be ae de fb db ef fb 3c eb 59 eb 3e 5c f7 71 ad a7 fe f6 f3 cf 7d 1a 55 ef 2a e0 41 03 00 1a 40 a1 ba b1 fe 0d a0 6a 3e 07 0a a5 ab a0 2b d6 a7 8d 75 4f 35 50 55 e8 6e cc e5 c0 5c 31 c3 af 4f 1a e8 5a 7f af 67 ac 31 0a 85 73 fe 06 c7 9c 51 fc fb cc b1 fc f9 a1 0b 0a 98 ef 0a 85 be 98 fb 3e 7f 3e 65 7f 06 e6 f9 ad Data Ascii: PNGIHDRL=0 IDATxkYzt}{w}Sw9M2@!HRe`JK&j?jiIAS"V%REYV$ 10BCOgvwtu_<Y>\q}U*A@j>+uO5PUn\1OZg1sQ>>e
2024-08-31 18:36:06 UTC	16384	IN	Data Raw: e0 8e ba 22 20 ba d8 99 e2 41 9e 18 fb 39 69 07 06 b9 c5 d7 5d 9e e2 3b 13 23 5b 42 6f 82 04 ee 93 b6 e1 3d 25 0f eb 11 c7 3a c4 79 81 4c 58 03 76 74 b0 26 6d f9 2b 40 ce 9a ce b2 e0 3d 33 1b 36 b3 af 20 86 dd 65 51 b1 54 15 93 8e fc d0 83 7a d2 16 2b 69 80 aa 89 27 54 b9 92 ee 7b 75 ec cc 30 3e 8c 6d 9b aa a0 f5 79 9c 3f 06 92 4c 98 8e 2e 13 43 b2 e3 8f 6b 47 e7 39 38 6e c3 a6 7c b1 9b 8a af 56 5e ce cf e2 05 df c8 95 41 bf 12 07 e1 3c 2e ab be 5a c8 4f c9 27 9d d4 70 80 c9 1f 8a 67 f0 f6 1c f9 71 68 c2 f5 42 55 db 8e 35 b6 e8 d6 40 ed 7e 04 34 83 39 34 76 f4 32 2b 8e 7d 9c 38 8f 73 b6 df 91 66 7b 52 d2 fa 97 ce da 74 28 d6 e2 a2 6b 9a 4c 16 47 d2 84 98 53 70 77 c4 8c c1 fb 9c a8 20 fd 9d 88 62 82 80 5d 0a dc 62 55 e7 e0 c1 c9 a0 b3 25 e7 79 6e 13 69 ce Data Ascii: " A9i];#[Bo=%:yLXvt&m+@=36 eQTz+i'T{u0>my?L.CkG98n\|V^A<.ZO'pgqhBU5@~494v2+}8sf{Rt(kLGSpw b]bU%yni
2024-08-31 18:36:06 UTC	16384	IN	Data Raw: ae 88 28 2b ef 9a b9 65 a5 44 2c fb a9 a7 35 de 9e 8a 5e 90 d8 52 1c 1e b1 f3 8c 7c 6b c1 e9 c4 fe 78 08 9e 84 30 41 f0 61 4b c5 0b 8e 16 3e d8 e6 d6 28 8c a8 bc 16 42 ab 58 f3 86 80 c8 4c 6f 5d 68 ac a3 df 3c 97 f9 cf 25 c8 12 be 1b fa b7 a6 56 f9 17 41 df 7a a3 23 57 00 99 a5 72 9e 52 00 25 66 85 99 01 80 88 11 54 f8 ce 21 91 40 21 b4 8f f8 c5 86 21 22 ac 89 9d 01 fc 67 16 39 3a 8e 51 33 17 b4 fc af 70 5e fc bc 52 b9 a2 0c 21 66 7a ff 73 a0 4b 3c 4b 2f ae 2a 7c 1a 96 23 2c cb a1 55 34 f2 cc 10 f0 28 35 1e f2 ff 46 11 d8 68 7a d6 56 ca 13 62 66 97 df e3 c8 9c 0a 0f 8d 85 5a 00 91 12 66 89 8f 5f 52 5e 58 64 4c d6 28 47 46 5a a6 ed d9 4c 9a 5d 16 2e 33 2e 46 7f 46 cc 53 f0 81 5f eb d0 e1 d8 f3 85 09 c3 0d cf 0d c6 54 14 a9 04 20 3c 71 9d e0 49 70 47 79 da Data Ascii: (+eD,5^R\|kx0AaK>(BXLo]h<%VAz#WrR%fT!@!!"g9:Q3p^R!fzsK<K/*\|#,U4(5FhzVbfZf_R^XdL(GFZL].3.FFS_T <qIpGy
2024-08-31 18:36:06 UTC	16384	IN	Data Raw: a5 f3 74 ca 22 f6 cb da 69 9c 5d fe f9 6d 64 47 cd 67 f1 78 56 9c 72 2c cb df fe 1a 00 b6 5d 76 0d 6b 3f 7a 21 00 8f fd c7 8d ac fa f4 e9 cc af 79 90 fe 5d 0f e0 3d 8c 94 15 c5 5c 9f 6d 97 fd 92 2d 97 5e c3 dd 6f ff 1c 63 87 3d 95 d1 d5 4f 8a a7 63 15 05 bd 7e 3f 9e 3a 94 f6 4d 4b 87 4c d4 5f 8d 4d 52 76 a7 6b e8 af db 0a 07 ec 4b 39 be 34 fe 96 94 72 3f b6 18 1b 35 77 aa e3 14 6a 99 66 9d 44 46 0d 5a 86 96 8f 13 f6 aa 9a c6 9e 77 89 68 84 a3 87 f8 8f 64 0d 66 65 20 d8 d8 4b a6 05 c3 a7 e5 08 f1 00 fa be 56 c3 e3 84 61 22 bf d5 e9 e6 84 97 e7 66 f9 41 33 59 44 38 89 f1 68 74 64 57 50 14 81 a1 ca d3 5d b5 82 3d de fe f7 d1 98 16 da b8 f1 56 d6 7d ed 5f 63 8f 9e 00 b8 0e 43 ab 56 e0 5d 48 a5 26 d9 d8 90 1c 89 1c 98 8d b6 c5 a2 bf 8e d9 ba 9d 55 2b 68 9a 90 Data Ascii: t"i]mdGgxVr,]vk?z!y]=\m-^oc=Oc~?:MKL_MRvkK94r?5wjfDFZwhdfe KVa"fA3YD8htdWP]=V}_cCV]H&U+h
2024-08-31 18:36:06 UTC	14021	IN	Data Raw: a5 66 b4 28 cf 2e 8d 1c 44 b1 97 53 1f da 86 4f 6c 16 68 78 5d 70 04 d7 50 16 05 23 2e 1e e5 d8 a4 86 8f a5 38 2d d5 31 ea 14 7e 02 9b dc 97 21 d3 bb 8e 2e bc 2a 19 fe e2 78 89 cf 7a 55 5e b4 c3 be 55 5c 83 8b b8 a0 d1 6d 4b f3 41 15 12 42 d3 32 69 b3 83 4f 0c 54 93 a1 a7 b2 4f 70 1f 23 6f 12 67 76 71 af 1d 4e f2 f1 55 36 67 19 1a 61 a2 bd 0b 0c 6c 5c 7b 50 1c 21 35 eb 74 54 4d c1 42 5d d3 6f 6a 08 d0 2d 4a 0a 5c 2b 2b 48 1c a9 b8 04 3f d9 27 67 69 15 9c 93 4c a4 c4 03 1d 6a c4 46 99 97 15 bc 88 93 39 2a 2b d9 39 71 da 19 e7 65 ce 5e 64 4e e2 ab ea b4 74 92 4d 95 e0 8c d3 ac 10 d9 53 91 1d ce f4 10 aa 5c 41 d5 29 5b fa 49 ab 97 8d ac 59 e0 97 64 96 06 2b 82 c9 d2 4d f8 92 8a 45 12 ae 66 9d 41 52 6f b2 63 38 cd 2b 65 05 15 78 95 8b ea a0 31 86 b1 0d b4 a8 Data Ascii: f(.DSOlhx]pP#.8-1~!.xzU^U\mKAB2iOTOp#ogvqNU6gal\{P!5tTMB]oj-J\++H?'giLjF9+9qe^dNtMS\A)[IYd+MEfARoc8+ex1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49747	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:07 UTC	409	OUT	GET /index_files/7570217.