Edit tour

Windows Analysis Report
https://eternalspringacupuncture.com/

Overview

General Information

Sample URL:	https://eternalspringacupuncture.com/
Analysis ID:	1520711
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1984,i,4199869834834189887,14396128919340165783,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eternalspringacupuncture.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon
Source: https://eternalspringacupuncture.com/contactUs.html	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 60MB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/home.css HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/jquery/jquery.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/faq.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/acu.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/lec.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/mainCover.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/css/home.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/jquery/jquery.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/acu.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/index/lec.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/index/mainCover.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css HTTP/1.1Host: appointments-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://squareup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mnAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-NY; _savt=b7c03e80-8a6d-4708-aa48-ea195defed9a; __cf_bm=w.sNqQHENGIgSozIcWTc4md_TluzvAZCIjUk1K1xGnM-1727455923-1.0.1.1-wNSOYb78.8cMe3u9xwFPNxveXiaWFPVRft8pkUC4kAxN1XrJAKrw1P3dklkk2LK.iEmiRQGi61if_.ZtDiYaPw
Source: global traffic	HTTP traffic detected: GET /images/fonts/sqmarket/sqmarket-medium.woff2 HTTP/1.1Host: appointments-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fonts/sqmarket/sqmarket-regular.woff2 HTTP/1.1Host: appointments-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fonts/sqmarket/sqmarket-medium.woff HTTP/1.1Host: appointments-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/fonts/sqmarket/sqmarket-regular.woff HTTP/1.1Host: appointments-production-f.squarecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://squareup.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: squareGeo=US-NY; __cf_bm=w.sNqQHENGIgSozIcWTc4md_TluzvAZCIjUk1K1xGnM-1727455923-1.0.1.1-wNSOYb78.8cMe3u9xwFPNxveXiaWFPVRft8pkUC4kAxN1XrJAKrw1P3dklkk2LK.iEmiRQGi61if_.ZtDiYaPw
Source: global traffic	HTTP traffic detected: GET /about%20us.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/titleBar.css HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://eternalspringacupuncture.com/about%20us.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/aboutUs/fei.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/about%20us.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/aboutUs/laoye.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/about%20us.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/aboutUs/fei.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/aboutUs/laoye.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /prices.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c1.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/tuina.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/cupping.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/herbs.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c2.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c3.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/acu.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/tuina.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/consult1.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/cupping.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/consult2.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/prices.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/herbs.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c1.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/acu.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c2.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/c3.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/prices/consult2.jpg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /patientCenter.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/patientCenter.css HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://eternalspringacupuncture.com/patientCenter.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/services/cover.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/css/patientCenter.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/services/cover.jpeg HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /classes.htmlhttps://eternalspringacupuncture.com/index.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contactUs.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://eternalspringacupuncture.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /patientCenter/expect.html HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/details.css HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://eternalspringacupuncture.com/patientCenter/expect.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /patientCenter/vendor/jquery/jquery.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://eternalspringacupuncture.com/patientCenter/expect.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /patientCenter/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1Host: eternalspringacupuncture.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://eternalspringacupuncture.com/patientCenter/expect.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: eternalspringacupuncture.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: squareup.com
Source: global traffic	DNS traffic detected: DNS query: appointments-production-f.squarecdn.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 16:52:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeCF-Ray: 8c9d0082fa658c5f-EWRCF-Cache-Status: BYPASSCache-Control: no-storeSet-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0Strict-Transport-Security: max-age=631152000; includeSubDomains; preloadVary: Accept-Encodingaccess-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeAccess-Control-Allow-Methods: GETAccess-Control-Allow-Credentials: truex-amz-request-id: RQHQYR8Y2SH4R1CSx-amz-id-2: lOgpEKMXzyAbqd5faf/clRwuysv9mGmCiQ2Vf/cHsTx6qzMEn9bl8qxOBP1g8lthmW2SckiLui0=Content-Type: application/xmlServer: AmazonS3Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishAccess-Control-Allow-Origin: *Date: Fri, 27 Sep 2024 16:52:05 GMTX-Served-By: cache-sjc1000134-SJC, cache-ewr-kewr1740033-EWRX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1727455925.438099,VS0,VE81Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodtransfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeAccess-Control-Allow-Methods: GETAccess-Control-Allow-Credentials: truex-amz-request-id: RQHJ798SEC63AK6Ex-amz-id-2: d11H76U0PGSxjSZu4rsznWex8q/GcHuAkvvCr4yiafA81PdpaZjoD6XpRQcS50sCBumhL6xPkeI=Content-Type: application/xmlServer: AmazonS3Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishAccess-Control-Allow-Origin: *Date: Fri, 27 Sep 2024 16:52:05 GMTX-Served-By: cache-sjc1000092-SJC, cache-ewr-kewr1740022-EWRX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1727455925.370337,VS0,VE345Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodtransfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeAccess-Control-Allow-Methods: GETAccess-Control-Allow-Credentials: truex-amz-request-id: 26MA41QZEXFMAXQ5x-amz-id-2: 7ZSq3r6hhRhyT0slCMkhdeA6dr3YoSppfdA1J05GoyP/gzCkHfGRv7drQnq+QbLcCzgpM+welQ0=Content-Type: application/xmlServer: AmazonS3Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishAccess-Control-Allow-Origin: *Date: Fri, 27 Sep 2024 16:52:07 GMTX-Served-By: cache-sjc10033-SJC, cache-nyc-kteb1890066-NYCX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1727455928.843591,VS0,VE81Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodtransfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeAccess-Control-Allow-Methods: GETAccess-Control-Allow-Credentials: truex-amz-request-id: 26MF47H9N2BKD6X3x-amz-id-2: ilUC+IdBExt41ifKNLCUJVtysrzgZmgAuSCehcOBbSGZMg7F2+d0jK7XOMpXVQLI87aGeNazhXA=Content-Type: application/xmlServer: AmazonS3Accept-Ranges: bytesVia: 1.1 varnish, 1.1 varnishAccess-Control-Allow-Origin: *Date: Fri, 27 Sep 2024 16:52:07 GMTX-Served-By: cache-sjc10070-SJC, cache-nyc-kteb1890031-NYCX-Cache: MISS, MISSX-Cache-Hits: 0, 0X-Timer: S1727455928.843377,VS0,VE81Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodtransfer-encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 16:52:35 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 16:52:36 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 16:52:47 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 27 Sep 2024 16:52:47 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_236.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_138.2.dr, chromecache_164.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages
Source: chromecache_207.2.dr, chromecache_205.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_236.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_236.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_138.2.dr, chromecache_164.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/webgl/support
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8eb
Source: chromecache_218.2.dr, chromecache_185.2.dr, chromecache_137.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_232.2.dr	String found in binary or memory: https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE)
Source: chromecache_218.2.dr, chromecache_185.2.dr, chromecache_137.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_218.2.dr, chromecache_137.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_156.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/6/geometry.js
Source: chromecache_156.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/6/main.js
Source: chromecache_156.2.dr	String found in binary or memory: https://maps.googleapis.com/maps-api-v3/api/js/58/6/search.js
Source: chromecache_151.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geo
Source: chromecache_207.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/mapsjs/mapConfigs:batchGet
Source: chromecache_176.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11.png);background-size:70px
Source: chromecache_176.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/entity11_hdpi.png);background-size:70px
Source: chromecache_176.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2.png);background-size:109px
Source: chromecache_176.2.dr	String found in binary or memory: https://maps.gstatic.com/mapfiles/embed/images/exp2_hdpi.png);background-size:109px
Source: chromecache_151.2.dr	String found in binary or memory: https://maps.gstatic.com/maps-api-v3/embed/js/58/6/init_embed.js
Source: chromecache_151.2.dr	String found in binary or memory: https://search.google.com/local/reviews?placeid=ChIJryop7dTLslIRSmUR1tL_p-g
Source: chromecache_172.2.dr	String found in binary or memory: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn
Source: chromecache_232.2.dr	String found in binary or memory: https://startbootstrap.com/template-overviews/1-col-portfolio)
Source: chromecache_249.2.dr, chromecache_236.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_135.2.dr, chromecache_176.2.dr	String found in binary or memory: https://support.google.com/maps?p=kml
Source: chromecache_207.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_172.2.dr	String found in binary or memory: https://www.google.com/maps/embed?pb=
Source: chromecache_172.2.dr	String found in binary or memory: https://www.google.com/maps/place/2978
Source: chromecache_172.2.dr	String found in binary or memory: https://www.google.com/maps/place/Valley

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@23/214@16/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1984,i,4199869834834189887,14396128919340165783,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eternalspringacupuncture.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1984,i,4199869834834189887,14396128919340165783,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
eternalspringacupuncture.com	107.180.47.65	true	false	unknown
squareup.map.fastly.net	151.101.1.49	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
squareup.com	162.159.137.66	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
appointments-production-f.squarecdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528	false	unknown
https://eternalspringacupuncture.com/images/prices/c3.jpeg	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473	false	unknown
https://eternalspringacupuncture.com/images/prices/cupping.jpg	false	unknown
https://eternalspringacupuncture.com/images/services/cover.jpeg	false	unknown
https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-medium.woff	false	unknown
https://eternalspringacupuncture.com/contactUs.html	false	unknown
https://eternalspringacupuncture.com/icon.png	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023	false	unknown
https://eternalspringacupuncture.com/vendor/jquery/jquery.min.js	false	unknown
https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-regular.woff	false	unknown
https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329	false	unknown
https://www.google.com/maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349	false	unknown
https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-regular.woff2	false	unknown
https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn	false	unknown
https://eternalspringacupuncture.com/prices.html	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449	false	unknown
https://www.google.com/maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050	false	unknown
https://eternalspringacupuncture.com/images/prices/herbs.jpg	false	unknown
https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css	false	unknown
https://eternalspringacupuncture.com/css/details.css	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996	false	unknown
https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.html	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728	false	unknown
https://eternalspringacupuncture.com/images/prices/consult2.jpg	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752	false	unknown
https://eternalspringacupuncture.com/vendor/bootstrap/css/bootstrap.min.css	false	unknown
https://eternalspringacupuncture.com/images/prices/consult1.jpg	false	unknown
https://eternalspringacupuncture.com/vendor/bootstrap/js/bootstrap.bundle.min.js	false	unknown
https://eternalspringacupuncture.com/images/index/mainCover.jpg	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217	false	unknown
https://eternalspringacupuncture.com/patientCenter/vendor/jquery/jquery.min.js	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471	false	unknown
https://squareup.com/favicon.ico	false	unknown
https://eternalspringacupuncture.com/images/index/faq.jpeg	false	unknown
https://eternalspringacupuncture.com/	false	unknown
https://eternalspringacupuncture.com/images/prices/acu.jpg	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357	false	unknown
https://eternalspringacupuncture.com/css/home.css	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282	false	unknown
https://eternalspringacupuncture.com/images/prices/c1.jpg	false	unknown
https://eternalspringacupuncture.com/patientCenter/vendor/bootstrap/js/bootstrap.bundle.min.js	false	unknown
https://eternalspringacupuncture.com/images/index/acu.jpg	false	unknown
https://eternalspringacupuncture.com/css/titleBar.css	false	unknown
https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582	false	unknown
https://eternalspringacupuncture.com/images/index/lec.jpeg	false	unknown
https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-medium.woff2	false	unknown
https://eternalspringacupuncture.com/images/aboutUs/fei.jpg	false	unknown
https://eternalspringacupuncture.com/images/prices/c2.jpg	false	unknown
https://eternalspringacupuncture.com/css/patientCenter.css	false	unknown
https://eternalspringacupuncture.com/patientCenter.html	false	unknown
https://eternalspringacupuncture.com/favicon.ico	false	unknown
https://eternalspringacupuncture.com/images/prices/tuina.jpg	false	unknown
https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306	false	unknown
https://eternalspringacupuncture.com/images/aboutUs/laoye.jpg	false	unknown
https://eternalspringacupuncture.com/about%20us.html	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.broofa.com	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://search.google.com/local/reviews?placeid=ChIJryop7dTLslIRSmUR1tL_p-g	chromecache_151.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE)	chromecache_232.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_207.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages	chromecache_138.2.dr, chromecache_164.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_218.2.dr, chromecache_137.2.dr	false		unknown
https://goo.gle/js-api-loading	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener	chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/webgl/support	chromecache_138.2.dr, chromecache_164.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/maps?p=kml	chromecache_135.2.dr, chromecache_176.2.dr	false		unknown
https://www.google.com/maps/embed?pb=	chromecache_172.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_207.2.dr, chromecache_205.2.dr	false	URL Reputation: safe	unknown
https://startbootstrap.com/template-overviews/1-col-portfolio)	chromecache_232.2.dr	false		unknown
https://www.google.com/maps/place/Valley	chromecache_172.2.dr	false		unknown
https://getbootstrap.com)	chromecache_218.2.dr, chromecache_185.2.dr, chromecache_137.2.dr	false		unknown
https://www.google.com/maps/place/2978	chromecache_172.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_218.2.dr, chromecache_185.2.dr, chromecache_137.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_249.2.dr, chromecache_236.2.dr	false	URL Reputation: safe	unknown
https://fonts.google.com/license/googlerestricted	chromecache_139.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
151.101.1.49	squareup.map.fastly.net	United States	54113	FASTLYUS	false
162.159.137.66	squareup.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
107.180.47.65	eternalspringacupuncture.com	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520711
Start date and time:	2024-09-27 18:50:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eternalspringacupuncture.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@23/214@16/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn Browse: https://eternalspringacupuncture.com/about%20us.html Browse: https://eternalspringacupuncture.com/prices.html Browse: https://eternalspringacupuncture.com/patientCenter.html Browse: https://eternalspringacupuncture.com/classes.html Browse: https://eternalspringacupuncture.com/index.html Browse: https://eternalspringacupuncture.com/contactUs.html Browse: https://eternalspringacupuncture.com/patientCenter/expect.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.184.238, 173.194.76.84, 34.104.35.123, 20.114.59.183, 93.184.221.240, 192.229.221.95, 20.242.39.171, 20.3.187.198, 172.217.18.106, 142.250.181.234, 142.250.185.202, 142.250.185.74, 142.250.185.170, 142.250.186.138, 142.250.184.202, 142.250.186.74, 216.58.206.42, 142.250.185.138, 216.58.212.170, 142.250.186.170, 142.250.185.106, 142.250.184.234, 216.58.212.138, 142.250.185.234, 142.250.184.195, 142.250.185.99, 216.58.206.74, 142.250.186.42, 172.217.16.138, 142.250.186.106, 142.250.74.202, 172.217.16.202, 172.217.18.10, 216.58.206.67
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com, maps.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://eternalspringacupuncture.com/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://eternalspringacupuncture.com/about%20us.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"Had trouble finding that Business.", "prominent_button_name":"Back", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://eternalspringacupuncture.com/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"BOOK APPOINTMENT!", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://eternalspringacupuncture.com/prices.html Model: jbxai	""
	""
URL: https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://eternalspringacupuncture.com/contactUs.html Model: jbxai	{ "brand":["Eternal Spring Acupuncture"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Directions", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://eternalspringacupuncture.com/patientCenter/expect.html Model: jbxai	{ "brand":["Eternal Spring Acupuncture"], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://eternalspringacupuncture.com/prices.html Model: jbxai	""
	""
URL: https://eternalspringacupuncture.com/patientCenter.html Model: jbxai	{ "brand":["Eternal Spring Acupuncture"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Read More", "text_input_field_labels":["Common Questions"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3244 x 1308, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8275299
Entropy (8bit):	7.986989980561296
Encrypted:	false
SSDEEP:	196608:jpgq0BQyeHYrzx5z7bgA5CyuKMBH9eSwPbrx3sEp6TlmFHDABBlfbEEVpx4:N50BveHYrVxbtDiN8xJEcFHGHbEE/x4
MD5:	5462E4368C26A3BDB0CF903DAFE33475
SHA1:	2E2EE0FCB073D53C4661581645F27FDA7BFD67D3
SHA-256:	C072863C70514A7123BDE5FC7079225C8C7F2D759E76A4BB4D78353A9219B8A4
SHA-512:	D5D649547C57FC5C202720D724E926EAAF25ED2AB189315200EDB8A854C59E9E30E49302C55B1E95EC9E67ED3D905C9428FF5F6E8E5980D779AE0ABEE840F431
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/index/mainCover.jpg
Preview:	.PNG........IHDR....................$iCCPICC Profile..H....TSI...$$$......Ujh..l.$.PB...;...ZP.....(..@...l.b..*.X...M.@.....y.;w.....&......"Q6..@.0_....HJNa..."P....8.9y"...p..H....&@..5[i........q.@.!.q.89.....rD.\|....n2#_...U.u1...T..rv.r...e>q1L..(P.lq..JR]..N...T..^...!.@....\......BV..l..]....L...fg..<.YQ........KN.dd..X.\|qh.4g.{....2..9aZd.d5...\.....%.....9yL..&.(........X...?.>l.l,.GS..q....P..3..-.fG...)..X#\......I... .o.6..Yq.1...."!+A.....6<.E!..9:.$F..~s.......c...+_........B.c....L.6.L^^R..../0H..+...ub....a....a....."..Cn.+.......<..d.'D....E..qrm8...&... .5..L h.m..#=.... ....edD..G..........F...zy....Z.O[...-....O!.........;.12..<2+1..H.%.......?.e... .V1..-.f%. ...-..)....p..I......'.G...Fm...F.......ps.......~....u.-..3..}an.....;...d{2J."..-..S.Vr..#..{.r]i..0G{~...]n\...-..bm.I.<.5..v.k..aG.<.6.....l12=Y0.`....~......e....f.K.8.\.,. ......5...r..2..........lOGtT.....0.`hh..7[.....=....f...e'..m.H..r..}........`...K..#p.^..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 60D, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Photoshop CS5 Macintosh, datetime=2015:01:03 00:04:04], baseline, precision 8, 5184x3456, components 3
Category:	downloaded
Size (bytes):	11237492
Entropy (8bit):	7.89071193700906
Encrypted:	false
SSDEEP:	196608:4AJHsY5GSI1l54F53wTwBc32pniCHO1HTJ37XjHdJRFFRUV6Gg2Oa9m94/QteQfC:4usY4SW54F53kwBc32pixHtxR0OViotg
MD5:	B6B5460C24D12139BA22E6BD560A1B3C
SHA1:	CE73A2ACA2A9258F805521C9327FAB9643B05950
SHA-256:	51E5AD62632E5C40981DF21433E2DA6CA13FC95547D9CC8F12F5CB5F97CA347C
SHA-512:	1617F2A06DC4D9AC89FE5303C43E0BFA78D445E845B8F37A2BA070490CC982B44B2D38263C8F0D537E23F7DB5DF318F08DB65F31144DAFC9DA8B406B96FB2980
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/consult2.jpg
Preview:	......Exif..II*...................................................................(...........1...........2...........;...........i...........<...Canon.Canon EOS 60D...$..'....$..'..Adobe Photoshop CS5 Macintosh.2015:01:03 00:04:04.Yu Lan.."........................."...........'.......}...0...........2.......}...........0230................................................................................................................................86..........86..........86......................@...................................................................................................1...........2...........4.......%...5...............................2014:12:22 12:45:21.2014:12:22 12:45:21...........F.@B..................d...d...0.........O.......4.S...2531404834.................................18-200mm.0000000000..........................................(.......................................H.......H.............Adobe_CM......Adobe.d.......................................

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4273
Entropy (8bit):	5.051931076698803
Encrypted:	false
SSDEEP:	48:mOjMZU0rXQMjMZU0rXiOd8ZX9ZyoNpZ9V0BTa7BZsAgsSeJ8xSqyZnfKvQaAo/hG:dM9MA0ogsfnfKvms1Rds1xZjBySt
MD5:	0A8ED16CBF821A006FC1D40CF79035DE
SHA1:	C1FDFC2F4BF511DF8891FA1BC0CC8B43B4A0181D
SHA-256:	93845B69B7CA8A5EDB9E935152E7A08CA5D63407E5A35C230E7655D9D9907515
SHA-512:	5F72B945C898D7A465ED3383AB941CEA28F6027431F346E011310BAAC5D4B205092B727CF1EF2B7C5E0CB59D76CF88A669F318E750A23581D6F76BA0065CBE6C
Malicious:	false
Reputation:	low
Preview:	[{"id":"tuvwwvuwwwu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwwu","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c":"{\"1\":{\"title\":\"White Bear Beach\"}}"},{"id":"0x52b2dc9eea35e665:0x727aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvuwwww","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwww","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c":"{\"1\":{\"title\":\"White Bear Beach\"}}"},{"id":"0x52b2dc9eea35e665:0x727aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvwuuuu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvwuuuu","base":[520282112,770658304],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	downloaded
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/vendor/jquery/jquery.min.js
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.5264166142543045
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjIt+9cYL16c2ttan:TMHd9BZKtWRCccDRa
MD5:	3CED08435FAF631326197185856DDE3E
SHA1:	02422E3C3D3AE8793C779014813923F172D98CEE
SHA-256:	6BDB35443C17F63120DE63ED0385B22B9D410D2A3F9A36E654C75C145941F7F3
SHA-512:	4920ED65007BF58E761541383AEFFE02945453C0FF26F612005252EEF3A172BAEFD008176F7AB839707A367EC40584818CCB96774E9DA85A306DD497D59D3C5E
Malicious:	false
Reputation:	low
URL:	https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-regular.woff
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>26MA41QZEXFMAXQ5</RequestId><HostId>7ZSq3r6hhRhyT0slCMkhdeA6dr3YoSppfdA1J05GoyP/gzCkHfGRv7drQnq+QbLcCzgpM+welQ0=</HostId></Error>

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11380
Entropy (8bit):	7.978292104920675
Encrypted:	false
SSDEEP:	192:wRmK0joilp1HfREITGyxR7HswCXSPl9buT6JWLGnRrvbOC2fITuaoNPJlEJ7Q:wN0jF1/z9xNCX0beI0GhjOUTJoxJyQ
MD5:	D8406A73B11FF12A915F7D37834F5E9E
SHA1:	4BCF4D68D1E402B1510899550981E63E3A45916D
SHA-256:	BA61E83BD1342688F64E3358715929DE5CEDEA643B5099A8690977C311B4D8D2
SHA-512:	50B59CB50D48E58C688B9F1CDF8C0C872ABB6882D933CBCFF7EFA0622DC4C14D53BC182B77FC0C5F9B0E22A01F3AC52292D506E5A7A4DC97C25A8699590239BC
Malicious:	false
Reputation:	low
Preview:	RIFFl,..WEBPVP8L_,../..?...8.m%z....&.p\..w}.......;.P.9...5x.....A.0H... ...G...M...?\...r.Y..P..L`......a.n6V.G2?u..,O.#.Tp..:A.....,.@).@..r.\|%.I.J..v.y#F..A....b#B...u....k.....KrtKq.:..s^(....q)......<.%.8..f.........5.4.hII.\4.l.^...^.]o[..@...........;.7.cT..9..sT...(:..5......I...!.. B0........V..D..V.mmU.V....9d`..=...;.m..f.......3.....6Q.N..s.`..J..H.....N....y..yp.........:.....]..i.y.p./.W..;i...jP.6.c..:q...o..5,......&6...].{.0..v..N1f.^.M..e"..........A..m.X\|..ND.;.=.`.B...g.{.......y..W.J.K......N\|4..a..W..R.....D...-......X0..>q..j.G.o.v.../.^.....E....>7.V..j.jB....n...>.k..`..y.\..zI.p..l...;bK5Y.V@Z'..V.2.(.#.8..L....EV0yM6_..%}.~...v7...~.....G.X.R..".ys.:.d.Wy...u{M..[.^..G..81x-g.-.;..N.@......^.............p.]a....@..n.=....a...{,.nLw..a.^+....C..m......M.{..\d...k.qU.a/........+.{!LU....V..9..Qns.....'Q'xf.{Nt.....f...\.[.X.^#.n..jT...0.(.D[..K...m^#.1....K...7U.vA...>..}p..k.....W.T......\|......H...U.q........\.Z]....

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13290
Entropy (8bit):	7.977892464235737
Encrypted:	false
SSDEEP:	192:YaK1l6hBDtT2GnD4sIf9/jEfYa+4kPasGUPYwZvsnX6fdJGSVvtX0Fie7A:YaPBD0C8s2xta8Pas0pX6f3GwvtGiek
MD5:	40FF30533890A6B598B4117DDC8E5211
SHA1:	594BA4BB4543BA702BB1479661384538857C76F1
SHA-256:	083CD3C6663185F1F0AB03822863A175C6936CEA9C7AE35CAF845FCFA9DD7D4E
SHA-512:	6F4B972EFE3DA07876AA0617FA08D39EA969B5130340FB4292406F1F43A798C465D5D35FAF00051F68511AC92022C7C3E2C2F8392CA1AEF0BACD2D572F050352
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217
Preview:	RIFF.3..WEBPVP8L.3../..?.w.8.mU..;,YA.D..[.....8...ff...\|jH.Ye'.....m......V...0e:Z.....d.#H.SA.Y .&1..,...xL.......(.......K0.]..Z..v..-..3....s.M....G..................V..B....C..b=...L0Q..D1.L\|.R.?..R}}..O~.....\|...g....;vz..../t...E.`e.2H...V.i.Qc.}.r....GF..i'3.....%..T.X.k...b.....{.d,{M%.. .@$..py.......r.....4M.t....."X.)(.<.R\F........b.......sr......D..$IQT. .0......\..]#....W.~s..Q........ ......[...N..n......M....Z.56.C...k^c(ht.` ...F.........gyc.\.]"Z..D.u!...3...5.^.x....F.I.._...q.w...ao .SH........w+<X.c{7.qi...2.Fu?.:..;..`f.z~..C...v!...t.JD......{...8....H.....E........z{U8KT...^6.....Ec...b7..J.a#...{3...1.....#.....q....9....D>%..lP.p.....w"...S ..T ..n.q.U.mt{n-.:b..K6_...>.H..Vr.(.Fl...^..^d. ".a".kX..1..]6~Ql.2.W...AQ....i......g.).<...b. K.VP...%xOv7..t8.]a^.."J..M.....e*..Y3.#.4....%..t%.s...du....W...0M.........."..UROB`..\..SS.z...o...`..<..\|.....P....?.Vl...C.(2m...k.w........A...q.LE...;...

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	7.945955500046908
Encrypted:	false
SSDEEP:	96:pm4C8LhFTWnIesjADSCsWq9VeVzqaUy89rVnUr1CzZaX7E4mRymuysRs3iuLK8Ci:T7TWnMUD+VVZvCr12ZaiMRRuLK8Ci
MD5:	F11D1AF6314E5CA1283ADB80BC22610A
SHA1:	440D3519682E276F85D73DFA103A0B99094D3FA9
SHA-256:	C71E6C32D5EEB38DED7F7A0B25B01A3CD20DFFA26FEBB1FFC6A7559E8B202191
SHA-512:	559133E73DF9FA66745F995DF45FEC20946073511005E1EB125DEDBAF7B18A3632C2D6EA9751A953C2EB6C5D9F56DF845DA29C8E3A0D1A2BEBF04851DBA033F3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.....m%......t .C....l#.V.;.....).]...?0.m[..!..&....w.o..~J?.....t$..5..4....H.....W./.^.. ....e$x{.e..d.....{...1..(.V.,!.Z.s..o4.+..}<..`1X.....0X....`1X....'.;?\.7U..9..o...}.....T+~.H.U.....m....i .....}....,..[.b .=.....v...@B.r..YB...'.Y;.'...D ...$......7..O...'.".................?...??........(............8.6.4...U...M >N<........... ..0.N..dZ.uf.2. .....x."~.V.......S...........$..{I ~.~.......D.....OEr.a.'p..$.#..^.9^.o{M ?.......x;...W.z.j........!.........}...4N?......)...@.........`,...\.<.......5.T.......T.$...$......`.....A...}(...x.>E...c....B[.(7.}.D.\|..Sx$%I...y..$....'. .... ....x..`..@.B=}..d1..LP:v.6.6".l!.~...........;..=...b.{.-.)..o..>."...9.Si. ."}.A)H.$.t...L..}...O2......(..}...s&.&.\->.....EV..W.@.Kv...Z..]]...N.v....&.8..............[......$>h?.....4EK.....ZU;........!..c.....^...X.....IK....@...@..y.X`.{A6....B/....e..o..l.3.....'.....'U...\|g.....?&G.E..T.z..5l.,......

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5292
Entropy (8bit):	4.9079770162187355
Encrypted:	false
SSDEEP:	96:yzKTydVjRohBb/ly0KSV1W5A70Sg3iegMOOWsowUupNT:ysy3RohBrbcuciegMwSJ
MD5:	9A39FFD9D62A36AE4D823F6FC1EC3A77
SHA1:	F521572EF13F776E2D04D782671ACE3A967BEBE7
SHA-256:	F7C3A689A85F764AC11D5D7E6FE35A261A57CB501EC201C49755A6F871E09475
SHA-512:	4F094F1165A6BFDCD75F9184897AB9240DC6AABB505C7364B7885BD46D149FDC2A61C79EFEAB782C1CDCDF74A279E84F57CC077E87DF115C7DBE10595BBB2021
Malicious:	false
Reputation:	low
Preview:	[{"id":"tuvwwwtvvvttu","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttu","base":[518113280,772014080],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"15596577848430255735","a":[0,0,518113280,772014080,518113280,772014080],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"Trader Joe's\"}}","io":[0,-13]},{"id":"4471800395013087799","a":[-19456,74752,518093824,772088832,518093824,772088832],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,10,-22,111,-4],"c":"{\"1\":{\"title\":\"The Tavern Grill\"}}","io":[0,-13]},{"id":"170857784169406294","a":[-144384,222208],"bb":[-40,-74,41,-56,-44,-60,44,-42,-32,-46,32,-28],"c":"{\"1\":{\"title\":\"University of Northwestern . St. Paul\"}}"}]},{"id":"tuvwwwtvvvttw","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttw","base":[518335488,772103168],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"13774563550963134328","a":[0,0,518335488,772103168,518335488,772103168],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (802)
Category:	dropped
Size (bytes):	3308
Entropy (8bit):	5.5083394341383904
Encrypted:	false
SSDEEP:	48:fHKvPwII+sSQx+GzETrVdA6wcA411GbwIkBpCN63K91jJahGIdL2wl+nsIEGbR4t:fAwzx/5YTrVdB17I+puX7jECwljI1P2L
MD5:	2334D2C9424FC203B6672293A25994E8
SHA1:	D4CEFB27836F8BE576CC45C9BB0F5BA3AD281E52
SHA-256:	CE8FDEE05819227CE1A5EEC4B1B59B68599B26A414F5CA5343BFF490D4A6ED56
SHA-512:	11AC863540AB8EFD442986151E3CE798EE53FDC13C03F369380D5D37DE2D3405A1502AF88CD98BAC81E0ABE62B65B11F25F9DEFEDA94645D8B2995AB4A338D71
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('geometry', function(_){var zsa=function(a,b){return Math.abs(_.fj(b-a,-180,180))},Asa=function(a,b,c,d,e){if(!d){c=zsa(a.lng(),c)/zsa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Di(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Di(b.lat())),_.Ei(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.al(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Di(a.lat());a=_.Di(a.lng());d=_.Di(b.lat());b=_.Di(b.lng());c=_.Di(c);return _.fj(_.Ei(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},Bsa=function(a,b){a=new _.Mj(a,!1);b=new _.Mj(b,!1);return a.equals(b)},Csa=function(a,b){const c=[];let d=[0,0],e;for(let f=0,g=_.Yi(a);f<g;++f)e=b?b(a[f]):a[f],rA.tE(e[0]-d[0],c),rA.tE(e[1]-d[1],c),d=e;return c.join("")},sA={containsLocation:function(a,b){a=_.Rj(a);const c=_.fj(a.lng(),-180,180),d=!!b.get

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 720x486, components 3
Category:	dropped
Size (bytes):	108223
Entropy (8bit):	7.972433098203167
Encrypted:	false
SSDEEP:	3072:wQ2EGDtJn0CmvTTEu4O9Uagl5Iio7WenMqj:EEO0PvPE3O9bgl5Qyej
MD5:	86E75A50D016A5246EDA81B8D1881DF4
SHA1:	72E8E5E9CB6961F25E7BF24D5223D03EDD2679CE
SHA-256:	CA9552188AEDD8325476AE93649F24EDE0AB5C3CCDCB614D69866FEACACA3AEA
SHA-512:	C39FA94131A37D7798F94EE10BFA8C771A01AAB73E8B76EF8D37C9F1A71DA54F636E8E0EEB1F399CD2A036CD10FBBE286EBB9CDC777BE1AAA2748C613A8FB139
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....nPhotoshop 3.0.8BIM.......R...........ARPA,MARK,MEDTOR,MEDWAS,MEDLON,ASIA,APC,USA,CAN,SAM,SPTS,RONL,AONL...................RTRPIX..(..00675115..2..PIX..<..4..F..20160808..P..165156+0000..Z...%5............OLYMPICS-RIO-CUPPING.....ORIGINAL.....4.....S.....SPO OLY SWM.....RIOEC881AUJDR..(..EUO..7..20160808..<..165156+0000..A..Paneikon..F..3.1.7.1..P..DOMINIC EBENBICHLER..Z..RIO DE JANEIRO..d..BRA..e..Brazil..g..OLYCN33..i.'Swimming - Men's 200m Butterfly - Heats..n..REUTERS..s..X01771..x.T2016 Rio Olympics - Swimming - Preliminary - Men's 200m Butterfly - Heats - Olympic Aquatics Stadium - Rio de Janeiro, Brazil - 08/08/2016. Michael Phelps (USA) of USA is seen with red cupping marks on his shoulder as he competes. REUTERS/Dominic Ebenbichler FOR EDITORIAL USE ONLY. NOT FOR SALE FOR MARKETING OR ADVERTISING CAMPAIGNS. ..z..CN.....3S.....en.................Z.........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13290
Entropy (8bit):	7.977892464235737
Encrypted:	false
SSDEEP:	192:YaK1l6hBDtT2GnD4sIf9/jEfYa+4kPasGUPYwZvsnX6fdJGSVvtX0Fie7A:YaPBD0C8s2xta8Pas0pX6f3GwvtGiek
MD5:	40FF30533890A6B598B4117DDC8E5211
SHA1:	594BA4BB4543BA702BB1479661384538857C76F1
SHA-256:	083CD3C6663185F1F0AB03822863A175C6936CEA9C7AE35CAF845FCFA9DD7D4E
SHA-512:	6F4B972EFE3DA07876AA0617FA08D39EA969B5130340FB4292406F1F43A798C465D5D35FAF00051F68511AC92022C7C3E2C2F8392CA1AEF0BACD2D572F050352
Malicious:	false
Reputation:	low
Preview:	RIFF.3..WEBPVP8L.3../..?.w.8.mU..;,YA.D..[.....8...ff...\|jH.Ye'.....m......V...0e:Z.....d.#H.SA.Y .&1..,...xL.......(.......K0.]..Z..v..-..3....s.M....G..................V..B....C..b=...L0Q..D1.L\|.R.?..R}}..O~.....\|...g....;vz..../t...E.`e.2H...V.i.Qc.}.r....GF..i'3.....%..T.X.k...b.....{.d,{M%.. .@$..py.......r.....4M.t....."X.)(.<.R\F........b.......sr......D..$IQT. .0......\..]#....W.~s..Q........ ......[...N..n......M....Z.56.C...k^c(ht.` ...F.........gyc.\.]"Z..D.u!...3...5.^.x....F.I.._...q.w...ao .SH........w+<X.c{7.qi...2.Fu?.:..;..`f.z~..C...v!...t.JD......{...8....H.....E........z{U8KT...^6.....Ec...b7..J.a#...{3...1.....#.....q....9....D>%..lP.p.....w"...S ..T ..n.q.U.mt{n-.:b..K6_...>.H..Vr.(.Fl...^..^d. ".a".kX..1..]6~Ql.2.W...AQ....i......g.).<...b. K.VP...%xOv7..t8.]a^.."J..M.....e*..Y3.#.4....%..t%.s...du....W...0M.........."..UROB`..\..SS.z...o...`..<..\|.....P....?.Vl...C.(2m...k.w........A...q.LE...;...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4016
Entropy (8bit):	7.904664063900611
Encrypted:	false
SSDEEP:	96:20a5PYhImmHkcjR9Eg8LRaXg7nDYE/CUt850h1J:H0M9mE/geaXgPQUt+0h/
MD5:	C8CE1D2DEB76EE7B857FFCB92EEEE9DB
SHA1:	A857E06D2D547B9C1488542E6824FFC78685F195
SHA-256:	66AAA9A7A806C494B33740C6AA3DD620DA2E8F1F90AD34C8F5A199A20F306FBE
SHA-512:	36CEA497CE7B0C1F4785D5769EFC1E194EDBE77BB3DEFDB5661103CD9F0E53A124C333CA1644A286798A4D5CCAB7C0A0501E239EB2955AD27F55E5C158C476B5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776
Preview:	RIFF....WEBPVP8L..../..?...6..D.........]v.`..@...^._....a>5..2..@k...........1...}aB..=P.H-......2...C9..{...u.....\|...J.......!Q>0x.m;Kmm..!.w..l....."...~......g..w)..E^.I....".x.i.>.}p&...nu..g..8....J.....I......M-?.J..4....../ i.Sis_v.z.'.G...(.....H..T:........G...4pz....1.cA2...4.V~xZH&.z;...w..&.cf...,.....;X...........d?k?....-..".4I1F..X..[.....N.....:.(...H.V..?oR...#....N....H...MK.......9.3.]G..d.i3..lG....aDj.."y.Z..Y...K....+o}G...)..7.A.$...Y1U.+o:..[i..h..d9]y.....a.uH..K;Q.W....m.h.(.....bT...h.O..P...u<8e\|.....K.#...)..Y....Mp...h.t.&S.[5.t....S\..u4>....'k.U.a(...C.:...bq....q.2.#.>+.j.A.v....w...0..N.....p.;.^.o5.....U....7.i\|.-n..vE.n..t`L..HZ......V.N......bY....T..u:(&.uq...d.[.:.......g.d.[.....0.I.pj.U....3.I...!.Z...............GC.g;........H.Co:.@.!..U..0i....LT..LGC.M.C...w*.E..;..X....T.. .V.GC.o:..N....5....GA.M.....nl\|?....T\|:#...-H....S....i.R.\...m.~.O.n...".R....%...g..tGlQ\|@...B.o...

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4273
Entropy (8bit):	5.051931076698803
Encrypted:	false
SSDEEP:	48:mOjMZU0rXQMjMZU0rXiOd8ZX9ZyoNpZ9V0BTa7BZsAgsSeJ8xSqyZnfKvQaAo/hG:dM9MA0ogsfnfKvms1Rds1xZjBySt
MD5:	0A8ED16CBF821A006FC1D40CF79035DE
SHA1:	C1FDFC2F4BF511DF8891FA1BC0CC8B43B4A0181D
SHA-256:	93845B69B7CA8A5EDB9E935152E7A08CA5D63407E5A35C230E7655D9D9907515
SHA-512:	5F72B945C898D7A465ED3383AB941CEA28F6027431F346E011310BAAC5D4B205092B727CF1EF2B7C5E0CB59D76CF88A669F318E750A23581D6F76BA0065CBE6C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647
Preview:	[{"id":"tuvwwvuwwwu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwwu","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c":"{\"1\":{\"title\":\"White Bear Beach\"}}"},{"id":"0x52b2dc9eea35e665:0x727aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvuwwww","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwww","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c":"{\"1\":{\"title\":\"White Bear Beach\"}}"},{"id":"0x52b2dc9eea35e665:0x727aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvwuuuu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvwuuuu","base":[520282112,770658304],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632)
Category:	downloaded
Size (bytes):	31006
Entropy (8bit):	5.548029155315869
Encrypted:	false
SSDEEP:	768:qJhfJmZTlv2TmXEJ24mk/B4UnbjLeYX8iHMfBcv5mc5ajNeB1o0oAWYOxIFTWwrq:8BbvXQrNeG8y
MD5:	B3E361BAAD69070C65C4394FC804D91A
SHA1:	FD42AAFB6463713F2BE75A5B73F08DDDF4DF6CB4
SHA-256:	D8427421CEE0B7A9768B360DA1C8F81E6F49E5561AC44884B627C8070156C3E3
SHA-512:	0BD3D87BE1C52431A8B374D059364F8568ECA7343AC0CE2222B64DEF544D97731B86C8B3A49DC44E2EDFF0234A3C9CD91E1801B8CFCB9B0C88BC96E7D6E40679
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/onion.js
Preview:	google.maps.__gjsload__('onion', function(_){var gZa,hZa,iZa,WP,ZP,YP,lZa,mZa,nZa,kZa,oZa,aQ,pZa,qZa,rZa,uZa,wZa,xZa,zZa,AZa,DZa,FZa,HZa,KZa,GZa,IZa,MZa,JZa,NZa,fQ,gQ,eQ,hQ,SZa,TZa,iQ,UZa,VZa,jQ,WZa,XZa,kQ,c_a,b_a,nQ,h_a,i_a,j_a,g_a,k_a,m_a,pQ,q_a,r_a,s_a,l_a,n_a,o_a,t_a,u_a,oQ,D_a,E_a,H_a,G_a;gZa=function(a){a=_.kJa(a);if(!a)return null;var b=new VP;b=_.Yd(b,1,_.qD(String(_.Ec(_.Xg(a.Fg))),0));a=_.Yd(b,2,_.qD(String(_.Ec(_.Xg(a.Eg))),0));b=new eZa;a=_.qe(b,VP,1,a);return _.Kb(fZa(a),4)};hZa=function(a,b){_.Bg(a.Gg,1,b)};.iZa=function(a,b){_.Bg(a.Gg,2,b)};WP=function(){jZa\|\|(jZa=[_.N,_.M,_.O])};ZP=function(a){_.LG.call(this,a,XP);YP(a)};YP=function(a){_.cG(a,XP)\|\|(_.bG(a,XP,{entity:0,Ym:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],kZa()),_.cG(a,"t-ZGhYQtxECIs")\|\|_.bG(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};lZa=func

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4599)
Category:	downloaded
Size (bytes):	242785
Entropy (8bit):	5.694550757163063
Encrypted:	false
SSDEEP:	3072:tYjmEMff7T2m2xbBx+Q7k9/u+3WZLo9pFZt9:tAmdwxvz7ko4WZLo9pLH
MD5:	9C7F2BF38E74C943D9D73E38B1042544
SHA1:	432C5C2CB5A5B58C35114BFBBEAE3C701BC3AC16
SHA-256:	E3BAB8703D23B4A6342BB78CE8E9025EA8673C1C22C26A29BFFFF4A5184CC521
SHA-512:	371841087F95881EE45F51E09D5599659C8265F0A8A7731DB8FC429CA793B59141077C038CD0904AAD91B85268EE6FDCEC3B98700A11FA986236843E6C6FBD7B
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/maps-api-v3/embed/js/58/6/init_embed.js
Preview:	(function() {'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function ea(a){return function(){return this[a]}}function fa(a){return function(){return a}}var m;function ha(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ia=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ja(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var la=ja(this);function p(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ia(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceo

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6656
Entropy (8bit):	7.945955500046908
Encrypted:	false
SSDEEP:	96:pm4C8LhFTWnIesjADSCsWq9VeVzqaUy89rVnUr1CzZaX7E4mRymuysRs3iuLK8Ci:T7TWnMUD+VVZvCr12ZaiMRRuLK8Ci
MD5:	F11D1AF6314E5CA1283ADB80BC22610A
SHA1:	440D3519682E276F85D73DFA103A0B99094D3FA9
SHA-256:	C71E6C32D5EEB38DED7F7A0B25B01A3CD20DFFA26FEBB1FFC6A7559E8B202191
SHA-512:	559133E73DF9FA66745F995DF45FEC20946073511005E1EB125DEDBAF7B18A3632C2D6EA9751A953C2EB6C5D9F56DF845DA29C8E3A0D1A2BEBF04851DBA033F3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190
Preview:	RIFF....WEBPVP8L..../..?.....m%......t .C....l#.V.;.....).]...?0.m[..!..&....w.o..~J?.....t$..5..4....H.....W./.^.. ....e$x{.e..d.....{...1..(.V.,!.Z.s..o4.+..}<..`1X.....0X....`1X....'.;?\.7U..9..o...}.....T+~.H.U.....m....i .....}....,..[.b .=.....v...@B.r..YB...'.Y;.'...D ...$......7..O...'.".................?...??........(............8.6.4...U...M >N<........... ..0.N..dZ.uf.2. .....x."~.V.......S...........$..{I ~.~.......D.....OEr.a.'p..$.#..^.9^.o{M ?.......x;...W.z.j........!.........}...4N?......)...@.........`,...\.<.......5.T.......T.$...$......`.....A...}(...x.>E...c....B[.(7.}.D.\|..Sx$%I...y..$....'. .... ....x..`..@.B=}..d1..LP:v.6.6".l!.~...........;..=...b.{.-.)..o..>."...9.Si. ."}.A)H.$.t...L..}...O2......(..}...s&.&.\->.....EV..W.@.Kv...Z..]]...N.v....&.8..............[......$>h?.....4EK.....ZU;........!..c.....^...X.....IK....@...@..y.X`.{A6....B/....e..o..l.3.....'.....'U...\|g.....?&G.E..T.z..5l.,......

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65291)
Category:	dropped
Size (bytes):	69453
Entropy (8bit):	5.330146804102553
Encrypted:	false
SSDEEP:	1536:3VEcoepVAgjD1zCpHa2zXr8w8Yjma/fuT187V:3naqM8w8YjTf5V
MD5:	85BEF1B86B877DB4B17EA8BAE3EB7CD3
SHA1:	46D1F82F1FF4224130C6153A8A6DB457477B7097
SHA-256:	4490F15BCD903912985C78BA0B1D4ABBC94F7EEC240C8050685676D071B13D74
SHA-512:	88AE341FA16B5CC6B8558E88EB2D8C1E7CC309C3226CF403DE6C13FF7FBB33562B916E2EBD32C31338C5BDAD1CD2ACAE11B586FF5DE86C0E9B2289886B249D71
Malicious:	false
Reputation:	low
Preview:	/!. Bootstrap v4.0.0-beta.2 (https://getbootstrap.com). * Copyright 2011-2017 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.var bootstrap=function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t){return t&&"[object Function]"==={}.toString.call(t)}function r(t,e){if(1!==t.nodeType)return[];var n=window.getComputedStyle(t,null);return e?n[e]:n}function o(t){return"HTML"===t.nodeName?t:t.parentNode\|\|t.host}function s(t){if(!t\|\|-1!==["HTML","BODY","#document"].indexOf(t.nodeName))return window.document.body;var e=r(t),n=e.overflow,i=e.overflowX;return/(auto\|scroll)/.test(n+e.overflowY+i)?t:s(o(t))}function a(t){var e=t&&t.offsetParent,n=e&&e.nodeName;return n&&"BODY"!==n&&"HTML"!==n?-1!==["TD","TABLE"].indexOf(e.nodeName)&&

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	downloaded
Size (bytes):	78365
Entropy (8bit):	5.456753311036989
Encrypted:	false
SSDEEP:	1536:o/oPKW2/xQEiuVQf4bLR5dz34pkpZZvqxdESTsBKX4cg6KlJHkOV5FdaJC03Xu2i:uoPK//xQEiuVQf4btr32MZdqxGSgBKXQ
MD5:	9E43F550A52998CA7A0FD723D116582E
SHA1:	C6E39D9DFD56C38AA062CACF979D690C44E03C0F
SHA-256:	311E9E8A1ABDA5299C796E9DE880B4589FC5D52C72C0317DC5FF789B7929066F
SHA-512:	F759B63313B11E34815FE52186D31B6F1C9DC7B4A9D7D5425B5BF3048F5C005C85EFC044C342EF8B8A2B068FAE418EC0F44BEC148B59A29E2F40354DCB2F5C57
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/map.js
Preview:	google.maps.__gjsload__('map', function(_){var Gva=function(){var a=_.dr();return _.gi(a.Gg,18)},Hva=function(){var a=_.dr();return _.H(a.Gg,17)},Iva=function(a,b){return a.Eg?new _.cm(b.Eg,b.Fg):_.dm(a,_.lr(_.mr(a,b)))},Jva=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Kva=function(a,b){const c=a.length,d=typeof a==="string"?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return e;return-1},Lva=function(a){return new Promise((b,.c)=>{window.requestAnimationFrame(()=>{try{a?_.Km(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attempt.")):c(Error("Error focusing element: null element cannot be focused"))}catch(d){c(d)}})})},Mva=function(a,b){a.Fg.has(b);return new _.gra(()=>{Date.now()>=a.Ig&&a.reset();a.Eg.has(b)\|\|a.Hg.has(b)?a.Eg.has(b)&&!a.Hg.has(b)&&a.Eg.set(b,"over_ttl"):(a.Eg.set(b,_.Dn()),a.Hg.add(b));r

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	5.4357451956521
Encrypted:	false
SSDEEP:	6:U+4OUr940FFpFM+56ZRWHTizlpdUDUfPtxVk1mq:UJO6940FFMO6ZRoT6pSunqwq
MD5:	A61BAD8B26EF8914546AED6B68CCF7A3
SHA1:	AA77241CCEDDDBCBFB19BA28E07DE8280E1F1CBF
SHA-256:	9E06028665131F0A17F015003AC578BA216CE432EB0A6B787A7A1153F4A9721B
SHA-512:	D6A76313258E5B0DF752E6E7F3D98478C6D09619F8A444B2A8B0771385D04028A42091E01301EAA1A47D86F4BD9A3E2698A13D709D95D63937F607C944CB5622
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
Preview:	/. See: https://fonts.google.com/license/googlerestricted. */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/l/font?kit=5aUu9-KzpRiLCAt4Unrc-xIKmCU5mEhkgo3FI_E8lH570oBdIw&skey=b20c8ebc9802c116&v=v22) format('woff2');.}.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1546)
Category:	dropped
Size (bytes):	3482
Entropy (8bit):	5.280960217431154
Encrypted:	false
SSDEEP:	96:aPfvCM5D9f/xjdN3EGUkJuJ5VofaNdVzN2JfE:cfaM5D9f/xjfEGUjbofaNdV4ZE
MD5:	E48F188473D454074A2AB3A34870A0CB
SHA1:	620BC90A66495D3CE47B303DE88EE0419455733A
SHA-256:	E0DE807AE54325DFC02FA6EBE3C2F863BC5428B8E8FD98A9FE96119A953FD103
SHA-512:	D41F5430C6AEE123E05095FF41EFA6D68CE4DB7D99CB3EE1343DFF5AFB02D36A960C42CBC190E14119D174E557EAA995E4A324BBD935C95D2B30227E61CE41EE
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('search_impl', function(_){var izb=function(a,b){_.Bg(a.Gg,3,b)},mzb=function(a,b,c){var d=new jzb;d=_.WG(d);c.ur=d.load.bind(d);c.clickable=a.get("clickable")!==!1;_.EZa(c,_.lQ(b));b=[];b.push(_.bk(c,"click",kzb.bind(null,a)));for(const e of["mouseover","mouseout","mousemove"])b.push(_.bk(c,e,lzb.bind(null,a,e)));b.push(_.bk(a,"clickable_changed",()=>{a.Eg.clickable=a.get("clickable")!==!1}));a.Fg=b},kzb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},e.getStatus()===0)){f.location=_.V(e.Gg,2)?new _.Mj(_.$s(_.J(e.Gg,.2,_.et).Gg,1),_.$s(_.J(e.Gg,2,_.et).Gg,2)):null;const g={};f.fields=g;const h=_.Zh(e.Gg,3);for(let k=0;k<h;++k){const m=_.Zq(e.Gg,3,_.vQ,k);g[m.getKey()]=m.getValue()}}_.nk(a,"click",b,c,d,f)},lzb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.nk(a,b,c,d,e,h,g)},nzb=function(){},ozb=class{},pzb=class extends _.U{constructor(){super()}Pi(){return _.ri(this.Gg,2)}},qzb=[_.M,,,_.so,_.V_a];var rzb=cla

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5292
Entropy (8bit):	4.9079770162187355
Encrypted:	false
SSDEEP:	96:yzKTydVjRohBb/ly0KSV1W5A70Sg3iegMOOWsowUupNT:ysy3RohBrbcuciegMwSJ
MD5:	9A39FFD9D62A36AE4D823F6FC1EC3A77
SHA1:	F521572EF13F776E2D04D782671ACE3A967BEBE7
SHA-256:	F7C3A689A85F764AC11D5D7E6FE35A261A57CB501EC201C49755A6F871E09475
SHA-512:	4F094F1165A6BFDCD75F9184897AB9240DC6AABB505C7364B7885BD46D149FDC2A61C79EFEAB782C1CDCDF74A279E84F57CC077E87DF115C7DBE10595BBB2021
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349
Preview:	[{"id":"tuvwwwtvvvttu","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttu","base":[518113280,772014080],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"15596577848430255735","a":[0,0,518113280,772014080,518113280,772014080],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"Trader Joe's\"}}","io":[0,-13]},{"id":"4471800395013087799","a":[-19456,74752,518093824,772088832,518093824,772088832],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,10,-22,111,-4],"c":"{\"1\":{\"title\":\"The Tavern Grill\"}}","io":[0,-13]},{"id":"170857784169406294","a":[-144384,222208],"bb":[-40,-74,41,-56,-44,-60,44,-42,-32,-46,32,-28],"c":"{\"1\":{\"title\":\"University of Northwestern . St. Paul\"}}"}]},{"id":"tuvwwwtvvvttw","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttw","base":[518335488,772103168],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"13774563550963134328","a":[0,0,518335488,772103168,518335488,772103168],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (802)
Category:	downloaded
Size (bytes):	3308
Entropy (8bit):	5.5083394341383904
Encrypted:	false
SSDEEP:	48:fHKvPwII+sSQx+GzETrVdA6wcA411GbwIkBpCN63K91jJahGIdL2wl+nsIEGbR4t:fAwzx/5YTrVdB17I+puX7jECwljI1P2L
MD5:	2334D2C9424FC203B6672293A25994E8
SHA1:	D4CEFB27836F8BE576CC45C9BB0F5BA3AD281E52
SHA-256:	CE8FDEE05819227CE1A5EEC4B1B59B68599B26A414F5CA5343BFF490D4A6ED56
SHA-512:	11AC863540AB8EFD442986151E3CE798EE53FDC13C03F369380D5D37DE2D3405A1502AF88CD98BAC81E0ABE62B65B11F25F9DEFEDA94645D8B2995AB4A338D71
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/geometry.js
Preview:	google.maps.__gjsload__('geometry', function(_){var zsa=function(a,b){return Math.abs(_.fj(b-a,-180,180))},Asa=function(a,b,c,d,e){if(!d){c=zsa(a.lng(),c)/zsa(a.lng(),b.lng());if(!e)return e=Math.sin(_.Di(a.lat())),e=Math.log((1+e)/(1-e))/2,b=Math.sin(_.Di(b.lat())),_.Ei(2Math.atan(Math.exp(e+c(Math.log((1+b)/(1-b))/2-e)))-Math.PI/2);a=e.fromLatLngToPoint(a);b=e.fromLatLngToPoint(b);return e.fromPointToLatLng(new _.al(a.x+c(b.x-a.x),a.y+c(b.y-a.y))).lat()}e=_.Di(a.lat());a=_.Di(a.lng());d=_.Di(b.lat());b=_.Di(b.lng());c=_.Di(c);return _.fj(_.Ei(Math.atan2(Math.sin(e).Math.cos(d)Math.sin(c-b)-Math.sin(d)Math.cos(e)Math.sin(c-a),Math.cos(e)Math.cos(d)Math.sin(a-b))),-90,90)},Bsa=function(a,b){a=new _.Mj(a,!1);b=new _.Mj(b,!1);return a.equals(b)},Csa=function(a,b){const c=[];let d=[0,0],e;for(let f=0,g=_.Yi(a);f<g;++f)e=b?b(a[f]):a[f],rA.tE(e[0]-d[0],c),rA.tE(e[1]-d[1],c),d=e;return c.join("")},sA={containsLocation:function(a,b){a=_.Rj(a);const c=_.fj(a.lng(),-180,180),d=!!b.get

