Edit tour

Windows Analysis Report
https://cninaspwebprn.icu

Overview

General Information

Sample URL:	https://cninaspwebprn.icu
Analysis ID:	1502255
Infos:

Detection

Score:	21
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains suspicious base64 encoded javascript

HTML page contains obfuscated script src

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprn.icu/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 7032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5464 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c-assets/css/style.css?1714115086 HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/css/bootstrap.min.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/css/font-awesome.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/dialog-new/logo.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570212.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570214.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7601024.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570215.css HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570217.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570238.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/js/land.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570216.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570238.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570236.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7570255.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: cninaspwebprn.icuConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cninaspwebprn.icuSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3Sec-WebSocket-Key: /aNa9hteadAW3e7VXf5TOw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /index_files/8574863.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/8221087.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/unionpay.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/js/land.js HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7569190.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /c-assets/img/22.gif HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /index_files/7569191.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: cninaspwebprn.icuConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cninaspwebprn.icuSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3Sec-WebSocket-Key: oHm6P2xxZhBje3KaZVA/gw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y3vW+yk5GHZulsg&MD=VhHzvLDY HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /socket.io/?EIO=3&transport=websocket HTTP/1.1Host: cninaspwebprn.icuConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://cninaspwebprn.icuSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3Sec-WebSocket-Key: Bn/oBUJDwQ65axMNBF9gmA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlKHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c-assets/img/header_2.png?1 HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/c-assets/css/style.css?1714115086Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /c-assets/img/header_3.png?1 HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/c-assets/css/style.css?1714115086Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /index_files/7570258.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /c-assets/img/footer_3.png?1 HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /index_files/pic_9594053.jpg HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /index_files/9217976.jpg HTTP/1.1Host: cninaspwebprn.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdcRlPexe8/%2BhDck5e85UwuHb4aVnorHZkSS8YE28XRFyiJVA06f4BcN5rGsXssiGAcZILpVG6tXpOf2uw3IDf4F22eS9KXA1Arze/ZcDoBc6Ko4Cl3P87dz5QUPL2oHdgLjy/sPgwLZWN8XVc%2BuW3r7zU94ibd07u8DaZrjtroQHz1bbqHXmShtCb2XehlWDNiXe%2BWahzPztQstE4mGgHHgT/wk5Z%2BJycS8z%2B1bvzQZNF2GmhA5%2B1jVIreYBkEm4qHt4INFrlnVqXWREMYBWStIHUObpFBcREaD4Wq1TPo1agUco5%2BcBtbWaFNbJ5Sd%2BKYUkEdGnjqi1QqJJ2w8kH0QZgAAEH2wvYiqQ7NZtX2WVx2k7aewAZkqVp/a9PipNvcmxmAT2nn9yv6qXdzovHBuhYwVX1vXZ3ScUfj74F15mzlOjEgzRAlmGCtkHbTZ6fZfy2kerRTwY6q8jQdwG0XdjMnDLVOrkLRRepd3OYWwr3XWkZPZxFe56lTsAnoJwZ4WBIF/bPbbHjYjqQQCACjeop5n03I2dHKy8K0FT3ncqVCeKV4BhOAK3sJ7S6m4WcCLZH3lmlkdxuwgpzSEn%2BRfXe7ve1MddQAsMgwR0jQ/Zr9M8JAY7r5S5USP4E59L6AjKsrgX95U620Q0BPkHu1z69Yi6JVBspnpIo6nK7F7FSzq/%2Bd/XfTeEdL/QESVzE%2BisCeT3OfdYBVRQt305tgsSi2qYKKYEkKaG4ROhBePRU0PTjIS4Y0b2yVEAXOtI2yBxmYDbxSg2oaoTrNbbtiYVuYJTZZ9wC8oMcklD0i4VVmYUl1DgSnjU2frALbBG%2BAsip/JBbQn7lFa3/x13yiMfGk9SNQcrvJDM3ToF9w51qHTcgHWOO1a0P6dmnLNPiUVTf3Znx6tAhRmie%2BxhEzppl1a7FQzuVoU3U1bvg2AIUHSGGW8HdcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1725129474User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 3BD3ECC6BBFE4E5E8C712F10FEED5C4EX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y3vW+yk5GHZulsg&MD=VhHzvLDY HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index_files/7570266.png HTTP/1.1Host: cninaspwebprn.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cninaspwebprn.icu/index_files/7570214.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true

Source: global traffic	DNS traffic detected: DNS query: cninaspwebprn.icu
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4808Host: login.live.com

Source: chromecache_119.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_119.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_94.1.dr, chromecache_92.1.dr, chromecache_129.1.dr	String found in binary or memory: http://www.idangero.us/
Source: chromecache_94.1.dr, chromecache_92.1.dr, chromecache_129.1.dr	String found in binary or memory: http://www.idangero.us/sliders/swiper/
Source: chromecache_111.1.dr, chromecache_93.1.dr	String found in binary or memory: https://www.mangren.com/mps.gov.cnV5/
Source: chromecache_111.1.dr, chromecache_93.1.dr	String found in binary or memory: https://www.yunmd.net/toolbar/allToolvarV5/help.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.69:443 -> 192.168.2.17:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.183:443 -> 192.168.2.17:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.17:49778 version: TLS 1.2

Source: classification engine

Classification label: sus21.phis.win@16/102@6/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprn.icu/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5464 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5464 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://cninaspwebprn.icu	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
www.google.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe
http://www.idangero.us/	0%	URL Reputation	safe
https://cninaspwebprn.icu/index_files/7570236.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/unionpay.png	0%	Avira URL Cloud	safe
http://www.idangero.us/sliders/swiper/	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/css/font-awesome.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570212.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/img/header_3.png?1	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570217.js	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570266.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7601024.css	0%	Avira URL Cloud	safe
http://www.idangero.us/sliders/swiper/	0%	Virustotal		Browse
https://cninaspwebprn.icu/index_files/8221087.js	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7569191.png	0%	Avira URL Cloud	safe
https://www.yunmd.net/toolbar/allToolvarV5/help.html	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/css/bootstrap.min.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570258.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/img/footer_3.png?1	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/9217976.jpg	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/dialog-new/logo.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7569190.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570255.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/img/header_2.png?1	0%	Avira URL Cloud	safe
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	0%	Virustotal		Browse
https://cninaspwebprn.icu/c-assets/js/land.js	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/socket.io/?EIO=3&transport=websocket	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570214.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/8574863.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570216.js	0%	Avira URL Cloud	safe
https://www.mangren.com/mps.gov.cnV5/	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570238.png	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/pic_9594053.jpg	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/index_files/7570215.css	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/css/style.css?1714115086	0%	Avira URL Cloud	safe
https://cninaspwebprn.icu/c-assets/img/22.gif	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cninaspwebprn.icu	45.135.232.98	true	false		unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cninaspwebprn.icu/index_files/unionpay.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570236.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/css/font-awesome.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/	true		unknown
https://cninaspwebprn.icu/index_files/7570212.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/img/header_3.png?1	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570217.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570266.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7601024.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/8221087.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7569191.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570258.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/css/bootstrap.min.css	true	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/img/footer_3.png?1	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/9217976.jpg	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/dialog-new/logo.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7569190.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570255.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/img/header_2.png?1	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/js/land.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570214.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/socket.io/?EIO=3&transport=websocket	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/8574863.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570216.js	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570238.png	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/pic_9594053.jpg	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/index_files/7570215.css	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/css/style.css?1714115086	true	Avira URL Cloud: safe	unknown
https://cninaspwebprn.icu/c-assets/img/22.gif	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_119.1.dr	false	URL Reputation: safe	unknown
http://www.idangero.us/sliders/swiper/	chromecache_94.1.dr, chromecache_92.1.dr, chromecache_129.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.yunmd.net/toolbar/allToolvarV5/help.html	chromecache_111.1.dr, chromecache_93.1.dr	false	Avira URL Cloud: safe	unknown
http://fontawesome.io/license	chromecache_119.1.dr	false	URL Reputation: safe	unknown
https://www.mangren.com/mps.gov.cnV5/	chromecache_111.1.dr, chromecache_93.1.dr	false	Avira URL Cloud: safe	unknown
http://www.idangero.us/	chromecache_94.1.dr, chromecache_92.1.dr, chromecache_129.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
45.135.232.98	cninaspwebprn.icu	Russian Federation	49392	ASBAXETNRU	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1502255
Start date and time:	2024-08-31 20:36:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://cninaspwebprn.icu
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus21.phis.win@16/102@6/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.110, 66.102.1.84, 34.104.35.123, 142.250.186.106, 142.250.185.138, 142.250.185.106, 142.250.181.234, 142.250.186.74, 216.58.206.42, 142.250.185.74, 216.58.212.138, 142.250.186.138, 172.217.16.202, 216.58.212.170, 142.250.186.42, 172.217.18.106, 216.58.206.74, 142.250.184.202, 172.217.18.10, 142.250.184.206, 142.250.186.78, 216.58.206.35, 142.250.186.46
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://cninaspwebprn.icu/ Model: jbxai	{ "brand":["Ministry Of Public Security Of the People' Republic Of China"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["CARD NUMBER", "MM", "DATE", "ENG"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://cninaspwebprn.icu/ Model: jbxai	{ "brand":["mps.gov.cn"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["CARD NUMBER", "DATE", "CARD HOLDER", "Card Holder Name", "Confirm Payment"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://cninaspwebprn.icu/ Model: jbxai	{ "brand":["Ministry Of Public Security Of the People' Republic Of China"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["CARD NUMBER", "MM", "DATE", "ENG"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:37:30 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.0009551763430675
Encrypted:	false
SSDEEP:	48:8OXkdRTS7v7HgidAKZdA1JehwiZUklqehr1ny+3:8OXOwGS5y
MD5:	7724932E72C16B2A6EEAEC63B0FBD44A
SHA1:	E6F832D15D124373E6F1A9BEF251AD3ADA882978
SHA-256:	0711ABA6430A05910C9455620E7B97BDAD41AAC7DD1FCC338D4DE7D212EC518B
SHA-512:	580F3C67740D5EC96FFB41CC4B0A361056DAD51ED4E69AAEB1632C2B2331E4403824E8B9FC6E57C15EBDFA9CD05A3EBDBE55F53EEA70DCB79DA1CF1FE257FF98
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:37:30 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.0158052583804995
Encrypted:	false
SSDEEP:	48:8HkdRTS7v7HgidAKZdA10eh/iZUkAQkqehC1ny+2:8HOwU9Ql5y
MD5:	A16F8D4A6EFD7D3927A67623094723AF
SHA1:	2D1E73421F5221B031258F2D244F26B569BBAA00
SHA-256:	AE2929E3F25BF30671F3F859D5CBAC4BBB320BAB5115A27DF16C3806B04E43FE
SHA-512:	FCF364599ADA1403899779B2B1AF8132B4E73F17F0EBE7B8071C15E974A21F02C960A4C90E7FBB6AD0D5C9E882A26B87AED6C511D5618721ED100240722038E9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....~...........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.024353132105086
Encrypted:	false
SSDEEP:	48:8ekdRTS7vjHgidAKZdA14tIeh7sFiZUkmgqeh7sc1ny+BX:8eOwEnW5y
MD5:	B3C71362B3116FEA5329A01E4CB801A5
SHA1:	1BDD81F10A72B18F3B6CFBCD73BD4D3B20ED9CD4
SHA-256:	E60D198D7DE612EC97BAC365AF7F6C0A954EE542D0DDF3D01DE09D172E7AA9BA
SHA-512:	56923C7BC98AA6E54EACB46B17D055EE630E2326C747A01387FC350348E5962B3715346CF6EAE5F14E87ADE5E6911398E7C9250EEF6C0EB776E6714E4402E526
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:37:30 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.01300466039745
Encrypted:	false
SSDEEP:	48:8ZkdRTS7v7HgidAKZdA1behDiZUkwqeh+1ny+R:8ZOwPE5y
MD5:	0A7BA67C3D04FA2BCD2455806A627580
SHA1:	817F3BDD35B377E73F06115B07011ABCB81689E4
SHA-256:	60C6F555D84953BBD48D138E5FC3739B172792532F1342376248B6C3A658579C
SHA-512:	CC497F0BE2AA9ABBC9AAEE3948C0D25BE57DC228110DC9A4AFD974B0EE2B96B4207D14F0AC18CAC294D8960AFB1474E17E1ECD4C9F6F87DC136B5B44C3486CE3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....g..........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:37:30 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.005368816412062
Encrypted:	false
SSDEEP:	48:8kkdRTS7v7HgidAKZdA1VehBiZUk1W1qehw1ny+C:8kOwv9Q5y
MD5:	816130B25BCB7301F44CEB84C7589CF7
SHA1:	072B8C5577763284434221074880409F97D528C9
SHA-256:	CDC5BB7F3C47B38A2FE1361D2C48DFA85B428C151B81F521A8EF746E2FCB3DF2
SHA-512:	9A30F3976ED5CF6899E094AB884C2DAFD5D34B9C8235A496070CE8D912CE85A500D18B72A41C558092F7E0152A38BDD7E16CF7BD07DDC590454F79B676E5B44B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....M..........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jul 31 17:37:30 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.014389157388252
Encrypted:	false
SSDEEP:	48:8UkdRTS7v7HgidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbW1ny+yT+:8UOwbTTTbxWOvTbW5y7T
MD5:	48363C6AF59F36E5FB02CBB127858C50
SHA1:	3EAC180AD934E94E99F9953FC8E1033617D91CD8
SHA-256:	A0D60C291569041680CE91A49501E41FB60DEAF7203F46AFF300F434F80B3E40
SHA-512:	3F706E946DDD613B1AC118667208572DE08349E362DAB25B33069ED65D609252B3A86EB5AE68E45C39C5956803988896D7C347CEF5F9ACE0EC19BA0498D95E55
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,................y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Y......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y......L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.Y......M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.Y.............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.Y.............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (352)
Category:	downloaded
Size (bytes):	9796
Entropy (8bit):	5.016993364994656
Encrypted:	false
SSDEEP:	192:NgcUP4//FHGa+p0F21DG4x8tJV1E2/gXa5nR0huEyRYQjKexFhT:6kFx+p0FQJ8tJ7EKgXadihuEyRYQjKet
MD5:	76E3EC999ED23869EF65A9F85AC04809
SHA1:	A39E6105A1B84E06D92B6ADB1E657D3292822DC3
SHA-256:	C2056253BDDE441D18ABD7DE45DD2B81310A048B16ED59D299C645499AE8C749
SHA-512:	9F7FB037B3820AD6C96C315FAC0888CAA5E312E61780D2F0A279E617C8CC6402FE94D1F36EE7EC3798BBB4CECFA9BA27037016AC31D05066089C6645D691E4E1
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/css/style.css?1714115086
Preview:	@font-face {. font-family: 'Font Awesome 5 Brands';. font-style: normal;. font-weight: normal;. font-display: auto;. src: url("/c-assets/webfonts/fa-brands-400.eot");. src: url("/c-assets/webfonts/fa-brands-400.eot?#iefix") format("embedded-opentype"), url("/c-assets/webfonts/fa-brands-400.woff2") format("woff2"), url("/c-assets/webfonts/fa-brands-400.woff") format("woff"), url("/c-assets/webfonts/fa-brands-400.ttf") format("truetype"), url("/c-assets/webfonts/fa-brands-400.svg#fontawesome") format("svg");.}...fab {. font-family: 'Font Awesome 5 Brands';.}..@font-face {. font-family: 'Font Awesome 5 Free';. font-style: normal;. font-weight: 400;. font-display: auto;. src: url("/c-assets/webfonts/fa-regular-400.eot");. src: url("/c-assets/webfonts/fa-regular-400.eot?#iefix") format("embedded-opentype"), url("/c-assets/webfonts/fa-regular-400.woff2") format("woff2"), url("/c-assets/webfonts/fa-regular-400.woff") format("woff"), url("/c-assets/webfon

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x560, components 3
Category:	dropped
Size (bytes):	603022
Entropy (8bit):	7.984264462666317
Encrypted:	false
SSDEEP:	12288:+C5Rtt4r9QuGcDUPSKvwq7GtkzHUIa1LwkN0wPWHmeMShJG7B:+C5Rtt4r6vb6tYu1LwkN0wUmtShJG7B
MD5:	99BF4FD1DA6220B332CCE4064B882854
SHA1:	4A43545C37168E733BD0C9A912E95CE7A20AA688
SHA-256:	91D9CE3BBDE8A18267CCA186A1C7C0920D453387C90E7C0200C29BF9B0360CC5
SHA-512:	9579C4A6A8216E072EFE4DF40A4F681742B15D69B86D6CC4A1EC92B432CBC6A0F7487AFCD52CDB53E6A0B0D5516E4F9E92145F42594172F4EB05655DF31A5031
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......Z......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f90d0192-eebb-5044-bd41-3a8351b27fda" xmpMM:DocumentID="xmp.did:05B6D40A1EF111EF96E9876970168372" xmpMM:InstanceID="xmp.iid:05B6D4091EF111EF96E9876970168372" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:072e1b79-ad84-c94c-8e02-12dbf0c4a9ae" stRef:documentID="adobe:docid:photoshop:54175768-2b32-134c-a89f-336fe100894e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.7931443269714
Encrypted:	false
SSDEEP:	24:o2kscvkPqdHiJFRR88LV0OtXW100cB/0QHEE/:X+v5iL88L+Ok1pcB/ok
MD5:	2EBF54D6BE73C227F780830EB51FA35D
SHA1:	CA24BC1D8BDA1D149FC97B1E21C2880F67EBE83F
SHA-256:	BC87C1E813B4B81B23BB1A13372125C0923BB05C73A3DA22524CF4C03E7D9B5D
SHA-512:	861F06C8F21C62B6ADEDEF325E59A7356E7BDDF8224E8774AC0AB41BB3E3E531E7269E0510C874CB682CDF57C05A7158614D80E201C87A8C01A06D859AC76AF9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/favicon.ico
Preview:	............ .h.......(....... ..... ........................................L.&....t.............6.\(4.HU.4............................4...n...R.. ..."...#y..;....8..+7..)A.b................................,...@...?...2...#.......%...5.\|................. .....5y.............#...)...:....^.......6.X............... .......'~...........V...P.......'..3...-...^.................=...............$...#...'...2...3...=...T...g...T..N....3.......)....8...5...k......!...#...,....n...M..&^..^...V..........L(....}.........................."...............V...c...u......V.....]..........................................4...I...^...)..>#....w...............^.......8...8..............&...A...v...I...)....................................&..........8...$...........!.......?.......T.......S...6.......L.......V..:...^...........>..0.........#...........e..+}...........9..+...D...9...............0..^!........I.......$...........b..'...(...:..@.......................F....................(...0.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	139
Entropy (8bit):	5.210458342210909
Encrypted:	false
SSDEEP:	3:yionv//thPlE5teW/iLts7CX9/gm6KpNsdoiRmoZ+qNfNZlVp:6v/lhPAeGiR/C+QC4moA+pp
MD5:	7D6A2BEC99C61B93D8E80123F93541E4
SHA1:	AE2903B6DA02F985895BE8A075B559C4B6C30A6D
SHA-256:	AD16C8A6BD3BF0CF1C9E496A948EA2AC12985791A1A5B585DD83084B04CE1CE9
SHA-512:	F35F141F3F08325F44AAA7ADF6DFB202C33E52752A413974111362B7DEB766DB4D3FFD547EA22D04F8AE4AD0BF3C52FB9F929F9C93135DDC8DEB2824B1C201F8
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/header_2.png?1
Preview:	.PNG........IHDR.......F......H.]....sRGB.........gAMA......a.....pHYs..........o.d... IDAT(Sc8t....A...t.../..@..J....c....`......IEND.B`.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 68, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3871
Entropy (8bit):	7.926380055231519
Encrypted:	false
SSDEEP:	96:bg3eGfYjFH9qAHA4rZDhr77Sj/tMeEGKbiqPy:IQjBQAgMDhr77Si3Ly
MD5:	30A97280BB5E9A7407063CF3C858579C
SHA1:	D7B0733BABCAEF56F19B5DEE550E83A97476A7A2
SHA-256:	CDF4937729B37D2A376B9EC054F6C614B156126164AB6113E0271EF224A20121
SHA-512:	0F21F4B6551FF467E5F3DD86C8079688F64B62203291AF0C0772DC60D1F428C8C97723BC5B6EB00FEDC18911B45D1849F995995ADB081B6D0CBD1C764353412E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...D......f......IDATh..[kl.Wv..h..GC...d...h.a..G.u.u.......Im.G..... .?.]t..Z.E.Bi.EZ...m.m.&..u..I..+o..D..9.).T..E...dQ....;.\|I.L9.@pf..=.;..s.s..={..........vo.k..@(..C.&...!.O....h....!BJ.T..2..!.3AN..+.J..S.)...b...(.`....8.%._.?.Rj....".D....+..S.$.B...!D/.h+.u...r....\|..].H...u..S..(.i._....+......Y(.QJ.)...!.\.d#.F.YF...+..h..........!w.h.-.@uiV.fG..B..l..`.+8.!..k^...x.....z..\|...Y.z.e.aI..A>T.!Em%..q9...H.H.......G......2.\b.j.....b..e^...#._y.P.1.4....%g.e.......~.C~..1."......<..#7.......?..8.niJ%....q.z..;^....b....J)%..y...d.O]...E..W.kw.!e^....F.........=.......1..cd?....=.e.(.Q..RJ.......?.....(.UD..D..[d3....b..=...`7.j. [$>..X5...W.....!.@W>.r.?.-R.2....._.uR.7:. .I.........~.y..F..q2.`9A.T.4.v.W..l....~.>.B.V.v..k.(..C(.\|..G.7M.G..[..*..."..Ie.{.6.YFv..&...J5U..mT.....=.......\".hW.%...Ql;.=..T. ...4.e.A..1.s.,..!..g_...g.2.o.e...xH5U.E....5.v.{P.!..(..6)%.{...tC.Y..W6Yyv.....1cY.O.ox....@..<.!.x

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 5, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	171
Entropy (8bit):	6.445846670391365
Encrypted:	false
SSDEEP:	3:yionv//thPloqqtRxv5t3HKBsAxl63yx9M0tJ00psIaPMxPb34lwruA5tXjp:6v/lhP2qqtR/axl6YRJ00LEwPb3owrFD
MD5:	A7F0D7ACA92BF9570CBFB4484D2625F7
SHA1:	5C4C9D40F538B65FF3A7DD9355D3B6C6F6060AEE
SHA-256:	6AC0143ABDE9B65AFA61EBD43FEE7536CD29436A87A4ECEB8104110E61A2067E
SHA-512:	E865B2C675188850A5F9EB15A0924DD63793DCAAD204E93E427E5560DDD79D943D1F9D860237819D962766E896D245661FAD4C4DF5DC7CE607C8D9C12CD422A6
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570266.png
Preview:	.PNG........IHDR....................rIDAT(...A..@.E_...#.,...Ep.+..e.(x....../.~x.$$....l.-k.}.DXH...#...vm..w+.m...U...O......*.p..?..\|....x...;.jz._-5`&........IEND.B`.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4622)
Category:	downloaded
Size (bytes):	4627
Entropy (8bit):	5.843983061672193
Encrypted:	false
SSDEEP:	96:Tli/iK7PG4+BVBCLZ2luykd0n4cwydNGffffffL:JJKy5BHC92M0nhwSA
MD5:	9418F7AD9314E253A32FE800BCB4227F
SHA1:	410E12E53D4336A1B734770E00368BD57252877A
SHA-256:	194E48E106345737847C53524741D156206F11472FB61F2C4FAD92211203AB2A
SHA-512:	13284A29D0F77E377B532BE7AA1920A36B79ED6967704B22BA448E3077A993D082D31E5ACFF9D6F030A03206E1D2D1B72E9746FBA0FB6A78F51C59FDAD3A2CDD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["f1 qualifying italian grand prix","mortgage rates","pearl jam concert at wrigley field","wizard101 consoles","tropical atlantic hurricane season","nasa astronauts stuck in space station","the bold and beautiful spoilers","nba golden state warriors"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"CggvbS8wam1qNxIpR29sZGVuIFN0YXRlIFdhcnJpb3JzIOKAlCBCYXNrZXRiYWxsIHRlYW0y7hRkYXRhOmltYWdlL3BuZztiYXNlNjQsaVZCT1J3MEtHZ29BQUFBTlNVaEVVZ0FBQURVQUFBQkFDQU1BQUFDTjE4OHdBQUFBd0ZCTVZFWC8vLzhkUW9vQU5ZOEFPSTRBT28wQU40OEFOSkQvdlNEL3Z4c0FLWU1BTW8vazUrNEFLb0FBSm9IL3hRenM3dlAvd2hYZjR1djA5ZmpLejk2UmVtbGFYSHdqUklnQU00UVJQNHZmcHo3OXVTYXZpMXlNZDJzQUxaSTdUb1FBQUhVQUhueTB1OUdocThiVTJPVE9uVXFYZldkNGg3Q1RucjduckRsRFVZSzRrRmUrbEZQU29FZEpZWnBhYnFHL3hkZnpzeTlOVm9DZWdXUnRabmFBY0hCNG

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 85, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22131
Entropy (8bit):	7.976392613692222
Encrypted:	false
SSDEEP:	384:WUxUVQ7xCd8qj8fCLxtK3fLQ0hQyV0c/5GQ+xHC4zDgEImT4d4CLVJ2khe:fUVQtC7tw3fXQyX/5GQ+U6XhT4uCVfhe
MD5:	FF2C9870CEF88219844CFAD5EA1CC437
SHA1:	E35226A56033C097AA9A6E6E9D6A9D40B9984EC1
SHA-256:	7E61569BFBDCFF69293063DA8BBF29B9DBBFAB042F7C0845124B888F9AB8D70D
SHA-512:	417F0958E9D561CC2A03E939CC54F0A6409B92DDF8B63E57701520196E156D9FF2B267AA41E88A801F3BF5CC16D8A45B0DB39A038C811DBE3BF50A7A68263756
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#...U........D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:5E95BE135C0E11EE922FCEA895EAD05E" xmpMM:InstanceID="xmp.iid:5E95BE125C0E11EE922FCEA895EAD05E" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5033BE62BDC511EBAB7A8A3B4833747B" stRef:documentID="xmp.did:5033BE63BDC511EBAB7A8A3B4833747B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...=..R.IDATx......y........q.A...I.&ESMi%K..i...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x560, components 3
Category:	downloaded
Size (bytes):	603022
Entropy (8bit):	7.984264462666317
Encrypted:	false
SSDEEP:	12288:+C5Rtt4r9QuGcDUPSKvwq7GtkzHUIa1LwkN0wPWHmeMShJG7B:+C5Rtt4r6vb6tYu1LwkN0wUmtShJG7B
MD5:	99BF4FD1DA6220B332CCE4064B882854
SHA1:	4A43545C37168E733BD0C9A912E95CE7A20AA688
SHA-256:	91D9CE3BBDE8A18267CCA186A1C7C0920D453387C90E7C0200C29BF9B0360CC5
SHA-512:	9579C4A6A8216E072EFE4DF40A4F681742B15D69B86D6CC4A1EC92B432CBC6A0F7487AFCD52CDB53E6A0B0D5516E4F9E92145F42594172F4EB05655DF31A5031
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/pic_9594053.jpg
Preview:	......Exif..II*.................Ducky.......Z......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:f90d0192-eebb-5044-bd41-3a8351b27fda" xmpMM:DocumentID="xmp.did:05B6D40A1EF111EF96E9876970168372" xmpMM:InstanceID="xmp.iid:05B6D4091EF111EF96E9876970168372" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:072e1b79-ad84-c94c-8e02-12dbf0c4a9ae" stRef:documentID="adobe:docid:photoshop:54175768-2b32-134c-a89f-336fe100894e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 143, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17025
Entropy (8bit):	7.945279172992637
Encrypted:	false
SSDEEP:	384:g16vxBAjtlYlkAD/mtPiQiOA7c47uonhOy5KeYl:g1uxBAjkWPiqAA47uonhOyYl
MD5:	0FB14F96267BD59C3A64EA4409904254
SHA1:	CE077AF2ABF435DC924BFEDFF7E325A2BAF182EE
SHA-256:	76D2AE8959E8F4713A3B7267A2545754C93841961312C118948B8AF59808FB42
SHA-512:	F9E0A58765762BBDCFEED25018C15C6575AA8DE4D0873DCB335519C14A02AEAAFE789AE9C8180646A923C886C9EDD255DDF6632F445F596862E30C7412530081
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570236.png
Preview:	.PNG........IHDR...............>.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:738525EE390A11EBA9F3A5D34AFD4F61" xmpMM:InstanceID="xmp.iid:738525ED390A11EBA9F3A5D34AFD4F61" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9646046F838EB11B35EC5B768230075" stRef:documentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...H....PLTE...kn.....#..f...&&/.U'.!(....!%......p

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.67340672855909
Encrypted:	false
SSDEEP:	3:uwiX9/nQNTVLEtKl29cEt29LS822bAnSN3ERvmCGL1V3:uXTz9cf9tbAnS94mFr
MD5:	8CC38165A62BC1EFC3E0B541CFEC53A2
SHA1:	21634AFD181BB812D676D3B4F727DB0B13DA3A6C
SHA-256:	1670574F5C0B8DF44159E00F5FCB3FA6D2EF341ED71873770A83A493B9D73700
SHA-512:	2A34B4EB66CFEA6DA5E90ADB5C3E5EFC0E9E4219B1A7AC9BAB112A16AC1044BB8CD8BA006706E95388AB6E08BA39C0F488DA1D9E61EB0C8AE6ECB337CD0E1C11
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwkpYFbdvde0JxIFDYdpQbYSBQ1ZBwtHEjMJLhlMNJxiJ8USBQ1AYOkiEgUNuGDalxIFDYIUycUSBQ2pJ-y8EgUNs2V4HBIFDe7pKWUSEAlm0OiPGo_hvxIFDaNT6cw=?alt=proto
Preview:	ChIKBw2HaUG2GgAKBw1ZBwtHGgAKNgoHDUBg6SIaAAoHDbhg2pcaAAoHDYIUycUaAAoHDakn7LwaAAoHDbNleBwaAAoHDe7pKWUaAAoJCgcNo1PpzBoA

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	7262
Entropy (8bit):	5.437607284772332
Encrypted:	false
SSDEEP:	96:EhLuY60dZBIe39z8esZy96+NABXSj+zVLsAz5bHXL2Y:Eh6Y60GCnc+NABmdKHaY
MD5:	58B957082C9920BEB19056700AB5BD75
SHA1:	B0CED748322CA6E445FA4F8C804265405A3A7CA2
SHA-256:	120F5BADF54653B534293F1E4413ECD36C62E4D8589724ACBA1C6C19BDB2842A
SHA-512:	DFF22A33899294F3E6D062614A644F86CEFD3A9CE51B0A6D4A5C406EA4512A669DBC699EF0CBFADBA3FEA93D2A7EBBE2B3A31743BFF4DFBADB87AA1B91BCAAC9
Malicious:	false
Reputation:	low
Preview:	try{...var esdTipLink1 = document.createElement("a");...esdTipLink1.setAttribute("href","javascript:void(0);");...esdTipLink1.appendChild(document.createTextNode("............,.Alt.........."));...esdTipLink1.tabIndex="7";...esdTipLink1.id="esdTipLink1";...esdTipLink1.target="_blank"...esdTipLink1.style.setProperty("max-width","0px","important");...esdTipLink1.style.setProperty("float","left","important");...esdTipLink1.style.setProperty("border","0px","important");...esdTipLink1.style.setProperty("padding","0px","important");...esdTipLink1.style.setProperty("margin","0px","important");...esdTipLink1.style.setProperty("width","0px","important");...esdTipLink1.style.setProperty("height","0px","important");...esdTipLink1.style.setProperty("overflow","hidden","important");...esdTipLink1.style.setProperty("display","block","important");...esdTipLink1.style.setProperty("left","0","important");...esdTipLink1.style.setProperty("top","0","important

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2174
Entropy (8bit):	7.838538293666231
Encrypted:	false
SSDEEP:	48:j27yzs5X38iQ4fbC2yugrsbv6dAS0bIto7i++3izMOngMNaF:j8yA5X38iZfbyuA4v6qS9mz+SzMENo
MD5:	56C809E25323199BACCEB077C3705BD6
SHA1:	47552965186D25B63FCF144625F7C49BE083925B
SHA-256:	ACA73DB62E567E66D2E507AAD83B320161017703F6D9C0FADFBAC2DD434CC448
SHA-512:	336C2D380F6EF927C17A228D338F4AFF64A84F402F2592D965E207D5FD7D8DF7158A4D7979BA1A02212758C5AC4250C872AD9929FC098E94A564C5298900F738
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/header_3.png?1
Preview:	.PNG........IHDR.......F......,......sRGB.........gAMA......a.....pHYs..........+......IDATx^.[lTE......@.mbIk+J}R0.O\....FL....BL4....J41\..4b"D...%.... m...IoBB/..7.nw.....rX..={.a._2.93..-..w..s..s..."aJ....l.n.yO../..[..c...1...q...q.......i..Hk j.d.d'K.~7.i....Te&..(.3.?..'.H+..T...".Hk ..^...?...K...C.M..O.<.$..^.."..6vA.i.W......N.s\.....Z\.6M..t?.a%....DZ...0U..DZ.8DZ.8DZ.8DZ.8..6..w......H+.....q...q...q...q...q...q...q...q...q...q...q...q...q.n).. ..DZ.8DZ.8DZ.8\|..C........s....'..o..n .f.H.?k....z.t.\|z.......b44...1.WpJ.UQ..4.O(yG.1....z.'Hz0C...U..~.022B7o.h4.5..R...........H;..............QNG.~....[.......Y`S.i. ..p....N.H.q.e``....YJ.......]!..C=o.<.;w......~.....k.............z..[.,.N(..OkW...-...8577..7.....TQQ.[oz.(,,.9s.p.$....(,hmk..t3..S....#g....H...@....~.:GW....E.}}}..^Q{..zos5.nbD....'V.NB.B.....;)//...........;...V......tQ...5)..DJ..:.......4W...e.8..s.......6.Vs.`.....;w...j?..v......_.ukW.%..../..>F[6o....