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:07 UTC	249	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:07 GMT Content-Type: application/javascript Content-Length: 11405 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-2c8d" Accept-Ranges: bytes
2024-08-31 18:36:07 UTC	11405	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 75 70 65 72 53 6c 69 64 65 20 76 32 2e 31 2e 31 20 0a 20 2a 20 e8 bd bb e6 9d be e8 a7 a3 e5 86 b3 e7 bd 91 e7 ab 99 e5 a4 a7 e9 83 a8 e5 88 86 e7 89 b9 e6 95 88 e5 b1 95 e7 a4 ba e9 97 ae e9 a2 98 0a 20 2a 20 e8 af a6 e5 b0 bd e4 bf a1 e6 81 af e8 af b7 e7 9c 8b e5 ae 98 e7 bd 91 ef bc 9a 68 74 74 70 3a 2f 2f 77 77 77 2e 73 75 63 61 69 68 75 6f 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 33 2c 20 e5 a4 a7 e8 af 9d e4 b8 bb e5 b8 ad 0a 20 2a 0a 20 2a 20 e8 af b7 e5 b0 8a e9 87 8d e5 8e 9f e5 88 9b ef bc 8c e4 bf 9d e7 95 99 e5 a4 b4 e9 83 a8 e7 89 88 e6 9d 83 0a 20 2a 20 e5 9c a8 e4 bf 9d e7 95 99 e7 89 88 e6 9d 83 e7 9a 84 e5 89 8d e6 8f 90 e4 b8 8b e5 8f af e5 ba 94 e7 94 a8 e4 ba 8e Data Ascii: /! SuperSlide v2.1.1 * * http://www.sucaihuo.com/ * * Copyright 2011-2013, * * *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49748	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:07 UTC	409	OUT	GET /index_files/7570216.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:07 UTC	249	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:07 GMT Content-Type: application/javascript Content-Length: 46354 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-b512" Accept-Ranges: bytes
2024-08-31 18:36:07 UTC	16135	IN	Data Raw: 2f 2a 0a 20 2a 20 53 77 69 70 65 72 20 32 2e 37 2e 36 0a 20 2a 20 4d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 6c 69 64 65 72 73 2f 73 77 69 70 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 35 2c 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 20 54 68 65 20 69 44 61 6e 67 65 72 6f 2e 75 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 Data Ascii: /* * Swiper 2.7.6 * Mobile touch slider and framework with hardware accelerated transitions * * http://www.idangero.us/sliders/swiper/ * * Copyright 2010-2015, Vladimir Kharlampidi * The iDangero.us * http://www.idangero.us/ * * Licensed under G
2024-08-31 18:36:07 UTC	16384	IN	Data Raw: 61 72 20 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 3d 7b 65 76 65 6e 74 54 61 72 67 65 74 3a 22 77 72 61 70 70 65 72 22 2c 6d 6f 64 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 6f 75 63 68 52 61 74 69 6f 3a 31 2c 73 70 65 65 64 3a 33 30 30 2c 66 72 65 65 4d 6f 64 65 3a 21 31 2c 66 72 65 65 4d 6f 64 65 46 6c 75 69 64 3a 21 31 2c 6d 6f 6d 65 6e 74 75 6d 52 61 74 69 6f 3a 31 2c 6d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 3a 21 30 2c 6d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 52 61 74 69 6f 3a 31 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 31 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 31 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 46 69 74 3a 21 30 2c 73 69 6d 75 6c 61 74 65 54 6f 75 63 68 3a 21 30 2c 66 6f 6c 6c 6f 77 46 69 6e 67 65 72 3a 21 30 2c 73 68 6f Data Ascii: ar E,F,G,H,I,J,K={eventTarget:"wrapper",mode:"horizontal",touchRatio:1,speed:300,freeMode:!1,freeModeFluid:!1,momentumRatio:1,momentumBounce:!0,momentumBounceRatio:1,slidesPerView:1,slidesPerGroup:1,slidesPerViewFit:!0,simulateTouch:!0,followFinger:!0,sho