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, progressive, precision 8, 1430x953, components 3
Category:	downloaded
Size (bytes):	545869
Entropy (8bit):	7.98936103302457
Encrypted:	false
SSDEEP:	12288:hB48trnkHHAQIea+uWBACjnsiGygWFGG/WY2:hndkweaLk3tFb/WY2
MD5:	FB6553092CC6F3694A56754F2CCF7ED1
SHA1:	F28F5532650C766514BF3697E3A3F114CFE04B73
SHA-256:	528F085D40BDBD0532DD8011445728F69D4ADCD4DE3C863D685C05AC2EAB1DFB
SHA-512:	194B652FFA90701D625CB2777F1B3576CFF3EC796BCFB5D48F8B0F8072388A51A3A045D7E82F888A03AEBA0C24F85F63899278FEE5299DEF9E8F397BE4D79D3E
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/herbs.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"..................................................................................Q..g.2u@+.....a..h.x....h:...._Y...Z5md.\...n....+8.I.u~0w\|.GY.......w8:T.C...c>>.Y~...J.N.9u..1......._....m#.Yms..q..\.%.>.'.u.;...WD...[E.+.".p......fVGCE.....1..8..a4.S&..I....].Q...>......U. ....k};.....=2....=....M,......I.i.}@................Q..^...;.t.<..l..Qw.h..]Z+:y......\|qa...<...S.......F..........F.4H.f.fT..B.n..I.K.T`.;5..t.>..NW@..0caz..vG..\.\|U...(k..........1z._.........R...0....]..wR.].h.J.[k.. .D.X.=...z..nrt]Y.Q....fa..)..\....g0.l-...\|.s..R......l..c.k.Uy.M..~.F.1............:.M)..d6.:.1:.62...sF........2...3.i.t....>........I.y.....5.4...JRr5.T.....l..fP...He..E.}.....nd.,^gO5..{O.e.j....I....`O.{.....R..ui.fL.....?P.Fg..elN;K~mq..p..g.S..x...u....'/qd....A..O../![.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 2889x1921, components 3
Category:	dropped
Size (bytes):	1784336
Entropy (8bit):	7.977002246435201
Encrypted:	false
SSDEEP:	49152:HR9/Zc+Q7NW0fKUZXveRd9WcPD1jVRmOKo:x9RcvQ0bZLyBjXm9o
MD5:	903466F12B71232C63189D764F74595B
SHA1:	10F474BF9A03BA3FB87AB18C1CD338A4AFC8C176
SHA-256:	806CC720BCA417D48A1981D10D798287F06CDACB71E8A75FE6ECE1E6C77EA694
SHA-512:	8C17FF9A51C3BD0060423BDC5FF05D5BFAA173BC32C7EAAE56C9A5B5EA25624E7311BF6841EE4D4277FAF0D01FA65CA8F94F76FEE2CFFD35FFD8DDA9B2DCE991
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM..............................J...........R.(...........i.........Z.......,.......,.............................I...................8Photoshop 3.0.8BIM........8BIM.%..................B~........I.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?..~..oz...I.`.^..&x.T.\|..3.g66.,h.4`...}....Z".....`..nd.~'.e..3.:._.F..~C.y.x1.{.bxv..t....\|..[>..m.$....@.fB.'.#p.=.?Zg......].<...-..zv.k.l.w..iB...........;..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=18, height=3744, bps=230, compression=none, PhotometricIntepretation=RGB, description=Hand filling out checklist on clipboard with a pen, manufacturer=Canon, model=Canon EOS 5D Mark II, orientation=upper-left, xresolution=314, yresolution=322, width=5616], baseline, precision 8, 1500x1000, components 3
Category:	downloaded
Size (bytes):	247921
Entropy (8bit):	7.909330526432357
Encrypted:	false
SSDEEP:	6144:bdoUKSIGFb88bhGqTTB+adxgRMg0uS9DSzMF:+U9/DsKTB+yyRSl9
MD5:	D6247B0B24E0EAB055686D06650FDA3C
SHA1:	C08FEE4F4F0001DE7D01D36B3BA552C8F219B675
SHA-256:	9E148060D1E78FDB02C6BB62D4D5E042ACCAB0E4CBA8664562C67773980ED4A4
SHA-512:	E0B546860C5E3B544BEAD6366DFA6830193718EA21068F2BB3C89682561BF06BD74BCB2E5224D8DCD84DF00317CB3FBAD16C764F6955712222B1D18A1E9BBBC6
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/consult1.jpg
Preview:	......JFIF.....,.,......Photoshop 3.0.8BIM.................Z...%G..Z...%G..Z...%G..Z...%G.........x.2Hand filling out checklist on clipboard with a pen..z..Robert Kneschke..i.'Hand filling out checklist on clipboard..P..Robert Kneschke..U..Fotoproduzent..n..Robert Kneschke..s..http://www.robertkneschke.de....'Hand filling out checklist on clipboard..7..20110702..Z..K.ln.._..Nordrhein-Westfalen..e..Deutschland.....hand.....business.....control.....clipboard.....checklist.....scheduling.....success.....tick.....hook.....checking.....decision.....businesswoman.....review.....bureaucracy.....check.....choice.....choose.....inventory.....management.....test.....execution.....completion.....career.....working.....write.....inspector.....manager.....inspection.....woman.....man.....judgement.....judgment.....controller.....examiner.....pen.....student.....education.....economy.....corporate.....controlling.....inspect.....work.....planning.....ball pen.....Caucasian.....cutout.....copy space

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12298
Entropy (8bit):	7.977311339337291
Encrypted:	false
SSDEEP:	384:i0jmp0cSaia7V/7KZnjTI2ios2CvScMXG6:njmpLMGsnvu2Zcw
MD5:	7FC2FC00558221A9962A3B2DF3394AC4
SHA1:	E53311F380652DF19C3F10662D0B276E9E2653F4
SHA-256:	2177FF9963D8165F35111FD639A285E4F2AEC8AD5A8FB8AA81C7C51C554E30EF
SHA-512:	97872377622AEC5CC35901C7F5BCBE35784DC1736CEBB83A81B5EF49FAFFF06B0D3E87A028CB137ED5AF39DCA6CB77940D7E54A6C168A2AAE04B27D696E3C1FD
Malicious:	false
Reputation:	low
Preview:	RIFF.0..WEBPVP8L./../..?...m.z.......0.un..l......y..~.w.d.J...kF...X6!.O.?.jk(..D....".3 `...`.....0i".@Fw..L......S.....A$.(`..."....B..$CinH3.d.7n.W."~].=.....x.X'X.._..W[..M....Zl...........w....F.1....f.;.\|...2........OL.r.vr}.eG....B..........~......_..#..m....O.lK.$...,eIH.B......\|..y.....'.sF........C..j..G'...........W.6H:\.;..6...&#..........r.......}. "u.'..-...H.:..[.P...SF)...\|C.].E.~......E/UW...S%C./..D..H.DcK...l...Q&.mk....?....'....g..............2.%....)s...r.ll.I.=D.....jv.....l...n...._f..].Bd[,4gvVr.....ZKj.M.{(.s.<.f.O.V...AE...W.oH........Tjm[O....^..,.......vd.2...s....A;D.....1..(.}2^G.l.N.X...'....J.....*.z..Y...X..3.-I.NM9.!.I.x.Z........Yf..(L...B^/o9..!.c.1T..u.'o......f.,.%m...J7.E2....R...0.h....$xn.7...Xb..+..<g..1_f....?.....$o.....e#hv..Q..vcz#n.e..Ci.7L....V.!..3;.g$.[.....Z.9..$.[e9w.'...C.C. .{S.sp...(5CeL..m..&. ...i..-f04J.,JGT...#k.[Lr.G....-i.t[.S...Z.d1..v....A..Z.!..p...w...M.$.ySlm.A.<4

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2736
Entropy (8bit):	7.878379284610188
Encrypted:	false
SSDEEP:	48:BLB1/t3/Ao2OJcoScPYpu66mqWKCB7sBKLDvyypkvHJ4ledzjnE5A8U:Bvt4vOnSc6qvCBcjCkPPjnE5A8U
MD5:	2DBA96933B3FAF6B34F9C85CCF84E8F7
SHA1:	10C4ECABD0F2C443F3A2BFE0776BDBFDA7B96F03
SHA-256:	6532EB4609444903D95FA9343E1B83ACE20887A0AEE5E658815F4854F55330B5
SHA-512:	0513292884DC73AE2064B9EC394711C821FEC301B6CCE78095902230A82E4D4449A3907DB2DAEE79DDDB1020FD5A35B899C3F425C6E6C400A91D9C2D7A26E170
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...&..4\|\|\|^..ds...`..`.XS....]..".J.N....x.._w.....?..\c4}...AJ.u:.....!Y5#p.......z.%."wmZJEC;G.@;O.[.d.mh..CCcpH........~E..q.....l.n....o.{...\...\|.k.S.n...\|..I..>.._.A.........m.c.-...m9.....W#..V........"....q".........k..o.Bd?.N..C.>.^.Y.\|_.....8.O.5p......5?..j...B....:]...!Tn.v..@.\'..q..@....u..H...t...5..j.:U..!r.0......"{\|}}...W..z....V.._...!..b...V........5..aW...M)......xL....W.r...rk....Y..h....Fm.43.......Q..U5../Z.h#".M.h.$UI......I.Kz\|......]EJ.~.........H7...Enms."........X..-k..j..[../.Y Y..U....ss.....G%.$.aR}....h..^ ^U..R..4.Uey.z0T.].n^.N)...U\|n.W..,...E5.K..G\..`p....m.v.)M..........3I.1.%...RR5....hj.(M.......T.I.@.,.w...43#..jVa]5....hVJ.R.R..av.....c.8.........:^.........3.U.....X.S..V.rng.8n1n...3 `..=6!..j...J.C..!....v5..j...J.C..!.n.".F:.B.....t5..P.P...5...t.......!...j.].!r..A.......B..^........"...PAWC.....p"..8..E..!.s.....#Lw..\|..i..l.5......+....g..e....c..).=.R...$.b.w...=.g..

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1728)
Category:	dropped
Size (bytes):	100448
Entropy (8bit):	5.479146671020334
Encrypted:	false
SSDEEP:	3072:Ts/NqiH30UHOxRtwU7VAl1qhTXOisdwvjKL+7C175pbmdIUM3SaLsGgKeFz9Pv2k:TsFbaRtwU7VAl1qhTXOTwvjKL+G17nbW
MD5:	38A9E58596C644102CCEEE1BF7EE9F62
SHA1:	408F4547B0D725FF0B2B034226121C218EC2C476
SHA-256:	0FC958F3E96D33DC3F953955B1192A90C9364F7A5E51AF1F323A91598B998A63
SHA-512:	DD6BE2E896E11F7F3579902E0154C7C4788371FA7A455523C068234881C962BE121831DFD83C0488877B4D944066199DD384020068924D3D2A5CB1784D146AB8
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('controls', function(_){var QKa,mL,RKa,SKa,oL,TKa,UKa,VKa,WKa,qL,YKa,rL,sL,tL,uL,$Ka,ZKa,bLa,vL,cLa,yL,dLa,eLa,fLa,wL,AL,xL,zL,CL,hLa,iLa,jLa,kLa,lLa,mLa,gLa,FL,oLa,nLa,GL,HL,qLa,pLa,rLa,sLa,tLa,wLa,IL,vLa,uLa,xLa,JL,yLa,KL,ML,NL,BLa,CLa,DLa,OL,PL,QL,ELa,FLa,RL,GLa,JLa,HLa,KLa,TL,NLa,MLa,OLa,VL,QLa,PLa,RLa,SLa,WLa,VLa,XLa,WL,YLa,ZLa,$La,XL,aMa,bMa,cMa,dMa,eMa,fMa,YL,gMa,hMa,iMa,jMa,kMa,lMa,nMa,$L,pMa,rMa,aM,sMa,tMa,uMa,vMa,xMa,yMa,wMa,zMa,AMa,BMa,DMa,EMa,HMa,IMa,bM,JMa,CMa,FMa,OMa,MMa,NMa,LMa,cM,PMa,QMa,RMa,SMa,VMa,XMa,.ZMa,aNa,cNa,dNa,fNa,hNa,jNa,lNa,ANa,GNa,kNa,pNa,oNa,nNa,qNa,fM,rNa,HNa,dM,gM,yNa,UMa,mNa,BNa,tNa,vNa,wNa,xNa,zNa,eM,uNa,ONa,SNa,TNa,hM,UNa,VNa,iM,WNa,ZNa,YNa,$Na,XKa,aLa;QKa=function(a,b,c){_.Uq(a,b,"animate",c)};mL=function(a){a.style.textAlign=_.aA.zj()?"right":"left"};RKa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};SKa=function(a){return String(a).replace(/\-([a-z])/g,fu

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS 60D, orientation=upper-left, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Photoshop CS5 Macintosh, datetime=2015:01:03 00:04:04], baseline, precision 8, 5184x3456, components 3
Category:	dropped
Size (bytes):	11237492
Entropy (8bit):	7.89071193700906
Encrypted:	false
SSDEEP:	196608:4AJHsY5GSI1l54F53wTwBc32pniCHO1HTJ37XjHdJRFFRUV6Gg2Oa9m94/QteQfC:4usY4SW54F53kwBc32pixHtxR0OViotg
MD5:	B6B5460C24D12139BA22E6BD560A1B3C
SHA1:	CE73A2ACA2A9258F805521C9327FAB9643B05950
SHA-256:	51E5AD62632E5C40981DF21433E2DA6CA13FC95547D9CC8F12F5CB5F97CA347C
SHA-512:	1617F2A06DC4D9AC89FE5303C43E0BFA78D445E845B8F37A2BA070490CC982B44B2D38263C8F0D537E23F7DB5DF318F08DB65F31144DAFC9DA8B406B96FB2980
Malicious:	false
Reputation:	low
Preview:	......Exif..II*...................................................................(...........1...........2...........;...........i...........<...Canon.Canon EOS 60D...$..'....$..'..Adobe Photoshop CS5 Macintosh.2015:01:03 00:04:04.Yu Lan.."........................."...........'.......}...0...........2.......}...........0230................................................................................................................................86..........86..........86......................@...................................................................................................1...........2...........4.......%...5...............................2014:12:22 12:45:21.2014:12:22 12:45:21...........F.@B..................d...d...0.........O.......4.S...2531404834.................................18-200mm.0000000000..........................................(.......................................H.......H.............Adobe_CM......Adobe.d.......................................

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12504
Entropy (8bit):	7.964029113306208
Encrypted:	false
SSDEEP:	192:xZ8ACdDhM6tEds5WYCZrAEFnewATKHWl8LzZowOSTRvwD7OibeWejAozikZJg1:x+ACoG6AEZvLnnVs7OnWeXN+1
MD5:	1DCD6DDAA644877627C8BC2A750B5F4C
SHA1:	04120A8F0CCE2DA9F45918527F06D7E717778EE2
SHA-256:	817B0FC2AE6A7254986A92C5DC6709929307B9B09026F13D46FA2DB61FA2A3EA
SHA-512:	23155A13BF36728405E9F4E3FB886A3A26A330A2643D285715147EEE2A316E11680BA2EDAC1DBB2107B2147F026D040C04658057DB926FF651E83FAB52100A8D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471
Preview:	RIFF.0..WEBPVP8L.0../..?.g.:.d%...'...a.;7......w....h...H#...l..M..}.....8$.q.d.C.cD.'.C..0.p....`"L...T$...~..v. ..z_.'%.......@....i29....9d.7Y.......n..R\.\U..,Htym....j<......PO.#..5..dy J5Qbs.J...!q6.6..k.^...,..e.%.....pb..@`.}9.....'.m......-U.$.ZW.t...tU...[+X....d2....D.'..G.._..quI.}.....\.1.OX{.O...OBr4{.^b.<....$..W....+...+...t>..6......g...W...h.......QBXa.....:r.1...........P...<.5...>M...x..i.z.&...........U..+~.^O..I.Nwm5....ej.o...G..U..+^0&....-..........!A.l.m.t. 9.\|.^6..M.<..........f..Y..p......G...%L.f..9`C..FT4`..P.6.jr.Y.z..j.../.{...\|.....r.4...`54..,x>.a..b."$ T.9......8.L`Qv.?.C?.P._O...~9}..%...&.VQY..h>.......x.T. .....D..f...f.D;.X..xK..........?M.s.6.w]0.p4.l.Yj.V+.r..$K.hf ...P...~n.@r4}.^6......9.i.).b6...1K...}.....'upU..x>}.^.L.f..t./..iVb...}...u,.].Y...+..j..3.../.. ........K.9t.:..,7.....&.3^<]N...5.gs@~,z.~~$.6...S^.tf._N...$.z6......]..cS.O6.l>.>-.W...x1....9 ?..n3..~..Co..88..1.........r.k...a.F2.A>

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2274)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.472058916529008
Encrypted:	false
SSDEEP:	48:yMjDJXzcQKCyd3EkdkR998rTiZRiimhQsAP2NP2+P2evLy45r2o:yMDJXzcBCyd3ESYD8viZRLmO56JlvLKo
MD5:	0FFD9427BB9C320B8D8C36DF6E3A9296
SHA1:	CC0C17C2FBFA2B2F01AECC49684AB8A3F92367EC
SHA-256:	17E39C184D36C2E9E0C8B3196D6E41B2F9F72A1374D2AC3BD6D8EC30B3D89AC4
SHA-512:	36844917E7F164348ABEF6E30355E601BDAEEFD13636F28AB68F0864DD775A9EF32FB4AEEE5CC6E85BF42BF93665C98F9E62F0625A692F2FEA26B7CB596998FD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582
Preview:	<!DOCTYPE html>.<html>. <head>. <style type="text/css">. html, body, #mapDiv {. height: 100%;. margin: 0;. padding: 0;. }. </style>. </head>. <body>. <div id="mapDiv"></div>. . <script nonce="vna3ecYZtRc6yNylrm-43A">. function onEmbedLoad() {. initEmbed([null,null,null,null,null,[[[2,"spotlit",null,null,null,null,null,[null,null,null,null,null,null,null,null,null,null,11,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,1]]]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["5959049372336990895","16764649418909640010"],"/g/1tf5_ych",null,[450364892,3366701657],null,null,null,null,null,null,null,null,null,null,"gcid:shopping_center"],0,0,null,null,0,null,0]]]],null,["en_US"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/upgrade204",null,"/maps/embed/record204"],null,null,null,null,null,null,null,null,"2OL2ZvquAvWDi-gP_dey8A0",null,null,null

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, PhotometricIntepretation=RGB, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2016:08:30 02:34:45], progressive, precision 8, 4287x2306, components 3
Category:	dropped
Size (bytes):	5747796
Entropy (8bit):	7.8633950894120845
Encrypted:	false
SSDEEP:	98304:AL2jnAa7d6EG0UgfkCz8IxlLFcqTuxu1ZqDZ8QOZxHGDXHEjmV3jguXLxinxT+5U:ALknAa74eUukCZneqTuxu1Zqy6D0apja
MD5:	A4BDFE020B147218D39490CD6547D34B
SHA1:	426C36D420AF41B6217DA4FD1342F9270AB45A39
SHA-256:	F5735626AD83ADED70ADE9C47E854A37F3FF59BB75FA77A8E6763C82EE1C99F9
SHA-512:	8F33FAA7940E34E5241583F1146AF95B9E15AC406BBB2101D1A9AF079C444F1825EB063C9E59EE0FD7EBBD08C96D0E5275F6A91916FD73B024706225A5B72A00
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.........................................n...........v.(...........1....."...~.2...........i..............................Adobe Photoshop CC 2015 (Windows).2016:08:30 02:34:45...........0230....................................................2016:08:30 02:17:39...!.http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:crs="http://ns.adobe.com/camera-raw-settings/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" crs:LuminanceAdjustmentGreen="0" crs:HueAdjustmentGreen="0" crs:SaturationAdjustmentYellow="0"

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12504
Entropy (8bit):	7.964029113306208
Encrypted:	false
SSDEEP:	192:xZ8ACdDhM6tEds5WYCZrAEFnewATKHWl8LzZowOSTRvwD7OibeWejAozikZJg1:x+ACoG6AEZvLnnVs7OnWeXN+1
MD5:	1DCD6DDAA644877627C8BC2A750B5F4C
SHA1:	04120A8F0CCE2DA9F45918527F06D7E717778EE2
SHA-256:	817B0FC2AE6A7254986A92C5DC6709929307B9B09026F13D46FA2DB61FA2A3EA
SHA-512:	23155A13BF36728405E9F4E3FB886A3A26A330A2643D285715147EEE2A316E11680BA2EDAC1DBB2107B2147F026D040C04658057DB926FF651E83FAB52100A8D
Malicious:	false
Reputation:	low
Preview:	RIFF.0..WEBPVP8L.0../..?.g.:.d%...'...a.;7......w....h...H#...l..M..}.....8$.q.d.C.cD.'.C..0.p....`"L...T$...~..v. ..z_.'%.......@....i29....9d.7Y.......n..R\.\U..,Htym....j<......PO.#..5..dy J5Qbs.J...!q6.6..k.^...,..e.%.....pb..@`.}9.....'.m......-U.$.ZW.t...tU...[+X....d2....D.'..G.._..quI.}.....\.1.OX{.O...OBr4{.^b.<....$..W....+...+...t>..6......g...W...h.......QBXa.....:r.1...........P...<.5...>M...x..i.z.&...........U..+~.^O..I.Nwm5....ej.o...G..U..+^0&....-..........!A.l.m.t. 9.\|.^6..M.<..........f..Y..p......G...%L.f..9`C..FT4`..P.6.jr.Y.z..j.../.{...\|.....r.4...`54..,x>.a..b."$ T.9......8.L`Qv.?.C?.P._O...~9}..%...&.VQY..h>.......x.T. .....D..f...f.D;.X..xK..........?M.s.6.w]0.p4.l.Yj.V+.r..$K.hf ...P...~n.@r4}.^6......9.i.).b6...1K...}.....'upU..x>}.^.L.f..t./..iVb...}...u,.].Y...+..j..3.../.. ........K.9t.:..,7.....&.3^<]N...5.gs@~,z.~~$.6...S^.tf._N...$.z6......]..cS.O6.l>.>-.W...x1....9 ?..n3..~..Co..88..1.........r.k...a.F2.A>

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop Lightroom 6.12 (Windows), datetime=2017:08:02 17:46:50], baseline, precision 8, 651x450, components 3
Category:	downloaded
Size (bytes):	162555
Entropy (8bit):	7.960585957642469
Encrypted:	false
SSDEEP:	3072:17CbKwRq+tjz+aOBlrudDYh6+0zOKn629XykWUJJ1W+idA4:17wRftjzlmCDYfg62djY+idA4
MD5:	BDDB58446C1DDF8F2C6834157A0EB2A1
SHA1:	C5BE8EF97EF383F14D6027FEB3E7CC2BC8E6A58C
SHA-256:	E63C396E9FF28A429CE05501E5D8EA127C1BD15FA8C54970A9939C4835E5E7DC
SHA-512:	A58EA11D466239887156778B7611A00979D97F5BAC644D972E704B9DDCFFBDFEBD3723D08FB920F0E33C7BE3406884AD312602C34061BC7D60DEE00C664C9564
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/tuina.jpg
Preview:	....&`Exif..II...............V...........^...(...........1...)...f...2...........i...............,.......,.......Adobe Photoshop Lightroom 6.12 (Windows)..2017:08:02 17:46:50...........0230......................................................(................... ...........8%......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................!..1."AQa.2Bq..#R...b...3Cr.....$....DSTcs...........................!1."AQ.2a..Bq.............?..-t..C. .{C...u....Ys\|:\|{.1.18.r.\|k.I.v...5.n.7P....zt.h.Y.<zm.......,.^......q>...x............W0......U..P.......q.i...xj..s.....Q....6nE+!..adr..L.9f..#.mH...o.F..&.H.\............)...#R.~U.]E..W.....y(.......?<.W...cW.M...N......;.q4.c.ni.B..X....Sr\.o...+.WK..l.F....m....>..?..W..a.XU.R?*.O....=.D`....&..7..\....O-KJ.i..F

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10649)
Category:	downloaded
Size (bytes):	11799
Entropy (8bit):	5.943533365296097
Encrypted:	false
SSDEEP:	192:2IGIsmhPZjK1+UnNFa2sVCR/Ib0j3X+mavMPW+pPo8tvFDegG/Rmwehp2quW+Etg:lVsmO+QNFa2sVCR/Ib0j3X+mavMPW+pa
MD5:	8EC3E262EF0F1FB41FCAD33BB666D955
SHA1:	D125E7AA8113E84D9D11E6163E640C4A4B63AE96
SHA-256:	5D23D6DFA294ACDB4A117C8A1DA371F9269C2DC7E2F8779037E7214DF733122A
SHA-512:	FAAC13D3FF07C1CCAE91FE21168439E52DECD2FE016042CA72FDEF9B912168E8176EF1A5A5ECC93AEE9FCA081268262E3D3EA893AC4EBFC5F476BEBE21295BF6
Malicious:	false
Reputation:	low
URL:	"https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=en_US&callback=onApiLoad"
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=988\

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10626
Entropy (8bit):	7.9599717307129
Encrypted:	false
SSDEEP:	192:8VgV1zpUyt8FKem3iCeJaUwqQbvQgWG7dPsJk1nrdesCoQ0eGGORyjTE:84hpiZJNwVrWqsJQoXngGORK4
MD5:	8E17C1A7E71BE874D94F4FCA2F151300
SHA1:	86659E77647D77B66676404DCE5053C346327A38
SHA-256:	918A70B9FADA3A2B980688B77F9B5FF50C268757B5434CCD26435E11CE660221
SHA-512:	05211E34745B4CA67DDDF42772A14D98E80FB7F994E636409E8945B82B7645194B8E2B301CA494697FD6331EA6BB202E8F907E3E7BAA5C9B35F3AD9DF4F03DF7
Malicious:	false
Reputation:	low
Preview:	RIFFz)..WEBPVP8Lm)../..?...8.m.z.... .H.....s.`\../.Y..%(H...n>..{?..$[U..8.dG.$.r]w.."S$.......@.1...@..@@....P..(..$.......t...6X..vcN@d R%s.9.B..2.......D..$.............^..MXTQ\|...7ff..X.3s..Z..$.EX37.G}...{k.;...O..(...8LqA....a.^...d........w.\W.c..m.4..&l.&.H...@.E.J+U..Cqi;....c.f!..\|?........ru....l...tu.R?.R..qyz._.e\......%u,..Y..bb...7.2<.... ....\Q...\|...`mf...V.W..K....M...nW2K..C....&./.ds...\|....i.Hs..(.U..]p(.t!C._.-...k...-......5...B...f.Z..D..U..hC.D.<T.."...t.........\)83.7Jn.]ep\|D...6....i....@..Uzo...3..E....~.\|h{.T...P..D2."9.......Q%...."..7...O......Ry "U!RI....}9.....E.n.5.].v.X.\|s%cz.._p..[Y"....g...^...{.!..t.G.UF.=.v.....t#.Xpes..^.o/....w..5...n.~.....#.O...Z..j..B2 .3......V72>.$".,v..j.E.8.Qb...Fl1pR.7.7XH......FZ.e.......C..^..8..v..]/w.2.p.X......iU....A.f; :J....N....E.h.f%K.z%.7!I.p.2.....) "A3....f.}Pbq}'...z. ..Z......&.....O....Y.....u.....vP).0.4.L.........WdL!/..TV.............q...3Q.4L..f.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 720x486, components 3
Category:	downloaded
Size (bytes):	108223
Entropy (8bit):	7.972433098203167
Encrypted:	false
SSDEEP:	3072:wQ2EGDtJn0CmvTTEu4O9Uagl5Iio7WenMqj:EEO0PvPE3O9bgl5Qyej
MD5:	86E75A50D016A5246EDA81B8D1881DF4
SHA1:	72E8E5E9CB6961F25E7BF24D5223D03EDD2679CE
SHA-256:	CA9552188AEDD8325476AE93649F24EDE0AB5C3CCDCB614D69866FEACACA3AEA
SHA-512:	C39FA94131A37D7798F94EE10BFA8C771A01AAB73E8B76EF8D37C9F1A71DA54F636E8E0EEB1F399CD2A036CD10FBBE286EBB9CDC777BE1AAA2748C613A8FB139
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/cupping.jpg
Preview:	......JFIF.....,.,.....nPhotoshop 3.0.8BIM.......R...........ARPA,MARK,MEDTOR,MEDWAS,MEDLON,ASIA,APC,USA,CAN,SAM,SPTS,RONL,AONL...................RTRPIX..(..00675115..2..PIX..<..4..F..20160808..P..165156+0000..Z...%5............OLYMPICS-RIO-CUPPING.....ORIGINAL.....4.....S.....SPO OLY SWM.....RIOEC881AUJDR..(..EUO..7..20160808..<..165156+0000..A..Paneikon..F..3.1.7.1..P..DOMINIC EBENBICHLER..Z..RIO DE JANEIRO..d..BRA..e..Brazil..g..OLYCN33..i.'Swimming - Men's 200m Butterfly - Heats..n..REUTERS..s..X01771..x.T2016 Rio Olympics - Swimming - Preliminary - Men's 200m Butterfly - Heats - Olympic Aquatics Stadium - Rio de Janeiro, Brazil - 08/08/2016. Michael Phelps (USA) of USA is seen with red cupping marks on his shoulder as he competes. REUTERS/Dominic Ebenbichler FOR EDITORIAL USE ONLY. NOT FOR SALE FOR MARKETING OR ADVERTISING CAMPAIGNS. ..z..CN.....3S.....en.................Z.........XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12298
Entropy (8bit):	7.977311339337291
Encrypted:	false
SSDEEP:	384:i0jmp0cSaia7V/7KZnjTI2ios2CvScMXG6:njmpLMGsnvu2Zcw
MD5:	7FC2FC00558221A9962A3B2DF3394AC4
SHA1:	E53311F380652DF19C3F10662D0B276E9E2653F4
SHA-256:	2177FF9963D8165F35111FD639A285E4F2AEC8AD5A8FB8AA81C7C51C554E30EF
SHA-512:	97872377622AEC5CC35901C7F5BCBE35784DC1736CEBB83A81B5EF49FAFFF06B0D3E87A028CB137ED5AF39DCA6CB77940D7E54A6C168A2AAE04B27D696E3C1FD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050
Preview:	RIFF.0..WEBPVP8L./../..?...m.z.......0.un..l......y..~.w.d.J...kF...X6!.O.?.jk(..D....".3 `...`.....0i".@Fw..L......S.....A$.(`..."....B..$CinH3.d.7n.W."~].=.....x.X'X.._..W[..M....Zl...........w....F.1....f.;.\|...2........OL.r.vr}.eG....B..........~......_..#..m....O.lK.$...,eIH.B......\|..y.....'.sF........C..j..G'...........W.6H:\.;..6...&#..........r.......}. "u.'..-...H.:..[.P...SF)...\|C.].E.~......E/UW...S%C./..D..H.DcK...l...Q&.mk....?....'....g..............2.%....)s...r.ll.I.=D.....jv.....l...n...._f..].Bd[,4gvVr.....ZKj.M.{(.s.<.f.O.V...AE...W.oH........Tjm[O....^..,.......vd.2...s....A;D.....1..(.}2^G.l.N.X...'....J.....*.z..Y...X..3.-I.NM9.!.I.x.Z........Yf..(L...B^/o9..!.c.1T..u.'o......f.,.%m...J7.E2....R...0.h....$xn.7...Xb..+..<g..1_f....?.....$o.....e#hv..Q..vcz#n.e..Ci.7L....V.!..3;.g$.[.....Z.9..$.[e9w.'...C.C. .{S.sp...(5CeL..m..&. ...i..-f04J.,JGT...#k.[Lr.G....-i.t[.S...Z.d1..v....A..Z.!..p...w...M.$.ySlm.A.<4

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3664)
Category:	dropped
Size (bytes):	296574
Entropy (8bit):	5.4789881757349805
Encrypted:	false
SSDEEP:	6144:587K0nBdQUUiaWlA8c+NgYCsGsRthM7aSaQ/2pQVrrl/BM9NXuC2r:587K0nBdQUUiaN8cFYlM7aSas2pQVrrj
MD5:	263B942BC5E51BD9868FC0E2CAEA89A0
SHA1:	894341592CC3BCD96287651D2A32F4B7C6DE85CA
SHA-256:	1729747AE6545E8764A8BB3D0529ABB8681587FA816A9D7857B84D406BCB5AD2
SHA-512:	0B0F81624489AB0720CCD2B486546BFC350EC8D13929D43127B219F28D8A07728923A17A912E732E24A9FF631E605F2B5138F0EAD86585F0A87CE3508CE8479A
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var ija,mq,kja,lja,oja,nq,pja,rq,tq,wq,qja,rja,sja,tja,uja,Jq,wja,xja,Mq,Oq,Pq,Cja,Dja,Qq,Tq,Eja,Ija,Hja,Mja,Pja,zr,Ir,Jr,Sja,Lr,Tja,Uja,Vja,Wja,Xja,Yja,Zja,$ja,dka,eka,fka,gka,hka,Pr,Qr,ika,Rr,jka,Sr,kka,Tr,Wr,Yr,mka,nka,pka,oka,tka,uka,wka,Fs,yka,Aka,Cka,Qs,Gka,vt,Pka,Rka,Qka,Vka,Wka,Zka,$ka,ala,Zt,eu,fla,fu,iu,gla,ju,hla,mu,pla,Au,tla,Bu,ula,vla,xla,zla,yla,Bla,Ala,wla,Cla,Dla,Gu,Ela,kma,oma,qma,sma,Gma,ena,hna,lna,mna,una,vna,wna,xna,Bna,zna,xx,yx,Dna,Ena,Fna,Gna,Hq,Gq,mja,nja,yja,Aja,Bx,Fja,.Ina,qw,rw,Jna,pma,pw,sw,Jja,Kja,tma,Lja,Ex,Kna,Gx,Hx,Lna,Mna,Ona,Jx,Pna,Qna,Lx,Mx,Rna,Sna,Ox,Tna,Px,Una,Vna,Sx,Wna,Xna,Yna,Wx,Zna,$na,Yx,Zx,$x,ay,aoa,boa,coa,doa,aka,cka,ioa,joa,koa,loa,moa,ey,gw,poa,qoa,roa,rka,bs,toa,Mma,dna,Xma,Dka,Ks;_.jq=function(a){return!!a.handled};_.kq=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var d=c.slice();d.push.apply(d,arguments);return a.apply(this,d)}};._.hja=function(a,b){functio

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2736
Entropy (8bit):	7.878379284610188
Encrypted:	false
SSDEEP:	48:BLB1/t3/Ao2OJcoScPYpu66mqWKCB7sBKLDvyypkvHJ4ledzjnE5A8U:Bvt4vOnSc6qvCBcjCkPPjnE5A8U
MD5:	2DBA96933B3FAF6B34F9C85CCF84E8F7
SHA1:	10C4ECABD0F2C443F3A2BFE0776BDBFDA7B96F03
SHA-256:	6532EB4609444903D95FA9343E1B83ACE20887A0AEE5E658815F4854F55330B5
SHA-512:	0513292884DC73AE2064B9EC394711C821FEC301B6CCE78095902230A82E4D4449A3907DB2DAEE79DDDB1020FD5A35B899C3F425C6E6C400A91D9C2D7A26E170
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752
Preview:	RIFF....WEBPVP8L..../..?...&..4\|\|\|^..ds...`..`.XS....]..".J.N....x.._w.....?..\c4}...AJ.u:.....!Y5#p.......z.%."wmZJEC;G.@;O.[.d.mh..CCcpH........~E..q.....l.n....o.{...\...\|.k.S.n...\|..I..>.._.A.........m.c.-...m9.....W#..V........"....q".........k..o.Bd?.N..C.>.^.Y.\|_.....8.O.5p......5?..j...B....:]...!Tn.v..@.\'..q..@....u..H...t...5..j.:U..!r.0......"{\|}}...W..z....V.._...!..b...V........5..aW...M)......xL....W.r...rk....Y..h....Fm.43.......Q..U5../Z.h#".M.h.$UI......I.Kz\|......]EJ.~.........H7...Enms."........X..-k..j..[../.Y Y..U....ss.....G%.$.aR}....h..^ ^U..R..4.Uey.z0T.].n^.N)...U\|n.W..,...E5.K..G\..`p....m.v.)M..........3I.1.%...RR5....hj.(M.......T.I.@.,.w...43#..jVa]5....hVJ.R.R..av.....c.8.........:^.........3.U.....X.S..V.rng.8n1n...3 `..=6!..j...J.C..!....v5..j...J.C..!.n.".F:.B.....t5..P.P...5...t.......!...j.].!r..A.......B..^........"...PAWC.....p"..8..E..!.s.....#Lw..\|..i..l.5......+....g..e....c..).=.R...$.b.w...=.g..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6790
Entropy (8bit):	7.951603868536242
Encrypted:	false
SSDEEP:	192:/XvYroxWy4nPvWrIBXd7AT+os0Y6H6NkOD:/XAcxWFDwC2Y6aNLD
MD5:	82949378146439959C06341508E94D72
SHA1:	E6F91B56403E813A13540894F5822B0B424F8DE4
SHA-256:	125125E954CD3BC286B24E6750B4CE3FB9D3736C3AEFAEC8DE0BF02178684AB8
SHA-512:	3C99CAF2E7BDD15FB0110C70534B7A0C7D817E89E0C72E4F24B1124AEC880285E6ACBB9947FE7C5843A8594B48503C8AEFCDE40B1F37051D0FCBDBBFBC88883F
Malicious:	false
Reputation:	low
Preview:	RIFF~...WEBPVP8Lr.../..?...0..$?...A.U....6...`$...k.6h.C..4..$S.:.....m......U....7...c.....,../.J..Q"..].;B...M.B..b......]...Qe.b..PsG...+.D......\|/.w..E.f...c]c6w..H$.~.x.z..~..-.f....7Xo<.;.S.z$..]......^4<+[.1x..I.m.PT ..4O..i...bM7Fs..XQEB..kD.'.-...\O.Y,C#....7"..rb.............%....$9...I...??.....?.h..S.S..$...P.....!+.c...H..>..OY..HZ~.Qr.\..)# .....'c.)G........0.2.;...Y..o...3\|qw.....pR\|.ij.J..K.c...D\|..)#......m}....4........a...3]F...CD........K...cI....XLS..0...O.H...>t..n.......?>...d.F\.rK.p6D@.,.jc.3...dl>.H.\|~\|NW.N............Q....-...>.......I2....E.../.d.....]?....=@..}~,.C.....nO..s.-B...Bt>.}.r.-.."N...0.#..{..A...j".%.+7.XJ.......+...!-M)a:).+..<.\|:..M8.S..W...L."....../..QIW..G.....n._....E..!....k...rV."NN.UDE.t..7.F...\|d......z2.h.3r7.t]..,..h.'.&s.9..s=...L..A.R>._..yzr..T/.4..k5HZ.N}..0N..."'=.3.\.YOw)..:..d....U....e..L.9.<.,.... ......sa.p..*9])..R....`..q..M.u...% '. ..s.S...9r...!t....=+..Ar..\....1I..B

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (587)
Category:	downloaded
Size (bytes):	6361
Entropy (8bit):	4.655910977242102
Encrypted:	false
SSDEEP:	96:ObR6faDxrciCeHfmXmE3F1LcTryZu1T4jDvZgsg8Lu:Ob7E2wSaUKf1VLu
MD5:	07C9E1B12F21F94375BC9B2D82B00107
SHA1:	3343B819398A8D17B4A14CA815682F84D77D0B66
SHA-256:	6F6FE9B3F595B4462B8745C264CCD7D198CD1BE104CFC50EFBE615A84A3F9CF3
SHA-512:	24F0BDC8E8380D226F8701D6F619BC9A8AACE8DE98A5B84435132AA8A2372496DD32E2784BED4A4BB6C17D6EA78D9B630FB03DAE14F758AFB5435B539BE95DA4
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>Home</title>.. Bootstrap core CSS -->. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">. <link rel="shortcut icon" href="icon.png">.. Custom styles for this template -->. <link href="css/home.css" rel="stylesheet">.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <a class="navbar-brand" href="index.html">Eternal Spring Acupuncture</a>. <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">. <span class="navbar-toggler-icon"></span>. </bu

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2406)
Category:	dropped
Size (bytes):	78365
Entropy (8bit):	5.456753311036989
Encrypted:	false
SSDEEP:	1536:o/oPKW2/xQEiuVQf4bLR5dz34pkpZZvqxdESTsBKX4cg6KlJHkOV5FdaJC03Xu2i:uoPK//xQEiuVQf4btr32MZdqxGSgBKXQ
MD5:	9E43F550A52998CA7A0FD723D116582E
SHA1:	C6E39D9DFD56C38AA062CACF979D690C44E03C0F
SHA-256:	311E9E8A1ABDA5299C796E9DE880B4589FC5D52C72C0317DC5FF789B7929066F
SHA-512:	F759B63313B11E34815FE52186D31B6F1C9DC7B4A9D7D5425B5BF3048F5C005C85EFC044C342EF8B8A2B068FAE418EC0F44BEC148B59A29E2F40354DCB2F5C57
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('map', function(_){var Gva=function(){var a=_.dr();return _.gi(a.Gg,18)},Hva=function(){var a=_.dr();return _.H(a.Gg,17)},Iva=function(a,b){return a.Eg?new _.cm(b.Eg,b.Fg):_.dm(a,_.lr(_.mr(a,b)))},Jva=function(a){if(!a.getDiv().hasAttribute("dir"))return!1;const b=a.getDiv().dir;return b==="rtl"?!0:b==="ltr"?!1:window.getComputedStyle(a.getDiv()).direction==="rtl"},Kva=function(a,b){const c=a.length,d=typeof a==="string"?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return e;return-1},Lva=function(a){return new Promise((b,.c)=>{window.requestAnimationFrame(()=>{try{a?_.Km(a,!1)?b():c(Error("Error focusing element: The element is not focused after the focus attempt.")):c(Error("Error focusing element: null element cannot be focused"))}catch(d){c(d)}})})},Mva=function(a,b){a.Fg.has(b);return new _.gra(()=>{Date.now()>=a.Ig&&a.reset();a.Eg.has(b)\|\|a.Hg.has(b)?a.Eg.has(b)&&!a.Hg.has(b)&&a.Eg.set(b,"over_ttl"):(a.Eg.set(b,_.Dn()),a.Hg.add(b));r

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4953
Entropy (8bit):	4.550211520018496
Encrypted:	false
SSDEEP:	48:p6blVR6f4zDxrcsTM9OTt3mP6rMTaTy3mg1nOibWUq0G08Lu:elVR6fODxrcsHmCFMmgQiLqg8Lu
MD5:	D996954BCD6B17AECE09B6621D89FB30
SHA1:	7E752EFA68B05F4A13633AED6F5B31941007B743
SHA-256:	DCFC88F82955F599C13FA2A15EC4A71058004270905930323312E42360109C75
SHA-512:	838D249776558B9ADCBE57AD933CB269D9A49C810559009F76B8F5BE84218B2B1BED946130EA306E28DD0F738E43CEC705D216616E5F0EFBC87B37BB3846928A
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/about%20us.html
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>About Us</title>.. Bootstrap core CSS -->. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">. <link rel="shortcut icon" href="icon.png">.. Custom styles for this template -->. <link href="css/titleBar.css" rel="stylesheet">.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <a class="navbar-brand" href="index.html">Eternal Spring Acupuncnture</a>. <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">. <span class="navbar-toggler-icon"></span>.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1066, components 3
Category:	downloaded
Size (bytes):	95366
Entropy (8bit):	7.962656087226738
Encrypted:	false
SSDEEP:	1536:myk62t5xj/Ld3z338NjrSticD5NDBshxPMLg/EEib0ikYSpq65JwwddDjeFKDVXA:aZXndr38NXaicDCxKg/EE+L60wddDjk5
MD5:	60CF73F8AEE5313C2D2052A3FCA08AEB
SHA1:	1F175239D415A5A1E5DAC7D15646B90FF0D02F82
SHA-256:	01B42A857E05625824BF074C52F494235329BD3676B073C54F13FA582F17E215
SHA-512:	16EAD0AA17255E925F525F2FAACDE5D1FF98D07F3E1B6EB97E3388EDCBA98E533AFC2926D419542F2D5B5140B3FD94BE340A405904BCD94F5D2CFD16B715A12B
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/index/acu.jpg
Preview:	......JFIF.............C..............................................#....!!!..$'$ &. ! ...C........... ... .......@.......................................................................................%..R..X.....(..U.......%X.`B.RQH.\...B....(!@.. (.......H.....D- ...E... J..X.)..H...E.)A$(....@...X.(...($Z..U!HR:7..Y......I....H..).R.@(.......RRZ.D....`.%X).PAbP....P..H..)..... ."X..)....B.$.H(.....QRB......%R.$...E.$..("..QH.7..B ......V.P...%R.T......E.X..V2..B..(Q.HPB.%.X..IH..(...................@R.B.B.$.P@.$))...T....U.AH!U.Z..Z.V..H.e..@.@..B...).H...h..Z.R....U..Z.HR....B..QH...AA)...4@.`.PB....PHU% .@....."...,E.).....X.$.....X...!j@PJJ.b..$R..-..H....@......V..T... ...@Q.......H...b( ...JA...H(..!H.D,..H.RU...V!T.II.H............`@.R ...d.!hIH..i..@.P........@P.....P.M..........(.JE.....V.....%Q...RR.X.b.HRU."U.........!PH[Q..HR.@..@. .(@. . .R)H........(..-...YH.l.m".......i@..(.....A@..bP......@[.*........@.!A.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (306)
Category:	downloaded
Size (bytes):	6137
Entropy (8bit):	4.562791593669779
Encrypted:	false
SSDEEP:	48:pyWb2RffcXDxrccJJBHKkgsUML8NDNXCBWEQW7W6o9RGk7Iapmkb4CJ9y1F1XIr4:X2RffaDxrcc3BHys5nKRGomYb8ugqLu
MD5:	D560DF08F886D967D3AD75B3FC637451
SHA1:	CEEE27B01CE395B93E95545734384FFB8C788119
SHA-256:	F8E3F715182E769321CC31FD8E488778049EECD28E1011709B3557FA1513A76C
SHA-512:	F38C77E02267DF60BB5BD44C1C94AF90025AAF4C456B3E2AE64DA02A3DD7B79A13241B5271011648DF7E00F2053BF2AA401914E93BEAA70A6936D64BC37A4B93
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/patientCenter.html
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>Patient Center</title>.. Bootstrap core CSS -->. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">. <link rel="shortcut icon" href="icon.png">.. Custom styles for this template -->. <link href="css/patientCenter.css" rel="stylesheet">.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <title>Classes</title>. <a class="navbar-brand" href="index.html">Eternal Spring Acupuncture</a>. <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">. <span cl

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, manufacturer=NIKON CORPORATION, model=NIKON D5300], baseline, precision 8, 1920x1280, components 3
Category:	downloaded
Size (bytes):	239921
Entropy (8bit):	7.96557017816125
Encrypted:	false
SSDEEP:	6144:8EInvs2Ghz81CoZSTzZGxH7EPFaU7EcF+DqQ4Yzd/S:8Et8SzZ2bEPFaU19QHzd/S
MD5:	B7CD13C9AF1415DD2C3D79663FF103C1
SHA1:	6E935974B3F6ABC96647E9950FE796F0B13FC362
SHA-256:	F414F6884E089ADD306DEB3AFCD3D6DB201DA4D36116C4B12D7B0FDAED45A38F
SHA-512:	721FCA8E212028D51A928B74A9E5CDCE06781756AA3B7AF4118AB3F09AAD29E9B347FD4DC3E9ABB90049A6728AB92EF4D0F8A8FCAEBC50EE69B14DCFEE7015AD
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/index/faq.jpeg
Preview:	......JFIF.....,.,......Exif..MM..................>...........P...........\.i.........d....NIKON CORPORATION.NIKON D5300....................................'.........................................................8....2016:04:24 00:10:15............C....................................................................C............................................................................"..........................................j........................"#..23...BCR..$Sb.!14crs..ADq...%5Qa..T.........Ed..&'t......(6U....78Fe....)u........................................................"2.!1B3R.#CAQb$4............?..,/T..E....(....].h.g..J.n.FQ..<.H....g..-....r....W..v=mb&y.}....a..u....x.{..b....(.S.F&.=..W1H..l..U..y.cW....L.&....w......O..'....Y.....,....5z...aas.M.L.....h.u.B..{?...XX.\.e.\|.h..W.1..eaW......j..r.....HqXQ..eb.....}.l{..<[.+e......O.........13.2.*....1....0F......,V.C........~..9n..55. V.195G..<.".......x.=..\.i..#.G)..vY..M..2..)...25c.G.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6790
Entropy (8bit):	7.951603868536242
Encrypted:	false
SSDEEP:	192:/XvYroxWy4nPvWrIBXd7AT+os0Y6H6NkOD:/XAcxWFDwC2Y6aNLD
MD5:	82949378146439959C06341508E94D72
SHA1:	E6F91B56403E813A13540894F5822B0B424F8DE4
SHA-256:	125125E954CD3BC286B24E6750B4CE3FB9D3736C3AEFAEC8DE0BF02178684AB8
SHA-512:	3C99CAF2E7BDD15FB0110C70534B7A0C7D817E89E0C72E4F24B1124AEC880285E6ACBB9947FE7C5843A8594B48503C8AEFCDE40B1F37051D0FCBDBBFBC88883F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357
Preview:	RIFF~...WEBPVP8Lr.../..?...0..$?...A.U....6...`$...k.6h.C..4..$S.:.....m......U....7...c.....,../.J..Q"..].;B...M.B..b......]...Qe.b..PsG...+.D......\|/.w..E.f...c]c6w..H$.~.x.z..~..-.f....7Xo<.;.S.z$..]......^4<+[.1x..I.m.PT ..4O..i...bM7Fs..XQEB..kD.'.-...\O.Y,C#....7"..rb.............%....$9...I...??.....?.h..S.S..$...P.....!+.c...H..>..OY..HZ~.Qr.\..)# .....'c.)G........0.2.;...Y..o...3\|qw.....pR\|.ij.J..K.c...D\|..)#......m}....4........a...3]F...CD........K...cI....XLS..0...O.H...>t..n.......?>...d.F\.rK.p6D@.,.jc.3...dl>.H.\|~\|NW.N............Q....-...>.......I2....E.../.d.....]?....=@..}~,.C.....nO..s.-B...Bt>.}.r.-.."N...0.#..{..A...j".%.+7.XJ.......+...!-M)a:).+..<.\|:..M8.S..W...L."....../..QIW..G.....n._....E..!....k...rV."NN.UDE.t..7.F...\|d......z2.h.3r7.t]..,..h.'.&s.9..s=...L..A.R>._..yzr..T/.4..k5HZ.N}..0N..."'=.3.\.YOw)..:..d....U....e..L.9.<.,.... ......sa.p..*9])..R....`..q..M.u...% '. ..s.S...9r...!t....=+..Ar..\....1I..B

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 6 Plus, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Photos 3.0, datetime=2015:08:19 16:28:16], baseline, precision 8, 3243x1745, components 3
Category:	downloaded
Size (bytes):	1473136
Entropy (8bit):	7.966098901317219
Encrypted:	false
SSDEEP:	24576:Yne2wuBh9/m45PtpaH0ytEhBGVXrIkt5+xkDOjX2DMHTfy4IFqvEKqJbfpP:aR55FpaH/t8kZ0ktukijGAHTfy4I8MvL
MD5:	8F3CE76E13D5C3C2D15F7CBAAC23E457
SHA1:	E2B10ADCEE5B4EE28EF4B1296633C8243711FBC7
SHA-256:	1456FAFA7BE1D3A59ECA7195CCF2600FEB5F0E0C9572792C65E602155B665B01
SHA-512:	25D6EE3F0317E9C27A8BBE201435E9E179CB71A0329139748DF71F2E4C9CEF669BAA8433AB76A5D791798BE50BD3E2A75FD245A6C238426F8C336FEC6EE8CED8
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/c2.jpg
Preview:	......JFIF.....H.H.....6Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 6 Plus....H.......H....Photos 3.0..2015:08:19 16:28:16.. ...........D...........L."...........'....... ..........0221...........T...........h.......................\|.....................................................................................\|.....4............416.........416.........0100............................................................................................................2..........3...........4.....'........................2015:08:19 16:28:16.2015:08:19 16:28:16...#....U...y...e...................S.....O.4.h.iApple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.....A.).w....;.......#-/8:...............................?..............8G..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9888
Entropy (8bit):	7.949534963832914
Encrypted:	false
SSDEEP:	192:aGlfH3hmsPZQOnaH7mTYA7KCOXIu8VrJsgcnHcK1IXOFWaQC:agfH3hZRhaYGF8VrJs5npWaV
MD5:	6048B7CA903C595D371AC50B23111532
SHA1:	4B1E540FD3AC96B3ECD150BF96D304877A8FB4EE
SHA-256:	5628F29CEA885A18B67B03B8023B222946ED649383F07911AD6BEF48F68B244B
SHA-512:	3E26792CABF359065E2E248CABF0EAD4E8701B99AA9454EC79C3F411975B6FCD7BCE2104E2B7188FF4F05140AFEB29383C3C18CD699C5923E6622350BE6E0554
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?.....m%.w...!.3.....6..$..Gyn..NM7.H..../.. .....;;..=f..v.4Y.."<..)...!`..$..r..k..N."b.\ib....r.W'Mp....j2..T.RUH..q,.7.H....(Y0uH...."..V&.4..3{.m?@=..`.....l.../~...hm...J...m...6.".._.MP..R0-.y......(...2.^gD.'.b.'...P...X2..=..(.............P..G.i?J.....~."....I.%Y........3$....D..."...m&9..j...........m...' .....?.....E..,.\|.....S"Z.^...6..".......).VzA+....\.V..I$.......A.....?'.Vh ....>..%_.2&..6tu...U...~m..lJ...\|F.~N..._.T.P.).%s~..m.,...H..0.>..m.g.8Q..N...}..d......S.y%.......D....f...%.$.J....M"..k.T.\|.M.QI.K..8.6...M...bj!+.r.C...,.0B!.H..(.V..i..!..T.t10..E..d..qZX,.N.nAO..G@O.CB."l.D~.....B"~N.h..4..#_..$....q..DL?&/.......z..K..,.yd...N.hA.d.../f...,..Gv.~N.h.oGE^P.d..%./c;.x?.UBm...(..6..qd...R.?.d....!..$..ad..lg..\|.s....k.# Y.< .H.\|..N6.~%T.B?....+....P..%s~...aM.....bjaO[+A@.,..Q............mPv>.^L.m~.\|.#.........6.V}..@A..d>.QQ.......}.0.!.C......%.1?E.FA..D...d.Jiv.e1..Q.A......@jd.0.@.4.0..