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1290
Entropy (8bit):	7.854255780043088
Encrypted:	false
SSDEEP:	24:CpXtiq1RnaIbcKlnT7ZrNyImeuKhpjPjjg8qKz+0XficFGzDikBrnvinb2bCz:CpXkq1RbcKB7ZBpmeupfN0Xf82kdnEqs
MD5:	1F63D4255E910146AB4EA66BE15523E5
SHA1:	AA03ECC604270D9E15D504C82ADD0062CDB1C73D
SHA-256:	55BA52D9ACB02E076D02101CEBD9EC3D13D4E06377FF9D12BADB7DA7EA08832F
SHA-512:	444B30FEC3289D6DE0B12A6F1FA561EF4703BC89088B20E96B527799C3B3BD24872F45C9CF1359913B26C65CBB3B6D5ADFFDAAB99F1C6649E730E94CA6B2BB69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............mJ....IDAT8...yl.......fvvv.l.....F...h.R.`T4......c4.cD..x.._^......{.h.#.5Q...xW.*....-...vwv.....F.....\|,.@$.....\|..;...^\|...V.......[.....H...H.....6.........G...6...m)z..VIo._.{`...w.....H.. ...D."..."l..3.G.=..W....X.X".S.t..%.......=\..N.n.....Y..,.r.E....>~.[o...\|.....<.Q..^.?..~c......K0..;1...C.....Q.:0........../......4...;.9~.Z.......}........E.c.....;...ql.D\.~v-W.5......H.0....B.:....W.1zy......W^.&5".!Du.....t./E@1I.... .P....kR...T\|J',....$..p....xt.8y..k...p[L.V. .#=.E....x[...B....Y..a6!..et(.o...&.X.@.p..A.`.!.ec........k.s....K....~.j...D.Z.....L._..\[TX.7._...kQ..O..u9.z...E.y...E..%.<u.gw....X.].Ttp+G..P.).&H,....=Zn.w...o.......3..9r..S.y.FSftK.xy.....EH~../T......(/~..j..w.0]B.Z...$.N.$..d.19....d;uZ.....S...j..S.+.N.......c......L{J...8ut.....X.7..$`..-c....k[.,.Ka.O...3z ..}&G.6..E.R......Y.:.l....4....U.../.......5..).P8..k..g5..xe...ErY;.t@...'..ib.1"]:..#R......R9..y.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	355
Entropy (8bit):	7.195268772195004
Encrypted:	false
SSDEEP:	6:6v/lhPWpMeUMuSVvrecemqx4ScBBGX1wkC3Qqbeve3QWp:6v/70VvypX17SQqKv+H
MD5:	FD8EE4FB0D17376621DB78043081C99F
SHA1:	6A7BF9BA611A9D1218E846140BDC100691E0B66D
SHA-256:	23A82AAA3539EB3E25BC6EB890BA3EA714EFBF1E377ED7A84DACF0BC5B2E022B
SHA-512:	A250A603F0F8D111B3F8E2E58F01291F47F96028C0814F0C2AC691E9F0FBEBCD6A6792F594CDB46EA5EBB716265D13506DF320570758FFB486DE6CFBBA0B36F6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a...IDAT8....+DQ....L3..".......X.....f.OP,.J...`7J.R..deEX.%%.{.....S...9.s..~.(.B...C...:...ePH..8......a.`........'......K.B9.?.EQT.-Z0.......).$....:d8.$..vP.6G.QG.O$9xo.\.vV......h.'..L.>-..!.7@.E...f.8..qs..]..7..zp.......G;..Z:...x...K....B.....D =....;L....{.A.J8..2..(....?...@...5F..*......IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	34589
Entropy (8bit):	7.88528500333359
Encrypted:	false
SSDEEP:	768:z+pOmHmj+61Hx4hr3pv7GdQXUKDrtJyLb1HglATQGP:qpOmHmjHxZQVEX1AllGP
MD5:	C98E7A31571104BAE8DC800E5B195B3C
SHA1:	F2DF0986D627506E64EFAD4CE741D4F0A3A7DCB9
SHA-256:	6A0C1D2AB511F6CD2AECAC90B5A28763899E0B51FB5E975EF526DD4A93940F41
SHA-512:	F93134220AC30D23E5494582FCAC011CD7A411215D8279FCC0969B5C4AF71E4EEE9120AEE07DD730AEF106D3B30CE359BF3AEB8A54524E4501C9D38391DDDB77
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8229979.jpg
Preview:	......Exif..II*.................Ducky.......P.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D5B13A8491B11ECADFDCB1DF23A0E0E" xmpMM:DocumentID="xmp.did:0D5B13A9491B11ECADFDCB1DF23A0E0E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D5B13A6491B11ECADFDCB1DF23A0E0E" stRef:documentID="xmp.did:0D5B13A7491B11ECADFDCB1DF23A0E0E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 20x20, components 3
Category:	dropped
Size (bytes):	1879
Entropy (8bit):	6.9039403515052005
Encrypted:	false
SSDEEP:	48:a0KS2vnLOXnXJ3z2LwVmXtx53AL8yHrDj+3:MSea3GwVm9x53AprDy3
MD5:	1195A5E741E4A41B2B7EB03A79DFA29B
SHA1:	4794DC572A50A0F04125B695B668C02D911E207E
SHA-256:	A600B42DC06450446C52CA1840EAE04A13467457084F7101D109400B9A7FDFE0
SHA-512:	2B587DE7122B8960F0D7DD4B533290798124C556FE1F4BCAB469ADF123896792AFF4C7A1A13BBAE4FD95A3E1966123E54CE939053C885A81F27FFE5C2FB98957
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ae07e862-fe4b-f245-8a21-8b5724a2d352" xmpMM:DocumentID="xmp.did:86DB6CE75B7311EE83DFDBDDF4D8DC30" xmpMM:InstanceID="xmp.iid:86DB6CE65B7311EE83DFDBDDF4D8DC30" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:57a53ace-4613-6747-add5-520d2d95849a" stRef:documentID="adobe:docid:photoshop:b879a386-cba5-f541-b12d-d970d4d1ed1a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 20x20, components 3
Category:	downloaded
Size (bytes):	1879
Entropy (8bit):	6.9039403515052005
Encrypted:	false
SSDEEP:	48:a0KS2vnLOXnXJ3z2LwVmXtx53AL8yHrDj+3:MSea3GwVm9x53AprDy3
MD5:	1195A5E741E4A41B2B7EB03A79DFA29B
SHA1:	4794DC572A50A0F04125B695B668C02D911E207E
SHA-256:	A600B42DC06450446C52CA1840EAE04A13467457084F7101D109400B9A7FDFE0
SHA-512:	2B587DE7122B8960F0D7DD4B533290798124C556FE1F4BCAB469ADF123896792AFF4C7A1A13BBAE4FD95A3E1966123E54CE939053C885A81F27FFE5C2FB98957
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/9217976.jpg
Preview:	......Exif..II*.................Ducky.......d......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:ae07e862-fe4b-f245-8a21-8b5724a2d352" xmpMM:DocumentID="xmp.did:86DB6CE75B7311EE83DFDBDDF4D8DC30" xmpMM:InstanceID="xmp.iid:86DB6CE65B7311EE83DFDBDDF4D8DC30" xmp:CreatorTool="Adobe Photoshop 23.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:57a53ace-4613-6747-add5-520d2d95849a" stRef:documentID="adobe:docid:photoshop:b879a386-cba5-f541-b12d-d970d4d1ed1a"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1290
Entropy (8bit):	7.854255780043088
Encrypted:	false
SSDEEP:	24:CpXtiq1RnaIbcKlnT7ZrNyImeuKhpjPjjg8qKz+0XficFGzDikBrnvinb2bCz:CpXkq1RbcKB7ZBpmeupfN0Xf82kdnEqs
MD5:	1F63D4255E910146AB4EA66BE15523E5
SHA1:	AA03ECC604270D9E15D504C82ADD0062CDB1C73D
SHA-256:	55BA52D9ACB02E076D02101CEBD9EC3D13D4E06377FF9D12BADB7DA7EA08832F
SHA-512:	444B30FEC3289D6DE0B12A6F1FA561EF4703BC89088B20E96B527799C3B3BD24872F45C9CF1359913B26C65CBB3B6D5ADFFDAAB99F1C6649E730E94CA6B2BB69
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7569191.png
Preview:	.PNG........IHDR...............mJ....IDAT8...yl.......fvvv.l.....F...h.R.`T4......c4.cD..x.._^......{.h.#.5Q...xW.*....-...vwv.....F.....\|,.@$.....\|..;...^\|...V.......[.....H...H.....6.........G...6...m)z..VIo._.{`...w.....H.. ...D."..."l..3.G.=..W....X.X".S.t..%.......=\..N.n.....Y..,.r.E....>~.[o...\|.....<.Q..^.?..~c......K0..;1...C.....Q.:0........../......4...;.9~.Z.......}........E.c.....;...ql.D\.~v-W.5......H.0....B.:....W.1zy......W^.&5".!Du.....t./E@1I.... .P....kR...T\|J',....$..p....xt.8y..k...p[L.V. .#=.E....x[...B....Y..a6!..et(.o...&.X.@.p..A.`.!.ec........k.s....K....~.j...D.Z.....L._..\[TX.7._...kQ..O..u9.z...E.y...E..%.<u.gw....X.].Ttp+G..P.).&H,....=Zn.w...o.......3..9r..S.y.FSftK.xy.....EH~../T......(/~..j..w.0]B.Z...$.N.$..d.19....d;uZ.....S...j..S.+.N.......c......L{J...8ut.....X.7..$`..-c....k[.,.Ka.O...3z ..}&G.6..E.R......Y.:.l....4....U.../.......5..).P8..k..g5..xe...ErY;.t@...'..ib.1"]:..#R......R9..y.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, ASCII text, with very long lines (357), with CRLF line terminators
Category:	downloaded
Size (bytes):	39727
Entropy (8bit):	4.86142942752351
Encrypted:	false
SSDEEP:	768:NKbqmzFd8cWmbiC/9TUMNatOx6xjNJZDdBs:NKbqm5dQmR/9ASeM6xjTBs
MD5:	D29E22D5903049EA11F4BC6ED36CE163
SHA1:	279C3235D99980DC482F32900D63A82A46B332D3
SHA-256:	B8442D1DABF7611D79A2F76BA54D85BE84A7B341F7C6033AE4ADBAC7ED005434
SHA-512:	D613A57F470B424C2C7408634ADE11EB14BB6DCDD5B2C4E9804DAF424EF9A858E95C61AA679FC1FF02F5D823A84E22850F6A3CEB2FD6E842BA85BB1911F05B1A
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/css/font-awesome.css
Preview:	/!.. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome.. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License).. /../ FONT PATH.. * -------------------------- /..@font-face {.. font-family: 'FontAwesome';.. src: url('fonts/fontawesome-webfont.eot?v=4.7.0');.. src: url('fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'), url('fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'), url('fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'), url('fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'), url('fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');.. font-weight: normal;.. font-style: normal;..}...fa {.. display: inline-block;.. font: normal normal normal 14px/1 FontAwesome;.. font-size: inherit;.. text-rendering: auto;.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;..}../ makes the font 33% larger relative to the icon container *

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	123
Entropy (8bit):	5.047092960131292
Encrypted:	false
SSDEEP:	3:yionv//thPlEXttbifsLts7CX9/gm6Kp9syx9VFBw7u6IMEklVp:6v/lhPKkER/C+gyN5Fkp
MD5:	8CBB0471C1187DDA1863CFBC95834B48
SHA1:	E87E04F9D698C3E2D8FBFF008458BAEC10734B52
SHA-256:	A6A686A454E76940C823730E499D7898EEBB2B2BDD6D0D7DBB3FCA197FABBD51
SHA-512:	22D517BD5C4254EB72840C1194EADA2211F8B40BEB1FA49DA3071B1504A81C0DC745B5A9E711BB45A9E459F9690FBC99D0308B5F9393D7D82E62DF0F87648F47
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/footer_2.png?1
Preview:	.PNG........IHDR.......(........ ....sRGB.........gAMA......a.....pHYs..........o.d....IDAT.Wc......W.....ihQ.!....IEND.B`.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 389 x 70, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3144
Entropy (8bit):	7.911712809096896
Encrypted:	false
SSDEEP:	48:tUmAgos7dq17HuqTYv7ZwRoCk9AWCcgfRVEYP6GOpLM2JNMHPVKkVZ:tULgorHNEv7ZCoCkiWWLNi0DVdVZ
MD5:	ACD07208572CE41D37BA95F9A715EB0F
SHA1:	22BE02A79B11B0CC3CC6D22D0600F6EE52468E24
SHA-256:	136B051003BEEC680A09620D4D164AD5257A137973F8CBC5C78805A4F4ACA3FB
SHA-512:	C3D1EC96BFF37FD66D5E18D390BB308A8F1187BAD691F1AE7689790A5DC257D6FF110AE84EAAFB00C954783F5EA2DD49AAD83010135CC6876E504F250B07359C
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/header_1.png?1
Preview:	.PNG........IHDR.......F.....#(......sRGB.........gAMA......a.....pHYs..........+......IDATx^..{l......9=....=..@[Z' ..V..1K..K.(Ht..t..p..wM.L..,..2.?[2..!,.h.d. #..V................\z..9=o....<.....~...>....9.F....4...v8P.q.k.h:.I.cq.g..c...D.-D..)....h...%"7=C#860./....Niyk.....5.k.w.(_Y....CK}..DD........1x.6T9.p..Y.pT\|v-..'...D......I...m.P....W.Df......:_>..~.s2..2.La(.S.A.5.o{^m.^""3.....:m.h.U"P..:...+....G.e..[.6...x...JS..J...\|..>.:....P.t.%"2..6.....U~.....C..`0.)C...j ..9l.zij.d.T...#.dS..L..\|./...i......].zs.&.O.......e.V^.....X..2!.s.<xT/]\....=....R....KT....(.v....mGb.........=]......s.z...%..!.....B...=........:....#.wyQ...X}....a.m%...j].........:..~4..R......s/..._..#C[........B.H?.v/.Fza......3.>..s...K..%lK[.m}p;..::.....&.R..`{.m....y.K_..+H...?.Cat.8..>.......<W-Ctn.......vjA1.h]%.^.`bP.+....g!...=..^:..M./...r.r.........C..9....\t.[Z..E....p.<.Z+.ut..1..@.....;1..'.Y.f.eK....H.@..w.yOm3.L]Q.\|/..PO/.6.b....-F:.@}c

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 70, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	139
Entropy (8bit):	5.210458342210909
Encrypted:	false
SSDEEP:	3:yionv//thPlE5teW/iLts7CX9/gm6KpNsdoiRmoZ+qNfNZlVp:6v/lhPAeGiR/C+QC4moA+pp
MD5:	7D6A2BEC99C61B93D8E80123F93541E4
SHA1:	AE2903B6DA02F985895BE8A075B559C4B6C30A6D
SHA-256:	AD16C8A6BD3BF0CF1C9E496A948EA2AC12985791A1A5B585DD83084B04CE1CE9
SHA-512:	F35F141F3F08325F44AAA7ADF6DFB202C33E52752A413974111362B7DEB766DB4D3FFD547EA22D04F8AE4AD0BF3C52FB9F929F9C93135DDC8DEB2824B1C201F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......F......H.]....sRGB.........gAMA......a.....pHYs..........o.d... IDAT(Sc8t....A...t.../..@..J....c....`......IEND.B`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 24x22, components 3
Category:	dropped
Size (bytes):	2108
Entropy (8bit):	7.124990612923821
Encrypted:	false
SSDEEP:	48:uyitvnL98YdImeJ3u94NVT0pgM1khMoGo4Rme2rMN:qp7P4NVAXsMI4Zoo
MD5:	65C5F56E12B0A600612194D79050F36E
SHA1:	BF04BFA108BED4D73AF3E52D51FB6FD2992AB746
SHA-256:	F95D0114067ECF5F263F2F872AE60589477464E4777870A641B70B3EB7856958
SHA-512:	909A0746F15CECCA018CCFCD00F3C17E391BA38E6322EE8A378CF9DDC08F6C851F59C28F603F5D206C199182DB8023403AB571D022CDA6E26594678B8E703168
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de" xmpMM:DocumentID="xmp.did:9D18FB256EAA11ECA8F9E7BA86D2AD4C" xmpMM:InstanceID="xmp.iid:9D18FB246EAA11ECA8F9E7BA86D2AD4C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cf4d27d3-f60d-4a4a-8e0e-b6db5d7e8304" stRef:documentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	355
Entropy (8bit):	7.195268772195004
Encrypted:	false
SSDEEP:	6:6v/lhPWpMeUMuSVvrecemqx4ScBBGX1wkC3Qqbeve3QWp:6v/70VvypX17SQqKv+H
MD5:	FD8EE4FB0D17376621DB78043081C99F
SHA1:	6A7BF9BA611A9D1218E846140BDC100691E0B66D
SHA-256:	23A82AAA3539EB3E25BC6EB890BA3EA714EFBF1E377ED7A84DACF0BC5B2E022B
SHA-512:	A250A603F0F8D111B3F8E2E58F01291F47F96028C0814F0C2AC691E9F0FBEBCD6A6792F594CDB46EA5EBB716265D13506DF320570758FFB486DE6CFBBA0B36F6
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570255.png
Preview:	.PNG........IHDR................a...IDAT8....+DQ....L3..".......X.....f.OP,.J...`7J.R..deEX.%%.{.....S...9.s..~.(.B...C...:...ePH..8......a.`........'......K.B9.?.EQT.-Z0.......).$....:d8.$..vP.6G.QG.O$9xo.\.vV......h.'..L.>-..!.7@.E...f.8..qs..]..7..zp.......G;..Z:...x...K....B.....D =....;L....{.A.J8..2..(....?...@...5F..*......IEND.B`.

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 143, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17025
Entropy (8bit):	7.945279172992637
Encrypted:	false
SSDEEP:	384:g16vxBAjtlYlkAD/mtPiQiOA7c47uonhOy5KeYl:g1uxBAjkWPiqAA47uonhOyYl
MD5:	0FB14F96267BD59C3A64EA4409904254
SHA1:	CE077AF2ABF435DC924BFEDFF7E325A2BAF182EE
SHA-256:	76D2AE8959E8F4713A3B7267A2545754C93841961312C118948B8AF59808FB42
SHA-512:	F9E0A58765762BBDCFEED25018C15C6575AA8DE4D0873DCB335519C14A02AEAAFE789AE9C8180646A923C886C9EDD255DDF6632F445F596862E30C7412530081
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............>.....tEXtSoftware.Adobe ImageReadyq.e<...diTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:738525EE390A11EBA9F3A5D34AFD4F61" xmpMM:InstanceID="xmp.iid:738525ED390A11EBA9F3A5D34AFD4F61" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B9646046F838EB11B35EC5B768230075" stRef:documentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...H....PLTE...kn.....#..f...&&/.U'.!(....!%......p

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	5407
Entropy (8bit):	5.194735005462549
Encrypted:	false
SSDEEP:	96:HisofL3nwXryN77h/JouN77PvJ6lLP4Op/KDlJjrFD0utE:CZgbyN1J9NHJyP4OWJ2ui
MD5:	DDAB6F951DAFEF578EEE782FB5ADB7A8
SHA1:	635B33284B72FC2FB9A92CD6EE44E4A25E693284
SHA-256:	441197E23D5DE82305B7A24F25F6462ED33CA835D9DEF24A9ACA46D8AFC2F2A7
SHA-512:	2C24E1ABA37E4663EFA5936CE27276FB4BAAB50FD0FB618DF2CFD33060AE32DC12E8F0CC1C10BB5DAAA6B2DD806495D11A23064E845E0F3D87176D9D5413C15F
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570214.css
Preview:	.header {...width: 100%;...height: 153px;......background: url(7570258.png) no-repeat center bottom;...position: relative;..}...w1100{...width: 1100px;...margin: 0 auto;..}...header .top {...width: 1100px;...margin: 0 auto;.....}.....header .top .logo {...padding-top: 30px;...padding-left: 23px;...display: inline-block;..}.....header .top img.fr{......margin-right: 10px;..}.....topNav ul{...padding: 3px 8px 13px 8px;..}...topNav ul li{...float: left;...padding: 13px 29px;...font-size: 18px;..}...topNav ul.fl li:hover{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .jigou.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .banshi.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav ul.fl .hudong.active{...background:url(7570266.png) no-repeat center bottom;..}...topNav .search {......margin-top: 11px;...margin-right: 10px;...width: 206px;...height: 35px;...line-height: 35px;...background-color: #f0f0f0;...padd

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 85, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22131
Entropy (8bit):	7.976392613692222
Encrypted:	false
SSDEEP:	384:WUxUVQ7xCd8qj8fCLxtK3fLQ0hQyV0c/5GQ+xHC4zDgEImT4d4CLVJ2khe:fUVQtC7tw3fXQyX/5GQ+U6XhT4uCVfhe
MD5:	FF2C9870CEF88219844CFAD5EA1CC437
SHA1:	E35226A56033C097AA9A6E6E9D6A9D40B9984EC1
SHA-256:	7E61569BFBDCFF69293063DA8BBF29B9DBBFAB042F7C0845124B888F9AB8D70D
SHA-512:	417F0958E9D561CC2A03E939CC54F0A6409B92DDF8B63E57701520196E156D9FF2B267AA41E88A801F3BF5CC16D8A45B0DB39A038C811DBE3BF50A7A68263756
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570238.png
Preview:	.PNG........IHDR...#...U........D....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:76ABA3FFFBBCEA119A109C8F1EF4D462" xmpMM:DocumentID="xmp.did:5E95BE135C0E11EE922FCEA895EAD05E" xmpMM:InstanceID="xmp.iid:5E95BE125C0E11EE922FCEA895EAD05E" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5033BE62BDC511EBAB7A8A3B4833747B" stRef:documentID="xmp.did:5033BE63BDC511EBAB7A8A3B4833747B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...=..R.IDATx......y........q.A...I.&ESMi%K..i...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336), with CRLF line terminators
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.999870397528071
Encrypted:	false
SSDEEP:	12:AahAIWZh5X+o0uCAzIsTza/2Au6WSyfmC4K9E8BIL2FtmY27tmBrTw22rTwtmdbz:ADImX9WezaCfHJBIL2Ft2RoH2bqgn
MD5:	94D15215CFB82E973D4659EA7664CF3C
SHA1:	33DE30CA2A32A1A6CE6B99EDA2C1C2B4EDBFCB92
SHA-256:	4CA473B9F5B66BDE027957816173898AEEF51DF0D517946C2F5F25BD8CE98FD3
SHA-512:	8CC537F99475B2C12425C6B8386ECC84F8D85D833BB0E9DA8BF3C32FB504EE534AC62576AE35891413B1F6D6B7FE351F5C4FE022520597FF0EFD44B6DA17C315
Malicious:	false
Reputation:	low
Preview:	$().ready(function (e) {.. var si = setInterval(function (e) {.. if ($('.successRow a').length) {.. $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-index:100;"><iframe width="100%;" frameborder="0" style="width: 100%;height:100%;border: 0;" src="./' + lpAlias + '/index.php?confirm=' + $('.successRow a').attr('href') + '"></iframe></div>');.... clearInterval(si);.. }.... });....});....function fullscreenExit() {.. if (document.exitFullscreen) {.. document.exitFullscreen();.. } else if (document.webkitExitFullscreen) {.. document.webkitExitFullscreen();.. } else if (document.mozCancelFullScreen) {.. document.mozCancelFullScreen();.. } else if (document.msExitFullscreen) {.. document.msExitFullscreen();.. }..}

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32018)
Category:	dropped
Size (bytes):	46354
Entropy (8bit):	5.3743688373906515
Encrypted:	false
SSDEEP:	768:eJboOBwtxaCM9mwh9MTJlbaWNMZ8vyHMOzFGV8oJ04:4oOBwt4uTOZ8vyHMOf4
MD5:	756E0F300D80E502F84C0881DAD9995B
SHA1:	EC97FC02C665EF9A6DF5E9ABD14417573BFFCE64
SHA-256:	0B5595E4E06B5279B5EEC574C2A3AEE7BEA92E1BC16AF3B49D0680111DFD23B7
SHA-512:	EB434EA5A5585064B6450D620CF689AC9ABFF4350D059F3E7528A8B7A9C09CCA0BE297EDFAB9AD7A81A652405D038B257CBC828FB8617F45DA4BB5F9F9261D4A
Malicious:	false
Reputation:	low
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015.*/.var Swiper=function(a,b){"use strict";function c(a,b){return document.querySelectorAll?(b\|\|document).querySelectorAll(a):jQuery(a,b)}function d(a){return"[object Array]"===Object.prototype.toString.apply(a)?!0:!1}function e(){var a=G-J;return b.freeMode&&(a=G-J),b.slidesPerView>D.slides.length&&!b.centeredSlides&&(a=0),0>a&&(a=0),a}function f(){function a(a){var c,d,e=function(){"undefined"!=typeof D&&null!==D&&(void 0!==D.imagesLoaded&&D.imagesLoaded++,D.imagesLoaded===D.imagesToLoad.length&&(D.reInit(),b.onImagesReady&&D.fireCallback(b.onImagesReady,D)))};a.complete?e():(d=a.currentSrc\|\|a.getAttribute("src"),d?(c=new Image,c.onload=e,c.onerror=e,c.src=d):e())}var d=D.h.addEventListener

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 149 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5847
Entropy (8bit):	7.890758827991575
Encrypted:	false
SSDEEP:	96:7IfZQO3InQbjH1YIEXjr8p49wuq8jBmg0xUj0BAZdNtv/608atWZmXdWDXDwlIp:71YIKdRpEw0j8x8MAVtqSIDB
MD5:	6E3106883C3543BABE2A1990B620F136
SHA1:	19BB46E5D0EF605FB7C009EE5600DFC218E8CF45
SHA-256:	25EB3812B890F3BA505FAE4C1D082AE9F0556F37967254765854EC616024B565
SHA-512:	E1C1C796C5F160E1FB7F9E6DC381DDCC879DC0482F45977EA0E7EA6A27151199DC245149433C845E54E80D47F7B9081B793CAF09DAC386BB17DCE56793D37702
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/footer_3.png?1
Preview:	.PNG........IHDR.......(.............sRGB.........gAMA......a.....pHYs..........+.....lIDATx^..m..Uu...IH..$7...;.&......N;.~n+"S5.....H.g:Z.f.2-.....BHy.V.P.P.v:S_........m..".1..u..:...y.v.g.k..._k.g..<.9.L->c.dI.....J9y..x.d\|...W.x...M...9...........Xb.. ...9..j........m....M>...G_h......O?...P.N.`}.."..:h7?......ij.Z.1....{.]...4d$U.\..}\|,@_..q . ..Ac...K3....\|^...ql.`...q1.:c..?.k.\..f..4..m.....P@.c..1 .B.........:/.....{.:.!E......rC.7. .\b..........\|..~@)1c.N..~.$..<...EmLn9..O.......G.h.....yi..c#.....j...9.._.c.3. .h.07'.........u^ .E..1.....p.u...T4. .0...A2\P.L.pQ.X.H..c..I...<.M....q....9.q....B9v....k..#.:.E.o..~...... =......1l....G....9.kq4..SO...}..c.@..C7L. Q..........2/..&.srr..g.....}....j.Y.>.\....+...K.....sM......1w..........&......+n....:...z..:.IR...8....T.m....G.i..8p.>pL...h.49..,.v..n3.=...`..o\|./.?!.1....;......E.k..Zp. .k.gL_..d......:...9..Y.vRY..v. %p....}..aW..Y^P.?..=.x...>v..D.4.J..\.W.p~.z..> &sg^.4.9

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	34589
Entropy (8bit):	7.88528500333359
Encrypted:	false
SSDEEP:	768:z+pOmHmj+61Hx4hr3pv7GdQXUKDrtJyLb1HglATQGP:qpOmHmjHxZQVEX1AllGP
MD5:	C98E7A31571104BAE8DC800E5B195B3C
SHA1:	F2DF0986D627506E64EFAD4CE741D4F0A3A7DCB9
SHA-256:	6A0C1D2AB511F6CD2AECAC90B5A28763899E0B51FB5E975EF526DD4A93940F41
SHA-512:	F93134220AC30D23E5494582FCAC011CD7A411215D8279FCC0969B5C4AF71E4EEE9120AEE07DD730AEF106D3B30CE359BF3AEB8A54524E4501C9D38391DDDB77
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:0D5B13A8491B11ECADFDCB1DF23A0E0E" xmpMM:DocumentID="xmp.did:0D5B13A9491B11ECADFDCB1DF23A0E0E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0D5B13A6491B11ECADFDCB1DF23A0E0E" stRef:documentID="xmp.did:0D5B13A7491B11ECADFDCB1DF23A0E0E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 43
Category:	dropped
Size (bytes):	28371
Entropy (8bit):	7.730774174367466
Encrypted:	false
SSDEEP:	384:Ii9F2ctwTMqmyldSSfH2HsIee5Tl+Iw46QnemBlT4eFOSpD9fbpd4lnOY9Xe:X9vCTMqkMWTZ+ILdeUlDxfbpdY9Xe
MD5:	2F10D6298C4ADC14BA1DD6E7091DA11E
SHA1:	43AFD4696930A53237A29E22999D45EBF9F83B61
SHA-256:	FA8DD854D4DEF532A2D9B33D20587A9E2187D6BF8F7A1594D9BED5FA203C42C7
SHA-512:	3996DF3E70AF728D236942C6710A5BEA8C4E55B48294D9A4D261627338B42A517592B78C4CDB77F57386D6FAC590ECC539DA3D4283CEFC9568271E3CAF86EE7F
Malicious:	false
Reputation:	low
Preview:	GIF89a..+................................................................................................!..NETSCAPE2.0.....!.......,......+....`$.di.h..l.p,.tm.x..\|..<HAa(.....tp..."R..5..G.A.....x,N......6'....Mv......(..y{l.~<.........{..9.s.t..8.....)...m.7...m.7.a.d..(..t..3...c..^.....&....1.....1..c.."...u.-.....1..c.i...1..c.0....V...,..e.,..K..?..^.;(..#.. .3G......xp..............B.3.1!.........A.-....Bg=..:v;..c.F3&.7....b..xZri.}'8..:B`G.....Rl..P..=h6.Xa..V../n..x...O...W..'3..z.@..."e.).w. .k.xSi\A.^E.?.f.Txf..-aU.....^)~R...mx...&Ai.e.\|.Xt.:&....5)...4.].V...S.Z...._O^.....>l..y........ .,..J.XG...C...".._.BE@....A.`..!.......p@........Pa..v.a.#.p@.&..b.0.(.4.h.8..$...!.......,......+........................................................................................ &.di.h..l.p,.tm.x..\|...G%.0.,...Xz...D$..<...R..*.k. ...hIB.s.$.x\.....7\....2..h....=..r\|..\|r......}.rp....e..h..9..{..p.....K8.r.}..p.+....f..6.......p..7

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 152, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1759
Entropy (8bit):	3.3949795909707228
Encrypted:	false
SSDEEP:	12:6v/7aQ/hzZwRhraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaYMm6VW2BjIaYwJ1c:IeY6VfZq
MD5:	441A3C901905D292C5D32B7A5863A823
SHA1:	F0269E769C6DFC8771C2E14ED0BD5C51AA27124D
SHA-256:	08A105405F1F57788F2073DCFE8F849570E5464BBB7479C602176F8A9710C781
SHA-512:	982E2A9F7B97FB580E660BCE4B00773C9F6B54F34F34BB13B19BD81E43ED3A62247E00497C2357D9351BFA70ED2CA655E98844E24CDB047944A776A4F845DC00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx...K..E.F.pb...eQ..@.dP.ta3`...W.H.\|.b~.G\...u........y?.......................0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 128 x 43
Category:	downloaded
Size (bytes):	28371
Entropy (8bit):	7.730774174367466
Encrypted:	false
SSDEEP:	384:Ii9F2ctwTMqmyldSSfH2HsIee5Tl+Iw46QnemBlT4eFOSpD9fbpd4lnOY9Xe:X9vCTMqkMWTZ+ILdeUlDxfbpdY9Xe
MD5:	2F10D6298C4ADC14BA1DD6E7091DA11E
SHA1:	43AFD4696930A53237A29E22999D45EBF9F83B61
SHA-256:	FA8DD854D4DEF532A2D9B33D20587A9E2187D6BF8F7A1594D9BED5FA203C42C7
SHA-512:	3996DF3E70AF728D236942C6710A5BEA8C4E55B48294D9A4D261627338B42A517592B78C4CDB77F57386D6FAC590ECC539DA3D4283CEFC9568271E3CAF86EE7F
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/22.gif
Preview:	GIF89a..+................................................................................................!..NETSCAPE2.0.....!.......,......+....`$.di.h..l.p,.tm.x..\|..<HAa(.....tp..."R..5..G.A.....x,N......6'....Mv......(..y{l.~<.........{..9.s.t..8.....)...m.7...m.7.a.d..(..t..3...c..^.....&....1.....1..c.."...u.-.....1..c.i...1..c.0....V...,..e.,..K..?..^.;(..#.. .3G......xp..............B.3.1!.........A.-....Bg=..:v;..c.F3&.7....b..xZri.}'8..:B`G.....Rl..P..=h6.Xa..V../n..x...O...W..'3..z.@..."e.).w. .k.xSi\A.^E.?.f.Txf..-aU.....^)~R...mx...&Ai.e.\|.Xt.:&....5)...4.].V...S.Z...._O^.....>l..y........ .,..J.XG...C...".._.BE@....A.`..!.......p@........Pa..v.a.#.p@.&..b.0.(.4.h.8..$...!.......,......+........................................................................................ &.di.h..l.p,.tm.x..\|...G%.0.,...Xz...D$..<...R..*.k. ...hIB.s.$.x\.....7\....2..h....=..r\|..\|r......}.rp....e..h..9..{..p.....K8.r.}..p.+....f..6.......p..7