2024-08-31 18:36:07 UTC	13835	IN	Data Raw: 2c 44 2e 73 6c 69 64 65 73 5b 44 2e 61 63 74 69 76 65 49 6e 64 65 78 5d 29 7b 69 66 28 44 2e 63 61 6c 63 56 69 73 69 62 6c 65 53 6c 69 64 65 73 28 61 29 2c 44 2e 73 75 70 70 6f 72 74 2e 63 6c 61 73 73 4c 69 73 74 29 7b 76 61 72 20 66 3b 66 6f 72 28 63 3d 30 3b 63 3c 44 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 66 3d 44 2e 73 6c 69 64 65 73 5b 63 5d 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 2e 73 6c 69 64 65 41 63 74 69 76 65 43 6c 61 73 73 29 2c 44 2e 76 69 73 69 62 6c 65 53 6c 69 64 65 73 2e 69 6e 64 65 78 4f 66 28 66 29 3e 3d 30 3f 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 62 2e 73 6c 69 64 65 56 69 73 69 62 6c 65 43 6c 61 73 73 29 3a 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 2e 73 6c 69 64 65 Data Ascii: ,D.slides[D.activeIndex]){if(D.calcVisibleSlides(a),D.support.classList){var f;for(c=0;c<D.slides.length;c++)f=D.slides[c],f.classList.remove(b.slideActiveClass),D.visibleSlides.indexOf(f)>=0?f.classList.add(b.slideVisibleClass):f.classList.remove(b.slide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49750	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:07 UTC	410	OUT	GET /index_files/7570238.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:07 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:07 GMT Content-Type: image/png Content-Length: 22131 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-5673" Accept-Ranges: bytes
2024-08-31 18:36:07 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 23 00 00 00 55 08 06 00 00 00 9b ce e4 44 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDR#UDtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-08-31 18:36:07 UTC	5983	IN	Data Raw: 1c 54 c3 43 fc bd 3d 88 3f 3a 08 47 f6 60 3f b5 e8 5b 5c 44 2c 34 2e d6 b3 d3 18 9c 47 34 b0 5f 50 d0 f1 0e 4a 9f 60 86 ab 31 48 3a ed 43 2f a4 ce 25 cc 7e 8d b6 ff 67 c6 5f 09 18 1a 10 93 55 2c 9b 26 3a 65 0d 17 fb 75 2f 77 cf f6 ec c0 1d 1f fc b9 64 ff 5d df b5 2d ab 3c 5d b9 4e f9 a4 06 6e 8b de a0 48 22 89 24 92 48 22 59 ad 65 a4 e7 6d 8f 35 f8 59 c4 e9 f0 d0 b1 eb d1 23 e9 d4 df 4e 9e f9 d4 ff f5 69 87 49 6f 63 8a 0a 8f 31 7f 1d 18 5b e2 48 79 0a 8e ff a7 53 d8 f5 89 6d e8 f8 88 0c b9 db 22 1e 91 61 8b 08 aa 04 14 c9 e1 6e d8 3b 4c d8 8f 16 e0 3e 43 94 31 41 50 32 ef c1 23 65 ef e6 04 95 e8 be f3 ea d2 12 87 cc 4a e8 88 1b 90 13 9d 7e 5c 10 31 4d d7 ce ce 62 39 47 40 62 ca 48 8b 59 3d 9e e6 9f e7 e4 e8 3a f4 37 fa 09 9c de a1 40 7a a7 8a d8 f6 04 54 Data Ascii: TC=?:G`?[\D,4.G4_PJ`1H:C/%~g_U,&:eu/wd]-<]NnH"$H"Yem5Y#NiIoc1[HySm"an;L>C1AP2#eJ~\1Mb9G@bHY=:7@zT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49746	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:07 UTC	409	OUT	GET /index_files/8221087.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:07 UTC	248	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:07 GMT Content-Type: application/javascript Content-Length: 7262 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-1c5e" Accept-Ranges: bytes
2024-08-31 18:36:07 UTC	7262	IN	Data Raw: 74 72 79 7b 0d 0a 09 76 61 72 20 65 73 64 54 69 70 4c 69 6e 6b 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 3b 22 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 e6 96 b0 e7 aa 97 e5 8f a3 e6 89 93 e5 bc 80 e6 97 a0 e9 9a 9c e7 a2 8d e8 af b4 e6 98 8e e9 a1 b5 e9 9d a2 2c e6 8c 89 41 6c 74 e5 8a a0 e6 b3 a2 e6 b5 aa e9 94 ae e6 89 93 e5 bc 80 e5 af bc e7 9b b2 e6 a8 a1 e5 bc 8f 22 29 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e Data Ascii: try{var esdTipLink1 = document.createElement("a");esdTipLink1.setAttribute("href","javascript:void(0);");esdTipLink1.appendChild(document.createTextNode(",Alt"));esdTipLink1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49756	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:08 UTC	410	OUT	GET /index_files/7570255.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:08 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:08 GMT Content-Type: image/png Content-Length: 355 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-163" Accept-Ranges: bytes