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	6539
Entropy (8bit):	4.9625267016284615
Encrypted:	false
SSDEEP:	96:F2VMffaDxrMiEwZuJnIYFf/Nw9COeY9yg8Lu:Fm1awUSjEVLu
MD5:	5257AE4EA8F45E388F8512190A66FBBB
SHA1:	1E657CA51AAF2F580E7C5A03A6919B02BAF52FDE
SHA-256:	9155873C7DD8F078E4BF803782A542142965E40E3ECDA7A48485F74D7CC62602
SHA-512:	49C11209323BD2558F63B7EC2C982A3F0D34F2517855EC484E841C28C8243B4F9FBFF43FE4BE177169053163535CCA7717038CCD43F670023E7E7F2304546432
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/contactUs.html
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>Contact Us</title>.. Bootstrap core CSS -->. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">.. Custom styles for this template -->. <link href="css/titleBar.css" rel="stylesheet">. <link rel="shortcut icon" href="icon.png">.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <title>Classes</title>. <a class="navbar-brand" href="index.html">Eternal Spring Acupuncture</a>. <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">. <span class="navb

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 2200x969, components 3
Category:	dropped
Size (bytes):	516646
Entropy (8bit):	7.976084000200687
Encrypted:	false
SSDEEP:	12288:S5flNYbMdPM3Wfva6ocQLyS4Nl56e23eTqllIk1k0UFvcC1cdTtzsiJaIco:SplmVmfSiQL26h4qllI/0USYc7sJIp
MD5:	4F00A38EFB481ED0077AADF3CA04F03B
SHA1:	28795A6CF3963031E97D8CCF8CC619D768A94BE7
SHA-256:	28768904595F5B7806D7BFB6BA1478A4D0407C1B0174556239CE9D847AFA445F
SHA-512:	35E01F29C0B1D08A6CBF41960B9E8061B82BD8C13C73700BAA5BBD5F62AFFCE0963E50E405EFD46451B004CC456FF828D1DCF161BF7A507A5E3E13F8C7EC6FA6
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM..............................J...........R.(...........i.........Z.......H.......H.................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................s.......!.1."..AQ2.aq#.. .B..R3.$b0..r.C.4...S@%c.5.s.PD...&T6d.t.`...p.'E7e.Uu.....Fv..GVf.....()89:HIJWXYZghijwxyz......................................................................................................................!. 1A..0"2Q.@.3#aB.qR4.P$..C...b5S..%`.D.r...c6p&ET.'........()*789:FGHIJUVWXYZdefghijstuvwxyz..............................................................................C....................................................................C.................................................................................bq..b]..Lj..N.ZbjcMh.[mZv..j'j.j..m.4....S.....j..Q:j6..j.L.F..+m5.b...5..h.[F..V.V.V.........................m[m[m[D..V.V.V.V

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9930
Entropy (8bit):	7.94218759960114
Encrypted:	false
SSDEEP:	192:ewvkzRzguofaDAicar9LzhbOcHSsysliqwomcFa2QpO7JqCZN/wTJQ2:vSRBL99HSfsliqwoZ9QoqCZNgK2
MD5:	57A186A4386243CEFA05FC21622B62DF
SHA1:	37A55200888B5E0550DF24A5D88A0DD939A22FDD
SHA-256:	B555A74BDE95F823E05D9E52E18A9A11B9A2AD9258B1D0464AE41E7941B29618
SHA-512:	8A5AFEFB0A77E9D1E341287548BAD7B243077511839050AA626CD78257BF45D685F714B5E5993C89A04AB8A33AEF348E7812076A72E170CF4E879A8AE0BE7444
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163
Preview:	RIFF.&..WEBPVP8L.&../..?...m...-...2.#....].>5....&.....:.L.a..f....6.m......B..;...B"......;..V3Pl.i.#H3...@....@+X...."B..D...?...5n..@..Ox?!~6.$\|E..^.y #.#/j.],.5...".B.. F.... ...'..C....%f............=.....{...................=E.p.d.Nf.f.1......F..{y.1..883u....:1....o....3.L..(.._.,.6.........>\...g2.\|i..............Q.#...F-._.._.^.%)X\|..$.2E.6?..o>........tn...;..k.-..............p..;....\|...^......{......R.W..5...........$w...^.-7.{.-..m...N.t..K.m7....]....[..K.-...S.n.>6..+...IvH.mRtH...Nwo.?8.m..SmA...A...F-.ZT.%T...b..RZ42J..>.iO....&.v.%./.x+U..F.v..nJ^.....S.....K..L..%}!.b..... ..eb&S....i.......0...a&yY..7&.....a.... .K..2....m..".E..DI...^.H..w.J.....n..L/s.i...x....2A..yy.....S^.....-.<..$.I.....e.n....0NM...Fn.l..... y......P5..$L...=.Y......\|..1...Om.p.E>d.t........n.N.9......X..'{......R.)..& .z.W....0."T.@...`..^.d..W..E..e....t..s!...~.M@..dA\....sn.......F.....D0.%..!...Y.0.&.Be.%..AA...x..lH.Kx..@...f-.Z..a....a....)

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13910
Entropy (8bit):	7.980458982064215
Encrypted:	false
SSDEEP:	384:fTzPNUnHmmBC4U3QmZ/sq6NFfhS9xJekAsIG7QpJ:fXNOHW4U1+fhS9xJmsIppJ
MD5:	9338AC0E4F1B947B9AB8EE050219FEF4
SHA1:	8BBC02ADCF5C694CFD15D86B8EE29CFD68BD038A
SHA-256:	E1D69ADC57E09AC3AE5BFEC02F4461800092BFAE0FC59AC5FD6AA60C11B27974
SHA-512:	F1E441B195166F939C99E69069EA8F4ABD0C422021B046851D6B9338DA793E5B0825884FE37C1A51A3645460D9BF13367809035D75CEAB66A0C29143D3661446
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996
Preview:	RIFFN6..WEBPVP8LA6../..?...mU.......@.R.....n.>5\..Wq...8I(J.B..<.s.ml.r>.....1.R.{......X`cd.....7...H`.D.H....hL$ .....D....X{.@..X.SG.B...3...Q ....93v{...'....:0...k-.z[5h...i..\...r..B.H"....]y..P...(.~]......jS.5.m.....{.w.%D.......j..F5.x..3.(......B.p...<....+q.<^.)...U.M.{.(....y.+.......s...s..,eo.]y.E.<.s]G4..v..yl.-......O........?y$.`8l..);...@.;gm.j#....=m..^]^..../.Fc.....3...%I....YD..p?..e{......#..A...@. ....d..P....b\%..}\..P......v...U.EfV.......R.Z.Y.A.X...5.YY.)..........]......N6$..o@..L.(..p.z`....y.x.....u.7`.p5..8\......u_..$,..7`".B. ....7.-n.U.....,...a..j'.........]\].$Po........].....L..k..S.....Ru....@Q.H..e.v8...,C&4/.5`.\..R..l4K..S......l.v{K.. :.r.Y....,...&0I-.l4U ......&w...%....-%X....~Q.+..........m<.CQf..6p:..u$T.....v.m.r[..I^..E.,m.HP.D2.n.jA....'l*.1.KV.5.w:..i........b8A.3II...<.iu.p...cT...5.._.Ta.<....V.....h..D.Ne..^.J:.....8......T...ei+~v.P.#}.....R.XQpq..w...WHqqP.p..E.......

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4599)
Category:	dropped
Size (bytes):	242785
Entropy (8bit):	5.694550757163063
Encrypted:	false
SSDEEP:	3072:tYjmEMff7T2m2xbBx+Q7k9/u+3WZLo9pFZt9:tAmdwxvz7ko4WZLo9pLH
MD5:	9C7F2BF38E74C943D9D73E38B1042544
SHA1:	432C5C2CB5A5B58C35114BFBBEAE3C701BC3AC16
SHA-256:	E3BAB8703D23B4A6342BB78CE8E9025EA8673C1C22C26A29BFFFF4A5184CC521
SHA-512:	371841087F95881EE45F51E09D5599659C8265F0A8A7731DB8FC429CA793B59141077C038CD0904AAD91B85268EE6FDCEC3B98700A11FA986236843E6C6FBD7B
Malicious:	false
Reputation:	low
Preview:	(function() {'use strict';function aa(){return function(a){return a}}function ba(){return function(){}}function ea(a){return function(){return this[a]}}function fa(a){return function(){return a}}var m;function ha(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ia=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ja(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var la=ja(this);function p(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ia(c,a,{configurable:!0,writable:!0,value:b})}}.p("Symbol",function(a){function b(f){if(this instanceo

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1546)
Category:	downloaded
Size (bytes):	3482
Entropy (8bit):	5.280960217431154
Encrypted:	false
SSDEEP:	96:aPfvCM5D9f/xjdN3EGUkJuJ5VofaNdVzN2JfE:cfaM5D9f/xjfEGUjbofaNdV4ZE
MD5:	E48F188473D454074A2AB3A34870A0CB
SHA1:	620BC90A66495D3CE47B303DE88EE0419455733A
SHA-256:	E0DE807AE54325DFC02FA6EBE3C2F863BC5428B8E8FD98A9FE96119A953FD103
SHA-512:	D41F5430C6AEE123E05095FF41EFA6D68CE4DB7D99CB3EE1343DFF5AFB02D36A960C42CBC190E14119D174E557EAA995E4A324BBD935C95D2B30227E61CE41EE
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/search_impl.js
Preview:	google.maps.__gjsload__('search_impl', function(_){var izb=function(a,b){_.Bg(a.Gg,3,b)},mzb=function(a,b,c){var d=new jzb;d=_.WG(d);c.ur=d.load.bind(d);c.clickable=a.get("clickable")!==!1;_.EZa(c,_.lQ(b));b=[];b.push(_.bk(c,"click",kzb.bind(null,a)));for(const e of["mouseover","mouseout","mousemove"])b.push(_.bk(c,e,lzb.bind(null,a,e)));b.push(_.bk(a,"clickable_changed",()=>{a.Eg.clickable=a.get("clickable")!==!1}));a.Fg=b},kzb=function(a,b,c,d,e){let f=null;if(e&&(f={status:e.getStatus()},e.getStatus()===0)){f.location=_.V(e.Gg,2)?new _.Mj(_.$s(_.J(e.Gg,.2,_.et).Gg,1),_.$s(_.J(e.Gg,2,_.et).Gg,2)):null;const g={};f.fields=g;const h=_.Zh(e.Gg,3);for(let k=0;k<h;++k){const m=_.Zq(e.Gg,3,_.vQ,k);g[m.getKey()]=m.getValue()}}_.nk(a,"click",b,c,d,f)},lzb=function(a,b,c,d,e,f,g){let h=null;f&&(h={title:f[1].title,snippet:f[1].snippet});_.nk(a,b,c,d,e,h,g)},nzb=function(){},ozb=class{},pzb=class extends _.U{constructor(){super()}Pi(){return _.ri(this.Gg,2)}},qzb=[_.M,,,_.so,_.V_a];var rzb=cla

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	3487
Entropy (8bit):	5.373569985049004
Encrypted:	false
SSDEEP:	96:rPxgYZpBnecBii6nz1hAf3UUvz6+Ze1WP1dX5n:TxgYZGy6zTOXL6Cekv5
MD5:	5A9ABF02F5823F5A50F6B022A9FEDC3E
SHA1:	C1C9B68A1943FBF6E41FB8A848069102337B5ABF
SHA-256:	37F2F9F0E0D75497FE736BD0022FAFA40EEC0E9575A0E50128C8FA2DCFE01A63
SHA-512:	63C0CB51BB815B52BF199BF1F7A77FA3B818B8CE89545314670E8B394CD322A73270F1FD53F4DC7EAA0E4C1B06BF21936CE6768270530B6C116978B80A964A89
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('overlay', function(_){var Oya=function(){},EC=function(a){a.uA=a.uA\|\|new Oya;return a.uA},Pya=function(a){this.Eg=new _.om(()=>{const b=a.uA;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Rya=function(a,b){const c=EC(a);let d=c.Fg;d\|\|(d=c.Fg=new Pya(a));_.rb(c.Eg\|\|[],_.dk);var e=c.Ig=c.Ig\|\|new _.xsa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Qya(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.pm(d.Eg);c.Eg=[_.bk(a,"panes_changed",e),_.bk(f,"zoom_changed",e),_.bk(f,"offset_changed",e),_.bk(b,"projection_changed",e),_.bk(f,"projectioncenterq_changed",e)];_.pm(d.Eg);b instanceof _.Gk?(_.Vk(b,"Ox"),_.K(b,148440)):b

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5942
Entropy (8bit):	7.942821666728517
Encrypted:	false
SSDEEP:	96:XmHkNp4wV1niNde5EUJagPtV0v202BWLJxa9IXONewWsYBNAoT7DZXX9PA5y:gI4gniNdeffq202BWLQNewW/7ZntA5y
MD5:	D71BE79F30E3573463EEB2E2D9005E62
SHA1:	4AF868B78DD868D639D0851F0425215F1D4E345A
SHA-256:	BC4A45A207EA3A417876CAB6F55443882306F5B53B8E2A220572A8FB9BF1E309
SHA-512:	A564CC885DF21816C7F2D343EA48DF100EB67B9737E70FE3C5F1B3FFE6CE51AC0F286ECD67B14180BAFB3EE2F049A782A0A2A25778246A3116F7797C127A214C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728
Preview:	RIFF....WEBPVP8L".../..?./.8.@D...G.F.r.z.6....-.....alc.J.KL.-..1.e.......5_.....-S.$..j..\.....k..N.L.\-L-......n..x...p.)...]..NW.....r.9...pFZ...m.Q..UD.HTD..E........7... +...3.^...).>....&........an..4.y+EFK.....[.8ig..W..b.9...rK#3>..s..Y...I.d>......d+.Z2........7.<....Y....8..3..c..k.......@.r.\.zeLFv<.6..v.Y>........e...x..e,I.I.\......9..4@..6.f.l=.\B$...p......v.L.B.'...,%CNR......Y@.WcA.t..{.f9.mCZ....FR.A.L..%)...........-..%!C...;.....#L.,.K.lH.J.v....ni.an.xvODcI.......E.X..=.B8.3.W.......MWn..F....c.<f.0..L......S.L&uu.zY.]..L.Ubf .>b.Mb .}...l..C{....^'.~..#....2...$..og.:....#p.m.Nf..\|...bv/...N.]..H.H..$.....&....w..k.....1...$..t4.S..v.<...C.../Yj\|...^.h....0D...!.....:D.&0>.....n...ZEP.....Uy..F..).S.Q!.T...!.U.......a..y......t.+.P>Jx...o.F!...Ai."h.h4.yba.Lz..b\|.Gh.dy.6.z..ZU..w..J4.{....U.U...%..U.......y-..1..]..oO.j....UU...H....WQ.P^;..*..........zQ.../....]..ku.b.k...A5.......PB.]K..u...`a....4.\.....I.."...Q..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	20262
Entropy (8bit):	7.9813105355138605
Encrypted:	false
SSDEEP:	384:BVzYSUpjW+uPxaTa62Pl0YeVoIgiYXItBx21gf7ItLj:/USX+cxa/2PZemiYEb2ejA
MD5:	C080AF86A6AC42A4AA6EC60CE2314413
SHA1:	82E9D4DEECC3C402595B5BA4522CDA2C17D922D5
SHA-256:	33A44C3332A1F4146F835D6ACB588ECBA7B693FD350B72F20912321C7935CAE0
SHA-512:	7C041C97B1F846FC855EB68A6D2FC416CE48A934C706503C421754EE83A58709AAA97E66AF2054E01D4070688DDBE74EDAFEEB9E540DFECC6D0BF7E57D523275
Malicious:	false
Reputation:	low
Preview:	RIFF.O..WEBPVP8L.O../..?...$E.^:f..Qg19q>..nU..n#IR.cfz._}.H.......m7..F[.!..@..."F^..4..../...D$"..#............$Z<2.S....r2.HX.4ZR.."P...H. +.&.Ee.e`...UVO.......U...3$.&R.Vj[tf.=...i)8................V,JcR.y.L..uG..a.-O..3..:...(.1.y.No..fCQ..Q....T.._.5...HJ.."Et..M...x2.&....W....6.....:...].O/.`......... !$$a..A..........r.vh.^V..../[[.Xs...o....?.v.._D..H..E5 ......T.."F..n..Eh.....c..&..Xe..l.D8.jo..+..Q.N.2..kc.h.b......:....)L..h.Jj......LDt..N2K:.....T.`....uI`+....U......(b...?.6.?..."....UD..u,.. r......a/...!.m.a..j!..X.O..jDL..DdCq.(b.BD..J.P.X1..M nS... ..g..M..u.U.."....$.C....52@.........t.P..`3.........J1l.-Uzh9...Ox...$..p.F..T$..P#.).".u.l....].9Y^..q.~.Y.....Y3..d.k..........y.T...2..y.....?.j.%G3A...\[52..&.p...q.^;..U...?!.....1.D..,.Z.CB.....h.".z.VRk..7.-...V......X.....l.....F..U2-..n...R......e.....1......5.h.........h..e..T...F......b.z. .?.j...1.@.p0.z...4U.....u....<.....2.[D..c.Dt...d...+<......ON.N>.~vl#.....z

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	8476
Entropy (8bit):	4.361428520931524
Encrypted:	false
SSDEEP:	96:7lVRffaDxrckE1aye06qWsKIMtWAnB4M8m8d7jYmnpOyvC/0Rg8Lu:7nKxye0NKDn38xsHqVLu
MD5:	91CC7B5E8A42C4543410A7699E31D854
SHA1:	B62EDCEBDC6C59CAD364F90C2BC2D1AAFBF8966C
SHA-256:	928C85E5C959ADE8FF9ED4A193D82D925C50D7C2D741EDEFBEAA4ABCE0F1E5C3
SHA-512:	48FB77E44F8B370FC236A7E9F02D31603CCF30F0F4EFB9F3D7223D18D623E1873A25824522B86379F12D4BD3941415D3B7E992EC70A10A7F17E93FA46A3EB3E1
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/prices.html
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>Prices</title>.. Bootstrap core CSS -->. <link href="vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">. <link rel="shortcut icon" href="icon.png">.. Custom styles for this template -->. <link href="css/titleBar.css" rel="stylesheet">.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <title>Classes</title>. <a class="navbar-brand" href="index.html">Eternal Spring Acupuncture</a>. <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarResponsive" aria-controls="navbarResponsive" aria-expanded="false" aria-label="Toggle navigation">. <span class="navbar-t

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.608150523494965
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjaUtTZgDgmVKXTm8Yan:TMHd9BZKtWR/yvQXTm8Ya
MD5:	A1EDDC3994979A7187DCD091696F000D
SHA1:	04DF4736630D6572AE4E46ED42FB0FFB57E02E18
SHA-256:	04E85AE81BF75B8B71E6DD028967FB7CC48E0184B5842B84EACBBA2902405688
SHA-512:	F8E583EB3C8763E30A809F935C96BAC041B66B059419EBBA9AE2ADA70283C60F15A69F564C6FAE042694695CA5FD91A41AD3AAB7BD08767118B0B2541786EB96
Malicious:	false
Reputation:	low
URL:	https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-medium.woff
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>26MF47H9N2BKD6X3</RequestId><HostId>ilUC+IdBExt41ifKNLCUJVtysrzgZmgAuSCehcOBbSGZMg7F2+d0jK7XOMpXVQLI87aGeNazhXA=</HostId></Error>

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9480
Entropy (8bit):	7.930775392340906
Encrypted:	false
SSDEEP:	192:hBD8o6cP2KhCDyuWedgs7SDgzFxVjY7w+DAuiJGx:hBYcP5CSpKpow+8NJGx
MD5:	48AAD6A0DBC6050FC545947A37E370CE
SHA1:	42116D85C5FB5EBEE10E2BBD1C83491B001C208D
SHA-256:	E958817729BA50C2B201BA8D35B60EF59F7814273ACFAC476284BC39D189DAA8
SHA-512:	108B5A19B0AE244F5A68952BFFAC7EBB7B5EB20EBA6CFAE22565FA472533D9317424AFB0D060A69C9FC56179ED6C35C566F65C5473FA8D782504C5FD6ACA8E1F
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8L.$../..?....m.....1=.......6.G...w...F..q....#IRr..@...G...7.A...(}..a&...Y.SBv)v.......-.......{S.RG.........)4J.[.TrB...A..........\3.n...G....F.F.F.f...0J.......e.'{.spU.Y(.q..0i].D.2........YI...S..q.....Vf.Zu...V........h..4S.(..CD...I.7.UG.0......?w.@W.......L..{....v<^.j.R.?..3U.F..1h..E...c....uj.}.@.'. ...../:.......+..zP..).o.LI...... g.....6Hy...DJ.}G. .+0...d..{....R..H.....F[A..4..\|..a..J.j4......T..?.>J.O..G.........v..NL....3...QF[...".9fc........}.O.}.?..wo.......k..c.J..?.6..[.....G.....'.i...)..M.5F...}.?.T#x.....t=.\..........D.....=c3j.??.@....... 5S..?t.n../D......u(......2#...=.......nj. ......g.4......=...v<^_#..4T...Q.....4...??.AD.....P..(,..3.m..6.:.f`..W...=...'....F...=e.........7.i.?.0..-t........?.?.?.B.?..........y@..Cd.......#%K...o....k.F3D.......3......n....hf7TG.7.2..N.... ....l..sC...j.".....&H5.DD&9. r.u.9..7I...Gkj...4.t.I.7....#^.#.6.h.) ..e:..O]Y.6 .N.Dd.@.,S.m.0....)'.Fl..+1sk..R

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9480
Entropy (8bit):	7.930775392340906
Encrypted:	false
SSDEEP:	192:hBD8o6cP2KhCDyuWedgs7SDgzFxVjY7w+DAuiJGx:hBYcP5CSpKpow+8NJGx
MD5:	48AAD6A0DBC6050FC545947A37E370CE
SHA1:	42116D85C5FB5EBEE10E2BBD1C83491B001C208D
SHA-256:	E958817729BA50C2B201BA8D35B60EF59F7814273ACFAC476284BC39D189DAA8
SHA-512:	108B5A19B0AE244F5A68952BFFAC7EBB7B5EB20EBA6CFAE22565FA472533D9317424AFB0D060A69C9FC56179ED6C35C566F65C5473FA8D782504C5FD6ACA8E1F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449
Preview:	RIFF.%..WEBPVP8L.$../..?....m.....1=.......6.G...w...F..q....#IRr..@...G...7.A...(}..a&...Y.SBv)v.......-.......{S.RG.........)4J.[.TrB...A..........\3.n...G....F.F.F.f...0J.......e.'{.spU.Y(.q..0i].D.2........YI...S..q.....Vf.Zu...V........h..4S.(..CD...I.7.UG.0......?w.@W.......L..{....v<^.j.R.?..3U.F..1h..E...c....uj.}.@.'. ...../:.......+..zP..).o.LI...... g.....6Hy...DJ.}G. .+0...d..{....R..H.....F[A..4..\|..a..J.j4......T..?.>J.O..G.........v..NL....3...QF[...".9fc........}.O.}.?..wo.......k..c.J..?.6..[.....G.....'.i...)..M.5F...}.?.T#x.....t=.\..........D.....=c3j.??.@....... 5S..?t.n../D......u(......2#...=.......nj. ......g.4......=...v<^_#..4T...Q.....4...??.AD.....P..(,..3.m..6.:.f`..W...=...'....F...=e.........7.i.?.0..-t........?.?.?.B.?..........y@..Cd.......#%K...o....k.F3D.......3......n....hf7TG.7.2..N.... ....l..sC...j.".....&H5.DD&9. r.u.9..7I...Gkj...4.t.I.7....#^.#.6.h.) ..e:..O]Y.6 .N.Dd.@.,S.m.0....)'.Fl..+1sk..R

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65318)
Category:	downloaded
Size (bytes):	127343
Entropy (8bit):	5.0661435461771624
Encrypted:	false
SSDEEP:	1536:D/p73Y2ksHIMxCkFDEBi82NcuSEz/8UiyzAqhqczDsITtlQV81IA1o8ck4nM5SXJ:Dx73GkEyzAqhqczDsIQqdgENM6HN26+
MD5:	95DF726A7936892CF645A57C1CCF3B75
SHA1:	3E035B1A98C46848C442529AF959270BAE59471B
SHA-256:	414CAA66BB79BC88C1BA6A2A415D2333C0A01AAB1C15F74684DFA7542A97D2F7
SHA-512:	65B24E7B479A12C3705C613753E93636B4C06FF8C8A7CBEA1180400EABD332361DA4FCE8025832497EF4E44D161120C0B38F5820C15DE25646A9FF6A0116D5EF
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/vendor/bootstrap/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.0.0-beta.2 (https://getbootstrap.com). * Copyright 2011-2017 The Bootstrap Authors. * Copyright 2011-2017 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#868e96;--gray-dark:#343a40;--primary:#007bff;--secondary:#868e96;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--font-family-monospace:"SFMono-Regular",Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}@media print{,::after,::before{text-shadow:none!impo

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13910
Entropy (8bit):	7.980458982064215
Encrypted:	false
SSDEEP:	384:fTzPNUnHmmBC4U3QmZ/sq6NFfhS9xJekAsIG7QpJ:fXNOHW4U1+fhS9xJmsIppJ
MD5:	9338AC0E4F1B947B9AB8EE050219FEF4
SHA1:	8BBC02ADCF5C694CFD15D86B8EE29CFD68BD038A
SHA-256:	E1D69ADC57E09AC3AE5BFEC02F4461800092BFAE0FC59AC5FD6AA60C11B27974
SHA-512:	F1E441B195166F939C99E69069EA8F4ABD0C422021B046851D6B9338DA793E5B0825884FE37C1A51A3645460D9BF13367809035D75CEAB66A0C29143D3661446
Malicious:	false
Reputation:	low
Preview:	RIFFN6..WEBPVP8LA6../..?...mU.......@.R.....n.>5\..Wq...8I(J.B..<.s.ml.r>.....1.R.{......X`cd.....7...H`.D.H....hL$ .....D....X{.@..X.SG.B...3...Q ....93v{...'....:0...k-.z[5h...i..\...r..B.H"....]y..P...(.~]......jS.5.m.....{.w.%D.......j..F5.x..3.(......B.p...<....+q.<^.)...U.M.{.(....y.+.......s...s..,eo.]y.E.<.s]G4..v..yl.-......O........?y$.`8l..);...@.;gm.j#....=m..^]^..../.Fc.....3...%I....YD..p?..e{......#..A...@. ....d..P....b\%..}\..P......v...U.EfV.......R.Z.Y.A.X...5.YY.)..........]......N6$..o@..L.(..p.z`....y.x.....u.7`.p5..8\......u_..$,..7`".B. ....7.-n.U.....,...a..j'.........]\].$Po........].....L..k..S.....Ru....@Q.H..e.v8...,C&4/.5`.\..R..l4K..S......l.v{K.. :.r.Y....,...&0I-.l4U ......&w...%....-%X....~Q.+..........m<.CQf..6p:..u$T.....v.m.r[..I^..E.,m.HP.D2.n.jA....'l*.1.KV.5.w:..i........b8A.3II...<.iu.p...cT...5.._.Ta.<....V.....h..D.Ne..^.J:.....8......T...ei+~v.P.#}.....R.XQpq..w...WHqqP.p..E.......

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1728)
Category:	downloaded
Size (bytes):	100448
Entropy (8bit):	5.479146671020334
Encrypted:	false
SSDEEP:	3072:Ts/NqiH30UHOxRtwU7VAl1qhTXOisdwvjKL+7C175pbmdIUM3SaLsGgKeFz9Pv2k:TsFbaRtwU7VAl1qhTXOTwvjKL+G17nbW
MD5:	38A9E58596C644102CCEEE1BF7EE9F62
SHA1:	408F4547B0D725FF0B2B034226121C218EC2C476
SHA-256:	0FC958F3E96D33DC3F953955B1192A90C9364F7A5E51AF1F323A91598B998A63
SHA-512:	DD6BE2E896E11F7F3579902E0154C7C4788371FA7A455523C068234881C962BE121831DFD83C0488877B4D944066199DD384020068924D3D2A5CB1784D146AB8
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/controls.js
Preview:	google.maps.__gjsload__('controls', function(_){var QKa,mL,RKa,SKa,oL,TKa,UKa,VKa,WKa,qL,YKa,rL,sL,tL,uL,$Ka,ZKa,bLa,vL,cLa,yL,dLa,eLa,fLa,wL,AL,xL,zL,CL,hLa,iLa,jLa,kLa,lLa,mLa,gLa,FL,oLa,nLa,GL,HL,qLa,pLa,rLa,sLa,tLa,wLa,IL,vLa,uLa,xLa,JL,yLa,KL,ML,NL,BLa,CLa,DLa,OL,PL,QL,ELa,FLa,RL,GLa,JLa,HLa,KLa,TL,NLa,MLa,OLa,VL,QLa,PLa,RLa,SLa,WLa,VLa,XLa,WL,YLa,ZLa,$La,XL,aMa,bMa,cMa,dMa,eMa,fMa,YL,gMa,hMa,iMa,jMa,kMa,lMa,nMa,$L,pMa,rMa,aM,sMa,tMa,uMa,vMa,xMa,yMa,wMa,zMa,AMa,BMa,DMa,EMa,HMa,IMa,bM,JMa,CMa,FMa,OMa,MMa,NMa,LMa,cM,PMa,QMa,RMa,SMa,VMa,XMa,.ZMa,aNa,cNa,dNa,fNa,hNa,jNa,lNa,ANa,GNa,kNa,pNa,oNa,nNa,qNa,fM,rNa,HNa,dM,gM,yNa,UMa,mNa,BNa,tNa,vNa,wNa,xNa,zNa,eM,uNa,ONa,SNa,TNa,hM,UNa,VNa,iM,WNa,ZNa,YNa,$Na,XKa,aLa;QKa=function(a,b,c){_.Uq(a,b,"animate",c)};mL=function(a){a.style.textAlign=_.aA.zj()?"right":"left"};RKa=function(a,b,c){var d=a.length;const e=typeof a==="string"?a.split(""):a;for(--d;d>=0;--d)d in e&&b.call(c,e[d],d,a)};SKa=function(a){return String(a).replace(/\-([a-z])/g,fu

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5942
Entropy (8bit):	7.942821666728517
Encrypted:	false
SSDEEP:	96:XmHkNp4wV1niNde5EUJagPtV0v202BWLJxa9IXONewWsYBNAoT7DZXX9PA5y:gI4gniNdeffq202BWLQNewW/7ZntA5y
MD5:	D71BE79F30E3573463EEB2E2D9005E62
SHA1:	4AF868B78DD868D639D0851F0425215F1D4E345A
SHA-256:	BC4A45A207EA3A417876CAB6F55443882306F5B53B8E2A220572A8FB9BF1E309
SHA-512:	A564CC885DF21816C7F2D343EA48DF100EB67B9737E70FE3C5F1B3FFE6CE51AC0F286ECD67B14180BAFB3EE2F049A782A0A2A25778246A3116F7797C127A214C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L".../..?./.8.@D...G.F.r.z.6....-.....alc.J.KL.-..1.e.......5_.....-S.$..j..\.....k..N.L.\-L-......n..x...p.)...]..NW.....r.9...pFZ...m.Q..UD.HTD..E........7... +...3.^...).>....&........an..4.y+EFK.....[.8ig..W..b.9...rK#3>..s..Y...I.d>......d+.Z2........7.<....Y....8..3..c..k.......@.r.\.zeLFv<.6..v.Y>........e...x..e,I.I.\......9..4@..6.f.l=.\B$...p......v.L.B.'...,%CNR......Y@.WcA.t..{.f9.mCZ....FR.A.L..%)...........-..%!C...;.....#L.,.K.lH.J.v....ni.an.xvODcI.......E.X..=.B8.3.W.......MWn..F....c.<f.0..L......S.L&uu.zY.]..L.Ubf .>b.Mb .}...l..C{....^'.~..#....2...$..og.:....#p.m.Nf..\|...bv/...N.]..H.H..$.....&....w..k.....1...$..t4.S..v.<...C.../Yj\|...^.h....0D...!.....:D.&0>.....n...ZEP.....Uy..F..).S.Q!.T...!.U.......a..y......t.+.P>Jx...o.F!...Ai."h.h4.yba.Lz..b\|.Gh.dy.6.z..ZU..w..J4.{....U.U...%..U.......y-..1..]..oO.j....UU...H....WQ.P^;..*..........zQ.../....]..ku.b.k...A5.......PB.]K..u...`a....4.\.....I.."...Q..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11380
Entropy (8bit):	7.978292104920675
Encrypted:	false
SSDEEP:	192:wRmK0joilp1HfREITGyxR7HswCXSPl9buT6JWLGnRrvbOC2fITuaoNPJlEJ7Q:wN0jF1/z9xNCX0beI0GhjOUTJoxJyQ
MD5:	D8406A73B11FF12A915F7D37834F5E9E
SHA1:	4BCF4D68D1E402B1510899550981E63E3A45916D
SHA-256:	BA61E83BD1342688F64E3358715929DE5CEDEA643B5099A8690977C311B4D8D2
SHA-512:	50B59CB50D48E58C688B9F1CDF8C0C872ABB6882D933CBCFF7EFA0622DC4C14D53BC182B77FC0C5F9B0E22A01F3AC52292D506E5A7A4DC97C25A8699590239BC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473
Preview:	RIFFl,..WEBPVP8L_,../..?...8.m%z....&.p\..w}.......;.P.9...5x.....A.0H... ...G...M...?\...r.Y..P..L`......a.n6V.G2?u..,O.#.Tp..:A.....,.@).@..r.\|%.I.J..v.y#F..A....b#B...u....k.....KrtKq.:..s^(....q)......<.%.8..f.........5.4.hII.\4.l.^...^.]o[..@...........;.7.cT..9..sT...(:..5......I...!.. B0........V..D..V.mmU.V....9d`..=...;.m..f.......3.....6Q.N..s.`..J..H.....N....y..yp.........:.....]..i.y.p./.W..;i...jP.6.c..:q...o..5,......&6...].{.0..v..N1f.^.M..e"..........A..m.X\|..ND.;.=.`.B...g.{.......y..W.J.K......N\|4..a..W..R.....D...-......X0..>q..j.G.o.v.../.^.....E....>7.V..j.jB....n...>.k..`..y.\..zI.p..l...;bK5Y.V@Z'..V.2.(.#.8..L....EV0yM6_..%}.~...v7...~.....G.X.R..".ys.:.d.Wy...u{M..[.^..G..81x-g.-.;..N.@......^.............p.]a....@..n.=....a...{,.nLw..a.^+....C..m......M.{..\d...k.qU.a/........+.{!LU....V..9..Qns.....'Q'xf.{Nt.....f...\.[.X.^#.n..jT...0.(.D[..K...m^#.1....K...7U.vA...>..}p..k.....W.T......\|......H...U.q........\.Z]....

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18588, version 1.0
Category:	downloaded
Size (bytes):	18588
Entropy (8bit):	7.988601596032928
Encrypted:	false
SSDEEP:	384:WF9srt3EJfKy7iOpqErJeqQhzsaZqPTPabcoqYdBTKYPvS9BlTf:Wn6UhKYieqAiPQTwclYQLlTf
MD5:	115C2D84727B41DA5E9B4394887A8C40
SHA1:	44F495A7F32620E51ACCA2E78F7E0615CB305781
SHA-256:	AE0E442895406E9922237108496C2CD60F4947649A826463E2DA9860B5C25DD6
SHA-512:	00402945111722B041F317B082B7103BCC470C2112D86847EAC44674053FC0642C5DF72015DCB57C65C4FFABB7B03ECE7E5F889190F09A45CEF1F3E35F830F45
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......H........ ..H8................................\|.`..J.\..<........-..Z...x.6.$..0. .... ..S.7.5..K!.;..../.`..Sn.J.e.52P.(.....=9....f.....$....fZ.p...N...t....6.lfS.Ju.i.o.g..<....T"O.o..4..4....M/N.>.K..."[.P...W.u.>]................A.9z....IN^....z..Y.{....m=...+X9<?.......(IAG8rD....52L0.p .EJ..p....=.......[U...pz..g...../L.U.......P..W.U..q$L..6......C.M.0..R..........D(.ilX.Y..SZ.R...Q..j.6.@\."\|.l......3....,.T.....L...ap0......6.j.\&O.z`.$._+vwnr...,....?W.T....!.J...L#%.......A}........\.....l...:....U..u.J.0....O......&.!.)4.V..:.}.0f....:W......?U.....%...b...!....yA.sw.....5..T .}{.t!F.G....{"..pQ.S.v.S....t......U.Y\|.v.@....\|..(..V.........^....../.7......K......J.Uq/L.T-.`.O........;........';vWq.+....J...J..p.....sB`(1LC.k....?Z{...v>dS....F..........\.....UetU........6.V...vE....._.../...%.q...^.l...>^.z..l..p....j..@H...`X.p...KQ. .<@...I...BF.......L..6...y.2=.P....8;..@`.m.....R.B.L.r.*T.T..l@.6.Y....}g.....F.n...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 220x220, segment length 16, progressive, precision 8, 1430x953, components 3
Category:	dropped
Size (bytes):	545869
Entropy (8bit):	7.98936103302457
Encrypted:	false
SSDEEP:	12288:hB48trnkHHAQIea+uWBACjnsiGygWFGG/WY2:hndkweaLk3tFb/WY2
MD5:	FB6553092CC6F3694A56754F2CCF7ED1
SHA1:	F28F5532650C766514BF3697E3A3F114CFE04B73
SHA-256:	528F085D40BDBD0532DD8011445728F69D4ADCD4DE3C863D685C05AC2EAB1DFB
SHA-512:	194B652FFA90701D625CB2777F1B3576CFF3EC796BCFB5D48F8B0F8072388A51A3A045D7E82F888A03AEBA0C24F85F63899278FEE5299DEF9E8F397BE4D79D3E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"..................................................................................Q..g.2u@+.....a..h.x....h:...._Y...Z5md.\...n....+8.I.u~0w\|.GY.......w8:T.C...c>>.Y~...J.N.9u..1......._....m#.Yms..q..\.%.>.'.u.;...WD...[E.+.".p......fVGCE.....1..8..a4.S&..I....].Q...>......U. ....k};.....=2....=....M,......I.i.}@................Q..^...;.t.<..l..Qw.h..]Z+:y......\|qa...<...S.......F..........F.4H.f.fT..B.n..I.K.T`.;5..t.>..NW@..0caz..vG..\.\|U...(k..........1z._.........R...0....]..wR.].h.J.[k.. .D.X.=...z..nrt]Y.Q....fa..)..\....g0.l-...\|.s..R......l..c.k.Uy.M..~.F.1............:.M)..d6.:.1:.62...sF........2...3.i.t....>........I.y.....5.4...JRr5.T.....l..fP...He..E.}.....nd.,^gO5..{O.e.j....I....`O.{.....R..ui.fL.....?P.Fg..elN;K~mq..p..g.S..x...u....'/qd....A..O../![.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 635 x 336, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	43163
Entropy (8bit):	7.965011509906945
Encrypted:	false
SSDEEP:	768:/gSfPvT7ZbQUB8sK3gEru+RFoiNMKGdJkNEHXFMtFVCW:osT9bvK3hy+QiNDvNZ+W
MD5:	D1F45D53993F2AA99D2135F002646E61
SHA1:	C5B023042CC7C69641CCAD091B3CDE176ACE926C
SHA-256:	5BC550A055C9156B8ADA11536B22C2F161EDBA96A6717C1B7B47B62A223610E8
SHA-512:	E62CF494CF49C360C9420DC3085C3E0599739788027AE525DBAF5E24A2CE23EA818FA8F28429880E294AF00FDA88B94DBF0FBD9965A001CAF2838BBFE9818D9B
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i505877&2i753974&2e1&3u13&4m2&1u635&2u336&5m6&1e0&5sen-US&6sus&10b1&12b1&14i47083502&client=google-maps-embed&token=98265
Preview:	.PNG........IHDR...{...P......iH....>PLTE !$/04<=AIJMXX[cdgssu.s.8x.)\|..._(.i6.s...$..=.....7..$..P..k..q..w..p..Q..S..V..j..o...Y..n .aa..&..@.}..................................................................................................................................................................................................)..Y....bKGDi.k... .IDATx..y{.8...B..t....\.v..n...6..4{...ak..41..l....WG.m...t...4......tt...f@vv..ww.X...}.j:...8..~F...mG...]..Y.!K\|.Edr}}~...>../...VLs..O.mx...-...},.....t2..X.G.w..i.....................OiEr&g.?_...w.3..a...1.....wT....L.PB..!u.[..U.Y.e.>\|.8........,Bu..5?\|.g...S.m5...=F.P.).`H...........0.;.........A.y........gG..'.....8./...b2....yx..p.uL....n:.7..>..=..w+..-..i..<l......7..>......9;n~. .,gP....#.G.l3[..q!W...>{..W.\.f.\6.c.po.....t....d`l....S.......}..?0y....~3.......p..v_.}......B.....'.....x.^.....\|...2.[.b/...f..(=..._%O...8.f..Yh.....ql.T.f...!.2[.,.^..g...e.V.{..u.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	184994
Entropy (8bit):	5.631569490379207
Encrypted:	false
SSDEEP:	3072:YxTjNm8H2AO+yNwbuQjTgkK6Drm545DtsdayPnR5t1P2/6FzgAEY7N3D0OTFOu/b:YxTPWAO+yNwSQngkKWy545ydaqnR5tlJ
MD5:	09E687964AECC32424F69065C6E09E01
SHA1:	B8D3F468CA1EB45F21FC919564FAD50089B072AE
SHA-256:	A55663C398778C3399E0BCB628DE29B8C4040611F00E8F996A7FEBF0CA0B3F84
SHA-512:	BA389AB20D835938602484CB87B6D57A0D73271FA54DE81E57781524B6847BA06B88E0DE492CAF72E5035D6D8A1105F58D3EF85392B13DE53CC5DE1B1B6ADDD8
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zya,aza,cza,dza,eza,fza,hza,OC,QC,RC,jza,lza,UC,nza,VC,pza,WC,rza,qza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Jza,Kza,$C,Nza,bD,Oza,Pza,Qza,Rza,Sza,Tza,Uza,Vza,Wza,Xza,Yza,$za,bAa,dAa,fAa,hAa,jAa,lAa,nAa,pAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,cD,zAa,AAa,BAa,CAa,DAa,EAa,GAa,eD,fD,HAa,IAa,JAa,KAa,LAa,MAa,NAa,OAa,PAa,QAa,RAa,gD,SAa,hD,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,iD,$Aa,jD,aBa,bBa,cBa,dBa,eBa,fBa,gBa,hBa,iBa,jBa,kBa,lBa,mBa,nBa,oBa,pBa,qBa,rBa,sBa,uBa,vBa,wBa,yBa,lD,zBa,ABa,.BBa,CBa,DBa,EBa,GBa,JBa,KBa,MBa,PBa,QBa,RBa,ED,FD,GD,TBa,ID,JD,KD,LD,ND,VBa,OD,WBa,XBa,YBa,PD,QD,RD,SD,TD,ZBa,$Ba,aCa,cCa,dCa,UD,eCa,bCa,hCa,iCa,$D,mCa,qCa,rCa,sCa,cE,tCa,vCa,wCa,xCa,yCa,fE,ACa,FCa,oE,ICa,HCa,qE,JCa,sE,LCa,MCa,NCa,PCa,QCa,RE,SCa,SE,TCa,UCa,VCa,WCa,UE,YCa,XCa,ZCa,aDa,cDa,eDa,iDa,gDa,jDa,hDa,VE,WE,mDa,nDa,XE,YE,ZE,aF,bF,cF,pDa,eF,fF,qDa,gF,rDa,hF,iF,sDa,jF,kF,tDa,lF,zD

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1066, components 3
Category:	dropped
Size (bytes):	95366
Entropy (8bit):	7.962656087226738
Encrypted:	false
SSDEEP:	1536:myk62t5xj/Ld3z338NjrSticD5NDBshxPMLg/EEib0ikYSpq65JwwddDjeFKDVXA:aZXndr38NXaicDCxKg/EE+L60wddDjk5
MD5:	60CF73F8AEE5313C2D2052A3FCA08AEB
SHA1:	1F175239D415A5A1E5DAC7D15646B90FF0D02F82
SHA-256:	01B42A857E05625824BF074C52F494235329BD3676B073C54F13FA582F17E215
SHA-512:	16EAD0AA17255E925F525F2FAACDE5D1FF98D07F3E1B6EB97E3388EDCBA98E533AFC2926D419542F2D5B5140B3FD94BE340A405904BCD94F5D2CFD16B715A12B
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................#....!!!..$'$ &. ! ...C........... ... .......@.......................................................................................%..R..X.....(..U.......%X.`B.RQH.\...B....(!@.. (.......H.....D- ...E... J..X.)..H...E.)A$(....@...X.(...($Z..U!HR:7..Y......I....H..).R.@(.......RRZ.D....`.%X).PAbP....P..H..)..... ."X..)....B.$.H(.....QRB......%R.$...E.$..("..QH.7..B ......V.P...%R.T......E.X..V2..B..(Q.HPB.%.X..IH..(...................@R.B.B.$.P@.$))...T....U.AH!U.Z..Z.V..H.e..@.@..B...).H...h..Z.R....U..Z.HR....B..QH...AA)...4@.`.PB....PHU% .@....."...,E.).....X.$.....X...!j@PJJ.b..$R..-..H....@......V..T... ...@Q.......H...b( ...JA...H(..!H.D,..H.RU...V!T.II.H............`@.R ...d.!hIH..i..@.P........@P.....P.M..........(.JE.....V.....%Q...RR.X.b.HRU."U.........!PH[Q..HR.@..@. .(@. . .R)H........(..-...YH.l.m".......i@..(.....A@..bP......@[.*........@.!A.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 635 x 312, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	36032
Entropy (8bit):	7.956763020739807
Encrypted:	false
SSDEEP:	768:vfGLYYxdtwsB1+wRl0sUg+wRhnWkryLbHamR53wCR6cSq:vsYYHtwnwQzwRh8L3wCv5
MD5:	9DAFEE5F9E8E8F2292B533CD0F51CF99
SHA1:	4C8396D7195FC103E11A2D1EC3C7A9919A1A3AD8
SHA-256:	7348886633E4605188B21DB71BE792C492D4C5AADBA1A8D088BBECFAED4BEA4C
SHA-512:	48DDCB09F61D9375AB7D6E3D205A36268D78C3A3B04D8C03AEFD92AEEFE3DA30AC538AB1DBA1B3D746D785072E24AA03ECDE83CE4FDE65A6F8F5030B35DBFA4C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js/StaticMapService.GetMapImage?1m2&1i126638&2i188368&2e1&3u11&4m2&1u635&2u312&5m6&1e0&5sen-US&6sus&10b1&12b1&14i47083502&client=google-maps-embed&token=108285
Preview:	.PNG........IHDR...{...8.............PLTE/04<=AHJMUWZ`decdgppp{}.8x..._'.i5.rB.\|P..k..{..^...aa..........................................................................................................................................................................=.c....bKGDP.nL... .IDATx..._.H...Cw.gE.Qp....r.0.I.G.......I:I..gv...(B...SWWW.v0Z...~.w...-f..v;y.N(I.3..J//3y"...v..v.......5..s.ANW.w....8...l...3S{...~.JO...].......i......{"..F..h..6..1....L....y...R..g?.Dgrq6..e2...........ni..s.W~?'{B.x..l..<.k..5...!....[.G;.b1..{O~...&......n2.W..^.y.$m.....z.l<..:...M..~/..=........g..$....=......{...$..w..{.fo4z.n.`OC.S.F..;.....s:.....t.t....N.m..e.C..).sK/~.4...B..e#......^.}.;.B7.y...g....z....ra......#..R...<.{?....=.}.{2>.....N.7...d......{.......O..t.g.w>.:.....>1....=.{...P...U.I..#]`..m..mm..OuBc....<.....&.'...d....d...$...9.".w..Y..u........h .%..b.\...d.......c..\.P....W.Ht.Z.....eo9#...z....Vc>A>..&#.7.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4765
Entropy (8bit):	7.914349551855348
Encrypted:	false
SSDEEP:	96:C5raGXbfz6dbVDMp6GRoL2Ycy1EPAqI2I5aO6BLQZfYJq5K5Ic0u5NI3iE:mraAbL6NVD++aAqI2I5LDAJq5eIfuXi/
MD5:	9A942045EC3F115DAE872C3BE6B3A047
SHA1:	AF88E5C73E9D34C671A7ED099C0628C249DFD9E2
SHA-256:	EA80D10D991B201E42309C3FC535F9ABE17F5F37E4128A69E41E05B233DFB223
SHA-512:	7F5FA48CEE78FE5C887A8EB9C69076D03D6DD9B2B05E29CA4A0F7C48146064D4F94E9B0301910CBE6929B99121E99C2B309F2EEB564BDAE2F7E29259ABD66CDA
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/embed/images/entity11.png
Preview:	.PNG........IHDR...F...............dIDATx...utT.....K.HZ&......"W..n.e....?..........8$xm.H.PA..@3..~.........ae....Ygr...og.$}rU4{j..&...v.0....D...-.........e} j.]...y.:`..\........QF........e$.1:`.-.QF.......T.<G.x.S.T.~.<G.x.S.T.~.<G.x.S...s$......>^1G..K......s$.......^1....Q....'..%..8.v.@a<.......R..;..8#...C[jQc...g$:.vhK-j.0a..p.2P..a<...e....x.3.%.@Qc.......(..h.7(.G...Tc.uC..z.S.]V.j..n.r].q..0.V.:.9..^......SiE..S......SiE..S...4Lk.D...D..~....Z+L....H.ZaB\.=..B..s..%.u.p...0.a...lWL..\jEI.u.p..E...0#.0/.)..+.Ki.3...R.&.....Da.?L4^..wA<..=.E.S^^~(..D.S..\w0.d .`...a..%...L..@....'....n...0U...$D<..-..Ei.R.-.2}.I.S.\|..bH../Z....%!J.\|..bV../Z....%!..\|.....-....;.cq...F..9..c......\..p.u.d..........\|.8q<.DH.".nwT@.T..WDwT@.T......ys+..\|...d..@,E..Fag. ;1...a.v...S.7.....F..]=\..VC{...=.Oza5.Gk.;.}'.K.k..dO..u...v..=9>n.1.#.."){r.~b.k.me....nn.o+.....(....Y....w$.....=......s*t.NKG...".bX..+.uK...B;L....P/....\|B-v.X.....8!.......8

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (507)
Category:	downloaded
Size (bytes):	5035
Entropy (8bit):	4.618564670671512
Encrypted:	false
SSDEEP:	48:pwkhziw7QOfnfcXDxrDVWkMOqUML8vm/gMALV+1+tKalpLtYM0G08Lu:hhziw7QOfnfaDxrJW+qamq7jtLg8Lu
MD5:	64B35FD004ACC43BBB389FF5BA16223D
SHA1:	1ACA6ACC7AB2DF6F3607225B7D7C6A0CB9F73831
SHA-256:	10BCF589B896DB39BE3C5589724C1589A6D0FA7F8B62B5681DCA5617F5B38302
SHA-512:	9757F74B33FF24D021561F6566AF98397E937BC280A9018AED07DA640FA97E74F31C0F6D203938BE50909D868EC8CC5136995A5B2FE5540A3B23EAA62270DD0A
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/patientCenter/expect.html
Preview:	<!DOCTYPE html>.<html lang="en">.. <head>.. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <meta name="description" content="">. <meta name="author" content="">.. <title>Info: Acupuncture</title>.. Bootstrap core CSS -->. <link href="../vendor/bootstrap/css/bootstrap.min.css" rel="stylesheet">. <link href="../css/details.css" rel="stylesheet">. <link rel="shortcut icon" href="../icon.png">.. Custom styles for this template -->. <style>. body {. padding-top: 54px;. }. @media (min-width: 992px) {. body {. padding-top: 56px;. }. }.. </style>.. </head>.. <body>.. Navigation -->. <nav class="navbar navbar-expand-lg navbar-dark bg-dark fixed-top">. <div class="container">. <a class="navbar-brand" href="../index.html">Eternal Spring Acupuncture</a>. <button class="navbar-toggler" type="button" data-tog

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 635 x 312, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	36032
Entropy (8bit):	7.956763020739807
Encrypted:	false
SSDEEP:	768:vfGLYYxdtwsB1+wRl0sUg+wRhnWkryLbHamR53wCR6cSq:vsYYHtwnwQzwRh8L3wCv5
MD5:	9DAFEE5F9E8E8F2292B533CD0F51CF99
SHA1:	4C8396D7195FC103E11A2D1EC3C7A9919A1A3AD8
SHA-256:	7348886633E4605188B21DB71BE792C492D4C5AADBA1A8D088BBECFAED4BEA4C
SHA-512:	48DDCB09F61D9375AB7D6E3D205A36268D78C3A3B04D8C03AEFD92AEEFE3DA30AC538AB1DBA1B3D746D785072E24AA03ECDE83CE4FDE65A6F8F5030B35DBFA4C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...{...8.............PLTE/04<=AHJMUWZ`decdgppp{}.8x..._'.i5.rB.\|P..k..{..^...aa..........................................................................................................................................................................=.c....bKGDP.nL... .IDATx..._.H...Cw.gE.Qp....r.0.I.G.......I:I..gv...(B...SWWW.v0Z...~.w...-f..v;y.N(I.3..J//3y"...v..v.......5..s.ANW.w....8...l...3S{...~.JO...].......i......{"..F..h..6..1....L....y...R..g?.Dgrq6..e2...........ni..s.W~?'{B.x..l..<.k..5...!....[.G;.b1..{O~...&......n2.W..^.y.$m.....z.l<..:...M..~/..=........g..$....=......{...$..w..{.fo4z.n.`OC.S.F..;.....s:.....t.t....N.m..e.C..).sK/~.4...B..e#......^.}.;.B7.y...g....z....ra......#..R...<.{?....=.}.{2>.....N.7...d......{.......O..t.g.w>.:.....>1....=.{...P...U.I..#]`..m..mm..OuBc....<.....&.'...d....d...$...9.".w..Y..u........h .%..b.\...d.......c..\.P....W.Ht.Z.....eo9#...z....Vc>A>..&#.7.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 7, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Photos 3.0, datetime=2017:01:09 09:51:59], baseline, precision 8, 4032x2165, components 3
Category:	dropped
Size (bytes):	1871758
Entropy (8bit):	7.975651771025241
Encrypted:	false
SSDEEP:	49152:N0u+X6mKNZqyySi32sdwROAi59ZEK98usN3c9DhpE:auVPFyxZGOhVEK9tas9Ds
MD5:	D7D702C67E7726F84896210240BD5F01
SHA1:	396DC7F9A45D6844E4F51B9E3D895D98F54B6ECD
SHA-256:	127611133B6DCD435DAF76663F4B11D009C8927ABE75F5D765BEEEA662739D59
SHA-512:	4D01E1A93022E8EF93E6BE86E794D30F08428AB790A2A9E44E51C5676B8E6386BC6187C42EE22668DEA4959173299F83ED2AF52528ABDC327DD376F3A00CE482
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 7.....H.......H....Photos 3.0..2017:01:09 09:51:59..!...........L...........T."...........'..................0221...........\...........p.............................................................................................................\|.....4............541.........541.........0100...................................u....................................................................................2..........3...........4....."........................2017:01:09 09:51:59.2017:01:09 09:51:59... ........o......(....................d...4....Apple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.......F.'....;.......#-/8:...............................?.........