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35513
Entropy (8bit):	7.952686112700941
Encrypted:	false
SSDEEP:	768:0TnydSFjOi9cXAVpxhle05LJyz2lS42vhnl:cydWjO4hVdlNwv
MD5:	0686D4C3AECD7A33D7EC1076018075DD
SHA1:	EF94E2547DC91720D57B01A4B57D7FE329BD66B8
SHA-256:	062458D0337C7158D1AE4E762047C64ABF52A1D15C67614CBC352B4BCC8D54AE
SHA-512:	8333A3563644179D9F5C5B77B77663015B4CD638077F6CDC94177A007A5FEE928B4CAF7577BF25B901F374AB3CD206D6877FAFCE915D380163F60A0D442F60A2
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/unionpay.png
Preview:	.PNG........IHDR.............>..%....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.......dp./....IDATx..wx.....gf{Q...b..l....SlZ.%...%..y...(.5$_..H.T....^.m.Mr..%.....!l\${g....].W"Y;..3...@D.-....7./........$Hp...`.`&K...W4..:...f..L6t.-..D....."F...E.'"......I.......h...e....A...X3.t...C..AY.[..`t..M].,..[.H....@.Y..F.U8......X...3.=.:...).Q...._s..F.!...x.>.5<..:...Z.K3\|^..[..et..`...x3...SPn......'.6.... N....D..vA..0y.....;.N.p...p.$....t.#.....?.g.Dx.-#Bg8..b.bI..S..0.a.\|.S.I..9...c.1.g......"D0x....S...i8`."....a.."..R}.....w...gI.F..f.69z..b.. .D.........XR>..62..?..`..... &.MH..x...$.u...ElIn....}..d."X.w$.\|..8.......L.y....t@b....}...NiN.+... ..5.`.2..@Z!^.J&c.... ..$Q.......[xh..#..'......e.w..."D....b........d.B..@..0.. ..I.....#.....,...g..5.`.4..9.j.#c....`...!..Ap.'xh../.G.m.!.)%..$.....#.f.=.wd..(...z....f.N.~...e...nl.Xy.?".`..JX..5.......D..../......ij..C....z..%..x!....w_'..&4$....a....5.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 68, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3871
Entropy (8bit):	7.926380055231519
Encrypted:	false
SSDEEP:	96:bg3eGfYjFH9qAHA4rZDhr77Sj/tMeEGKbiqPy:IQjBQAgMDhr77Si3Ly
MD5:	30A97280BB5E9A7407063CF3C858579C
SHA1:	D7B0733BABCAEF56F19B5DEE550E83A97476A7A2
SHA-256:	CDF4937729B37D2A376B9EC054F6C614B156126164AB6113E0271EF224A20121
SHA-512:	0F21F4B6551FF467E5F3DD86C8079688F64B62203291AF0C0772DC60D1F428C8C97723BC5B6EB00FEDC18911B45D1849F995995ADB081B6D0CBD1C764353412E
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7569190.png
Preview:	.PNG........IHDR...8...D......f......IDATh..[kl.Wv..h..GC...d...h.a..G.u.u.......Im.G..... .?.]t..Z.E.Bi.EZ...m.m.&..u..I..+o..D..9.).T..E...dQ....;.\|I.L9.@pf..=.;..s.s..={..........vo.k..@(..C.&...!.O....h....!BJ.T..2..!.3AN..+.J..S.)...b...(.`....8.%._.?.Rj....".D....+..S.$.B...!D/.h+.u...r....\|..].H...u..S..(.i._....+......Y(.QJ.)...!.\.d#.F.YF...+..h..........!w.h.-.@uiV.fG..B..l..`.+8.!..k^...x.....z..\|...Y.z.e.aI..A>T.!Em%..q9...H.H.......G......2.\b.j.....b..e^...#._y.P.1.4....%g.e.......~.C~..1."......<..#7.......?..8.niJ%....q.z..;^....b....J)%..y...d.O]...E..W.kw.!e^....F.........=.......1..cd?....=.e.(.Q..RJ.......?.....(.UD..D..[d3....b..=...`7.j. [$>..X5...W.....!.@W>.r.?.-R.2....._.uR.7:. .I.........~.y..F..q2.`9A.T.4.v.W..l....~.>.B.V.v..k.(..C(.\|..G.7M.G..[..*..."..Ie.{.6.YFv..&...J5U..mT.....=.......\".hW.%...Ql;.=..T. ...4.e.A..1.s.,..!..g_...g.2.o.e...xH5U.E....5.v.{P.!..(..6)%.{...tC.Y..W6Yyv.....1cY.O.ox....@..<.!.x

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.641388613071513
Encrypted:	false
SSDEEP:	3:xPUgjinuSB8rWkcWjyun2ioSH9nKTuYYn:xPUgsB8roWmu2odKTuYYn
MD5:	DEC423F49E095878A4C4D67522EB441F
SHA1:	33B60D1222CF02039155179A842B781BE24D8109
SHA-256:	681B983749BB91C03B40BBA43A114C43A95C4E47052105A0A13F12E86EB58A6A
SHA-512:	51053CEBBD2AA8381052BF7929CAC18373836A06EE37D2EE5DA4949DC9BA87B549A72978030A9E1F1552ADEED0474A3CA85C42E8C2095005BCC03DB1A456C571
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSMwkuGUw0nGInxRIFDUBg6SISBQ24YNqXEgUNghTJxRIFDakn7LwSBQ2zZXgcEgUN7ukpZQ==?alt=proto
Preview:	CjYKBw1AYOkiGgAKBw24YNqXGgAKBw2CFMnFGgAKBw2pJ+y8GgAKBw2zZXgcGgAKBw3u6SllGgA=

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3045
Entropy (8bit):	7.898013648688094
Encrypted:	false
SSDEEP:	48:bSQvDzCN3/cEDP3rBSRiq0nQuGtTzGUNU+9tei2M+hpGkKcAfzMNojC5dn0M09:TvDzUr3rBSRiDUdVUWeTtqkK5mn0M09
MD5:	55549145940FC4E1A03D331E54B15415
SHA1:	B533164F63D7199C91FDAB3E22ED5BF79C71A77A
SHA-256:	253612011EE017627640BDE18AE9F7BCA5DB25F1E8F0E67C2BD628A1D7245B1F
SHA-512:	A85FED7EF7EF07156FDA14063F281E090C1E799A2733AD0101E542BB4D502B348B809E9472D4C133A7C364AE3AADE137D27A88E161FD8F6C813E011F49EA2AB4
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/dialog-new/logo.png
Preview:	.PNG........IHDR...M...M............sRGB.........gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....pHYs..........o.d....tEXtSoftware.www.inkscape.org..<....)IDATx^....S..PRrS.............4....._.4.0..^#=...Kf...5.)..rK/.....U.!\|?..i....s.9g.~..w.....^k...>k...:.M...X-...6.g.6.<Q0-X[p........\+.Z...r..V-..Y}3-......}=.e.^...../.<b2"Lf....!#.o.\..J.?)x..A.....n...0FE9......$../.x(>Gd.(.{..r...xx.....u8..F.....g..../W......p_3\...(r..........:{....3...N...)+zwj..ev. ......v....!v....E-.....75.n.h.n.`....p.....=..R..L...?......,..<<.&..?.......`..f.\....u..\,x..-.;O...<l.[..d..........L..`... ....5....\|H.t8].ql.......<V....'.b.S..........=a....{U..f<....._....O....7..}...H....O....:)....+.5l...[..h....f..;.0.Wi.]h...&2..#..w..7e...'......~.r......... ....H\|.g.u...]>9...)..(i....Q....)f._.I.3C..yN..+...Jl..)..h.n.m.0.'....9W.....U....\|Bb}.R'.......{9.8.OMP;..D....5N4<..L.y.\''.-....Q.jl...D.B..^..y.......5.....H...k.....S.6D..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35513
Entropy (8bit):	7.952686112700941
Encrypted:	false
SSDEEP:	768:0TnydSFjOi9cXAVpxhle05LJyz2lS42vhnl:cydWjO4hVdlNwv
MD5:	0686D4C3AECD7A33D7EC1076018075DD
SHA1:	EF94E2547DC91720D57B01A4B57D7FE329BD66B8
SHA-256:	062458D0337C7158D1AE4E762047C64ABF52A1D15C67614CBC352B4BCC8D54AE
SHA-512:	8333A3563644179D9F5C5B77B77663015B4CD638077F6CDC94177A007A5FEE928B4CAF7577BF25B901F374AB3CD206D6877FAFCE915D380163F60A0D442F60A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............>..%....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD..............tIME.......dp./....IDATx..wx.....gf{Q...b..l....SlZ.%...%..y...(.5$_..H.T....^.m.Mr..%.....!l\${g....].W"Y;..3...@D.-....7./........$Hp...`.`&K...W4..:...f..L6t.-..D....."F...E.'"......I.......h...e....A...X3.t...C..AY.[..`t..M].,..[.H....@.Y..F.U8......X...3.=.:...).Q...._s..F.!...x.>.5<..:...Z.K3\|^..[..et..`...x3...SPn......'.6.... N....D..vA..0y.....;.N.p...p.$....t.#.....?.g.Dx.-#Bg8..b.bI..S..0.a.\|.S.I..9...c.1.g......"D0x....S...i8`."....a.."..R}.....w...gI.F..f.69z..b.. .D.........XR>..62..?..`..... &.MH..x...$.u...ElIn....}..d."X.w$.\|..8.......L.y....t@b....}...NiN.+... ..5.`.2..@Z!^.J&c.... ..$Q.......[xh..#..'......e.w..."D....b........d.B..@..0.. ..I.....#.....,...g..5.`.4..9.j.#c....`...!..Ap.'xh../.G.m.!.)%..$.....#.f.=.wd..(...z....f.N.~...e...nl.Xy.?".`..JX..5.......D..../......ij..C....z..%..x!....w_'..&4$....a....5.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 389 x 70, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3144
Entropy (8bit):	7.911712809096896
Encrypted:	false
SSDEEP:	48:tUmAgos7dq17HuqTYv7ZwRoCk9AWCcgfRVEYP6GOpLM2JNMHPVKkVZ:tULgorHNEv7ZCoCkiWWLNi0DVdVZ
MD5:	ACD07208572CE41D37BA95F9A715EB0F
SHA1:	22BE02A79B11B0CC3CC6D22D0600F6EE52468E24
SHA-256:	136B051003BEEC680A09620D4D164AD5257A137973F8CBC5C78805A4F4ACA3FB
SHA-512:	C3D1EC96BFF37FD66D5E18D390BB308A8F1187BAD691F1AE7689790A5DC257D6FF110AE84EAAFB00C954783F5EA2DD49AAD83010135CC6876E504F250B07359C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......F.....#(......sRGB.........gAMA......a.....pHYs..........+......IDATx^..{l......9=....=..@[Z' ..V..1K..K.(Ht..t..p..wM.L..,..2.?[2..!,.h.d. #..V................\z..9=o....<.....~...>....9.F....4...v8P.q.k.h:.I.cq.g..c...D.-D..)....h...%"7=C#860./....Niyk.....5.k.w.(_Y....CK}..DD........1x.6T9.p..Y.pT\|v-..'...D......I...m.P....W.Df......:_>..~.s2..2.La(.S.A.5.o{^m.^""3.....:m.h.U"P..:...+....G.e..[.6...x...JS..J...\|..>.:....P.t.%"2..6.....U~.....C..`0.)C...j ..9l.zij.d.T...#.dS..L..\|./...i......].zs.&.O.......e.V^.....X..2!.s.<xT/]\....=....R....KT....(.v....mGb.........=]......s.z...%..!.....B...=........:....#.wyQ...X}....a.m%...j].........:..~4..R......s/..._..#C[........B.H?.v/.Fza......3.>..s...K..%lK[.m}p;..::.....&.R..`{.m....y.K_..+H...?.Cat.8..>.......<W-Ctn.......vjA1.h]%.^.`bP.+....g!...=..^:..M./...r.r.........C..9....\t.[Z..E....p.<.Z+.ut..1..@.....;1..'.Y.f.eK....H.@..w.yOm3.L]Q.\|/..PO/.6.b....-F:.@}c

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 152, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1759
Entropy (8bit):	3.3949795909707228
Encrypted:	false
SSDEEP:	12:6v/7aQ/hzZwRhraaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaYMm6VW2BjIaYwJ1c:IeY6VfZq
MD5:	441A3C901905D292C5D32B7A5863A823
SHA1:	F0269E769C6DFC8771C2E14ED0BD5C51AA27124D
SHA-256:	08A105405F1F57788F2073DCFE8F849570E5464BBB7479C602176F8A9710C781
SHA-512:	982E2A9F7B97FB580E660BCE4B00773C9F6B54F34F34BB13B19BD81E43ED3A62247E00497C2357D9351BFA70ED2CA655E98844E24CDB047944A776A4F845DC00
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570258.png
Preview:	.PNG........IHDR.....................IDATx...K..E.F.pb...eQ..@.dP.ta3`...W.H.\|.b~.G\...u........y?.......................0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!........D...........0......@..........!

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 15x21, components 3
Category:	dropped
Size (bytes):	1522
Entropy (8bit):	6.583874443729885
Encrypted:	false
SSDEEP:	24:4HlK1hpunQWwh82lYSKwGKnhCyEV+mT3XyJ3Vg9NGNGAiPoZb0yIrkBwJhOXlRQS:ayitvnL98cdMmeJ3u94NZi+0yIwBw0QS
MD5:	693FDE17CE1B043B5F0445119027C460
SHA1:	E9CF842DA0B295FECF1B7E13FCAD4B95E8909194
SHA-256:	A0D7D0585255815B5B0D76C90851982F59D7B950E5D8FE43E7B0698DF5BEB782
SHA-512:	1C44DFE6D888F66264F1E59FBD144FBDF61D18129EF673FFE057A67BBD6F2E1FE8C5DC05EDE09EACECA2D8919BF701E8A877E8F773874494D3027F1414403C23
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de" xmpMM:DocumentID="xmp.did:9D18FB296EAA11ECA8F9E7BA86D2AD4C" xmpMM:InstanceID="xmp.iid:9D18FB286EAA11ECA8F9E7BA86D2AD4C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cf4d27d3-f60d-4a4a-8e0e-b6db5d7e8304" stRef:documentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7791
Entropy (8bit):	7.891029786201046
Encrypted:	false
SSDEEP:	192:katek5QNFo4MsvNDWMO6IRtKbJ49IsrsxGAlqSBF8:5jSoZsvNSMjI2J49vw5+
MD5:	7ABF0D861BC9CCE19C0318C7D41C7F79
SHA1:	27A9BC67EE82E1AE64B23F8A604FB532EA096EB9
SHA-256:	A0E495EFA15B6CE9B4AA0800AA3037D0C60A646127F7D0C451CC512A02B3AC30
SHA-512:	ABBEC39263E72F0BDBC70EF26E64017C1EFFFD21DB794E13EF35F3FD2FE5D23D8B4401A59619AC9881D2F1C4956E89185182EFE59AF831FEEF6BA8ACB5C29483
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/img/footer_1.png?1
Preview:	.PNG........IHDR.......(......>%.....sRGB.........gAMA......a.....pHYs..........+......IDATx^.{.gWU...>..N;-my..L).Bi.V^.....c.F..#...b"."F.D.M.A...Dm..5...5...+. .\|.....L.3..}.>k..9.wz.6.................u...........b.H............1....f...N=:. `~1..K...`.O.....FrQ}A.?...A.2f-..s;.z\_.k.....X.:c.k7.:....U?.,j^`.t^S....Cf=.1...k._3..>m`.[.^.......wx......>?s..^.5....+q...#...,c.C.6.."a.4....c.....pc@...Q.....`.......n...\.[...fmm=}..6x.M....i...z..?9...TN\.9....9'`....9..K........G.c........;)l....nO..1/v.8 ).?...4.A.s...dn.:....6..I...........P_4`<...O.P...../..c!....^.sPWW.F_.5..:{.l.$.v{...<.u..H..G.0/~.~....17A..Vams%p..7"...we..u+RO...L]......l...&n..5Z.i.!G.K..\|.$.7....I. .&\.....d...b.~R...9@.#..6..Xc..uj>\|..}.t.9.....6...nf......>._$.p7.c.}!.9j..............XQ.../.^.pr......6{........$J,.<..q..=.lb?.Dnl....jO....0HO. .....r!\.t^...w...gmm-9.9cz.........%u.k\.Q.>.v..n,.:>.....S.z.%.....:}..G[...l5.....X. <d.:.'......Q-.Sd.......

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 149 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5847
Entropy (8bit):	7.890758827991575
Encrypted:	false
SSDEEP:	96:7IfZQO3InQbjH1YIEXjr8p49wuq8jBmg0xUj0BAZdNtv/608atWZmXdWDXDwlIp:71YIKdRpEw0j8x8MAVtqSIDB
MD5:	6E3106883C3543BABE2A1990B620F136
SHA1:	19BB46E5D0EF605FB7C009EE5600DFC218E8CF45
SHA-256:	25EB3812B890F3BA505FAE4C1D082AE9F0556F37967254765854EC616024B565
SHA-512:	E1C1C796C5F160E1FB7F9E6DC381DDCC879DC0482F45977EA0E7EA6A27151199DC245149433C845E54E80D47F7B9081B793CAF09DAC386BB17DCE56793D37702
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(.............sRGB.........gAMA......a.....pHYs..........+.....lIDATx^..m..Uu...IH..$7...;.&......N;.~n+"S5.....H.g:Z.f.2-.....BHy.V.P.P.v:S_........m..".1..u..:...y.v.g.k..._k.g..<.9.L->c.dI.....J9y..x.d\|...W.x...M...9...........Xb.. ...9..j........m....M>...G_h......O?...P.N.`}.."..:h7?......ij.Z.1....{.]...4d$U.\..}\|,@_..q . ..Ac...K3....\|^...ql.`...q1.:c..?.k.\..f..4..m.....P@.c..1 .B.........:/.....{.:.!E......rC.7. .\b..........\|..~@)1c.N..~.$..<...EmLn9..O.......G.h.....yi..c#.....j...9.._.c.3. .h.07'.........u^ .E..1.....p.u...T4. .0...A2\P.L.pQ.X.H..c..I...<.M....q....9.q....B9v....k..#.:.E.o..~...... =......1l....G....9.kq4..SO...}..c.@..C7L. Q..........2/..&.srr..g.....}....j.Y.>.\....+...K.....sM......1w..........&......+n....:...z..:.IR...8....T.m....G.i..8p.>pL...h.49..,.v..n3.=...`..o\|./.?!.1....;......E.k..Zp. .k.gL_..d......:...9..Y.vRY..v. %p....}..aW..Y^P.?..=.x...>v..D.4.J..\.W.p~.z..> &sg^.4.9

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	123
Entropy (8bit):	5.047092960131292
Encrypted:	false
SSDEEP:	3:yionv//thPlEXttbifsLts7CX9/gm6Kp9syx9VFBw7u6IMEklVp:6v/lhPKkER/C+gyN5Fkp
MD5:	8CBB0471C1187DDA1863CFBC95834B48
SHA1:	E87E04F9D698C3E2D8FBFF008458BAEC10734B52
SHA-256:	A6A686A454E76940C823730E499D7898EEBB2B2BDD6D0D7DBB3FCA197FABBD51
SHA-512:	22D517BD5C4254EB72840C1194EADA2211F8B40BEB1FA49DA3071B1504A81C0DC745B5A9E711BB45A9E459F9690FBC99D0308B5F9393D7D82E62DF0F87648F47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(........ ....sRGB.........gAMA......a.....pHYs..........o.d....IDAT.Wc......W.....ihQ.!....IEND.B`.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	79320
Entropy (8bit):	7.992517213796813
Encrypted:	true
SSDEEP:	1536:F6IzshSeVzBdMpJ527amih/5l60WqYO1RMiSc6nEWbzOSXIw1BH4l:FrzsAeVzBs2Kh/NzYOkif6nZz1d1ta
MD5:	ADAFCCAB87F40B603BE14119829783E1
SHA1:	D676A0C5F696449BC068A48E31C351B2828EE83D
SHA-256:	09AC41C0DF92A37BC2F7324A071247898E6A31550452B5E04312CE50AF4334F9
SHA-512:	9FD44A117A0B362877F9B68087EFE22CB7D24A8EDC0F69E17D6D41AEA949EDE0C4E29EFDCF88087A3D4FD12AFBFE5A1CEA46FC5392D08BEA620FECCA92E5A7E9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...=......0.... .IDATx...k.Yz.t...}{w..}.Sw.9M2.@..!..HRe..`JK.&j.?.jiIA..S.."V.%...REYV....$ ....1.0..B..CO.gvw.t....u_...........<.Y.>\.q......}.U..A...@......j>.....+..uO5PU.n...\1.O..Z..g.1..s...Q...............>.>e.....y..s.8b......b...W.\|._..g.u.y...U\s....b^'P.h.'......ZO.0t..3_+hdjv.8...n..BR..q}.8Qd,...z.Z3.>.<z...}...u.C#.R......I......:..F........k>X7...#d.[.W...=..4.y....}......&....:@....9.MP8p...%._r..@^..9`.9.N...1s...l....4.E..G...ZSwD......=.s....P#.....=..CzB.Z+....^C....X:H.@.Bz.$N....9..9.y.x^.....8....Z\|j.G.8I..^.s=...e'.....R.....X.F@.~._../9o.>u.[F..k......<.......-.NS..e...f.8.N.^...h...=..P..u...@.k...s...=..I#..p.. M.G.D....H...3i....K}<...~...DL..b...el.P.r.EO#~..!....g.j...k..4.a...V.:...u...'.HI.A^.....a...'..I..l...%g.......u.~g7.#..q.;8......o...1r.....;...rb]'.:.V%.H.S_.l.z{..'.......nh-......B.jc82u.K ]\XR#+..Ob.p.l...f..Y....Q%y_4........$/.+.d[g...qHNs9...$..K......k..q.g9..

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.7931443269714
Encrypted:	false
SSDEEP:	24:o2kscvkPqdHiJFRR88LV0OtXW100cB/0QHEE/:X+v5iL88L+Ok1pcB/ok
MD5:	2EBF54D6BE73C227F780830EB51FA35D
SHA1:	CA24BC1D8BDA1D149FC97B1E21C2880F67EBE83F
SHA-256:	BC87C1E813B4B81B23BB1A13372125C0923BB05C73A3DA22524CF4C03E7D9B5D
SHA-512:	861F06C8F21C62B6ADEDEF325E59A7356E7BDDF8224E8774AC0AB41BB3E3E531E7269E0510C874CB682CDF57C05A7158614D80E201C87A8C01A06D859AC76AF9
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ........................................L.&....t.............6.\(4.HU.4............................4...n...R.. ..."...#y..;....8..+7..)A.b................................,...@...?...2...#.......%...5.\|................. .....5y.............#...)...:....^.......6.X............... .......'~...........V...P.......'..3...-...^.................=...............$...#...'...2...3...=...T...g...T..N....3.......)....8...5...k......!...#...,....n...M..&^..^...V..........L(....}.........................."...............V...c...u......V.....]..........................................4...I...^...)..>#....w...............^.......8...8..............&...A...v...I...)....................................&..........8...$...........!.......?.......T.......S...6.......L.......V..:...^...........>..0.........#...........e..+}...........9..+...D...9...............0..^!........I.......$...........b..'...(...:..@.......................F....................(...0.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	troff or preprocessor input, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15976
Entropy (8bit):	5.135331704450937
Encrypted:	false
SSDEEP:	384:sfbJ2SMki8JUvG1JDVxClqthMeBr8VaNfVa3l1U5Pg1la595a1spdshqy2JLYZmz:sfbJ2SMki8JUvG1JD4qTlg8B8SJltmJo
MD5:	9DC214886720FB934025EF5F37603564
SHA1:	CAE4AE70FFCE7F241ABA70FB28216DD8E82435F1
SHA-256:	A7844E9CE418E18036FFF961A14B324CADD4C79347425D822821D33A51D761B2
SHA-512:	3A26CB8AF22BCB0F9116BEC206DC201E4D0183BEC226320630E3F0EE5848283BFDC69022D5D566E78409C6979C62021CC5BE85C737AD8225116109AD25DF087D
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7601024.css
Preview:	..*{...margin: 0;...padding: 0;..}...bg {...width: 100%;...min-width: 1100px;...overflow: hidden;..}.....w1100 {...width: 1100px;...margin: 0 auto;..}.....wrap{...margin-bottom: 40px;..}...toptitle{...text-align: center;...padding: 15px 0 25px 0;..}...toptitle .title1{...font-size: 34px;...line-height: 40px;...color: #243187;.....}...toptitle .title2{...font-size: 18px;...padding-top: 5px;...color: #162582;..}.....lunbo{...width: 618px;...height: 412px;...position: relative;...overflow: hidden;..}.....lunbo .hd ul{...position: absolute;...bottom: 18px;...right: 24px;...z-index: 99;..}.....lunbo .hd ul li{...display: inline-block;...float: left;...width: 11px;...height: 11px;...} ...lunbo .hd ul li span{...display: inline-block;...width: 6px;...height: 6px;...background-color: #626262;...border-radius: 100%;...cursor: pointer;.....}...lunbo .hd ul li.on{...margin-right: 5px;..}...lunbo .hd ul li.on span{...margin-top: -2.5px;...width: 11px;...height: 11px;...background-color: #FFFFFF;..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	79320
Entropy (8bit):	7.992517213796813
Encrypted:	true
SSDEEP:	1536:F6IzshSeVzBdMpJ527amih/5l60WqYO1RMiSc6nEWbzOSXIw1BH4l:FrzsAeVzBs2Kh/NzYOkif6nZz1d1ta
MD5:	ADAFCCAB87F40B603BE14119829783E1
SHA1:	D676A0C5F696449BC068A48E31C351B2828EE83D
SHA-256:	09AC41C0DF92A37BC2F7324A071247898E6A31550452B5E04312CE50AF4334F9
SHA-512:	9FD44A117A0B362877F9B68087EFE22CB7D24A8EDC0F69E17D6D41AEA949EDE0C4E29EFDCF88087A3D4FD12AFBFE5A1CEA46FC5392D08BEA620FECCA92E5A7E9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8574863.png
Preview:	.PNG........IHDR...L...=......0.... .IDATx...k.Yz.t...}{w..}.Sw.9M2.@..!..HRe..`JK.&j.?.jiIA..S.."V.%...REYV....$ ....1.0..B..CO.gvw.t....u_...........<.Y.>\.q......}.U..A...@......j>.....+..uO5PU.n...\1.O..Z..g.1..s...Q...............>.>e.....y..s.8b......b...W.\|._..g.u.y...U\s....b^'P.h.'......ZO.0t..3_+hdjv.8...n..BR..q}.8Qd,...z.Z3.>.<z...}...u.C#.R......I......:..F........k>X7...#d.[.W...=..4.y....}......&....:@....9.MP8p...%._r..@^..9`.9.N...1s...l....4.E..G...ZSwD......=.s....P#.....=..CzB.Z+....^C....X:H.@.Bz.$N....9..9.y.x^.....8....Z\|j.G.8I..^.s=...e'.....R.....X.F@.~._../9o.>u.[F..k......<.......-.NS..e...f.8.N.^...h...=..P..u...@.k...s...=..I#..p.. M.G.D....H...3i....K}<...~...DL..b...el.P.r.EO#~..!....g.j...k..4.a...V.:...u...'.HI.A^.....a...'..I..l...%g.......u.~g7.#..q.;8......o...1r.....;...rb]'.:.V%.H.S_.l.z{..'.......nh-......B.jc82u.K ]\XR#+..Ob.p.l...f..Y....Q%y_4........$/.+.d[g...qHNs9...$..K......k..q.g9..

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	863
Entropy (8bit):	5.3857128757567
Encrypted:	false
SSDEEP:	12:HlVbykr+q9+jc7LED0/N/w/FiX+EE0evWkDUhSqLAClhJs44Kfvg+J5yM+Np1Akp:O55kEg/N/oilVkQ57Js4lyMU3pvV
MD5:	EC71439268A22B29673BCA5F0C59A76C
SHA1:	417E726B8FA9DEFDD413166E34F54563872322F8
SHA-256:	1A0E46989EEBC1350384F667F9340821D8B9A4F617AEBA4120E853295CCFBCA5
SHA-512:	E997477482403AD05CE2B7AF0AD2F366C29E19BAB20A82E4A18FED13AC5D466194A999B84B0F9B5668650534C8442E817CB8F951E70B31A6FD4E62A0F861E1B9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570212.css
Preview:	dl,dt,dd,ul,ol,li,p,h1,h2,h3{margin:0; padding:0;}..ul,dl{ list-style:none;}..img{ border:0px;}..a{ text-decoration:none; color:#000000;}..{...margin: 0;...padding: 0;..}..body{.. margin: 0; / ... body ........... 0 ............ /.. padding: 0;.. text-align: center;.. margin-left:auto; margin-right:auto;.. .. text-align:left;...font-size:14px;...font-family:Microsoft Yahei;..}...clear{ clear:both;}...clearfix:after{content:'.'; visibility:hidden; display:block; clear:both; line-height:0;}...opacity{filter:alpha(opacity=50); / IE / .. -moz-opacity:0.5; / ..Mozilla /.. -khtml-opacity:0.5; / ..Safari /.. opacity: 0.5; / ..opacity....*/....}.....fl{ float: left;}...fr{ float: right; }

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Stereo
Category:	downloaded
Size (bytes):	546636
Entropy (8bit):	6.928092919229394
Encrypted:	false
SSDEEP:	6144:b1sESjguEqbd9psB94vpBu4wQqWn7v3M+vV/CkxZUvkpA6np/7TN3WzEmKh6RbI:rnuEypVlqW7vXvV/tZVaO97hmzEmsEI
MD5:	F21DBDC229AE8833C79B72718858F3C7
SHA1:	BE4117C0282A71271E062EA768D461F40AA68A25
SHA-256:	C5A8DFF0C724A0FBA49074EE7F2F40FE2AFF2C3ECF1E557941908A149BE2A704
SHA-512:	9484F5DFF73661066AB1C0A9FB23B12088BBD9751FC9C1EA9DAF276171BFC4F0C25E40BCCAABEA424F00867FB9D131433CD4688EDE61D6817A7618B38183E45F
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/mp3/sound.mp3:2f7f95497e0f5b:0
Preview:	ID3.......TPE1.......Sound Clip.TIT2...?......... .. ........... ...... (loop) .TDRC.......2020.TSSE.......Lavf58.76.100...............................................Info..........V..............!$'),.1469<>ACEHJMORUWZ\_bdgjloqtvx{}......................................................Lavc58.13............$........V...."............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3137
Entropy (8bit):	4.917151642318642
Encrypted:	false
SSDEEP:	48:ePc2e1dDGQiDu4elTsgeTrxjSvNxyMa+fwmB:eUhPGM4STsgeZWwMPp
MD5:	9DA646E05BC74DCAE4B7568BD1E570DB
SHA1:	95BF8DFEA48F53373131996BE7821F295B42DE30
SHA-256:	FBD1EBC8AD24A533074A4A5001E04131F66AFFB9A341D93E53A820847BBED820
SHA-512:	3C7E4D7CC7F87B63DFA91B2F945D89281EA048A27CAA01E663B7741E7C10B16BCE1B752D837544CAA624AFF6BE6957F83104AF0E54D87E75A42DB42C6F606D4E
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570215.css
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015././ ===============================================================.Basic Swiper Styles .================================================================/..swiper-container {..margin:0 auto;..position:relative;..overflow:hidden;..direction:ltr;..-webkit-backface-visibility:hidden;..-moz-backface-visibility:hidden;..-ms-backface-visibility:hidden;..-o-backface-visibility:hidden;..backface-visibility:hidden;../ Fix of Webkit flickering */..z-index:1;.}..swiper-wrapper {..position:relative;..width:100%;..-webkit-transition-property:-webkit-transform, left, top;..-webkit-transition-duration:0s;..-webkit-transform:translate3d(0px,0,0);..-webkit-transition-timing-function:ease;....-moz-transi

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7262
Entropy (8bit):	5.437607284772332
Encrypted:	false
SSDEEP:	96:EhLuY60dZBIe39z8esZy96+NABXSj+zVLsAz5bHXL2Y:Eh6Y60GCnc+NABmdKHaY
MD5:	58B957082C9920BEB19056700AB5BD75
SHA1:	B0CED748322CA6E445FA4F8C804265405A3A7CA2
SHA-256:	120F5BADF54653B534293F1E4413ECD36C62E4D8589724ACBA1C6C19BDB2842A
SHA-512:	DFF22A33899294F3E6D062614A644F86CEFD3A9CE51B0A6D4A5C406EA4512A669DBC699EF0CBFADBA3FEA93D2A7EBBE2B3A31743BFF4DFBADB87AA1B91BCAAC9
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8221087.js
Preview:	try{...var esdTipLink1 = document.createElement("a");...esdTipLink1.setAttribute("href","javascript:void(0);");...esdTipLink1.appendChild(document.createTextNode("............,.Alt.........."));...esdTipLink1.tabIndex="7";...esdTipLink1.id="esdTipLink1";...esdTipLink1.target="_blank"...esdTipLink1.style.setProperty("max-width","0px","important");...esdTipLink1.style.setProperty("float","left","important");...esdTipLink1.style.setProperty("border","0px","important");...esdTipLink1.style.setProperty("padding","0px","important");...esdTipLink1.style.setProperty("margin","0px","important");...esdTipLink1.style.setProperty("width","0px","important");...esdTipLink1.style.setProperty("height","0px","important");...esdTipLink1.style.setProperty("overflow","hidden","important");...esdTipLink1.style.setProperty("display","block","important");...esdTipLink1.style.setProperty("left","0","important");...esdTipLink1.style.setProperty("top","0","important