2024-08-31 18:36:08 UTC	355	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 2a 49 44 41 54 38 8d 95 d3 cd 2b 44 51 18 06 f0 df 4c 33 ec 88 94 8d 22 0b 8b b1 93 92 94 d8 58 2a f9 cc de 8a ac ed 66 e6 4f 50 2c c4 4a 16 e2 0f 60 37 4a 94 52 b7 ac 64 65 45 58 90 25 25 8b 7b 2e b7 9b c6 cc 53 a7 de ce 39 cf 73 9e f3 7e e4 a2 28 92 42 09 0b 98 43 1f 9e c3 3a c5 0e 1e 65 50 48 c5 f3 38 0a f1 1b 1e f0 82 61 8c 60 05 bb a8 a4 05 f2 19 f2 27 d6 d0 81 01 8c a1 0d 4b f8 42 39 c4 3f c8 45 51 54 c4 2d 5a 30 83 eb ac cd 80 09 d4 f0 84 29 dc 24 0e a6 d1 8f cd 3a 64 38 c3 24 ba d1 99 76 50 0b 36 47 f1 51 47 e0 4f 24 39 78 6f 82 5c c1 76 56 a0 19 94 b0 9c 15 68 13 27 b1 11 4c e2 3e 2d b0 85 21 ac 37 40 9e 45 17 ce 93 8d 66 ca 38 8a 13 71 73 Data Ascii: PNGIHDRaIDAT8+DQL3"XfOP,J`7JRdeEX%%{.S9s~(BC:ePH8a`'KB9?EQT-Z0)$:d8$vP6GQGO$9xo\vVh'L>-!7@Ef8qs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49757	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:08 UTC	406	OUT	GET /c-assets/js/land.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:08 UTC	246	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:08 GMT Content-Type: application/javascript Content-Length: 884 Last-Modified: Mon, 09 Oct 2023 16:37:41 GMT Connection: close ETag: "65242c55-374" Accept-Ranges: bytes
2024-08-31 18:36:08 UTC	884	IN	Data Raw: 24 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 73 69 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e 73 75 63 63 65 73 73 52 6f 77 20 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6f 5f 77 72 66 6c 77 5f 77 77 27 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 69 64 3d 22 64 6f 77 6e 6c 6f 61 64 2d 70 72 6f 63 65 73 73 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 7a 2d 69 6e 64 Data Ascii: $().ready(function (e) { var si = setInterval(function (e) { if ($('.successRow a').length) { $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49758	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:08 UTC	410	OUT	GET /index_files/8574863.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:08 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:08 GMT Content-Type: image/png Content-Length: 79320 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-135d8" Accept-Ranges: bytes
2024-08-31 18:36:08 UTC	16147	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 4c 00 00 00 3d 08 06 00 00 00 b7 30 fc cd 00 00 20 00 49 44 41 54 78 9c 84 bd 6b d0 ae 59 7a 16 74 dd cf f7 7d 7b 77 ef de 7d 9c 53 77 0f 39 4d 32 9d 40 80 cc 21 1c a4 48 52 65 f1 c3 60 4a 4b 0b 26 6a 95 3f 08 6a 69 49 41 90 2a 0b 53 f8 cb 8a 22 56 a9 25 a2 a5 04 52 45 59 56 00 0b 14 89 24 2a 20 01 d1 18 c2 31 c3 30 c3 10 42 92 e9 9e 43 4f a7 67 76 77 cf 74 ef de cf ed 8f 75 5f 87 f5 ee 06 be ae de fb db ef fb 3c eb 59 eb 3e 5c f7 71 ad a7 fe f6 f3 cf 7d 1a 55 ef 2a e0 41 03 00 1a 40 a1 ba b1 fe 0d a0 6a 3e 07 0a a5 ab a0 2b d6 a7 8d 75 4f 35 50 55 e8 6e cc e5 c0 5c 31 c3 af 4f 1a e8 5a 7f af 67 ac 31 0a 85 73 fe 06 c7 9c 51 fc fb cc b1 fc f9 a1 0b 0a 98 ef 0a 85 be 98 fb 3e 7f 3e 65 7f 06 e6 f9 ad Data Ascii: PNGIHDRL=0 IDATxkYzt}{w}Sw9M2@!HRe`JK&j?jiIAS"V%REYV$ 10BCOgvwtu_<Y>\q}U*A@j>+uO5PUn\1OZg1sQ>>e