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10088
Entropy (8bit):	7.9545563977753435
Encrypted:	false
SSDEEP:	192:kma1nesnl6r2sUKY+GyicetHofpgIwftl9Qm+QnhGD5WeWpt:wrUNFZet0uXFl9Qm+Q25WJD
MD5:	64751C8D014E4134A38B78D5D9AEC810
SHA1:	54D62053A3D24B37AD71D4DDE5E43E2BA51A91E8
SHA-256:	3C1470723CFE350376DD247ED0D99A706EB8F8F7FF5F05ED4C3368848E18C433
SHA-512:	FCA1493C317ADDDF6A98C860BE0FE06C903C8F8B86ED68E820BFD350F9285B66DE590E570164949A556B853EA8B4459E27CBF777554EEC52BADBBADB853A978F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638
Preview:	RIFF`'..WEBPVP8LS'../..?...&..$3....K...n5.F....... .q2.a...YG.......a..~..w.....'..\|..$..._}...C<.<.`.6........%A...$j...f`....Q..V......Go....,.xA.~zy..v.I.$:......./_...LL.>.......N.s.....L....i.m.e.,..w!p..B......_5.r....G...D7h..A.C.-.DY....%.,r.~..Z...@..r.Ce.h_t.E9%zY.4.qF.N.?..62..T......Z.......3]/%z.r..&=).HlB.W*.][..........:X2...=.>.,N,S.....x.\.u.`^HU...,.8M.T.D.tm1.&S..O.$..e......rh.........=.M!@lj...((u\KE.....,@.hoOt...U.....(K.r.:l.....]...'."B.N..N.yV..EW....O......tA....-:;..{...v.9}....,..d...5.n....!.`;`X...f.IuM...V...x .-....M..@.]...!b.f.....\.v!.].f.....3.i@\jE...$.!6..py.1Yt3.......:c.L-S.5W"..Y7.....%..%...<k....E......{.e.DwJ:.^..n..u"m.gP.L.u2mQ{;"h#..ta........p=..h.: .z.e.D_.b>K...{r9ho.k...............40..dsA.v.3].i...........fA.w.^.[a..7...&../f..-.D.6..,..H....+..tY......^..0`8..@c...-.e6o.V7i......g.,..Nm`.....t.K..7..e...........D..+%.....+F7)..Z.G.p4...3..F{..':....P...v...p<.y.)..nR.h.%.c}D....f.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 7, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Photos 3.0, datetime=2017:01:09 10:58:30], baseline, precision 8, 2852x3024, components 3
Category:	downloaded
Size (bytes):	3003475
Entropy (8bit):	7.972755018185674
Encrypted:	false
SSDEEP:	49152:uakAaSFVTGhQgoDy9vW8L5uvghZEz0NWoLDxFj6zS6Zrj5oLttKqns3Ry:uaTX/TGhQpe9eOu4hSz0N9DXS9duMUsE
MD5:	FEA41127751F3C52DB8F68DAB0D40C29
SHA1:	D87D7C56370F0DF95956862545782E2DE0F75168
SHA-256:	C8D6B1C290042C01898647BAFA266A432319904CFA034D611B5AA1796C6946ED
SHA-512:	F57BEB04EF329383C0AECC9B4D0CFB00F0BB3810662A5E1FD081975D2A76C407FEDBB778784C97CB8B5F14B6973C405FDE0F637C03AC64D19E4CFED01680F0A4
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/aboutUs/fei.jpg
Preview:	......JFIF.....H.H.....,Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 7.....H.......H....Photos 3.0..2017:01:09 10:58:30.. ...........@...........H."...........'..................0221...........P...........d.......................x.....................................................................................\|.....4............595.........595.........0100.......................$....................................................................................2..........3...........4....."........................2017:01:09 10:58:30.2017:01:09 10:58:30....f.......o...........................d........Apple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.......$.....;.......#-/8:...............................?..._..........)....c..

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (906)
Category:	downloaded
Size (bytes):	2675
Entropy (8bit):	5.3343911471610905
Encrypted:	false
SSDEEP:	48:D1+kqj0watiHZDYWcjPlmVoTimWyWCk5OhcKMy01FiSxvQhIKsoXwyRn:D1+Z0waH5PQlldO6KMSSxtrewyRn
MD5:	41E499E0599AB53FCFC0C2CACD6520BF
SHA1:	B79D0C9317CF5BE6F5353B02E07B842FB4B6E48D
SHA-256:	D0713279F74A920D9CF7143B4B34F69EF184BF2E0060CF3AC30AE2A993F7761D
SHA-512:	D3591133A3475D456A68B2DA8E916C516AC63774FD9F046668A6BA442E32784C59971EF27D1FD1D3365AB05B37F9F8AEBDA88531340BA93E53060577D3166738
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/search.js
Preview:	google.maps.__gjsload__('search', function(_){var wva=function(){},WB=function(a){this.setValues(a);_.Qi("search_impl")},yva=function(a){let b=_.nl,c=-1;a.tiles.forEach(e=>{e.zoom>c&&(b=e.fi,c=e.zoom)});if(c===-1)return[];const d=[];a.Du().forEach(e=>{e.a&&e.a.length>=2&&d.push(new xva(e,b,c))});return d},zva=function(a){const b=[];a.data.forEach(c=>{b.push(...yva(c))});return b};_.Ga(wva,_.rk);var Ava={["1"]:{}},xva=class{constructor(a,b,c){this.Jp=b;this.zoom=c;this.bounds=this.anchor=null;this.Eg=Ava;this.source=a;this.featureId=this.source.id\|\|"0";this.infoWindowOffset=(this.source.io\|\|[]).length===2?new google.maps.Point(this.source.io[0],this.source.io[1]):null}getAnchor(){if(!this.anchor){const a=1<<this.zoom;this.anchor=_.Rl(new _.cm((this.Jp.x256+this.source.a[0])/a,(this.Jp.y256+this.source.a[1])/a)).toJSON()}return this.anchor}getCompleteBounds(){return this.getBounds().reduce((a,.b)=>{a.extendByBounds(b);return a},_.Vl(0,0,0,0))}getBounds(){if(this.bounds===null){this.bou

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	3487
Entropy (8bit):	5.373569985049004
Encrypted:	false
SSDEEP:	96:rPxgYZpBnecBii6nz1hAf3UUvz6+Ze1WP1dX5n:TxgYZGy6zTOXL6Cekv5
MD5:	5A9ABF02F5823F5A50F6B022A9FEDC3E
SHA1:	C1C9B68A1943FBF6E41FB8A848069102337B5ABF
SHA-256:	37F2F9F0E0D75497FE736BD0022FAFA40EEC0E9575A0E50128C8FA2DCFE01A63
SHA-512:	63C0CB51BB815B52BF199BF1F7A77FA3B818B8CE89545314670E8B394CD322A73270F1FD53F4DC7EAA0E4C1B06BF21936CE6768270530B6C116978B80A964A89
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/overlay.js
Preview:	google.maps.__gjsload__('overlay', function(_){var Oya=function(){},EC=function(a){a.uA=a.uA\|\|new Oya;return a.uA},Pya=function(a){this.Eg=new _.om(()=>{const b=a.uA;if(a.getPanes()){if(a.getProjection()){if(!b.Hg&&a.onAdd)a.onAdd();b.Hg=!0;a.draw()}}else{if(b.Hg)if(a.onRemove)a.onRemove();else a.remove();b.Hg=!1}},0)},Rya=function(a,b){const c=EC(a);let d=c.Fg;d\|\|(d=c.Fg=new Pya(a));_.rb(c.Eg\|\|[],_.dk);var e=c.Ig=c.Ig\|\|new _.xsa;const f=b.__gm;e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("center",f,"projectionCenterQ");e.bindTo("projection",.b);e.bindTo("projectionTopLeft",f);e=c.Kg=c.Kg\|\|new Qya(e);e.bindTo("zoom",f);e.bindTo("offset",f);e.bindTo("projection",b);e.bindTo("projectionTopLeft",f);a.bindTo("projection",e,"outProjection");a.bindTo("panes",f);e=()=>_.pm(d.Eg);c.Eg=[_.bk(a,"panes_changed",e),_.bk(f,"zoom_changed",e),_.bk(f,"offset_changed",e),_.bk(b,"projection_changed",e),_.bk(f,"projectioncenterq_changed",e)];_.pm(d.Eg);b instanceof _.Gk?(_.Vk(b,"Ox"),_.K(b,148440)):b

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	184994
Entropy (8bit):	5.631569490379207
Encrypted:	false
SSDEEP:	3072:YxTjNm8H2AO+yNwbuQjTgkK6Drm545DtsdayPnR5t1P2/6FzgAEY7N3D0OTFOu/b:YxTPWAO+yNwSQngkKWy545ydaqnR5tlJ
MD5:	09E687964AECC32424F69065C6E09E01
SHA1:	B8D3F468CA1EB45F21FC919564FAD50089B072AE
SHA-256:	A55663C398778C3399E0BCB628DE29B8C4040611F00E8F996A7FEBF0CA0B3F84
SHA-512:	BA389AB20D835938602484CB87B6D57A0D73271FA54DE81E57781524B6847BA06B88E0DE492CAF72E5035D6D8A1105F58D3EF85392B13DE53CC5DE1B1B6ADDD8
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Zya,aza,cza,dza,eza,fza,hza,OC,QC,RC,jza,lza,UC,nza,VC,pza,WC,rza,qza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Hza,Iza,Jza,Kza,$C,Nza,bD,Oza,Pza,Qza,Rza,Sza,Tza,Uza,Vza,Wza,Xza,Yza,$za,bAa,dAa,fAa,hAa,jAa,lAa,nAa,pAa,rAa,sAa,tAa,uAa,vAa,wAa,xAa,yAa,cD,zAa,AAa,BAa,CAa,DAa,EAa,GAa,eD,fD,HAa,IAa,JAa,KAa,LAa,MAa,NAa,OAa,PAa,QAa,RAa,gD,SAa,hD,TAa,UAa,VAa,WAa,XAa,YAa,ZAa,iD,$Aa,jD,aBa,bBa,cBa,dBa,eBa,fBa,gBa,hBa,iBa,jBa,kBa,lBa,mBa,nBa,oBa,pBa,qBa,rBa,sBa,uBa,vBa,wBa,yBa,lD,zBa,ABa,.BBa,CBa,DBa,EBa,GBa,JBa,KBa,MBa,PBa,QBa,RBa,ED,FD,GD,TBa,ID,JD,KD,LD,ND,VBa,OD,WBa,XBa,YBa,PD,QD,RD,SD,TD,ZBa,$Ba,aCa,cCa,dCa,UD,eCa,bCa,hCa,iCa,$D,mCa,qCa,rCa,sCa,cE,tCa,vCa,wCa,xCa,yCa,fE,ACa,FCa,oE,ICa,HCa,qE,JCa,sE,LCa,MCa,NCa,PCa,QCa,RE,SCa,SE,TCa,UCa,VCa,WCa,UE,YCa,XCa,ZCa,aDa,cDa,eDa,iDa,gDa,jDa,hDa,VE,WE,mDa,nDa,XE,YE,ZE,aF,bF,cF,pDa,eF,fF,qDa,gF,rDa,hF,iF,sDa,jF,kF,tDa,lF,zD

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3244 x 1308, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8275299
Entropy (8bit):	7.986989980561296
Encrypted:	false
SSDEEP:	196608:jpgq0BQyeHYrzx5z7bgA5CyuKMBH9eSwPbrx3sEp6TlmFHDABBlfbEEVpx4:N50BveHYrVxbtDiN8xJEcFHGHbEE/x4
MD5:	5462E4368C26A3BDB0CF903DAFE33475
SHA1:	2E2EE0FCB073D53C4661581645F27FDA7BFD67D3
SHA-256:	C072863C70514A7123BDE5FC7079225C8C7F2D759E76A4BB4D78353A9219B8A4
SHA-512:	D5D649547C57FC5C202720D724E926EAAF25ED2AB189315200EDB8A854C59E9E30E49302C55B1E95EC9E67ED3D905C9428FF5F6E8E5980D779AE0ABEE840F431
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................$iCCPICC Profile..H....TSI...$$$......Ujh..l.$.PB...;...ZP.....(..@...l.b..*.X...M.@.....y.;w.....&......"Q6..@.0_....HJNa..."P....8.9y"...p..H....&@..5[i........q.@.!.q.89.....rD.\|....n2#_...U.u1...T..rv.r...e>q1L..(P.lq..JR]..N...T..^...!.@....\......BV..l..]....L...fg..<.YQ........KN.dd..X.\|qh.4g.{....2..9aZd.d5...\.....%.....9yL..&.(........X...?.>l.l,.GS..q....P..3..-.fG...)..X#\......I... .o.6..Yq.1...."!+A.....6<.E!..9:.$F..~s.......c...+_........B.c....L.6.L^^R..../0H..+...ub....a....a....."..Cn.+.......<..d.'D....E..qrm8...&... .5..L h.m..#=.... ....edD..G..........F...zy....Z.O[...-....O!.........;.12..<2+1..H.%.......?.e... .V1..-.f%. ...-..)....p..I......'.G...Fm...F.......ps.......~....u.-..3..}an.....;...d{2J."..-..S.Vr..#..{.r]i..0G{~...]n\...-..bm.I.<.5..v.k..aG.<.6.....l12=Y0.`....~......e....f.K.8.\.,. ......5...r..2..........lOGtT.....0.`hh..7[.....=....f...e'..m.H..r..}........`...K..#p.^..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3664)
Category:	downloaded
Size (bytes):	296574
Entropy (8bit):	5.4789881757349805
Encrypted:	false
SSDEEP:	6144:587K0nBdQUUiaWlA8c+NgYCsGsRthM7aSaQ/2pQVrrl/BM9NXuC2r:587K0nBdQUUiaN8cFYlM7aSas2pQVrrj
MD5:	263B942BC5E51BD9868FC0E2CAEA89A0
SHA1:	894341592CC3BCD96287651D2A32F4B7C6DE85CA
SHA-256:	1729747AE6545E8764A8BB3D0529ABB8681587FA816A9D7857B84D406BCB5AD2
SHA-512:	0B0F81624489AB0720CCD2B486546BFC350EC8D13929D43127B219F28D8A07728923A17A912E732E24A9FF631E605F2B5138F0EAD86585F0A87CE3508CE8479A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/common.js
Preview:	google.maps.__gjsload__('common', function(_){var ija,mq,kja,lja,oja,nq,pja,rq,tq,wq,qja,rja,sja,tja,uja,Jq,wja,xja,Mq,Oq,Pq,Cja,Dja,Qq,Tq,Eja,Ija,Hja,Mja,Pja,zr,Ir,Jr,Sja,Lr,Tja,Uja,Vja,Wja,Xja,Yja,Zja,$ja,dka,eka,fka,gka,hka,Pr,Qr,ika,Rr,jka,Sr,kka,Tr,Wr,Yr,mka,nka,pka,oka,tka,uka,wka,Fs,yka,Aka,Cka,Qs,Gka,vt,Pka,Rka,Qka,Vka,Wka,Zka,$ka,ala,Zt,eu,fla,fu,iu,gla,ju,hla,mu,pla,Au,tla,Bu,ula,vla,xla,zla,yla,Bla,Ala,wla,Cla,Dla,Gu,Ela,kma,oma,qma,sma,Gma,ena,hna,lna,mna,una,vna,wna,xna,Bna,zna,xx,yx,Dna,Ena,Fna,Gna,Hq,Gq,mja,nja,yja,Aja,Bx,Fja,.Ina,qw,rw,Jna,pma,pw,sw,Jja,Kja,tma,Lja,Ex,Kna,Gx,Hx,Lna,Mna,Ona,Jx,Pna,Qna,Lx,Mx,Rna,Sna,Ox,Tna,Px,Una,Vna,Sx,Wna,Xna,Yna,Wx,Zna,$na,Yx,Zx,$x,ay,aoa,boa,coa,doa,aka,cka,ioa,joa,koa,loa,moa,ey,gw,poa,qoa,roa,rka,bs,toa,Mma,dna,Xma,Dka,Ks;_.jq=function(a){return!!a.handled};_.kq=function(a,b){var c=Array.prototype.slice.call(arguments,1);return function(){var d=c.slice();d.push.apply(d,arguments);return a.apply(this,d)}};._.hja=function(a,b){functio

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	16316
Entropy (8bit):	7.970858916468336
Encrypted:	false
SSDEEP:	384:sTQuh/UmjArXBsSZnvdn/8SkL1O1NWHoORrv7l64syR0Us:AQoMm+BsSlvdn0hWWIgIyRs
MD5:	D7355712CD0B30338441DB7DBF03870A
SHA1:	52EBCB5F1C6FFC1202BA530ABB48F82EC32BC379
SHA-256:	01DFA41548BC20E72EBC48F831BFCB903A962232EF11D6F2B5D1C772990C7130
SHA-512:	6810AA48654AD25559F4F4573EFEE22762184330FBD7E57CD61146D3B14C1729B46B00B9E75B25EFBA8DE4662597B8941AD896F8260EFD0402739A15A4D248E6
Malicious:	false
Reputation:	low
Preview:	RIFF.?..WEBPVP8L.?../..?.G.8.mU.....A.$Tbt.#i0.m.I....0.\V......M......q... 9.H.3_.....J.....P.L..L.....@5`.AL..2.2$S.b.......EP#..I!)D.q..BT.Wgk....;_...d.....;=.x.<...K..j.V.W...c:.u;...c....l..ES.h....(..H.B...@.N...}...m.$.../.. )PVL~.....6.#.M.T............#...@U...E`....0......[..m-c..0....f6.....`6.fl?.&.lKe.?.....3s...+.. ..Y.....=.o3..5.Fp........%.Tle.%.w..}...?..n...3s....M)^I...n.....Np...X.....}.d.....~/......K..2...^z....R....A........+8..y..{.b..N[\|/xi.....\rC...)c.-..... ..q../G.>D}R.......R.....x..N..>.{P.......t.B...+..o..x...A?zxUZ...t....:6.......UlV..w.?..............)c>..s....;.r.y.Nz!H......>e.v......2"%..;e..sS..9U.....j.....Z.......d..2..cc.o..+..`...?.G9.u...C...v........@ .g.b.2EX.f....3o.e.O./b.c@..w..=)~..<..,.u......]a.).h.....P.ENd.S.?......A...?.b.%>j...aUtT..h.s..7$.fW...%...^..!S\......8.@\.62..oI...W...2^.:.8.u.?D.[.e.G..l.Lf.u%.....`I...5):..y..2. `....j...K..!+...g..3.).......:p.G....^v....w.E..r,q.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	5.12401455031401
Encrypted:	false
SSDEEP:	12:UY6cqpdn5F5uMGWCYuLo5ifLojSdwoqKbhlr5wl3qKbhlr5wl2FsFl2MolS:f6cg756tLRTpqsP5mqsP59sKlS
MD5:	B4019CE4F0BDA5B2005672AC18C790D4
SHA1:	556D97ECB7C167F4CE73C38C4632BE219A879203
SHA-256:	7A25DF64348C47061FD36814B21A2CCD44FEDADEDB0C6FA0C81BA20991DA2EBE
SHA-512:	D626E7DCB48389C3C1F110290746A7F509D21046DCCAA8D633208CAC3E402EFB5E603B26A9DCF172FC3AB6D60AEB81A18D2060B0353F6622D2E7BF92751C5775
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/css/home.css
Preview:	/!. Start Bootstrap - Busines Frontpage (https://startbootstrap.com/template-overviews/business-frontpage). * Copyright 2013-2017 Start Bootstrap. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-business-frontpage/blob/master/LICENSE). */..body {. padding-top: 54px;.}..@media (min-width: 992px) {. body {. padding-top: 56px;. }.}...business-header {. height: 50vh;. min-height: 300px;. background-image: url('../images/index/mainCover.jpg'); . background-repeat: no-repeat;. background-size: 100% 100%;.}..header.jumbotron.my-4 {. height: 50vh;. min-height: 300px;. background-image: url('../images/index/mainCover.jpg'); . background-repeat: no-repeat;. background-size: 100% 100%;.}...card1 {. height: 100%;. background-repeat: no-repeat;. background-size: 100% 100%;.}...col-card {. height: 100%;. width: 50%;. padding: 20px;.}.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Oct 26 20:46:39 2022, max compression, from Unix, original size modulo 2^32 389664
Category:	downloaded
Size (bytes):	56266
Entropy (8bit):	7.994646840393015
Encrypted:	true
SSDEEP:	1536:UwFlLNE/IJ4qdRzjvzbrRJ5rjCK0uurpr3HdE:/3LNE/IJ4yrhJwK0rrprXS
MD5:	4CD3EC21B1460924277143880EAC3E53
SHA1:	FDB4B6312BA1C2D2D2CB30AAB350AB1415471980
SHA-256:	67F6E7ED96B66BB50314D71189CD0F883DE9F367B27E480803E518037DA63B7C
SHA-512:	2F7E6457E4C3CE35D8607E90D92BE7910657537F620D17C58D7B00910714E2A7965BB74D68BD9A691630ABCAE8A3ED96F0BFAAD010DE815A91B36C5CF2F04CC6
Malicious:	false
Reputation:	low
URL:	https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css
Preview:	......Yc......(..O.....fD5?.....]/\|.].gqq.s...H..M........?...O..~..._..../.R}.H.N..bfFFFFfFDFF.......s.e.K...l..k.1....._.......K...u.~{.q^~.u...$U...l..y...I..m.urh.r..<V.hS.MV..Y......x..\|?.'..:[...q.K..S.."yZ..r..99.y9Z'...=.~JQ!...>sA..l>.e].,....r.-.Y..m..._.y.f..J...fW.6...Ivy..}..Y.o..v..{..h.n....n.....t.e..yc.}^......!.~..\..Syl0.f..l.,Ee.".#".b[>f...=o}.........O...ApW../M..._O..BDvW.j.[....FT.?PX.(-Ve.>..=.y.E..]?o...+.C........6C....1...i........6.o....Z..y..D,.u....A.dw.H.+.e}H........v....6o2.TZ...oUrx......Z.....o..'.......w.....F.[.r..$.GD...\|..?..o..,.e.c.]TY..yZ.9B......~.J..7y...p.q.PE.Ol2....w.l.........-.....MQ~[P.}.+.e.M..i.5....,...a..?.9...}yH..O.7.c..I@..bD..!.......0......Z.%:...TY"MT...i...U!...N..t....YDM......e.j....0.i...?\|..?.u.?V........G.O\|.&.C..N..P .....c...qr......U.......'.(.6.h.a..m......]...Ox...#.+.+.T.P]o..cr..Xv.T..l.a....w..(\8.}M.l]V.^J....G-.....=:9H..w...f..*96..h.:}n.t.m.mPEr

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 70 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4765
Entropy (8bit):	7.914349551855348
Encrypted:	false
SSDEEP:	96:C5raGXbfz6dbVDMp6GRoL2Ycy1EPAqI2I5aO6BLQZfYJq5K5Ic0u5NI3iE:mraAbL6NVD++aAqI2I5LDAJq5eIfuXi/
MD5:	9A942045EC3F115DAE872C3BE6B3A047
SHA1:	AF88E5C73E9D34C671A7ED099C0628C249DFD9E2
SHA-256:	EA80D10D991B201E42309C3FC535F9ABE17F5F37E4128A69E41E05B233DFB223
SHA-512:	7F5FA48CEE78FE5C887A8EB9C69076D03D6DD9B2B05E29CA4A0F7C48146064D4F94E9B0301910CBE6929B99121E99C2B309F2EEB564BDAE2F7E29259ABD66CDA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...............dIDATx...utT.....K.HZ&......"W..n.e....?..........8$xm.H.PA..@3..~.........ae....Ygr...og.$}rU4{j..&...v.0....D...-.........e} j.]...y.:`..\........QF........e$.1:`.-.QF.......T.<G.x.S.T.~.<G.x.S.T.~.<G.x.S...s$......>^1G..K......s$.......^1....Q....'..%..8.v.@a<.......R..;..8#...C[jQc...g$:.vhK-j.0a..p.2P..a<...e....x.3.%.@Qc.......(..h.7(.G...Tc.uC..z.S.]V.j..n.r].q..0.V.:.9..^......SiE..S......SiE..S...4Lk.D...D..~....Z+L....H.ZaB\.=..B..s..%.u.p...0.a...lWL..\jEI.u.p..E...0#.0/.)..+.Ki.3...R.&.....Da.?L4^..wA<..=.E.S^^~(..D.S..\w0.d .`...a..%...L..@....'....n...0U...$D<..-..Ei.R.-.2}.I.S.\|..bH../Z....%!J.\|..bV../Z....%!..\|.....-....;.cq...F..9..c......\..p.u.d..........\|.8q<.DH.".nwT@.T..WDwT@.T......ys+..\|...d..@,E..Fag. ;1...a.v...S.7.....F..]=\..VC{...=.Oza5.Gk.;.}'.K.k..dO..u...v..=9>n.1.#.."){r.~b.k.me....nn.o+.....(....Y....w$.....=......s*t.NKG...".bX..+.uK...B;L....P/....\|B-v.X.....8!.......8

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, xresolution=86, yresolution=94, resolutionunit=2, software=Adobe Photoshop Lightroom 6.12 (Windows), datetime=2017:08:02 17:46:50], baseline, precision 8, 651x450, components 3
Category:	dropped
Size (bytes):	151921
Entropy (8bit):	7.956663000347744
Encrypted:	false
SSDEEP:	3072:17CbKwRq+tjz+aOBlrudDYh6+0zOKn629XykWUJJ1W+iQ:17wRftjzlmCDYfg62djY+iQ
MD5:	68ED016B20780AC89C7B707ABD9DA1C3
SHA1:	2C2DC84C05ED6B218AF836721A9D1E2A295DC402
SHA-256:	54774373BC903A530619A22745BF8B758D64D8F2D62D7B3631C1C4D640BCA9DC
SHA-512:	9B8A4154239B12D4C8C023ECB75A48C0EF622CC8BD322EE1CEEA3B76F4E6A15EF7783CD1A2595D190428832953F102814CC6CAFE6178DCF102BFDFBE9ABBB7F2
Malicious:	false
Reputation:	low
Preview:	....&`Exif..II...............V...........^...(...........1...)...f...2...........i...............,.......,.......Adobe Photoshop Lightroom 6.12 (Windows)..2017:08:02 17:46:50...........0230......................................................(................... ...........8%......H.......H.................................................................................................................................................... ....Adobe.d......................................................................................................!..1."AQa.2Bq..#R...b...3Cr.....$....DSTcs...........................!1."AQ.2a..Bq.............?..-t..C. .{C...u....Ys\|:\|{.1.18.r.\|k.I.v...5.n.7P....zt.h.Y.<zm.......,.^......q>...x............W0......U..P.......q.i...xj..s.....Q....6nE+!..adr..L.9f..#.mH...o.F..&.H.\............)...#R.~U.]E..W.....y(.......?<.W...cW.M...N......;.q4.c.ni.B..X....Sr\.o...+.WK..l.F....m....>..?..W..a.XU.R?*.O....=.D`....&..7..\....O-KJ.i..F

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9888
Entropy (8bit):	7.949534963832914
Encrypted:	false
SSDEEP:	192:aGlfH3hmsPZQOnaH7mTYA7KCOXIu8VrJsgcnHcK1IXOFWaQC:agfH3hZRhaYGF8VrJs5npWaV
MD5:	6048B7CA903C595D371AC50B23111532
SHA1:	4B1E540FD3AC96B3ECD150BF96D304877A8FB4EE
SHA-256:	5628F29CEA885A18B67B03B8023B222946ED649383F07911AD6BEF48F68B244B
SHA-512:	3E26792CABF359065E2E248CABF0EAD4E8701B99AA9454EC79C3F411975B6FCD7BCE2104E2B7188FF4F05140AFEB29383C3C18CD699C5923E6622350BE6E0554
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528
Preview:	RIFF.&..WEBPVP8L.&../..?.....m%.w...!.3.....6..$..Gyn..NM7.H..../.. .....;;..=f..v.4Y.."<..)...!`..$..r..k..N."b.\ib....r.W'Mp....j2..T.RUH..q,.7.H....(Y0uH...."..V&.4..3{.m?@=..`.....l.../~...hm...J...m...6.".._.MP..R0-.y......(...2.^gD.'.b.'...P...X2..=..(.............P..G.i?J.....~."....I.%Y........3$....D..."...m&9..j...........m...' .....?.....E..,.\|.....S"Z.^...6..".......).VzA+....\.V..I$.......A.....?'.Vh ....>..%_.2&..6tu...U...~m..lJ...\|F.~N..._.T.P.).%s~..m.,...H..0.>..m.g.8Q..N...}..d......S.y%.......D....f...%.$.J....M"..k.T.\|.M.QI.K..8.6...M...bj!+.r.C...,.0B!.H..(.V..i..!..T.t10..E..d..qZX,.N.nAO..G@O.CB."l.D~.....B"~N.h..4..#_..$....q..DL?&/.......z..K..,.yd...N.hA.d.../f...,..Gv.~N.h.oGE^P.d..%./c;.x?.UBm...(..6..qd...R.?.d....!..$..ad..lg..\|.s....k.# Y.< .H.\|..N6.~%T.B?....+....P..%s~...aM.....bjaO[+A@.,..Q............mPv>.^L.m~.\|.#.........6.V}..@A..d>.QQ.......}.0.!.C......%.1?E.FA..D...d.Jiv.e1..Q.A......@jd.0.@.4.0..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7992
Entropy (8bit):	7.944372184055198
Encrypted:	false
SSDEEP:	192:cEZN8PsmWjXsjP67YyVe+y5buaofUubyUTwe:cEkP3usjPKauDzTx
MD5:	B5EEFA881F9F59952BA427CB067E142A
SHA1:	C066B467143C7C1ABDCE61116F0555B1BEDBB499
SHA-256:	BB44FD592CF730FC9C9BF068917CD1C9FF3775432A4A00620AFB919BE30FF503
SHA-512:	68F3101E88021159985C62419659B22D091C3E84D41F3F98F03A76647DFDB77AC46DF3B8FF7AC27791FD5525A1DE20CE1038D2873C49D3D57FCBF1F68F01BEEC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282
Preview:	RIFF0...WEBPVP8L#.../..?.?.:..T..E.1.....4...P&7...md..d...BE..!......y.?v....x..F.X..l.l.l-<.)].i..........A...Q..M6~.._.~.}O...U.(N....erK.(...(.(..!.....WiE ....@+../I......s.......y...Z..Z....p.......P..qQ8_W.X.EmH2Y......9\.>.......^.2.=.:.p\&......O....ZM..l...x...-r.I:O,....Ey...?.#. .O...F].1rK...z".2w=.-7X..~....C.....- {..._......\|..#.n~.h......(....(...N.?QM.\|95..$...Z..w...4..P.....$g`..~OT.?V.z._\|...O:..&....~..f^..6Qo.........zp...T.S13..Ue..jf....D.X.r.....NGV...AX..K.C2#S.36Y.9^...PrM.............&.$...5......o....0.o.CY..}\~.q`..2~......7.).......t.=x...7.....S..s$.T...=..mH.*..........9.:l...z..$.....iI.../g.<....$X.0d.....~...9.K...Pf.......B.?l}..Y8.G....t.[...@.(. .P...Df....,.C.....2.(.?.3l..o V.RK.......E.{.E.}X3.};..@m-..?.^..`.....<.C.......~........0'...Y.}..js.......!....go0...bn...#....'....M.V.Oj...}..9?O....o..N.5R....X..X.yN....[m.\|.._.X.....,.r.8......}....EM....p....e...z..........]. .8...Oj....n?3.1..N..(.I.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	542
Entropy (8bit):	5.17149372709711
Encrypted:	false
SSDEEP:	12:Uc8cYos35F5uMGidtuLo5ifLojORZKbhlr5/GlT:B8cYd756xLRTNPsP5K
MD5:	433C772D827BF460EC1533289275F21B
SHA1:	5F6DBDA866E693F5A5CB0703CDA3C7C3DDABA78E
SHA-256:	FE805EB9112E13341A59E6F8C4761DCAF68A5B939954D7006222A5585DDC96ED
SHA-512:	9074F95347D16930B36230D804B7049BB380306B22DB4B6762A17F40AB775B20DADBCA20E0E91DB800DEE06927334BAEBE053EB17862D7E8D79D1FF2B0DD9A46
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/css/patientCenter.css
Preview:	/!. Start Bootstrap - 1 Col Portfolio (https://startbootstrap.com/template-overviews/1-col-portfolio). * Copyright 2013-2017 Start Bootstrap. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE). */..body {. padding-top: 54px;.}..@media (min-width: 992px) {. body {. padding-top: 56px;. }.}..header.jumbotron.my-4 {. height: 40vh;. min-height: 300px;. background-image: url('../images/services/cover.jpeg'); . background-repeat: no-repeat;. background-size: 100% 100%;.}.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=8, PhotometricIntepretation=RGB, orientation=upper-left, xresolution=110, yresolution=118, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2016:08:30 02:34:45], progressive, precision 8, 4287x2306, components 3
Category:	downloaded
Size (bytes):	5747796
Entropy (8bit):	7.8633950894120845
Encrypted:	false
SSDEEP:	98304:AL2jnAa7d6EG0UgfkCz8IxlLFcqTuxu1ZqDZ8QOZxHGDXHEjmV3jguXLxinxT+5U:ALknAa74eUukCZneqTuxu1Zqy6D0apja
MD5:	A4BDFE020B147218D39490CD6547D34B
SHA1:	426C36D420AF41B6217DA4FD1342F9270AB45A39
SHA-256:	F5735626AD83ADED70ADE9C47E854A37F3FF59BB75FA77A8E6763C82EE1C99F9
SHA-512:	8F33FAA7940E34E5241583F1146AF95B9E15AC406BBB2101D1A9AF079C444F1825EB063C9E59EE0FD7EBBD08C96D0E5275F6A91916FD73B024706225A5B72A00
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/c3.jpeg
Preview:	......JFIF..............Exif..MM.*.........................................n...........v.(...........1....."...~.2...........i..............................Adobe Photoshop CC 2015 (Windows).2016:08:30 02:34:45...........0230....................................................2016:08:30 02:17:39...!.http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:crs="http://ns.adobe.com/camera-raw-settings/1.0/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" crs:LuminanceAdjustmentGreen="0" crs:HueAdjustmentGreen="0" crs:SaturationAdjustmentYellow="0"

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
URL:	https://maps.gstatic.com/mapfiles/openhand_8_8.cur
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65291)
Category:	downloaded
Size (bytes):	69453
Entropy (8bit):	5.330146804102553
Encrypted:	false
SSDEEP:	1536:3VEcoepVAgjD1zCpHa2zXr8w8Yjma/fuT187V:3naqM8w8YjTf5V
MD5:	85BEF1B86B877DB4B17EA8BAE3EB7CD3
SHA1:	46D1F82F1FF4224130C6153A8A6DB457477B7097
SHA-256:	4490F15BCD903912985C78BA0B1D4ABBC94F7EEC240C8050685676D071B13D74
SHA-512:	88AE341FA16B5CC6B8558E88EB2D8C1E7CC309C3226CF403DE6C13FF7FBB33562B916E2EBD32C31338C5BDAD1CD2ACAE11B586FF5DE86C0E9B2289886B249D71
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/vendor/bootstrap/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v4.0.0-beta.2 (https://getbootstrap.com). * Copyright 2011-2017 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). */.var bootstrap=function(t,e){"use strict";function n(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function i(t){return t&&"[object Function]"==={}.toString.call(t)}function r(t,e){if(1!==t.nodeType)return[];var n=window.getComputedStyle(t,null);return e?n[e]:n}function o(t){return"HTML"===t.nodeName?t:t.parentNode\|\|t.host}function s(t){if(!t\|\|-1!==["HTML","BODY","#document"].indexOf(t.nodeName))return window.document.body;var e=r(t),n=e.overflow,i=e.overflowX;return/(auto\|scroll)/.test(n+e.overflowY+i)?t:s(o(t))}function a(t){var e=t&&t.offsetParent,n=e&&e.nodeName;return n&&"BODY"!==n&&"HTML"!==n?-1!==["TD","TABLE"].indexOf(e.nodeName)&&

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	20262
Entropy (8bit):	7.9813105355138605
Encrypted:	false
SSDEEP:	384:BVzYSUpjW+uPxaTa62Pl0YeVoIgiYXItBx21gf7ItLj:/USX+cxa/2PZemiYEb2ejA
MD5:	C080AF86A6AC42A4AA6EC60CE2314413
SHA1:	82E9D4DEECC3C402595B5BA4522CDA2C17D922D5
SHA-256:	33A44C3332A1F4146F835D6ACB588ECBA7B693FD350B72F20912321C7935CAE0
SHA-512:	7C041C97B1F846FC855EB68A6D2FC416CE48A934C706503C421754EE83A58709AAA97E66AF2054E01D4070688DDBE74EDAFEEB9E540DFECC6D0BF7E57D523275
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023
Preview:	RIFF.O..WEBPVP8L.O../..?...$E.^:f..Qg19q>..nU..n#IR.cfz._}.H.......m7..F[.!..@..."F^..4..../...D$"..#............$Z<2.S....r2.HX.4ZR.."P...H. +.&.Ee.e`...UVO.......U...3$.&R.Vj[tf.=...i)8................V,JcR.y.L..uG..a.-O..3..:...(.1.y.No..fCQ..Q....T.._.5...HJ.."Et..M...x2.&....W....6.....:...].O/.`......... !$$a..A..........r.vh.^V..../[[.Xs...o....?.v.._D..H..E5 ......T.."F..n..Eh.....c..&..Xe..l.D8.jo..+..Q.N.2..kc.h.b......:....)L..h.Jj......LDt..N2K:.....T.`....uI`+....U......(b...?.6.?..."....UD..u,.. r......a/...!.m.a..j!..X.O..jDL..DdCq.(b.BD..J.P.X1..M nS... ..g..M..u.U.."....$.C....52@.........t.P..`3.........J1l.-Uzh9...Ox...$..p.F..T$..P#.).".u.l....].9Y^..q.~.Y.....Y3..d.k..........y.T...2..y.....?.j.%G3A...\[52..&.p...q.^;..U...?!.....1.D..,.Z.CB.....h.".z.VRk..7.-...V......X.....l.....F..U2-..n...R......e.....1......5.h.........h..e..T...F......b.z. .?.j...1.@.p0.z...4U.....u....<.....2.[D..c.Dt...d...+<......ON.N>.~vl#.....z

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1352)
Category:	downloaded
Size (bytes):	2312
Entropy (8bit):	5.327139266424141
Encrypted:	false
SSDEEP:	24:hYemM15ilHyJXEcU0hQKCFAi1pLkIiXuDxZRleoYBCV9T2CASH1iCcIkZMuSDbdJ:yMjDJXZQKC+MkdkRKGTH1iCFLyV5r2F
MD5:	759CB1FCC9791D6BAD73822C5CDF30D8
SHA1:	490B8A634EA857B3A5C04F99D9202B14B3DBACF4
SHA-256:	583ACAD3A1706264898028AE41FD309E059F6E70CDD65019D520D12E70DA3C46
SHA-512:	9BF71598A81A46F57C305EE222BA0D1C46EB09DACF2233DF3E94365F7E942B67F6CE8822CA15AD1B92B76C2D1C36BE3B1471C06DB75952AEE3919C468F151321
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329
Preview:	<!DOCTYPE html>.<html>. <head>. <style type="text/css">. html, body, #mapDiv {. height: 100%;. margin: 0;. padding: 0;. }. </style>. </head>. <body>. <div id="mapDiv"></div>. . <script nonce="HbDgFHqFgOBmh92kzKhlng">. function onEmbedLoad() {. initEmbed([null,null,null,null,null,[[[2,"spotlit",null,null,null,null,null,[null,null,null,null,null,null,null,null,null,null,11,null,[null,null,null,null,null,null,null,null,null,null,null,null,null,1]]]],null,null,[[null,null,null,null,null,null,null,null,null,null,null,null,null,[[["5959152913421766081","3873299496822345719"],"/g/11c29058f6",null,[450310692,3363908564],null,null,null,1,null,null,null,null,null,null,"gcid:geocoded_address"],0,0,null,null,0,null,0]]]],null,["en_US"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/upgrade204",null,"/maps/embed/record204"],null,null,null,null,null,null,null,null,"2OL2ZrW8Ari1i-gPxoiB6A8",null,null,null,

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.html
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 2889x1921, components 3
Category:	downloaded
Size (bytes):	1784336
Entropy (8bit):	7.977002246435201
Encrypted:	false
SSDEEP:	49152:HR9/Zc+Q7NW0fKUZXveRd9WcPD1jVRmOKo:x9RcvQ0bZLyBjXm9o
MD5:	903466F12B71232C63189D764F74595B
SHA1:	10F474BF9A03BA3FB87AB18C1CD338A4AFC8C176
SHA-256:	806CC720BCA417D48A1981D10D798287F06CDACB71E8A75FE6ECE1E6C77EA694
SHA-512:	8C17FF9A51C3BD0060423BDC5FF05D5BFAA173BC32C7EAAE56C9A5B5EA25624E7311BF6841EE4D4277FAF0D01FA65CA8F94F76FEE2CFFD35FFD8DDA9B2DCE991
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/index/lec.jpeg
Preview:	......JFIF.....,.,......Exif..MM..............................J...........R.(...........i.........Z.......,.......,.............................I...................8Photoshop 3.0.8BIM........8BIM.%..................B~........I.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?..~..oz...I.`.^..&x.T.\|..3.g66.,h.4`...}....Z".....`..nd.~'.e..3.:._.F..~C.y.x1.{.bxv..t....\|..[>..m.$....@.fB.'.#p.=.?Zg......].<...-..zv.k.l.w..iB...........;..

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.528765458032569
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzj1TSQ2LpfLfgHTqBfslwG8Fi+W0Uan:TMHd9BZKtWRi5pfLfYOlgQ0+VUa
MD5:	A08D207CFC1758FE9A3882BC666DDCA7
SHA1:	AE26ECF65E4ADFB425E3CF560573DC8CA4F98FB6
SHA-256:	47F98ABF3D469CC448E29701738845DFA2B6715BD62BE30F1EF5C3807D27F84C
SHA-512:	3375B2C61EB1ECA11E4BD32B8B81824D0E54D8B62CF55A10956BD1810A38E3AA2A20896003576FE991AED11666C028A730C7D2AB7BBD3C432D512E451C04BA71
Malicious:	false
Reputation:	low
URL:	https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-medium.woff2
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>RQHJ798SEC63AK6E</RequestId><HostId>d11H76U0PGSxjSZu4rsznWex8q/GcHuAkvvCr4yiafA81PdpaZjoD6XpRQcS50sCBumhL6xPkeI=</HostId></Error>

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 635 x 336, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	43163
Entropy (8bit):	7.965011509906945
Encrypted:	false
SSDEEP:	768:/gSfPvT7ZbQUB8sK3gEru+RFoiNMKGdJkNEHXFMtFVCW:osT9bvK3hy+QiNDvNZ+W
MD5:	D1F45D53993F2AA99D2135F002646E61
SHA1:	C5B023042CC7C69641CCAD091B3CDE176ACE926C
SHA-256:	5BC550A055C9156B8ADA11536B22C2F161EDBA96A6717C1B7B47B62A223610E8
SHA-512:	E62CF494CF49C360C9420DC3085C3E0599739788027AE525DBAF5E24A2CE23EA818FA8F28429880E294AF00FDA88B94DBF0FBD9965A001CAF2838BBFE9818D9B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...{...P......iH....>PLTE !$/04<=AIJMXX[cdgssu.s.8x.)\|..._(.i6.s...$..=.....7..$..P..k..q..w..p..Q..S..V..j..o...Y..n .aa..&..@.}..................................................................................................................................................................................................)..Y....bKGDi.k... .IDATx..y{.8...B..t....\.v..n...6..4{...ak..41..l....WG.m...t...4......tt...f@vv..ww.X...}.j:...8..~F...mG...]..Y.!K\|.Edr}}~...>../...VLs..O.mx...-...},.....t2..X.G.w..i.....................OiEr&g.?_...w.3..a...1.....wT....L.PB..!u.[..U.Y.e.>\|.8........,Bu..5?\|.g...S.m5...=F.P.).`H...........0.;.........A.y........gG..'.....8./...b2....yx..p.uL....n:.7..>..=..w+..-..i..<l......7..>......9;n~. .,gP....#.G.l3[..q!W...>{..W.\.f.\6.c.po.....t....d`l....S.......}..?0y....~3.......p..v_.}......B.....'.....x.^.....\|...2.[.b/...f..(=..._%O...8.f..Yh.....ql.T.f...!.2[.,.^..g...e.V.{..u.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, description= , manufacturer=NIKON, model=COOLPIX P310, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=COOLPIX P310 V1.0, datetime=2013:05:23 07:54:26], baseline, precision 8, 4152x3456, components 3
Category:	dropped
Size (bytes):	3177588
Entropy (8bit):	7.983465343433878
Encrypted:	false
SSDEEP:	49152:/ZrkhB10erq5EN7Ai22U0YBIt+0WuZu+MnFBMjDF4riQR4VOMgfEnH:hohB10er1N8L2NwQWbnHcF4riQgOMg0H
MD5:	50585F531DDDA2D8C9ABC39CDB0D7A28
SHA1:	544E2B1452AE5E12182E5B706D403C7FB605D23D
SHA-256:	DC6639F9C84795504C49DEA716AF4F77E566F210FB9A686EE95EC420B99B3844
SHA-512:	44E0FFDC72251E4CA90FC441C1D8463243046EE4F51F8628C5BE59CBED1DFE92AF8E1FF745E770BA566927E3A678583FED00CFEDA5BFA8D4E0F32BE75B038AA7
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,......Exif..MM.*...............................................................................(...........1...........2..........i.............. ..NIKON.COOLPIX P310.....,.......,....COOLPIX P310 V1.0.2013:05:23 07:54:26..!...........p...........x."...........'...........0..................0230................................................................................................................................0100.......................8............................................................................................F.....................................................................................<........2013:05:23 07:54:26.2013:05:23 07:54:26.............................................http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 6 Plus, orientation=upper-left, xresolution=142, yresolution=150, resolutionunit=2, software=Photos 3.0, datetime=2015:08:19 16:28:16], baseline, precision 8, 3243x1745, components 3
Category:	dropped
Size (bytes):	1473136
Entropy (8bit):	7.966098901317219
Encrypted:	false
SSDEEP:	24576:Yne2wuBh9/m45PtpaH0ytEhBGVXrIkt5+xkDOjX2DMHTfy4IFqvEKqJbfpP:aR55FpaH/t8kZ0ktukijGAHTfy4I8MvL
MD5:	8F3CE76E13D5C3C2D15F7CBAAC23E457
SHA1:	E2B10ADCEE5B4EE28EF4B1296633C8243711FBC7
SHA-256:	1456FAFA7BE1D3A59ECA7195CCF2600FEB5F0E0C9572792C65E602155B665B01
SHA-512:	25D6EE3F0317E9C27A8BBE201435E9E179CB71A0329139748DF71F2E4C9CEF669BAA8433AB76A5D791798BE50BD3E2A75FD245A6C238426F8C336FEC6EE8CED8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....6Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 6 Plus....H.......H....Photos 3.0..2015:08:19 16:28:16.. ...........D...........L."...........'....... ..........0221...........T...........h.......................\|.....................................................................................\|.....4............416.........416.........0100............................................................................................................2..........3...........4.....'........................2015:08:19 16:28:16.2015:08:19 16:28:16...#....U...y...e...................S.....O.4.h.iApple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.....A.).w....;.......#-/8:...............................?..............8G..

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], progressive, precision 8, 2200x969, components 3
Category:	downloaded
Size (bytes):	516646
Entropy (8bit):	7.976084000200687
Encrypted:	false
SSDEEP:	12288:S5flNYbMdPM3Wfva6ocQLyS4Nl56e23eTqllIk1k0UFvcC1cdTtzsiJaIco:SplmVmfSiQL26h4qllI/0USYc7sJIp
MD5:	4F00A38EFB481ED0077AADF3CA04F03B
SHA1:	28795A6CF3963031E97D8CCF8CC619D768A94BE7
SHA-256:	28768904595F5B7806D7BFB6BA1478A4D0407C1B0174556239CE9D847AFA445F
SHA-512:	35E01F29C0B1D08A6CBF41960B9E8061B82BD8C13C73700BAA5BBD5F62AFFCE0963E50E405EFD46451B004CC456FF828D1DCF161BF7A507A5E3E13F8C7EC6FA6
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/services/cover.jpeg
Preview:	......JFIF.....H.H......Exif..MM..............................J...........R.(...........i.........Z.......H.......H.................................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................s.......!.1."..AQ2.aq#.. .B..R3.$b0..r.C.4...S@%c.5.s.PD...&T6d.t.`...p.'E7e.Uu.....Fv..GVf.....()89:HIJWXYZghijwxyz......................................................................................................................!. 1A..0"2Q.@.3#aB.qR4.P$..C...b5S..%`.D.r...c6p&ET.'........()*789:FGHIJUVWXYZdefghijstuvwxyz..............................................................................C....................................................................C.................................................................................bq..b]..Lj..N.ZbjcMh.[mZv..j'j.j..m.4....S.....j..Q:j6..j.L.F..+m5.b...5..h.[F..V.V.V.........................m[m[m[D..V.V.V.V

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 7, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Photos 3.0, datetime=2017:01:09 10:58:30], baseline, precision 8, 2852x3024, components 3
Category:	dropped
Size (bytes):	3003475
Entropy (8bit):	7.972755018185674
Encrypted:	false
SSDEEP:	49152:uakAaSFVTGhQgoDy9vW8L5uvghZEz0NWoLDxFj6zS6Zrj5oLttKqns3Ry:uaTX/TGhQpe9eOu4hSz0N9DXS9duMUsE
MD5:	FEA41127751F3C52DB8F68DAB0D40C29
SHA1:	D87D7C56370F0DF95956862545782E2DE0F75168
SHA-256:	C8D6B1C290042C01898647BAFA266A432319904CFA034D611B5AA1796C6946ED
SHA-512:	F57BEB04EF329383C0AECC9B4D0CFB00F0BB3810662A5E1FD081975D2A76C407FEDBB778784C97CB8B5F14B6973C405FDE0F637C03AC64D19E4CFED01680F0A4
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....,Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 7.....H.......H....Photos 3.0..2017:01:09 10:58:30.. ...........@...........H."...........'..................0221...........P...........d.......................x.....................................................................................\|.....4............595.........595.........0100.......................$....................................................................................2..........3...........4....."........................2017:01:09 10:58:30.2017:01:09 10:58:30....f.......o...........................d........Apple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.......$.....;.......#-/8:...............................?..._..........)....c..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=10, description= , manufacturer=NIKON, model=COOLPIX P310, orientation=upper-left, xresolution=166, yresolution=174, resolutionunit=2, software=COOLPIX P310 V1.0, datetime=2013:05:23 07:54:26], baseline, precision 8, 4152x3456, components 3
Category:	downloaded
Size (bytes):	3177588
Entropy (8bit):	7.983465343433878
Encrypted:	false
SSDEEP:	49152:/ZrkhB10erq5EN7Ai22U0YBIt+0WuZu+MnFBMjDF4riQR4VOMgfEnH:hohB10er1N8L2NwQWbnHcF4riQgOMg0H
MD5:	50585F531DDDA2D8C9ABC39CDB0D7A28
SHA1:	544E2B1452AE5E12182E5B706D403C7FB605D23D
SHA-256:	DC6639F9C84795504C49DEA716AF4F77E566F210FB9A686EE95EC420B99B3844
SHA-512:	44E0FFDC72251E4CA90FC441C1D8463243046EE4F51F8628C5BE59CBED1DFE92AF8E1FF745E770BA566927E3A678583FED00CFEDA5BFA8D4E0F32BE75B038AA7
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/aboutUs/laoye.jpg
Preview:	......JFIF.....,.,......Exif..MM.*...............................................................................(...........1...........2..........i.............. ..NIKON.COOLPIX P310.....,.......,....COOLPIX P310 V1.0.2013:05:23 07:54:26..!...........p...........x."...........'...........0..................0230................................................................................................................................0100.......................8............................................................................................F.....................................................................................<........2013:05:23 07:54:26.2013:05:23 07:54:26.............................................http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10626
Entropy (8bit):	7.9599717307129
Encrypted:	false
SSDEEP:	192:8VgV1zpUyt8FKem3iCeJaUwqQbvQgWG7dPsJk1nrdesCoQ0eGGORyjTE:84hpiZJNwVrWqsJQoXngGORK4
MD5:	8E17C1A7E71BE874D94F4FCA2F151300
SHA1:	86659E77647D77B66676404DCE5053C346327A38
SHA-256:	918A70B9FADA3A2B980688B77F9B5FF50C268757B5434CCD26435E11CE660221
SHA-512:	05211E34745B4CA67DDDF42772A14D98E80FB7F994E636409E8945B82B7645194B8E2B301CA494697FD6331EA6BB202E8F907E3E7BAA5C9B35F3AD9DF4F03DF7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306
Preview:	RIFFz)..WEBPVP8Lm)../..?...8.m.z.... .H.....s.`\../.Y..%(H...n>..{?..$[U..8.dG.$.r]w.."S$.......@.1...@..@@....P..(..$.......t...6X..vcN@d R%s.9.B..2.......D..$.............^..MXTQ\|...7ff..X.3s..Z..$.EX37.G}...{k.;...O..(...8LqA....a.^...d........w.\W.c..m.4..&l.&.H...@.E.J+U..Cqi;....c.f!..\|?........ru....l...tu.R?.R..qyz._.e\......%u,..Y..bb...7.2<.... ....\Q...\|...`mf...V.W..K....M...nW2K..C....&./.ds...\|....i.Hs..(.U..]p(.t!C._.-...k...-......5...B...f.Z..D..U..hC.D.<T.."...t.........\)83.7Jn.]ep\|D...6....i....@..Uzo...3..E....~.\|h{.T...P..D2."9.......Q%...."..7...O......Ry "U!RI....}9.....E.n.5.].v.X.\|s%cz.._p..[Y"....g...^...{.!..t.G.UF.=.v.....t#.Xpes..^.o/....w..5...n.~.....#.O...Z..j..B2 .3......V72>.$".,v..j.E.8.Qb...Fl1pR.7.7XH......FZ.e.......C..^..8..v..]/w.2.p.X......iU....A.f; :J....N....E.h.f%K.z%.7!I.p.2.....) "A3....f.}Pbq}'...z. ..Z......&.....O....Y.....u.....vP).0.4.L.........WdL!/..TV.............q...3Q.4L..f.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20325
Entropy (8bit):	7.853910999455207
Encrypted:	false
SSDEEP:	384:Ntwvh98Bd6lG6S7R2oOwm+GK6qVo6gAnZr6gWEwkDKYvLt:NqSBIlGb/m+GKVmwTxNvR
MD5:	58E8B5EF926AE05D1C7E94422C7492F4
SHA1:	F45C7AD7825F0CD91C419AE6FA2C3D3B4DB95004
SHA-256:	DB0F3945F20D7D41C54314AA51B5267554EBD7B069719F3A3CE3E0C77DA89E5D
SHA-512:	59D9B3D3F083BA93E54D30C2F23A49F3A570C4FB8772E2467DC4251502AB099F846933120DCFE9552B472809E1D90FA082E9147FA86F4742EE8888436FC5F371
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/icon.png
Preview:	.PNG........IHDR..............x......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.........B(.x..NBIDATx...w.dE....l`w.,\.EX@TT....Z.0...?..E..."."..eA.A.W.W.DD.J)." F@D..Z6..s.vg.gz.tw..}.^...>}j......:.......L.V..ky`..\.g'.......v......}...~.DdtC...i2..r......K..&K'.i.c..9,].<..........T..T.....f...K'.%.\|.0!u..,..c.`.?....J..H].............?_....}z/.9._.?._....\\|$u`"u..@d..a..x../N.k...!.g.. ..Y..D.G.....7..[.[.[./.&..K..........&.x{.D.L.....7....\...<....k...........)....h...>./N.[.&u\............H..H*..Q.._...x...........?......i...R{.5...%....K....c..........H..T.H.....@......._....n"+.~..F..H..MQj.z.2...>..J.c.Zy......(.........@.z."Y......r.c.F..\.\|..8..d.D...@.z.<.....N`j..!...{.O..O..H.S......E.....I9E.R.b...Q.N...R>].m...{..R.$2.O.....?..B)#..R.....;..'Ruw.g.g...M...b.$9..D....]..:&.>XHv..7.K...S.$..@...G.I....R.#2@....g...H..4....(..d..........4.0...g.?...O..4..\|e .7.._.....:...z.8..zp...H.......l...