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32018)
Category:	downloaded
Size (bytes):	46354
Entropy (8bit):	5.3743688373906515
Encrypted:	false
SSDEEP:	768:eJboOBwtxaCM9mwh9MTJlbaWNMZ8vyHMOzFGV8oJ04:4oOBwt4uTOZ8vyHMOf4
MD5:	756E0F300D80E502F84C0881DAD9995B
SHA1:	EC97FC02C665EF9A6DF5E9ABD14417573BFFCE64
SHA-256:	0B5595E4E06B5279B5EEC574C2A3AEE7BEA92E1BC16AF3B49D0680111DFD23B7
SHA-512:	EB434EA5A5585064B6450D620CF689AC9ABFF4350D059F3E7528A8B7A9C09CCA0BE297EDFAB9AD7A81A652405D038B257CBC828FB8617F45DA4BB5F9F9261D4A
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/7570216.js
Preview:	/. Swiper 2.7.6. * Mobile touch slider and framework with hardware accelerated transitions. . http://www.idangero.us/sliders/swiper/. . Copyright 2010-2015, Vladimir Kharlampidi. * The iDangero.us. * http://www.idangero.us/. . Licensed under GPL & MIT. . Released on: February 11, 2015.*/.var Swiper=function(a,b){"use strict";function c(a,b){return document.querySelectorAll?(b\|\|document).querySelectorAll(a):jQuery(a,b)}function d(a){return"[object Array]"===Object.prototype.toString.apply(a)?!0:!1}function e(){var a=G-J;return b.freeMode&&(a=G-J),b.slidesPerView>D.slides.length&&!b.centeredSlides&&(a=0),0>a&&(a=0),a}function f(){function a(a){var c,d,e=function(){"undefined"!=typeof D&&null!==D&&(void 0!==D.imagesLoaded&&D.imagesLoaded++,D.imagesLoaded===D.imagesToLoad.length&&(D.reInit(),b.onImagesReady&&D.fireCallback(b.onImagesReady,D)))};a.complete?e():(d=a.currentSrc\|\|a.getAttribute("src"),d?(c=new Image,c.onload=e,c.onerror=e,c.src=d):e())}var d=D.h.addEventListener

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 15x21, components 3
Category:	downloaded
Size (bytes):	1522
Entropy (8bit):	6.583874443729885
Encrypted:	false
SSDEEP:	24:4HlK1hpunQWwh82lYSKwGKnhCyEV+mT3XyJ3Vg9NGNGAiPoZb0yIrkBwJhOXlRQS:ayitvnL98cdMmeJ3u94NZi+0yIwBw0QS
MD5:	693FDE17CE1B043B5F0445119027C460
SHA1:	E9CF842DA0B295FECF1B7E13FCAD4B95E8909194
SHA-256:	A0D7D0585255815B5B0D76C90851982F59D7B950E5D8FE43E7B0698DF5BEB782
SHA-512:	1C44DFE6D888F66264F1E59FBD144FBDF61D18129EF673FFE057A67BBD6F2E1FE8C5DC05EDE09EACECA2D8919BF701E8A877E8F773874494D3027F1414403C23
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8307865.jpg
Preview:	......Exif..II*.................Ducky.......P.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de" xmpMM:DocumentID="xmp.did:9D18FB296EAA11ECA8F9E7BA86D2AD4C" xmpMM:InstanceID="xmp.iid:9D18FB286EAA11ECA8F9E7BA86D2AD4C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cf4d27d3-f60d-4a4a-8e0e-b6db5d7e8304" stRef:documentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 24x22, components 3
Category:	downloaded
Size (bytes):	2108
Entropy (8bit):	7.124990612923821
Encrypted:	false
SSDEEP:	48:uyitvnL98YdImeJ3u94NVT0pgM1khMoGo4Rme2rMN:qp7P4NVAXsMI4Zoo
MD5:	65C5F56E12B0A600612194D79050F36E
SHA1:	BF04BFA108BED4D73AF3E52D51FB6FD2992AB746
SHA-256:	F95D0114067ECF5F263F2F872AE60589477464E4777870A641B70B3EB7856958
SHA-512:	909A0746F15CECCA018CCFCD00F3C17E391BA38E6322EE8A378CF9DDC08F6C851F59C28F603F5D206C199182DB8023403AB571D022CDA6E26594678B8E703168
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/index_files/8307859.jpg
Preview:	......Exif..II*.................Ducky.......d.....zhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de" xmpMM:DocumentID="xmp.did:9D18FB256EAA11ECA8F9E7BA86D2AD4C" xmpMM:InstanceID="xmp.iid:9D18FB246EAA11ECA8F9E7BA86D2AD4C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cf4d27d3-f60d-4a4a-8e0e-b6db5d7e8304" stRef:documentID="xmp.did:e1f623fc-4d08-d64b-bfd7-8bfebbbb89de"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 194 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7791
Entropy (8bit):	7.891029786201046
Encrypted:	false
SSDEEP:	192:katek5QNFo4MsvNDWMO6IRtKbJ49IsrsxGAlqSBF8:5jSoZsvNSMjI2J49vw5+
MD5:	7ABF0D861BC9CCE19C0318C7D41C7F79
SHA1:	27A9BC67EE82E1AE64B23F8A604FB532EA096EB9
SHA-256:	A0E495EFA15B6CE9B4AA0800AA3037D0C60A646127F7D0C451CC512A02B3AC30
SHA-512:	ABBEC39263E72F0BDBC70EF26E64017C1EFFFD21DB794E13EF35F3FD2FE5D23D8B4401A59619AC9881D2F1C4956E89185182EFE59AF831FEEF6BA8ACB5C29483
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......(......>%.....sRGB.........gAMA......a.....pHYs..........+......IDATx^.{.gWU...>..N;-my..L).Bi.V^.....c.F..#...b"."F.D.M.A...Dm..5...5...+. .\|.....L.3..}.>k..9.wz.6.................u...........b.H............1....f...N=:. `~1..K...`.O.....FrQ}A.?...A.2f-..s;.z\_.k.....X.:c.k7.:....U?.,j^`.t^S....Cf=.1...k._3..>m`.[.^.......wx......>?s..^.5....+q...#...,c.C.6.."a.4....c.....pc@...Q.....`.......n...\.[...fmm=}..6x.M....i...z..?9...TN\.9....9'`....9..K........G.c........;)l....nO..1/v.8 ).?...4.A.s...dn.:....6..I...........P_4`<...O.P...../..c!....^.sPWW.F_.5..:{.l.$.v{...<.u..H..G.0/~.~....17A..Vams%p..7"...we..u+RO...L]......l...&n..5Z.i.!G.K..\|.$.7....I. .&\.....d...b.~R...9@.#..6..Xc..uj>\|..}.t.9.....6...nf......>._$.p7.c.}!.9j..............XQ.../.^.pr......6{........$J,.<..q..=.lb?.Dnl....jO....0HO. .....r!\.t^...w...gmm-9.9cz.........%u.k\.Q.>.v..n,.:>.....S.z.%.....:}..G[...l5.....X. <d.:.'......Q-.Sd.......