2024-08-31 18:36:08 UTC	16384	IN	Data Raw: e0 8e ba 22 20 ba d8 99 e2 41 9e 18 fb 39 69 07 06 b9 c5 d7 5d 9e e2 3b 13 23 5b 42 6f 82 04 ee 93 b6 e1 3d 25 0f eb 11 c7 3a c4 79 81 4c 58 03 76 74 b0 26 6d f9 2b 40 ce 9a ce b2 e0 3d 33 1b 36 b3 af 20 86 dd 65 51 b1 54 15 93 8e fc d0 83 7a d2 16 2b 69 80 aa 89 27 54 b9 92 ee 7b 75 ec cc 30 3e 8c 6d 9b aa a0 f5 79 9c 3f 06 92 4c 98 8e 2e 13 43 b2 e3 8f 6b 47 e7 39 38 6e c3 a6 7c b1 9b 8a af 56 5e ce cf e2 05 df c8 95 41 bf 12 07 e1 3c 2e ab be 5a c8 4f c9 27 9d d4 70 80 c9 1f 8a 67 f0 f6 1c f9 71 68 c2 f5 42 55 db 8e 35 b6 e8 d6 40 ed 7e 04 34 83 39 34 76 f4 32 2b 8e 7d 9c 38 8f 73 b6 df 91 66 7b 52 d2 fa 97 ce da 74 28 d6 e2 a2 6b 9a 4c 16 47 d2 84 98 53 70 77 c4 8c c1 fb 9c a8 20 fd 9d 88 62 82 80 5d 0a dc 62 55 e7 e0 c1 c9 a0 b3 25 e7 79 6e 13 69 ce Data Ascii: " A9i];#[Bo=%:yLXvt&m+@=36 eQTz+i'T{u0>my?L.CkG98n\|V^A<.ZO'pgqhBU5@~494v2+}8sf{Rt(kLGSpw b]bU%yni
2024-08-31 18:36:08 UTC	16384	IN	Data Raw: ae 88 28 2b ef 9a b9 65 a5 44 2c fb a9 a7 35 de 9e 8a 5e 90 d8 52 1c 1e b1 f3 8c 7c 6b c1 e9 c4 fe 78 08 9e 84 30 41 f0 61 4b c5 0b 8e 16 3e d8 e6 d6 28 8c a8 bc 16 42 ab 58 f3 86 80 c8 4c 6f 5d 68 ac a3 df 3c 97 f9 cf 25 c8 12 be 1b fa b7 a6 56 f9 17 41 df 7a a3 23 57 00 99 a5 72 9e 52 00 25 66 85 99 01 80 88 11 54 f8 ce 21 91 40 21 b4 8f f8 c5 86 21 22 ac 89 9d 01 fc 67 16 39 3a 8e 51 33 17 b4 fc af 70 5e fc bc 52 b9 a2 0c 21 66 7a ff 73 a0 4b 3c 4b 2f ae 2a 7c 1a 96 23 2c cb a1 55 34 f2 cc 10 f0 28 35 1e f2 ff 46 11 d8 68 7a d6 56 ca 13 62 66 97 df e3 c8 9c 0a 0f 8d 85 5a 00 91 12 66 89 8f 5f 52 5e 58 64 4c d6 28 47 46 5a a6 ed d9 4c 9a 5d 16 2e 33 2e 46 7f 46 cc 53 f0 81 5f eb d0 e1 d8 f3 85 09 c3 0d cf 0d c6 54 14 a9 04 20 3c 71 9d e0 49 70 47 79 da Data Ascii: (+eD,5^R\|kx0AaK>(BXLo]h<%VAz#WrR%fT!@!!"g9:Q3p^R!fzsK<K/*\|#,U4(5FhzVbfZf_R^XdL(GFZL].3.FFS_T <qIpGy
2024-08-31 18:36:08 UTC	16384	IN	Data Raw: a5 f3 74 ca 22 f6 cb da 69 9c 5d fe f9 6d 64 47 cd 67 f1 78 56 9c 72 2c cb df fe 1a 00 b6 5d 76 0d 6b 3f 7a 21 00 8f fd c7 8d ac fa f4 e9 cc af 79 90 fe 5d 0f e0 3d 8c 94 15 c5 5c 9f 6d 97 fd 92 2d 97 5e c3 dd 6f ff 1c 63 87 3d 95 d1 d5 4f 8a a7 63 15 05 bd 7e 3f 9e 3a 94 f6 4d 4b 87 4c d4 5f 8d 4d 52 76 a7 6b e8 af db 0a 07 ec 4b 39 be 34 fe 96 94 72 3f b6 18 1b 35 77 aa e3 14 6a 99 66 9d 44 46 0d 5a 86 96 8f 13 f6 aa 9a c6 9e 77 89 68 84 a3 87 f8 8f 64 0d 66 65 20 d8 d8 4b a6 05 c3 a7 e5 08 f1 00 fa be 56 c3 e3 84 61 22 bf d5 e9 e6 84 97 e7 66 f9 41 33 59 44 38 89 f1 68 74 64 57 50 14 81 a1 ca d3 5d b5 82 3d de fe f7 d1 98 16 da b8 f1 56 d6 7d ed 5f 63 8f 9e 00 b8 0e 43 ab 56 e0 5d 48 a5 26 d9 d8 90 1c 89 1c 98 8d b6 c5 a2 bf 8e d9 ba 9d 55 2b 68 9a 90 Data Ascii: t"i]mdGgxVr,]vk?z!y]=\m-^oc=Oc~?:MKL_MRvkK94r?5wjfDFZwhdfe KVa"fA3YD8htdWP]=V}_cCV]H&U+h
2024-08-31 18:36:08 UTC	14021	IN	Data Raw: a5 66 b4 28 cf 2e 8d 1c 44 b1 97 53 1f da 86 4f 6c 16 68 78 5d 70 04 d7 50 16 05 23 2e 1e e5 d8 a4 86 8f a5 38 2d d5 31 ea 14 7e 02 9b dc 97 21 d3 bb 8e 2e bc 2a 19 fe e2 78 89 cf 7a 55 5e b4 c3 be 55 5c 83 8b b8 a0 d1 6d 4b f3 41 15 12 42 d3 32 69 b3 83 4f 0c 54 93 a1 a7 b2 4f 70 1f 23 6f 12 67 76 71 af 1d 4e f2 f1 55 36 67 19 1a 61 a2 bd 0b 0c 6c 5c 7b 50 1c 21 35 eb 74 54 4d c1 42 5d d3 6f 6a 08 d0 2d 4a 0a 5c 2b 2b 48 1c a9 b8 04 3f d9 27 67 69 15 9c 93 4c a4 c4 03 1d 6a c4 46 99 97 15 bc 88 93 39 2a 2b d9 39 71 da 19 e7 65 ce 5e 64 4e e2 ab ea b4 74 92 4d 95 e0 8c d3 ac 10 d9 53 91 1d ce f4 10 aa 5c 41 d5 29 5b fa 49 ab 97 8d ac 59 e0 97 64 96 06 2b 82 c9 d2 4d f8 92 8a 45 12 ae 66 9d 41 52 6f b2 63 38 cd 2b 65 05 15 78 95 8b ea a0 31 86 b1 0d b4 a8 Data Ascii: f(.DSOlhx]pP#.8-1~!.xzU^U\mKAB2iOTOp#ogvqNU6gal\{P!5tTMB]oj-J\++H?'giLjF9+9qe^dNtMS\A)[IYd+MEfARoc8+ex1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49760	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:08 UTC	410	OUT	GET /index_files/7569190.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:08 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:08 GMT Content-Type: image/png Content-Length: 3871 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-f1f" Accept-Ranges: bytes