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	608
Entropy (8bit):	5.154350156854671
Encrypted:	false
SSDEEP:	12:Uc8cYos35F5uMGidtuLo5ifLojORZKbhlr5/Gleritoj:B8cYd756xLRTNPsP5brj
MD5:	217D22D3D9904E561BE65A4DABFB6BF3
SHA1:	979892079BB32DFC32F5495E668215F51BFAE77D
SHA-256:	2C83102B024734D9EC25FA4CB1BAD0BEEA31F00ABB815B4B4E2213C169E25308
SHA-512:	2AC8FC781C0E88CC56CBD8B6148F5DC01455E8BEB02EC60AA13CBA4483908869C5AA23F8FA24DF3F286717E034678D4161CFB78AAF4B5C887C03E78BC06C8E9C
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/css/titleBar.css
Preview:	/!. Start Bootstrap - 1 Col Portfolio (https://startbootstrap.com/template-overviews/1-col-portfolio). * Copyright 2013-2017 Start Bootstrap. * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE). */..body {. padding-top: 54px;.}..@media (min-width: 992px) {. body {. padding-top: 56px;. }.}..header.jumbotron.my-4 {. height: 40vh;. min-height: 300px;. background-image: url('../images/services/cover.jpeg'); . background-repeat: no-repeat;. background-size: 100% 100%;.}...pagination {. margin-bottom: 15px;.}...card {. height: 100%;.}

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9930
Entropy (8bit):	7.94218759960114
Encrypted:	false
SSDEEP:	192:ewvkzRzguofaDAicar9LzhbOcHSsysliqwomcFa2QpO7JqCZN/wTJQ2:vSRBL99HSfsliqwoZ9QoqCZNgK2
MD5:	57A186A4386243CEFA05FC21622B62DF
SHA1:	37A55200888B5E0550DF24A5D88A0DD939A22FDD
SHA-256:	B555A74BDE95F823E05D9E52E18A9A11B9A2AD9258B1D0464AE41E7941B29618
SHA-512:	8A5AFEFB0A77E9D1E341287548BAD7B243077511839050AA626CD78257BF45D685F714B5E5993C89A04AB8A33AEF348E7812076A72E170CF4E879A8AE0BE7444
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?...m...-...2.#....].>5....&.....:.L.a..f....6.m......B..;...B"......;..V3Pl.i.#H3...@....@+X...."B..D...?...5n..@..Ox?!~6.$\|E..^.y #.#/j.],.5...".B.. F.... ...'..C....%f............=.....{...................=E.p.d.Nf.f.1......F..{y.1..883u....:1....o....3.L..(.._.,.6.........>\...g2.\|i..............Q.#...F-._.._.^.%)X\|..$.2E.6?..o>........tn...;..k.-..............p..;....\|...^......{......R.W..5...........$w...^.-7.{.-..m...N.t..K.m7....]....[..K.-...S.n.>6..+...IvH.mRtH...Nwo.?8.m..SmA...A...F-.ZT.%T...b..RZ42J..>.iO....&.v.%./.x+U..F.v..nJ^.....S.....K..L..%}!.b..... ..eb&S....i.......0...a&yY..7&.....a.... .K..2....m..".E..DI...^.H..w.J.....n..L/s.i...x....2A..yy.....S^.....-.<..$.I.....e.n....0NM...Fn.l..... y......P5..$L...=.Y......\|..1...Om.p.E>d.t........n.N.9......X..'{......R.)..& .z.W....0."T.@...`..^.d..W..E..e....t..s!...~.M@..dA\....sn.......F.....D0.%..!...Y.0.&.Be.%..AA...x..lH.Kx..@...f-.Z..a....a....)

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 450x300, components 3
Category:	downloaded
Size (bytes):	9514
Entropy (8bit):	7.922541416878011
Encrypted:	false
SSDEEP:	192:7Lz84WBAO8qmBRTZZCNo8QYz1CiEgDZ6O+JlEM0V:7LzNpvYozY8ifGapV
MD5:	B3636DFDE7B1D96E575D95544BB1C3F8
SHA1:	9C16C6CE44CEB0F2E48203C27E54C11F9C82219A
SHA-256:	1CAD563C97BD310F5C980FDBC8027421B43130544450F1DC5BACAA5AA8EFC50A
SHA-512:	1DBDE677F7F661383803120FDDE2C82FF30481329E3EE5CBFB245765FA7AAD9BBDD45880A6E382BEFD2B53C79EEC295E11580D783AFC5D9F55A545828BF4C102
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/acu.jpg
Preview:	......JFIF.....,.,...........................................#...!....).!$%'('..+.+&.#&'&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......,....".................................................$.ffb`.1$....!2I7]...I$.$....H&F&........{..<..$.J..fffbL0.d....$.I2....A$.X.333..$. .(X..I$..^y.UB...Y.....I$. ...T....!.x~,..D.\.ffm....KF...B.v..5..o..m.\|DI'd....$........c..-..Q.r.>..,.=...:.'L..g.E........\..$.!.\|...j...SU.f.....@.7>.."...%.Tg...I1.....]..J.g=3...2..f.%.9.T,..Tz...34&.}.8....6.....x..`.b.Qs..;.QUUD.Tz...M..qFf$.'...h.'R.%.9.Q...Y.;..Y..J.jT..o...43..[e.....[....uT.W.]....0....R.Z.j.g..Q..:..I.Ws.Z........&U.....b....Y3;.z.j.[.t.Tvv2f....Os.P'.p.......]..8.UUQ1.Y..T....R..fc...w.Gt.......x...............5.3;.^...u.Ggb}..a.wn'...;...]..@(..7....1..fg}..y.J.33...u....])d.....o>aB.n...*.....gj.....z...w}..l....A;N.......;G.......$.v._....Gfcs._:.}...hR@;.@.&..............c._.>\|.wwvf-.O6.>.....'X..c.w

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4632)
Category:	dropped
Size (bytes):	31006
Entropy (8bit):	5.548029155315869
Encrypted:	false
SSDEEP:	768:qJhfJmZTlv2TmXEJ24mk/B4UnbjLeYX8iHMfBcv5mc5ajNeB1o0oAWYOxIFTWwrq:8BbvXQrNeG8y
MD5:	B3E361BAAD69070C65C4394FC804D91A
SHA1:	FD42AAFB6463713F2BE75A5B73F08DDDF4DF6CB4
SHA-256:	D8427421CEE0B7A9768B360DA1C8F81E6F49E5561AC44884B627C8070156C3E3
SHA-512:	0BD3D87BE1C52431A8B374D059364F8568ECA7343AC0CE2222B64DEF544D97731B86C8B3A49DC44E2EDFF0234A3C9CD91E1801B8CFCB9B0C88BC96E7D6E40679
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('onion', function(_){var gZa,hZa,iZa,WP,ZP,YP,lZa,mZa,nZa,kZa,oZa,aQ,pZa,qZa,rZa,uZa,wZa,xZa,zZa,AZa,DZa,FZa,HZa,KZa,GZa,IZa,MZa,JZa,NZa,fQ,gQ,eQ,hQ,SZa,TZa,iQ,UZa,VZa,jQ,WZa,XZa,kQ,c_a,b_a,nQ,h_a,i_a,j_a,g_a,k_a,m_a,pQ,q_a,r_a,s_a,l_a,n_a,o_a,t_a,u_a,oQ,D_a,E_a,H_a,G_a;gZa=function(a){a=_.kJa(a);if(!a)return null;var b=new VP;b=_.Yd(b,1,_.qD(String(_.Ec(_.Xg(a.Fg))),0));a=_.Yd(b,2,_.qD(String(_.Ec(_.Xg(a.Eg))),0));b=new eZa;a=_.qe(b,VP,1,a);return _.Kb(fZa(a),4)};hZa=function(a,b){_.Bg(a.Gg,1,b)};.iZa=function(a,b){_.Bg(a.Gg,2,b)};WP=function(){jZa\|\|(jZa=[_.N,_.M,_.O])};ZP=function(a){_.LG.call(this,a,XP);YP(a)};YP=function(a){_.cG(a,XP)\|\|(_.bG(a,XP,{entity:0,Ym:1},["div",,1,0,[" ",["div",,1,1,[" ",["div",576,1,2,"Dutch Cheese Cakes"]," "]]," ",["div",,1,3,[" ",["span",576,1,4,"Central Station"]," ",["div",,1,5]," "]]," "]],[],kZa()),_.cG(a,"t-ZGhYQtxECIs")\|\|_.bG(a,"t-ZGhYQtxECIs",{},["jsl",,1,0," Station is accessible "],[],[["$t","t-ZGhYQtxECIs"]]))};lZa=func

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (535)
Category:	downloaded
Size (bytes):	223898
Entropy (8bit):	5.569634545782144
Encrypted:	false
SSDEEP:	6144:31hPTuFlPJ038r+G7Po9fsDB+ymJlC+RaWlKvLnF6YNgHeYA+jaL5hCw/3m+:31hPTuFlPJ038J7Po9EDBgJlC+RaWlKP
MD5:	55B9B3B92484C1952379CFC8F20CF7F6
SHA1:	8E1546F3A1A88D4B8B1A95C36CAC634632D40ACC
SHA-256:	33D6BF90C2E77B7BD99DABD4D581B12B00FF0CA711B04210C73510CB87A730D3
SHA-512:	1697C222E294E0001AAF84B64229CB6929E9A8FC4158BF3233B5FABC2206C11B61254AD69E7476C7DDFAF812A49F9D010AC11D416BDE5197B6300069104D7852
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/6/main.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,la,oa,na,ra,caa,daa,eaa,ib,kb,haa,naa,paa,nc,oc,pc,rc,uaa,yaa,zaa,xaa,Iaa,Gaa,Haa,Eaa,Daa,Faa,zd,Kaa,Laa,xd,Maa,Oaa,Naa,Paa,Qaa,Md,Raa,Saa,Vaa,Waa,Yaa,Zaa,fe,bba,Fe,fba,iba,cba,hba,gba,eba,dba,jba,nba,We,qba,cf,rba,vba,xba,yba,zba,Cba,wf,xf,yf,zf,Eba,Fba,Jba,Gba,Iba,Cf,Nf,Kba,Pf,Qf,Lba,Mba,Oba,Qba,Rba,Vba,Wba,Vf,Xba,Uba,Sba,Tba,Zba,Yba,Xf,bca,aca,cca,ag,dca,fca,gca,hca,kca,gg,ig,jg,ica,jca,nca,kg,lg,mg,oca,og,ng,pca,rca,tca,xca,zca,yca,Bca,Aca,Gca,Hca,Lca,Mca,Fi,Oca,Pca,Qca,Tca,Sca,Uca,Oi,.Rca,Vca,oj,uj,Kj,Lj,bda,Uj,eda,gda

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7992
Entropy (8bit):	7.944372184055198
Encrypted:	false
SSDEEP:	192:cEZN8PsmWjXsjP67YyVe+y5buaofUubyUTwe:cEkP3usjPKauDzTx
MD5:	B5EEFA881F9F59952BA427CB067E142A
SHA1:	C066B467143C7C1ABDCE61116F0555B1BEDBB499
SHA-256:	BB44FD592CF730FC9C9BF068917CD1C9FF3775432A4A00620AFB919BE30FF503
SHA-512:	68F3101E88021159985C62419659B22D091C3E84D41F3F98F03A76647DFDB77AC46DF3B8FF7AC27791FD5525A1DE20CE1038D2873C49D3D57FCBF1F68F01BEEC
Malicious:	false
Reputation:	low
Preview:	RIFF0...WEBPVP8L#.../..?.?.:..T..E.1.....4...P&7...md..d...BE..!......y.?v....x..F.X..l.l.l-<.)].i..........A...Q..M6~.._.~.}O...U.(N....erK.(...(.(..!.....WiE ....@+../I......s.......y...Z..Z....p.......P..qQ8_W.X.EmH2Y......9\.>.......^.2.=.:.p\&......O....ZM..l...x...-r.I:O,....Ey...?.#. .O...F].1rK...z".2w=.-7X..~....C.....- {..._......\|..#.n~.h......(....(...N.?QM.\|95..$...Z..w...4..P.....$g`..~OT.?V.z._\|...O:..&....~..f^..6Qo.........zp...T.S13..Ue..jf....D.X.r.....NGV...AX..K.C2#S.36Y.9^...PrM.............&.$...5......o....0.o.CY..}\~.q`..2~......7.).......t.=x...7.....S..s$.T...=..mH.*..........9.:l...z..$.....iI.../g.<....$X.0d.....~...9.K...Pf.......B.?l}..Y8.G....t.[...@.(. .P...Df....,.C.....2.(.?.3l..o V.RK.......E.{.E.}X3.};..@m-..?.^..`.....<.C.......~........0'...Y.}..js.......!....go0...bn...#....'....M.V.Oj...}..9?O....o..N.5R....X..X.yN....[m.\|.._.X.....,.r.8......}....EM....p....e...z..........]. .8...Oj....n?3.1..N..(.I.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	5.568599062105096
Encrypted:	false
SSDEEP:	6:TMVBd/ZbZjZvKtWRVzjd83zt90k3kR4Wseian:TMHd9BZKtWRD8UkUuWseia
MD5:	3494B247B2F0D522807506063F227896
SHA1:	5DF110F2BD8760BD4702C7402A4ABC22C1B97366
SHA-256:	199165FBECCEC3F5983A5480FC696DCB64134126B93DB2F0E3381DFF482C029E
SHA-512:	5C8222E8C315B5090D386D7DC2B99DAEF53703FFC8CC852606BD1B9F37D753AD8688924E3C35835454C034ACEB2EF9E3D0582B07380C0FEB5CFA3E9FB7B459CE
Malicious:	false
Reputation:	low
URL:	https://appointments-production-f.squarecdn.com/images/fonts/sqmarket/sqmarket-regular.woff2
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>RQHQYR8Y2SH4R1CS</RequestId><HostId>lOgpEKMXzyAbqd5faf/clRwuysv9mGmCiQ2Vf/cHsTx6qzMEn9bl8qxOBP1g8lthmW2SckiLui0=</HostId></Error>

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	520
Entropy (8bit):	4.878698265064193
Encrypted:	false
SSDEEP:	12:zRZKbPlr5/GleritoMhsRyakAwOmnKQWwQW3OEyw:zPsx5brMKRy4oKne3+w
MD5:	7709CF5553DDEB09705E75C154182428
SHA1:	52BDD4EC957E778CCC25F40811B406678F06CFA3
SHA-256:	65D9A7052AD22591BBD1E57A78CB967020FDC0306CF8B0FA50AD18EE5AF61D84
SHA-512:	C6EBD944EEB2C4B42B4715097EC843E7C63E3DD0F93B79645B50A5E94EED4E7D8E95A699564C3FE34B65077E4496D501BB4EACCC77899407EFD6A69B1698D781
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/css/details.css
Preview:	header.jumbotron.my-4 {. height: 40vh;. min-height: 100px;. background-image: url('../images/services/cover.jpeg'); . background-repeat: no-repeat;. background-size: 100% 100%;.}...pagination {. margin-bottom: 15px;.}...card {. height: 100%;.}...pad{. padding-bottom: 10%;. padding-left: 1%.}...column {. float: left;. width: 33.33%;. padding-left: 2%.}../* Clear floats after the columns */..row:after {. content: "";. display: table;. clear: both;.}...patient_right {. text-align: left;.}..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4016
Entropy (8bit):	7.904664063900611
Encrypted:	false
SSDEEP:	96:20a5PYhImmHkcjR9Eg8LRaXg7nDYE/CUt850h1J:H0M9mE/geaXgPQUt+0h/
MD5:	C8CE1D2DEB76EE7B857FFCB92EEEE9DB
SHA1:	A857E06D2D547B9C1488542E6824FFC78685F195
SHA-256:	66AAA9A7A806C494B33740C6AA3DD620DA2E8F1F90AD34C8F5A199A20F306FBE
SHA-512:	36CEA497CE7B0C1F4785D5769EFC1E194EDBE77BB3DEFDB5661103CD9F0E53A124C333CA1644A286798A4D5CCAB7C0A0501E239EB2955AD27F55E5C158C476B5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...6..D.........]v.`..@...^._....a>5..2..@k...........1...}aB..=P.H-......2...C9..{...u.....\|...J.......!Q>0x.m;Kmm..!.w..l....."...~......g..w)..E^.I....".x.i.>.}p&...nu..g..8....J.....I......M-?.J..4....../ i.Sis_v.z.'.G...(.....H..T:........G...4pz....1.cA2...4.V~xZH&.z;...w..&.cf...,.....;X...........d?k?....-..".4I1F..X..[.....N.....:.(...H.V..?oR...#....N....H...MK.......9.3.]G..d.i3..lG....aDj.."y.Z..Y...K....+o}G...)..7.A.$...Y1U.+o:..[i..h..d9]y.....a.uH..K;Q.W....m.h.(.....bT...h.O..P...u<8e\|.....K.#...)..Y....Mp...h.t.&S.[5.t....S\..u4>....'k.U.a(...C.:...bq....q.2.#.>+.j.A.v....w...0..N.....p.;.^.o5.....U....7.i\|.-n..vE.n..t`L..HZ......V.N......bY....T..u:(&.uq...d.[.:.......g.d.[.....0.I.pj.U....3.I...!.Z...............GC.g;........H.Co:.@.!..U..0i....LT..LGC.M.C...w*.E..;..X....T.. .V.GC.o:..N....5....GA.M.....nl\|?....T\|:#...-H....S....i.R.\...m.~.O.n...".R....%...g..tGlQ\|@...B.o...

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10649)
Category:	dropped
Size (bytes):	11799
Entropy (8bit):	5.943533365296097
Encrypted:	false
SSDEEP:	192:2IGIsmhPZjK1+UnNFa2sVCR/Ib0j3X+mavMPW+pPo8tvFDegG/Rmwehp2quW+EtM:lVsmO+QNFa2sVCR/Ib0j3X+mavMPW+pu
MD5:	1494E99E365D1BED9F9546DB7216C162
SHA1:	D94AB2FA1B6F00CE1070F049F712765F6B8A1EDF
SHA-256:	74F77C5C88BED680D71A9612AD5C18C813EFA0E4B6B1557F481F2C4378E1BACB
SHA-512:	6D1B944FC591C7A888A11D6AF123E728AD7A2A109FACF05AE15AE1C0DFED711FF565C733771ED71102CB6E01F2842DED30990D892F4EDE688C5B2C859D675240
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. var rules = {. createHTML: function(src) {. return src;. },. createScriptURL: function(src) {. return src;. }. };. var ttPolicy;. . try {. ttPolicy = window.trustedTypes.createPolicy('google-maps-api-loader', rules);. } catch(e) {. ttPolicy = rules;. }. . function getScript(src) {. var a, nonce = ((a = document.querySelector("script[nonce]")) == null ? void 0 : a.nonce) \|\| "";. var s = document.createElement('script');. . s.src = ttPolicy.createScriptURL(src);. s.nonce = nonce;. document.head.appendChild(s);. }. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=988\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=988\

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (906)
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	5.3343911471610905
Encrypted:	false
SSDEEP:	48:D1+kqj0watiHZDYWcjPlmVoTimWyWCk5OhcKMy01FiSxvQhIKsoXwyRn:D1+Z0waH5PQlldO6KMSSxtrewyRn
MD5:	41E499E0599AB53FCFC0C2CACD6520BF
SHA1:	B79D0C9317CF5BE6F5353B02E07B842FB4B6E48D
SHA-256:	D0713279F74A920D9CF7143B4B34F69EF184BF2E0060CF3AC30AE2A993F7761D
SHA-512:	D3591133A3475D456A68B2DA8E916C516AC63774FD9F046668A6BA442E32784C59971EF27D1FD1D3365AB05B37F9F8AEBDA88531340BA93E53060577D3166738
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('search', function(_){var wva=function(){},WB=function(a){this.setValues(a);_.Qi("search_impl")},yva=function(a){let b=_.nl,c=-1;a.tiles.forEach(e=>{e.zoom>c&&(b=e.fi,c=e.zoom)});if(c===-1)return[];const d=[];a.Du().forEach(e=>{e.a&&e.a.length>=2&&d.push(new xva(e,b,c))});return d},zva=function(a){const b=[];a.data.forEach(c=>{b.push(...yva(c))});return b};_.Ga(wva,_.rk);var Ava={["1"]:{}},xva=class{constructor(a,b,c){this.Jp=b;this.zoom=c;this.bounds=this.anchor=null;this.Eg=Ava;this.source=a;this.featureId=this.source.id\|\|"0";this.infoWindowOffset=(this.source.io\|\|[]).length===2?new google.maps.Point(this.source.io[0],this.source.io[1]):null}getAnchor(){if(!this.anchor){const a=1<<this.zoom;this.anchor=_.Rl(new _.cm((this.Jp.x256+this.source.a[0])/a,(this.Jp.y256+this.source.a[1])/a)).toJSON()}return this.anchor}getCompleteBounds(){return this.getBounds().reduce((a,.b)=>{a.extendByBounds(b);return a},_.Vl(0,0,0,0))}getBounds(){if(this.bounds===null){this.bou

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16316
Entropy (8bit):	7.970858916468336
Encrypted:	false
SSDEEP:	384:sTQuh/UmjArXBsSZnvdn/8SkL1O1NWHoORrv7l64syR0Us:AQoMm+BsSlvdn0hWWIgIyRs
MD5:	D7355712CD0B30338441DB7DBF03870A
SHA1:	52EBCB5F1C6FFC1202BA530ABB48F82EC32BC379
SHA-256:	01DFA41548BC20E72EBC48F831BFCB903A962232EF11D6F2B5D1C772990C7130
SHA-512:	6810AA48654AD25559F4F4573EFEE22762184330FBD7E57CD61146D3B14C1729B46B00B9E75B25EFBA8DE4662597B8941AD896F8260EFD0402739A15A4D248E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552
Preview:	RIFF.?..WEBPVP8L.?../..?.G.8.mU.....A.$Tbt.#i0.m.I....0.\V......M......q... 9.H.3_.....J.....P.L..L.....@5`.AL..2.2$S.b.......EP#..I!)D.q..BT.Wgk....;_...d.....;=.x.<...K..j.V.W...c:.u;...c....l..ES.h....(..H.B...@.N...}...m.$.../.. )PVL~.....6.#.M.T............#...@U...E`....0......[..m-c..0....f6.....`6.fl?.&.lKe.?.....3s...+.. ..Y.....=.o3..5.Fp........%.Tle.%.w..}...?..n...3s....M)^I...n.....Np...X.....}.d.....~/......K..2...^z....R....A........+8..y..{.b..N[\|/xi.....\rC...)c.-..... ..q../G.>D}R.......R.....x..N..>.{P.......t.B...+..o..x...A?zxUZ...t....:6.......UlV..w.?..............)c>..s....;.r.y.Nz!H......>e.v......2"%..;e..sS..9U.....j.....Z.......d..2..cc.o..+..`...?.G9.u...C...v........@ .g.b.2EX.f....3o.e.O./b.c@..w..=)~..<..,.u......]a.).h.....P.ENd.S.?......A...?.b.%>j...aUtT..h.s..7$.fW...%...^..!S\......8.@\.62..oI...W...2^.:.8.u.?D.[.e.G..l.Lf.u%.....`I...5):..y..2. `....j...K..!+...g..3.).......:p.G....^v....w.E..r,q.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32058)
Category:	dropped
Size (bytes):	86659
Entropy (8bit):	5.36781915816204
Encrypted:	false
SSDEEP:	1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQ7:uxc2yjx4j2uX/kcQDU8Cu9
MD5:	C9F5AEECA3AD37BF2AA006139B935F0A
SHA1:	1055018C28AB41087EF9CCEFE411606893DABEA2
SHA-256:	87083882CC6015984EB0411A99D3981817F5DC5C90BA24F0940420C5548D82DE
SHA-512:	DCFF2B5C2B8625D3593A7531FF4DDCD633939CC9F7ACFEB79C18A9E6038FDAA99487960075502F159D44F902D965B0B5AED32B41BFA66A1DC07D85B5D5152B58
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	37822
Entropy (8bit):	5.561956885982681
Encrypted:	false
SSDEEP:	768:byayLmTGUHNiScmD4EFFwOYHBCijJtyiVbu:byayLmf
MD5:	77A4AE1900D85D0E42BD19C629AB94BF
SHA1:	C3E5F3BDEE8A357EA892593B634BD5863961DDEF
SHA-256:	DAC6AAB1EAB597A0ECCB552DF2040D9ACF6838755165E5C06BCD9327F683EF11
SHA-512:	950A6B2B6A91942085A15A92D736C8B31BE6D66FAB56F153F4F1B71A37B8181EF6F99BFAA9C8560F59809755AFF84DBB9D30B58F75D5A07672D45343A8C4EB24
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700\|Google+Sans:400,500,700\|Google+Sans+Text:400&lang=en"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, 2 colors, hotspot @8x8
Category:	dropped
Size (bytes):	326
Entropy (8bit):	2.5620714588910247
Encrypted:	false
SSDEEP:	6:Gl/0puls6M94pTiI+mBURd8EOJlZa8BBL:C0pqs6M94pTJyOZ77
MD5:	FEFF9159F56CB2069041D660B484EB07
SHA1:	0D0A08CF25A258511957F357B89D3908F3C5E6E3
SHA-256:	7342F390B12F636D14E25F698FC5E38CF6240994DC0C07FEFBBB4E78EC4D03C7
SHA-512:	F850277F48AC14FA363265469776E6F7F07F7DD743AA1D1AD7CF2329EEE6D323DA3422CF6BAAC066C84ECD24800A02088053EF3FC0488D170E7FC942AC8FFA99
Malicious:	false
Reputation:	low
Preview:	...... ......0.......(... ...@...............................................................................................................................?...w...g...............................................................................................................................................................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=Apple, model=iPhone 7, orientation=upper-left, xresolution=138, yresolution=146, resolutionunit=2, software=Photos 3.0, datetime=2017:01:09 09:51:59], baseline, precision 8, 4032x2165, components 3
Category:	downloaded
Size (bytes):	1871758
Entropy (8bit):	7.975651771025241
Encrypted:	false
SSDEEP:	49152:N0u+X6mKNZqyySi32sdwROAi59ZEK98usN3c9DhpE:auVPFyxZGOhVEK9tas9Ds
MD5:	D7D702C67E7726F84896210240BD5F01
SHA1:	396DC7F9A45D6844E4F51B9E3D895D98F54B6ECD
SHA-256:	127611133B6DCD435DAF76663F4B11D009C8927ABE75F5D765BEEEA662739D59
SHA-512:	4D01E1A93022E8EF93E6BE86E794D30F08428AB790A2A9E44E51C5676B8E6386BC6187C42EE22668DEA4959173299F83ED2AF52528ABDC327DD376F3A00CE482
Malicious:	false
Reputation:	low
URL:	https://eternalspringacupuncture.com/images/prices/c1.jpg
Preview:	......JFIF.....H.H.....@Exif..MM.*.................z.................................................(...........1...........2...........i..............Apple.iPhone 7.....H.......H....Photos 3.0..2017:01:09 09:51:59..!...........L...........T."...........'..................0221...........\...........p.............................................................................................................\|.....4............541.........541.........0100...................................u....................................................................................2..........3...........4....."........................2017:01:09 09:51:59.2017:01:09 09:51:59... ........o......(....................d...4....Apple iOS...MM.....................h...........................................................................$....................................................bplist00.........UflagsUvalueUepochYtimescale.......F.'....;.......#-/8:...............................?.........

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (535)
Category:	dropped
Size (bytes):	223898
Entropy (8bit):	5.569634545782144
Encrypted:	false
SSDEEP:	6144:31hPTuFlPJ038r+G7Po9fsDB+ymJlC+RaWlKvLnF6YNgHeYA+jaL5hCw/3m+:31hPTuFlPJ038J7Po9EDBgJlC+RaWlKP
MD5:	55B9B3B92484C1952379CFC8F20CF7F6
SHA1:	8E1546F3A1A88D4B8B1A95C36CAC634632D40ACC
SHA-256:	33D6BF90C2E77B7BD99DABD4D581B12B00FF0CA711B04210C73510CB87A730D3
SHA-512:	1697C222E294E0001AAF84B64229CB6929E9A8FC4158BF3233B5FABC2206C11B61254AD69E7476C7DDFAF812A49F9D010AC11D416BDE5197B6300069104D7852
Malicious:	false
Reputation:	low
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2019 Google LLC. SPDX-License-Identifier: BSD-3-Clause././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././..Math.uuid.js (v1.4).http://www.broofa.com.mailto:robert@broofa.com.Copyright (c) 2010 Robert Kieffer.Dual licensed under the MIT and GPL licenses../.var aaa,la,oa,na,ra,caa,daa,eaa,ib,kb,haa,naa,paa,nc,oc,pc,rc,uaa,yaa,zaa,xaa,Iaa,Gaa,Haa,Eaa,Daa,Faa,zd,Kaa,Laa,xd,Maa,Oaa,Naa,Paa,Qaa,Md,Raa,Saa,Vaa,Waa,Yaa,Zaa,fe,bba,Fe,fba,iba,cba,hba,gba,eba,dba,jba,nba,We,qba,cf,rba,vba,xba,yba,zba,Cba,wf,xf,yf,zf,Eba,Fba,Jba,Gba,Iba,Cf,Nf,Kba,Pf,Qf,Lba,Mba,Oba,Qba,Rba,Vba,Wba,Vf,Xba,Uba,Sba,Tba,Zba,Yba,Xf,bca,aca,cca,ag,dca,fca,gca,hca,kca,gg,ig,jg,ica,jca,nca,kg,lg,mg,oca,og,ng,pca,rca,tca,xca,zca,yca,Bca,Aca,Gca,Hca,Lca,Mca,Fi,Oca,Pca,Qca,Tca,Sca,Uca,Oi,.Rca,Vca,oj,uj,Kj,Lj,bda,Uj,eda,gda

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 450x300, components 3
Category:	dropped
Size (bytes):	9514
Entropy (8bit):	7.922541416878011
Encrypted:	false
SSDEEP:	192:7Lz84WBAO8qmBRTZZCNo8QYz1CiEgDZ6O+JlEM0V:7LzNpvYozY8ifGapV
MD5:	B3636DFDE7B1D96E575D95544BB1C3F8
SHA1:	9C16C6CE44CEB0F2E48203C27E54C11F9C82219A
SHA-256:	1CAD563C97BD310F5C980FDBC8027421B43130544450F1DC5BACAA5AA8EFC50A
SHA-512:	1DBDE677F7F661383803120FDDE2C82FF30481329E3EE5CBFB245765FA7AAD9BBDD45880A6E382BEFD2B53C79EEC295E11580D783AFC5D9F55A545828BF4C102
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,...........................................#...!....).!$%'('..+.+&.#&'&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......,....".................................................$.ffb`.1$....!2I7]...I$.$....H&F&........{..<..$.J..fffbL0.d....$.I2....A$.X.333..$. .(X..I$..^y.UB...Y.....I$. ...T....!.x~,..D.\.ffm....KF...B.v..5..o..m.\|DI'd....$........c..-..Q.r.>..,.=...:.'L..g.E........\..$.!.\|...j...SU.f.....@.7>.."...%.Tg...I1.....]..J.g=3...2..f.%.9.T,..Tz...34&.}.8....6.....x..`.b.Qs..;.QUUD.Tz...M..qFf$.'...h.'R.%.9.Q...Y.;..Y..J.jT..o...43..[e.....[....uT.W.]....0....R.Z.j.g..Q..:..I.Ws.Z........&U.....b....Y3;.z.j.[.t.Tvv2f....Os.P'.p.......]..8.UUQ1.Y..T....R..fc...w.Gt.......x...............5.3;.^...u.Ggb}..a.wn'...;...]..@(..7....1..fg}..y.J.33...u....])d.....o>aB.n...*.....gj.....z...w}..l....A;N.......;G.......$.v._....Gfcs._:.}...hR@;.@.&..............c._.>\|.wwvf-.O6.>.....'X..c.w

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10088
Entropy (8bit):	7.9545563977753435
Encrypted:	false
SSDEEP:	192:kma1nesnl6r2sUKY+GyicetHofpgIwftl9Qm+QnhGD5WeWpt:wrUNFZet0uXFl9Qm+Q25WJD
MD5:	64751C8D014E4134A38B78D5D9AEC810
SHA1:	54D62053A3D24B37AD71D4DDE5E43E2BA51A91E8
SHA-256:	3C1470723CFE350376DD247ED0D99A706EB8F8F7FF5F05ED4C3368848E18C433
SHA-512:	FCA1493C317ADDDF6A98C860BE0FE06C903C8F8B86ED68E820BFD350F9285B66DE590E570164949A556B853EA8B4459E27CBF777554EEC52BADBBADB853A978F
Malicious:	false
Reputation:	low
Preview:	RIFF`'..WEBPVP8LS'../..?...&..$3....K...n5.F....... .q2.a...YG.......a..~..w.....'..\|..$..._}...C<.<.`.6........%A...$j...f`....Q..V......Go....,.xA.~zy..v.I.$:......./_...LL.>.......N.s.....L....i.m.e.,..w!p..B......_5.r....G...D7h..A.C.-.DY....%.,r.~..Z...@..r.Ce.h_t.E9%zY.4.qF.N.?..62..T......Z.......3]/%z.r..&=).HlB.W*.][..........:X2...=.>.,N,S.....x.\.u.`^HU...,.8M.T.D.tm1.&S..O.$..e......rh.........=.M!@lj...((u\KE.....,@.hoOt...U.....(K.r.:l.....]...'."B.N..N.yV..EW....O......tA....-:;..{...v.9}....,..d...5.n....!.`;`X...f.IuM...V...x .-....M..@.]...!b.f.....\.v!.].f.....3.i@\jE...$.!6..py.1Yt3.......:c.L-S.5W"..Y7.....%..%...<k....E......{.e.DwJ:.^..n..u"m.gP.L.u2mQ{;"h#..ta........p=..h.: .z.e.D_.b>K...{r9ho.k...............40..dsA.v.3].i...........fA.w.^.[a..7...&../f..-.D.6..,..H....+..tY......^..0`8..@c...-.e6o.V7i......g.,..Nm`.....t.K..7..e...........D..+%.....+F7)..Z.G.p4...3..F{..':....P...v...p<.y.)..nR.h.%.c}D....f.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20325
Entropy (8bit):	7.853910999455207
Encrypted:	false
SSDEEP:	384:Ntwvh98Bd6lG6S7R2oOwm+GK6qVo6gAnZr6gWEwkDKYvLt:NqSBIlGb/m+GKVmwTxNvR
MD5:	58E8B5EF926AE05D1C7E94422C7492F4
SHA1:	F45C7AD7825F0CD91C419AE6FA2C3D3B4DB95004
SHA-256:	DB0F3945F20D7D41C54314AA51B5267554EBD7B069719F3A3CE3E0C77DA89E5D
SHA-512:	59D9B3D3F083BA93E54D30C2F23A49F3A570C4FB8772E2467DC4251502AB099F846933120DCFE9552B472809E1D90FA082E9147FA86F4742EE8888436FC5F371
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.........B(.x..NBIDATx...w.dE....l`w.,\.EX@TT....Z.0...?..E..."."..eA.A.W.W.DD.J)." F@D..Z6..s.vg.gz.tw..}.^...>}j......:.......L.V..ky`..\.g'.......v......}...~.DdtC...i2..r......K..&K'.i.c..9,].<..........T..T.....f...K'.%.\|.0!u..,..c.`.?....J..H].............?_....}z/.9._.?._....\\|$u`"u..@d..a..x../N.k...!.g.. ..Y..D.G.....7..[.[.[./.&..K..........&.x{.D.L.....7....\...<....k...........)....h...>./N.[.&u\............H..H*..Q.._...x...........?......i...R{.5...%....K....c..........H..T.H.....@......._....n"+.~..F..H..MQj.z.2...>..J.c.Zy......(.........@.z."Y......r.c.F..\.\|..8..d.D...@.z.<.....N`j..!...{.O..O..H.S......E.....I9E.R.b...Q.N...R>].m...{..R.$2.O.....?..B)#..R.....;..'Ruw.g.g...M...b.$9..D....]..:&.>XHv..7.K...S.$..@...G.I....R.#2@....g...H..4....(..d..........4.0...g.?...O..4..\|e .7.._.....:...z.8..zp...H.......l...

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 18:51:48.855501890 CEST	192.168.2.4	1.1.1.1	0xdcad	Standard query (0)	eternalspringacupuncture.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:51:48.855830908 CEST	192.168.2.4	1.1.1.1	0xb327	Standard query (0)	eternalspringacupuncture.com	65	IN (0x0001)	false
Sep 27, 2024 18:51:51.267314911 CEST	192.168.2.4	1.1.1.1	0x2fb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:51:51.267719984 CEST	192.168.2.4	1.1.1.1	0x5d18	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 18:51:53.636607885 CEST	192.168.2.4	1.1.1.1	0x8ac5	Standard query (0)	eternalspringacupuncture.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:51:53.636774063 CEST	192.168.2.4	1.1.1.1	0xf52d	Standard query (0)	eternalspringacupuncture.com	65	IN (0x0001)	false
Sep 27, 2024 18:52:02.470011950 CEST	192.168.2.4	1.1.1.1	0x36d3	Standard query (0)	squareup.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:02.472496033 CEST	192.168.2.4	1.1.1.1	0x862	Standard query (0)	squareup.com	65	IN (0x0001)	false
Sep 27, 2024 18:52:03.986737967 CEST	192.168.2.4	1.1.1.1	0x3299	Standard query (0)	appointments-production-f.squarecdn.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:03.987261057 CEST	192.168.2.4	1.1.1.1	0x8ba8	Standard query (0)	appointments-production-f.squarecdn.com	65	IN (0x0001)	false
Sep 27, 2024 18:52:05.531881094 CEST	192.168.2.4	1.1.1.1	0xf6db	Standard query (0)	squareup.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:05.532140017 CEST	192.168.2.4	1.1.1.1	0x34bb	Standard query (0)	squareup.com	65	IN (0x0001)	false
Sep 27, 2024 18:52:38.736048937 CEST	192.168.2.4	1.1.1.1	0xb7a0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:38.737968922 CEST	192.168.2.4	1.1.1.1	0xd0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 18:52:49.775644064 CEST	192.168.2.4	1.1.1.1	0x19f3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:49.776113987 CEST	192.168.2.4	1.1.1.1	0xf76c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 18:51:49.043524027 CEST	1.1.1.1	192.168.2.4	0xdcad	No error (0)	eternalspringacupuncture.com		107.180.47.65	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:51:51.274207115 CEST	1.1.1.1	192.168.2.4	0x2fb	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:51:51.274408102 CEST	1.1.1.1	192.168.2.4	0x5d18	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 18:51:53.650846004 CEST	1.1.1.1	192.168.2.4	0x8ac5	No error (0)	eternalspringacupuncture.com		107.180.47.65	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:01.725706100 CEST	1.1.1.1	192.168.2.4	0x3c14	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:52:01.725706100 CEST	1.1.1.1	192.168.2.4	0x3c14	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:02.477669954 CEST	1.1.1.1	192.168.2.4	0x36d3	No error (0)	squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:02.477669954 CEST	1.1.1.1	192.168.2.4	0x36d3	No error (0)	squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:04.005695105 CEST	1.1.1.1	192.168.2.4	0x3299	No error (0)	appointments-production-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:52:04.005695105 CEST	1.1.1.1	192.168.2.4	0x3299	No error (0)	squareup.map.fastly.net		151.101.1.49	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:04.005695105 CEST	1.1.1.1	192.168.2.4	0x3299	No error (0)	squareup.map.fastly.net		151.101.65.49	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:04.005695105 CEST	1.1.1.1	192.168.2.4	0x3299	No error (0)	squareup.map.fastly.net		151.101.129.49	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:04.005695105 CEST	1.1.1.1	192.168.2.4	0x3299	No error (0)	squareup.map.fastly.net		151.101.193.49	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:04.006247997 CEST	1.1.1.1	192.168.2.4	0x8ba8	No error (0)	appointments-production-f.squarecdn.com	squareup.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:52:05.671828985 CEST	1.1.1.1	192.168.2.4	0xf6db	No error (0)	squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:05.671828985 CEST	1.1.1.1	192.168.2.4	0xf6db	No error (0)	squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:14.718609095 CEST	1.1.1.1	192.168.2.4	0x8c74	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:52:14.718609095 CEST	1.1.1.1	192.168.2.4	0x8c74	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:38.744077921 CEST	1.1.1.1	192.168.2.4	0xb7a0	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:38.744916916 CEST	1.1.1.1	192.168.2.4	0xd0	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 18:52:41.169492960 CEST	1.1.1.1	192.168.2.4	0xdb25	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:52:41.169492960 CEST	1.1.1.1	192.168.2.4	0xdb25	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:52:49.798197985 CEST	1.1.1.1	192.168.2.4	0xf76c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 18:52:49.798799992 CEST	1.1.1.1	192.168.2.4	0x19f3	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Sep 27, 2024 18:53:03.217138052 CEST	1.1.1.1	192.168.2.4	0x4977	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 18:53:03.217138052 CEST	1.1.1.1	192.168.2.4	0x4977	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	671	OUT	GET / HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:50 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 04 Dec 2022 15:59:36 GMT ETag: "6612f5-18d9-5ef02a853389a" Accept-Ranges: bytes Content-Length: 6361 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:51:50 UTC	6361	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 6d 65 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Home

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	593	OUT	GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:50 UTC	292	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:50 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680433-1f16f-5616f045cad80" Accept-Ranges: bytes Content-Length: 127343 Vary: Accept-Encoding Content-Type: text/css
2024-09-27 16:51:50 UTC	7900	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 2d 62 65 74 61 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 37 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 37 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: /! Bootstrap v4.0.0-beta.2 (https://getbootstrap.com) * Copyright 2011-2017 The Bootstrap Authors * Copyright 2011-2017 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 63 6f 6c 2c 2e 63 6f 6c 2d 31 2c 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 6c 67 2c 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 63 6f 6c 2d 6c 67 2d 61 Data Ascii: dding-left:0}.col,.col-1,.col-10,.col-11,.col-12,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-auto,.col-lg,.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7,.col-lg-8,.col-lg-9,.col-lg-a
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 2e 6f 66 66 73 65 74 2d 6c 67 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 Data Ascii: .offset-lg-5{margin-left:41.666667%}.offset-lg-6{margin-left:50%}.offset-lg-7{margin-left:58.333333%}.offset-lg-8{margin-left:66.666667%}.offset-lg-9{margin-left:75%}.offset-lg-10{margin-left:83.333333%}.offset-lg-11{margin-left:91.666667%}}@media (min-wi
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 20 30 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 70 6c 61 69 6e 74 65 78 74 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 67 3e 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d Data Ascii: lid transparent;border-width:1px 0}.form-control-plaintext.form-control-lg,.form-control-plaintext.form-control-sm,.input-group-lg>.form-control-plaintext.form-control,.input-group-lg>.form-control-plaintext.input-group-addon,.input-group-lg>.input-group-
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 36 32 63 63 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 35 29 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 2e 64 69 73 61 62 6c 65 64 29 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a Data Ascii: 62cc}.btn-primary.focus,.btn-primary:focus{box-shadow:0 0 0 .2rem rgba(0,123,255,.5)}.btn-primary.disabled,.btn-primary:disabled{background-color:#007bff;border-color:#007bff}.btn-primary:not([disabled]):not(.disabled).active,.btn-primary:not([disabled]):
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 32 32 30 2c 35 33 2c 36 39 2c 2e 35 29 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 7b 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 38 66 39 66 61 7d 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 6c 69 67 68 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 61 63 Data Ascii: n-toggle{color:#fff;background-color:#dc3545;border-color:#dc3545;box-shadow:0 0 0 .2rem rgba(220,53,69,.5)}.btn-outline-light{color:#f8f9fa;background-color:transparent;background-image:none;border-color:#f8f9fa}.btn-outline-light:hover{color:#212529;bac
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 33 37 35 72 65 6d 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 63 6f 6c 6f 72 3a 23 34 39 35 30 35 37 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 Data Ascii: put-group-btn:not(:first-child):not(:last-child){border-radius:0}.input-group-addon,.input-group-btn{white-space:nowrap}.input-group-addon{padding:.375rem .75rem;margin-bottom:0;font-size:1rem;font-weight:400;line-height:1.5;color:#495057;text-align:cente
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 6a 75 73 74 69 66 79 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 7d 2e 6e 61 76 62 61 72 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 6e 61 76 62 61 72 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 Data Ascii: flexbox;display:flex;-ms-flex-wrap:wrap;flex-wrap:wrap;-ms-flex-align:center;align-items:center;-ms-flex-pack:justify;justify-content:space-between;padding:.5rem 1rem}.navbar>.container,.navbar>.container-fluid{display:-ms-flexbox;display:flex;-ms-flex-wr
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 63 61 72 64 3e 68 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 63 61 72 64 3e 2e 6c 69 73 74 2d 67 72 Data Ascii: xbox;display:flex;-ms-flex-direction:column;flex-direction:column;min-width:0;word-wrap:break-word;background-color:#fff;background-clip:border-box;border:1px solid rgba(0,0,0,.125);border-radius:.25rem}.card>hr{margin-right:0;margin-left:0}.card>.list-gr
2024-09-27 16:51:50 UTC	8000	IN	Data Raw: 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 33 65 36 63 62 7d 2e 61 6c 65 72 74 2d 73 75 63 63 65 73 73 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 62 31 64 66 62 62 7d 2e 61 6c 65 72 74 2d 73 75 63 63 65 73 73 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 62 32 65 31 33 7d 2e 61 6c 65 72 74 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 30 63 35 34 36 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 31 65 63 66 31 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 65 65 35 65 62 7d 2e 61 6c 65 72 74 2d 69 6e 66 6f 20 68 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 61 62 64 64 65 35 7d 2e 61 6c 65 72 74 2d 69 6e 66 6f 20 2e 61 6c 65 72 74 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 30 36 32 63 33 33 7d Data Ascii: border-color:#c3e6cb}.alert-success hr{border-top-color:#b1dfbb}.alert-success .alert-link{color:#0b2e13}.alert-info{color:#0c5460;background-color:#d1ecf1;border-color:#bee5eb}.alert-info hr{border-top-color:#abdde5}.alert-info .alert-link{color:#062c33}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	567	OUT	GET /css/home.css HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 20:36:29 GMT ETag: "680404-372-56180964ead40" Accept-Ranges: bytes Content-Length: 882 Vary: Accept-Encoding Content-Type: text/css
2024-09-27 16:51:51 UTC	882	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 20 2d 20 42 75 73 69 6e 65 73 20 46 72 6f 6e 74 70 61 67 65 20 28 68 74 74 70 73 3a 2f 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 2d 6f 76 65 72 76 69 65 77 73 2f 62 75 73 69 6e 65 73 73 2d 66 72 6f 6e 74 70 61 67 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 42 6c 61 63 6b 72 6f 63 6b 44 69 67 69 74 61 6c 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2d 62 75 73 69 6e 65 73 73 2d 66 72 6f 6e 74 70 61 67 65 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c Data Ascii: /! Start Bootstrap - Busines Frontpage (https://startbootstrap.com/template-overviews/business-frontpage) * Copyright 2013-2017 Start Bootstrap * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-business-frontpage/blob/master/L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	568	OUT	GET /vendor/jquery/jquery.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680439-15283-5616f045cad80" Accept-Ranges: bytes Content-Length: 86659 Vary: Accept-Encoding Content-Type: text/javascript
2024-09-27 16:51:51 UTC	7894	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 21 31 3f 22 6c 61 62 65 6c 22 69 Data Ascii: nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.parentNode&&b.disabled===!1?"label"i
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6c 61 73 74 43 68 69 6c 64 5d 2c 67 26 26 73 29 7b 6d 3d 71 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b Data Ascii: lastChild],g&&s){m=q,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 72 20 64 3d 5b 5d 2c 65 3d 76 6f 69 64 20 30 21 3d 3d 63 3b 77 68 69 6c 65 28 28 61 3d 61 5b 62 5d 29 26 26 39 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 65 26 26 72 28 61 29 2e 69 73 28 63 29 29 62 72 65 61 6b 3b 64 2e 70 75 73 68 28 61 29 7d 72 65 74 75 72 6e 20 64 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 61 3b 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 21 3d 3d 62 26 26 63 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 41 3d 72 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 3b 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: r d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeType){if(e&&r(a).is(c))break;d.push(a)}return d},z=function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c},A=r.expr.match.needsContext;function B(a,b){return a
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 61 3d 3d 3d 21 30 3f 2d 2d 72 2e 72 65 61 64 79 57 61 69 74 3a 72 2e 69 73 52 65 61 64 79 29 7c 7c 28 72 2e 69 73 52 65 61 64 79 3d 21 30 2c 61 21 3d 3d 21 30 26 26 2d 2d 72 2e 72 65 61 64 79 57 61 69 74 3e 30 7c 7c 52 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 64 2c 5b 72 5d 29 29 7d 7d 29 2c 72 2e 72 65 61 64 79 2e 74 68 65 6e 3d 52 2e 74 68 65 6e 3b 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 29 2c 0a 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 53 Data Ascii: extend({isReady:!1,readyWait:1,ready:function(a){(a===!0?--r.readyWait:r.isReady)\|\|(r.isReady=!0,a!==!0&&--r.readyWait>0\|\|R.resolveWith(d,[r]))}}),r.ready.then=R.then;function S(){d.removeEventListener("DOMContentLoaded",S),a.removeEventListener("load",S
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 3f 28 65 3d 64 2c 64 3d 76 6f 69 64 20 30 29 3a 28 65 3d 64 2c 64 3d 63 2c 63 3d 76 6f 69 64 20 30 29 29 2c 65 3d 3d 3d 21 31 29 65 3d 77 61 3b 65 6c 73 65 20 69 66 28 21 65 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 66 26 26 28 67 3d 65 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 29 2e 6f 66 66 28 61 29 2c 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 67 75 69 64 3d 67 2e 67 75 69 64 7c 7c 28 67 2e 67 75 69 64 3d 72 2e 67 75 69 64 2b 2b 29 29 2c 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 65 2c 64 2c 63 29 7d 29 7d 72 2e 65 76 65 6e 74 3d 7b 67 6c 6f 62 61 6c Data Ascii: tring"==typeof c?(e=d,d=void 0):(e=d,d=c,c=void 0)),e===!1)e=wa;else if(!e)return a;return 1===f&&(g=e,e=function(a){return r().off(a),g.apply(this,arguments)},e.guid=g.guid\|\|(g.guid=r.guid++)),a.each(function(){r.event.add(this,b,e,d,c)})}r.event={global
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 63 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 64 29 26 Data Ascii: .contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(c&&r.contains(d.ownerDocument,d)&
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 67 65 74 3f 61 2e 67 65 74 28 74 68 69 73 29 3a 5f 61 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 5f 61 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 62 3d 72 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 61 2c 30 2c 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 29 3a 74 68 69 73 2e 70 6f 73 3d 62 3d 61 Data Ascii: opHooks[this.prop];return a&&a.get?a.get(this):_a.propHooks._default.get(this)},run:function(a){var b,c=_a.propHooks[this.prop];return this.options.duration?this.pos=b=r.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):this.pos=b=a
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 75 74 65 3f 72 2e 70 72 6f 70 28 61 2c 62 2c 63 29 3a 28 31 3d 3d 3d 66 26 26 72 2e 69 73 58 4d 4c 44 6f 63 28 61 29 7c 7c 28 65 3d 72 2e 61 74 74 72 48 6f 6f 6b 73 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 72 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 62 29 3f 6c 62 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 63 3f 6e 75 6c 6c 3d 3d 3d 63 3f 76 6f 69 64 20 72 2e 72 65 6d 6f 76 65 41 74 74 72 28 61 2c 62 29 3a 65 26 26 22 73 65 74 22 69 6e 20 65 26 26 76 6f 69 64 20 30 21 3d 3d 28 64 3d 65 2e 73 65 74 28 61 2c 63 2c 62 29 29 3f 64 3a 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 63 2b 22 22 29 2c 63 29 3a 65 26 26 22 67 65 74 22 69 6e 20 65 26 26 6e 75 6c 6c 21 3d 3d 28 64 3d 65 2e 67 65 74 28 Data Ascii: ute?r.prop(a,b,c):(1===f&&r.isXMLDoc(a)\|\|(e=r.attrHooks[b.toLowerCase()]\|\|(r.expr.match.bool.test(b)?lb:void 0)),void 0!==c?null===c?void r.removeAttr(a,b):e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:(a.setAttribute(b,c+""),c):e&&"get"in e&&null!==(d=e.get(
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6e 63 74 69 6f 6e 28 62 29 3f 62 28 29 3a 62 3b 64 5b 64 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 3d 3d 63 3f 22 22 3a 63 29 7d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6a 71 75 65 72 79 26 26 21 72 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 61 29 29 72 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 76 61 6c 75 65 29 7d 29 3b 65 6c 73 65 20 66 6f 72 28 63 20 69 6e 20 61 29 41 62 28 63 2c 61 5b 63 5d 2c 62 2c 65 29 3b 72 65 74 75 72 6e 20 64 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c Data Ascii: nction(b)?b():b;d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(null==c?"":c)};if(Array.isArray(a)\|\|a.jquery&&!r.isPlainObject(a))r.each(a,function(){e(this.name,this.value)});else for(c in a)Ab(c,a[c],b,e);return d.join("&")},r.fn.extend({serial