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 173 x 70, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2174
Entropy (8bit):	7.838538293666231
Encrypted:	false
SSDEEP:	48:j27yzs5X38iQ4fbC2yugrsbv6dAS0bIto7i++3izMOngMNaF:j8yA5X38iZfbyuA4v6qS9mz+SzMENo
MD5:	56C809E25323199BACCEB077C3705BD6
SHA1:	47552965186D25B63FCF144625F7C49BE083925B
SHA-256:	ACA73DB62E567E66D2E507AAD83B320161017703F6D9C0FADFBAC2DD434CC448
SHA-512:	336C2D380F6EF927C17A228D338F4AFF64A84F402F2592D965E207D5FD7D8DF7158A4D7979BA1A02212758C5AC4250C872AD9929FC098E94A564C5298900F738
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......F......,......sRGB.........gAMA......a.....pHYs..........+......IDATx^.[lTE......@.mbIk+J}R0.O\....FL....BL4....J41\..4b"D...%.... m...IoBB/..7.nw.....rX..={.a._2.93..-..w..s..s..."aJ....l.n.yO../..[..c...1...q...q.......i..Hk j.d.d'K.~7.i....Te&..(.3.?..'.H+..T...".Hk ..^...?...K...C.M..O.<.$..^.."..6vA.i.W......N.s\.....Z\.6M..t?.a%....DZ...0U..DZ.8DZ.8DZ.8DZ.8..6..w......H+.....q...q...q...q...q...q...q...q...q...q...q...q...q.n).. ..DZ.8DZ.8DZ.8\|..C........s....'..o..n .f.H.?k....z.t.\|z.......b44...1.WpJ.UQ..4.O(yG.1....z.'Hz0C...U..~.022B7o.h4.5..R...........H;..............QNG.~....[.......Y`S.i. ..p....N.H.q.e``....YJ.......]!..C=o.<.;w......~.....k.............z..[.,.N(..OkW...-...8577..7.....TQQ.[oz.(,,.9s.p.$....(,hmk..t3..S....#g....H...@....~.:GW....E.}}}..^Q{..zos5.nbD....'V.NB.B.....;)//...........;...V......tQ...5)..DJ..:.......4W...e.8..s.......6.Vs.`.....;w...j?..v......_.ukW.%..../..>F[6o....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (336), with CRLF line terminators
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	4.999870397528071
Encrypted:	false
SSDEEP:	12:AahAIWZh5X+o0uCAzIsTza/2Au6WSyfmC4K9E8BIL2FtmY27tmBrTw22rTwtmdbz:ADImX9WezaCfHJBIL2Ft2RoH2bqgn
MD5:	94D15215CFB82E973D4659EA7664CF3C
SHA1:	33DE30CA2A32A1A6CE6B99EDA2C1C2B4EDBFCB92
SHA-256:	4CA473B9F5B66BDE027957816173898AEEF51DF0D517946C2F5F25BD8CE98FD3
SHA-512:	8CC537F99475B2C12425C6B8386ECC84F8D85D833BB0E9DA8BF3C32FB504EE534AC62576AE35891413B1F6D6B7FE351F5C4FE022520597FF0EFD44B6DA17C315
Malicious:	false
Reputation:	low
URL:	https://cninaspwebprn.icu/c-assets/js/land.js
Preview:	$().ready(function (e) {.. var si = setInterval(function (e) {.. if ($('.successRow a').length) {.. $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-index:100;"><iframe width="100%;" frameborder="0" style="width: 100%;height:100%;border: 0;" src="./' + lpAlias + '/index.php?confirm=' + $('.successRow a').attr('href') + '"></iframe></div>');.... clearInterval(si);.. }.... });....});....function fullscreenExit() {.. if (document.exitFullscreen) {.. document.exitFullscreen();.. } else if (document.webkitExitFullscreen) {.. document.webkitExitFullscreen();.. } else if (document.mozCancelFullScreen) {.. document.mozCancelFullScreen();.. } else if (document.msExitFullscreen) {.. document.msExitFullscreen();.. }..}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2024 20:37:29.947191954 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.947237968 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:29.947319031 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.947545052 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.947556973 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:29.947961092 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.948005915 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:29.948059082 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.948298931 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:29.948312044 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.661550045 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.661809921 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.661834955 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.662803888 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.662875891 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.663825035 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.663889885 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.664021969 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.664031982 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.716993093 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.791548014 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.791860104 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.791902065 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.792819977 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.792889118 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.793286085 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.793343067 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.844980001 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:30.844993114 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:30.891988039 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.126547098 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126571894 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126580000 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126614094 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126629114 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126637936 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126673937 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.126703978 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.126718998 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.126754999 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.129488945 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.129503965 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.129559040 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.129565954 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.129606009 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.138175011 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.139570951 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.139614105 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.139699936 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.139885902 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.139923096 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.139978886 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.140146971 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.140161991 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.140353918 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.140363932 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.180505991 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.247917891 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.247941971 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.248074055 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.248106003 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.248147011 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.250121117 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.250137091 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.250193119 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.250211954 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.250252962 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.252152920 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.252166986 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.252223969 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.252237082 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.252291918 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.253842115 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.253856897 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.253910065 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.253920078 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.253959894 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.357129097 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357152939 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357160091 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357193947 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357208967 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357228994 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.357254982 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.357289076 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.358297110 CEST	49715	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.358314991 CEST	443	49715	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.374032021 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.374048948 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.374131918 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.374155998 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.374207020 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.375381947 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.375394106 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.375452042 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.375458002 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.375504017 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.377989054 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.378005028 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.378057957 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.378062963 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.378109932 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.379301071 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.379314899 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.379368067 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.379374981 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.379420996 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.380223989 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.380239010 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.380295038 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.380300999 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.380361080 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.381937981 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.381952047 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.382006884 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.382013083 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.382057905 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.434004068 CEST	49678	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:31.434004068 CEST	49677	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:31.434026957 CEST	49676	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:31.460195065 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.460218906 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.460310936 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.460321903 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.460366964 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.497061014 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.497078896 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.497184038 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.497200012 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.497240067 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.497952938 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.497967005 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.498020887 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.498025894 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.498064995 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.499475956 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.499489069 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.499551058 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.499557018 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.499588966 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.501189947 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.501214981 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.501271963 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.501276970 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.501317024 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.502123117 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.502135992 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.502197981 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.502204895 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.502257109 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.502897978 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.502971888 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.502991915 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.503024101 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.503432989 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.503467083 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.503520966 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.503626108 CEST	49714	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.503642082 CEST	443	49714	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.504102945 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.504123926 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.504179001 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.504290104 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.504302025 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.504574060 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.504589081 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.851618052 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.851916075 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.851949930 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.852277040 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.852569103 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.852628946 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:31.852705956 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:31.900506020 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.003196955 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.003506899 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.003531933 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.003846884 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.004144907 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.004200935 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.004296064 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.048492908 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.129478931 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.129542112 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.129597902 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.129929066 CEST	49716	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.129947901 CEST	443	49716	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.351802111 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.353610039 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.353635073 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.354696989 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.354763031 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.355144024 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.355201006 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.355340958 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.355348110 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.399975061 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.483083010 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.483109951 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.483124018 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.483222008 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.483243942 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.483293056 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.485719919 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.485734940 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.485805988 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.485812902 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.486947060 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.487004042 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.487010002 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.487045050 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.487204075 CEST	49717	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.487224102 CEST	443	49717	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.516027927 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.516073942 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.516248941 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.516525030 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.516536951 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.516885996 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.516895056 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.516967058 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.517277956 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.517348051 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.517405033 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.517833948 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.517841101 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.517896891 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.518143892 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.518153906 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.518606901 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.518620968 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.518860102 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.518868923 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.686064005 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.686085939 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.686146975 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.686178923 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.686223984 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.695643902 CEST	49718	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.695667028 CEST	443	49718	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.698679924 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.698731899 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:32.698801041 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.699042082 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:32.699055910 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.226146936 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.226411104 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.226429939 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.226763010 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.227068901 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.227124929 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.227202892 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.230731964 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.230994940 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.231019974 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.231900930 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.231980085 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.232244015 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.232300997 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.232361078 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.232369900 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.237819910 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.237987995 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.237996101 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.239018917 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.239078999 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.239317894 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.239373922 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.239398003 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.272496939 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.275007963 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.280502081 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.290990114 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.291006088 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.344043016 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.363013983 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.363050938 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.363140106 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.364605904 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.364614964 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.533345938 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.533638000 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.533668041 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.534713030 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.534791946 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.535073996 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.535135984 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.535198927 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.535221100 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.567266941 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.567337990 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.567400932 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.567925930 CEST	49722	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.567940950 CEST	443	49722	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.569894075 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.569936991 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.570015907 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.570211887 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.570225954 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.574525118 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.574549913 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.574609995 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.574615955 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.574654102 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.575115919 CEST	49723	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.575134039 CEST	443	49723	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.577416897 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.577424049 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.577459097 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.577549934 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.577713013 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.577729940 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626266003 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626291037 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626297951 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626311064 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626317978 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626319885 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626364946 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.626382113 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.626418114 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.626436949 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.627063036 CEST	49724	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.627074957 CEST	443	49724	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.629398108 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.629434109 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.629515886 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.629703045 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.629718065 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.830842972 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.873646975 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.873672009 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.873733044 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.873759031 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.873804092 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.874380112 CEST	49726	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.874399900 CEST	443	49726	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.876487970 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.876535892 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.876616955 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.876823902 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.876841068 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.877994061 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.878012896 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.926033974 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.964754105 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.966835022 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.966867924 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:33.967031002 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:33.967036009 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.146397114 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.146464109 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.146553993 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.146724939 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.146744013 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.178716898 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.230012894 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.284881115 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.285166979 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.285197020 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.285518885 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.285801888 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.285865068 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.285937071 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.298458099 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.298520088 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.298535109 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.298616886 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.298661947 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.298667908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.298800945 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.298846960 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.298852921 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.299050093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.299088001 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.299093008 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.299566031 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.299608946 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.332504988 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.350390911 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.350547075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.350590944 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.350708961 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.350758076 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.403821945 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.404134035 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.404175997 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.404462099 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.404753923 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.404807091 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.404938936 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.416985989 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.417043924 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.417170048 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.417306900 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.417346001 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.417427063 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.417668104 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.417711020 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.417977095 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.418014050 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.418112993 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.418246031 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.418289900 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.418596029 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.418642044 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.418684006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.418744087 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.419540882 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.419589043 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.419683933 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.419737101 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.420022964 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.420077085 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.452505112 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.473278046 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.473403931 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.473443985 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.473459959 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.475811005 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.475855112 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.475863934 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.517998934 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.545816898 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.545891047 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.545953989 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.546186924 CEST	49728	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.546206951 CEST	443	49728	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.547003984 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.547025919 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.547094107 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.547290087 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.547301054 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.560966969 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.614006996 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.614022017 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.615035057 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.615047932 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.617734909 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.617755890 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.617827892 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.618051052 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.618062973 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.773236990 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.798006058 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.798238039 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.798264027 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.799288034 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.799355030 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.800246000 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.800308943 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.820005894 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.820020914 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.828748941 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.828915119 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.828977108 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.829003096 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829057932 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.829063892 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829327106 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829374075 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.829379082 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829703093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829718113 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829725027 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829745054 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.829750061 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.829787970 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.830090046 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.830137014 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.852011919 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.852020025 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:34.860244036 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860282898 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860296965 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860362053 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.860385895 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860399008 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.860436916 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.860738993 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860795021 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.860800028 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860821962 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.860866070 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.861454010 CEST	49729	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.861468077 CEST	443	49729	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.863755941 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.863775969 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.863843918 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.864016056 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.864053011 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.864109039 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.864226103 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.864233971 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.864365101 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.864378929 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.868011951 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.900010109 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:34.911525965 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.911997080 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.912017107 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.912111044 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.912115097 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.915698051 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.916506052 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.916517019 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.918307066 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.918330908 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:34.918402910 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.918597937 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:34.918610096 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.218715906 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.220417976 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.220443010 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.221225023 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.222331047 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.222368002 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.222450018 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.222676992 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.222690105 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.262418985 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.262495995 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.262685061 CEST	49727	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.262701988 CEST	443	49727	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.358007908 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.358081102 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.358436108 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.358445883 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.358614922 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.358619928 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.471992016 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.472203970 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.472227097 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473138094 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473191023 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473216057 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473273993 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473295927 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473320007 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473340034 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473376989 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473413944 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473460913 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473529100 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473551035 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473624945 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473680019 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.473722935 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.473767996 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.474004984 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474033117 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474060059 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.474065065 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474073887 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.474513054 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474562883 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.474567890 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474785089 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474808931 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474827051 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.474832058 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.474849939 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.475254059 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475296974 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.475301027 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475409985 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475419998 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475450993 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.475456953 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475949049 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.475964069 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476016998 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.476022005 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476069927 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476084948 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476095915 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476115942 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.476120949 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476135015 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.476937056 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.476994038 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.476999998 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477062941 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.477065086 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477073908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477114916 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.477119923 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477161884 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.477384090 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477854013 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477902889 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.477907896 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.477976084 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.478007078 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.478034019 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.478080988 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.478085995 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.478132963 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.478288889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.478746891 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.478791952 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.478796005 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.516510010 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.523989916 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.523998976 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.523998976 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.572005987 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.578504086 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592017889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592168093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592269897 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.592293978 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592322111 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592339993 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592361927 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.592369080 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.592389107 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.593796968 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.593822002 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.593841076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.593842983 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.593858957 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.593875885 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.593904972 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.594748020 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.594754934 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.596158981 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.596184969 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.596260071 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.596474886 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.596489906 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.634995937 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.701088905 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701220989 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701278925 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.701287031 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701299906 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701342106 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.701643944 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701750994 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.701797962 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.705672026 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.706931114 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.706950903 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.709292889 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.709332943 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.709403992 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.709600925 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.709610939 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816008091 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816050053 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816117048 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.816154003 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816159010 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.816169024 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816205978 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816211939 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.816222906 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816257000 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.816577911 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816611052 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816632986 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.816637039 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.816659927 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817011118 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817025900 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817053080 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817058086 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817096949 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817329884 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817346096 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817374945 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817378998 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.817403078 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817420006 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.817982912 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818003893 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818028927 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.818033934 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818057060 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.818087101 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.818516970 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.818521023 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818819046 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818878889 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.818928957 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.820434093 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.820736885 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.820761919 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.820818901 CEST	49719	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.820838928 CEST	443	49719	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.821767092 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.821841002 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.822195053 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.822262049 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.822658062 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.822665930 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.830848932 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.830887079 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.830951929 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.831180096 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.831191063 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.875011921 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.920670986 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.920927048 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.920952082 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.921936035 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.922003984 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.922266960 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.922326088 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.922384977 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.922393084 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940262079 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940447092 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940459013 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940505028 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940505028 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.940555096 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.940642118 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.940695047 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.941099882 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941138029 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941181898 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.941190004 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941344023 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941354990 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941397905 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.941407919 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941461086 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.941903114 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941943884 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.941973925 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.941979885 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.942075014 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.942120075 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.971021891 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.972433090 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.972693920 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.972718000 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.973707914 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.973769903 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.974031925 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.974090099 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.974152088 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.974159956 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:35.987040043 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:35.987051964 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.019018888 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.023165941 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.029479980 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.029575109 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.029602051 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.035053015 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.035077095 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.067027092 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.067039967 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.071682930 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.071743011 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.071751118 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.072047949 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.072067022 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.072098017 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.072104931 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.072150946 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.083007097 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.115011930 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.116584063 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.117736101 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.117762089 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.151920080 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.152270079 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.152293921 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.152374983 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.152379990 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.164442062 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.211014986 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.278297901 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278321981 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278327942 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278340101 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278346062 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278347969 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278415918 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.278431892 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.278450966 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.278475046 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.280498981 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.280514956 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.280584097 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.280591965 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.322031021 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.329703093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.334553003 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.334817886 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.334846973 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344058990 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344069958 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344098091 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344141006 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344150066 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.344202042 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.344389915 CEST	49737	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.344407082 CEST	443	49737	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344800949 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.344837904 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.344916105 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.345261097 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.345273972 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.367783070 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.370019913 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.370035887 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383470058 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383491039 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383497953 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383507013 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383539915 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383558989 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.383574963 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.383591890 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.383615971 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384366035 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.384418964 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.384430885 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384458065 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384562016 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384567976 CEST	443	49738	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.384577036 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384613037 CEST	49738	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384864092 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.384876966 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.384934902 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.385222912 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.385235071 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.416991949 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.417004108 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.418438911 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.418643951 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.418656111 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.419656992 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.419722080 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.420037985 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.420109034 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.420154095 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.441754103 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441771984 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441778898 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441792011 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441829920 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.441833019 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441858053 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441869020 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.441878080 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.441904068 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.441907883 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441916943 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.441950083 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.442322016 CEST	49739	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.442337990 CEST	443	49739	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.442585945 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.442617893 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.442677975 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.442935944 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.442950010 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.460508108 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.465019941 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.465034962 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488133907 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488177061 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488218069 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.488228083 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488394022 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488439083 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.488445997 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.488996983 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.489008904 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.489048004 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.489056110 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.489101887 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.489265919 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.512991905 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.529019117 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.529026031 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.536968946 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.537187099 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.537195921 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.537669897 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.537724972 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.537734032 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.537991047 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.538039923 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.538062096 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.538228035 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.538283110 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.538554907 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.538614035 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.538835049 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.538841963 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.553445101 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.573213100 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.573422909 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.573437929 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.575516939 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.575587988 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.575861931 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.575917959 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.575987101 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.575990915 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.591999054 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.592374086 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.607007980 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.608897924 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609028101 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609082937 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.609107018 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609361887 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609405994 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.609472036 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609724045 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.609766006 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.609771967 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.610075951 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.610126019 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.610246897 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.610421896 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.610467911 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.610476017 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.610939980 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.611002922 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.611008883 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.611088991 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.611139059 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.611145973 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.611745119 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.611793041 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.611799002 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.615413904 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.615425110 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.623018026 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.753995895 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.754067898 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.754123926 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.754689932 CEST	49740	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.754703999 CEST	443	49740	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.755014896 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.755044937 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.755115032 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.755407095 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.755420923 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.813328028 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.813390970 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.813441038 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.813499928 CEST	49742	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.813504934 CEST	443	49742	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.827891111 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.878005981 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:36.878029108 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:36.926019907 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.036443949 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036469936 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036478043 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036561966 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036580086 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.036597967 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036619902 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.036633968 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.036633968 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.036669970 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.038502932 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.038527012 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.038579941 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.038585901 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.038598061 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.057404995 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.057667017 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.057689905 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.058023930 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.058307886 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.058379889 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.058440924 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.085989952 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.100497961 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.136519909 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.136773109 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.136787891 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.137123108 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.137486935 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.137553930 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.137630939 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.158721924 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.158734083 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.158787012 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.158826113 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.158837080 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.158869982 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.158890963 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.159533024 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159554005 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159605026 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.159610987 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159657001 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.159795046 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159823895 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159847975 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.159852028 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159883022 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.159898043 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.159940004 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.160073996 CEST	49741	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.160085917 CEST	443	49741	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.160435915 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.160461903 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.160517931 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.161051989 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.161066055 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.184497118 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.304368019 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.304624081 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.304647923 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.304975033 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.305254936 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.305315018 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.305373907 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.329054117 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.329319000 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.329334974 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.330296993 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.330364943 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.330719948 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.330779076 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.352497101 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.374015093 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.374023914 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.400691032 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.400711060 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.400746107 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.400773048 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.400789022 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.400835991 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.401583910 CEST	49745	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.401598930 CEST	443	49745	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.401870966 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.401910067 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.401989937 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.402275085 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.402290106 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.422017097 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.466399908 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.466650009 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.466680050 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.466995001 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.467348099 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.467407942 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.467472076 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.512494087 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.610629082 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.610654116 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.610668898 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.610708952 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.610729933 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.610749960 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.610774994 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611494064 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611510992 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611561060 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611569881 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611690998 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611726999 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611732006 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611762047 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.611774921 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611804962 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611875057 CEST	49746	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.611888885 CEST	443	49746	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.612190962 CEST	49751	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.612210989 CEST	443	49751	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.612271070 CEST	49751	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.612631083 CEST	49751	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.612643957 CEST	443	49751	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.654126883 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.654192924 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.654263020 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.654737949 CEST	49747	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.654752970 CEST	443	49747	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.992449999 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.992469072 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.992527962 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:37.992542028 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.992588997 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.993300915 CEST	49748	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:37.993310928 CEST	443	49748	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.042962074 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.043622971 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.043689966 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.121483088 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.121763945 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.121783018 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.122124910 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.122467995 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.122555971 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.122611046 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.168490887 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.202208996 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.202244043 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.202334881 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.202565908 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.202579975 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.480972052 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.481293917 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.481319904 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.482243061 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.482418060 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.482604027 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.482666969 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.482739925 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.482748032 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.523092031 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.717837095 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.717871904 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.717890024 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.717998981 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.718028069 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718075991 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.718564034 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718575954 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718599081 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718614101 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718626976 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718640089 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.718640089 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.718682051 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.718683958 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.718697071 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.719217062 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.719221115 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.719813108 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.719816923 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.719880104 CEST	49750	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.719892025 CEST	443	49750	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.722764015 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.722779036 CEST	443	49731	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.722786903 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.722826004 CEST	49731	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.722826958 CEST	49736	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.722843885 CEST	443	49736	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.822140932 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.822220087 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.822289944 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.822935104 CEST	49734	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.822942019 CEST	443	49734	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.880088091 CEST	443	49751	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.880187035 CEST	49751	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.880403042 CEST	49751	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.880415916 CEST	443	49751	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.880789995 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.880819082 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.880893946 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.881138086 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:38.881146908 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.941859007 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:38.984031916 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.068500996 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.068551064 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.068563938 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.068573952 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.068618059 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.068630934 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.068665028 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.069576979 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.069636106 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.083853006 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.084098101 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.084115982 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.084536076 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.084826946 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.084897995 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.085045099 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.132504940 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.190381050 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.190610886 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.190685034 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.192740917 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.192786932 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.192837954 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.192907095 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193078041 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193089008 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193133116 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.193144083 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193182945 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.193218946 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193830013 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193872929 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.193878889 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193906069 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.193948030 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.193950891 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.194379091 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.194389105 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.194432974 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.194437027 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.194480896 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.194542885 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.195070982 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.195118904 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.195122957 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.195705891 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.195714951 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.198303938 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.198323965 CEST	443	49733	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.198365927 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.198407888 CEST	49733	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.415150881 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.421328068 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.421418905 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.421488047 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.421530008 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.421530008 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.421547890 CEST	443	49752	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.421600103 CEST	49752	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.463020086 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.463052988 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.511028051 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.603636026 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:39.603669882 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:39.603759050 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:39.605238914 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:39.605257988 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:39.712203979 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.712503910 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.712527037 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.712816954 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.713108063 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:39.713156939 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:39.767014980 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:40.385062933 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.385199070 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.388186932 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.388196945 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.388569117 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.435030937 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.438719988 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.480509043 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712285995 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712305069 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712313890 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712325096 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712347984 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712398052 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.712414980 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712426901 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.712471008 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.712696075 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.712757111 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.712764978 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.713035107 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.713084936 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.722937107 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.722951889 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:40.722963095 CEST	49754	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:37:40.722969055 CEST	443	49754	20.114.59.183	192.168.2.17
Aug 31, 2024 20:37:41.761449099 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:41.761496067 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:41.761580944 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:41.761848927 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:41.761863947 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.381179094 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.386229038 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.480890989 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.480974913 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.481988907 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.482013941 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.482196093 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.482369900 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.482459068 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.487549067 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.487615108 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.487751961 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.487761021 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.488962889 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.488970041 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.503850937 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.504148960 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.504178047 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.504581928 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.504992962 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.505053043 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.505065918 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.551157951 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.551179886 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.580152035 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.580236912 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.718135118 CEST	443	49700	204.79.197.200	192.168.2.17
Aug 31, 2024 20:37:42.718332052 CEST	49700	443	192.168.2.17	204.79.197.200
Aug 31, 2024 20:37:42.759617090 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:42.856456041 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:42.867037058 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.867110968 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.867194891 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.867270947 CEST	49757	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:42.867286921 CEST	443	49757	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:42.900496960 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.061065912 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:43.080142021 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080192089 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080220938 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080238104 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:43.080249071 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080260992 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080291986 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:43.080307007 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.080353022 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:43.080358028 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.082855940 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.082918882 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:43.082981110 CEST	49732	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:37:43.082998037 CEST	443	49732	172.217.16.196	192.168.2.17
Aug 31, 2024 20:37:43.497035027 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:43.497117996 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:43.497164965 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:43.539438963 CEST	49753	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:43.539465904 CEST	443	49753	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:43.665060997 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:44.333873987 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.333916903 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.333940983 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.334342957 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.334397078 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.334538937 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.334619999 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.334665060 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.334721088 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.334996939 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.335031986 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.335103035 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.335211039 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.335228920 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.335740089 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.335753918 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.336071968 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.336086988 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.336508989 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.336522102 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.336714029 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.336913109 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.336920977 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.376508951 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.545433044 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.545453072 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.545540094 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.546688080 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.546700001 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.548957109 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.548995018 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.551331997 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.551412106 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.551466942 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.552073002 CEST	49730	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.552092075 CEST	443	49730	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.552424908 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.552470922 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.552650928 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.552829981 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.552839041 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.555352926 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.555387974 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.555527925 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.555844069 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.555855989 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.760278940 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.763114929 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.763154984 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.766927004 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.766978025 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.767329931 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.767527103 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.767539024 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.769809008 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.769906044 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.769973993 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.769998074 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.770984888 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.770996094 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.872041941 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:44.880439043 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:44.880475998 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:44.880598068 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:44.881555080 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:44.881567955 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:44.975712061 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.975742102 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.975790024 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.975860119 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.975874901 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.975919008 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.975995064 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.976075888 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.976152897 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.977699041 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.977722883 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.979671955 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.979722977 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.979810953 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.980009079 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.980021954 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.991008043 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:44.991966963 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:44.992002964 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.044290066 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.044575930 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.044595003 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.045507908 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.045595884 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.045864105 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.045924902 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.046010971 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.046026945 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.096051931 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.190784931 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.190805912 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.190864086 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.190891981 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.190937042 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.190973043 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.190979004 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.191056967 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.192585945 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.192591906 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.195493937 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.195534945 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.195682049 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.195866108 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.195890903 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.210678101 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.211627007 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.211656094 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.247168064 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.247395992 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.247421980 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.248429060 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.248497963 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.248778105 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.248836040 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.248933077 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.248939991 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.263020039 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.263360023 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.263371944 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.263695955 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.264035940 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.264096022 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.264185905 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.301038980 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.304503918 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.386770010 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.386795998 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.386862040 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.386862993 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.386934042 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.387748957 CEST	49761	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.387772083 CEST	443	49761	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.390187979 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390244007 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.390347958 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390434980 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390441895 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.390491009 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390640020 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390655994 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.390793085 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.390803099 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403373003 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403420925 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403465033 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.403486013 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403548002 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.403564930 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403645992 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403687000 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.403788090 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.403832912 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.403841972 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404043913 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404087067 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.404093981 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404154062 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404218912 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.404225111 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404270887 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404299021 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.404320955 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.430363894 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430387974 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430440903 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430454969 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.430568933 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430671930 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.430682898 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430762053 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.430851936 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.430857897 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.432893038 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.432910919 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.445050955 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.518136024 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.518230915 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.520840883 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.520849943 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.521120071 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.522285938 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522336006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522423029 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.522440910 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522495985 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522562027 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.522567987 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522706985 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522762060 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.522911072 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.522975922 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.522980928 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523057938 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.523169041 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523336887 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523356915 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523384094 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.523390055 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523406982 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.523428917 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.523817062 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.523876905 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.523880959 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.524162054 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.524194002 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.524216890 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.524221897 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.524243116 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.524270058 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.524857998 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.524912119 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.524915934 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.559360981 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.568782091 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.586672068 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.586699009 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.586745024 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.586770058 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.586785078 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.586833000 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.587409973 CEST	49763	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.587431908 CEST	443	49763	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.589754105 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.589787006 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.590099096 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.590323925 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.590341091 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.600506067 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.608372927 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.608398914 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.608453989 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.608469009 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.608772039 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.609241009 CEST	49764	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.609255075 CEST	443	49764	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641016006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641308069 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641324043 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641351938 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.641386032 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641401052 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641406059 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.641413927 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641438961 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641446114 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.641470909 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.641715050 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.641880035 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642023087 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.642028093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642247915 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642273903 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642292023 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.642296076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642390966 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.642577887 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642606974 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642627001 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.642631054 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.642651081 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.642676115 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.643224001 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643250942 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643273115 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.643276930 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643312931 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.643841028 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643866062 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643887043 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.643892050 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.643929005 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.644208908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.644226074 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.644249916 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.644270897 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.644274950 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.644290924 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.644314051 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.645137072 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.645164013 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.645203114 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.645205975 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.645224094 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.646226883 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646240950 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646285057 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.646291018 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646328926 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.646363974 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646413088 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.646516085 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646605015 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646614075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646646023 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.646651983 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.646686077 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.648313999 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.651782990 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.656084061 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.656169891 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.656192064 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.656503916 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.656508923 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.656713009 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.656721115 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.698846102 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.701037884 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.701119900 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.701143980 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.702162027 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.702184916 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.702305079 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.702514887 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.702527046 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.703557014 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.703676939 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.704026937 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.704085112 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.749053001 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.749053001 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.749066114 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.749074936 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.761405945 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.761490107 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.761584997 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.761631012 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.761776924 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.764903069 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.764961958 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.764969110 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.764972925 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.764982939 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765021086 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765048027 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765069962 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765093088 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765104055 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765121937 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765124083 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765146017 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765167952 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765178919 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765191078 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765203953 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765234947 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765239954 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765248060 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765275002 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765278101 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765285969 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765310049 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765336037 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765341043 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765355110 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765891075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765937090 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.765949011 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765959024 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765986919 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.765997887 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766048908 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766052008 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766089916 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766830921 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766868114 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766884089 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766889095 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766900063 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766916990 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766954899 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.766957998 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.766995907 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.767779112 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767805099 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767831087 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.767832041 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767857075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767868996 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767878056 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.767903090 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.767905951 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.767957926 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.768728971 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.768759012 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.768785000 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.768790960 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.768826962 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.769407034 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769465923 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.769469976 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769500971 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769526005 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769543886 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.769552946 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769562006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769565105 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.769582033 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.769586086 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.769609928 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.774019957 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.774070024 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.774075985 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.776984930 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777005911 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777045965 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777053118 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777093887 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777477980 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777532101 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777535915 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777578115 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777623892 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777686119 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777689934 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777911901 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777935028 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777962923 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.777985096 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.777990103 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.778029919 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.784117937 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.784590006 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.784626961 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.784738064 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.784745932 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.797038078 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.797066927 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.797066927 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.797103882 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.797153950 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.797384977 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.797401905 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.797410965 CEST	49766	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.797418118 CEST	443	49766	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.831744909 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.832175016 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.832195044 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.832341909 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.832356930 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.833112001 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.833148003 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.833214998 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.833508015 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:45.833519936 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:45.846417904 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846463919 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846539974 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.846565008 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846575975 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846595049 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846606970 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.846613884 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.846661091 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.846667051 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878575087 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878596067 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878669024 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.878696918 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878746986 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878770113 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878796101 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.878803968 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878808975 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.878823996 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.878859997 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.878865957 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879323959 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879378080 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.879383087 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879499912 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879518986 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879537106 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.879540920 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879554033 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879556894 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.879563093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.879570007 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.879592896 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.879599094 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.880225897 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.880249023 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.880271912 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.880276918 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.880286932 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.880295992 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.880323887 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881117105 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881144047 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881164074 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881167889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881182909 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881189108 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881205082 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881210089 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881248951 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881711006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881743908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881766081 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881771088 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881783962 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881789923 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881798983 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881828070 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881833076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.881848097 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.881871939 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.882673025 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882688999 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882703066 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882726908 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882733107 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882733107 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.882747889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882760048 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.882771015 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882787943 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882791042 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.882807970 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.882832050 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.883640051 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883654118 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883677959 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883694887 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883696079 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.883706093 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883714914 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.883725882 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883737087 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.883753061 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883766890 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.883770943 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.883795023 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.884576082 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884602070 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884613991 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884628057 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.884643078 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884656906 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884656906 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.884706974 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.884711981 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.884752035 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.885534048 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.885582924 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.885598898 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.885608912 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.885616064 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.885631084 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.885660887 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.886363983 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.886390924 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.886413097 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.886416912 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.886424065 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.886431932 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.886449099 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.886452913 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.886476994 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.886512041 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.887134075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.887170076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.887191057 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.887196064 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.887208939 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.887229919 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.899954081 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.900248051 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.900265932 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.901288986 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.901352882 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.901657104 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.901724100 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.921478033 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.924133062 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.933254957 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.933310032 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.933402061 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.933423042 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.933437109 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.933448076 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.933576107 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.933779955 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.933784962 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.955070972 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.955101967 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965035915 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965106010 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965120077 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965182066 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965234995 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965286016 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965410948 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965442896 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965465069 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965470076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965485096 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965806961 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965848923 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.965853930 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.965960026 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966006994 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966012001 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966159105 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966186047 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966203928 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966208935 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966219902 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966253996 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966547966 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966598034 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966727018 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966762066 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966774940 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966778040 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.966783047 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.966804981 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967149019 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967163086 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967195988 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967200994 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967216969 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967240095 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967716932 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967740059 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967758894 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967768908 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967773914 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967788935 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967792034 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967830896 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.967835903 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.967935085 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.968664885 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.968692064 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.968715906 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.968723059 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.968733072 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.968739033 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.968761921 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.968784094 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.968786955 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969680071 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969697952 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969721079 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969731092 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.969738007 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969758034 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.969759941 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969774961 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969779968 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.969784021 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.969799042 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.969836950 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.970062971 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.970091105 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.970596075 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.970623016 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.970647097 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.970650911 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.970673084 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.970696926 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.971534967 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.971565008 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.971585989 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.971587896 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.971601009 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.971611977 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.971636057 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.972512007 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.972537994 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.972547054 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.972559929 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.972565889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.972574949 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.972584009 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.972611904 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.972615004 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.973191977 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.973237991 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:45.973243952 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:45.973288059 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.000345945 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.001091003 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.009388924 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.009465933 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.010561943 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.010576963 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.012339115 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.012357950 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020162106 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020191908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020240068 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.020263910 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020356894 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020397902 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.020402908 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020411015 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.020446062 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.020450115 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.048145056 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.048208952 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052181959 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052248955 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052270889 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052320004 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052380085 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052428961 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052550077 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052578926 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052598000 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052602053 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052615881 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052933931 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052968025 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.052982092 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.052985907 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053003073 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.053215981 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053246975 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053260088 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.053292990 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.053750038 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053783894 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053801060 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.053806067 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.053814888 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054147005 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054182053 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054198027 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054198980 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054219007 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054219961 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054230928 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054249048 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054269075 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054271936 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054891109 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.054940939 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.054946899 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055007935 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055027962 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055048943 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.055053949 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055078030 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.055097103 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.055906057 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055929899 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055948973 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055951118 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.055957079 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.055977106 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.055980921 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.056001902 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.056005955 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.056036949 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.056868076 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.056926012 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.056930065 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.056934118 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.056977034 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.056981087 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.057048082 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.059997082 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.090497017 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.090744972 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.090759993 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.091048956 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.091329098 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.091394901 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.096060991 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.104497910 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.111439943 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.111675024 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.111686945 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.111958981 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.112246037 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.112292051 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.122383118 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.123419046 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.123485088 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.123554945 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.145061016 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.160041094 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.169727087 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.169820070 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.172657013 CEST	49768	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.172662973 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.172677994 CEST	443	49768	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.176054001 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.176063061 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.178544044 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.178570032 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.178689003 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.178973913 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.178985119 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.220490932 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.223054886 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.231379986 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.231483936 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.232372046 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.232381105 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234337091 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234363079 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234421015 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.234430075 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234721899 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234775066 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.234780073 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234903097 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.234970093 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.234975100 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.235156059 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.235693932 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.235749006 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.235805988 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.235812902 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.236093998 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.236140966 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.236148119 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.286047935 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.306313038 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.306608915 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.306623936 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.306941032 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.307308912 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.307370901 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.350146055 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.554825068 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.554836988 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.554907084 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.554939032 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.554965973 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.554985046 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555131912 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555170059 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555179119 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555334091 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555362940 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555370092 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555377960 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555387020 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555412054 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555424929 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555429935 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555440903 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555932045 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555953026 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555974960 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.555982113 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.555996895 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.556108952 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.556122065 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.556144953 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.556150913 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.556181908 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.557090998 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557113886 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557126999 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557133913 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557147980 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557154894 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557192087 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.557214975 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557226896 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.557260990 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.557976007 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.557998896 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.558064938 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.558073044 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559041023 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559108019 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.559176922 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559221029 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.559256077 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559277058 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559315920 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.559339046 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559353113 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.559395075 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.559993029 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.560090065 CEST	49770	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.560105085 CEST	443	49770	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562294006 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562385082 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.562397957 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562463999 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562505960 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.562513113 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562603951 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.562650919 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562660933 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562666893 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.562693119 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.562700033 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.562735081 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.562966108 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.563014984 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.563558102 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.563728094 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.563786983 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.563793898 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.563894033 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.563931942 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.563937902 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.564682961 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.564691067 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.564937115 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.565155983 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565180063 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565227985 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.565236092 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565264940 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.565478086 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565500975 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565519094 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.565525055 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.565532923 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.566152096 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.566349030 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.566390038 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.566395998 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.566443920 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.566541910 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.566582918 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.566589117 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.567380905 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.567430973 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.567437887 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.567557096 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.567604065 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.567610979 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.567650080 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.568156004 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568175077 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568212986 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.568219900 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568274021 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.568309069 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568459988 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568506956 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.568512917 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568639994 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568654060 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568686962 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.568695068 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.568732977 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.569439888 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.569591999 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.569641113 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.569652081 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.569751978 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.570280075 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.570611000 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.570655107 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.570660114 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571111917 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571156979 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.571162939 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571266890 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.571647882 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571671009 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571707964 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.571713924 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.571741104 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.575304031 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.575319052 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.575396061 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.575412035 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.612497091 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.620079994 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.622611046 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.622631073 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.622699976 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.622725010 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.622749090 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.622790098 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.622798920 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.622886896 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623073101 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623116016 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623151064 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.623300076 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623330116 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623373032 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.623485088 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623533010 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.623538971 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623574972 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.623708963 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623755932 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.623761892 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.623928070 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624115944 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624161005 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.624169111 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624300003 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624313116 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624353886 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.624361038 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624665022 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624676943 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624716997 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.624725103 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624766111 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.624860048 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624898911 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624917984 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.624943972 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.625227928 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625242949 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625267029 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625289917 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.625298023 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625308037 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.625340939 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.625713110 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625742912 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625760078 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.625763893 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.625802994 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.627635002 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.627733946 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.627801895 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.627810955 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.627985954 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628072977 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628120899 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628128052 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628201008 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628216982 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628247023 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628253937 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628262997 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628529072 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628545046 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628567934 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628587961 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628596067 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628606081 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628925085 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.628972054 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.628977060 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629075050 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629106998 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629127026 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.629131079 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629333019 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629380941 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.629388094 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629431009 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.629437923 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629513025 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629554033 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.629565001 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629702091 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629713058 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629746914 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.629754066 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.629762888 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.630022049 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.630038023 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.630048037 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.630089045 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.630096912 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.630125046 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.661981106 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.662009001 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.662108898 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.662132025 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.662143946 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.662801981 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.663029909 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.663050890 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.663114071 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.663120031 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.663149118 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.663149118 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.664055109 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.664074898 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.664181948 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.664189100 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.664474964 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.666528940 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.666548967 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.666645050 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.666652918 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.667427063 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.667452097 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.667507887 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.667517900 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.667526960 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.667937040 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.668632984 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.668659925 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.668741941 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.668747902 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.671601057 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.671602964 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.671607971 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711172104 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711194038 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711244106 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711433887 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711456060 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.711469889 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711487055 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.711507082 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.711735010 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711760998 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711782932 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.711788893 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.711813927 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.711827040 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.752305031 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.752337933 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.752453089 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.752473116 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.752516031 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.753743887 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.753768921 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.753813028 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.753824949 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.753988028 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754039049 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754046917 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754087925 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754187107 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754225969 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754231930 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754405022 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754425049 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754446030 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754452944 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754491091 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754638910 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754683018 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754817963 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754831076 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754844904 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.754863977 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.754890919 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755203962 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755219936 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755248070 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755254984 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755264044 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755644083 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755657911 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755675077 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755685091 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755690098 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755698919 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755712986 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755716085 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755728006 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755733013 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.755753994 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.755779028 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.756515980 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756539106 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756556988 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756578922 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.756580114 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756592035 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756603956 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.756617069 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756629944 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.756633997 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.756669998 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.757462025 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757486105 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757508993 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757514954 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.757519960 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757531881 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.757538080 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757560015 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.757569075 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.757606983 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.758361101 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758393049 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758405924 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.758411884 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758423090 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758435965 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.758440018 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758449078 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.758454084 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758462906 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.758476973 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.758503914 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759130955 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759174109 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759185076 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759206057 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759221077 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759227037 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759233952 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759253979 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759258032 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759280920 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759284973 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.759295940 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.759322882 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760116100 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760138035 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760163069 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760174990 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760179043 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760190964 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760201931 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760206938 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760220051 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760222912 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760230064 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760252953 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760265112 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.760910988 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.760960102 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.788368940 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.788398027 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.788499117 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.788499117 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.788508892 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.788566113 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.789175987 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.789194107 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.789244890 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.789251089 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.789283991 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.790194988 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.790213108 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.790277004 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.790282011 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.790328979 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.791044950 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.791066885 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.791121960 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.791126966 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.791152000 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.791178942 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.791929007 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.791950941 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.791987896 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.791995049 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.792016029 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.792042971 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.792896986 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.792917967 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.792967081 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.792973042 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.793025970 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.793812990 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.794687033 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.794707060 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.794768095 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.794774055 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.794800997 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.794800997 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.799685001 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.799726963 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.799761057 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.799771070 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.799808979 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.799940109 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.799989939 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.799995899 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800035000 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.800122023 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800252914 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800266981 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800295115 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800304890 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.800311089 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.800344944 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.822585106 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.822638035 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.822725058 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.823919058 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.823930979 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.838721991 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.838783026 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.838840961 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.839520931 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.839535952 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.839546919 CEST	49772	443	192.168.2.17	184.28.90.27
Aug 31, 2024 20:37:46.839551926 CEST	443	49772	184.28.90.27	192.168.2.17
Aug 31, 2024 20:37:46.842772007 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.842797041 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.842850924 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.842864990 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.842921972 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.842931032 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843133926 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843193054 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843205929 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843245983 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843528986 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843542099 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843575954 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843601942 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843605995 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843642950 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.843878984 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.843924999 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.844043016 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.844065905 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.844086885 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.844094038 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.844104052 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.844139099 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.844985008 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845029116 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845046043 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845053911 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845060110 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845073938 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845114946 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845643997 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845671892 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845699072 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845701933 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845715046 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845730066 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845742941 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845757008 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845762968 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845768929 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845777988 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.845793009 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845817089 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.845822096 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846616030 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846631050 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846649885 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846659899 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.846666098 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846678972 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846689939 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.846703053 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846712112 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.846718073 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846728086 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846740961 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846757889 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.846765995 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.846781969 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847572088 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847595930 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847614050 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847620010 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847625971 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847647905 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847659111 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847666979 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847673893 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847686052 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847687960 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847696066 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.847697973 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847723961 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.847737074 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.848341942 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.878783941 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.878809929 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.878870964 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.878884077 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.878921986 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.878921986 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.879628897 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.879642963 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.879786015 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.879792929 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.879865885 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.880166054 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.880181074 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.880274057 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.880280018 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.880323887 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.881385088 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.881398916 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.881474018 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.881474018 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.881485939 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.881515026 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882096052 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.882111073 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.882164955 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882174969 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.882185936 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882210016 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882885933 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.882900000 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.882963896 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882963896 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.882976055 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883032084 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883476973 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883533001 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883601904 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883641958 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883654118 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883658886 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883692026 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883701086 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883747101 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883774996 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883910894 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883936882 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883960962 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.883968115 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.883976936 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888262987 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888307095 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888331890 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888344049 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888360977 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888412952 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888423920 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888453007 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888458967 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888492107 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888535976 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888633013 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888643026 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888663054 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888669968 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888684034 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888705015 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.888811111 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.888854980 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.892400980 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.893136024 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.893148899 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.893501043 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.893872976 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.893940926 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.912811041 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.912836075 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.913002968 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.913017988 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.913099051 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.922003984 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:46.931148052 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931196928 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931233883 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931236982 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931250095 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931296110 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931309938 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931346893 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931442022 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931457043 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931493998 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931500912 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931612015 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931634903 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931648016 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931751966 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931766033 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931787014 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931793928 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.931804895 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.931987047 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932001114 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932020903 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932030916 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932054043 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932060003 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932094097 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932302952 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932326078 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932334900 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932339907 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932347059 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932367086 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932531118 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932544947 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932563066 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932569981 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932585001 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932604074 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932605028 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932612896 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.932624102 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.932651043 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933135033 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933172941 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933201075 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933212996 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933219910 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933226109 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933238983 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933239937 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933264971 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933276892 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933289051 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933315039 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933868885 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933883905 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933919907 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933927059 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.933949947 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.933990002 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.934010029 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.934087038 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.934098005 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.934140921 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.937711954 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.968961000 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.968986034 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.969058990 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.969072104 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.969109058 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.969109058 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.969692945 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.969708920 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.969789982 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.969798088 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.969846964 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.970273018 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.970287085 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.970345020 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.970351934 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.970405102 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.971103907 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971117020 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971177101 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.971183062 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971256971 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.971694946 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971709013 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971762896 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.971770048 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.971827984 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.972522974 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.972537994 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.972584963 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.972590923 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:46.972641945 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:46.985070944 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.004071951 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.004091024 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.004143953 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.004158020 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.004193068 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.023531914 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.023595095 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.023618937 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.023650885 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.023690939 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.023905039 CEST	49767	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:47.023924112 CEST	443	49767	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:47.222083092 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:47.285068035 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:47.832047939 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:48.216626883 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.216711998 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.216727018 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.217200041 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.217210054 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.217381954 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.217386961 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.432140112 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.476094007 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.476352930 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.476367950 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.476428032 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.477432966 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.477552891 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.477901936 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.477962017 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.524072886 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.524086952 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.561811924 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.565522909 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:48.565543890 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:48.585067987 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.035090923 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:49.484600067 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484617949 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484626055 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484642982 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484658957 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484678984 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.484724045 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.484738111 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.484772921 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540591002 CEST	49769	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540637970 CEST	443	49769	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.540638924 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540676117 CEST	443	49762	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.540688992 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540698051 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540707111 CEST	443	49760	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:49.540719986 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.540960073 CEST	49762	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:49.541021109 CEST	49760	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:50.148526907 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:50.148613930 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:50.148714066 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:50.148932934 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:50.149007082 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:50.149059057 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:51.449090958 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:51.503135920 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:51.503209114 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:51.510988951 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:51.528633118 CEST	49773	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:51.528654099 CEST	443	49773	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:51.528671026 CEST	49765	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:51.528690100 CEST	443	49765	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:51.528704882 CEST	49771	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:37:51.528712034 CEST	443	49771	45.135.232.98	192.168.2.17
Aug 31, 2024 20:37:52.089103937 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:37:55.374371052 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:37:55.674144983 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:37:56.115906000 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.115952015 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:56.116034985 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.116316080 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.116328001 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:56.255108118 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:37:56.285160065 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:37:56.587402105 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:56.587450027 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:56.587532043 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:56.615603924 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:56.615621090 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:56.885742903 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:56.885821104 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.893332005 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.893343925 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:56.893594027 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:56.894025087 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.894071102 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:56.894115925 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.185818911 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.185904980 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:57.188793898 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:57.188802958 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.189137936 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.218688965 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.218709946 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.218744993 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.218779087 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:57.218802929 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.218820095 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:57.218823910 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.218976021 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:57.219003916 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:57.219017982 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.219027996 CEST	49775	443	192.168.2.17	40.126.31.69
Aug 31, 2024 20:37:57.219032049 CEST	443	49775	40.126.31.69	192.168.2.17
Aug 31, 2024 20:37:57.224977970 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:57.262972116 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.263009071 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:57.263103962 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.264882088 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.264897108 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:57.268506050 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.320242882 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.320329905 CEST	443	49776	13.107.5.88	192.168.2.17
Aug 31, 2024 20:37:57.320396900 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:57.323359966 CEST	49776	443	192.168.2.17	13.107.5.88
Aug 31, 2024 20:37:57.493145943 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:37:57.905466080 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:57.905550003 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.950202942 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.950234890 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:57.950460911 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:57.950615883 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.953126907 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:57.953156948 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:58.221604109 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:58.221663952 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:58.221718073 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:58.223505020 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:58.230025053 CEST	49777	443	192.168.2.17	2.23.209.183
Aug 31, 2024 20:37:58.230041981 CEST	443	49777	2.23.209.183	192.168.2.17
Aug 31, 2024 20:37:59.895148993 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:38:01.699124098 CEST	49675	443	192.168.2.17	204.79.197.203
Aug 31, 2024 20:38:04.702184916 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:38:05.862160921 CEST	49680	443	192.168.2.17	20.189.173.13
Aug 31, 2024 20:38:12.400407076 CEST	49697	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:38:12.400487900 CEST	49699	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:38:12.408309937 CEST	80	49697	199.232.214.172	192.168.2.17
Aug 31, 2024 20:38:12.408374071 CEST	49697	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:38:12.408602953 CEST	80	49699	199.232.214.172	192.168.2.17
Aug 31, 2024 20:38:12.408651114 CEST	49699	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:38:13.565485954 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:13.565507889 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:13.781409979 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:13.826272964 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:14.305208921 CEST	49682	80	192.168.2.17	192.229.211.108
Aug 31, 2024 20:38:17.014087915 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.014127970 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:17.014240026 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.014568090 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.014584064 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:17.802769899 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:17.802853107 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.804548979 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.804580927 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:17.804841042 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:17.805989981 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:17.848505020 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.135569096 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.135586977 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.135601044 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.135679960 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.135694027 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.135731936 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.135756016 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.136141062 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.136189938 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.136225939 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.136231899 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.136244059 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.136724949 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.136775970 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.141151905 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.141161919 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:18.141176939 CEST	49778	443	192.168.2.17	20.114.59.183
Aug 31, 2024 20:38:18.141181946 CEST	443	49778	20.114.59.183	192.168.2.17
Aug 31, 2024 20:38:22.873096943 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:22.873214006 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:22.873266935 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:22.879067898 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:22.879278898 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:22.879332066 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612056971 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612082958 CEST	443	49749	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:23.612092972 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612147093 CEST	49749	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612149000 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612186909 CEST	443	49721	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:23.612215996 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:23.612241983 CEST	49721	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:31.937345982 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:31.937365055 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:34.194335938 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:34.194369078 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.194436073 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:34.194669008 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:34.194679976 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.825917006 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.827342033 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:34.827367067 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.827706099 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.829401970 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:34.829461098 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:34.879298925 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:38.785551071 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:38.785567999 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:39.000416040 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:39.041347027 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:44.731476068 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:44.731537104 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:44.731640100 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:45.532320023 CEST	49780	443	192.168.2.17	172.217.16.196
Aug 31, 2024 20:38:45.532355070 CEST	443	49780	172.217.16.196	192.168.2.17
Aug 31, 2024 20:38:51.622694969 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:51.622721910 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:51.622792959 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:53.528192997 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:53.528192997 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:53.528242111 CEST	443	49759	45.135.232.98	192.168.2.17
Aug 31, 2024 20:38:53.528357029 CEST	49759	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:38:57.807560921 CEST	49696	80	192.168.2.17	192.229.221.95
Aug 31, 2024 20:38:57.807625055 CEST	49695	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:38:57.812604904 CEST	80	49696	192.229.221.95	192.168.2.17
Aug 31, 2024 20:38:57.812679052 CEST	49696	80	192.168.2.17	192.229.221.95
Aug 31, 2024 20:38:57.812915087 CEST	80	49695	199.232.214.172	192.168.2.17
Aug 31, 2024 20:38:57.812963963 CEST	49695	80	192.168.2.17	199.232.214.172
Aug 31, 2024 20:39:02.888242960 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:02.888278008 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:02.888359070 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:02.888633013 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:02.888643026 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.587899923 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.588157892 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.588177919 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.589180946 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.589247942 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.589525938 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.589582920 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.589657068 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.589663029 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.636485100 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.933170080 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.933234930 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.933291912 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.934071064 CEST	49782	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.934087992 CEST	443	49782	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.936618090 CEST	49783	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.936649084 CEST	443	49783	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:03.936711073 CEST	49783	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.936929941 CEST	49783	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:03.936942101 CEST	443	49783	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:04.005614996 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:04.005628109 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:04.197326899 CEST	49784	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:04.197362900 CEST	443	49784	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:04.197446108 CEST	49784	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:04.197669983 CEST	49784	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:04.197685003 CEST	443	49784	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:04.220726013 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:04.273500919 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.411741972 CEST	443	49783	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.411828995 CEST	49783	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.411981106 CEST	49783	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.411998987 CEST	443	49783	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.412461996 CEST	49785	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.412502050 CEST	443	49785	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.412584066 CEST	49785	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.412787914 CEST	49785	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.412797928 CEST	443	49785	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.497040987 CEST	443	49784	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.497097015 CEST	49784	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.497204065 CEST	49784	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.497211933 CEST	443	49784	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.497431993 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.497445107 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:05.497500896 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.497673035 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:05.497682095 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:06.653945923 CEST	443	49785	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:06.654015064 CEST	49785	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:06.654185057 CEST	49785	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:06.654206038 CEST	443	49785	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:06.854918957 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:06.907485008 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:07.098141909 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:07.098556042 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:07.098578930 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:07.309839010 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:07.354497910 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:07.396411896 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:07.450483084 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:29.221940041 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:29.221957922 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:29.437006950 CEST	443	49774	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:29.490624905 CEST	49774	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:31.353476048 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:31.353530884 CEST	443	49786	45.135.232.98	192.168.2.17
Aug 31, 2024 20:39:31.353607893 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:31.535211086 CEST	49786	443	192.168.2.17	45.135.232.98
Aug 31, 2024 20:39:31.535250902 CEST	443	49786	45.135.232.98	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 31, 2024 20:37:29.355124950 CEST	63131	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:29.355508089 CEST	60590	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:29.364540100 CEST	53	63574	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:29.391845942 CEST	53	57944	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:29.857755899 CEST	53	60590	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:29.946554899 CEST	53	63131	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:30.401262999 CEST	53	58181	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:32.700439930 CEST	53736	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:32.700587034 CEST	61914	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:32.800879002 CEST	53	61914	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:33.356169939 CEST	53	53736	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:34.138149023 CEST	59758	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:34.138492107 CEST	55543	53	192.168.2.17	1.1.1.1
Aug 31, 2024 20:37:34.145170927 CEST	53	59758	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:34.145739079 CEST	53	55543	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:35.838557005 CEST	53	53368	1.1.1.1	192.168.2.17
Aug 31, 2024 20:37:47.306485891 CEST	53	53059	1.1.1.1	192.168.2.17
Aug 31, 2024 20:38:06.327780962 CEST	53	63699	1.1.1.1	192.168.2.17
Aug 31, 2024 20:38:22.632102966 CEST	53	49425	1.1.1.1	192.168.2.17
Aug 31, 2024 20:38:28.937267065 CEST	53	61585	1.1.1.1	192.168.2.17
Aug 31, 2024 20:38:29.272300005 CEST	53	64251	1.1.1.1	192.168.2.17
Aug 31, 2024 20:38:44.146353960 CEST	138	138	192.168.2.17	192.168.2.255
Aug 31, 2024 20:38:57.324707031 CEST	53	62281	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 31, 2024 20:37:29.355124950 CEST	192.168.2.17	1.1.1.1	0x4483	Standard query (0)	cninaspwebprn.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:29.355508089 CEST	192.168.2.17	1.1.1.1	0x9dcc	Standard query (0)	cninaspwebprn.icu	65	IN (0x0001)	false
Aug 31, 2024 20:37:32.700439930 CEST	192.168.2.17	1.1.1.1	0x1e36	Standard query (0)	cninaspwebprn.icu	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:32.700587034 CEST	192.168.2.17	1.1.1.1	0x590	Standard query (0)	cninaspwebprn.icu	65	IN (0x0001)	false
Aug 31, 2024 20:37:34.138149023 CEST	192.168.2.17	1.1.1.1	0x51e4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:34.138492107 CEST	192.168.2.17	1.1.1.1	0x6717	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Aug 31, 2024 20:37:29.946554899 CEST	1.1.1.1	192.168.2.17	0x4483	No error (0)	cninaspwebprn.icu	45.135.232.98	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:33.356169939 CEST	1.1.1.1	192.168.2.17	0x1e36	No error (0)	cninaspwebprn.icu	45.135.232.98	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:34.145170927 CEST	1.1.1.1	192.168.2.17	0x51e4	No error (0)	www.google.com	172.217.16.196	A (IP address)	IN (0x0001)	false
Aug 31, 2024 20:37:34.145739079 CEST	1.1.1.1	192.168.2.17	0x6717	No error (0)	www.google.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

cninaspwebprn.icu

https:

slscr.update.microsoft.com

www.google.com

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49714	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:30 UTC	660	OUT	GET / HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 18:37:31 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Set-Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache
2024-08-31 18:37:31 UTC	16025	IN	Data Raw: 31 66 30 30 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 Data Ascii: 1f00<!DOCTYPE html><html lang="en" dir="ltr"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title></title> <link rel="shortcut icon" href="favicon.ico"> <link rel="sty
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 69 59 57 4e 72 63 33 78 38 65 33 30 73 4b 48 52 6f 61 58 4d 75 58 32 4e 68 62 47 78 69 59 57 4e 72 63 31 73 69 4a 43 49 72 64 46 30 39 64 47 68 70 63 79 35 66 59 32 46 73 62 47 4a 68 59 32 74 7a 57 79 49 6b 49 69 74 30 58 58 78 38 57 31 30 70 4c 6e 42 31 63 32 67 6f 5a 53 6b 73 64 47 68 70 63 33 30 73 63 69 35 77 63 6d 39 30 62 33 52 35 63 47 55 75 0d 0a 32 30 30 30 0d 0a 62 32 35 6a 5a 54 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 30 4c 47 55 70 65 32 5a 31 62 6d 4e 30 61 57 39 75 49 47 34 6f 4b 58 74 30 61 47 6c 7a 4c 6d 39 6d 5a 69 68 30 4c 47 34 70 4c 47 55 75 59 58 42 77 62 48 6b 6f 64 47 68 70 63 79 78 68 63 6d 64 31 62 57 56 75 64 48 4d 70 66 58 4a 6c 64 48 56 79 62 69 42 75 4c 6d 5a 75 50 57 55 73 64 47 68 70 63 79 35 76 62 69 68 30 4c 47 34 70 4c 48 Data Ascii: iYWNrc3x8e30sKHRoaXMuX2NhbGxiYWNrc1siJCIrdF09dGhpcy5fY2FsbGJhY2tzWyIkIit0XXx8W10pLnB1c2goZSksdGhpc30sci5wcm90b3R5cGUu2000b25jZT1mdW5jdGlvbih0LGUpe2Z1bmN0aW9uIG4oKXt0aGlzLm9mZih0LG4pLGUuYXBwbHkodGhpcyxhcmd1bWVudHMpfXJldHVybiBuLmZuPWUsdGhpcy5vbih0LG4pLH
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 43 6c 37 59 53 67 6e 59 33 4a 6c 59 58 52 70 62 6d 63 67 64 48 4a 68 62 6e 4e 77 62 33 4a 30 49 43 49 6c 63 79 49 6e 4c 48 51 70 4f 33 5a 68 63 69 42 6c 50 57 38 6f 64 47 68 70 63 79 35 78 64 57 56 79 65 53 6b 37 5a 53 35 46 53 55 38 39 63 43 35 77 63 6d 39 30 62 32 4e 76 62 43 78 6c 4c 6e 52 79 59 57 35 7a 63 47 39 79 64 44 31 30 4f 33 5a 68 63 69 42 75 0d 0a 31 30 30 30 0d 0a 50 58 52 6f 61 58 4d 75 64 48 4a 68 62 6e 4e 77 62 33 4a 30 54 33 42 30 61 57 39 75 63 31 74 30 58 58 78 38 65 33 30 37 64 47 68 70 63 79 35 70 5a 43 59 6d 4b 47 55 75 63 32 6c 6b 50 58 52 6f 61 58 4d 75 61 57 51 70 4f 33 5a 68 63 69 42 79 50 57 35 6c 64 79 42 70 57 33 52 64 4b 48 74 78 64 57 56 79 65 54 70 6c 4c 48 4e 76 59 32 74 6c 64 44 Data Ascii: 9ZnVuY3Rpb24odCl7YSgnY3JlYXRpbmcgdHJhbnNwb3J0ICIlcyInLHQpO3ZhciBlPW8odGhpcy5xdWVyeSk7ZS5FSU89cC5wcm90b2NvbCxlLnRyYW5zcG9ydD10O3ZhciBu1000PXRoaXMudHJhbnNwb3J0T3B0aW9uc1t0XXx8e307dGhpcy5pZCYmKGUuc2lkPXRoaXMuaWQpO3ZhciByPW5ldyBpW3RdKHtxdWVyeTplLHNvY2tldD
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 76 62 69 39 76 59 33 52 6c 64 43 31 7a 64 48 4a 6c 59 57 30 69 50 54 30 39 5a 54 39 30 61 47 6c 7a 4c 6e 68 6f 63 69 35 79 5a 58 4e 77 62 32 35 7a 5a 58 78 38 64 47 68 70 63 79 35 34 61 48 49 75 63 6d 56 7a 63 47 39 75 63 32 56 55 5a 58 68 30 4f 6e 52 6f 61 58 4d 75 65 47 68 79 4c 6e 4a 6c 63 33 42 76 62 6e 4e 6c 56 47 56 34 64 48 31 6a 59 58 52 6a 61 43 68 75 4b 58 74 30 61 47 6c 7a 4c 6d 39 75 52 58 4a 79 62 33 49 6f 62 69 6c 39 62 6e 56 73 62 43 45 39 64 43 59 6d 64 47 68 70 63 79 35 76 62 6b 52 68 64 47 45 6f 64 43 6c 39 4c 47 6b 75 63 48 4a 76 64 47 39 30 65 58 42 6c 4c 6d 68 68 63 31 68 45 55 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 4a 6c 64 48 56 79 62 69 4a 31 62 6d 52 6c 5a 6d 6c 75 5a 57 51 69 49 54 31 30 65 58 42 6c 62 32 59 67 5a 53 Data Ascii: vbi9vY3RldC1zdHJlYW0iPT09ZT90aGlzLnhoci5yZXNwb25zZXx8dGhpcy54aHIucmVzcG9uc2VUZXh0OnRoaXMueGhyLnJlc3BvbnNlVGV4dH1jYXRjaChuKXt0aGlzLm9uRXJyb3Iobil9bnVsbCE9dCYmdGhpcy5vbkRhdGEodCl9LGkucHJvdG90eXBlLmhhc1hEUj1mdW5jdGlvbigpe3JldHVybiJ1bmRlZmluZWQiIT10eXBlb2YgZS
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 39 50 54 45 6d 4a 69 68 70 50 57 6b 75 63 33 56 69 63 33 52 79 61 57 35 6e 4b 44 41 73 61 53 35 73 5a 57 35 6e 64 47 67 74 4d 69 6b 72 49 6a 30 39 49 69 6b 73 61 58 30 73 5a 53 35 6b 5a 57 4e 76 5a 47 55 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 64 43 6c 37 64 6d 46 79 49 47 55 73 63 69 78 76 4c 47 6b 73 63 79 78 68 50 53 34 33 4e 53 70 30 4c 6d 78 6c 62 6d 64 30 61 43 78 6a 50 58 51 75 62 47 56 75 5a 33 52 6f 4c 48 41 39 4d 44 73 69 50 53 49 39 50 54 31 30 57 33 51 75 62 47 56 75 5a 33 52 6f 4c 54 46 64 4a 69 59 6f 59 53 30 74 4c 43 49 39 49 6a 30 39 50 58 52 62 64 43 35 73 5a 57 35 6e 64 47 67 74 4d 6c 30 6d 4a 6d 45 74 4c 53 6b 37 64 6d 46 79 49 48 55 39 62 6d 56 33 49 45 46 79 63 6d 46 35 51 6e 56 6d 5a 6d 56 79 4b 47 45 70 4c 47 67 39 62 6d 56 33 49 46 Data Ascii: 9PTEmJihpPWkuc3Vic3RyaW5nKDAsaS5sZW5ndGgtMikrIj09IiksaX0sZS5kZWNvZGU9ZnVuY3Rpb24odCl7dmFyIGUscixvLGkscyxhPS43NSp0Lmxlbmd0aCxjPXQubGVuZ3RoLHA9MDsiPSI9PT10W3QubGVuZ3RoLTFdJiYoYS0tLCI9Ij09PXRbdC5sZW5ndGgtMl0mJmEtLSk7dmFyIHU9bmV3IEFycmF5QnVmZmVyKGEpLGg9bmV3IF
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 37 44 51 6f 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 64 61 74 61 3a 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 62 61 73 65 36 34 2c 44 51 6f 68 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 53 78 30 4b 58 73 69 64 58 4e 6c 49 48 4e 30 63 6d 6c 6a 64 43 49 37 49 6d 39 69 61 6d 56 6a 64 43 49 39 50 58 52 35 63 47 56 76 5a 69 42 74 62 32 52 31 62 47 55 6d 4a 69 4a 76 59 6d 70 6c 59 33 51 69 50 54 31 30 0d 0a 32 30 30 30 0d 0a 65 58 42 6c 62 32 59 67 62 57 39 6b 64 57 78 6c 4c 6d 56 34 63 47 39 79 64 48 4d 2f 62 57 39 6b 64 57 78 6c 4c 6d 56 34 63 47 39 79 64 48 4d 39 5a 53 35 6b 62 32 4e 31 62 57 56 75 64 44 39 30 4b 47 55 73 49 54 41 70 4f 6d Data Ascii: 7DQo="></script> <script type="text/javascript" src="data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT102000eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOm
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 39 5a 53 6c 79 5a 58 52 31 63 6d 34 68 4d 44 74 79 5a 58 52 31 63 6d 34 68 4d 58 30 73 52 44 31 30 50 32 5a 31 62 6d 4e 30 61 57 39 75 4b 47 55 73 64 43 6c 37 61 57 59 6f 5a 54 30 39 50 58 51 70 63 6d 56 30 64 58 4a 75 49 47 77 39 49 54 41 73 4d 44 74 32 59 58 49 67 62 6a 30 68 5a 53 35 6a 62 32 31 77 59 58 4a 6c 52 47 39 6a 64 57 31 6c 62 6e 52 51 62 33 4e 70 64 47 6c 76 62 69 30 68 64 43 35 6a 62 32 31 77 59 58 4a 6c 52 47 39 6a 64 57 31 6c 62 6e 52 51 62 33 4e 70 64 47 6c 76 62 6a 74 79 5a 58 52 31 63 6d 34 67 62 6e 78 38 4b 44 45 6d 4b 47 34 39 4b 47 55 75 0d 0a 32 30 30 30 0d 0a 62 33 64 75 5a 58 4a 45 62 32 4e 31 62 57 56 75 64 48 78 38 5a 53 6b 39 50 53 68 30 4c 6d 39 33 62 6d 56 79 52 47 39 6a 64 57 31 6c 62 6e 52 38 66 48 51 70 50 32 55 75 59 32 Data Ascii: 9ZSlyZXR1cm4hMDtyZXR1cm4hMX0sRD10P2Z1bmN0aW9uKGUsdCl7aWYoZT09PXQpcmV0dXJuIGw9ITAsMDt2YXIgbj0hZS5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbi0hdC5jb21wYXJlRG9jdW1lbnRQb3NpdGlvbjtyZXR1cm4gbnx8KDEmKG49KGUu2000b3duZXJEb2N1bWVudHx8ZSk9PSh0Lm93bmVyRG9jdW1lbnR8fHQpP2UuY2
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 54 4c 6d 64 79 5a 58 41 6f 5a 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 4b 58 74 79 5a 58 52 31 63 6d 34 67 5a 54 30 39 50 57 34 68 50 54 31 79 66 53 6b 36 49 6e 4e 30 63 6d 6c 75 5a 79 49 68 50 58 52 35 63 47 56 76 5a 69 42 75 50 31 4d 75 5a 33 4a 6c 63 43 68 6c 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 55 70 65 33 4a 6c 64 48 56 79 62 69 30 78 50 47 6b 75 59 32 46 73 62 43 68 75 4c 47 55 70 49 54 30 39 63 6e 30 70 4f 6c 4d 75 5a 6d 6c 73 64 47 56 79 4b 47 34 73 5a 53 78 79 4b 58 31 54 4c 6d 5a 70 62 48 52 6c 63 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 6c 4c 48 51 73 62 69 6c 37 64 6d 46 79 49 48 49 39 64 46 73 77 58 54 74 79 5a 58 52 31 63 6d 34 67 62 69 59 6d 4b 47 55 39 49 6a 70 75 62 33 51 6f 49 69 74 6c 4b 79 49 70 49 69 6b 73 4d 54 30 39 50 58 Data Ascii: TLmdyZXAoZSxmdW5jdGlvbihlKXtyZXR1cm4gZT09PW4hPT1yfSk6InN0cmluZyIhPXR5cGVvZiBuP1MuZ3JlcChlLGZ1bmN0aW9uKGUpe3JldHVybi0xPGkuY2FsbChuLGUpIT09cn0pOlMuZmlsdGVyKG4sZSxyKX1TLmZpbHRlcj1mdW5jdGlvbihlLHQsbil7dmFyIHI9dFswXTtyZXR1cm4gbiYmKGU9Ijpub3QoIitlKyIpIiksMT09PX
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 6f 62 7a 31 7a 4b 43 6b 76 64 58 78 38 4c 6a 55 70 4b 54 77 39 4d 43 59 6d 4b 47 45 39 4d 43 6b 73 59 79 38 39 62 7a 74 6a 4b 6a 30 79 4c 46 4d 75 63 33 52 35 62 47 55 6f 5a 53 78 30 4c 47 4d 72 62 43 6b 73 62 6a 31 75 66 48 78 62 58 58 31 79 5a 58 52 31 63 6d 34 67 62 69 59 6d 4b 47 4d 39 4b 32 4e 38 66 43 74 31 66 48 77 77 4c 47 6b 39 62 6c 73 78 58 54 39 6a 4b 79 68 75 57 7a 46 64 4b 7a 45 70 4b 6d 35 62 4d 6c 30 36 4b 32 35 62 4d 6c 30 73 63 69 59 6d 4b 48 49 75 64 57 35 70 64 44 31 73 4c 48 49 75 63 33 52 68 63 6e 51 39 59 79 78 79 4c 6d 56 75 5a 44 31 70 4b 53 6b 73 61 58 31 32 59 58 49 67 64 57 55 39 65 33 30 37 5a 6e 56 75 59 33 52 70 62 32 34 67 62 47 55 6f 5a 53 78 30 4b 58 74 6d 62 33 49 6f 64 6d 46 79 49 47 34 73 63 69 78 70 4c 47 38 73 59 53 Data Ascii: obz1zKCkvdXx8LjUpKTw9MCYmKGE9MCksYy89bztjKj0yLFMuc3R5bGUoZSx0LGMrbCksbj1ufHxbXX1yZXR1cm4gbiYmKGM9K2N8fCt1fHwwLGk9blsxXT9jKyhuWzFdKzEpKm5bMl06K25bMl0sciYmKHIudW5pdD1sLHIuc3RhcnQ9YyxyLmVuZD1pKSksaX12YXIgdWU9e307ZnVuY3Rpb24gbGUoZSx0KXtmb3IodmFyIG4scixpLG8sYS
2024-08-31 18:37:31 UTC	16384	IN	Data Raw: 64 53 35 75 62 32 52 6c 54 6d 46 74 5a 53 35 30 62 30 78 76 64 32 56 79 51 32 46 7a 5a 53 67 70 4b 53 59 6d 63 47 55 75 64 47 56 7a 64 43 68 7a 4c 6e 52 35 63 47 55 70 50 33 55 75 59 32 68 6c 59 32 74 6c 5a 44 31 7a 4c 6d 4e 6f 5a 57 4e 72 5a 57 51 36 49 6d 6c 75 63 48 56 30 49 69 45 39 50 57 77 6d 4a 69 4a 30 5a 58 68 30 59 58 4a 6c 59 53 49 68 50 54 31 73 66 48 77 6f 64 53 35 6b 5a 57 5a 68 64 57 78 30 56 6d 46 73 64 57 55 39 63 79 35 6b 5a 57 5a 68 64 57 78 30 56 6d 46 73 64 57 55 70 4f 32 6c 6d 4b 48 51 70 61 57 59 6f 62 69 6c 6d 62 33 49 6f 62 7a 31 76 66 48 78 32 5a 53 68 6c 4b 53 78 68 50 57 46 38 66 48 5a 6c 4b 47 4d 70 4c 48 49 39 4d 43 78 70 50 57 38 75 62 47 56 75 5a 33 52 6f 4f 33 49 38 0d 0a 38 30 30 30 0d 0a 61 54 74 79 4b 79 73 70 54 32 55 Data Ascii: dS5ub2RlTmFtZS50b0xvd2VyQ2FzZSgpKSYmcGUudGVzdChzLnR5cGUpP3UuY2hlY2tlZD1zLmNoZWNrZWQ6ImlucHV0IiE9PWwmJiJ0ZXh0YXJlYSIhPT1sfHwodS5kZWZhdWx0VmFsdWU9cy5kZWZhdWx0VmFsdWUpO2lmKHQpaWYobilmb3Iobz1vfHx2ZShlKSxhPWF8fHZlKGMpLHI9MCxpPW8ubGVuZ3RoO3I88000aTtyKyspT2U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49715	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:31 UTC	612	OUT	GET /c-assets/css/style.css?1714115086 HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:31 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:31 GMT Content-Type: text/css Content-Length: 9796 Last-Modified: Fri, 26 Apr 2024 07:04:46 GMT Connection: close ETag: "662b520e-2644" Accept-Ranges: bytes
2024-08-31 18:37:31 UTC	9796	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 42 72 61 6e 64 73 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 61 75 74 6f 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2f 63 2d 61 73 73 65 74 73 2f 77 65 62 66 6f 6e 74 73 2f 66 61 2d 62 72 61 6e 64 73 2d 34 30 30 2e 65 6f 74 22 29 3b 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 2f 63 2d 61 73 73 65 74 73 2f 77 65 62 66 6f 6e 74 73 2f 66 61 2d 62 72 61 6e 64 73 2d 34 30 30 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 Data Ascii: @font-face { font-family: 'Font Awesome 5 Brands'; font-style: normal; font-weight: normal; font-display: auto; src: url("/c-assets/webfonts/fa-brands-400.eot"); src: url("/c-assets/webfonts/fa-brands-400.eot?#iefix") format("embed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49716	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:31 UTC	609	OUT	GET /c-assets/css/bootstrap.min.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49717	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:31 UTC	608	OUT	GET /c-assets/css/font-awesome.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:32 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:32 GMT Content-Type: text/css Content-Length: 39727 Last-Modified: Mon, 18 Sep 2023 09:12:33 GMT Connection: close ETag: "65081481-9b2f" Accept-Ranges: bytes
2024-08-31 18:37:32 UTC	16149	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0d 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 2f 0d 0a 2f 2a 20 46 4f 4e 54 20 50 41 54 48 0d 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 46 6f 6e 74 41 77 65 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) // FONT PATH * -------------------------- */@font-face { font-family: 'FontAwe
2024-08-31 18:37:32 UTC	16384	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 38 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 6c 61 70 74 6f 70 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 39 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 74 61 62 6c 65 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 61 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 6d 6f 62 69 6c 65 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 2c 0d 0a 2e 66 61 2d 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 62 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 31 30 63 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 71 75 6f 74 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 Data Ascii: ontent: "\f108";}.fa-laptop:before { content: "\f109";}.fa-tablet:before { content: "\f10a";}.fa-mobile-phone:before,.fa-mobile:before { content: "\f10b";}.fa-circle-o:before { content: "\f10c";}.fa-quote-left:before {
2024-08-31 18:37:32 UTC	7194	IN	Data Raw: 2d 6c 69 7a 61 72 64 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 38 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 73 70 6f 63 6b 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 39 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 70 6f 69 6e 74 65 72 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 61 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 68 61 6e 64 2d 70 65 61 63 65 2d 6f 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 62 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 74 72 61 64 65 6d 61 72 6b 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 66 32 35 63 22 3b 0d 0a 7d 0d 0a 2e 66 61 2d 72 65 67 69 Data Ascii: -lizard-o:before { content: "\f258";}.fa-hand-spock-o:before { content: "\f259";}.fa-hand-pointer-o:before { content: "\f25a";}.fa-hand-peace-o:before { content: "\f25b";}.fa-trademark:before { content: "\f25c";}.fa-regi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49718	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:32 UTC	653	OUT	GET /c-assets/dialog-new/logo.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:32 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:32 GMT Content-Type: image/png Content-Length: 3045 Last-Modified: Mon, 09 Oct 2023 17:05:00 GMT Connection: close ETag: "652432bc-be5" Accept-Ranges: bytes
2024-08-31 18:37:32 UTC	3045	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4d 00 00 00 4d 08 06 00 00 00 e3 09 e9 b0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 0b 29 49 44 41 54 78 5e dd 9b 0b b0 7f 53 15 c7 af 50 52 72 53 e9 81 dc 0a 89 a2 f4 14 95 a6 a9 88 f8 93 34 09 09 8d f4 e0 5f cd 34 a4 30 aa 89 5e 23 3d a6 1a 8f 4b 66 f2 f6 ef 35 15 29 a1 14 72 4b 2f bd c6 bf 87 c7 88 fc 55 e8 21 7c 3f b7 df 69 ce 7f f9 ee 73 f6 39 Data Ascii: PNGIHDRMMsRGBgAMAa cHRMz&u0`:pQ<pHYsodtEXtSoftwarewww.inkscape.org<)IDATx^SPRrS4_40^#=Kf5)rK/U!\|?is9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49722	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:33 UTC	602	OUT	GET /index_files/7570212.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:33 UTC	232	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:33 GMT Content-Type: text/css Content-Length: 863 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-35f" Accept-Ranges: bytes
2024-08-31 18:37:33 UTC	863	IN	Data Raw: 64 6c 2c 64 74 2c 64 64 2c 75 6c 2c 6f 6c 2c 6c 69 2c 70 2c 68 31 2c 68 32 2c 68 33 7b 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 7d 0d 0a 75 6c 2c 64 6c 7b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 7d 0d 0a 69 6d 67 7b 20 62 6f 72 64 65 72 3a 30 70 78 3b 7d 0d 0a 61 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 7d 0d 0a 2a 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 20 2f 2a 20 e6 9c 80 e5 a5 bd e5 b0 86 20 62 6f 64 79 20 e5 85 83 e7 b4 a0 e7 9a 84 e8 be b9 e8 b7 9d e5 92 8c e5 a1 ab e5 85 85 e8 ae be e7 bd ae e4 b8 ba 20 30 20 e4 bb a5 e8 a6 86 Data Ascii: dl,dt,dd,ul,ol,li,p,h1,h2,h3{margin:0; padding:0;}ul,dl{ list-style:none;}img{ border:0px;}a{ text-decoration:none; color:#000000;}{margin: 0;padding: 0;}body{ margin: 0; / body 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49723	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:33 UTC	602	OUT	GET /index_files/7570214.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:33 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:33 GMT Content-Type: text/css Content-Length: 5407 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-151f" Accept-Ranges: bytes
2024-08-31 18:37:33 UTC	5407	IN	Data Raw: 2e 68 65 61 64 65 72 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 35 33 70 78 3b 0d 0a 09 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 37 35 37 30 32 35 38 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 20 62 6f 74 74 6f 6d 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 77 31 31 30 30 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 65 72 20 2e 74 6f 70 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 09 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 20 2e 74 6f 70 20 2e 6c 6f 67 6f 20 7b 0d 0a Data Ascii: .header {width: 100%;height: 153px;background: url(7570258.png) no-repeat center bottom;position: relative;}.w1100{width: 1100px;margin: 0 auto;}.header .top {width: 1100px;margin: 0 auto;}.header .top .logo {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49724	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:33 UTC	602	OUT	GET /index_files/7601024.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:33 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:33 GMT Content-Type: text/css Content-Length: 15976 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-3e68" Accept-Ranges: bytes
2024-08-31 18:37:33 UTC	15976	IN	Data Raw: 0d 0a 2a 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 2e 62 67 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6d 69 6e 2d 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 31 31 30 30 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 77 72 61 70 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 2e 74 6f 70 74 69 74 6c 65 7b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 30 20 32 35 70 78 20 30 3b 0d 0a 7d 0d 0a 2e 74 6f 70 Data Ascii: *{margin: 0;padding: 0;}.bg {width: 100%;min-width: 1100px;overflow: hidden;}.w1100 {width: 1100px;margin: 0 auto;}.wrap{margin-bottom: 40px;}.toptitle{text-align: center;padding: 15px 0 25px 0;}.top

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49726	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:33 UTC	602	OUT	GET /index_files/7570215.css HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:33 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:33 GMT Content-Type: text/css Content-Length: 3137 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-c41" Accept-Ranges: bytes
2024-08-31 18:37:33 UTC	3137	IN	Data Raw: 2f 2a 0a 20 2a 20 53 77 69 70 65 72 20 32 2e 37 2e 36 0a 20 2a 20 4d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 6c 69 64 65 72 73 2f 73 77 69 70 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 35 2c 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 20 54 68 65 20 69 44 61 6e 67 65 72 6f 2e 75 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 Data Ascii: /* * Swiper 2.7.6 * Mobile touch slider and framework with hardware accelerated transitions * * http://www.idangero.us/sliders/swiper/ * * Copyright 2010-2015, Vladimir Kharlampidi * The iDangero.us * http://www.idangero.us/ * * Licensed under G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49728	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:34 UTC	587	OUT	GET /index_files/7570217.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49729	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:34 UTC	648	OUT	GET /index_files/7570238.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:34 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:34 GMT Content-Type: image/png Content-Length: 22131 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-5673" Accept-Ranges: bytes
2024-08-31 18:37:34 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 23 00 00 00 55 08 06 00 00 00 9b ce e4 44 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDR#UDtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-08-31 18:37:34 UTC	5983	IN	Data Raw: 1c 54 c3 43 fc bd 3d 88 3f 3a 08 47 f6 60 3f b5 e8 5b 5c 44 2c 34 2e d6 b3 d3 18 9c 47 34 b0 5f 50 d0 f1 0e 4a 9f 60 86 ab 31 48 3a ed 43 2f a4 ce 25 cc 7e 8d b6 ff 67 c6 5f 09 18 1a 10 93 55 2c 9b 26 3a 65 0d 17 fb 75 2f 77 cf f6 ec c0 1d 1f fc b9 64 ff 5d df b5 2d ab 3c 5d b9 4e f9 a4 06 6e 8b de a0 48 22 89 24 92 48 22 59 ad 65 a4 e7 6d 8f 35 f8 59 c4 e9 f0 d0 b1 eb d1 23 e9 d4 df 4e 9e f9 d4 ff f5 69 87 49 6f 63 8a 0a 8f 31 7f 1d 18 5b e2 48 79 0a 8e ff a7 53 d8 f5 89 6d e8 f8 88 0c b9 db 22 1e 91 61 8b 08 aa 04 14 c9 e1 6e d8 3b 4c d8 8f 16 e0 3e 43 94 31 41 50 32 ef c1 23 65 ef e6 04 95 e8 be f3 ea d2 12 87 cc 4a e8 88 1b 90 13 9d 7e 5c 10 31 4d d7 ce ce 62 39 47 40 62 ca 48 8b 59 3d 9e e6 9f e7 e4 e8 3a f4 37 fa 09 9c de a1 40 7a a7 8a d8 f6 04 54 Data Ascii: TC=?:G`?[\D,4.G4_PJ`1H:C/%~g_U,&:eu/wd]-<]NnH"$H"Yem5Y#NiIoc1[HySm"an;L>C1AP2#eJ~\1Mb9G@bHY=:7@zT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49719	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:35 UTC	584	OUT	GET /c-assets/js/land.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:35 UTC	246	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:35 GMT Content-Type: application/javascript Content-Length: 884 Last-Modified: Mon, 09 Oct 2023 16:37:41 GMT Connection: close ETag: "65242c55-374" Accept-Ranges: bytes
2024-08-31 18:37:35 UTC	884	IN	Data Raw: 24 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 73 69 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e 73 75 63 63 65 73 73 52 6f 77 20 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6f 5f 77 72 66 6c 77 5f 77 77 27 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 69 64 3d 22 64 6f 77 6e 6c 6f 61 64 2d 70 72 6f 63 65 73 73 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 7a 2d 69 6e 64 Data Ascii: $().ready(function (e) { var si = setInterval(function (e) { if ($('.successRow a').length) { $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49737	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:35 UTC	409	OUT	GET /index_files/7570216.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:36 UTC	249	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:36 GMT Content-Type: application/javascript Content-Length: 46354 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-b512" Accept-Ranges: bytes
2024-08-31 18:37:36 UTC	16135	IN	Data Raw: 2f 2a 0a 20 2a 20 53 77 69 70 65 72 20 32 2e 37 2e 36 0a 20 2a 20 4d 6f 62 69 6c 65 20 74 6f 75 63 68 20 73 6c 69 64 65 72 20 61 6e 64 20 66 72 61 6d 65 77 6f 72 6b 20 77 69 74 68 20 68 61 72 64 77 61 72 65 20 61 63 63 65 6c 65 72 61 74 65 64 20 74 72 61 6e 73 69 74 69 6f 6e 73 0a 20 2a 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 73 6c 69 64 65 72 73 2f 73 77 69 70 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2d 32 30 31 35 2c 20 56 6c 61 64 69 6d 69 72 20 4b 68 61 72 6c 61 6d 70 69 64 69 0a 20 2a 20 54 68 65 20 69 44 61 6e 67 65 72 6f 2e 75 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 64 61 6e 67 65 72 6f 2e 75 73 2f 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 47 Data Ascii: /* * Swiper 2.7.6 * Mobile touch slider and framework with hardware accelerated transitions * * http://www.idangero.us/sliders/swiper/ * * Copyright 2010-2015, Vladimir Kharlampidi * The iDangero.us * http://www.idangero.us/ * * Licensed under G
2024-08-31 18:37:36 UTC	16384	IN	Data Raw: 61 72 20 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 3d 7b 65 76 65 6e 74 54 61 72 67 65 74 3a 22 77 72 61 70 70 65 72 22 2c 6d 6f 64 65 3a 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 2c 74 6f 75 63 68 52 61 74 69 6f 3a 31 2c 73 70 65 65 64 3a 33 30 30 2c 66 72 65 65 4d 6f 64 65 3a 21 31 2c 66 72 65 65 4d 6f 64 65 46 6c 75 69 64 3a 21 31 2c 6d 6f 6d 65 6e 74 75 6d 52 61 74 69 6f 3a 31 2c 6d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 3a 21 30 2c 6d 6f 6d 65 6e 74 75 6d 42 6f 75 6e 63 65 52 61 74 69 6f 3a 31 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 3a 31 2c 73 6c 69 64 65 73 50 65 72 47 72 6f 75 70 3a 31 2c 73 6c 69 64 65 73 50 65 72 56 69 65 77 46 69 74 3a 21 30 2c 73 69 6d 75 6c 61 74 65 54 6f 75 63 68 3a 21 30 2c 66 6f 6c 6c 6f 77 46 69 6e 67 65 72 3a 21 30 2c 73 68 6f Data Ascii: ar E,F,G,H,I,J,K={eventTarget:"wrapper",mode:"horizontal",touchRatio:1,speed:300,freeMode:!1,freeModeFluid:!1,momentumRatio:1,momentumBounce:!0,momentumBounceRatio:1,slidesPerView:1,slidesPerGroup:1,slidesPerViewFit:!0,simulateTouch:!0,followFinger:!0,sho
2024-08-31 18:37:36 UTC	13835	IN	Data Raw: 2c 44 2e 73 6c 69 64 65 73 5b 44 2e 61 63 74 69 76 65 49 6e 64 65 78 5d 29 7b 69 66 28 44 2e 63 61 6c 63 56 69 73 69 62 6c 65 53 6c 69 64 65 73 28 61 29 2c 44 2e 73 75 70 70 6f 72 74 2e 63 6c 61 73 73 4c 69 73 74 29 7b 76 61 72 20 66 3b 66 6f 72 28 63 3d 30 3b 63 3c 44 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 66 3d 44 2e 73 6c 69 64 65 73 5b 63 5d 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 2e 73 6c 69 64 65 41 63 74 69 76 65 43 6c 61 73 73 29 2c 44 2e 76 69 73 69 62 6c 65 53 6c 69 64 65 73 2e 69 6e 64 65 78 4f 66 28 66 29 3e 3d 30 3f 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 62 2e 73 6c 69 64 65 56 69 73 69 62 6c 65 43 6c 61 73 73 29 3a 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 2e 73 6c 69 64 65 Data Ascii: ,D.slides[D.activeIndex]){if(D.calcVisibleSlides(a),D.support.classList){var f;for(c=0;c<D.slides.length;c++)f=D.slides[c],f.classList.remove(b.slideActiveClass),D.visibleSlides.indexOf(f)>=0?f.classList.add(b.slideVisibleClass):f.classList.remove(b.slide