2024-08-31 18:36:08 UTC	3871	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 44 08 06 00 00 00 d4 66 f6 a4 00 00 0e e6 49 44 41 54 68 81 c5 5b 6b 6c 1b 57 76 fe ee 8c 68 c9 0a 47 43 91 92 e8 95 64 bd 18 cb 8a 68 ea 61 ad 1b 47 eb 75 a5 75 17 b6 83 dd da cd 02 49 6d e4 47 b0 a9 bb fe d1 20 c6 b6 3f da 5d 74 e3 05 5a 04 45 81 42 69 8a 45 5a a7 0b 03 6d e3 6d 80 26 12 e2 75 90 b4 49 14 c1 2b 6f e2 c8 a4 44 d1 0f 39 94 29 c6 54 a2 07 45 8d 86 b1 64 51 9c db 1f 9c 3b ba 7c 49 94 4c 39 1f 40 70 66 ee cc 3d e7 3b e7 dc 73 1f 73 87 9c 3d 7b 16 f9 02 a5 14 84 10 fe 12 c9 76 6f ea a3 6b d4 f1 40 28 d8 cc 43 94 26 f4 d1 15 21 fa 4f e0 14 d3 00 68 94 dd 98 03 08 21 42 4a 1d 54 af 87 32 99 9b 21 9e 33 41 4e 80 a0 2b 03 4a e9 8a ae 00 53 86 29 ab ff 91 62 00 8f 00 28 02 60 c2 Data Ascii: PNGIHDR8DfIDATh[klWvhGCdhaGuuImG ?]tZEBiEZmm&uI+oD9)TEdQ;\|IL9@pf=;ss={vok@(C&!Oh!BJT2!3AN+JS)b(`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49759	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:08 UTC	406	OUT	GET /c-assets/img/22.gif HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:08 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:08 GMT Content-Type: image/gif Content-Length: 28371 Last-Modified: Mon, 26 Oct 2020 10:13:06 GMT Connection: close ETag: "5f96a132-6ed3" Accept-Ranges: bytes
2024-08-31 18:36:08 UTC	16148	IN	Data Raw: 47 49 46 38 39 61 80 00 2b 00 84 00 00 b4 b2 b4 d4 d6 d4 c4 c6 c4 e4 e6 e4 bc be bc dc de dc cc ce cc ec ee ec bc ba bc b4 b6 b4 dc da dc cc ca cc ec ea ec c4 c2 c4 e4 e2 e4 d4 d2 d4 f4 f2 f4 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 09 00 11 00 2c 00 00 00 00 80 00 2b 00 00 05 fe 60 24 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff 3c 48 41 61 28 1a 14 05 08 b0 74 70 04 1e 8b 22 52 b9 1c 35 9f d1 47 c0 41 a5 15 04 09 80 78 2c 4e 08 14 dd e0 97 cc 36 27 7f 10 85 80 4d 76 cb 1c 04 ba 1e 80 28 f4 0a 79 7b 6c 04 7e 3c 05 08 82 83 0e 2e 07 0b 89 7b 04 07 39 07 73 8f 74 02 92 38 07 Data Ascii: GIF89a+!NETSCAPE2.0!,+`$dihlp,tmx\|<HAa(tp"R5GAx,N6'Mv(y{l~<.{9st8
2024-08-31 18:36:08 UTC	12223	IN	Data Raw: a5 21 c4 67 85 05 2b 37 d6 32 72 fe e5 eb 27 59 24 dc fa 84 05 03 04 6c cf 00 1f 51 03 0e 85 15 6c 6b 44 01 0b 17 9b ca 02 21 6b 51 41 2d f6 19 50 c1 2f 3d 0f 93 00 4d 50 0c 62 d4 49 02 8c 60 34 15 0c 54 c0 41 c9 6d 71 d0 d3 17 0c 6c f0 b4 38 15 90 3d 85 18 64 98 81 c6 da 59 b4 9d 00 08 71 80 90 40 07 4d df c1 80 02 1b 88 d4 c7 06 0a 48 7d c7 e4 94 57 6e f9 e5 98 67 ae f9 e6 9c 77 9e 79 10 00 21 f9 04 09 09 00 29 00 2c 00 00 00 00 80 00 2b 00 85 3c 3a 3c 9c 9a 9c cc ca cc 6c 6a 6c b4 b2 b4 e4 e2 e4 84 82 84 54 52 54 d4 d6 d4 74 76 74 bc be bc a4 a6 a4 ec ee ec 8c 8e 8c 44 42 44 64 66 64 d4 d2 d4 74 72 74 bc ba bc ec ea ec 8c 8a 8c 5c 5a 5c dc de dc 7c 7e 7c c4 c6 c4 ac ae ac 3c 3e 3c 9c 9e 9c cc ce cc 6c 6e 6c b4 b6 b4 e4 e6 e4 84 86 84 54 56 54 dc da dc Data Ascii: !g+72r'Y$lQlkD!kQA-P/=MPbI`4TAmql8=dYq@MH}Wngwy!),+<:<ljlTRTtvtDBDdfdtrt\Z\\|~\|<><lnlTVT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49763	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:09 UTC	410	OUT	GET /index_files/7569191.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:09 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:09 GMT Content-Type: image/png Content-Length: 1290 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-50a" Accept-Ranges: bytes