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	622	OUT	GET /images/index/faq.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680410-3cb24-5616f045cad80" Accept-Ranges: bytes Content-Length: 248612 Content-Type: image/jpeg
2024-09-27 16:51:51 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 e2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 0f 00 02 00 00 00 12 00 00 00 3e 01 10 00 02 00 00 00 0c 00 00 00 50 82 9a 00 05 00 00 00 01 00 00 00 5c 87 69 00 04 00 00 00 01 00 00 00 64 00 00 00 00 4e 49 4b 4f 4e 20 43 4f 52 50 4f 52 41 54 49 4f 4e 00 4e 49 4b 4f 4e 20 44 35 33 30 30 00 00 00 00 0a 00 00 03 e8 00 06 82 9a 00 05 00 00 00 01 00 00 00 ae 82 9d 00 05 00 00 00 01 00 00 00 b6 88 27 00 03 00 00 00 02 01 90 00 00 90 03 00 02 00 00 00 14 00 00 00 be 92 09 00 03 00 00 00 02 00 18 00 00 92 0a 00 05 00 00 00 01 00 00 00 d2 00 00 00 0a 00 00 03 e8 00 00 00 38 00 00 00 0a 32 30 31 36 3a 30 34 3a 32 34 20 30 30 3a 31 30 3a 31 35 00 00 00 04 1a 00 00 00 0a ff db 00 43 00 02 01 Data Ascii: JFIF,,ExifMM*>P\idNIKON CORPORATIONNIKON D5300'82016:04:24 00:10:15C
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: a9 c6 a9 cc ae e7 c0 35 92 20 bd 52 1f f7 15 62 06 e8 ff 00 0f 8d 06 37 b2 b0 bb 1f 47 1a a0 30 da 1b ea f0 d6 6e 18 99 b6 45 7c 0a 84 cd 29 13 1e ee 0f 22 0d 7b 10 8b 74 95 f7 d5 30 16 d7 12 cd 8c 5e d1 f0 2c 56 38 2b 47 f7 68 30 f8 80 99 b0 94 7b b5 87 c5 22 bc d1 d8 ff 00 76 b3 63 af e5 4a 3b 84 62 a7 8c 09 9b 64 31 8d f2 20 c2 48 af b1 bf 3d 0b 1a 42 be dd 1f ce b3 1b 45 77 67 f2 2a 73 f0 b7 94 99 10 76 07 07 13 0b 5b 19 e4 56 58 26 07 23 f8 2b 50 e0 fa 52 3f 0d 65 64 45 64 aa 18 df be a8 c6 ad 87 d6 59 86 63 3c 35 9e 87 17 b5 47 37 9f b8 ab 6e d8 bb 2d 6f 59 28 62 60 88 cf 21 14 da 0f 83 ff 00 63 d0 ff 00 0f 8d 5f 86 2d 36 31 26 ca 2d be be 05 7f 07 13 38 39 88 ce b3 cd 1d 1e ed 5c 8e 2b a4 e0 55 a1 e8 cc 7b d6 4b 0f e6 67 d4 b6 8a 02 0a ed 14 ab 23 Data Ascii: 5 Rb7G0nE\|)"{t0^,V8+Gh0{"vcJ;bd1 H=BEwg*sv[VX&#+PR?edEdYc<5G7n-oY(b`!c_-61&-89\+U{Kg#
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6c 49 20 5b 05 fe 62 0a d3 36 dd ad ef e0 a1 24 81 5d 8f 93 c8 a6 90 2b 5f 70 8c 48 3a fb 1b 1e c4 10 8c b7 63 b1 8f 4e 41 70 3d be 23 12 5d b4 4a e8 48 42 e9 05 ed 40 aa 31 95 82 90 c5 31 34 be e2 84 5f 5c 41 72 d5 a9 1f 02 a1 1c 5e d0 f6 77 08 9c 85 7f 6c a3 f8 d2 5a f6 8a d5 02 6c d2 91 42 49 a2 bb 42 7c 42 2b fb 65 7e f1 25 db a4 a1 05 0c 40 4c 28 df 5f 18 d5 69 11 6d 0e b6 71 ab 93 05 79 53 26 a9 28 41 8d 91 b2 d6 1e f6 3f ce a9 cf fa c3 d6 6f 10 16 9b 19 cb 78 d6 1e 40 bb 54 c6 3f 81 e8 31 b2 04 f1 61 6f c9 df 54 f6 09 ff 00 23 be 9f 3a cc 62 9a b1 1e c6 33 20 d5 39 82 b5 1d 81 6f 01 35 10 50 26 d6 17 89 6b 12 05 ed 15 b3 82 b5 b8 12 2b 0b 5b 18 fe e2 c2 48 8b 68 75 d0 83 0f 88 46 d3 65 4b 1b 20 56 a6 5e 6a cf 12 7f 6f e3 54 21 c5 f6 ca d0 76 04 74 Data Ascii: lI [b6$]+_pH:cNAp=#]JHB@114_\Ar^wlZlBIB\|B+e~%@L(_imqyS&(A?ox@T?1aoT#:b3 9o5P&k+[HhuFeK V^joT!vt
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: d1 3f 3a c2 61 d8 a6 a7 18 e8 ef ab 25 2f b4 71 a0 cf 76 fb 44 a1 89 24 4a f5 13 8d e3 ce b0 e4 95 e4 7a 98 92 bb 52 0c d9 27 e9 b2 a5 34 72 e9 f1 dc 58 1f 94 ee c6 c8 af f6 fe c1 f7 15 06 60 92 99 6d 99 f9 6f 53 0e 7e a6 5e 05 81 bb 7a bf fa d5 98 f2 ae 8f 8e b5 34 d9 e1 ca 67 68 4e 32 f7 16 1f b5 5a 1d 7d f5 37 6f bd 47 9d 50 65 47 2b b9 5e 44 76 a7 8b 83 81 50 db 2b da 5f f6 69 fb 55 a2 56 d5 31 92 8e 5b a4 7f 91 59 e4 8e be e2 c3 8c b6 9f c6 ae 0e 57 ae 1d 0a 82 f8 cb a9 47 c1 5a 08 5d 3c 8f ce b1 a4 2d a2 31 4c 3d 52 e5 fc f4 29 8c 95 df 58 f8 2d a7 bb c6 c7 3f 22 ad 0e 56 ab 3c 84 49 20 de 44 17 fb 55 de 0e 31 a4 c3 cb da 48 f7 fd 9a a7 1e 55 9a d8 c7 f7 13 c7 35 aa c3 cb 41 73 61 5e 2d af f2 22 ee 9b ea 55 89 29 85 91 43 93 f8 6c a3 51 14 3c 32 da Data Ascii: ?:a%/qvD$JzR'4rX`moS~^z4ghN2Z}7oGPeG+^DvP+_iUV1[YWGZ]<-1L=R)X-?"V<I DU1HU5Asa^-"U)ClQ<2
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 09 96 d9 47 00 d0 41 5d 1b de cf 22 08 27 88 75 fd a2 08 6f e3 1a 98 84 65 d3 0a 98 65 bb 22 8f ce 92 40 99 6f 62 2e fb 47 e2 31 02 62 02 67 ad 59 bb a6 c6 2a c4 db 76 3b eb fb 8a c9 3e 72 31 9c cc 88 09 02 ba 34 83 ae db ea 4e 5e 52 39 c4 40 0c 97 73 f7 c6 c4 6d ae ee 54 84 2d aa e8 fb 8a 6b 5c 14 a0 42 6d b5 42 fd 67 d2 98 9d ff 00 3a 4b 5e ae 04 01 04 fd 94 50 9f d7 c0 cf 5a 07 aa 8b 57 73 a0 07 f5 77 d1 c6 82 7c e4 a1 bc 08 da 6b 55 a0 9a 44 7b fe 05 40 59 ef fb b4 73 63 be b6 72 d1 e1 d0 d4 7a bd 43 67 da 69 a9 80 9a 23 62 49 05 64 58 f5 bd ec 1b 07 df 7a d7 ba 50 e9 57 01 e8 83 73 e6 63 7b c1 3c 18 6c 08 6c ac ef 33 d7 8b 1e 94 8f d2 21 99 bd 1f 2c 6e 97 46 8f 24 1c 28 6c 7b 1f 89 33 99 21 4e 76 6a 68 ef 0f a4 b3 d3 67 b8 dd 4a 30 b9 38 6e 17 26 26 Data Ascii: GA]"'uoee"@ob.G1bgY*v;>r14N^R9@smT-k\BmBg:K^PZWsw\|kUD{@YscrzCgi#bIdXzPWsc{<ll3!,nF$(l{3!NvjhgJ08n&&
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 4d 3c 8b 40 1e 29 b3 d4 ca d6 63 0b de 4b 31 d5 06 ed f2 a5 d5 70 13 f4 de b4 c1 e3 3a 94 15 65 47 8a 5a 66 67 a0 db 47 8a 5a 1f 1a be 39 5c 19 d6 a5 1e 7e 82 bf 1f 14 f5 64 5a 06 e0 3c 43 4f 2a b2 39 f7 46 cf e0 58 1c 3e 7e 9a b3 1e 57 c6 83 6a 87 8a 2b e2 9f 76 87 ad 4b e5 4b 51 d9 4f 1a ca e1 72 ad 76 6a 6d a0 cf 76 ab 63 65 0c ce a6 1c fb a4 cf c6 b0 fd aa e9 19 4f 1a 9b b7 b0 a4 54 19 e1 4a bd b1 8c f7 6a e4 39 57 63 ac 24 79 56 66 32 bf 11 5f c3 cd ec ef 67 bb 41 72 39 6e 8f 3a ca c7 33 34 5f df a1 61 06 57 94 75 d0 a6 ed 4c da 36 3d 13 66 36 17 51 95 33 3a b9 da 98 51 b3 c8 b1 a3 2f a8 6f a7 8f 8d 11 e5 5d a3 ef a9 8c dd dd 44 f8 77 eb ff 00 b9 53 21 6e 92 b6 71 d0 9e 39 7b 50 df 5e 9b d0 65 7b 5e 9b 18 86 4a ee 7f 22 ad 1b e7 8f 9d 99 d1 90 a4 bd Data Ascii: M<@)cK1p:eGZfgGZ9\~dZ<CO*9FX>~Wj+vKKQOrvjmvceOTJj9Wc$yVf2_gAr9n:34_aWuL6=f6Q3:Q/o]DwS!nq9{P^e{^J"
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 46 3f 8d 84 59 b8 78 5b d5 06 36 24 0d 56 64 e6 7c 0b 3c 0c 2f 81 ec 57 21 c4 e0 7b 38 16 7b 0f c1 75 3e 34 4d 8a c2 f0 bf 68 a2 8c fc 6b 2b 0f 0b 79 63 e5 f0 de ac e1 70 19 f2 85 6b 2b 1e 2d ac 51 04 38 7e 17 74 79 3e e2 ca e0 62 0f 68 d5 b8 ff 00 26 9a 30 48 17 47 33 ec d6 56 1e 16 c2 d9 a5 04 c3 c0 58 58 6f 67 2d fc 6a ce 17 17 51 59 ec af 8a 2c 9c 7e 45 66 1c 57 ec 86 f7 bb ce 89 89 98 55 a1 d6 b2 51 c4 c2 8d 8c 7b c9 58 fb ea c8 e3 3c a3 63 34 df 71 8a 62 45 78 87 5b 18 c7 bd 01 d8 19 63 fc 39 6a 68 f1 58 58 ec ee 3c 6a 68 e2 d0 cf 6e b2 2b 96 ad 77 32 13 22 04 1c 5b bb 19 df 62 9a 1c 07 88 b9 33 a9 b0 f1 7a 89 47 1f 91 59 b5 d9 66 32 ad 34 51 0f 65 79 55 92 45 ba 3b cc e3 1a b9 d9 59 91 ec a1 e9 c7 15 97 18 82 b4 31 5d 26 7e 35 66 44 56 5c ef f1 a7 Data Ascii: F?Yx[6$Vd\|</W!{8{u>4Mhk+ycpk+-Q8~ty>bh&0HG3VXXog-jQY,~EfWUQ{X<c4qbEx[c9jhXX<jhn+w2"[b3zGYf24QeyUE;Y1]&~5fDV\
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 27 3a 98 7d f6 77 12 64 29 18 cf 9d 04 13 c5 b2 84 0e f1 76 5a e8 d4 b8 c4 99 ed b3 f9 d3 8c af 28 de c7 a4 87 cb 63 1c 82 61 d0 51 b3 c3 48 41 71 bf be 81 d7 93 ef fe a5 31 05 a6 fe 31 bf c8 82 11 d6 22 66 66 74 f2 0a fb 8c c9 f9 d3 93 b9 e2 64 48 2e fb 28 40 99 0a 4e 0e 62 71 8b 4e ba d2 47 a2 e5 0e 53 0e bb 4f 40 48 d5 23 28 4f 1c d6 89 43 de 90 9a 44 f8 13 92 82 8f 3d 75 a0 09 58 88 cf 25 79 d2 4c 16 a6 5b 69 c6 6b 40 7b f8 d9 df 62 24 05 85 a1 ec fe 04 06 7b 9f 18 93 c8 13 2e 33 b9 91 20 c5 76 47 c6 a6 98 5b b4 52 82 19 15 db ad 9e 1a 98 65 b5 0d 9f 66 93 38 a4 50 df 22 71 ed bd 1e 86 71 8d 4c 42 3f fc 47 a9 a4 8b bf ee d2 47 f8 b8 c6 9f d7 74 6f 54 07 d2 4f c4 62 41 f3 32 f1 d0 9f 66 ce 06 24 1f d7 19 47 88 a6 1c 83 bc 4f f2 d3 e1 7a a3 7b 1c a1 8f Data Ascii: ':}wd)vZ(caQHAq11"fftdH.(@NbqNGSO@H#(OCD=uX%yL[ik@{b${.3 vG[Ref8P"qqLB?GGtoTObA2f$GOz{
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: bc 3c bd 84 8f ad 9c c6 2b f8 1c a7 ed 90 c7 f7 08 83 3d e2 32 ae 3e 05 70 85 7e 8b f9 6f 58 d9 85 78 c8 cf 3a b8 42 dd 1b 1e 83 25 03 4a 66 7c 97 15 98 7c c3 31 aa 80 cd a8 c7 a9 85 29 f6 de f4 4d 92 8e 5b c3 e0 ce ae 61 72 ae f0 f1 ac 3e 17 dc a5 5f c3 eb 14 86 3d 4c 59 19 6d 62 0f fb 45 73 0f 2d 92 7e 27 1a a6 31 7b 1b fc f5 ab 30 8b 6f 6d 0e 41 70 62 b4 46 55 e7 4e 4d 51 fe 7e fa 84 62 d4 62 72 17 c8 a8 2e 61 e2 b4 46 78 97 13 c3 2f b4 7e 21 12 61 fe cc 37 d4 ff 00 81 e8 8e 5e 3f b3 7a 98 98 65 bb 36 84 f8 a0 ae 8d 9e 71 a0 7f 4e 6f e3 55 89 ab 87 d6 a8 2c c3 96 cd 98 3b de ff 00 0d ea 69 1a 44 ad 24 7d 5c 1d ec 7d 14 11 20 f9 95 bb 81 4c 65 61 95 fd b1 89 23 ea cc 37 90 6a b7 a9 e2 13 de d5 64 85 f6 7f 0f 51 50 25 d7 98 75 ff 00 22 31 82 fe 46 77 10 Data Ascii: <+=2>p~oXx:B%Jf\|\|1)M[ar>_=LYmbEs-~'1{0omApbFUNMQ~bbr.aFx/~!a7^?ze6qNoU,;iD$}\} Lea#7jdQP%u"1Fw
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: fd 63 8d 95 a2 6b 24 15 dc f4 22 19 59 75 ec 72 71 13 4d 8f 49 ca 23 fc 46 6c 45 00 c5 a8 f6 24 b5 68 88 18 9e 5c f5 db 67 71 03 d5 2b 18 ef 11 01 ca 1b 1f c0 ba 79 e9 60 eb a5 bc 3d 4d ba 2f 87 8d e0 3d 92 f4 83 d0 fb cb b8 17 6e 8e 87 6a 2f 37 ff 00 48 c3 06 34 ae ab f0 24 b7 80 73 68 7a ea 08 cd d4 52 fe 90 bf 49 72 a6 05 ec 7c 4f e0 5e 88 fa 22 fa f3 63 7d 72 37 0f 15 99 8f 3e b9 90 cf 93 22 f9 c8 8f 2a d6 20 bd 9b fd 1a bc 79 85 c3 f7 9e 33 f8 f2 3d 62 87 6a b8 7a c5 1f c6 ad 9c b7 a7 b5 78 6f 46 41 0d ef ee 11 20 cb 6a 87 fc 0b 5b d2 0c b6 87 9f ee 28 71 41 76 ac 3c d5 79 14 d2 44 c1 47 7b 3d e7 02 86 4e 8c 77 f8 8c a1 7b 84 df 34 3e 98 1c 05 f8 0f 5e 0d f0 af fd aa fa e1 0e 8b cb d8 37 d3 0d 7f fb 39 d7 6a fd 3b 02 f9 03 af 06 3c c8 ec b6 f9 91 58 Data Ascii: ck$"YurqMI#FlE$h\gq+y`=M/=nj/7H4$shzRIr\|O^"c}r7>"* y3=bjzxoFA j[(qAv<yDG{=Nw{4>^79j;<X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:50 UTC	584	OUT	GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680435-10f4d-5616f045cad80" Accept-Ranges: bytes Content-Length: 69453 Vary: Accept-Encoding Content-Type: text/javascript
2024-09-27 16:51:51 UTC	7894	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 2d 62 65 74 61 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 37 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 76 61 72 20 62 6f 6f 74 73 74 Data Ascii: /! Bootstrap v4.0.0-beta.2 (https://getbootstrap.com) * Copyright 2011-2017 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */var bootst
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 2c 65 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 7d 29 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 6e 75 6c 6c 2c 65 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 3d 5b 5d 2c 65 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 31 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 26 26 28 77 69 6e Data Ascii: dow.removeEventListener("resize",e.updateBound),e.scrollParents.forEach(function(t){t.removeEventListener("scroll",e.updateBound)}),e.updateBound=null,e.scrollParents=[],e.scrollElement=null,e.eventsEnabled=!1,e}function U(){this.state.eventsEnabled&&(win
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 72 6f 75 73 65 6c 22 2c 41 43 54 49 56 45 3a 22 61 63 74 69 76 65 22 2c 53 4c 49 44 45 3a 22 73 6c 69 64 65 22 2c 52 49 47 48 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 4c 45 46 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 4e 45 58 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 50 52 45 56 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 49 54 45 4d 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 7d 2c 66 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 49 54 45 4d 3a 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 4e 45 58 54 5f 50 52 45 56 3a 22 Data Ascii: rousel",ACTIVE:"active",SLIDE:"slide",RIGHT:"carousel-item-right",LEFT:"carousel-item-left",NEXT:"carousel-item-next",PREV:"carousel-item-prev",ITEM:"carousel-item"},f={ACTIVE:".active",ACTIVE_ITEM:".active.carousel-item",ITEM:".carousel-item",NEXT_PREV:"
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 2e 53 48 4f 57 29 29 7b 76 61 72 20 6e 3d 65 2e 45 76 65 6e 74 28 73 2e 48 49 44 45 29 3b 69 66 28 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 6e 29 2c 21 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 69 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 69 5d 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 5b 69 5d 2b 22 70 78 22 2c 58 2e 72 65 66 6c 6f 77 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 61 2e 43 4f 4c 4c 41 50 53 49 4e 47 29 2e 72 65 6d 6f 76 65 Data Ascii: .SHOW)){var n=e.Event(s.HIDE);if(e(this._element).trigger(n),!n.isDefaultPrevented()){var i=this._getDimension();if(this._element.style[i]=this._element.getBoundingClientRect()[i]+"px",X.reflow(this._element),e(this._element).addClass(a.COLLAPSING).remove
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 2c 45 26 26 28 6f 3d 47 28 6f 29 29 2c 74 2e 70 6c 61 63 65 6d 65 6e 74 3d 69 2b 28 6f 3f 22 2d 22 2b 6f 3a 22 22 29 2c 74 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 75 74 28 7b 7d 2c 74 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 44 28 74 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2c 74 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 2e 70 6c 61 63 65 6d 65 6e 74 29 29 2c 74 3d 4e 28 74 2e 69 6e 73 74 61 6e 63 65 2e 6d 6f 64 69 66 69 65 72 73 2c 74 2c 22 66 6c 69 70 22 29 29 7d 29 2c 74 7d 2c 62 65 68 61 76 69 6f 72 3a 22 66 6c 69 70 22 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 22 76 69 65 77 70 6f 72 74 22 7d 2c 69 6e 6e 65 72 3a 7b 6f 72 64 65 72 3a 37 30 30 2c 65 6e 61 62 6c 65 64 Data Ascii: ,E&&(o=G(o)),t.placement=i+(o?"-"+o:""),t.offsets.popper=ut({},t.offsets.popper,D(t.instance.popper,t.offsets.reference,t.placement)),t=N(t.instance.modifiers,t,"flip"))}),t},behavior:"flip",padding:5,boundariesElement:"viewport"},inner:{order:700,enabled
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 41 70 69 4b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 21 6f 2e 74 65 73 74 28 74 2e 77 68 69 63 68 29 7c 7c 2f 62 75 74 74 6f 6e 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 26 26 33 32 3d 3d 3d 74 2e 77 68 69 63 68 7c 7c 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 7c 7c 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 7c 7c 65 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 61 2e 44 49 53 41 42 4c 45 44 29 29 29 29 7b 76 61 72 20 6e 3d 72 2e 5f 67 65 74 50 61 72 65 6e 74 46 72 6f 6d 45 6c 65 Data Ascii: ApiKeydownHandler=function(t){if(!(!o.test(t.which)\|\|/button/i.test(t.target.tagName)&&32===t.which\|\|/input\|textarea/i.test(t.target.tagName)\|\|(t.preventDefault(),t.stopPropagation(),this.disabled\|\|e(this).hasClass(a.DISABLED)))){var n=r._getParentFromEle
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 2c 69 3d 65 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 65 28 22 62 6f 64 79 22 29 2e 64 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 6e 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 70 61 72 73 65 46 6c 6f 61 74 28 69 29 2b 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2b 22 70 78 22 29 7d 7d 2c 63 2e 5f 72 65 73 65 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6c 2e 46 49 58 45 44 5f 43 4f 4e 54 45 4e 54 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 65 28 6e 29 2e 64 61 74 61 28 22 70 61 64 64 69 Data Ascii: n=document.body.style.paddingRight,i=e("body").css("padding-right");e("body").data("padding-right",n).css("padding-right",parseFloat(i)+this._scrollbarWidth+"px")}},c._resetScrollbar=function(){e(l.FIXED_CONTENT).each(function(t,n){var i=e(n).data("paddi
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 6c 65 63 74 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 65 6e 74 65 72 28 65 29 7d 29 2e 6f 6e 28 72 2c 74 2e 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6c 65 61 76 65 28 65 29 7d 29 7d 65 28 74 2e 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 68 69 64 65 28 29 7d 29 7d 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 3f 74 68 69 73 2e 63 6f 6e 66 69 67 3d 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2c 7b 74 72 69 67 67 65 72 3a 22 6d 61 6e 75 61 6c 22 2c 73 65 6c Data Ascii: lector,function(e){return t._enter(e)}).on(r,t.config.selector,function(e){return t._leave(e)})}e(t.element).closest(".modal").on("hide.bs.modal",function(){return t.hide()})}),this.config.selector?this.config=e.extend({},this.config,{trigger:"manual",sel
2024-09-27 16:51:51 UTC	5559	IN	Data Raw: 48 65 69 67 68 74 7c 7c 4d 61 74 68 2e 6d 61 78 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 7d 2c 63 2e 5f 67 65 74 4f 66 66 73 65 74 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 3d 3d 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 7d 2c 63 2e 5f 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f Data Ascii: Height\|\|Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)},c._getOffsetHeight=function(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height},c._process=function(){var t=this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:51 UTC	621	OUT	GET /images/index/acu.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	270	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68040f-17486-5616f045cad80" Accept-Ranges: bytes Content-Length: 95366 Content-Type: image/jpeg
2024-09-27 16:51:51 UTC	7922	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c2 00 11 08 04 2a 06 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 01 02 03 04 05 08 07 06 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 15 be b2 25 Data Ascii: JFIFC#!!!$'$ & ! C *@%
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 9e 8d 63 bd c7 5b 3a 1a 4d 1b b3 0a 97 13 5e 7c 75 f0 f2 f4 79 f9 f5 e5 8e ba 5f b1 e9 f1 ed 36 65 7b f4 e3 a9 11 ab 3d 7d b8 6e e6 66 dd e7 ae f9 73 ce c6 b5 35 a9 23 77 39 9a dc 9c da b6 79 b3 d3 86 37 35 38 63 af 87 8f 7f af e9 f1 76 b9 f3 71 f4 72 cf 5d 47 69 9e d7 1d 13 64 ce b4 6a ce ba cf 6d 73 ff 00 03 d3 9f e6 cf a3 f3 7f c8 f7 f3 7f 45 f2 7d 1f e8 7e 7e bf 9e 3e 9f c9 58 29 62 96 91 45 52 82 84 fd 35 f1 bf 55 f9 ef eb fe 63 e5 6b 15 45 11 45 22 d0 42 a8 3f 47 7c 6f d4 7f 06 fa df 9a f9 7b e6 80 52 55 0a 20 42 d4 96 df af cb bf eb 6f 85 fa bf c8 3f 7b f2 3e 0d f3 b4 82 14 2c 05 40 58 95 65 3d 79 df 53 e7 eb 24 28 21 42 14 08 00 2c 08 50 42 81 10 14 44 5b 22 d4 44 4a 40 12 90 a9 0a 90 a0 88 05 85 92 17 f7 67 c8 fb 79 21 89 7c 38 f4 7c ee 5e 8f 17 Data Ascii: c[:M^\|uy_6e{=}nfs5#w9y758cvqr]GidjmsE}~~>X)bER5UckEE"B?G\|o{RU Bo?{>,@Xe=yS$(!B,PBD["DJ@gy!\|8\|^
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 40 94 3a 5c ee e7 2b cb 9f 42 ca 8b 85 cc d6 ae 71 9d 25 b8 bc 79 75 f7 f5 f3 7b 3a f9 f9 d7 8d a4 bb 66 d9 fe 3e 6f f1 27 d4 f8 fc ed 88 a4 52 d2 28 28 28 2d 58 a0 a5 2a 92 94 a0 1e c9 bf 35 c0 a5 05 29 4a 0d 14 a5 29 4f b9 37 f1 6e 05 ab 14 14 aa b2 c0 a0 b6 17 ec 67 7f 26 e0 85 a0 14 00 00 0a 41 f5 e7 4f 93 79 80 29 00 a4 5a 40 14 02 9f 4e 6f e6 5c 50 52 8a 40 a4 15 60 a4 52 07 d2 9b f9 7a c2 04 a1 01 08 22 12 a0 22 45 86 53 ea e7 a7 c9 bc d6 c2 02 11 0b 09 52 41 2d 41 3f 6f 7c 4f d1 ee e5 1e 6c 75 ba 74 d6 66 6f 6d 62 c9 db 58 90 16 4b 2d 6a ce ba cd 08 94 b4 ce 35 16 ea 54 68 85 9d 75 9d dc d2 4b c7 3d 11 bd 4e 73 5c a6 c6 73 75 2e 99 b9 5c 5f 57 4e 3f 43 b7 9a ef 1f 27 9f a3 77 34 eb 73 f2 31 db f0 f7 bf c1 fe 77 b7 04 81 54 45 16 d9 2d a4 45 2d 58 Data Ascii: @:\+Bq%yu{:f>o'R(((-X*5)J)O7ng&AOy)Z@No\PR@`Rz""ESRA-A?o\|OlutfombXK-j5ThuK=Ns\su.\_WN?C'w4s1wTE-E-X
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: cc b6 e6 56 25 cc 5a b5 a0 90 a6 ec d5 9c e6 b0 a3 a5 9d 13 55 ce 5e 52 c9 45 4e 94 33 a7 5b 37 96 8d 55 4c cb ab 04 35 66 25 cc ba ad a2 31 6d 3a a7 4d 4e 97 23 be b9 ab 86 35 99 ad d7 4d 4d dc f3 81 cb 1a e3 2f 1c eb 9b 55 31 5c 33 ae 12 f2 5e 33 79 36 99 94 7a 2e 73 2e ee 78 cd 73 6b 12 93 b6 b1 b4 e7 2e 93 ed 7d 0f 26 93 49 56 ad 8a 68 a4 96 4b cf 3a c4 d5 8d 45 54 16 95 2d 52 46 57 39 d1 51 41 00 19 55 28 21 29 a3 45 06 54 92 5b 65 08 95 65 32 b2 33 19 52 0d 14 aa b2 4b 01 6b 50 0b 94 8b a4 b6 53 32 96 08 c9 01 45 c9 71 2c 22 8d 59 d1 9d 58 33 2e 4c 05 04 d5 96 cb 64 33 2c 5d d9 a4 86 65 c9 99 54 48 64 12 32 b9 82 db 9c a7 36 a1 6c 14 86 4a 9d ac b6 73 96 2c 35 5b 35 51 39 e6 96 45 58 0d 6a 75 4d 9b aa 99 54 bd f5 8d 6a 66 31 9d 43 9e 6e ec eb a9 0c Data Ascii: V%ZU^REN3[7UL5f%1m:MN#5MM/U1\3^3y6z.s.xsk.}&IVhK:ET-RFW9QAU(!)ET[ee23RKkPS2Eq,"YX3.Ld3,]eTHd26lJs,5[5Q9EXjuMTjf1Cn
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 0e 20 84 c7 0c 8e 32 0c a7 3c ca bd 39 b4 4e 90 15 74 74 66 95 91 0a e7 c1 97 47 97 41 9b a4 28 d2 f5 1c 3a dc 1a f4 d7 63 d6 a6 b1 35 98 75 a3 50 ce c1 a6 50 80 a2 6b f1 75 fd 6f 7c fc a7 f2 30 83 61 06 e3 7e 86 20 f1 1e 9e 87 b0 f7 e9 3c 86 e3 61 e2 25 75 5e ab f8 04 f8 f7 3a 9f 45 79 f6 14 f9 c8 fb f9 46 81 b6 50 20 40 ab 09 e5 68 40 57 5c 8f 2c 3a b3 be 37 2c 21 2d 09 39 17 23 64 7c d9 32 e7 7c c9 8f 0e 2c 2a 31 a7 0f af 8d bb 16 c8 73 cc 87 38 65 d5 37 49 ca 58 39 74 75 c9 c8 12 5e 65 5f a8 e9 32 e9 35 1a 0d 57 4d 5d 56 1e e1 d3 f7 0e 3e a9 8b 5a 35 98 7a 8e 2e a2 ba e3 aa 19 ce 66 ce da dd 47 56 d6 f5 ae bd dc 9a bd 58 82 08 20 82 08 06 dd 07 c8 6e 36 1b d0 9d 10 f9 56 c3 cf 49 e8 a1 e9 d7 fe 2e 9f e8 ad c7 97 c7 49 f3 c1 f7 e6 76 67 8d 15 49 62 ac Data Ascii: 2<9NttfGA(:c5uPPkuo\|0a~ <a%u^:EyFP @h@W\,:7,!-9#d\|2\|,*1s8e7IX9tu^e_25WM]V>Z5z.fGVX n6VI.IvgIb
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 0b 0c a6 e2 83 11 69 61 01 81 06 ef 60 41 06 02 08 37 72 ec 6c 20 dc 78 54 a1 b0 d8 41 b8 20 de e3 d0 20 f2 b9 7b 1d 84 1b 5d cb d8 6e 7c ea a0 82 0d ae e5 dc bd c4 1e 03 d8 41 dc 19 66 5f 85 dd f8 58 2a 49 b0 6c 32 10 54 a4 1e 00 71 0a 61 0b 0e cb 14 f2 06 cc aa ae 40 8d 96 18 c9 97 1b c2 f9 61 2a 44 2d 5c 16 19 89 98 08 9b 00 c0 10 43 03 72 ec 10 41 b0 c0 f2 bb b0 6f 61 b0 dc 79 8d ee f6 10 19 77 77 e4 22 f9 5d ed 66 08 37 bb bd 81 97 64 dd de d7 e2 0c 1e 23 70 60 83 c0 78 dd df 81 87 63 b5 d9 24 dc bf 00 76 3b 02 08 30 6c 02 95 64 28 41 0d 62 01 2d cd 42 c0 ac a1 14 d8 20 ae d4 b2 8c 0e d0 3e 69 9d 5d 99 98 28 24 32 c2 54 71 e3 75 8c cb 2d 04 04 10 41 dc 6e 25 df 2e 40 82 08 20 dd 82 08 da fc 47 80 f0 bb da ec 4b f0 04 10 47 85 dd dc 1b 5d 93 60 dd dd Data Ascii: ia`A7rl xTA {]n\|Af_XIl2Tqa@aD-\CrAoayww"]f7d#p`xc$v;0ld(Ab-B >i]($2Tqu-An%.@ GKG]`
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 65 44 ad c1 21 70 8f 49 b8 5b b8 6f 1d e1 d4 71 f8 5d 83 ec fa 67 9b 1c 2e c7 79 2e 23 c0 73 f1 2f 46 0d 7e 2b c3 04 97 d0 7c 1c 4d 0f 90 8e f1 bd 40 9e 8b 58 d8 f6 d2 1f 48 ec 0f 14 4b dd 82 c4 0a 41 f4 8b de 5f 02 3b a2 3d ca 91 30 f3 66 89 46 38 75 0a b2 2a 8c 75 43 15 e8 78 e3 b9 6f b9 53 76 73 1b 98 77 c0 3d df 45 b8 37 d1 15 cc 35 94 e7 04 03 00 77 7b 56 5a e9 b3 aa 1d de 74 54 9f e9 37 16 7d 07 e1 6a d2 76 36 b9 63 f0 74 8d 2a 0e 1d e3 a0 d3 61 bb 59 c8 6c 3d b5 d5 7a ff 00 46 d8 2a af 7e 77 8c 2d 3a 6c 7e 31 fd cc 31 95 6a b4 0a 51 fe c5 90 24 c1 25 d2 8b 3d 24 e2 ac 71 c4 12 31 95 e4 e2 a9 8a 75 89 ef 1d 25 ed d1 ae e6 36 3e dd 9e 93 fa 5d 80 e0 75 31 87 07 4f 10 5e 5f 55 b4 cd 47 00 d6 17 43 5b bb 8c 40 58 1c 6b c5 2c 07 a4 b8 ba 15 c5 37 d6 a9 Data Ascii: eD!pI[oq]g.y.#s/F~+\|M@XHKA_;=0fF8uuCxoSvsw=E75w{VZtT7}jv6ctaYl=zF*~w-:l~11jQ$%=$q1u%6>]u1O^_UGC[@Xk,7
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 5c 79 8b aa 5f ea ce bf 74 69 48 18 79 14 26 95 85 7d c1 b3 84 c5 85 c9 87 18 c9 f0 4f 1f 44 b8 00 18 f1 49 cc cc e9 a2 0d 3b 9a 99 89 6f be 67 77 b7 de 12 d6 af b1 64 44 65 1a 7c 0b d9 f4 89 c1 0d 23 50 38 56 71 9a 6c 0f 77 f4 4f 9b 1b 0b 6a ef c5 12 e5 1c 13 84 35 92 28 8c 5e 94 8f 7b 46 d4 6d 0f d5 9b c3 7f 1c 66 27 dc f8 0b 97 ed d5 64 7b 86 87 32 8a a4 6c 80 88 d6 df 24 19 50 b1 02 c3 2a 3e 48 b5 fe 63 b3 33 09 1b 2f 08 46 40 52 80 10 80 25 5d 0c c4 c6 ca 5a 14 16 df 41 b2 12 e7 73 0a 6e 3e 61 7d ae 57 48 8b 22 68 b9 87 5d 55 8a 20 cc dd 03 40 94 40 8e 6b 69 50 81 93 30 88 dc 2c f5 91 f2 5e 03 37 2b 54 5a 1c 50 37 29 d5 6a e4 3e 68 06 80 d2 b2 89 2d 32 ad 33 ad d1 73 75 84 63 2e 52 65 1a 72 36 2a 54 35 44 ae 8a 5a 55 dc a1 a2 a0 d5 8b bd c2 83 37 68 Data Ascii: \y_tiHy&}ODI;ogwdDe\|#P8VqlwOj5(^{Fmf'd{2l$P>Hc3/F@R%]ZAsn>a}WH"h]U @@kiP0,^7+TZP7)j>h-23suc.Rer6T5DZU7h
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 73 86 ba 28 bb b7 1a 29 a0 6e 8d 5f 49 d8 1a 8e e5 5e 01 94 f8 97 9c a1 35 96 01 54 7b c3 45 81 31 29 94 1e 69 93 2e 09 95 4e 4d 25 3c 3c b6 25 6f 51 53 63 33 bc 80 15 37 f8 29 19 72 a9 4f 0c 5b 06 34 f3 4e 63 bb a8 cf d1 b6 58 7a ec 18 b7 53 0d 2b 17 55 85 d4 cc c0 9b 68 aa 54 96 d4 a6 64 72 52 dc cf 66 66 91 21 3a 9b 4e 41 1f 25 5d ee 21 b2 e3 ca 13 98 33 54 a6 42 7b 5b 00 64 0b 13 90 bc 5d aa ae 68 00 a7 b9 93 55 a6 10 a6 0b a9 02 55 67 4e 46 ac 66 49 2d 39 13 1f 44 99 87 04 e0 88 d5 12 27 b2 35 4e ae 48 63 84 8d 8a 2d 24 11 04 76 4f ad aa 23 d1 1f 48 7a 8a 03 fe bf 80 fc 05 c7 cf fc 0a 7f bc f8 1f e6 86 2b fc 75 3f d8 3f 05 18 0e 0b fe 08 7e db be 08 7f e1 9e 26 ef f8 f4 3f fa be 0b c0 ef 25 1c 72 a8 e5 4e 97 ee db f0 10 f7 08 20 8f d2 99 19 4c 90 9e Data Ascii: s()n_I^5T{E1)i.NM%<<%oQSc37)rO[4NcXzS+UhTdrRff!:NA%]!3TB{[d]hUUgNFfI-9D'5NHc-$vO#Hz+u??~&?%rN L
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: d2 e0 98 58 e9 12 e7 26 0b 39 4b 1b c8 2c f4 cb b5 70 28 b6 a1 37 6b e2 54 53 31 aa 6d 3a ad a9 97 35 ae df ca 0a 07 80 0d 76 d9 52 7b f4 2d dc 34 ec 83 4c ec 2c b2 ce c2 65 0e f0 0c d6 20 5c f3 dd 16 01 02 00 33 21 56 a8 75 b0 99 1b 04 5f 4e 9d 47 12 48 64 74 89 53 2d 70 32 35 59 28 77 1a bb 3e 6c ce 16 22 2d fc 51 a3 5c eb 94 5c 6f 95 1a 25 b5 98 33 36 7c 43 68 d8 a8 63 5f 4d d9 b3 44 b4 ed f3 4c 7e 7a 55 24 16 dc b4 9d 2c 51 71 7b dc 65 ee 32 4c 9b a6 36 89 7b 00 b3 85 a2 f1 fe 4a a3 58 e6 06 99 69 8e a0 cf e8 21 06 bc 53 14 b2 90 61 ce 04 cc 1b 14 f0 6a d3 34 c4 3c 08 03 40 45 81 8f 2b 1e 68 b1 fd fb 5e 4b 98 73 07 72 d9 46 1a 29 b4 b7 25 42 5c 0f 58 01 30 61 dc 5a ec d4 f3 43 88 6e 96 1b 9e a6 13 7e ce a3 8f d9 83 17 36 b6 c9 d5 5e d1 05 d9 8c 4d cc Data Ascii: X&9K,p(7kTS1m:5vR{-4L,e \3!Vu_NGHdtS-p25Y(w>l"-Q\\o%36\|Chc_MDL~zU$,Qq{e2L6{JXi!Saj4<@E+h^KsrF)%B\X0aZCn~6^M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:51 UTC	622	OUT	GET /images/index/lec.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:51 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680411-1b3a10-5616f045cad80" Accept-Ranges: bytes Content-Length: 1784336 Content-Type: image/jpeg
2024-09-27 16:51:51 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 0b 49 a0 03 00 04 00 00 00 01 00 00 07 81 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 07 81 0b 49 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF,,ExifMM*JR(iZ,,I8Photoshop 3.08BIM8BIM%B~I"
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 11 c9 c9 4e a1 41 e7 3c f6 f6 ab 16 fa db 4d 1c 90 bc 23 17 5e 6b c2 71 ce c0 79 e7 3c 13 c7 5a df 96 c8 4d 58 d9 b9 d4 24 d3 ed 40 96 f0 5d 22 aa 80 5b ef 42 e3 af 50 3a 9e f5 15 b4 4b 65 31 9e e6 7f 9b 50 c2 87 6c e1 01 ee 70 33 ce 7f 4a cd 5b b9 67 bb 49 62 59 5e 28 23 11 10 78 44 e3 03 02 9d 77 71 71 35 c4 39 b6 88 85 09 8c 0f 96 40 3a 77 cf 20 d4 ab 31 d9 97 a4 b4 5b 2b 49 a2 82 59 7e d1 11 2c a5 48 08 17 d4 1f 71 c8 a7 dc 6a 10 69 1a 05 bc 72 0f de dc 8d c7 8c b0 1c 63 f3 ac b9 3c 47 74 91 dc 5b cf 64 91 cc ce 15 70 38 09 9e 17 af a5 4d 75 a9 3e e8 ed a3 b5 dc 22 40 cc cc 41 c1 3d 70 73 8e 0f 4a 4e 45 26 96 e4 fa 05 b4 c1 a5 95 9c f9 49 fb c9 51 ba 80 dc 01 f9 ff 00 f5 ea c5 e4 16 b7 37 89 1c 53 08 b6 a9 2d b4 67 b7 4a 82 ce e9 f4 db 21 71 65 34 08 Data Ascii: NA<M#^kqy<ZMX$@]"[BP:Ke1Plp3J[gIbY^(#xDwqq59@:w 1[+IY~,Hqjirc<Gt[dp8Mu>"@A=psJNE&IQ7S-gJ!qe4
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: f9 20 b8 1f c3 fc aa c2 ea 8d 06 a8 ab 01 57 55 c2 f4 f9 41 3c 8f a5 6f 4e ac 52 d5 10 53 b8 d4 4c 56 90 aa 43 1b c3 33 10 5e 4c 83 18 27 d8 f4 a7 de dd db 4c 4d a4 3b e5 9d 90 aa 96 1f ba 8b 23 9f 7e be dd aa 7d 4a ca d3 48 d3 48 74 12 49 34 81 a3 da 49 09 fe cf 38 ef 50 e8 4d 71 a8 69 b3 c3 69 6c 65 9e d1 4c 93 f9 6b d0 76 dd 9e 9f 85 72 55 77 77 08 b7 cc 53 78 62 d1 da 18 8a 33 02 7c c6 58 8e 4e f0 46 09 ce 38 e7 b7 35 53 4c 96 d2 f6 de e7 7a 34 72 06 dc c6 43 8c 1e 71 b7 9e e3 9a b3 61 a3 1b 59 9e fc 14 45 8b 2f f2 93 8c f1 9e 08 ed 8a af a9 eb 32 43 64 df 64 ce 25 24 ab 81 9d 9c 73 9c f7 f4 ac 24 8f 4e 16 e5 1b 6d 6c 2f 35 07 97 cd 92 dc 44 83 61 9b 84 6c 0e c4 02 69 ba 25 ca de de 5e 7d be 38 a6 6c 81 1b b1 65 50 06 79 18 35 a7 a5 0b c5 9a 03 7d e4 Data Ascii: WUA<oNRSLVC3^L'LM;#~}JHHtI4I8PMqiileLkvrUwwSxb3\|XNF85SLz4rCqaYE/2Cdd%$s$Nml/5Dali%^}8lePy5}
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: f0 c3 69 c0 5c f2 99 3d 7d e8 70 49 1b 53 83 9a d4 e7 9f e1 54 4e 45 cd d4 f6 fe 62 03 b4 97 20 e1 be 83 9e 2a 3b 8f 87 b6 17 62 4c a4 7b a0 8c 18 dc 33 71 81 db d7 a7 7a ea b3 05 ac a2 2b a4 b4 9e 3b 75 08 cf 97 df 03 63 00 f5 c7 27 a6 73 56 2d 52 e1 ed 6e 3c d9 ca da 88 fe 52 80 79 9d 0f 1c 8c 77 e6 a6 16 91 4e 89 c5 69 5a 05 ad c1 8d 57 70 dc 8c b9 63 8c ed 19 70 3d c5 67 0d 06 1f 26 35 b7 9c b2 19 9d 40 e0 f1 c0 c1 f7 15 d6 a7 87 9a ff 00 ec d1 46 15 1a 3c b2 60 8c be 70 41 3e e4 7a 53 b5 4f 07 41 e7 43 67 3c 4b e6 c8 4c a4 64 80 08 e7 a8 35 50 77 30 a6 f9 64 73 a7 c3 17 37 73 18 9b 11 44 aa a9 91 8e 36 f7 cd 4d 61 e0 88 d5 67 8a d2 66 59 03 6f 91 8e 0f 98 18 f4 e7 e8 7f 3a db b6 b4 8a 7b 4f 22 09 48 f9 f6 ed 90 7c 85 87 5d a7 93 c6 7b 9a 61 85 b5 1b Data Ascii: i\=}pISTNEb *;bL{3qz+;uc'sV-Rn<RywNiZWpcp=g&5@F<`pA>zSOACg<KLd5Pw0ds7sD6MagfYo:{O"H\|]{a
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 64 a3 cf b8 99 20 0f 8c 48 b9 3f 28 e3 e6 a6 e9 90 45 ab 6b 17 33 4c 08 4f 24 a3 e3 bf 4e 9f 85 5a 96 59 2f 64 99 d2 db 29 8c b9 e7 f7 fe cb cf 26 ab e9 b6 f7 d0 5e 5c 46 f6 c3 cf 07 70 46 04 0e de 95 2e 2d 0e 32 dc 5b 3f 0e ae 9d 61 6b 21 92 2b 99 52 60 d1 a9 ce 04 5c e5 b8 ef 9e 2a be a1 6e 23 bf 9f ed 2c d1 cb 2b ac 7e 5a ff 00 08 3c f3 5a 1a 34 6d a7 c7 68 1a 4b 69 21 92 4c ee 46 2c c3 1d 7d a9 f2 c1 3c d2 09 ee e6 c4 e1 c1 5d 80 1c af a1 cf 7a 6a 37 15 36 ee 61 49 a2 f9 13 47 6d bc 02 b8 2a d1 9c 80 7d f3 5a 37 b7 93 da 68 31 b3 c3 13 ea 11 e5 46 18 90 01 cf 3e fd a9 d7 90 9d 53 7b 5a c6 cb e5 b8 da d2 8d bc e3 a3 63 3f 87 b5 49 6e 08 d0 d8 b2 28 96 35 21 1e 40 7a 9c f3 ee 07 7a de 9a 4b 71 36 dc 88 34 bb 32 2c a6 96 42 01 70 ad e6 4b f2 86 3f dc e3 Data Ascii: d H?(Ek3LO$NZY/d)&^\FpF.-2[?ak!+R`\n#,+~Z<Z4mhKi!LF,}<]zj76aIGm}Z7h1F>S{Zc?In(5!@zzKq642,BpK?
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: cf e3 55 6e 2d 6d ee 55 e6 86 10 d7 b0 29 42 99 3c 83 ce d1 f5 e0 e7 ad 59 9e d2 5b 2d 3a 13 73 6c 97 11 c9 2f 96 c8 32 48 07 3c f1 8a 9b 42 f2 ae af 27 b9 50 52 24 f9 21 20 73 9c 0e b9 fa 56 73 8a 4c e6 e6 72 91 1e 89 a7 45 69 a5 98 ee 44 a2 f6 47 da b0 b1 ec 47 39 f4 1f 8d 2d f5 dc 9a 7b 44 a2 3b 79 50 f0 e1 49 f9 17 e9 d6 a5 b2 7b 8b 15 9a 44 82 dd 96 63 90 27 2e 92 bf 18 e8 3a 7b 62 96 3b 60 93 4d 3c 58 7b b5 c1 71 2f 03 91 90 a3 15 d1 4f 9a db 1e 8c 6d c8 59 d0 a3 5b b8 65 66 82 6c 2a 9d ff 00 4e c0 72 3b 55 2d 2d 45 a3 5e 48 af e7 c8 89 95 ce 0e 4e 38 0d e9 e9 c5 58 8e 50 6e d2 2b a3 2a a5 e3 aa 6e 2b 8d a7 18 e3 a0 c7 d6 a9 5b 45 67 a8 49 73 65 1c 77 d3 dd 2b 7e fa 50 01 dc a3 8c 75 03 38 c7 4a 99 26 61 cc f9 89 2c ac 25 82 07 3e 65 bc 72 4e 9b ca Data Ascii: Un-mU)B<Y[-:sl/2H<B'PR$! sVsLrEiDGG9-{D;yPI{Dc'.:{b;`M<X{q/OmY[eflNr;U--E^HN8XPn+n+[EgIsew+~Pu8J&a,%>erN
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 90 ca 25 62 ee 24 20 7c a7 38 f5 e9 5a d9 95 12 94 f3 cb 2c 62 d2 dd a6 9e 4b b5 17 01 b6 83 22 67 b6 d1 c7 6a 86 d6 4b bd 1e f6 26 90 46 d2 a0 c7 98 ac 59 51 bb 82 0f 15 6d ad ad be ce 97 4d 14 d3 49 3c 60 a8 4c b1 5c ff 00 09 fa 77 a7 5a db cd 6f a6 c9 94 0f 1d cb 6e 28 7a 87 3c 9e 7a e2 92 dc 99 a5 cb b9 14 b0 01 7c 23 d4 9a 26 42 3c d4 55 61 83 db 68 3c 55 39 24 7d 53 4e 2e 62 68 a0 f3 36 11 d3 69 c6 7f 13 f5 ab 50 68 56 d3 c0 c1 7c a3 75 2b 79 c8 44 85 9e 1e db 36 f4 cf 5e 2a 4b 4b bf 36 d9 2d 6e 63 fb 56 2e 0a b4 71 70 cc 36 67 2b 8c 67 eb 51 3b 99 43 5d ce 7a 6b 78 ac e1 46 58 c8 b7 56 0e 15 49 70 4f 4e f5 4b 57 b6 93 fb 51 e5 52 f1 c1 69 16 ec 63 bf 4d c3 d4 fb 1a ea 2f 6d 17 50 49 1a 25 86 45 6f 95 17 71 fd d8 ce 7b 67 9a ce b5 67 86 53 0d e1 47 Data Ascii: %b$ \|8Z,bK"gjK&FYQmMI<`L\wZon(z<z\|#&B<Uah<U9$}SN.bh6iPhV\|u+yD6^*KK6-ncV.qp6g+gQ;C]zkxFXVIpONKWQRicM/mPI%Eoq{ggSG
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: a5 d7 ec 7e d2 b0 8b 94 56 dc 3f 72 80 90 db bd 08 1e fe f5 2d c4 b7 7a 7d b1 68 8f 9a 50 82 cb 18 04 0e 3f 9d 3e fd 5f 5e b7 b6 33 16 b5 92 06 cf 96 00 de a7 39 04 8e c2 b1 69 f3 1a 53 aa 45 02 20 d7 6d 54 69 f2 3d bd b4 45 15 72 c4 21 24 13 83 9c 9e 73 d6 b3 5a d2 2b 18 64 5b 8b 45 4f 30 16 4c 33 65 88 e8 a4 67 bd 6c d8 ac b6 b7 91 c4 59 a4 13 e1 76 0e b1 fd 0f ad 57 3a 65 d5 fb e1 e5 85 9c 6e 58 c9 1f 30 cf 5c 8c 56 d2 f8 55 8d 6a 6a ae 52 ba b6 96 d0 1b 82 09 56 4d e6 26 f9 48 0b dc 7a 91 da ad 45 65 24 3f 64 f2 c4 8f 71 70 c1 ca ec 1f 2a e7 af e1 c5 6a dd c2 2c ec 2c 36 05 6b 94 94 2b 3b 9c 03 cf 0b 8e 9f 4f 5a a5 a7 58 b5 ae a1 2d cf 99 70 8e d8 8b ca 2a 0e 55 ba 80 7f fd 55 a5 2f 84 ce cc ca d4 f4 db 8b e8 5a 6b b2 5e 58 a7 8d 71 11 c6 41 3c 74 ef Data Ascii: ~V?r-z}hP?>_^39iSE mTi=Er!$sZ+d[EO0L3eglYvW:enX0\VUjjRVM&HzEe$?dqpj,,6k+;OZX-pUU/Zk^XqA<t
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: 1f b4 42 a2 7d ec 37 9e 57 9f 41 cd 6f 68 f7 f2 0b 32 56 41 13 80 aa 66 23 26 42 0e 70 07 4f ca b2 82 b9 d4 d2 83 d4 dc 1a 8c cf 68 22 4b 57 84 79 99 df b9 8e d5 ec 1b 3d 2b 43 40 85 a5 17 2c ec d1 98 1c 99 01 1c 17 3d 7e 87 e9 59 d0 c8 f7 1a 8b 34 31 cb 22 cb f3 4a 9d 93 d0 7e 06 b4 8e fb 69 64 8a 56 77 76 8c 2b 8d b8 f9 f3 d7 23 a9 ad 9a 68 e6 a7 3b 4b 52 08 ee a0 94 cc ce 25 f2 b0 07 03 3b f9 ea 07 ad 5d b7 b7 9a 1d 31 a6 8a f6 2b 54 68 82 f6 60 e7 76 08 e4 1a 87 42 d3 e6 d1 67 05 9a 39 16 e0 ed 20 9c ed 4c 71 f4 e7 bf 5a bf 73 60 ba 7e 92 6d e2 88 48 64 5f b4 28 24 9d a7 38 c0 cf 5e f5 8c cd 94 7a 87 87 fc 3b 1c 76 3f 66 38 fb 4b 8c 08 77 1c 9f eb 8f c2 a3 1e 6d e8 7b 66 72 12 08 f2 77 70 ce 7d 0d 37 4d bf 26 0f b5 7d 9e e9 3e ca b8 7c 29 2d bb 3c 8a Data Ascii: B}7WAoh2VAf#&BpOh"KWy=+C@,=~Y41"J~idVwv+#h;KR%;]1+Th`vBg9 LqZs`~mHd_($8^z;v?f8Kwm{frwp}7M&}>\|)-<
2024-09-27 16:51:51 UTC	8000	IN	Data Raw: ea 0f 35 d0 4a b6 56 f7 01 65 6b a9 62 b7 39 c0 8f 1b 31 d5 8f cd 9c 01 59 fa 80 b6 9f 62 b4 c5 ed 58 82 cf 19 c6 e1 e9 c1 ac 66 99 ad 3d 77 38 2f 14 78 3e ca f0 cd 22 59 a3 c7 28 f2 d5 95 88 08 c7 e8 7a 57 24 fe 14 86 d2 0c 30 63 94 21 cb 20 55 1f 46 eb 5e a7 aa da 26 86 f3 c6 ef 98 55 7f 70 07 dd 5e 3a 1f 53 d7 19 ae 32 78 21 92 ea e1 23 dc 27 91 09 72 49 20 0f 41 cf 06 b1 70 0a c9 5d 1c 4e b5 a7 a6 8b 1a 7d 8e da 65 88 38 73 21 5c a9 2b 9e 99 fa d3 be 1b 34 d3 fc 47 64 16 bb fc e4 0e 77 71 b7 18 e6 ac eb f2 cd 1c 50 c7 01 69 40 93 0e a3 9e 33 cf 15 57 e1 25 dd c6 a9 e3 3b f9 9b cf 61 08 08 81 63 e8 3b e7 15 d1 42 92 38 ea 1e f7 e1 4f 0d ca cb 25 b4 d6 d1 db ef 46 2b 37 cc 49 63 d8 e7 a6 6b 77 e2 3e 8d bf f6 6b f1 5d a1 4c dd bc 22 10 c1 8f ef 72 b2 81 Data Ascii: 5JVekb91YbXf=w8/x>"Y(zW$0c! UF^&Up^:S2x!#'rI Ap]N}e8s!\+4GdwqPi@3W%;ac;B8O%F+7Ickw>k]L"r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:51 UTC	639	OUT	GET /images/index/mainCover.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/css/home.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:52 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:51 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680412-7e4563-5616f045cad80" Accept-Ranges: bytes Content-Length: 8275299 Content-Type: image/jpeg
2024-09-27 16:51:52 UTC	7919	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0c ac 00 00 05 1c 08 06 00 00 00 a4 d9 e9 cd 00 00 0c 24 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 97 07 54 53 49 17 c7 e7 95 24 24 24 b4 d0 a5 84 de 04 e9 55 6a 68 91 2a 1d 6c 84 24 90 50 42 0c 04 15 3b ba a8 c0 5a 50 11 c1 8a ae 8a 28 ba 16 40 16 1b 16 6c 8b 62 ef 0b 2a 2a ca ba 58 b0 81 f2 4d 12 40 d7 fd ca f9 e6 9c 79 f3 3b 77 ee dc f9 df f7 26 93 19 00 94 a3 d9 22 51 36 aa 02 40 8e 30 5f 1c 13 12 c0 48 4a 4e 61 90 ba 80 22 50 01 ca c0 01 38 b3 39 79 22 ff e8 e8 70 00 cb 48 fb f7 f2 fe 26 40 a4 ed 35 5b 69 ac 7f f6 ff d7 a2 ca e5 e5 71 00 40 a2 21 a7 71 f3 38 39 90 0f 01 80 bb 72 44 e2 7c 00 08 bd d0 6e 32 23 5f 04 99 08 55 02 75 31 14 08 d9 54 ca 19 72 76 97 72 9a 9c c3 65 3e 71 Data Ascii: PNGIHDR$iCCPICC ProfileHTSI$$$Ujhl$PB;ZP(@lb*XM@y;w&"Q6@0_HJNa"P89y"pH&@5[iq@!q89rD\|n2#_Uu1Trvre>q
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 01 3e 6b b3 57 d1 43 96 81 8f 3e d7 bc 7e 39 78 28 a6 21 b2 61 91 ba d8 cf 37 c8 51 7d 8c 9b 5b 4d e4 a2 be a7 69 e8 2c 55 68 40 bb 23 b3 5d ed 57 d9 a4 0d a1 fd a6 4c d5 d7 c7 18 6f c7 15 71 21 7c 3e d2 49 08 62 84 b1 36 aa 36 bc b8 a2 3f 67 ae 5f 89 35 05 fd 42 0f 88 38 13 b8 3d 9b 21 2b e0 99 fa 82 90 32 31 9e 5c 7e c4 31 e7 e3 71 fc e6 6a 61 cc 39 cf fa 61 66 f1 1d 5e 0b ec 94 d3 80 2e f8 ae 38 9b 67 a1 e4 c8 ca fb 0e b1 a2 6e 6f 96 da 4b 1b e8 39 f7 90 27 75 da c1 3e 0b fb ab 8b 1c c3 47 bf 00 47 c1 0d fd 4b 61 ab 38 d4 db 39 d1 09 bf 78 f1 21 2f f0 84 ba dc 8c 4f e7 30 67 ad a7 f8 5a fa f8 1c c6 63 d7 b4 96 de be ed a7 7d f4 8c 29 76 96 30 56 5e a8 3b 17 7d a3 cb 4a 5f e2 7b 11 05 3c f4 4f f1 85 f1 8e 91 65 73 ec 34 75 43 f5 aa ce d9 39 36 7a 8f 98 Data Ascii: >kWC>~9x(!a7Q}[Mi,Uh@#]WLoq!\|>Ib66?g_5B8=!+21\~1qja9af^.8gnoK9'u>GGKa89x!/O0gZc})v0V^;}J_{<Oes4uC96z
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 73 d5 62 15 da cd 41 83 55 71 5d 3d 01 56 29 1e e2 fc 24 41 8b 04 7e 7c 60 fa 84 95 7f 65 e2 a8 45 7c 3a 65 e2 c7 a5 32 05 0b c8 d9 fc 84 f5 e1 ef fc f8 3c bd dd 3f 64 5c d8 c5 c4 b1 4c 68 9f 21 5b 18 5d e8 24 e6 2a 34 b1 53 9b f4 ab 38 6c f1 1d 48 46 d2 b5 49 32 32 0d 0b b5 1b 6c da 53 c0 2f 67 22 89 7e 4a 37 23 b3 00 7d 70 45 92 d7 e5 90 b5 27 66 78 8d bf 0a 18 8b 73 39 e0 a5 9e 69 cc 7c 63 af 4d e2 d2 3a b8 01 3f 86 27 8c 58 63 e3 31 ca 1d b8 42 f8 16 4d 3e 92 66 ab 14 16 98 08 55 47 07 2c c2 07 82 7f 81 07 d7 9d 6b f4 1b 0a d3 81 85 be 67 dd 69 43 62 22 39 e4 83 7c d4 8d 57 2c e2 a5 59 d8 00 5c 97 31 18 1f 97 a6 b2 18 a9 45 26 16 09 31 2e 12 ec ae ce 7a e9 68 ff 2a 0a 5f a4 71 37 72 32 ae 5f 01 67 9c ab 3a aa 9b 41 aa a7 dd d0 cf e9 e1 25 f7 ce d3 12 Data Ascii: sbAUq]=V)$A~\|`eE\|:e2<?d\Lh![]$4S8lHFI22lS/g"~J7#}pE'fxs9i\|cM:?'Xc1BM>fUG,kgiCb"9\|W,Y\1E&1.zh_q7r2_g:A%
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: da c6 80 b4 a3 b5 85 c4 65 7b 1d a2 93 0b af c0 41 92 4a ed 63 44 d2 a4 bf 83 0f 00 bf 18 97 c3 64 9c 4c 35 d6 51 b9 10 1b 8f f0 fb ce 2f 16 36 17 b6 65 d0 27 48 38 a7 78 d7 94 0f 7d b4 3e d5 cb e4 6e fd f2 6e c6 27 7e d4 79 22 ae b8 66 21 b6 fc b9 c5 ef c7 3c d9 f5 fb 14 e0 6f ec 54 59 5b 7c 9f e6 59 30 98 2a fc 4e b9 aa 4f 44 3f 84 d3 d4 6f ea 66 4c 5d 92 77 bf fe e2 22 ed 7f cb 13 4b 8f e1 eb d8 18 d7 e8 62 26 52 b6 d9 94 b3 85 5d 8c 64 08 ff d9 1c bd d0 a2 a2 1e 32 6b 62 e2 2b 73 8f c4 61 ec d4 5a 2b 97 f6 88 e9 ae 41 ab 6e 8a 28 1c 7d ca 81 71 82 0b 9e f4 e2 a6 5c 59 e2 2a f4 8b 7e a7 ff d8 9d fc dd 40 4c e2 aa 02 d7 02 fc 52 7e 63 12 70 96 28 0b ae a9 e7 80 17 03 0a f6 cc 9b 88 9d b0 99 73 09 18 ac f0 74 8b 36 31 31 9f 0e 89 6a 08 2c e1 93 14 f7 b8 Data Ascii: e{AJcDdL5Q/6e'H8x}>nn'~y"f!<oTY[\|Y0NOD?ofL]w"Kb&R]d2kb+saZ+An(}q\Y~@LR~cp(st611j,
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 53 21 a3 a9 93 ce 8e 8f ae e3 19 3e 55 fa 44 f4 ba bd 62 95 93 c9 f2 72 66 2a fe 7d 54 b1 a2 bc 00 53 01 f1 34 fe da 7b f9 c3 76 15 fb 3f 54 53 0d e1 62 3e 19 32 ff 59 b8 45 87 77 30 9b f1 12 71 60 45 3e 74 68 13 07 c0 82 cf e7 51 3a ed 34 0c 8b 57 d1 eb d0 02 58 78 0c dc 83 b1 1c 05 53 92 a6 11 5b 7c 1d fe 4e 7c ac 2d ce c3 77 3a ab 29 6a ea 32 93 17 21 6e 10 bf 9b e2 89 6c 47 f4 31 3a 40 bc 1a fc 15 a0 c3 55 f9 68 0a c4 d0 81 f8 e5 6b 7c 5d 61 d9 f9 cd a9 a0 b7 ae d1 ba 26 bf 73 70 3a 7e 36 36 af 1b b3 61 fa 1d 48 e1 04 fd 8e df 12 8c c4 7f 27 67 a2 f7 14 88 93 23 f8 17 de e7 8c e1 33 dd e9 19 7d b6 1f f2 44 1e d1 93 e2 ed bd 19 4c d7 02 06 9f 13 83 98 c2 c0 e4 8a 6b cc 0d ad 29 dc 6c 49 fd 19 3e f4 dd 17 78 59 7a b6 62 1f 87 29 39 5f 9e df 24 7b e7 37 Data Ascii: S!>UDbrf*}TS4{v?TSb>2YEw0q`E>thQ:4WXxS[\|N\|-w:)j2!nlG1:@Uhk\|]a&sp:~66aH'g#3}DLk)lI>xYzb)9_${7
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 54 ae f3 be 26 78 f3 67 ef a8 d9 4e 50 1f 3c d9 13 9d a0 f7 fb 15 76 dc 4f 9e 59 de 23 05 65 ed 48 2e bc dc 96 69 c6 d4 bd 34 20 7e 90 4e f7 9c 0f a8 33 70 15 71 22 c5 2b d3 6c 27 98 c3 7f b1 43 f4 ed 40 86 2f e1 cb d1 9a fc 66 7c e2 f4 3b c5 55 8e f6 fd 9d 8f f3 01 94 0f 96 7e 85 4f 68 1e 23 0e 4b 36 d2 2f 1f c0 b5 f4 cd 77 bf 73 76 f9 56 be ef 8b 97 2f a7 c7 d7 24 bb eb 6a 88 c1 ee de 59 9e c6 de 72 52 35 72 78 91 ce 6c 4a ea bd 9b c5 02 ca 83 7a 5a de e0 b3 9a 70 4d bd 41 38 b7 ca 38 96 35 1b 99 ae 14 5c cb db d0 f4 e3 40 79 0e 1a a4 9a e4 09 d6 6b 23 be f8 57 90 a0 f3 de b9 22 57 ec ee e8 b2 6a 19 76 3b 0f 39 35 d1 1d 3d 93 ef df 34 3d 39 99 68 5b 0e c9 36 f8 91 22 b2 ea 20 dd 2f 38 b9 60 9f 9e fd 6a 46 0e ff fd c7 ff 48 ae 7a f8 fc 7c 6f fd d3 2b c3 Data Ascii: T&xgNP<vOY#eH.i4 ~N3pq"+l'C@/f\|;U~Oh#K6/wsvV/$jYrR5rxlJzZpMA885\@yk#W"Wjv;95=4=9h[6" /8`jFHz\|o+
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: a3 55 78 01 91 d0 81 a4 3c 23 3e 49 3c 81 32 42 01 4c fd 76 2d c4 bf 26 2a c7 d8 a2 7b c9 d3 aa f5 38 55 47 c1 0d 66 eb bd 57 05 c2 f3 a1 87 fe e1 90 d0 b9 9d 23 7b ce 9c 70 ed ce 61 e9 e0 1b 43 17 1c e1 de 08 80 f8 06 88 a0 bb 71 58 b4 7e 1d ae d1 85 d7 c0 ca 75 a6 70 2a e8 08 f4 8c 00 8d 39 4a b6 dd 9d 53 59 87 0c 09 84 68 47 d2 3e e3 5d ee a2 ef db 8e 44 2e 41 0d f8 cf b0 5d 71 74 35 54 24 91 a3 26 bc 4c 85 b4 8d ed 8d 39 be f3 fe d9 e5 dd 77 de 9e 60 06 e4 78 5e 22 ab 31 d6 12 0b 9c fd be 3a 2c 49 ac 07 f7 47 e1 e2 4c 98 c8 e1 80 ef ec de 2d 49 47 50 b4 a4 e6 cd cd 59 bf 2e 28 9b 46 af 77 73 f0 12 18 21 b0 fc 31 ca f3 f0 47 86 19 63 2a 47 6b f7 60 d4 c2 a3 a9 ea 9e b3 ca b9 2b 11 1d 9c 3b cb c3 39 5e 8f 1c 3b 1c 6e 47 07 fd cf 09 83 6f 08 50 3c 49 49 Data Ascii: Ux<#>I<2BLv-&{8UGfW#{paCqX~up9JSYhG>]D.A]qt5T$&L9w`x^"1:,IGL-IGPY.(Fws!1Gc*Gk`+;9^;nGoP<II
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 74 38 3f 6b ee fc bd 0a 97 e2 7d 70 94 dc 7a d2 fe e8 30 d7 73 06 ff e6 b7 15 51 5c ba b1 9c a8 b0 e3 fd 0f de 9a 89 46 02 f7 7e 72 97 f4 fb 59 3c 20 18 52 00 27 40 de e6 ba 9e ee 83 ba e9 4a 3c 7f d2 da a7 f0 29 47 01 3f 29 de 07 0e 81 7f f0 f4 61 41 b8 bb 37 9f 94 e8 7f ab aa f2 1b 93 20 3d 5d 07 92 e7 92 9d 0f d6 a1 17 fe dd 4a 86 eb 74 20 76 a7 b3 89 6a 6a dd 0b ec 41 12 1e dc 81 ab 90 67 94 ed 10 41 d0 03 bd 8c d3 af fd a3 44 34 0f 2f fb f4 f0 ce 37 9a d8 b1 2f 67 86 e9 51 92 d4 15 d7 28 5c 38 f3 e6 c9 92 f3 3f 5c 3e f8 f0 ad 0c 85 7d 19 cf f7 96 2b 97 af 0f 3f bd 97 ce f5 f1 3f fe 6e 39 df 38 48 89 2b 9c 4a 1c 0b 6f 7d eb c4 f2 cf fe e4 ad e5 f0 c9 1d 9d 7f 45 30 19 bd 16 78 a8 b1 d6 e8 9e 2c d3 b1 e9 c2 97 d7 3b c7 2d cb db 6f 95 f0 53 97 ff 6b d7 Data Ascii: t8?k}pz0sQ\F~rY< R'@J<)G?)aA7 =]Jt vjjAgAD4/7/gQ(\8?\>}+??n98H+Jo}E0x,;-oSk
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 5e a6 b8 41 32 ed e1 a3 25 98 bd 71 6e f5 fe 77 bf 13 4e 1d ac 58 ed a3 d5 87 1f 7c 38 b6 c5 c3 9c 54 60 22 d0 f5 fd 3f 7c a3 02 c2 d3 25 56 16 cc ed d6 3a 69 b1 2d d6 4b a4 bb 72 f1 d1 ea 2f fe ef bf 5f 7d f4 eb 4b 3d 5f 21 cb be f8 62 30 8d 97 a2 7b 1d b6 4d b4 50 e4 94 04 8b 47 08 5a a7 97 a5 23 3c ee 7c ac 8d 1e 2a a8 79 a0 40 74 cd f0 fb 8c 2f 06 e3 e3 0c ee eb 33 ba f3 e5 b3 ce 22 da 61 b4 2b 6a 52 a8 b5 ad f3 3e 7a 6a 63 75 f2 dc f1 9c 1c f1 f1 ed 5d 7f ad 24 c2 0a ea fe e8 4f de af e0 ee 5c b8 1a 64 f0 81 e0 30 72 23 e7 24 3e 43 e6 25 fa 47 0e eb 8e f4 9b df 7e 55 87 f0 eb ab e3 87 0f ae ce 9c 3e d2 7a 5b 73 5d af e9 42 0a cd f1 b7 db 15 a4 dd ba 55 82 64 8e b2 9b 15 29 49 5e df 1b 5c f1 c7 47 d1 f9 95 af 4a 1e 2d 10 43 47 6e eb 83 4f e4 fc 24 91 Data Ascii: ^A2%qnwNX\|8T`"?\|%V:i-Kr/_}K=_!b0{MPGZ#<\|*y@t/3"a+jR>zjcu]$O\d0r#$>C%G~U>z[s]BUd)I^\GJ-CGnO$
2024-09-27 16:51:52 UTC	8000	IN	Data Raw: 2c 17 74 f8 51 c7 ad 8d f8 e5 f9 13 c9 9c 07 ab cf 9a 66 f0 f9 57 1f 67 2e 08 60 ec 2b b8 9a 93 2a 5d e1 dc a9 ef ac be f5 cd ef 4e 41 dd 4f 7f fa d3 f8 24 a7 62 41 95 12 78 ae 96 dc fa d1 87 9f 45 9b 0a 9a 2d dc be e7 87 39 1f fa b8 33 e3 2c f6 9d 4d 32 38 59 c2 92 60 3d e7 94 a9 56 8a 00 c7 e1 64 df ed c3 19 81 9a f7 dc 8f ae 0a df 97 a4 cb ee e3 7c b3 01 3c ca 59 b1 47 39 b0 4d 51 3b 76 ac fd 24 eb be fe aa 22 e0 1c 97 68 e7 f0 d1 3a 08 b6 af 87 4d 23 93 54 78 a4 b1 d4 ef bd 53 42 ed 77 7f b8 3a b4 ff 54 0e f4 9c 8b e9 97 78 e4 ad 5b f1 d8 92 13 37 e3 1b d7 6f ff a6 e9 51 bf ea 81 45 fd d3 e5 ac ca 33 67 8b cb 36 6d 7a 5e f6 e7 35 6b fa ff ff 6c 9d fd 61 3e d2 85 73 b6 cb e5 9d d9 ab 1f ec ba 9f 9f f7 06 2b e2 66 85 2a 9f a7 4b df e8 3b 1b 96 ed b5 91 Data Ascii: ,tQfWg.`+]NAO$bAxE-93,M28Y`=Vd\|<YG9MQ;v$"h:M#TxSBw:Tx[7oQE3g6mz^5kla>s+fK;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:51:54 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=258788 Date: Fri, 27 Sep 2024 16:51:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:54 UTC	379	OUT	GET /vendor/jquery/jquery.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:54 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680439-15283-5616f045cad80" Accept-Ranges: bytes Content-Length: 86659 Vary: Accept-Encoding Content-Type: text/javascript
2024-09-27 16:51:54 UTC	7894	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 21 31 3f 22 6c 61 62 65 6c 22 69 Data Ascii: nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.parentNode&&b.disabled===!1?"label"i
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 6c 61 73 74 43 68 69 6c 64 5d 2c 67 26 26 73 29 7b 6d 3d 71 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b Data Ascii: lastChild],g&&s){m=q,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 72 20 64 3d 5b 5d 2c 65 3d 76 6f 69 64 20 30 21 3d 3d 63 3b 77 68 69 6c 65 28 28 61 3d 61 5b 62 5d 29 26 26 39 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 65 26 26 72 28 61 29 2e 69 73 28 63 29 29 62 72 65 61 6b 3b 64 2e 70 75 73 68 28 61 29 7d 72 65 74 75 72 6e 20 64 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 3b 61 3b 61 3d 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 61 21 3d 3d 62 26 26 63 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 63 7d 2c 41 3d 72 2e 65 78 70 72 2e 6d 61 74 63 68 2e 6e 65 65 64 73 43 6f 6e 74 65 78 74 3b 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: r d=[],e=void 0!==c;while((a=a[b])&&9!==a.nodeType)if(1===a.nodeType){if(e&&r(a).is(c))break;d.push(a)}return d},z=function(a,b){for(var c=[];a;a=a.nextSibling)1===a.nodeType&&a!==b&&c.push(a);return c},A=r.expr.match.needsContext;function B(a,b){return a
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 61 3d 3d 3d 21 30 3f 2d 2d 72 2e 72 65 61 64 79 57 61 69 74 3a 72 2e 69 73 52 65 61 64 79 29 7c 7c 28 72 2e 69 73 52 65 61 64 79 3d 21 30 2c 61 21 3d 3d 21 30 26 26 2d 2d 72 2e 72 65 61 64 79 57 61 69 74 3e 30 7c 7c 52 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 64 2c 5b 72 5d 29 29 7d 7d 29 2c 72 2e 72 65 61 64 79 2e 74 68 65 6e 3d 52 2e 74 68 65 6e 3b 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 53 29 2c 0a 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 53 Data Ascii: extend({isReady:!1,readyWait:1,ready:function(a){(a===!0?--r.readyWait:r.isReady)\|\|(r.isReady=!0,a!==!0&&--r.readyWait>0\|\|R.resolveWith(d,[r]))}}),r.ready.then=R.then;function S(){d.removeEventListener("DOMContentLoaded",S),a.removeEventListener("load",S
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 3f 28 65 3d 64 2c 64 3d 76 6f 69 64 20 30 29 3a 28 65 3d 64 2c 64 3d 63 2c 63 3d 76 6f 69 64 20 30 29 29 2c 65 3d 3d 3d 21 31 29 65 3d 77 61 3b 65 6c 73 65 20 69 66 28 21 65 29 72 65 74 75 72 6e 20 61 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 66 26 26 28 67 3d 65 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 29 2e 6f 66 66 28 61 29 2c 67 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 67 75 69 64 3d 67 2e 67 75 69 64 7c 7c 28 67 2e 67 75 69 64 3d 72 2e 67 75 69 64 2b 2b 29 29 2c 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 65 76 65 6e 74 2e 61 64 64 28 74 68 69 73 2c 62 2c 65 2c 64 2c 63 29 7d 29 7d 72 2e 65 76 65 6e 74 3d 7b 67 6c 6f 62 61 6c Data Ascii: tring"==typeof c?(e=d,d=void 0):(e=d,d=c,c=void 0)),e===!1)e=wa;else if(!e)return a;return 1===f&&(g=e,e=function(a){return r().off(a),g.apply(this,arguments)},e.guid=g.guid\|\|(g.guid=r.guid++)),a.each(function(){r.event.add(this,b,e,d,c)})}r.event={global
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 73 28 6b 2c 6a 29 26 26 28 6a 2e 73 72 63 3f 72 2e 5f 65 76 61 6c 55 72 6c 26 26 72 2e 5f 65 76 61 6c 55 72 6c 28 6a 2e 73 72 63 29 3a 70 28 6a 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 44 61 2c 22 22 29 2c 6b 29 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 62 3f 72 2e 66 69 6c 74 65 72 28 62 2c 61 29 3a 61 2c 66 3d 30 3b 6e 75 6c 6c 21 3d 28 64 3d 65 5b 66 5d 29 3b 66 2b 2b 29 63 7c 7c 31 21 3d 3d 64 2e 6e 6f 64 65 54 79 70 65 7c 7c 72 2e 63 6c 65 61 6e 44 61 74 61 28 6e 61 28 64 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 63 26 26 72 2e 63 6f 6e 74 61 69 6e 73 28 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 64 29 26 Data Ascii: .contains(k,j)&&(j.src?r._evalUrl&&r._evalUrl(j.src):p(j.textContent.replace(Da,""),k))}return a}function Ka(a,b,c){for(var d,e=b?r.filter(b,a):a,f=0;null!=(d=e[f]);f++)c\|\|1!==d.nodeType\|\|r.cleanData(na(d)),d.parentNode&&(c&&r.contains(d.ownerDocument,d)&
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 67 65 74 3f 61 2e 67 65 74 28 74 68 69 73 29 3a 5f 61 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3d 5f 61 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 62 3d 72 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 61 2c 30 2c 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 29 3a 74 68 69 73 2e 70 6f 73 3d 62 3d 61 Data Ascii: opHooks[this.prop];return a&&a.get?a.get(this):_a.propHooks._default.get(this)},run:function(a){var b,c=_a.propHooks[this.prop];return this.options.duration?this.pos=b=r.easing[this.easing](a,this.options.duration*a,0,1,this.options.duration):this.pos=b=a
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 75 74 65 3f 72 2e 70 72 6f 70 28 61 2c 62 2c 63 29 3a 28 31 3d 3d 3d 66 26 26 72 2e 69 73 58 4d 4c 44 6f 63 28 61 29 7c 7c 28 65 3d 72 2e 61 74 74 72 48 6f 6f 6b 73 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 72 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 62 29 3f 6c 62 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 63 3f 6e 75 6c 6c 3d 3d 3d 63 3f 76 6f 69 64 20 72 2e 72 65 6d 6f 76 65 41 74 74 72 28 61 2c 62 29 3a 65 26 26 22 73 65 74 22 69 6e 20 65 26 26 76 6f 69 64 20 30 21 3d 3d 28 64 3d 65 2e 73 65 74 28 61 2c 63 2c 62 29 29 3f 64 3a 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 63 2b 22 22 29 2c 63 29 3a 65 26 26 22 67 65 74 22 69 6e 20 65 26 26 6e 75 6c 6c 21 3d 3d 28 64 3d 65 2e 67 65 74 28 Data Ascii: ute?r.prop(a,b,c):(1===f&&r.isXMLDoc(a)\|\|(e=r.attrHooks[b.toLowerCase()]\|\|(r.expr.match.bool.test(b)?lb:void 0)),void 0!==c?null===c?void r.removeAttr(a,b):e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:(a.setAttribute(b,c+""),c):e&&"get"in e&&null!==(d=e.get(
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 6e 63 74 69 6f 6e 28 62 29 3f 62 28 29 3a 62 3b 64 5b 64 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 3d 3d 63 3f 22 22 3a 63 29 7d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6a 71 75 65 72 79 26 26 21 72 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 61 29 29 72 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 76 61 6c 75 65 29 7d 29 3b 65 6c 73 65 20 66 6f 72 28 63 20 69 6e 20 61 29 41 62 28 63 2c 61 5b 63 5d 2c 62 2c 65 29 3b 72 65 74 75 72 6e 20 64 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c Data Ascii: nction(b)?b():b;d[d.length]=encodeURIComponent(a)+"="+encodeURIComponent(null==c?"":c)};if(Array.isArray(a)\|\|a.jquery&&!r.isPlainObject(a))r.each(a,function(){e(this.name,this.value)});else for(c in a)Ab(c,a[c],b,e);return d.join("&")},r.fn.extend({serial