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49738	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:35 UTC	410	OUT	GET /index_files/7570238.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:36 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:36 GMT Content-Type: image/png Content-Length: 22131 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-5673" Accept-Ranges: bytes
2024-08-31 18:37:36 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 23 00 00 00 55 08 06 00 00 00 9b ce e4 44 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 Data Ascii: PNGIHDR#UDtEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15
2024-08-31 18:37:36 UTC	5983	IN	Data Raw: 1c 54 c3 43 fc bd 3d 88 3f 3a 08 47 f6 60 3f b5 e8 5b 5c 44 2c 34 2e d6 b3 d3 18 9c 47 34 b0 5f 50 d0 f1 0e 4a 9f 60 86 ab 31 48 3a ed 43 2f a4 ce 25 cc 7e 8d b6 ff 67 c6 5f 09 18 1a 10 93 55 2c 9b 26 3a 65 0d 17 fb 75 2f 77 cf f6 ec c0 1d 1f fc b9 64 ff 5d df b5 2d ab 3c 5d b9 4e f9 a4 06 6e 8b de a0 48 22 89 24 92 48 22 59 ad 65 a4 e7 6d 8f 35 f8 59 c4 e9 f0 d0 b1 eb d1 23 e9 d4 df 4e 9e f9 d4 ff f5 69 87 49 6f 63 8a 0a 8f 31 7f 1d 18 5b e2 48 79 0a 8e ff a7 53 d8 f5 89 6d e8 f8 88 0c b9 db 22 1e 91 61 8b 08 aa 04 14 c9 e1 6e d8 3b 4c d8 8f 16 e0 3e 43 94 31 41 50 32 ef c1 23 65 ef e6 04 95 e8 be f3 ea d2 12 87 cc 4a e8 88 1b 90 13 9d 7e 5c 10 31 4d d7 ce ce 62 39 47 40 62 ca 48 8b 59 3d 9e e6 9f e7 e4 e8 3a f4 37 fa 09 9c de a1 40 7a a7 8a d8 f6 04 54 Data Ascii: TC=?:G`?[\D,4.G4_PJ`1H:C/%~g_U,&:eu/wd]-<]NnH"$H"Yem5Y#NiIoc1[HySm"an;L>C1AP2#eJ~\1Mb9G@bHY=:7@zT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49739	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:35 UTC	410	OUT	GET /index_files/7570236.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:36 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:36 GMT Content-Type: image/png Content-Length: 17025 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-4281" Accept-Ranges: bytes
2024-08-31 18:37:36 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 05 00 00 00 8f 08 03 00 00 00 c4 14 3e a9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 64 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 38 20 37 39 2e 31 35 39 38 32 34 2c 20 32 30 31 36 2f 30 39 2f 31 34 2d 30 31 3a 30 39 3a 30 31 20 20 Data Ascii: PNGIHDR>tEXtSoftwareAdobe ImageReadyqe<diTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01
2024-08-31 18:37:36 UTC	877	IN	Data Raw: ca f6 80 76 69 7d 89 6d de 34 b3 2f f4 df ea 1f bc 39 c8 61 80 4c 95 44 14 80 03 93 82 6d 26 88 c1 0c c1 f5 05 92 c2 53 af a3 16 0e 93 27 30 3f 40 00 70 cc dd 38 d7 22 24 82 48 0a cf a0 21 cc 04 43 a0 60 20 08 64 8c 28 04 2c fc 34 f3 34 b8 ef 59 0f 65 02 ed e9 17 84 c3 bf 1d f1 79 bb 86 02 43 ba fd b7 01 15 46 e3 fd 64 db 3c 38 e1 0d 46 8c 03 8d 32 d6 16 32 2a cc 4e 4f 6f 09 40 77 90 ca e1 9f 0a ca 0b 50 4a 23 a5 d2 77 e4 02 41 40 ef c5 4a 82 80 9f 48 d2 de 9e 19 ce b6 af 20 3b 9d d1 cb a3 5e 29 cd 63 1f c7 c0 d6 17 10 81 85 16 62 90 02 8a 01 b5 90 99 0b 11 81 77 5c b0 80 30 69 e1 01 0c 30 a6 9a 94 60 a9 05 fc cd 97 e4 8b 33 59 a9 44 3a c0 72 91 8c 11 84 00 0c 26 b4 d1 4d 21 2c 45 c2 4f 9c 42 9e 2c a5 12 1a c4 01 06 a8 d3 c7 ee 0e 0d 37 0a 94 5c 7a 84 2c Data Ascii: vi}m4/9aLDm&S'0?@p8"$H!C` d(,44YeyCFd<8F22*NOo@wPJ#wA@JH ;^)cbw\0i0`3YD:r&M!,EOB,7\z,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49740	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:36 UTC	410	OUT	GET /index_files/7570255.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:36 UTC	233	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:36 GMT Content-Type: image/png Content-Length: 355 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-163" Accept-Ranges: bytes
2024-08-31 18:37:36 UTC	355	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 01 2a 49 44 41 54 38 8d 95 d3 cd 2b 44 51 18 06 f0 df 4c 33 ec 88 94 8d 22 0b 8b b1 93 92 94 d8 58 2a f9 cc de 8a ac ed 66 e6 4f 50 2c c4 4a 16 e2 0f 60 37 4a 94 52 b7 ac 64 65 45 58 90 25 25 8b 7b 2e b7 9b c6 cc 53 a7 de ce 39 cf 73 9e f3 7e e4 a2 28 92 42 09 0b 98 43 1f 9e c3 3a c5 0e 1e 65 50 48 c5 f3 38 0a f1 1b 1e f0 82 61 8c 60 05 bb a8 a4 05 f2 19 f2 27 d6 d0 81 01 8c a1 0d 4b f8 42 39 c4 3f c8 45 51 54 c4 2d 5a 30 83 eb ac cd 80 09 d4 f0 84 29 dc 24 0e a6 d1 8f cd 3a 64 38 c3 24 ba d1 99 76 50 0b 36 47 f1 51 47 e0 4f 24 39 78 6f 82 5c c1 76 56 a0 19 94 b0 9c 15 68 13 27 b1 11 4c e2 3e 2d b0 85 21 ac 37 40 9e 45 17 ce 93 8d 66 ca 38 8a 13 71 73 Data Ascii: PNGIHDRaIDAT8+DQL3"XfOP,J`7JRdeEX%%{.S9s~(BC:ePH8a`'KB9?EQT-Z0)$:d8$vP6GQGO$9xo\vVh'L>-!7@Ef8qs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49742	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:36 UTC	580	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: cninaspwebprn.icu Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cninaspwebprn.icu Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3 Sec-WebSocket-Key: /aNa9hteadAW3e7VXf5TOw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49741	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:36 UTC	410	OUT	GET /index_files/8574863.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:37 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:36 GMT Content-Type: image/png Content-Length: 79320 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-135d8" Accept-Ranges: bytes
2024-08-31 18:37:37 UTC	16147	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 4c 00 00 00 3d 08 06 00 00 00 b7 30 fc cd 00 00 20 00 49 44 41 54 78 9c 84 bd 6b d0 ae 59 7a 16 74 dd cf f7 7d 7b 77 ef de 7d 9c 53 77 0f 39 4d 32 9d 40 80 cc 21 1c a4 48 52 65 f1 c3 60 4a 4b 0b 26 6a 95 3f 08 6a 69 49 41 90 2a 0b 53 f8 cb 8a 22 56 a9 25 a2 a5 04 52 45 59 56 00 0b 14 89 24 2a 20 01 d1 18 c2 31 c3 30 c3 10 42 92 e9 9e 43 4f a7 67 76 77 cf 74 ef de cf ed 8f 75 5f 87 f5 ee 06 be ae de fb db ef fb 3c eb 59 eb 3e 5c f7 71 ad a7 fe f6 f3 cf 7d 1a 55 ef 2a e0 41 03 00 1a 40 a1 ba b1 fe 0d a0 6a 3e 07 0a a5 ab a0 2b d6 a7 8d 75 4f 35 50 55 e8 6e cc e5 c0 5c 31 c3 af 4f 1a e8 5a 7f af 67 ac 31 0a 85 73 fe 06 c7 9c 51 fc fb cc b1 fc f9 a1 0b 0a 98 ef 0a 85 be 98 fb 3e 7f 3e 65 7f 06 e6 f9 ad Data Ascii: PNGIHDRL=0 IDATxkYzt}{w}Sw9M2@!HRe`JK&j?jiIAS"V%REYV$ 10BCOgvwtu_<Y>\q}U*A@j>+uO5PUn\1OZg1sQ>>e
2024-08-31 18:37:37 UTC	16384	IN	Data Raw: e0 8e ba 22 20 ba d8 99 e2 41 9e 18 fb 39 69 07 06 b9 c5 d7 5d 9e e2 3b 13 23 5b 42 6f 82 04 ee 93 b6 e1 3d 25 0f eb 11 c7 3a c4 79 81 4c 58 03 76 74 b0 26 6d f9 2b 40 ce 9a ce b2 e0 3d 33 1b 36 b3 af 20 86 dd 65 51 b1 54 15 93 8e fc d0 83 7a d2 16 2b 69 80 aa 89 27 54 b9 92 ee 7b 75 ec cc 30 3e 8c 6d 9b aa a0 f5 79 9c 3f 06 92 4c 98 8e 2e 13 43 b2 e3 8f 6b 47 e7 39 38 6e c3 a6 7c b1 9b 8a af 56 5e ce cf e2 05 df c8 95 41 bf 12 07 e1 3c 2e ab be 5a c8 4f c9 27 9d d4 70 80 c9 1f 8a 67 f0 f6 1c f9 71 68 c2 f5 42 55 db 8e 35 b6 e8 d6 40 ed 7e 04 34 83 39 34 76 f4 32 2b 8e 7d 9c 38 8f 73 b6 df 91 66 7b 52 d2 fa 97 ce da 74 28 d6 e2 a2 6b 9a 4c 16 47 d2 84 98 53 70 77 c4 8c c1 fb 9c a8 20 fd 9d 88 62 82 80 5d 0a dc 62 55 e7 e0 c1 c9 a0 b3 25 e7 79 6e 13 69 ce Data Ascii: " A9i];#[Bo=%:yLXvt&m+@=36 eQTz+i'T{u0>my?L.CkG98n\|V^A<.ZO'pgqhBU5@~494v2+}8sf{Rt(kLGSpw b]bU%yni
2024-08-31 18:37:37 UTC	16384	IN	Data Raw: ae 88 28 2b ef 9a b9 65 a5 44 2c fb a9 a7 35 de 9e 8a 5e 90 d8 52 1c 1e b1 f3 8c 7c 6b c1 e9 c4 fe 78 08 9e 84 30 41 f0 61 4b c5 0b 8e 16 3e d8 e6 d6 28 8c a8 bc 16 42 ab 58 f3 86 80 c8 4c 6f 5d 68 ac a3 df 3c 97 f9 cf 25 c8 12 be 1b fa b7 a6 56 f9 17 41 df 7a a3 23 57 00 99 a5 72 9e 52 00 25 66 85 99 01 80 88 11 54 f8 ce 21 91 40 21 b4 8f f8 c5 86 21 22 ac 89 9d 01 fc 67 16 39 3a 8e 51 33 17 b4 fc af 70 5e fc bc 52 b9 a2 0c 21 66 7a ff 73 a0 4b 3c 4b 2f ae 2a 7c 1a 96 23 2c cb a1 55 34 f2 cc 10 f0 28 35 1e f2 ff 46 11 d8 68 7a d6 56 ca 13 62 66 97 df e3 c8 9c 0a 0f 8d 85 5a 00 91 12 66 89 8f 5f 52 5e 58 64 4c d6 28 47 46 5a a6 ed d9 4c 9a 5d 16 2e 33 2e 46 7f 46 cc 53 f0 81 5f eb d0 e1 d8 f3 85 09 c3 0d cf 0d c6 54 14 a9 04 20 3c 71 9d e0 49 70 47 79 da Data Ascii: (+eD,5^R\|kx0AaK>(BXLo]h<%VAz#WrR%fT!@!!"g9:Q3p^R!fzsK<K/*\|#,U4(5FhzVbfZf_R^XdL(GFZL].3.FFS_T <qIpGy
2024-08-31 18:37:37 UTC	16384	IN	Data Raw: a5 f3 74 ca 22 f6 cb da 69 9c 5d fe f9 6d 64 47 cd 67 f1 78 56 9c 72 2c cb df fe 1a 00 b6 5d 76 0d 6b 3f 7a 21 00 8f fd c7 8d ac fa f4 e9 cc af 79 90 fe 5d 0f e0 3d 8c 94 15 c5 5c 9f 6d 97 fd 92 2d 97 5e c3 dd 6f ff 1c 63 87 3d 95 d1 d5 4f 8a a7 63 15 05 bd 7e 3f 9e 3a 94 f6 4d 4b 87 4c d4 5f 8d 4d 52 76 a7 6b e8 af db 0a 07 ec 4b 39 be 34 fe 96 94 72 3f b6 18 1b 35 77 aa e3 14 6a 99 66 9d 44 46 0d 5a 86 96 8f 13 f6 aa 9a c6 9e 77 89 68 84 a3 87 f8 8f 64 0d 66 65 20 d8 d8 4b a6 05 c3 a7 e5 08 f1 00 fa be 56 c3 e3 84 61 22 bf d5 e9 e6 84 97 e7 66 f9 41 33 59 44 38 89 f1 68 74 64 57 50 14 81 a1 ca d3 5d b5 82 3d de fe f7 d1 98 16 da b8 f1 56 d6 7d ed 5f 63 8f 9e 00 b8 0e 43 ab 56 e0 5d 48 a5 26 d9 d8 90 1c 89 1c 98 8d b6 c5 a2 bf 8e d9 ba 9d 55 2b 68 9a 90 Data Ascii: t"i]mdGgxVr,]vk?z!y]=\m-^oc=Oc~?:MKL_MRvkK94r?5wjfDFZwhdfe KVa"fA3YD8htdWP]=V}_cCV]H&U+h
2024-08-31 18:37:37 UTC	14021	IN	Data Raw: a5 66 b4 28 cf 2e 8d 1c 44 b1 97 53 1f da 86 4f 6c 16 68 78 5d 70 04 d7 50 16 05 23 2e 1e e5 d8 a4 86 8f a5 38 2d d5 31 ea 14 7e 02 9b dc 97 21 d3 bb 8e 2e bc 2a 19 fe e2 78 89 cf 7a 55 5e b4 c3 be 55 5c 83 8b b8 a0 d1 6d 4b f3 41 15 12 42 d3 32 69 b3 83 4f 0c 54 93 a1 a7 b2 4f 70 1f 23 6f 12 67 76 71 af 1d 4e f2 f1 55 36 67 19 1a 61 a2 bd 0b 0c 6c 5c 7b 50 1c 21 35 eb 74 54 4d c1 42 5d d3 6f 6a 08 d0 2d 4a 0a 5c 2b 2b 48 1c a9 b8 04 3f d9 27 67 69 15 9c 93 4c a4 c4 03 1d 6a c4 46 99 97 15 bc 88 93 39 2a 2b d9 39 71 da 19 e7 65 ce 5e 64 4e e2 ab ea b4 74 92 4d 95 e0 8c d3 ac 10 d9 53 91 1d ce f4 10 aa 5c 41 d5 29 5b fa 49 ab 97 8d ac 59 e0 97 64 96 06 2b 82 c9 d2 4d f8 92 8a 45 12 ae 66 9d 41 52 6f b2 63 38 cd 2b 65 05 15 78 95 8b ea a0 31 86 b1 0d b4 a8 Data Ascii: f(.DSOlhx]pP#.8-1~!.xzU^U\mKAB2iOTOp#ogvqNU6gal\{P!5tTMB]oj-J\++H?'giLjF9+9qe^dNtMS\A)[IYd+MEfARoc8+ex1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49745	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:37 UTC	409	OUT	GET /index_files/8221087.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:37 UTC	248	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:37 GMT Content-Type: application/javascript Content-Length: 7262 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-1c5e" Accept-Ranges: bytes
2024-08-31 18:37:37 UTC	7262	IN	Data Raw: 74 72 79 7b 0d 0a 09 76 61 72 20 65 73 64 54 69 70 4c 69 6e 6b 31 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 3b 22 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 22 e6 96 b0 e7 aa 97 e5 8f a3 e6 89 93 e5 bc 80 e6 97 a0 e9 9a 9c e7 a2 8d e8 af b4 e6 98 8e e9 a1 b5 e9 9d a2 2c e6 8c 89 41 6c 74 e5 8a a0 e6 b3 a2 e6 b5 aa e9 94 ae e6 89 93 e5 bc 80 e5 af bc e7 9b b2 e6 a8 a1 e5 bc 8f 22 29 29 3b 0d 0a 09 65 73 64 54 69 70 4c 69 6e 6b 31 2e Data Ascii: try{var esdTipLink1 = document.createElement("a");esdTipLink1.setAttribute("href","javascript:void(0);");esdTipLink1.appendChild(document.createTextNode(",Alt"));esdTipLink1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49746	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:37 UTC	411	OUT	GET /index_files/unionpay.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:37 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:37 GMT Content-Type: image/png Content-Length: 35513 Last-Modified: Mon, 12 Aug 2024 22:00:49 GMT Connection: close ETag: "66ba8611-8ab9" Accept-Ranges: bytes
2024-08-31 18:37:37 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 90 08 06 00 00 00 3e f3 d1 25 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 07 74 49 4d 45 07 e8 07 11 03 05 01 64 70 a5 2f 00 00 80 00 49 44 41 54 78 da ed 9d 77 78 1c e5 d5 f6 ef 67 66 7b 51 ef c5 92 ac 62 d9 96 ab 6c c9 15 8c 01 53 6c 5a 08 25 09 84 e4 25 bd bc 79 d3 80 10 93 28 09 35 24 5f 12 d2 48 87 54 08 04 02 98 5e 8c 6d c9 4d 72 ef 92 d5 bb 25 ab b7 ad f3 fd 21 6c 5c 24 7b 67 e7 99 d9 9d d5 f9 5d 17 57 22 59 3b e5 cc b3 33 f7 9c ca 40 44 14 2d e9 a5 19 92 cf 37 c7 2f 89 05 8c a1 00 cc Data Ascii: PNGIHDR>%gAMAa cHRMz&u0`:pQ<bKGDtIMEdp/IDATxwxgf{QblSlZ%%y(5$_HT^mMr%!l\${g]W"Y;3@D-7/
2024-08-31 18:37:37 UTC	16384	IN	Data Raw: 2f c4 d8 c6 6d 18 fc f3 73 8a b7 63 5e 34 97 bb 58 f5 1c 3e 0e 69 92 b7 eb aa 73 e6 ff 0a 8c 61 e9 2c be a1 af 83 0d 27 30 e6 0e bc 80 68 d5 bc 1c ee d7 67 c7 d1 c0 ef 31 72 8a 55 02 65 46 80 21 ed dc b4 38 3c fc 3f 57 72 df ff fa a7 02 bb f9 af 54 41 00 ee aa 91 e3 fd e5 9f 7e 10 4c b8 55 cd fc bf ce a1 e1 90 7a 82 78 a0 46 ff c2 34 a7 13 b5 3d 81 4f 0a 8a b7 59 51 b6 5a 9d 46 18 bb 54 2a d0 71 fb 7c 68 1f 1c 42 ba c6 cf a8 bf ec de 87 7d 1d 9d e1 b7 90 98 54 1e 4e 87 a3 8b 10 b0 84 55 06 09 28 09 c5 be c7 de dd 1a 3e 86 10 05 88 09 b1 30 e4 66 c1 34 b7 10 86 e9 99 21 11 7f be b6 4e f4 fc ef 0f 01 0e 49 dd 26 15 c4 f5 85 27 80 c4 9c f5 73 51 4e 32 f7 dc 33 39 21 40 9b d9 a8 4a 1b 12 39 1e c0 b6 1e fe 05 69 6b 4b 67 5c b4 b7 5e b4 dd 82 97 7f f8 09 ee f6 Data Ascii: /msc^4X>isa,'0hg1rUeF!8<?WrTA~LUzxF4=OYQZFT*q\|hB}TNU(>0f4!NI&'sQN239!@J9ikKg\^
2024-08-31 18:37:37 UTC	2981	IN	Data Raw: ff 4b 28 a7 d6 6c c7 49 83 89 0c 41 e8 13 03 03 ac 64 06 82 d0 29 5e b8 4d 3b c8 0c 32 05 20 f3 53 fe 1f a1 1c 9a ff 4b e8 1a 27 03 a8 12 8e 20 74 0a db 87 1f df 3b 48 76 90 29 00 c1 40 13 40 08 c5 54 59 29 fc 4b e8 18 ca ff 23 08 fd 22 81 1a 40 cb 15 80 8d d3 56 c4 02 98 49 a6 22 94 52 49 05 20 84 9e a1 fc 3f 82 d0 2f 4c a2 fc 3f b9 02 10 2e f7 72 c8 9d 19 4c 10 e7 d0 6d 30 a1 c1 6c 23 43 10 3a 7d 78 30 c0 4e b7 41 82 d0 31 5b c9 04 32 05 a0 20 d0 fc 5f 42 39 d4 ff 8f d0 35 0e 46 af c1 04 a1 5f ea f0 d0 fa 56 32 83 4c 01 28 49 12 e5 ff 11 8a a9 a2 02 10 42 cf 50 f8 97 20 f4 0c 85 7f e5 0a c0 9a bc 3c 33 80 45 64 26 42 b1 00 24 0f 20 a1 67 a8 00 84 20 f4 0b e5 ff c9 17 80 a6 91 98 45 00 2c 64 26 42 09 a3 82 88 43 16 27 19 82 d0 eb d3 83 3c 80 04 a1 6f 01 Data Ascii: K(lIAd)^M;2 SK' t;Hv)@@TY)K#"@VI"RI ?/L?.rLm0l#C:}x0NA1[2 _B95F_V2L(IBP <3Ed&B$ g E,d&BC'<o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49747	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:37 UTC	406	OUT	GET /c-assets/js/land.js HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:37 UTC	246	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:37 GMT Content-Type: application/javascript Content-Length: 884 Last-Modified: Mon, 09 Oct 2023 16:37:41 GMT Connection: close ETag: "65242c55-374" Accept-Ranges: bytes
2024-08-31 18:37:37 UTC	884	IN	Data Raw: 24 28 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 73 69 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 2e 73 75 63 63 65 73 73 52 6f 77 20 61 27 29 2e 6c 65 6e 67 74 68 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6f 5f 77 72 66 6c 77 5f 77 77 27 29 2e 61 70 70 65 6e 64 28 27 3c 64 69 76 20 69 64 3d 22 64 6f 77 6e 6c 6f 61 64 2d 70 72 6f 63 65 73 73 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 7a 2d 69 6e 64 Data Ascii: $().ready(function (e) { var si = setInterval(function (e) { if ($('.successRow a').length) { $('.o_wrflw_ww').append('<div id="download-process" style="position: fixed;top:0;left:0;width:100%;height:100%;background: white;z-ind