2024-08-31 18:36:09 UTC	1290	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 14 08 06 00 00 00 80 97 6d 4a 00 00 04 d1 49 44 41 54 38 8d 05 c1 79 6c 14 f5 02 c0 f1 ef fc 66 76 76 76 f6 6c bb dd ed be ae a9 94 46 db 86 a3 0a 68 f2 52 a9 60 54 34 82 a6 c6 03 f5 0f 63 34 18 63 44 8d c6 78 c5 18 5f 5e de f3 0f 12 8f e8 7b c1 68 c4 23 1a 35 51 81 a0 88 78 57 f1 a2 2a 2a a5 16 0a dd 2d a5 dd dd 76 77 76 e7 d8 d9 99 f1 f3 91 82 46 1d 00 1f 81 08 7c 2c b5 40 24 d4 05 d4 bb cc e3 87 b7 7c b6 ef 87 3b 1c ab a5 5e 7c d9 ea 9d ed ab 56 bd 0f bd 05 c7 09 08 5b 16 08 09 10 00 48 cd c6 12 48 01 c2 0b 90 d5 36 e0 cb 0d 93 fb f6 df f9 cd 47 c7 b6 04 d6 a4 36 e3 e8 c8 6d 29 7a d2 1a 56 49 6f 0d 5f d2 bb 7b 60 f3 e8 cb 81 77 f6 9e c0 a9 13 48 12 10 20 95 cc 19 44 d0 22 ae 9d 8d 22 Data Ascii: PNGIHDRmJIDAT8ylfvvvlFhR`T4c4cDx_^{h#5QxW**-vwvF\|,@$\|;^\|V[HH6G6m)zVIo_{`wH D""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49765	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:09 UTC	410	OUT	GET /index_files/8229979.jpg HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:09 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:09 GMT Content-Type: image/jpeg Content-Length: 34589 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-871d" Accept-Ranges: bytes
2024-08-31 18:36:09 UTC	16147	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 29 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyP)http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xm
2024-08-31 18:36:09 UTC	16384	IN	Data Raw: 35 3b 4b 59 5d 6e 09 9a 75 7c d8 e7 1d 4a 7d 23 7e e4 69 e4 8b 11 27 80 5d 11 ad 8d 62 d8 25 2d 4a 0d 7f e9 71 cf 65 0c ed 37 86 22 c8 15 fa 81 90 2a 95 fa da 75 16 9e e3 b4 d2 a5 d5 6e 1a 9d a5 ac ae b7 04 d0 a3 af 9b 1c e3 a9 4f a4 6f dc a1 e7 92 2c 44 9e 01 74 46 b6 35 8b 60 94 b5 28 32 05 d1 dd 1d 09 bd 1a 13 3c db 45 b4 4f 3f 72 ab 6d 4a d3 38 2a 4a d3 22 90 6c ee 8d 14 74 8c bf 7c f4 65 d1 c5 c8 ad 93 93 89 e6 ef 4f 0e 2c 38 43 88 62 08 56 1e 40 7b 5c 5f 67 91 9d e6 96 3a d9 01 ed 71 7d 9e 46 77 9a 58 eb 64 0d 7f 61 56 15 76 34 5a ec 69 4d 4b a9 74 a7 86 a4 99 6b 5d d6 e3 7a ec 09 f3 63 9c 81 44 1c 88 dc 39 44 0f 38 58 8e 3c 01 e8 81 6c 6b 56 c0 a9 6b 50 51 f2 01 00 80 40 20 10 24 0b d5 1f 9e ca e7 d9 9f 0c 42 50 30 02 01 02 bf 7d 2e 39 13 a1 9d a6 Data Ascii: 5;KY]nu\|J}#~i']b%-Jqe7"unOo,DtF5`(2<EO?rmJ8J"lt\|eO,8CbV@{\_g:q}FwXdaVv4ZiMKtk]zcD9D8X<lkVkPQ@ $BP0}.9
2024-08-31 18:36:09 UTC	2058	IN	Data Raw: 76 9b c3 11 64 0a fd 40 90 2f 54 7e 7b 2b 9f 66 7c 31 09 40 c0 08 04 0a fd f4 b8 e4 4e 86 76 9b c4 f1 64 07 aa 3f 22 75 cf b3 3e 27 84 a0 48 12 01 00 80 40 af df 4b 8e 44 e8 67 69 bc 4f 16 40 7a a3 f2 27 5c fb 33 e2 78 4a 04 81 20 10 08 04 0a fd f4 b8 e4 4e 86 76 9b c4 f1 64 0d fe 80 40 20 10 08 04 02 04 a0 fa bc f3 93 1b fa 56 03 f0 46 81 e7 ed 30 a8 f3 35 22 9f e5 6a 95 26 9a ee 44 d1 27 3e 86 21 05 35 e8 95 1e 48 4e 08 44 15 2c 65 2d 6a 50 94 c1 2f fe 20 7a 05 ee f3 79 3f bd ca bf c0 93 f8 d0 1e ef 37 93 fb dc ab fc 09 3f 8d 01 ee f3 79 3f bd ca bf c0 93 f8 d0 1e ef 37 93 fb dc ab fc 09 3f 8d 01 ee f3 79 3f bd ca bf c0 93 f8 d0 1e ef 37 93 fb dc ab fc 09 3f 8d 01 ee f3 79 3f bd ca bf c0 93 f8 d0 31 25 76 ae d3 fd c5 cf ef 15 2a a5 3c 39 3d 4d 0f 4e 4e Data Ascii: vd@/T~{+f\|1@Nvd?"u>'H@KDgiO@z'\3xJ Nvd@ VF05"j&D'>!5HND,e-jP/ zy?7?y?7?y?7?y?1%v*<9=MNN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49764	45.135.232.98	443	6376	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:36:09 UTC	398	OUT	GET /favicon.ico HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
2024-08-31 18:36:09 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:36:09 GMT Content-Type: image/x-icon Content-Length: 1150 Last-Modified: Mon, 12 Aug 2024 14:40:51 GMT Connection: close ETag: "66ba1ef3-47e" Accept-Ranges: bytes
2024-08-31 18:36:09 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 1c cf 4c 14 26 e4 80 10 1b dd 74 08 11 ea a8 0f 1f ed 90 0d 19 ea 9a 08 17 f2 a2 19 36 ee 5c 28 34 e5 8a 48 55 f5 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 17 d0 8a 05 0b db fc 06 34 de ff 09 6e d9 ff 0b 52 d7 ff 20 98 e0 ff 22 8e e5 ff 23 79 ef ff 3b b7 f3 ff 1a 38 e3 ff 2b 37 f0 f4 29 41 f6 62 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 0b db ae 02 09 e1 ff 03 0d df ff 08 1a ee ff 08 2c ec ff 08 40 e9 ff 0d 3f ec ff 0c 32 f1 ff 06 23 f2 ff 08 17 ed ff 16 25 ed ff 14 35 f5 7c 00 00 00 00 00 00 00 00 00 Data Ascii: h( L&t6\(4HU44nR "#y;8+7)Ab,@?2#%5\|