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:54 UTC	395	OUT	GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:54 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680435-10f4d-5616f045cad80" Accept-Ranges: bytes Content-Length: 69453 Vary: Accept-Encoding Content-Type: text/javascript
2024-09-27 16:51:54 UTC	7894	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 2d 62 65 74 61 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 37 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 76 61 72 20 62 6f 6f 74 73 74 Data Ascii: /! Bootstrap v4.0.0-beta.2 (https://getbootstrap.com) * Copyright 2011-2017 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */var bootst
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 2c 65 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 29 7d 29 2c 65 2e 75 70 64 61 74 65 42 6f 75 6e 64 3d 6e 75 6c 6c 2c 65 2e 73 63 72 6f 6c 6c 50 61 72 65 6e 74 73 3d 5b 5d 2c 65 2e 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 3d 21 31 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 74 68 69 73 2e 73 74 61 74 65 2e 65 76 65 6e 74 73 45 6e 61 62 6c 65 64 26 26 28 77 69 6e Data Ascii: dow.removeEventListener("resize",e.updateBound),e.scrollParents.forEach(function(t){t.removeEventListener("scroll",e.updateBound)}),e.updateBound=null,e.scrollParents=[],e.scrollElement=null,e.eventsEnabled=!1,e}function U(){this.state.eventsEnabled&&(win
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 72 6f 75 73 65 6c 22 2c 41 43 54 49 56 45 3a 22 61 63 74 69 76 65 22 2c 53 4c 49 44 45 3a 22 73 6c 69 64 65 22 2c 52 49 47 48 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 4c 45 46 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 4e 45 58 54 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 50 52 45 56 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 49 54 45 4d 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 7d 2c 66 3d 7b 41 43 54 49 56 45 3a 22 2e 61 63 74 69 76 65 22 2c 41 43 54 49 56 45 5f 49 54 45 4d 3a 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 49 54 45 4d 3a 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 2c 4e 45 58 54 5f 50 52 45 56 3a 22 Data Ascii: rousel",ACTIVE:"active",SLIDE:"slide",RIGHT:"carousel-item-right",LEFT:"carousel-item-left",NEXT:"carousel-item-next",PREV:"carousel-item-prev",ITEM:"carousel-item"},f={ACTIVE:".active",ACTIVE_ITEM:".active.carousel-item",ITEM:".carousel-item",NEXT_PREV:"
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 2e 53 48 4f 57 29 29 7b 76 61 72 20 6e 3d 65 2e 45 76 65 6e 74 28 73 2e 48 49 44 45 29 3b 69 66 28 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 74 72 69 67 67 65 72 28 6e 29 2c 21 6e 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 44 69 6d 65 6e 73 69 6f 6e 28 29 3b 69 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 69 5d 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 5b 69 5d 2b 22 70 78 22 2c 58 2e 72 65 66 6c 6f 77 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 61 64 64 43 6c 61 73 73 28 61 2e 43 4f 4c 4c 41 50 53 49 4e 47 29 2e 72 65 6d 6f 76 65 Data Ascii: .SHOW)){var n=e.Event(s.HIDE);if(e(this._element).trigger(n),!n.isDefaultPrevented()){var i=this._getDimension();if(this._element.style[i]=this._element.getBoundingClientRect()[i]+"px",X.reflow(this._element),e(this._element).addClass(a.COLLAPSING).remove
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 2c 45 26 26 28 6f 3d 47 28 6f 29 29 2c 74 2e 70 6c 61 63 65 6d 65 6e 74 3d 69 2b 28 6f 3f 22 2d 22 2b 6f 3a 22 22 29 2c 74 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 75 74 28 7b 7d 2c 74 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 2c 44 28 74 2e 69 6e 73 74 61 6e 63 65 2e 70 6f 70 70 65 72 2c 74 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 2c 74 2e 70 6c 61 63 65 6d 65 6e 74 29 29 2c 74 3d 4e 28 74 2e 69 6e 73 74 61 6e 63 65 2e 6d 6f 64 69 66 69 65 72 73 2c 74 2c 22 66 6c 69 70 22 29 29 7d 29 2c 74 7d 2c 62 65 68 61 76 69 6f 72 3a 22 66 6c 69 70 22 2c 70 61 64 64 69 6e 67 3a 35 2c 62 6f 75 6e 64 61 72 69 65 73 45 6c 65 6d 65 6e 74 3a 22 76 69 65 77 70 6f 72 74 22 7d 2c 69 6e 6e 65 72 3a 7b 6f 72 64 65 72 3a 37 30 30 2c 65 6e 61 62 6c 65 64 Data Ascii: ,E&&(o=G(o)),t.placement=i+(o?"-"+o:""),t.offsets.popper=ut({},t.offsets.popper,D(t.instance.popper,t.offsets.reference,t.placement)),t=N(t.instance.modifiers,t,"flip"))}),t},behavior:"flip",padding:5,boundariesElement:"viewport"},inner:{order:700,enabled
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 41 70 69 4b 65 79 64 6f 77 6e 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 28 21 6f 2e 74 65 73 74 28 74 2e 77 68 69 63 68 29 7c 7c 2f 62 75 74 74 6f 6e 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 26 26 33 32 3d 3d 3d 74 2e 77 68 69 63 68 7c 7c 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 7c 7c 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 7c 7c 65 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 61 2e 44 49 53 41 42 4c 45 44 29 29 29 29 7b 76 61 72 20 6e 3d 72 2e 5f 67 65 74 50 61 72 65 6e 74 46 72 6f 6d 45 6c 65 Data Ascii: ApiKeydownHandler=function(t){if(!(!o.test(t.which)\|\|/button/i.test(t.target.tagName)&&32===t.which\|\|/input\|textarea/i.test(t.target.tagName)\|\|(t.preventDefault(),t.stopPropagation(),this.disabled\|\|e(this).hasClass(a.DISABLED)))){var n=r._getParentFromEle
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 2c 69 3d 65 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 29 3b 65 28 22 62 6f 64 79 22 29 2e 64 61 74 61 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 6e 29 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 72 69 67 68 74 22 2c 70 61 72 73 65 46 6c 6f 61 74 28 69 29 2b 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2b 22 70 78 22 29 7d 7d 2c 63 2e 5f 72 65 73 65 74 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 6c 2e 46 49 58 45 44 5f 43 4f 4e 54 45 4e 54 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 69 3d 65 28 6e 29 2e 64 61 74 61 28 22 70 61 64 64 69 Data Ascii: n=document.body.style.paddingRight,i=e("body").css("padding-right");e("body").data("padding-right",n).css("padding-right",parseFloat(i)+this._scrollbarWidth+"px")}},c._resetScrollbar=function(){e(l.FIXED_CONTENT).each(function(t,n){var i=e(n).data("paddi
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 6c 65 63 74 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 65 6e 74 65 72 28 65 29 7d 29 2e 6f 6e 28 72 2c 74 2e 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 5f 6c 65 61 76 65 28 65 29 7d 29 7d 65 28 74 2e 65 6c 65 6d 65 6e 74 29 2e 63 6c 6f 73 65 73 74 28 22 2e 6d 6f 64 61 6c 22 29 2e 6f 6e 28 22 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 68 69 64 65 28 29 7d 29 7d 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 73 65 6c 65 63 74 6f 72 3f 74 68 69 73 2e 63 6f 6e 66 69 67 3d 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2c 7b 74 72 69 67 67 65 72 3a 22 6d 61 6e 75 61 6c 22 2c 73 65 6c Data Ascii: lector,function(e){return t._enter(e)}).on(r,t.config.selector,function(e){return t._leave(e)})}e(t.element).closest(".modal").on("hide.bs.modal",function(){return t.hide()})}),this.config.selector?this.config=e.extend({},this.config,{trigger:"manual",sel
2024-09-27 16:51:54 UTC	5559	IN	Data Raw: 48 65 69 67 68 74 7c 7c 4d 61 74 68 2e 6d 61 78 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 29 7d 2c 63 2e 5f 67 65 74 4f 66 66 73 65 74 48 65 69 67 68 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 3d 3d 3d 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 45 6c 65 6d 65 6e 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 68 65 69 67 68 74 7d 2c 63 2e 5f 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f Data Ascii: Height\|\|Math.max(document.body.scrollHeight,document.documentElement.scrollHeight)},c._getOffsetHeight=function(){return this._scrollElement===window?window.innerHeight:this._scrollElement.getBoundingClientRect().height},c._process=function(){var t=this._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:54 UTC	372	OUT	GET /images/index/acu.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:54 UTC	270	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68040f-17486-5616f045cad80" Accept-Ranges: bytes Content-Length: 95366 Content-Type: image/jpeg
2024-09-27 16:51:54 UTC	7922	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 04 04 04 04 03 05 04 04 04 06 05 05 06 08 0d 08 08 07 07 08 10 0b 0c 09 0d 13 10 14 13 12 10 12 12 14 17 1d 19 14 16 1c 16 12 12 1a 23 1a 1c 1e 1f 21 21 21 14 19 24 27 24 20 26 1d 20 21 20 ff db 00 43 01 05 06 06 08 07 08 0f 08 08 0f 20 15 12 15 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 ff c2 00 11 08 04 2a 06 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 01 02 03 04 05 08 07 06 09 ff c4 00 1a 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fe 15 be b2 25 Data Ascii: JFIFC#!!!$'$ & ! C *@%
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 9e 8d 63 bd c7 5b 3a 1a 4d 1b b3 0a 97 13 5e 7c 75 f0 f2 f4 79 f9 f5 e5 8e ba 5f b1 e9 f1 ed 36 65 7b f4 e3 a9 11 ab 3d 7d b8 6e e6 66 dd e7 ae f9 73 ce c6 b5 35 a9 23 77 39 9a dc 9c da b6 79 b3 d3 86 37 35 38 63 af 87 8f 7f af e9 f1 76 b9 f3 71 f4 72 cf 5d 47 69 9e d7 1d 13 64 ce b4 6a ce ba cf 6d 73 ff 00 03 d3 9f e6 cf a3 f3 7f c8 f7 f3 7f 45 f2 7d 1f e8 7e 7e bf 9e 3e 9f c9 58 29 62 96 91 45 52 82 84 fd 35 f1 bf 55 f9 ef eb fe 63 e5 6b 15 45 11 45 22 d0 42 a8 3f 47 7c 6f d4 7f 06 fa df 9a f9 7b e6 80 52 55 0a 20 42 d4 96 df af cb bf eb 6f 85 fa bf c8 3f 7b f2 3e 0d f3 b4 82 14 2c 05 40 58 95 65 3d 79 df 53 e7 eb 24 28 21 42 14 08 00 2c 08 50 42 81 10 14 44 5b 22 d4 44 4a 40 12 90 a9 0a 90 a0 88 05 85 92 17 f7 67 c8 fb 79 21 89 7c 38 f4 7c ee 5e 8f 17 Data Ascii: c[:M^\|uy_6e{=}nfs5#w9y758cvqr]GidjmsE}~~>X)bER5UckEE"B?G\|o{RU Bo?{>,@Xe=yS$(!B,PBD["DJ@gy!\|8\|^
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 40 94 3a 5c ee e7 2b cb 9f 42 ca 8b 85 cc d6 ae 71 9d 25 b8 bc 79 75 f7 f5 f3 7b 3a f9 f9 d7 8d a4 bb 66 d9 fe 3e 6f f1 27 d4 f8 fc ed 88 a4 52 d2 28 28 28 2d 58 a0 a5 2a 92 94 a0 1e c9 bf 35 c0 a5 05 29 4a 0d 14 a5 29 4f b9 37 f1 6e 05 ab 14 14 aa b2 c0 a0 b6 17 ec 67 7f 26 e0 85 a0 14 00 00 0a 41 f5 e7 4f 93 79 80 29 00 a4 5a 40 14 02 9f 4e 6f e6 5c 50 52 8a 40 a4 15 60 a4 52 07 d2 9b f9 7a c2 04 a1 01 08 22 12 a0 22 45 86 53 ea e7 a7 c9 bc d6 c2 02 11 0b 09 52 41 2d 41 3f 6f 7c 4f d1 ee e5 1e 6c 75 ba 74 d6 66 6f 6d 62 c9 db 58 90 16 4b 2d 6a ce ba cd 08 94 b4 ce 35 16 ea 54 68 85 9d 75 9d dc d2 4b c7 3d 11 bd 4e 73 5c a6 c6 73 75 2e 99 b9 5c 5f 57 4e 3f 43 b7 9a ef 1f 27 9f a3 77 34 eb 73 f2 31 db f0 f7 bf c1 fe 77 b7 04 81 54 45 16 d9 2d a4 45 2d 58 Data Ascii: @:\+Bq%yu{:f>o'R(((-X*5)J)O7ng&AOy)Z@No\PR@`Rz""ESRA-A?o\|OlutfombXK-j5ThuK=Ns\su.\_WN?C'w4s1wTE-E-X
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: cc b6 e6 56 25 cc 5a b5 a0 90 a6 ec d5 9c e6 b0 a3 a5 9d 13 55 ce 5e 52 c9 45 4e 94 33 a7 5b 37 96 8d 55 4c cb ab 04 35 66 25 cc ba ad a2 31 6d 3a a7 4d 4e 97 23 be b9 ab 86 35 99 ad d7 4d 4d dc f3 81 cb 1a e3 2f 1c eb 9b 55 31 5c 33 ae 12 f2 5e 33 79 36 99 94 7a 2e 73 2e ee 78 cd 73 6b 12 93 b6 b1 b4 e7 2e 93 ed 7d 0f 26 93 49 56 ad 8a 68 a4 96 4b cf 3a c4 d5 8d 45 54 16 95 2d 52 46 57 39 d1 51 41 00 19 55 28 21 29 a3 45 06 54 92 5b 65 08 95 65 32 b2 33 19 52 0d 14 aa b2 4b 01 6b 50 0b 94 8b a4 b6 53 32 96 08 c9 01 45 c9 71 2c 22 8d 59 d1 9d 58 33 2e 4c 05 04 d5 96 cb 64 33 2c 5d d9 a4 86 65 c9 99 54 48 64 12 32 b9 82 db 9c a7 36 a1 6c 14 86 4a 9d ac b6 73 96 2c 35 5b 35 51 39 e6 96 45 58 0d 6a 75 4d 9b aa 99 54 bd f5 8d 6a 66 31 9d 43 9e 6e ec eb a9 0c Data Ascii: V%ZU^REN3[7UL5f%1m:MN#5MM/U1\3^3y6z.s.xsk.}&IVhK:ET-RFW9QAU(!)ET[ee23RKkPS2Eq,"YX3.Ld3,]eTHd26lJs,5[5Q9EXjuMTjf1Cn
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 0e 20 84 c7 0c 8e 32 0c a7 3c ca bd 39 b4 4e 90 15 74 74 66 95 91 0a e7 c1 97 47 97 41 9b a4 28 d2 f5 1c 3a dc 1a f4 d7 63 d6 a6 b1 35 98 75 a3 50 ce c1 a6 50 80 a2 6b f1 75 fd 6f 7c fc a7 f2 30 83 61 06 e3 7e 86 20 f1 1e 9e 87 b0 f7 e9 3c 86 e3 61 e2 25 75 5e ab f8 04 f8 f7 3a 9f 45 79 f6 14 f9 c8 fb f9 46 81 b6 50 20 40 ab 09 e5 68 40 57 5c 8f 2c 3a b3 be 37 2c 21 2d 09 39 17 23 64 7c d9 32 e7 7c c9 8f 0e 2c 2a 31 a7 0f af 8d bb 16 c8 73 cc 87 38 65 d5 37 49 ca 58 39 74 75 c9 c8 12 5e 65 5f a8 e9 32 e9 35 1a 0d 57 4d 5d 56 1e e1 d3 f7 0e 3e a9 8b 5a 35 98 7a 8e 2e a2 ba e3 aa 19 ce 66 ce da dd 47 56 d6 f5 ae bd dc 9a bd 58 82 08 20 82 08 06 dd 07 c8 6e 36 1b d0 9d 10 f9 56 c3 cf 49 e8 a1 e9 d7 fe 2e 9f e8 ad c7 97 c7 49 f3 c1 f7 e6 76 67 8d 15 49 62 ac Data Ascii: 2<9NttfGA(:c5uPPkuo\|0a~ <a%u^:EyFP @h@W\,:7,!-9#d\|2\|,*1s8e7IX9tu^e_25WM]V>Z5z.fGVX n6VI.IvgIb
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 0b 0c a6 e2 83 11 69 61 01 81 06 ef 60 41 06 02 08 37 72 ec 6c 20 dc 78 54 a1 b0 d8 41 b8 20 de e3 d0 20 f2 b9 7b 1d 84 1b 5d cb d8 6e 7c ea a0 82 0d ae e5 dc bd c4 1e 03 d8 41 dc 19 66 5f 85 dd f8 58 2a 49 b0 6c 32 10 54 a4 1e 00 71 0a 61 0b 0e cb 14 f2 06 cc aa ae 40 8d 96 18 c9 97 1b c2 f9 61 2a 44 2d 5c 16 19 89 98 08 9b 00 c0 10 43 03 72 ec 10 41 b0 c0 f2 bb b0 6f 61 b0 dc 79 8d ee f6 10 19 77 77 e4 22 f9 5d ed 66 08 37 bb bd 81 97 64 dd de d7 e2 0c 1e 23 70 60 83 c0 78 dd df 81 87 63 b5 d9 24 dc bf 00 76 3b 02 08 30 6c 02 95 64 28 41 0d 62 01 2d cd 42 c0 ac a1 14 d8 20 ae d4 b2 8c 0e d0 3e 69 9d 5d 99 98 28 24 32 c2 54 71 e3 75 8c cb 2d 04 04 10 41 dc 6e 25 df 2e 40 82 08 20 dd 82 08 da fc 47 80 f0 bb da ec 4b f0 04 10 47 85 dd dc 1b 5d 93 60 dd dd Data Ascii: ia`A7rl xTA {]n\|Af_XIl2Tqa@aD-\CrAoayww"]f7d#p`xc$v;0ld(Ab-B >i]($2Tqu-An%.@ GKG]`
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 65 44 ad c1 21 70 8f 49 b8 5b b8 6f 1d e1 d4 71 f8 5d 83 ec fa 67 9b 1c 2e c7 79 2e 23 c0 73 f1 2f 46 0d 7e 2b c3 04 97 d0 7c 1c 4d 0f 90 8e f1 bd 40 9e 8b 58 d8 f6 d2 1f 48 ec 0f 14 4b dd 82 c4 0a 41 f4 8b de 5f 02 3b a2 3d ca 91 30 f3 66 89 46 38 75 0a b2 2a 8c 75 43 15 e8 78 e3 b9 6f b9 53 76 73 1b 98 77 c0 3d df 45 b8 37 d1 15 cc 35 94 e7 04 03 00 77 7b 56 5a e9 b3 aa 1d de 74 54 9f e9 37 16 7d 07 e1 6a d2 76 36 b9 63 f0 74 8d 2a 0e 1d e3 a0 d3 61 bb 59 c8 6c 3d b5 d5 7a ff 00 46 d8 2a af 7e 77 8c 2d 3a 6c 7e 31 fd cc 31 95 6a b4 0a 51 fe c5 90 24 c1 25 d2 8b 3d 24 e2 ac 71 c4 12 31 95 e4 e2 a9 8a 75 89 ef 1d 25 ed d1 ae e6 36 3e dd 9e 93 fa 5d 80 e0 75 31 87 07 4f 10 5e 5f 55 b4 cd 47 00 d6 17 43 5b bb 8c 40 58 1c 6b c5 2c 07 a4 b8 ba 15 c5 37 d6 a9 Data Ascii: eD!pI[oq]g.y.#s/F~+\|M@XHKA_;=0fF8uuCxoSvsw=E75w{VZtT7}jv6ctaYl=zF*~w-:l~11jQ$%=$q1u%6>]u1O^_UGC[@Xk,7
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 5c 79 8b aa 5f ea ce bf 74 69 48 18 79 14 26 95 85 7d c1 b3 84 c5 85 c9 87 18 c9 f0 4f 1f 44 b8 00 18 f1 49 cc cc e9 a2 0d 3b 9a 99 89 6f be 67 77 b7 de 12 d6 af b1 64 44 65 1a 7c 0b d9 f4 89 c1 0d 23 50 38 56 71 9a 6c 0f 77 f4 4f 9b 1b 0b 6a ef c5 12 e5 1c 13 84 35 92 28 8c 5e 94 8f 7b 46 d4 6d 0f d5 9b c3 7f 1c 66 27 dc f8 0b 97 ed d5 64 7b 86 87 32 8a a4 6c 80 88 d6 df 24 19 50 b1 02 c3 2a 3e 48 b5 fe 63 b3 33 09 1b 2f 08 46 40 52 80 10 80 25 5d 0c c4 c6 ca 5a 14 16 df 41 b2 12 e7 73 0a 6e 3e 61 7d ae 57 48 8b 22 68 b9 87 5d 55 8a 20 cc dd 03 40 94 40 8e 6b 69 50 81 93 30 88 dc 2c f5 91 f2 5e 03 37 2b 54 5a 1c 50 37 29 d5 6a e4 3e 68 06 80 d2 b2 89 2d 32 ad 33 ad d1 73 75 84 63 2e 52 65 1a 72 36 2a 54 35 44 ae 8a 5a 55 dc a1 a2 a0 d5 8b bd c2 83 37 68 Data Ascii: \y_tiHy&}ODI;ogwdDe\|#P8VqlwOj5(^{Fmf'd{2l$P>Hc3/F@R%]ZAsn>a}WH"h]U @@kiP0,^7+TZP7)j>h-23suc.Rer6T5DZU7h
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 73 86 ba 28 bb b7 1a 29 a0 6e 8d 5f 49 d8 1a 8e e5 5e 01 94 f8 97 9c a1 35 96 01 54 7b c3 45 81 31 29 94 1e 69 93 2e 09 95 4e 4d 25 3c 3c b6 25 6f 51 53 63 33 bc 80 15 37 f8 29 19 72 a9 4f 0c 5b 06 34 f3 4e 63 bb a8 cf d1 b6 58 7a ec 18 b7 53 0d 2b 17 55 85 d4 cc c0 9b 68 aa 54 96 d4 a6 64 72 52 dc cf 66 66 91 21 3a 9b 4e 41 1f 25 5d ee 21 b2 e3 ca 13 98 33 54 a6 42 7b 5b 00 64 0b 13 90 bc 5d aa ae 68 00 a7 b9 93 55 a6 10 a6 0b a9 02 55 67 4e 46 ac 66 49 2d 39 13 1f 44 99 87 04 e0 88 d5 12 27 b2 35 4e ae 48 63 84 8d 8a 2d 24 11 04 76 4f ad aa 23 d1 1f 48 7a 8a 03 fe bf 80 fc 05 c7 cf fc 0a 7f bc f8 1f e6 86 2b fc 75 3f d8 3f 05 18 0e 0b fe 08 7e db be 08 7f e1 9e 26 ef f8 f4 3f fa be 0b c0 ef 25 1c 72 a8 e5 4e 97 ee db f0 10 f7 08 20 8f d2 99 19 4c 90 9e Data Ascii: s()n_I^5T{E1)i.NM%<<%oQSc37)rO[4NcXzS+UhTdrRff!:NA%]!3TB{[d]hUUgNFfI-9D'5NHc-$vO#Hz+u??~&?%rN L
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: d2 e0 98 58 e9 12 e7 26 0b 39 4b 1b c8 2c f4 cb b5 70 28 b6 a1 37 6b e2 54 53 31 aa 6d 3a ad a9 97 35 ae df ca 0a 07 80 0d 76 d9 52 7b f4 2d dc 34 ec 83 4c ec 2c b2 ce c2 65 0e f0 0c d6 20 5c f3 dd 16 01 02 00 33 21 56 a8 75 b0 99 1b 04 5f 4e 9d 47 12 48 64 74 89 53 2d 70 32 35 59 28 77 1a bb 3e 6c ce 16 22 2d fc 51 a3 5c eb 94 5c 6f 95 1a 25 b5 98 33 36 7c 43 68 d8 a8 63 5f 4d d9 b3 44 b4 ed f3 4c 7e 7a 55 24 16 dc b4 9d 2c 51 71 7b dc 65 ee 32 4c 9b a6 36 89 7b 00 b3 85 a2 f1 fe 4a a3 58 e6 06 99 69 8e a0 cf e8 21 06 bc 53 14 b2 90 61 ce 04 cc 1b 14 f0 6a d3 34 c4 3c 08 03 40 45 81 8f 2b 1e 68 b1 fd fb 5e 4b 98 73 07 72 d9 46 1a 29 b4 b7 25 42 5c 0f 58 01 30 61 dc 5a ec d4 f3 43 88 6e 96 1b 9e a6 13 7e ce a3 8f d9 83 17 36 b6 c9 d5 5e d1 05 d9 8c 4d cc Data Ascii: X&9K,p(7kTS1m:5vR{-4L,e \3!Vu_NGHdtS-p25Y(w>l"-Q\\o%36\|Chc_MDL~zU$,Qq{e2L6{JXi!Saj4<@E+h^KsrF)%B\X0aZCn~6^M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49750	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:54 UTC	373	OUT	GET /images/index/lec.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:54 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:54 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680411-1b3a10-5616f045cad80" Accept-Ranges: bytes Content-Length: 1784336 Content-Type: image/jpeg
2024-09-27 16:51:54 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 0b 49 a0 03 00 04 00 00 00 01 00 00 07 81 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 07 81 0b 49 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIF,,ExifMM*JR(iZ,,I8Photoshop 3.08BIM8BIM%B~I"
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 11 c9 c9 4e a1 41 e7 3c f6 f6 ab 16 fa db 4d 1c 90 bc 23 17 5e 6b c2 71 ce c0 79 e7 3c 13 c7 5a df 96 c8 4d 58 d9 b9 d4 24 d3 ed 40 96 f0 5d 22 aa 80 5b ef 42 e3 af 50 3a 9e f5 15 b4 4b 65 31 9e e6 7f 9b 50 c2 87 6c e1 01 ee 70 33 ce 7f 4a cd 5b b9 67 bb 49 62 59 5e 28 23 11 10 78 44 e3 03 02 9d 77 71 71 35 c4 39 b6 88 85 09 8c 0f 96 40 3a 77 cf 20 d4 ab 31 d9 97 a4 b4 5b 2b 49 a2 82 59 7e d1 11 2c a5 48 08 17 d4 1f 71 c8 a7 dc 6a 10 69 1a 05 bc 72 0f de dc 8d c7 8c b0 1c 63 f3 ac b9 3c 47 74 91 dc 5b cf 64 91 cc ce 15 70 38 09 9e 17 af a5 4d 75 a9 3e e8 ed a3 b5 dc 22 40 cc cc 41 c1 3d 70 73 8e 0f 4a 4e 45 26 96 e4 fa 05 b4 c1 a5 95 9c f9 49 fb c9 51 ba 80 dc 01 f9 ff 00 f5 ea c5 e4 16 b7 37 89 1c 53 08 b6 a9 2d b4 67 b7 4a 82 ce e9 f4 db 21 71 65 34 08 Data Ascii: NA<M#^kqy<ZMX$@]"[BP:Ke1Plp3J[gIbY^(#xDwqq59@:w 1[+IY~,Hqjirc<Gt[dp8Mu>"@A=psJNE&IQ7S-gJ!qe4
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: f9 20 b8 1f c3 fc aa c2 ea 8d 06 a8 ab 01 57 55 c2 f4 f9 41 3c 8f a5 6f 4e ac 52 d5 10 53 b8 d4 4c 56 90 aa 43 1b c3 33 10 5e 4c 83 18 27 d8 f4 a7 de dd db 4c 4d a4 3b e5 9d 90 aa 96 1f ba 8b 23 9f 7e be dd aa 7d 4a ca d3 48 d3 48 74 12 49 34 81 a3 da 49 09 fe cf 38 ef 50 e8 4d 71 a8 69 b3 c3 69 6c 65 9e d1 4c 93 f9 6b d0 76 dd 9e 9f 85 72 55 77 77 08 b7 cc 53 78 62 d1 da 18 8a 33 02 7c c6 58 8e 4e f0 46 09 ce 38 e7 b7 35 53 4c 96 d2 f6 de e7 7a 34 72 06 dc c6 43 8c 1e 71 b7 9e e3 9a b3 61 a3 1b 59 9e fc 14 45 8b 2f f2 93 8c f1 9e 08 ed 8a af a9 eb 32 43 64 df 64 ce 25 24 ab 81 9d 9c 73 9c f7 f4 ac 24 8f 4e 16 e5 1b 6d 6c 2f 35 07 97 cd 92 dc 44 83 61 9b 84 6c 0e c4 02 69 ba 25 ca de de 5e 7d be 38 a6 6c 81 1b b1 65 50 06 79 18 35 a7 a5 0b c5 9a 03 7d e4 Data Ascii: WUA<oNRSLVC3^L'LM;#~}JHHtI4I8PMqiileLkvrUwwSxb3\|XNF85SLz4rCqaYE/2Cdd%$s$Nml/5Dali%^}8lePy5}
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: f0 c3 69 c0 5c f2 99 3d 7d e8 70 49 1b 53 83 9a d4 e7 9f e1 54 4e 45 cd d4 f6 fe 62 03 b4 97 20 e1 be 83 9e 2a 3b 8f 87 b6 17 62 4c a4 7b a0 8c 18 dc 33 71 81 db d7 a7 7a ea b3 05 ac a2 2b a4 b4 9e 3b 75 08 cf 97 df 03 63 00 f5 c7 27 a6 73 56 2d 52 e1 ed 6e 3c d9 ca da 88 fe 52 80 79 9d 0f 1c 8c 77 e6 a6 16 91 4e 89 c5 69 5a 05 ad c1 8d 57 70 dc 8c b9 63 8c ed 19 70 3d c5 67 0d 06 1f 26 35 b7 9c b2 19 9d 40 e0 f1 c0 c1 f7 15 d6 a7 87 9a ff 00 ec d1 46 15 1a 3c b2 60 8c be 70 41 3e e4 7a 53 b5 4f 07 41 e7 43 67 3c 4b e6 c8 4c a4 64 80 08 e7 a8 35 50 77 30 a6 f9 64 73 a7 c3 17 37 73 18 9b 11 44 aa a9 91 8e 36 f7 cd 4d 61 e0 88 d5 67 8a d2 66 59 03 6f 91 8e 0f 98 18 f4 e7 e8 7f 3a db b6 b4 8a 7b 4f 22 09 48 f9 f6 ed 90 7c 85 87 5d a7 93 c6 7b 9a 61 85 b5 1b Data Ascii: i\=}pISTNEb *;bL{3qz+;uc'sV-Rn<RywNiZWpcp=g&5@F<`pA>zSOACg<KLd5Pw0ds7sD6MagfYo:{O"H\|]{a
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 64 a3 cf b8 99 20 0f 8c 48 b9 3f 28 e3 e6 a6 e9 90 45 ab 6b 17 33 4c 08 4f 24 a3 e3 bf 4e 9f 85 5a 96 59 2f 64 99 d2 db 29 8c b9 e7 f7 fe cb cf 26 ab e9 b6 f7 d0 5e 5c 46 f6 c3 cf 07 70 46 04 0e de 95 2e 2d 0e 32 dc 5b 3f 0e ae 9d 61 6b 21 92 2b 99 52 60 d1 a9 ce 04 5c e5 b8 ef 9e 2a be a1 6e 23 bf 9f ed 2c d1 cb 2b ac 7e 5a ff 00 08 3c f3 5a 1a 34 6d a7 c7 68 1a 4b 69 21 92 4c ee 46 2c c3 1d 7d a9 f2 c1 3c d2 09 ee e6 c4 e1 c1 5d 80 1c af a1 cf 7a 6a 37 15 36 ee 61 49 a2 f9 13 47 6d bc 02 b8 2a d1 9c 80 7d f3 5a 37 b7 93 da 68 31 b3 c3 13 ea 11 e5 46 18 90 01 cf 3e fd a9 d7 90 9d 53 7b 5a c6 cb e5 b8 da d2 8d bc e3 a3 63 3f 87 b5 49 6e 08 d0 d8 b2 28 96 35 21 1e 40 7a 9c f3 ee 07 7a de 9a 4b 71 36 dc 88 34 bb 32 2c a6 96 42 01 70 ad e6 4b f2 86 3f dc e3 Data Ascii: d H?(Ek3LO$NZY/d)&^\FpF.-2[?ak!+R`\n#,+~Z<Z4mhKi!LF,}<]zj76aIGm}Z7h1F>S{Zc?In(5!@zzKq642,BpK?
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: cf e3 55 6e 2d 6d ee 55 e6 86 10 d7 b0 29 42 99 3c 83 ce d1 f5 e0 e7 ad 59 9e d2 5b 2d 3a 13 73 6c 97 11 c9 2f 96 c8 32 48 07 3c f1 8a 9b 42 f2 ae af 27 b9 50 52 24 f9 21 20 73 9c 0e b9 fa 56 73 8a 4c e6 e6 72 91 1e 89 a7 45 69 a5 98 ee 44 a2 f6 47 da b0 b1 ec 47 39 f4 1f 8d 2d f5 dc 9a 7b 44 a2 3b 79 50 f0 e1 49 f9 17 e9 d6 a5 b2 7b 8b 15 9a 44 82 dd 96 63 90 27 2e 92 bf 18 e8 3a 7b 62 96 3b 60 93 4d 3c 58 7b b5 c1 71 2f 03 91 90 a3 15 d1 4f 9a db 1e 8c 6d c8 59 d0 a3 5b b8 65 66 82 6c 2a 9d ff 00 4e c0 72 3b 55 2d 2d 45 a3 5e 48 af e7 c8 89 95 ce 0e 4e 38 0d e9 e9 c5 58 8e 50 6e d2 2b a3 2a a5 e3 aa 6e 2b 8d a7 18 e3 a0 c7 d6 a9 5b 45 67 a8 49 73 65 1c 77 d3 dd 2b 7e fa 50 01 dc a3 8c 75 03 38 c7 4a 99 26 61 cc f9 89 2c ac 25 82 07 3e 65 bc 72 4e 9b ca Data Ascii: Un-mU)B<Y[-:sl/2H<B'PR$! sVsLrEiDGG9-{D;yPI{Dc'.:{b;`M<X{q/OmY[eflNr;U--E^HN8XPn+n+[EgIsew+~Pu8J&a,%>erN
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 90 ca 25 62 ee 24 20 7c a7 38 f5 e9 5a d9 95 12 94 f3 cb 2c 62 d2 dd a6 9e 4b b5 17 01 b6 83 22 67 b6 d1 c7 6a 86 d6 4b bd 1e f6 26 90 46 d2 a0 c7 98 ac 59 51 bb 82 0f 15 6d ad ad be ce 97 4d 14 d3 49 3c 60 a8 4c b1 5c ff 00 09 fa 77 a7 5a db cd 6f a6 c9 94 0f 1d cb 6e 28 7a 87 3c 9e 7a e2 92 dc 99 a5 cb b9 14 b0 01 7c 23 d4 9a 26 42 3c d4 55 61 83 db 68 3c 55 39 24 7d 53 4e 2e 62 68 a0 f3 36 11 d3 69 c6 7f 13 f5 ab 50 68 56 d3 c0 c1 7c a3 75 2b 79 c8 44 85 9e 1e db 36 f4 cf 5e 2a 4b 4b bf 36 d9 2d 6e 63 fb 56 2e 0a b4 71 70 cc 36 67 2b 8c 67 eb 51 3b 99 43 5d ce 7a 6b 78 ac e1 46 58 c8 b7 56 0e 15 49 70 4f 4e f5 4b 57 b6 93 fb 51 e5 52 f1 c1 69 16 ec 63 bf 4d c3 d4 fb 1a ea 2f 6d 17 50 49 1a 25 86 45 6f 95 17 71 fd d8 ce 7b 67 9a ce b5 67 86 53 0d e1 47 Data Ascii: %b$ \|8Z,bK"gjK&FYQmMI<`L\wZon(z<z\|#&B<Uah<U9$}SN.bh6iPhV\|u+yD6^*KK6-ncV.qp6g+gQ;C]zkxFXVIpONKWQRicM/mPI%Eoq{ggSG
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: a5 d7 ec 7e d2 b0 8b 94 56 dc 3f 72 80 90 db bd 08 1e fe f5 2d c4 b7 7a 7d b1 68 8f 9a 50 82 cb 18 04 0e 3f 9d 3e fd 5f 5e b7 b6 33 16 b5 92 06 cf 96 00 de a7 39 04 8e c2 b1 69 f3 1a 53 aa 45 02 20 d7 6d 54 69 f2 3d bd b4 45 15 72 c4 21 24 13 83 9c 9e 73 d6 b3 5a d2 2b 18 64 5b 8b 45 4f 30 16 4c 33 65 88 e8 a4 67 bd 6c d8 ac b6 b7 91 c4 59 a4 13 e1 76 0e b1 fd 0f ad 57 3a 65 d5 fb e1 e5 85 9c 6e 58 c9 1f 30 cf 5c 8c 56 d2 f8 55 8d 6a 6a ae 52 ba b6 96 d0 1b 82 09 56 4d e6 26 f9 48 0b dc 7a 91 da ad 45 65 24 3f 64 f2 c4 8f 71 70 c1 ca ec 1f 2a e7 af e1 c5 6a dd c2 2c ec 2c 36 05 6b 94 94 2b 3b 9c 03 cf 0b 8e 9f 4f 5a a5 a7 58 b5 ae a1 2d cf 99 70 8e d8 8b ca 2a 0e 55 ba 80 7f fd 55 a5 2f 84 ce cc ca d4 f4 db 8b e8 5a 6b b2 5e 58 a7 8d 71 11 c6 41 3c 74 ef Data Ascii: ~V?r-z}hP?>_^39iSE mTi=Er!$sZ+d[EO0L3eglYvW:enX0\VUjjRVM&HzEe$?dqpj,,6k+;OZX-pUU/Zk^XqA<t
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: 1f b4 42 a2 7d ec 37 9e 57 9f 41 cd 6f 68 f7 f2 0b 32 56 41 13 80 aa 66 23 26 42 0e 70 07 4f ca b2 82 b9 d4 d2 83 d4 dc 1a 8c cf 68 22 4b 57 84 79 99 df b9 8e d5 ec 1b 3d 2b 43 40 85 a5 17 2c ec d1 98 1c 99 01 1c 17 3d 7e 87 e9 59 d0 c8 f7 1a 8b 34 31 cb 22 cb f3 4a 9d 93 d0 7e 06 b4 8e fb 69 64 8a 56 77 76 8c 2b 8d b8 f9 f3 d7 23 a9 ad 9a 68 e6 a7 3b 4b 52 08 ee a0 94 cc ce 25 f2 b0 07 03 3b f9 ea 07 ad 5d b7 b7 9a 1d 31 a6 8a f6 2b 54 68 82 f6 60 e7 76 08 e4 1a 87 42 d3 e6 d1 67 05 9a 39 16 e0 ed 20 9c ed 4c 71 f4 e7 bf 5a bf 73 60 ba 7e 92 6d e2 88 48 64 5f b4 28 24 9d a7 38 c0 cf 5e f5 8c cd 94 7a 87 87 fc 3b 1c 76 3f 66 38 fb 4b 8c 08 77 1c 9f eb 8f c2 a3 1e 6d e8 7b 66 72 12 08 f2 77 70 ce 7d 0d 37 4d bf 26 0f b5 7d 9e e9 3e ca b8 7c 29 2d bb 3c 8a Data Ascii: B}7WAoh2VAf#&BpOh"KWy=+C@,=~Y41"J~idVwv+#h;KR%;]1+Th`vBg9 LqZs`~mHd_($8^z;v?f8Kwm{frwp}7M&}>\|)-<