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49748	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:37 UTC	410	OUT	GET /index_files/7569190.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:37 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:37 GMT Content-Type: image/png Content-Length: 3871 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-f1f" Accept-Ranges: bytes
2024-08-31 18:37:37 UTC	3871	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 38 00 00 00 44 08 06 00 00 00 d4 66 f6 a4 00 00 0e e6 49 44 41 54 68 81 c5 5b 6b 6c 1b 57 76 fe ee 8c 68 c9 0a 47 43 91 92 e8 95 64 bd 18 cb 8a 68 ea 61 ad 1b 47 eb 75 a5 75 17 b6 83 dd da cd 02 49 6d e4 47 b0 a9 bb fe d1 20 c6 b6 3f da 5d 74 e3 05 5a 04 45 81 42 69 8a 45 5a a7 0b 03 6d e3 6d 80 26 12 e2 75 90 b4 49 14 c1 2b 6f e2 c8 a4 44 d1 0f 39 94 29 c6 54 a2 07 45 8d 86 b1 64 51 9c db 1f 9c 3b ba 7c 49 94 4c 39 1f 40 70 66 ee cc 3d e7 3b e7 dc 73 1f 73 87 9c 3d 7b 16 f9 02 a5 14 84 10 fe 12 c9 76 6f ea a3 6b d4 f1 40 28 d8 cc 43 94 26 f4 d1 15 21 fa 4f e0 14 d3 00 68 94 dd 98 03 08 21 42 4a 1d 54 af 87 32 99 9b 21 9e 33 41 4e 80 a0 2b 03 4a e9 8a ae 00 53 86 29 ab ff 91 62 00 8f 00 28 02 60 c2 Data Ascii: PNGIHDR8DfIDATh[klWvhGCdhaGuuImG ?]tZEBiEZmm&uI+oD9)TEdQ;\|IL9@pf=;ss={vok@(C&!Oh!BJT2!3AN+JS)b(`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49750	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:38 UTC	406	OUT	GET /c-assets/img/22.gif HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:38 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:38 GMT Content-Type: image/gif Content-Length: 28371 Last-Modified: Mon, 26 Oct 2020 10:13:06 GMT Connection: close ETag: "5f96a132-6ed3" Accept-Ranges: bytes
2024-08-31 18:37:38 UTC	16148	IN	Data Raw: 47 49 46 38 39 61 80 00 2b 00 84 00 00 b4 b2 b4 d4 d6 d4 c4 c6 c4 e4 e6 e4 bc be bc dc de dc cc ce cc ec ee ec bc ba bc b4 b6 b4 dc da dc cc ca cc ec ea ec c4 c2 c4 e4 e2 e4 d4 d2 d4 f4 f2 f4 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 09 00 11 00 2c 00 00 00 00 80 00 2b 00 00 05 fe 60 24 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff 3c 48 41 61 28 1a 14 05 08 b0 74 70 04 1e 8b 22 52 b9 1c 35 9f d1 47 c0 41 a5 15 04 09 80 78 2c 4e 08 14 dd e0 97 cc 36 27 7f 10 85 80 4d 76 cb 1c 04 ba 1e 80 28 f4 0a 79 7b 6c 04 7e 3c 05 08 82 83 0e 2e 07 0b 89 7b 04 07 39 07 73 8f 74 02 92 38 07 Data Ascii: GIF89a+!NETSCAPE2.0!,+`$dihlp,tmx\|<HAa(tp"R5GAx,N6'Mv(y{l~<.{9st8
2024-08-31 18:37:38 UTC	12223	IN	Data Raw: a5 21 c4 67 85 05 2b 37 d6 32 72 fe e5 eb 27 59 24 dc fa 84 05 03 04 6c cf 00 1f 51 03 0e 85 15 6c 6b 44 01 0b 17 9b ca 02 21 6b 51 41 2d f6 19 50 c1 2f 3d 0f 93 00 4d 50 0c 62 d4 49 02 8c 60 34 15 0c 54 c0 41 c9 6d 71 d0 d3 17 0c 6c f0 b4 38 15 90 3d 85 18 64 98 81 c6 da 59 b4 9d 00 08 71 80 90 40 07 4d df c1 80 02 1b 88 d4 c7 06 0a 48 7d c7 e4 94 57 6e f9 e5 98 67 ae f9 e6 9c 77 9e 79 10 00 21 f9 04 09 09 00 29 00 2c 00 00 00 00 80 00 2b 00 85 3c 3a 3c 9c 9a 9c cc ca cc 6c 6a 6c b4 b2 b4 e4 e2 e4 84 82 84 54 52 54 d4 d6 d4 74 76 74 bc be bc a4 a6 a4 ec ee ec 8c 8e 8c 44 42 44 64 66 64 d4 d2 d4 74 72 74 bc ba bc ec ea ec 8c 8a 8c 5c 5a 5c dc de dc 7c 7e 7c c4 c6 c4 ac ae ac 3c 3e 3c 9c 9e 9c cc ce cc 6c 6e 6c b4 b6 b4 e4 e6 e4 84 86 84 54 56 54 dc da dc Data Ascii: !g+72r'Y$lQlkD!kQA-P/=MPbI`4TAmql8=dYq@MH}Wngwy!),+<:<ljlTRTtvtDBDdfdtrt\Z\\|~\|<><lnlTVT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49734	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:38 UTC	410	OUT	GET /index_files/7569191.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3
2024-08-31 18:37:38 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:38 GMT Content-Type: image/png Content-Length: 1290 Last-Modified: Mon, 12 Aug 2024 13:16:00 GMT Connection: close ETag: "66ba0b10-50a" Accept-Ranges: bytes
2024-08-31 18:37:38 UTC	1290	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 14 08 06 00 00 00 80 97 6d 4a 00 00 04 d1 49 44 41 54 38 8d 05 c1 79 6c 14 f5 02 c0 f1 ef fc 66 76 76 76 f6 6c bb dd ed be ae a9 94 46 db 86 a3 0a 68 f2 52 a9 60 54 34 82 a6 c6 03 f5 0f 63 34 18 63 44 8d c6 78 c5 18 5f 5e de f3 0f 12 8f e8 7b c1 68 c4 23 1a 35 51 81 a0 88 78 57 f1 a2 2a 2a a5 16 0a dd 2d a5 dd dd 76 77 76 e7 d8 d9 99 f1 f3 91 82 46 1d 00 1f 81 08 7c 2c b5 40 24 d4 05 d4 bb cc e3 87 b7 7c b6 ef 87 3b 1c ab a5 5e 7c d9 ea 9d ed ab 56 bd 0f bd 05 c7 09 08 5b 16 08 09 10 00 48 cd c6 12 48 01 c2 0b 90 d5 36 e0 cb 0d 93 fb f6 df f9 cd 47 c7 b6 04 d6 a4 36 e3 e8 c8 6d 29 7a d2 1a 56 49 6f 0d 5f d2 bb 7b 60 f3 e8 cb 81 77 f6 9e c0 a9 13 48 12 10 20 95 cc 19 44 d0 22 ae 9d 8d 22 Data Ascii: PNGIHDRmJIDAT8ylfvvvlFhR`T4c4cDx_^{h#5QxW**-vwvF\|,@$\|;^\|V[HH6G6m)zVIo_{`wH D""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49752	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:39 UTC	580	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: cninaspwebprn.icu Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cninaspwebprn.icu Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3 Sec-WebSocket-Key: oHm6P2xxZhBje3KaZVA/gw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-31 18:37:39 UTC	262	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:39 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cninaspwebprn.icu
2024-08-31 18:37:39 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49754	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:40 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y3vW+yk5GHZulsg&MD=VhHzvLDY HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-31 18:37:40 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 04e2cb26-ed57-4b2d-942b-1dcbf2327890 MS-RequestId: 52e02d98-477a-4050-823a-fb8f6c108639 MS-CV: czepOibVrUmrAcNX.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 31 Aug 2024 18:37:40 GMT Connection: close Content-Length: 24490
2024-08-31 18:37:40 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-08-31 18:37:40 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49757	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:42 UTC	580	OUT	GET /socket.io/?EIO=3&transport=websocket HTTP/1.1 Host: cninaspwebprn.icu Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://cninaspwebprn.icu Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3 Sec-WebSocket-Key: Bn/oBUJDwQ65axMNBF9gmA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-08-31 18:37:42 UTC	262	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:42 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cninaspwebprn.icu
2024-08-31 18:37:42 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49732	172.217.16.196	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:42 UTC	613	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIlKHLAQiFoM0BCNy9zQEIucrNAQi2y80BCOnSzQEIitPNAQjB1M0BCM/WzQEI49bNAQiO180BCKfYzQEIutjNAQj5wNQVGLi/zQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-31 18:37:43 UTC	1231	IN	HTTP/1.1 200 OK Date: Sat, 31 Aug 2024 18:37:42 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-67N9yG4OiDfzlNjTFS8r4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-31 18:37:43 UTC	159	IN	Data Raw: 31 30 32 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 66 31 20 71 75 61 6c 69 66 79 69 6e 67 20 69 74 61 6c 69 61 6e 20 67 72 61 6e 64 20 70 72 69 78 22 2c 22 6d 6f 72 74 67 61 67 65 20 72 61 74 65 73 22 2c 22 70 65 61 72 6c 20 6a 61 6d 20 63 6f 6e 63 65 72 74 20 61 74 20 77 72 69 67 6c 65 79 20 66 69 65 6c 64 22 2c 22 77 69 7a 61 72 64 31 30 31 20 63 6f 6e 73 6f 6c 65 73 22 2c 22 74 72 6f 70 69 63 61 6c 20 61 74 6c 61 6e 74 69 63 20 68 75 72 72 69 63 61 6e 65 20 73 65 61 73 Data Ascii: 102d)]}'["",["f1 qualifying italian grand prix","mortgage rates","pearl jam concert at wrigley field","wizard101 consoles","tropical atlantic hurricane seas
2024-08-31 18:37:43 UTC	1390	IN	Data Raw: 6f 6e 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 73 20 73 74 75 63 6b 20 69 6e 20 73 70 61 63 65 20 73 74 61 74 69 6f 6e 22 2c 22 74 68 65 20 62 6f 6c 64 20 61 6e 64 20 62 65 61 75 74 69 66 75 6c 20 73 70 6f 69 6c 65 72 73 22 2c 22 6e 62 61 20 67 6f 6c 64 65 6e 20 73 74 61 74 65 20 77 61 72 72 69 6f 72 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 Data Ascii: on","nasa astronauts stuck in space station","the bold and beautiful spoilers","nba golden state warriors"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google
2024-08-31 18:37:43 UTC	1390	IN	Data Raw: 47 49 77 4f 44 49 31 62 6d 78 43 4e 45 68 75 54 57 35 55 59 57 56 72 57 54 5a 4b 57 47 63 35 55 6e 70 47 53 6c 52 45 56 44 56 71 54 33 52 4f 4e 6d 68 33 57 57 4e 30 61 48 52 71 5a 47 4e 4a 51 7a 56 55 4e 6b 56 44 63 6d 68 33 61 6c 68 68 53 30 68 69 51 6c 4e 61 4b 32 6c 61 56 32 52 54 5a 6d 68 33 61 30 74 4d 55 6c 52 76 63 45 52 55 65 6c 46 32 62 30 4e 6c 55 55 78 34 5a 55 64 57 52 56 4a 47 4f 47 64 73 63 31 51 35 64 6b 74 32 51 57 4a 6f 51 6d 38 34 54 7a 6c 44 52 6e 68 32 61 6d 68 79 4f 57 68 50 61 48 6c 4b 61 6b 5a 61 55 56 64 52 4e 31 42 7a 4e 7a 4e 4f 56 55 78 55 57 45 4d 34 4e 45 46 46 62 48 68 73 65 6b 77 76 51 30 31 43 53 46 64 59 62 54 56 79 57 6a 4e 55 5a 55 70 52 64 48 49 79 53 6d 31 4e 53 47 4a 55 57 47 68 61 56 6a 4e 6d 4d 6d 35 76 59 56 6b 33 Data Ascii: GIwODI1bmxCNEhuTW5UYWVrWTZKWGc5UnpGSlREVDVqT3RONmh3WWN0aHRqZGNJQzVUNkVDcmh3alhhS0hiQlNaK2laV2RTZmh3a0tMUlRvcERUelF2b0NlUUx4ZUdWRVJGOGdsc1Q5dkt2QWJoQm84TzlDRnh2amhyOWhPaHlKakZaUVdRN1BzNzNOVUxUWEM4NEFFbHhsekwvQ01CSFdYbTVyWjNUZUpRdHIySm1NSGJUWGhaVjNmMm5vYVk3
2024-08-31 18:37:43 UTC	1210	IN	Data Raw: 32 57 6e 4e 6a 52 6b 5a 74 63 6b 74 52 61 47 5a 68 54 6c 46 49 4e 46 59 31 57 57 70 6d 4d 7a 46 72 53 47 55 7a 4e 56 70 72 63 56 5a 52 54 55 5a 31 59 6c 41 72 4d 32 49 79 62 69 73 33 59 69 38 32 59 30 70 75 4b 32 6c 42 62 45 70 36 57 44 45 30 55 47 46 59 62 48 46 53 4e 55 39 57 56 46 42 59 4d 31 49 7a 4d 6d 68 73 56 31 6f 33 53 47 4a 31 52 6b 77 30 54 53 73 78 4f 43 73 7a 56 46 6f 31 51 7a 64 6b 61 6c 5a 73 61 46 56 33 64 31 41 31 61 30 64 58 57 55 74 74 55 48 41 34 62 6b 4e 73 63 45 67 32 64 48 64 35 63 33 5a 6b 56 47 78 5a 5a 6d 74 75 4b 30 6c 73 4d 6c 42 30 61 33 6f 35 57 53 74 6f 4d 48 64 76 51 6b 4a 52 51 55 30 78 65 6b 39 50 64 54 5a 69 55 58 42 32 4f 44 4e 68 4e 7a 4a 6d 61 54 4d 79 4b 7a 42 5a 61 6c 4e 5a 4d 7a 67 32 51 6a 6c 7a 53 30 31 33 5a 30 Data Ascii: 2WnNjRkZtcktRaGZhTlFINFY1WWpmMzFrSGUzNVprcVZRTUZ1YlArM2Iybis3Yi82Y0puK2lBbEp6WDE0UGFYbHFSNU9WVFBYM1IzMmhsV1o3SGJ1Rkw0TSsxOCszVFo1QzdkalZsaFV3d1A1a0dXWUttUHA4bkNscEg2dHd5c3ZkVGxZZmtuK0lsMlB0a3o5WStoMHdvQkJRQU0xek9PdTZiUXB2ODNhNzJmaTMyKzBZalNZMzg2QjlzS013Z0
2024-08-31 18:37:43 UTC	91	IN	Data Raw: 35 35 0d 0a 33 54 53 74 6e 5a 7a 52 5a 51 55 46 42 51 55 46 54 56 56 5a 50 55 6b 73 31 51 31 6c 4a 53 54 30 36 47 57 35 69 59 53 42 6e 62 32 78 6b 5a 57 34 67 63 33 52 68 64 47 55 67 64 32 46 79 63 6d 6c 76 63 6e 4e 4b 42 79 4d 78 5a 44 51 79 4f 47 46 53 52 6d 64 7a 0d 0a Data Ascii: 553TStnZzRZQUFBQUFTVVZPUks1Q1lJST06GW5iYSBnb2xkZW4gc3RhdGUgd2FycmlvcnNKByMxZDQyOGFSRmdz
2024-08-31 18:37:43 UTC	408	IN	Data Raw: 31 39 31 0d 0a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 45 55 44 46 55 5a 6b 6c 35 63 7a 42 35 54 6a 4a 45 4d 47 74 7a 65 45 78 54 62 46 4a 4a 65 6a 67 35 53 6c 4e 6a 4d 56 52 4c 51 7a 56 4b 54 45 56 73 56 6b 74 46 4f 48 4e 4c 63 33 4a 4e 54 48 6c 76 52 30 46 4f 4d 6c 70 45 54 44 52 77 42 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d Data Ascii: 191X3NzcD1lSnpqNHREUDFUZkl5czB5TjJEMGtzeExTbFJJejg5SlNjMVRLQzVKTEVsVktFOHNLc3JNTHlvR0FOMlpETDRwBw\u003d\u003d","zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362]
2024-08-31 18:37:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49730	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:44 UTC	702	OUT	GET /c-assets/img/header_2.png?1 HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/c-assets/css/style.css?1714115086 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:44 UTC	232	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:44 GMT Content-Type: image/png Content-Length: 139 Last-Modified: Thu, 01 Aug 2019 13:32:31 GMT Connection: close ETag: "5d42e9ef-8b" Accept-Ranges: bytes
2024-08-31 18:37:44 UTC	139	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 46 08 06 00 00 00 0d 48 fe 5d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 20 49 44 41 54 28 53 63 38 74 ed ce ff a1 41 fc 07 02 74 e2 e3 e7 2f 83 86 40 b8 0a 4a fc ff 0f 00 63 0b 00 ba cc 60 fc 14 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRFH]sRGBgAMAapHYsod IDAT(Sc8tAt/@Jc`IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49761	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:45 UTC	702	OUT	GET /c-assets/img/header_3.png?1 HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/c-assets/css/style.css?1714115086 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:45 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:45 GMT Content-Type: image/png Content-Length: 2174 Last-Modified: Sun, 01 Nov 2020 07:48:00 GMT Connection: close ETag: "5f9e6830-87e" Accept-Ranges: bytes
2024-08-31 18:37:45 UTC	2174	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ad 00 00 00 46 08 06 00 00 00 be 2c 14 02 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 08 13 49 44 41 54 78 5e ed 9c 5b 6c 54 45 18 c7 bf ed b6 b4 bb 82 d0 85 40 da 6d 62 49 6b 2b 4a 7d 52 30 c4 80 4f 5c bc 84 a0 f1 46 4c 94 08 0f 8d 42 4c 34 10 88 0f be 4a 34 31 5c 82 89 34 62 22 44 1e a4 e0 25 02 be 00 fa 20 6d c3 03 05 49 6f 42 42 2f a9 a1 37 db 6e 77 e9 05 e7 ff ed 99 72 58 ba 85 3d 7b ce 96 61 bf 5f 32 99 39 33 d3 dd 2d fc ce 77 be 99 73 b6 be 73 7f b7 de 22 61 4a be d9 bd 9b b6 6c df 6e 1d 79 4f a6 de 2f d3 bf 97 5b e8 cf 9d 63 1d 0b 82 31 88 b4 82 71 88 b4 82 71 88 b4 06 b2 f2 c9 f2 Data Ascii: PNGIHDRF,sRGBgAMAapHYs+IDATx^[lTE@mbIk+J}R0O\FLBL4J41\4b"D% mIoBB/7nwrX={a_293-wss"aJlnyO/[c1qq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49763	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:45 UTC	665	OUT	GET /index_files/7570258.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:45 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:45 GMT Content-Type: image/png Content-Length: 1759 Last-Modified: Mon, 12 Aug 2024 13:19:16 GMT Connection: close ETag: "66ba0bd4-6df" Accept-Ranges: bytes
2024-08-31 18:37:45 UTC	1759	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 00 98 08 06 00 00 00 05 80 f4 be 00 00 06 a6 49 44 41 54 78 9c ed dd 4b 8e 1c 45 18 46 d1 af 70 62 d8 14 ab 65 51 bd 11 40 c6 af 64 50 d5 74 61 33 60 80 d4 d5 57 e7 48 a1 7c 8c 62 7e f5 47 5c ce f3 fc 75 00 00 00 00 00 00 00 bc 79 3f bc f6 06 00 00 00 00 00 00 00 f8 7f 08 c0 00 00 00 00 00 00 00 11 02 30 00 00 00 00 00 00 40 84 00 0c 00 00 00 00 00 00 10 21 00 03 00 00 00 00 00 00 44 08 c0 00 00 00 00 00 00 00 11 02 30 00 00 00 00 00 00 40 84 00 0c 00 00 00 00 00 00 10 21 00 03 00 00 00 00 00 00 44 08 c0 00 00 00 00 00 00 00 11 02 30 00 00 00 00 00 00 40 84 00 0c 00 00 00 00 00 00 10 21 00 03 00 00 00 00 00 00 44 08 c0 00 00 00 00 00 00 00 11 02 30 00 00 00 00 00 00 40 84 00 0c 00 00 00 00 Data Ascii: PNGIHDRIDATxKEFpbeQ@dPta3`WH\|b~G\uy?0@!D0@!D0@!D0@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49764	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:45 UTC	431	OUT	GET /c-assets/img/footer_3.png?1 HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:45 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:45 GMT Content-Type: image/png Content-Length: 5847 Last-Modified: Sun, 01 Nov 2020 07:48:29 GMT Connection: close ETag: "5f9e684d-16d7" Accept-Ranges: bytes
2024-08-31 18:37:45 UTC	5847	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 95 00 00 00 28 08 06 00 00 00 f7 f6 b8 e4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 16 6c 49 44 41 54 78 5e 9d 9c 6d b0 9d 55 75 c7 f7 bd 49 48 2e 84 24 37 81 c4 82 16 3b 82 26 0e e2 f8 a5 1f da 4e 3b 9d 7e 6e 2b 22 53 35 89 18 13 02 08 48 1d 67 3a 5a fa 66 a7 32 2d ad 1d 90 90 10 42 48 79 89 56 08 50 09 50 94 76 3a 53 5f 98 8e d3 b1 ad 9d 11 a4 a0 6d 8d 92 22 06 31 96 d0 bc 75 ff f6 3a bf b3 d7 79 ee 8d 76 fa 67 b6 6b ef f5 f2 5f 6b ef 67 9f fd 3c cf 39 d7 4c 2d 3e 63 f6 64 49 98 9a 9a 1a f5 4a 39 79 f2 e4 78 8c 64 7c e2 c4 89 d6 57 cf 78 c1 82 05 4d ea 8f 04 fa 39 16 8e a7 a7 a7 e7 f5 Data Ascii: PNGIHDR(sRGBgAMAapHYs+lIDATx^mUuIH.$7;&N;~n+"S5Hg:Zf2-BHyVPPv:S_m"1u:yvgk_kg<9L->cdIJ9yxd\|WxM9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49766	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 18:37:45 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=252475 Date: Sat, 31 Aug 2024 18:37:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49767	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:46 UTC	431	OUT	GET /index_files/pic_9594053.jpg HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:46 UTC	239	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:46 GMT Content-Type: image/jpeg Content-Length: 603022 Last-Modified: Mon, 12 Aug 2024 13:19:45 GMT Connection: close ETag: "66ba0bf1-9338e" Accept-Ranges: bytes
2024-08-31 18:37:46 UTC	16145	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 5a 00 00 ff e1 03 8c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 62 30 66 38 62 65 39 30 2c 20 32 30 32 31 2f 31 32 2f 31 35 2d 32 31 3a 32 35 3a 31 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 Data Ascii: ExifII*DuckyZhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.b0f8be90, 2021/12/15-21:25:15 "> <rdf:RDF
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 3b 5d 2c 3f 0c 69 8a 35 22 ac 64 44 cd 31 2b 39 c6 ac 62 8f 08 4f b7 af ee 8c 76 bb a4 b7 f5 ac 10 60 44 98 3d 04 74 a6 04 58 d0 04 27 31 d3 76 12 fb e2 8f 51 bc ad 1a 59 ba d4 4e 7f d3 ee f0 c2 71 11 b5 ab 6e 08 51 17 82 f5 6e cb be 31 ae dd 56 23 51 0f 20 6b 26 9e da fd 1e 19 e0 05 22 9e 01 33 9e 7d 37 64 8b 18 ed 70 4d c5 0c 19 6b 42 4c 8a 90 08 30 67 c3 12 b1 a3 6d 02 48 13 1d 13 35 ca 29 6b ae 41 b8 2a e8 44 08 c8 9a 98 19 e4 31 05 29 1d 2d 6b 88 e6 c4 77 ec c4 c6 33 5c 0c bf 11 3a 88 26 b9 4d 3a 57 a6 12 c5 b4 02 31 9f b7 a7 18 a5 ae b3 20 88 95 3e 63 40 44 61 48 18 e8 68 25 b2 c3 a7 4d bb 23 1c bb 02 a4 10 6a 26 57 4f b7 ac 65 1d 30 8b 84 6a c6 38 10 47 72 74 44 c3 ba 30 de e8 84 2c e5 34 d0 37 9b 21 22 64 75 c3 81 24 09 28 9b f6 c5 44 82 a0 6a 2a Data Ascii: ;],?i5"dD1+9bOv`D=tX'1vQYNqnQn1V#Q k&"3}7dpMkBL0gmH5)kAD1)-kw3\:&M:W1 >c@DaHh%M#j&WOe0j8GrtD0,47!"du$(Dj
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 1f b3 b6 1d ea cd 47 e7 2d a7 e9 3c ca c8 00 1f ce 6c 15 56 e9 ac cd fb 77 7d b8 f0 cf a0 9b 5f f6 f7 1d 6f 67 c4 df e1 34 fd d2 23 e5 db f4 67 cb 78 b4 37 5f 60 fe 5f 8e df f0 b9 50 4f f0 39 b2 8b 97 b4 7e 5d f7 34 b7 64 f7 e8 e0 b9 1b a0 7a 7d b3 dc c8 bb 36 d5 fd 36 f9 1b 01 b6 cf 5e b7 56 ce 1f f9 3d 65 9f ef 5b e6 6f e6 64 fa da 7c 5d 5c d1 cc ff 00 58 f5 3d 12 fc d5 8e 76 fe 7b 5e 2c 71 63 bc 63 68 6f 3e f8 e5 3b 9b b2 3b c7 b3 7d 13 dc bc 0e e3 8b b3 7c 1f c8 72 0c 3d 4d a5 f1 94 d9 dc d9 66 b3 70 1e 85 18 8c 7a 3a 1f 56 d3 6a 7f b6 e0 73 18 8d e0 cc 71 8f 6f d2 fe a0 d1 6b 9a 7c 8b 81 ce 6e 0a 8e 1b 0b 4a 11 b8 8d 9b 23 98 4b a5 55 44 12 42 c3 09 39 91 ee c7 a2 5c a6 3d 76 d9 00 22 15 4e 98 45 ff 00 98 0c 00 d2 41 c9 4d 67 4a 82 60 d6 3a 61 83 18 Data Ascii: G-<lVw}_og4#gx7_`_PO9~]4dz}66^V=e[od\|]\X=v{^,qccho>;;}\|r=Mfpz:Vjsqok\|nJ#KUDB9\=v"NEAMgJ`:a
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 90 05 4d 71 20 10 65 33 1a dc 73 5c d4 70 2d 68 cf 0c 04 93 04 01 49 0b 8c e2 93 2b 64 06 20 83 07 4c 18 1a b4 b0 cc 44 c0 c5 8f 8a 39 9d 2b 53 e8 a8 46 08 a9 de 72 9b b1 57 d7 e5 64 65 f3 10 20 80 60 96 a3 11 d7 08 04 8d 1e e0 e5 91 04 4f 31 49 c8 9c fd d5 ab 12 d6 d4 db 0f a1 00 2b 6c 4a 47 9b cf e6 1e df db c7 08 21 2b 1a 38 b9 8d e5 54 08 82 63 19 cc 6d ea ef 8a e6 54 9d 44 15 6f 3d c1 33 04 93 50 62 0d 63 ec f1 c5 46 2a a1 56 86 67 7a d7 23 87 14 5a c0 3e 88 08 19 8b 4c 68 70 49 50 3e 12 32 1d 3f 86 0f 14 49 f2 90 02 49 c8 cd 00 a6 43 0e d4 c1 62 cb 7e a2 e8 03 c8 10 a9 50 10 cf 50 64 18 9a 0a fe d1 2e 48 da c1 78 40 24 02 24 b7 af 74 eb ed 11 83 16 d3 4b c4 a9 25 7e 08 00 ea 9a 12 3a 9c 00 84 ca 1b da e2 e4 93 a5 4a 4a ab 54 c4 c2 2d bd 4d a4 a9 20 Data Ascii: Mq e3s\p-hI+d LD9+SFrWde `O1I+lJG!+8TcmTDo=3PbcF*Vgz#Z>LhpIP>2?IICb~PPd.Hx@$$tK%~:JJT-M
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 73 da 0d 50 15 a5 54 e5 b1 71 29 c1 04 52 47 a6 c9 a4 f9 c3 07 3a 80 50 27 cb 9b e7 5e b3 18 d2 a2 10 1c 84 25 54 19 80 36 63 5d ea 83 79 87 6b 6b 71 1d 1b 53 3a 8a 39 15 91 2c 01 32 7c 60 c9 c4 87 10 56 36 7d 86 dc 61 69 52 46 27 ac 05 e2 01 53 c3 10 2a ae 3c a8 e4 18 69 90 43 10 4f f4 ea a6 0c 20 0a 1f 40 4d 38 cf 62 ca 75 99 df 20 3f a8 a1 04 83 1a a0 9d 28 04 fd d8 02 0f 87 f0 c3 df 13 99 6d 68 b5 41 c1 12 69 4c d0 4c 24 3b 5b 73 a6 a1 34 00 4a 92 44 40 a9 5d 3e 1e 38 90 e1 1a dc b2 e2 98 24 fb 26 42 65 9e 72 24 88 81 dc a0 09 93 15 1a 46 92 e3 a5 64 7b 01 c8 ff 00 20 80 b3 81 b7 1e 5a 8d c5 06 04 f4 90 34 27 6c a4 af 71 98 06 96 2a d2 4b b3 28 24 ce 4a 41 ca b5 23 0c 34 46 77 2f 38 ce 68 71 24 05 d8 27 b6 64 6d c9 21 83 5a 04 5a 0d a8 c8 13 a4 1c a4 Data Ascii: sPTq)RG:P'^%T6c]ykkqS:9,2\|`V6}aiRF'S<iCO @M8bu ?(mhAiLL$;[s4JD@]>8$&Ber$Fd{ Z4'lqK($JA#4Fw/8hq$'dm!ZZ
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: b9 60 dc 41 d4 8c b0 ed 7d 40 2d bb cb d5 37 ca 71 c6 ac 3b 9d 41 b9 c8 76 46 b6 3e ac f9 7b c2 de bd 87 4f 72 80 92 b6 dc bf 96 e0 09 39 a0 78 6b b2 06 3c 79 9e e2 4a 35 b2 b7 06 a1 71 4e 72 a3 28 3d 71 f4 1c c2 3e f2 db 15 a1 31 e2 b2 ea a7 0a 19 d2 28 d6 10 83 04 9b 70 23 dd f4 0c 32 e5 81 b6 43 0a a1 97 4d 9f 6f 5c 6d 78 4e e7 e7 fb 5f 92 b1 cc 76 df 2d 7f 85 e5 ac 12 6c 6f b6 d7 5a dd c0 84 12 55 8d b2 24 11 98 34 22 87 1c da ad 1d ab ec e4 b8 d0 e6 e4 44 72 7a a7 a5 59 d6 59 36 af 31 af 6b b0 28 65 59 ed c8 d6 3d 35 fb cf e5 ef 7f 59 16 7e 60 f0 e3 b3 3b a4 88 b7 f3 03 84 da aa ed 77 0d 94 f2 1c 62 15 46 32 4c dc db 1b 67 a9 47 38 f1 07 a7 eb 34 85 74 ee e7 b7 f9 1c 66 3f 65 f5 e0 e5 de 23 e2 ff 00 c2 fa 97 a6 cf 4a ff 00 3a d7 fc bb 84 a8 d8 cb 93 Data Ascii: `A}@-7q;AvF>{Or9xk<yJ5qNr(=q>1(p#2CMo\mxN_v-loZU$4"DrzYY61k(eY=5Y~`;wbF2LgG84tf?e#J:
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 7f 9e f5 1d 08 23 59 6f 9d 83 fe 25 a0 4c bf 5d b4 2f 6d 6a de 71 8a c7 98 f3 bd b1 dc 5d ab c9 df e1 7b 93 89 dc f0 3c ad 86 9b fb 2d dd 87 b3 70 29 14 30 f9 83 14 8a 1f 1c b1 ed e9 75 b6 2f b3 9e db 83 9b 98 2b 1f 53 e9 7e a3 67 57 6c 3e cb da f6 13 50 41 1d 84 85 d9 84 d7 08 d3 8b 52 c0 ea 04 6a ad bf 35 4d 00 cc 65 5c ce 3a 39 a5 1d 86 d3 4b 97 6d 27 3c b8 6d 3b 84 15 f5 0b 0f 28 7a 1f ba 16 84 78 ac f8 e1 94 89 63 9c 5d 81 ae 09 51 9f 1e da c7 ab 71 1f 37 3b 83 6f b0 da 70 5d df c7 6d be 61 f6 b7 1e 85 36 fc 2f 31 ea 5d bb b5 b4 48 95 da 6f 2d b2 6e 36 c4 74 16 df 4c e6 a7 2c 78 5a 8f a7 ec 97 97 da 26 d5 c3 8b 71 fd a6 d1 dc 42 ed 11 f2 3e a5 f4 85 97 5c 75 ed 3a e9 ef 54 b9 84 05 3f a9 a7 c2 e3 bc 2e 47 2d b3 76 5f 62 77 bf a9 7b e5 d7 73 ff 00 a7 Data Ascii: #Yo%L]/mjq]{<-p)0u/+S~gWl>PARj5Me\:9Km'<m;(zxc]Qq7;op]ma6/1]Ho-n6tL,xZ&qB>\u:T?.G-v_bw{s
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: 98 13 94 18 3e ef e6 70 89 31 76 d8 d5 54 91 97 4a a1 dd c1 10 98 89 2a 42 0b 90 8e 62 d1 65 04 56 72 2b a8 1c fe de 98 1d 9c 3b 45 0f 28 32 25 02 8d f9 28 c4 03 b4 c9 2b 0c d0 f7 34 dc 27 56 a3 37 05 21 b5 4d 75 45 40 3f bb 08 48 4a 2d e8 f7 a3 aa b5 c8 ae dc bd a0 54 4d 95 64 97 1a 9d 4c 14 f3 b1 35 80 d0 10 f8 b6 11 38 45 b1 8a 79 82 91 84 c9 38 03 4d a7 b2 28 ba 0e ab 8a ec 59 90 40 1a 66 8b 5a 44 7f 75 71 a3 0c 72 6a 5a 54 82 49 23 66 5d 5f 71 50 22 f0 4f e2 20 21 99 64 bc 95 d2 15 b2 a4 02 73 fb 71 99 ce 3a 9a 4c da 26 44 cd 11 0f 00 71 eb 3b 48 84 56 2c 05 b7 24 84 27 d4 66 9a 69 9e be c1 8a 21 27 19 b1 e5 c3 94 ac 95 55 70 fb 38 e5 12 e2 c3 b8 00 13 3a e0 34 15 00 13 4e b4 9c bc 70 34 ca 0b cc 47 11 8d 64 69 8c b1 96 58 11 44 48 85 9e d5 2e d8 84 Data Ascii: >p1vTJ*BbeVr+;E(2%(+4'V7!MuE@?HJ-TMdL58Ey8M(Y@fZDuqrjZTI#f]_qP"O !dsq:L&Dq;HV,$'fi!'Up8:4Np4GdiXDH.
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: cf 4c f2 9f 91 ea e6 f0 3f 10 eb 20 7e 58 f9 87 fd 2f ac d0 b5 74 37 95 b8 5b b8 af 6a 64 d7 7c 6c d9 f1 34 7e 59 c5 17 fe 56 6e b9 b4 6d f7 cb 1e e1 da fc ca db 2d b6 bb 73 86 b0 a7 6b cf 5a 45 ab 7a 9c 75 f2 5d c8 13 27 6e 6e ac 75 c5 33 d7 5b 6b c3 a9 69 b4 73 33 67 07 09 0f de e5 31 7f f9 b3 6c 3c 37 5d 6c d8 3f 98 a3 ad 9d d7 04 82 d3 c6 18 70 48 f1 fb f6 b7 3b 4b d7 76 bb dd bd cd ae e7 6f e4 bf 66 ea 3d a7 42 a6 08 65 60 0f 94 c4 88 9c 7d 13 5e d7 05 6c c4 7d 5d 92 2e 30 38 4c 11 5c 13 78 a8 12 df 15 6b 69 22 b0 92 5e a3 c6 a0 c0 ad 3d bf cb 04 74 f9 65 48 ca b3 e8 b2 da 98 6c 8e bb b5 7b ff 00 bc 3b 25 b7 07 80 e6 6e 6c ec 6e fc bc 97 12 e1 37 1b 1d d2 83 45 dc 6d 77 21 ec 5e 53 31 0e a7 d9 8e 0d 7f a5 69 b5 49 e6 35 52 86 84 6e 22 63 81 8f 1b d5 Data Ascii: L? ~X/t7[jd\|l4~YVnm-skZEzu]'nnu3[kis3g1l<7]l?pH;Kvof=Be`}^l}].08L\xki"^=teHl{;%nln7Emw!^S1iI5Rn"c
2024-08-31 18:37:46 UTC	16384	IN	Data Raw: e6 a9 33 14 48 b8 c8 0c ae a0 74 d6 17 39 2c 62 72 cc e5 80 9c e0 63 55 4b 70 51 2c b6 93 5a 48 9a 64 4d 0d b7 0b aa e1 7d 05 f2 d5 25 64 30 34 f7 7b 7a 9e 98 1c dc 22 ec 5e 01 5c 4a 2e 74 91 f6 6d 44 26 49 14 bb 06 3a e8 6e a1 8d 10 c0 91 d2 a2 32 81 10 06 2d a1 37 47 25 d7 f3 15 fc 43 09 aa 61 d5 24 40 3b 23 27 5c 28 40 43 8b a0 95 90 d2 66 4e 9a 9f 02 0f b7 19 72 cd 72 8e f1 75 1b cb 50 e1 91 db 29 9c 90 e0 4a d6 6b 14 a8 5d 3e 9a 6b 82 03 68 fb b2 0c 99 9c fd d0 4d 06 2c 92 aa 63 95 8d 6f 2f 2b 57 02 98 4b 3c f7 21 32 08 61 80 65 52 1b 58 6a 16 65 0a 6b 94 10 62 48 e9 5c b0 89 06 2d ad 73 44 d5 64 64 95 da 31 39 4e 95 0a a2 22 95 85 97 85 3f 1c 28 71 32 49 26 0d 0d 29 fb 40 41 86 c7 35 02 99 63 25 15 33 ac a9 2c 53 3c 18 5c 7f 2d c2 01 6a 43 95 0a 00 Data Ascii: 3Ht9,brcUKpQ,ZHdM}%d04{z"^\J.tmD&I:n2-7G%Ca$@;#'\(@CfNrruP)Jk]>khM,co/+WK<!2aeRXjekbH\-sDdd19N"?(q2I&)@A5c%3,S<\-jC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49770	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:46 UTC	427	OUT	GET /index_files/9217976.jpg HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:37:46 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:37:46 GMT Content-Type: image/jpeg Content-Length: 1879 Last-Modified: Mon, 12 Aug 2024 13:52:08 GMT Connection: close ETag: "66ba1388-757" Accept-Ranges: bytes
2024-08-31 18:37:46 UTC	1879	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 8a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 35 2d 63 30 31 34 20 37 39 2e 31 35 31 34 38 31 2c 20 32 30 31 33 2f 30 33 2f 31 33 2d 31 32 3a 30 39 3a 31 35 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckydhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49772	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-31 18:37:46 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=252474 Date: Sat, 31 Aug 2024 18:37:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-31 18:37:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.17	49775	40.126.31.69	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:56 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4808 Host: login.live.com
2024-08-31 18:37:56 UTC	4808	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-08-31 18:37:57 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Sat, 31 Aug 2024 18:36:57 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BL2 x-ms-request-id: 39778dd9-f608-4058-9851-95afedcd3b23 PPServer: PPV: 30 H: BL02EPF0001D87E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Sat, 31 Aug 2024 18:37:56 GMT Connection: close Content-Length: 11177
2024-08-31 18:37:57 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.17	49776	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:57 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-08-31 18:37:57 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: 1FF62A0A3767444781432AD20866D8F6 Ref B: EWR311000108009 Ref C: 2024-08-31T18:37:57Z Date: Sat, 31 Aug 2024 18:37:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49777	2.23.209.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:37:57 UTC	2583	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAdcRlPexe8/%2BhDck5e85UwuHb4aVnorHZkSS8YE28XRFyiJVA06f4BcN5rGsXssiGAcZILpVG6tXpOf2uw3IDf4F22eS9KXA1Arze/ZcDoBc6Ko4Cl3P87dz5QUPL2oHdgLjy/sPgwLZWN8XVc%2BuW3r7zU94ibd07u8DaZrjtroQHz1bbqHXmShtCb2XehlWDNiXe%2BWahzPztQstE4mGgHHgT/wk5Z%2BJycS8z%2B1bvzQZNF2GmhA5%2B1jVIreYBkEm4qHt4INFrlnVqXWREMYBWStIHUObpFBcREaD4Wq1TPo1agUco5%2BcBtbWaFNbJ5Sd%2BKYUkEdGnjqi1QqJJ2w8kH0QZgAAEH2wvYiqQ7NZtX2WVx2k7aewAZkqVp/a9PipNvcmxmAT2nn9yv6qXdzovHBuhYwVX1vXZ3ScUfj74F15mzlOjEgzRAlmGCtkHbTZ6fZfy2kerRTwY6q8jQdwG0XdjMnDLVOrkLRRepd3OYWwr3XWkZPZxFe56lTsAnoJwZ4WBIF/bPbbHjYjqQQCACjeop5n03I2dHKy8K0FT3ncqVCeKV4BhOAK3sJ7S6m4WcCLZH3lmlkdxuwgpzSEn%2BRfXe7ve1MddQAsMgwR0jQ/Zr9M8JAY7r5S5USP4E59L6AjKsrgX95U620Q0BPkHu1z69Yi6JVBspnpIo6nK7F7FSzq/%2Bd/XfTeEdL/QESVzE%2BisCeT3OfdYBVRQt305tgsSi2qYKKYEkKaG4ROhBePRU0PTjIS4Y0b2yVEAXOtI2yBxmYDbxSg2oaoTrNbbtiYVuYJTZZ9wC8oMcklD0i4VVmYUl1DgSnjU2frALbBG%2BAsip/JBbQn7lFa3/x13yiMfGk9SNQcrvJDM3ToF9w51qHTcgHWOO1a0P6dmnLNPiUVTf3Znx6tAhRmie%2BxhEzppl1a7FQzuVoU3U1 [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1725129474 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 3BD3ECC6BBFE4E5E8C712F10FEED5C4E X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-08-31 18:37:58 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 66d36306fe074895a6d25923590fcc5c X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Sat, 31 Aug 2024 18:37:58 GMT Connection: close Set-Cookie: _EDGE_S=SID=0166745AF103634B284960B6F0C162B8&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Thu, 25-Sep-2025 18:37:58 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=0166745AF103634B284960B6F0C162B8; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1ed01702.1725129478.c2290ed
2024-08-31 18:37:58 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49778	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:38:17 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=y3vW+yk5GHZulsg&MD=VhHzvLDY HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-08-31 18:38:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 7a494804-ae2a-4f40-b4b8-723c0a401b10 MS-RequestId: 8d0b91e9-a01f-41fc-9a19-3a9f2f8e314d MS-CV: pHaopI4tQUmcjffJ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 31 Aug 2024 18:38:17 GMT Connection: close Content-Length: 30005
2024-08-31 18:38:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-08-31 18:38:18 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49782	45.135.232.98	443	7032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-31 18:39:03 UTC	688	OUT	GET /index_files/7570266.png HTTP/1.1 Host: cninaspwebprn.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cninaspwebprn.icu/index_files/7570214.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qlvpkih24fm3dictj9jg4k08g3; asdasasd12=true
2024-08-31 18:39:03 UTC	232	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Sat, 31 Aug 2024 18:39:03 GMT Content-Type: image/png Content-Length: 171 Last-Modified: Mon, 12 Aug 2024 13:55:15 GMT Connection: close ETag: "66ba1443-ab" Accept-Ranges: bytes
2024-08-31 18:39:03 UTC	171	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 05 08 06 00 00 00 b9 16 e7 f9 00 00 00 72 49 44 41 54 28 91 bd 8d 41 0a c2 40 0c 45 5f c7 1e c5 23 14 2c b8 f7 1c 45 70 d3 2b 09 e2 65 ba 28 78 a4 c9 ff 2e 1a 07 2f d0 7e 78 84 24 24 af bb cd f5 6c fb 2d 6b 94 7d b2 44 58 48 1b d1 88 ec 23 11 11 d1 76 6d 96 f5 77 2b 09 6d ff aa ec 55 d6 d4 03 4f e0 ca fe e9 d3 f3 2a c0 70 80 f0 3f 97 02 7c 0e 96 ae 05 78 00 0b 10 3b cb 6a 7a ee 5f 2d 35 60 26 ba ba 90 f2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRrIDAT(A@E_#,Ep+e(x./~x$$l-k}DXH#vmw+mUO*p?\|x;jz_-5`&IENDB`

Target ID:	0
Start time:	14:37:27
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://cninaspwebprn.icu/
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:37:27
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	14:37:45
Start date:	31/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5464 --field-trial-handle=1916,i,12169701166951704019,16667288424832120993,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://cninaspwebprn.icu/	HTTP Parser: Base64 decoded: <script>
Source: https://cninaspwebprn.icu/	HTTP Parser: Base64 decoded: <script>
Source: https://cninaspwebprn.icu/	HTTP Parser: Base64 decoded: <script>

Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,IWZ1bmN0aW9uKHQsZSl7Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzJiYib2JqZWN0Ij09dHlwZW9mIG1vZHVsZT9tb2R1bGUuZXhwb3J0cz1lKCk6ImZ1bmN0aW9uIj09dHlwZW9mIGRlZmluZSYmZGVmaW5lLmFtZD9kZWZpbmUoW10sZSk6Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzP2V4cG9ydH
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT10eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOmZ1bmN0aW9uKGUpe2lmKCFlLmRvY3VtZW50KXRocm93IG5ldyBFcnJvcigial
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIHRleHQyID0gJ+K9uee7nOWuieWFqOmDqOK7lOeahOaPkOekuu+8mjxicj5cbicgKw0KICAgICfmo4DmtYvliLDmgqjmraPlnKjkvb/ivaTkuK3ljY7ivIjiuqDlhbHlkozlm73ms5XlvovnpoHivYznmoQgVlBOIOS7o+eQhuOAgjxicj5cbicgKw0KICAgICfmgqjnmoTmtY/op4jlmajlt7
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNjYzVlMD1fMHg1MGJiO2Z1bmN0aW9uIF8weDUwYmIoXzB4NWYxYTZjLF8weDRkODI0ZSl7dmFyIF8weDFmOGJmMT1fMHg1YzYyKCk7cmV0dXJuIF8weDUwYmI9ZnVuY3Rpb24oXzB4NDY4MTFhLF8weGVlYTYwZSl7XzB4NDY4MTFhPV8weDQ2ODExYS0weDEyMzt2YXIgXzB4NWM2Mj
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,IWZ1bmN0aW9uKHQsZSl7Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzJiYib2JqZWN0Ij09dHlwZW9mIG1vZHVsZT9tb2R1bGUuZXhwb3J0cz1lKCk6ImZ1bmN0aW9uIj09dHlwZW9mIGRlZmluZSYmZGVmaW5lLmFtZD9kZWZpbmUoW10sZSk6Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzP2V4cG9ydH
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT10eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOmZ1bmN0aW9uKGUpe2lmKCFlLmRvY3VtZW50KXRocm93IG5ldyBFcnJvcigial
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIHRleHQyID0gJ+K9uee7nOWuieWFqOmDqOK7lOeahOaPkOekuu+8mjxicj5cbicgKw0KICAgICfmo4DmtYvliLDmgqjmraPlnKjkvb/ivaTkuK3ljY7ivIjiuqDlhbHlkozlm73ms5XlvovnpoHivYznmoQgVlBOIOS7o+eQhuOAgjxicj5cbicgKw0KICAgICfmgqjnmoTmtY/op4jlmajlt7
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNjYzVlMD1fMHg1MGJiO2Z1bmN0aW9uIF8weDUwYmIoXzB4NWYxYTZjLF8weDRkODI0ZSl7dmFyIF8weDFmOGJmMT1fMHg1YzYyKCk7cmV0dXJuIF8weDUwYmI9ZnVuY3Rpb24oXzB4NDY4MTFhLF8weGVlYTYwZSl7XzB4NDY4MTFhPV8weDQ2ODExYS0weDEyMzt2YXIgXzB4NWM2Mj
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,IWZ1bmN0aW9uKHQsZSl7Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzJiYib2JqZWN0Ij09dHlwZW9mIG1vZHVsZT9tb2R1bGUuZXhwb3J0cz1lKCk6ImZ1bmN0aW9uIj09dHlwZW9mIGRlZmluZSYmZGVmaW5lLmFtZD9kZWZpbmUoW10sZSk6Im9iamVjdCI9PXR5cGVvZiBleHBvcnRzP2V4cG9ydH
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,DQohZnVuY3Rpb24oZSx0KXsidXNlIHN0cmljdCI7Im9iamVjdCI9PXR5cGVvZiBtb2R1bGUmJiJvYmplY3QiPT10eXBlb2YgbW9kdWxlLmV4cG9ydHM/bW9kdWxlLmV4cG9ydHM9ZS5kb2N1bWVudD90KGUsITApOmZ1bmN0aW9uKGUpe2lmKCFlLmRvY3VtZW50KXRocm93IG5ldyBFcnJvcigial
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIHRleHQyID0gJ+K9uee7nOWuieWFqOmDqOK7lOeahOaPkOekuu+8mjxicj5cbicgKw0KICAgICfmo4DmtYvliLDmgqjmraPlnKjkvb/ivaTkuK3ljY7ivIjiuqDlhbHlkozlm73ms5XlvovnpoHivYznmoQgVlBOIOS7o+eQhuOAgjxicj5cbicgKw0KICAgICfmgqjnmoTmtY/op4jlmajlt7
Source: https://cninaspwebprn.icu/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNjYzVlMD1fMHg1MGJiO2Z1bmN0aW9uIF8weDUwYmIoXzB4NWYxYTZjLF8weDRkODI0ZSl7dmFyIF8weDFmOGJmMT1fMHg1YzYyKCk7cmV0dXJuIF8weDUwYmI9ZnVuY3Rpb24oXzB4NDY4MTFhLF8weGVlYTYwZSl7XzB4NDY4MTFhPV8weDQ2ODExYS0weDEyMzt2YXIgXzB4NWM2Mj

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cninaspwebprn.icu

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://cninaspwebprn.icu