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 7020, Parent PID: 4216

General

Target ID:	0
Start time:	14:35:34
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprb.icu/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6376, Parent PID: 7020

General

Target ID:	1
Start time:	14:35:35
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1968,i,16311935120300516305,16399617042518779315,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,IWZ1bmN0aW9uKHQsZSl7Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzJiYib2JqZWN0Ij09dHlwZW9mIG1vZHVsZT9tb2R1bGUuZXhwb3J0cz1lKCk6ImZ1bmN0aW9uIj09dHlwZW9mIGRlZmluZSYmZGVmaW5lLmFtZD9kZWZpbmUoW10sZSk6Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzP2V4cG9ydH
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT10eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOmZ1bmN0aW9uKGUpe2lmKCFlLmRvY3VtZW50KXRocm93IG5ldyBFcnJvcigial
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIHRleHQyID0gJ+K9uee7nOWuieWFqOmDqOK7lOeahOaPkOekuu+8mjxicj5cbicgKw0KICAgICfmo4DmtYvliLDmgqjmraPlnKjkvb/ivaTkuK3ljY7ivIjiuqDlhbHlkozlm73ms5XlvovnpoHivYznmoQgVlBOIOS7o+eQhuOAgjxicj5cbicgKw0KICAgICfmgqjnmoTmtY/op4jlmajlt7
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNjYzVlMD1fMHg1MGJiO2Z1bmN0aW9uIF8weDUwYmIoXzB4NWYxYTZjLF8weDRkODI0ZSl7dmFyIF8weDFmOGJmMT1fMHg1YzYyKCk7cmV0dXJuIF8weDUwYmI9ZnVuY3Rpb24oXzB4NDY4MTFhLF8weGVlYTYwZSl7XzB4NDY4MTFhPV8weDQ2ODExYS0weDEyMzt2YXIgXzB4NWM2Mj

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+9zHyrbB7yZnKCN&MD=f7eodY5O HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%3A%2F%2Fcninaspwebprn.icu&oit=3&cp=21&pgcl=4&gs_rn=42&psi=A-BHRQIvUdko_ht_&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c-assets/css/style.css?1714115086 HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /c-assets/css/bootstrap.min.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /c-assets/css/font-awesome.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /c-assets/dialog-new/logo.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570212.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570214.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7601024.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570215.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570255.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/8574863.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570217.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570216.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570238.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/8221087.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7570255.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /c-assets/js/land.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/8574863.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7569190.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /c-assets/img/22.gif HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/7569191.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /index_files/8229979.jpg HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=00qq7v36ngvh8jpq5luhds881j

Source: global traffic	DNS traffic detected: DNS query: cninaspwebprb.icu
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cninaspwebprn.icu

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.73.194.208
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.2

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cninaspwebprb.icu

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
https://cninaspwebprb.icu