2024-09-27 16:51:54 UTC	8000	IN	Data Raw: ea 0f 35 d0 4a b6 56 f7 01 65 6b a9 62 b7 39 c0 8f 1b 31 d5 8f cd 9c 01 59 fa 80 b6 9f 62 b4 c5 ed 58 82 cf 19 c6 e1 e9 c1 ac 66 99 ad 3d 77 38 2f 14 78 3e ca f0 cd 22 59 a3 c7 28 f2 d5 95 88 08 c7 e8 7a 57 24 fe 14 86 d2 0c 30 63 94 21 cb 20 55 1f 46 eb 5e a7 aa da 26 86 f3 c6 ef 98 55 7f 70 07 dd 5e 3a 1f 53 d7 19 ae 32 78 21 92 ea e1 23 dc 27 91 09 72 49 20 0f 41 cf 06 b1 70 0a c9 5d 1c 4e b5 a7 a6 8b 1a 7d 8e da 65 88 38 73 21 5c a9 2b 9e 99 fa d3 be 1b 34 d3 fc 47 64 16 bb fc e4 0e 77 71 b7 18 e6 ac eb f2 cd 1c 50 c7 01 69 40 93 0e a3 9e 33 cf 15 57 e1 25 dd c6 a9 e3 3b f9 9b cf 61 08 08 81 63 e8 3b e7 15 d1 42 92 38 ea 1e f7 e1 4f 0d ca cb 25 b4 d6 d1 db ef 46 2b 37 cc 49 63 d8 e7 a6 6b 77 e2 3e 8d bf f6 6b f1 5d a1 4c dd bc 22 10 c1 8f ef 72 b2 81 Data Ascii: 5JVekb91YbXf=w8/x>"Y(zW$0c! UF^&Up^:S2x!#'rI Ap]N}e8s!\+4GdwqPi@3W%;ac;B8O%F+7Ickw>k]L"r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:56 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 16:51:56 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=258816 Date: Fri, 27 Sep 2024 16:51:56 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 16:51:56 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:58 UTC	378	OUT	GET /images/index/mainCover.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:58 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680412-7e4563-5616f045cad80" Accept-Ranges: bytes Content-Length: 8275299 Content-Type: image/jpeg
2024-09-27 16:51:58 UTC	7919	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0c ac 00 00 05 1c 08 06 00 00 00 a4 d9 e9 cd 00 00 0c 24 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 97 07 54 53 49 17 c7 e7 95 24 24 24 b4 d0 a5 84 de 04 e9 55 6a 68 91 2a 1d 6c 84 24 90 50 42 0c 04 15 3b ba a8 c0 5a 50 11 c1 8a ae 8a 28 ba 16 40 16 1b 16 6c 8b 62 ef 0b 2a 2a ca ba 58 b0 81 f2 4d 12 40 d7 fd ca f9 e6 9c 79 f3 3b 77 ee dc f9 df f7 26 93 19 00 94 a3 d9 22 51 36 aa 02 40 8e 30 5f 1c 13 12 c0 48 4a 4e 61 90 ba 80 22 50 01 ca c0 01 38 b3 39 79 22 ff e8 e8 70 00 cb 48 fb f7 f2 fe 26 40 a4 ed 35 5b 69 ac 7f f6 ff d7 a2 ca e5 e5 71 00 40 a2 21 a7 71 f3 38 39 90 0f 01 80 bb 72 44 e2 7c 00 08 bd d0 6e 32 23 5f 04 99 08 55 02 75 31 14 08 d9 54 ca 19 72 76 97 72 9a 9c c3 65 3e 71 Data Ascii: PNGIHDR$iCCPICC ProfileHTSI$$$Ujhl$PB;ZP(@lb*XM@y;w&"Q6@0_HJNa"P89y"pH&@5[iq@!q89rD\|n2#_Uu1Trvre>q
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 01 3e 6b b3 57 d1 43 96 81 8f 3e d7 bc 7e 39 78 28 a6 21 b2 61 91 ba d8 cf 37 c8 51 7d 8c 9b 5b 4d e4 a2 be a7 69 e8 2c 55 68 40 bb 23 b3 5d ed 57 d9 a4 0d a1 fd a6 4c d5 d7 c7 18 6f c7 15 71 21 7c 3e d2 49 08 62 84 b1 36 aa 36 bc b8 a2 3f 67 ae 5f 89 35 05 fd 42 0f 88 38 13 b8 3d 9b 21 2b e0 99 fa 82 90 32 31 9e 5c 7e c4 31 e7 e3 71 fc e6 6a 61 cc 39 cf fa 61 66 f1 1d 5e 0b ec 94 d3 80 2e f8 ae 38 9b 67 a1 e4 c8 ca fb 0e b1 a2 6e 6f 96 da 4b 1b e8 39 f7 90 27 75 da c1 3e 0b fb ab 8b 1c c3 47 bf 00 47 c1 0d fd 4b 61 ab 38 d4 db 39 d1 09 bf 78 f1 21 2f f0 84 ba dc 8c 4f e7 30 67 ad a7 f8 5a fa f8 1c c6 63 d7 b4 96 de be ed a7 7d f4 8c 29 76 96 30 56 5e a8 3b 17 7d a3 cb 4a 5f e2 7b 11 05 3c f4 4f f1 85 f1 8e 91 65 73 ec 34 75 43 f5 aa ce d9 39 36 7a 8f 98 Data Ascii: >kWC>~9x(!a7Q}[Mi,Uh@#]WLoq!\|>Ib66?g_5B8=!+21\~1qja9af^.8gnoK9'u>GGKa89x!/O0gZc})v0V^;}J_{<Oes4uC96z
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 73 d5 62 15 da cd 41 83 55 71 5d 3d 01 56 29 1e e2 fc 24 41 8b 04 7e 7c 60 fa 84 95 7f 65 e2 a8 45 7c 3a 65 e2 c7 a5 32 05 0b c8 d9 fc 84 f5 e1 ef fc f8 3c bd dd 3f 64 5c d8 c5 c4 b1 4c 68 9f 21 5b 18 5d e8 24 e6 2a 34 b1 53 9b f4 ab 38 6c f1 1d 48 46 d2 b5 49 32 32 0d 0b b5 1b 6c da 53 c0 2f 67 22 89 7e 4a 37 23 b3 00 7d 70 45 92 d7 e5 90 b5 27 66 78 8d bf 0a 18 8b 73 39 e0 a5 9e 69 cc 7c 63 af 4d e2 d2 3a b8 01 3f 86 27 8c 58 63 e3 31 ca 1d b8 42 f8 16 4d 3e 92 66 ab 14 16 98 08 55 47 07 2c c2 07 82 7f 81 07 d7 9d 6b f4 1b 0a d3 81 85 be 67 dd 69 43 62 22 39 e4 83 7c d4 8d 57 2c e2 a5 59 d8 00 5c 97 31 18 1f 97 a6 b2 18 a9 45 26 16 09 31 2e 12 ec ae ce 7a e9 68 ff 2a 0a 5f a4 71 37 72 32 ae 5f 01 67 9c ab 3a aa 9b 41 aa a7 dd d0 cf e9 e1 25 f7 ce d3 12 Data Ascii: sbAUq]=V)$A~\|`eE\|:e2<?d\Lh![]$4S8lHFI22lS/g"~J7#}pE'fxs9i\|cM:?'Xc1BM>fUG,kgiCb"9\|W,Y\1E&1.zh_q7r2_g:A%
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: da c6 80 b4 a3 b5 85 c4 65 7b 1d a2 93 0b af c0 41 92 4a ed 63 44 d2 a4 bf 83 0f 00 bf 18 97 c3 64 9c 4c 35 d6 51 b9 10 1b 8f f0 fb ce 2f 16 36 17 b6 65 d0 27 48 38 a7 78 d7 94 0f 7d b4 3e d5 cb e4 6e fd f2 6e c6 27 7e d4 79 22 ae b8 66 21 b6 fc b9 c5 ef c7 3c d9 f5 fb 14 e0 6f ec 54 59 5b 7c 9f e6 59 30 98 2a fc 4e b9 aa 4f 44 3f 84 d3 d4 6f ea 66 4c 5d 92 77 bf fe e2 22 ed 7f cb 13 4b 8f e1 eb d8 18 d7 e8 62 26 52 b6 d9 94 b3 85 5d 8c 64 08 ff d9 1c bd d0 a2 a2 1e 32 6b 62 e2 2b 73 8f c4 61 ec d4 5a 2b 97 f6 88 e9 ae 41 ab 6e 8a 28 1c 7d ca 81 71 82 0b 9e f4 e2 a6 5c 59 e2 2a f4 8b 7e a7 ff d8 9d fc dd 40 4c e2 aa 02 d7 02 fc 52 7e 63 12 70 96 28 0b ae a9 e7 80 17 03 0a f6 cc 9b 88 9d b0 99 73 09 18 ac f0 74 8b 36 31 31 9f 0e 89 6a 08 2c e1 93 14 f7 b8 Data Ascii: e{AJcDdL5Q/6e'H8x}>nn'~y"f!<oTY[\|Y0NOD?ofL]w"Kb&R]d2kb+saZ+An(}q\Y~@LR~cp(st611j,
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 53 21 a3 a9 93 ce 8e 8f ae e3 19 3e 55 fa 44 f4 ba bd 62 95 93 c9 f2 72 66 2a fe 7d 54 b1 a2 bc 00 53 01 f1 34 fe da 7b f9 c3 76 15 fb 3f 54 53 0d e1 62 3e 19 32 ff 59 b8 45 87 77 30 9b f1 12 71 60 45 3e 74 68 13 07 c0 82 cf e7 51 3a ed 34 0c 8b 57 d1 eb d0 02 58 78 0c dc 83 b1 1c 05 53 92 a6 11 5b 7c 1d fe 4e 7c ac 2d ce c3 77 3a ab 29 6a ea 32 93 17 21 6e 10 bf 9b e2 89 6c 47 f4 31 3a 40 bc 1a fc 15 a0 c3 55 f9 68 0a c4 d0 81 f8 e5 6b 7c 5d 61 d9 f9 cd a9 a0 b7 ae d1 ba 26 bf 73 70 3a 7e 36 36 af 1b b3 61 fa 1d 48 e1 04 fd 8e df 12 8c c4 7f 27 67 a2 f7 14 88 93 23 f8 17 de e7 8c e1 33 dd e9 19 7d b6 1f f2 44 1e d1 93 e2 ed bd 19 4c d7 02 06 9f 13 83 98 c2 c0 e4 8a 6b cc 0d ad 29 dc 6c 49 fd 19 3e f4 dd 17 78 59 7a b6 62 1f 87 29 39 5f 9e df 24 7b e7 37 Data Ascii: S!>UDbrf*}TS4{v?TSb>2YEw0q`E>thQ:4WXxS[\|N\|-w:)j2!nlG1:@Uhk\|]a&sp:~66aH'g#3}DLk)lI>xYzb)9_${7
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 54 ae f3 be 26 78 f3 67 ef a8 d9 4e 50 1f 3c d9 13 9d a0 f7 fb 15 76 dc 4f 9e 59 de 23 05 65 ed 48 2e bc dc 96 69 c6 d4 bd 34 20 7e 90 4e f7 9c 0f a8 33 70 15 71 22 c5 2b d3 6c 27 98 c3 7f b1 43 f4 ed 40 86 2f e1 cb d1 9a fc 66 7c e2 f4 3b c5 55 8e f6 fd 9d 8f f3 01 94 0f 96 7e 85 4f 68 1e 23 0e 4b 36 d2 2f 1f c0 b5 f4 cd 77 bf 73 76 f9 56 be ef 8b 97 2f a7 c7 d7 24 bb eb 6a 88 c1 ee de 59 9e c6 de 72 52 35 72 78 91 ce 6c 4a ea bd 9b c5 02 ca 83 7a 5a de e0 b3 9a 70 4d bd 41 38 b7 ca 38 96 35 1b 99 ae 14 5c cb db d0 f4 e3 40 79 0e 1a a4 9a e4 09 d6 6b 23 be f8 57 90 a0 f3 de b9 22 57 ec ee e8 b2 6a 19 76 3b 0f 39 35 d1 1d 3d 93 ef df 34 3d 39 99 68 5b 0e c9 36 f8 91 22 b2 ea 20 dd 2f 38 b9 60 9f 9e fd 6a 46 0e ff fd c7 ff 48 ae 7a f8 fc 7c 6f fd d3 2b c3 Data Ascii: T&xgNP<vOY#eH.i4 ~N3pq"+l'C@/f\|;U~Oh#K6/wsvV/$jYrR5rxlJzZpMA885\@yk#W"Wjv;95=4=9h[6" /8`jFHz\|o+
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: a3 55 78 01 91 d0 81 a4 3c 23 3e 49 3c 81 32 42 01 4c fd 76 2d c4 bf 26 2a c7 d8 a2 7b c9 d3 aa f5 38 55 47 c1 0d 66 eb bd 57 05 c2 f3 a1 87 fe e1 90 d0 b9 9d 23 7b ce 9c 70 ed ce 61 e9 e0 1b 43 17 1c e1 de 08 80 f8 06 88 a0 bb 71 58 b4 7e 1d ae d1 85 d7 c0 ca 75 a6 70 2a e8 08 f4 8c 00 8d 39 4a b6 dd 9d 53 59 87 0c 09 84 68 47 d2 3e e3 5d ee a2 ef db 8e 44 2e 41 0d f8 cf b0 5d 71 74 35 54 24 91 a3 26 bc 4c 85 b4 8d ed 8d 39 be f3 fe d9 e5 dd 77 de 9e 60 06 e4 78 5e 22 ab 31 d6 12 0b 9c fd be 3a 2c 49 ac 07 f7 47 e1 e2 4c 98 c8 e1 80 ef ec de 2d 49 47 50 b4 a4 e6 cd cd 59 bf 2e 28 9b 46 af 77 73 f0 12 18 21 b0 fc 31 ca f3 f0 47 86 19 63 2a 47 6b f7 60 d4 c2 a3 a9 ea 9e b3 ca b9 2b 11 1d 9c 3b cb c3 39 5e 8f 1c 3b 1c 6e 47 07 fd cf 09 83 6f 08 50 3c 49 49 Data Ascii: Ux<#>I<2BLv-&{8UGfW#{paCqX~up9JSYhG>]D.A]qt5T$&L9w`x^"1:,IGL-IGPY.(Fws!1Gc*Gk`+;9^;nGoP<II
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 74 38 3f 6b ee fc bd 0a 97 e2 7d 70 94 dc 7a d2 fe e8 30 d7 73 06 ff e6 b7 15 51 5c ba b1 9c a8 b0 e3 fd 0f de 9a 89 46 02 f7 7e 72 97 f4 fb 59 3c 20 18 52 00 27 40 de e6 ba 9e ee 83 ba e9 4a 3c 7f d2 da a7 f0 29 47 01 3f 29 de 07 0e 81 7f f0 f4 61 41 b8 bb 37 9f 94 e8 7f ab aa f2 1b 93 20 3d 5d 07 92 e7 92 9d 0f d6 a1 17 fe dd 4a 86 eb 74 20 76 a7 b3 89 6a 6a dd 0b ec 41 12 1e dc 81 ab 90 67 94 ed 10 41 d0 03 bd 8c d3 af fd a3 44 34 0f 2f fb f4 f0 ce 37 9a d8 b1 2f 67 86 e9 51 92 d4 15 d7 28 5c 38 f3 e6 c9 92 f3 3f 5c 3e f8 f0 ad 0c 85 7d 19 cf f7 96 2b 97 af 0f 3f bd 97 ce f5 f1 3f fe 6e 39 df 38 48 89 2b 9c 4a 1c 0b 6f 7d eb c4 f2 cf fe e4 ad e5 f0 c9 1d 9d 7f 45 30 19 bd 16 78 a8 b1 d6 e8 9e 2c d3 b1 e9 c2 97 d7 3b c7 2d cb db 6f 95 f0 53 97 ff 6b d7 Data Ascii: t8?k}pz0sQ\F~rY< R'@J<)G?)aA7 =]Jt vjjAgAD4/7/gQ(\8?\>}+??n98H+Jo}E0x,;-oSk
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 5e a6 b8 41 32 ed e1 a3 25 98 bd 71 6e f5 fe 77 bf 13 4e 1d ac 58 ed a3 d5 87 1f 7c 38 b6 c5 c3 9c 54 60 22 d0 f5 fd 3f 7c a3 02 c2 d3 25 56 16 cc ed d6 3a 69 b1 2d d6 4b a4 bb 72 f1 d1 ea 2f fe ef bf 5f 7d f4 eb 4b 3d 5f 21 cb be f8 62 30 8d 97 a2 7b 1d b6 4d b4 50 e4 94 04 8b 47 08 5a a7 97 a5 23 3c ee 7c ac 8d 1e 2a a8 79 a0 40 74 cd f0 fb 8c 2f 06 e3 e3 0c ee eb 33 ba f3 e5 b3 ce 22 da 61 b4 2b 6a 52 a8 b5 ad f3 3e 7a 6a 63 75 f2 dc f1 9c 1c f1 f1 ed 5d 7f ad 24 c2 0a ea fe e8 4f de af e0 ee 5c b8 1a 64 f0 81 e0 30 72 23 e7 24 3e 43 e6 25 fa 47 0e eb 8e f4 9b df 7e 55 87 f0 eb ab e3 87 0f ae ce 9c 3e d2 7a 5b 73 5d af e9 42 0a cd f1 b7 db 15 a4 dd ba 55 82 64 8e b2 9b 15 29 49 5e df 1b 5c f1 c7 47 d1 f9 95 af 4a 1e 2d 10 43 47 6e eb 83 4f e4 fc 24 91 Data Ascii: ^A2%qnwNX\|8T`"?\|%V:i-Kr/_}K=_!b0{MPGZ#<\|*y@t/3"a+jR>zjcu]$O\d0r#$>C%G~U>z[s]BUd)I^\GJ-CGnO$
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: 2c 17 74 f8 51 c7 ad 8d f8 e5 f9 13 c9 9c 07 ab cf 9a 66 f0 f9 57 1f 67 2e 08 60 ec 2b b8 9a 93 2a 5d e1 dc a9 ef ac be f5 cd ef 4e 41 dd 4f 7f fa d3 f8 24 a7 62 41 95 12 78 ae 96 dc fa d1 87 9f 45 9b 0a 9a 2d dc be e7 87 39 1f fa b8 33 e3 2c f6 9d 4d 32 38 59 c2 92 60 3d e7 94 a9 56 8a 00 c7 e1 64 df ed c3 19 81 9a f7 dc 8f ae 0a df 97 a4 cb ee e3 7c b3 01 3c ca 59 b1 47 39 b0 4d 51 3b 76 ac fd 24 eb be fe aa 22 e0 1c 97 68 e7 f0 d1 3a 08 b6 af 87 4d 23 93 54 78 a4 b1 d4 ef bd 53 42 ed 77 7f b8 3a b4 ff 54 0e f4 9c 8b e9 97 78 e4 ad 5b f1 d8 92 13 37 e3 1b d7 6f ff a6 e9 51 bf ea 81 45 fd d3 e5 ac ca 33 67 8b cb 36 6d 7a 5e f6 e7 35 6b fa ff ff 6c 9d fd 61 3e d2 85 73 b6 cb e5 9d d9 ab 1f ec ba 9f 9f f7 06 2b e2 66 85 2a 9f a7 4b df e8 3b 1b 96 ed b5 91 Data Ascii: ,tQfWg.`+]NAO$bAxE-93,M28Y`=Vd\|<YG9MQ;v$"h:M#TxSBw:Tx[7oQE3g6mz^5kla>s+fK;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:58 UTC	609	OUT	GET /icon.png HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:58 UTC	268	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:58 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 30 Dec 2017 05:15:52 GMT ETag: "6612f4-4f65-56187d7c45200" Accept-Ranges: bytes Content-Length: 20325 Content-Type: image/png
2024-09-27 16:51:58 UTC	7924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 4e 42 49 44 41 54 78 da ed dd 77 9c 64 45 b9 ff f1 cf 6c 60 77 8b 2c 5c 04 45 58 40 54 54 0c 04 11 e1 5a 18 30 07 c0 ac 3f 11 05 45 0c b0 a4 22 cb 22 b9 80 65 41 10 41 b2 57 8c 57 10 44 44 b8 4a 29 88 22 20 46 40 44 a2 e4 a0 84 5a 36 ce ef 8f 73 16 76 67 bb 67 7a fa 74 77 9d f0 7d bf 5e f3 da d9 3e 7d 6a 9e ea dd e9 e7 e9 3a a7 aa 86 10 91 d2 b3 de 4c 03 56 1b Data Ascii: PNGIHDRxgAMAa cHRMz&u0`:pQ<bKGDCpHYsB(xNBIDATxwdEl`w,\EX@TTZ0?E""eAAWWDDJ)" F@DZ6svggztw}^>}j:LV
2024-09-27 16:51:59 UTC	8000	IN	Data Raw: bd d9 b0 60 1b 0e 98 93 ba 23 22 09 7d 3b b8 f8 db 82 6d 7c 85 ac 28 97 e6 6a 99 d3 db 15 00 ba fe 2f 45 4d 06 66 15 69 20 b8 78 0f 70 6c ea 8e 88 24 f2 34 d9 22 3d 5d b3 de bc 04 d8 3d 75 47 24 b9 96 39 bd 5d 01 b0 65 ea 68 a5 16 de 63 bd 19 f7 5e e5 23 78 e0 9e d4 1d 11 49 e0 e8 e0 e2 bf 0a b6 31 0b ad f0 27 6d 72 fa 32 05 80 f5 66 39 e0 65 a9 a3 95 da 38 71 b4 85 28 c6 12 5c 9c 43 76 29 40 a4 49 ee 04 4e 28 d2 80 f5 e6 1d c0 bb 53 77 44 4a e1 65 79 6e 5f 4a ab 11 80 8d 18 7b 93 20 91 4e 6d 04 7c b1 48 03 c1 c5 ef 02 57 a7 ee 88 c8 00 ed 1b 5c 7c a6 db 93 f3 a2 fb c4 d4 9d 90 d2 98 44 f6 5e bc 94 56 05 c0 ab 52 47 2a b5 33 d3 7a b3 7a c1 36 f6 00 16 a5 ee 88 c8 00 5c 15 5c fc 61 c1 36 be 88 46 72 65 69 cb e4 76 15 00 32 08 ab 00 5f 2d d2 40 70 f1 46 e0 Data Ascii: `#"};m\|(j/EMfi xpl$4"=]=uG$9]ehc^#xI1'mr2f9e8q(\Cv)@IN(SwDJeyn_J{ Nm\|HW\\|D^VRG*3zz6\\a6Freiv2_-@pF
2024-09-27 16:51:59 UTC	4401	IN	Data Raw: 81 2f 2f fe 4b 70 f1 22 e0 b7 a9 3b 22 52 52 bb e6 39 ac b4 4a 5d 00 00 04 17 ff 0f 38 27 75 1c 22 35 73 52 70 71 99 fd 37 ac 37 2f 62 f4 f5 fe 0f cf 9f b3 98 96 f0 16 59 d6 39 79 ee 2a b5 d2 17 00 b9 7d 80 07 53 07 21 52 13 8f 03 be cd b1 53 80 d1 76 03 5c 01 f8 da e2 bf e4 fb 99 5f 9e ba 43 22 25 f2 20 25 d8 ea b7 13 95 28 00 82 8b 8f 01 7b a4 8e 43 a4 26 8e 69 b5 e4 af f5 66 7b e0 7d 1d 9c ff 7e eb cd 76 4b fc fd 00 b2 e9 84 22 02 7b e4 39 ab f4 2a 51 00 00 04 17 bf 07 fc 24 75 1c 22 15 77 1f 4b 7c 82 5f cc 7a b3 62 ab c7 47 f1 b5 fc 9c c5 33 76 be 9f ba 63 22 25 f0 93 3c 57 55 42 65 0a 80 dc e7 81 4a 54 56 22 25 f5 d5 36 37 26 1d 01 bc 70 1c ed ac 9d 9f b3 d8 21 c0 82 d4 9d 13 49 e8 31 b2 1c 55 19 95 2a 00 82 8b ff 02 3e 97 3a 0e 91 8a ba 0d 38 6b e4 Data Ascii: //Kp";"RR9J]8'u"5sRpq77/bY9y}S!RSv\_C"% %({C&if{}~vK"{9Q$u"wK\|_zbG3vc"%<WUBeJTV"%67&p!I1U*>:8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:51:59 UTC	360	OUT	GET /icon.png HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:51:59 UTC	268	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:51:59 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 30 Dec 2017 05:15:52 GMT ETag: "6612f4-4f65-56187d7c45200" Accept-Ranges: bytes Content-Length: 20325 Content-Type: image/png
2024-09-27 16:51:59 UTC	7924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 0d d7 00 00 0d d7 01 42 28 9b 78 00 00 4e 42 49 44 41 54 78 da ed dd 77 9c 64 45 b9 ff f1 cf 6c 60 77 8b 2c 5c 04 45 58 40 54 54 0c 04 11 e1 5a 18 30 07 c0 ac 3f 11 05 45 0c b0 a4 22 cb 22 b9 80 65 41 10 41 b2 57 8c 57 10 44 44 b8 4a 29 88 22 20 46 40 44 a2 e4 a0 84 5a 36 ce ef 8f 73 16 76 67 bb 67 7a fa 74 77 9d f0 7d bf 5e f3 da d9 3e 7d 6a 9e ea dd e9 e7 e9 3a a7 aa 86 10 91 d2 b3 de 4c 03 56 1b Data Ascii: PNGIHDRxgAMAa cHRMz&u0`:pQ<bKGDCpHYsB(xNBIDATxwdEl`w,\EX@TTZ0?E""eAAWWDDJ)" F@DZ6svggztw}^>}j:LV
2024-09-27 16:52:00 UTC	8000	IN	Data Raw: bd d9 b0 60 1b 0e 98 93 ba 23 22 09 7d 3b b8 f8 db 82 6d 7c 85 ac 28 97 e6 6a 99 d3 db 15 00 ba fe 2f 45 4d 06 66 15 69 20 b8 78 0f 70 6c ea 8e 88 24 f2 34 d9 22 3d 5d b3 de bc 04 d8 3d 75 47 24 b9 96 39 bd 5d 01 b0 65 ea 68 a5 16 de 63 bd 19 f7 5e e5 23 78 e0 9e d4 1d 11 49 e0 e8 e0 e2 bf 0a b6 31 0b ad f0 27 6d 72 fa 32 05 80 f5 66 39 e0 65 a9 a3 95 da 38 71 b4 85 28 c6 12 5c 9c 43 76 29 40 a4 49 ee 04 4e 28 d2 80 f5 e6 1d c0 bb 53 77 44 4a e1 65 79 6e 5f 4a ab 11 80 8d 18 7b 93 20 91 4e 6d 04 7c b1 48 03 c1 c5 ef 02 57 a7 ee 88 c8 00 ed 1b 5c 7c a6 db 93 f3 a2 fb c4 d4 9d 90 d2 98 44 f6 5e bc 94 56 05 c0 ab 52 47 2a b5 33 d3 7a b3 7a c1 36 f6 00 16 a5 ee 88 c8 00 5c 15 5c fc 61 c1 36 be 88 46 72 65 69 cb e4 76 15 00 32 08 ab 00 5f 2d d2 40 70 f1 46 e0 Data Ascii: `#"};m\|(j/EMfi xpl$4"=]=uG$9]ehc^#xI1'mr2f9e8q(\Cv)@IN(SwDJeyn_J{ Nm\|HW\\|D^VRG*3zz6\\a6Freiv2_-@pF
2024-09-27 16:52:00 UTC	4401	IN	Data Raw: 81 2f 2f fe 4b 70 f1 22 e0 b7 a9 3b 22 52 52 bb e6 39 ac b4 4a 5d 00 00 04 17 ff 0f 38 27 75 1c 22 35 73 52 70 71 99 fd 37 ac 37 2f 62 f4 f5 fe 0f cf 9f b3 98 96 f0 16 59 d6 39 79 ee 2a b5 d2 17 00 b9 7d 80 07 53 07 21 52 13 8f 03 be cd b1 53 80 d1 76 03 5c 01 f8 da e2 bf e4 fb 99 5f 9e ba 43 22 25 f2 20 25 d8 ea b7 13 95 28 00 82 8b 8f 01 7b a4 8e 43 a4 26 8e 69 b5 e4 af f5 66 7b e0 7d 1d 9c ff 7e eb cd 76 4b fc fd 00 b2 e9 84 22 02 7b e4 39 ab f4 2a 51 00 00 04 17 bf 07 fc 24 75 1c 22 15 77 1f 4b 7c 82 5f cc 7a b3 62 ab c7 47 f1 b5 fc 9c c5 33 76 be 9f ba 63 22 25 f0 93 3c 57 55 42 65 0a 80 dc e7 81 4a 54 56 22 25 f5 d5 36 37 26 1d 01 bc 70 1c ed ac 9d 9f b3 d8 21 c0 82 d4 9d 13 49 e8 31 b2 1c 55 19 95 2a 00 82 8b ff 02 3e 97 3a 0e 91 8a ba 0d 38 6b e4 Data Ascii: //Kp";"RR9J]8'u"5sRpq77/bY9y}S!RSv\_C"% %({C&if{}~vK"{9Q$u"wK\|_zbG3vc"%<WUBeJTV"%67&p!I1U*>:8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	162.159.137.66	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:03 UTC	710	OUT	GET /appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:03 UTC	453	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 16:52:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8c9d0082fa658c5f-EWR CF-Cache-Status: BYPASS Cache-Control: no-store Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct
2024-09-27 16:52:03 UTC	3124	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 70 70 6f 69 6e 74 6d 65 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 20 73 71 75 61 72 65 2e 73 69 74 65 20 61 70 70 2e 73 71 75 61 72 65 75 70 2e 63 6f 6d 20 73 71 75 61 72 65 75 70 2e 63 6f 6d 20 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 61 70 70 6f 69 6e 74 6d 65 6e 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 66 2e 73 71 75 61 72 65 63 64 6e 2e 63 6f 6d 20 73 71 75 61 72 65 2e 73 69 74 65 20 73 71 75 61 72 65 75 70 2e 63 6f 6d 20 61 70 69 2e 73 71 75 61 Data Ascii: content-security-policy-report-only: default-src 'self' appointments-production-f.squarecdn.com square.site app.squareup.com squareup.com maxcdn.bootstrapcdn.com; connect-src 'self' appointments-production-f.squarecdn.com square.site squareup.com api.squa
2024-09-27 16:52:03 UTC	1168	IN	Data Raw: 34 38 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 63 Data Ascii: 489<!DOCTYPE html><html><head> <title></title> <meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"><meta name="c
2024-09-27 16:52:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49764	151.101.1.49	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:04 UTC	650	OUT	GET /appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css HTTP/1.1 Host: appointments-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://squareup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:04 UTC	788	IN	HTTP/1.1 200 OK Connection: close Content-Length: 56266 x-amz-id-2: b1wwq8AUgqZIeyTfGzhowz1/4jaFwh+XozOyTcgSc4mrihmT5yuAGCxx5nR/icc5WGlvsYNkiTc= x-amz-request-id: 8H9C7HNCCQEHY8M1 Last-Modified: Wed, 26 Oct 2022 20:55:27 GMT ETag: "4cd3ec21b1460924277143880eac3e53" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Fri, 27 Oct 2023 02:55:26 GMT x-amz-version-id: 4jY6jpTHPVJYiEZyle2NTmdN963PGQNb Content-Type: text/css Server: AmazonS3 Via: 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 27 Sep 2024 16:52:04 GMT Age: 3980617 X-Served-By: cache-sjc1000111-SJC, cache-ewr-kewr1740033-EWR X-Cache: HIT, HIT X-Cache-Hits: 418, 1 X-Timer: S1727455925.531948,VS0,VE1
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 1f 8b 08 00 af 9c 59 63 02 03 ec bd ed 8e e3 c8 92 28 f6 df 4f c1 dd c1 b8 bb 66 44 35 3f f5 89 1d 9c c5 5d 2f 7c 81 5d db b8 67 71 71 e1 73 0f 0a 94 48 95 b8 4d 89 1a 92 aa ee 1a b9 0c 3f 86 0d d8 4f e2 1f 7e 17 bf 80 5f c1 f9 cd c8 2f 92 52 7d cc 48 a7 4e 9f e9 ae 62 66 46 46 46 46 66 46 44 46 46 fc 7f ff f7 ff f3 e5 a7 bf 73 f6 65 b5 4b 8a fc b7 6c bc ae 6b e7 31 18 fb e3 c0 f9 5f 9c 7f fd 8f ff e6 fc 4b be ce f6 75 86 7e 7b c8 9b 71 5e 7e 11 75 9d 9f be 24 55 93 af 8b 6c 94 d4 79 9a 8d d2 ac 49 f2 a2 1e 6d f2 87 75 72 68 f2 72 8f 7f 3c 56 d9 68 53 96 4d 56 8d b6 59 92 e2 7f 1e aa f2 78 18 ed 92 7c 3f da 27 8f a3 3a 5b 93 ca f5 71 b7 4b aa a7 53 9a d7 87 22 79 5a ac 8a 72 fd f5 39 39 a6 79 39 5a 27 fb c7 a4 1e 3d a2 7e 4a 51 21 df 17 f9 3e 73 41 bd c5 Data Ascii: Yc(OfD5?]/\|]gqqsHM?O~_/R}HNbfFFFFfFDFFseKlk1_Ku~{q^~u$UlyImurhr<VhSMVYx\|?':[qKS"yZr99y9Z'=~JQ!>sA
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 85 4b 6b 01 9d e6 72 8d 82 00 81 55 42 b5 0a 5d 3f 52 9d 48 ad b3 cb d2 fc b8 93 ea c4 6a 9d 3a db e5 58 40 95 6a 4d d4 5a 5a 8d a9 a8 41 36 79 17 29 30 68 b1 52 d9 82 6e fb f4 8b 54 a9 c8 36 0d ac 82 7f 97 2a 54 64 dc a0 06 f9 c0 aa 1c 11 23 54 6b b4 6b aa 12 8c 28 58 16 19 92 c2 db 73 04 c9 6d ac 2d 99 8f 66 8b 58 f1 61 4b 9b b7 47 e4 02 16 b2 fa 54 3c 37 08 ec b4 b8 d9 73 b2 6e b2 a4 41 b2 23 22 63 d3 a0 2e 91 4c 8c cb 3e 39 3e ab 99 15 45 7e a8 f3 5a 95 39 97 04 09 f1 91 57 5b 42 81 7b 5f 12 71 9b f3 58 86 7f 33 4b e4 b4 ca 0a ad e5 af ee 37 b4 95 9e f0 5f a4 68 d1 7e 64 b5 f6 a5 ab 01 92 7a c2 1a 24 1a 8a eb 13 51 13 6a 45 33 41 4f 5e 27 d0 ea 44 5a 9d 50 ad e3 eb 70 22 ad ce 44 ab 13 6b 75 f4 be 26 5a 9d 40 d4 21 7a a3 aa 9a 80 f2 83 02 7a a9 ac ad Data Ascii: KkrUB]?RHj:X@jMZZA6y)0hRnT6*Td#Tkk(Xsm-fXaKGT<7snA#"c.L>9>E~Z9W[B{_qX3K7_h~dz$QjE3AO^'DZPp"Dku&Z@!zz
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: fe 8a f2 b8 58 7d f3 b0 48 e1 09 48 b4 5c a6 26 d7 d8 cf 37 3a 5c 3c a4 05 3a 00 88 4d f3 70 2c 0a b2 89 e0 4e a8 4f 99 eb a6 49 bd 5d 95 49 95 3a a6 8f f7 f7 c4 3b ea b4 29 ca a4 21 77 3b c0 b4 2a 60 92 7d 08 61 82 7f ae b1 80 eb 12 63 03 ff 3e bc b3 14 b5 65 7d 91 b6 4a 67 78 9c b2 97 9b 52 01 1d c5 99 74 99 aa 94 63 4a 93 ed ef a4 9d df 52 cd 87 2a 4f dd 0a 75 c6 17 3a ff 20 56 87 f8 d0 c7 57 6a 45 30 23 a4 08 c9 31 80 ba cb 1d da d6 b9 52 87 65 26 5e c7 f5 dd 20 62 06 e9 68 ec 4f d8 ff a6 3f 3e 8f 77 25 1a 48 e6 18 ab 12 db b5 5c 83 fe 72 0e 4c a5 45 db 91 8b f7 7a 7e 6d 0b 4e bc b3 da 43 f3 c0 39 ed 90 74 4a 1a 22 fa c9 18 78 80 6a 41 3b c2 19 be 07 61 ff 33 51 2d 18 4a b5 81 30 95 16 2f a1 5a 70 21 d5 82 0b a9 16 02 52 04 e3 d8 44 ad 70 28 b5 7a 60 Data Ascii: X}HH\&7:\<:Mp,NOI]I:;)!w;`}ac>e}JgxRtcJROu: VWjE0#1Re&^ bhO?>w%H\rLEz~mNC9tJ"xjA;a3Q-J0/Zp!RDp(z`
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: a6 79 83 d9 0d e2 e0 7a 67 f7 62 da be 8d 29 20 f2 86 70 04 ea 64 9f 6f 9e f0 b6 f2 50 24 75 3d 1a 13 94 5d 52 c8 22 93 de df 13 33 1f 67 81 69 cb 02 6f 60 e8 89 bd eb dd f7 cf 20 e6 db 6c d7 b3 f8 92 39 27 56 68 3b ae 34 a0 6c 96 be 17 03 a8 e6 c3 2b 66 80 a1 94 7d 13 6e 88 bd 41 2a 6d 53 25 f5 d6 24 d4 bd 81 7e 39 8d ae d7 04 48 e9 f4 36 76 3f 6f 90 98 95 ed 90 c2 4a 58 4a 4c d7 e4 4d 6f 4d 82 d9 f5 2e 45 40 ac b7 39 5f 87 19 8c aa 6c 57 3e e2 d0 a4 d9 ae 63 1f a0 61 89 df 67 52 27 bd 07 ac 86 39 cd bb d0 87 3f cb ce 60 eb 36 c0 81 9b fe b8 fc f2 0a c3 7d c5 ad 7b 3a 3f 93 b9 28 36 ce 8b c6 d2 d1 da d6 db 00 a8 83 fb 7e 01 73 c5 73 12 79 96 1a fa 53 21 a9 04 5e 7b 1d e2 bd fa 4a f2 06 2c 22 84 4c 37 e6 41 f0 87 5e 15 46 fc 5f 8d cf bd 01 97 5d 1c 01 67 Data Ascii: yzgb) pdoP$u=]R"3gio` l9'Vh;4l+f}nA*mS%$~9H6v?oJXJLMoM.E@9_lW>cagR'9?`6}{:?(6~ssyS!^{J,"L7A^F_]g
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 37 7d cb 8e 91 ca b8 2a b1 b0 cd 84 0f a2 ca fc 89 2a b8 e5 fa b8 43 6b ce 41 aa a6 7b a8 32 c4 65 9f 91 6a ca 5b b0 7b b7 3a 2b b2 75 73 c2 ba 0d 3a c4 be f1 9c 78 68 d7 4a ab f2 80 b5 8d 96 73 1c d1 18 27 ea c2 d2 2d 48 22 49 16 36 db c1 29 f3 12 bc b9 20 e3 29 65 84 cf 6d 85 4a 2c b1 b6 57 9e 36 73 97 7c e7 c7 54 e4 61 9b 9e c0 9f 65 38 15 07 09 44 0b fd 6e c6 09 17 68 08 49 23 eb 23 07 47 4c d6 5a f8 d1 c5 eb b9 6e 95 d5 48 7e ac 7f 01 9f 70 0e 6f a1 5e 6a 59 3d 7f 58 af 33 5f 86 d1 e6 16 3b 81 14 59 c4 5b 81 4b 9a d8 30 e0 10 df 5d 0a 45 fc 0e e1 6c 90 c4 69 1a 83 e0 57 dc 47 be 5e 02 d6 52 8f 68 36 45 f4 a8 ee 82 cd d9 a5 65 52 8d 02 f7 f7 88 f7 8e 68 d5 3c 19 45 f0 67 72 62 d7 59 33 1a f3 9f b8 44 41 44 b5 d0 23 02 35 13 af e1 17 44 23 ba be f2 fd Data Ascii: 7}**CkA{2ej[{:+us:xhJs'-H"I6) )emJ,W6s\|Tae8DnhI##GLZnH~po^jY=X3_;Y[K0]EliWG^Rh6EeRh<EgrbY3DAD#5D#
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: f5 f9 1a 1d e0 ac 85 d5 43 06 fc 36 42 92 6d f1 e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa e3 6a fa 8f 75 35 2d 3d a6 d7 82 fa c8 e5 f7 f7 ac 1e 4f b1 e4 fd 28 5e db d2 f0 0f 21 b8 b6 a6 af ff e9 83 50 19 8a 25 80 54 d5 e6 70 22 91 55 3c 10 42 88 de 95 c3 28 02 6d 8a 9e 29 88 b7 d0 06 63 81 81 d9 02 fc de 98 5d 72 9b de 23 c3 72 53 d8 0f 6b 84 33 13 75 c4 0c fd 6c 1a b6 14 c5 c9 d8 9c b0 a9 b1 ad f9 8d be 09 08 8f 4d 5e bb f9 fe 31 41 43 34 c1 1b 99 9b 16 ae 88 3f 55 e4 75 e3 f6 40 39 99 c4 76 20 a8 b3 e8 03 f0 d9 30 66 0c 43 00 29 9d 95 74 30 6a 54 bf eb 65 1e 18 3e 8c c4 6c Data Ascii: C6Bmjjjjjjjjjjjjjjjjjjjjjjjjjju5-=O(^!P%Tp"U<B(m)c]r#rSk3ulM^1AC4?Uu@9v 0fC)t0jTe>l
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 5b b1 cc 86 97 ed be 40 98 61 0d b8 9c d3 99 0b 75 41 33 3d 55 cd 8a 86 45 3e 03 82 c5 f4 0d e1 7c 5c e0 7d 5c e0 bd ee 05 1e ad 88 95 37 b4 59 24 6d 4a 42 29 5a b7 67 c8 05 52 65 c4 7e c3 2f 60 54 48 3c 5f 41 bb ee 5a fe 6a eb e0 dc 68 c7 9d a8 14 c3 4a f9 2e e3 0c 1c 28 df 71 6e 11 51 8a 56 b7 5c b6 43 c7 76 9a 67 3b a0 9c c2 fc 27 a6 aa 62 c5 c8 cb 44 ef 97 37 f8 c5 bc e0 5e a2 88 04 91 bb 2d 8f 15 1c f8 04 f4 4f f2 b8 58 17 be 9c 9e 9a 7c 53 32 57 a3 d3 78 bd ed 2f 62 e7 76 bb 73 3c f7 24 c0 ee 4f 86 6e ae b1 41 47 d6 aa 2c bf 76 54 69 be e5 24 80 b7 a1 06 47 99 a4 05 c6 18 77 94 0b bb 9e ad 86 45 ee 22 1b 9b d8 1c 0d e7 c2 45 94 95 76 dd 70 2a 4f 70 77 13 b6 77 4f ac 6d 40 5a 22 2a 1d 42 99 d9 4e 99 b3 da 50 94 54 19 b4 4d f0 d1 9e 0e 32 10 f2 dd 19 Data Ascii: [@auA3=UE>\|\}\7Y$mJB)ZgRe~/`TH<_AZjhJ.(qnQV\Cvg;'bD7^-OX\|S2Wx/bvs<$OnAG,vTi$GwE"EvpOpwwOm@Z"BNPTM2
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 6b ad ba 34 a1 b7 30 90 a9 f9 b0 27 5d 67 97 1a af 1e 5f 51 28 79 be cd 8e 9b 61 18 aa d9 bf 0d 67 3a c3 0d 08 c8 4a 4e 71 f5 0e f1 ac 1c e3 62 71 6c b3 ac 71 d1 9e 5b 1e 1b a9 e3 91 a8 72 48 1e 32 56 03 3f 9e c0 1f dd cd b1 28 90 b4 24 c4 25 86 ac 7c e3 3d 01 77 e0 95 10 0e 25 d2 77 9a 09 79 2a 6f ea e9 47 6c 64 5a c6 72 cf 68 cf c2 7b 51 89 16 6c 63 36 6d bc a5 f8 72 a9 81 a7 07 e5 77 b6 89 bd 2b 36 06 db 54 b9 5b 21 b2 a6 14 8f 9a fa 0f 77 9b 26 bd cb c0 88 81 ea 96 e6 cb 00 b2 7b d4 a1 4d 2d 37 ac e0 64 d0 36 bc 3e 5d 47 1b d9 59 26 8a 1e 60 ce 98 fe e8 62 47 3e ee 83 0b c3 da 5a 70 54 2d 1f 36 24 7b 0d 1f 0a 92 e5 01 1f 65 23 7b 05 d2 43 97 45 ce 02 01 d4 20 20 4e 5d b6 18 3a 8c 0a bc 29 ff 23 58 45 d5 c5 05 f0 1c 6c e7 04 6d 38 21 de 49 58 05 86 be Data Ascii: k40']g_Q(yag:JNqbqlq[rH2V?($%\|=w%wy*oGldZrh{Qlc6mrw+6T[!w&{M-7d6>]GY&`bG>ZpT-6${e#{CE N]:)#XElm8!IX
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 8e 4e 63 25 9d dc ae 4e 94 e4 b3 92 3e 69 a3 19 35 6b 93 68 97 68 89 bf d3 ab f7 be a7 29 3d 58 52 62 86 38 66 36 ae 07 42 8b 19 0f 04 e6 2e 10 50 2b b2 d2 c4 7c 43 69 8d 0a ac 36 bf bf 27 e1 bd e4 b8 29 86 de e3 c9 98 18 ed 65 b7 ce 58 73 eb f4 4c 5d a0 31 e7 65 ca e3 04 9a 7a e1 77 8c 58 d9 85 71 80 25 29 3a 04 1f 44 00 d6 8f 40 3f 1f 81 7e 3e 02 fd 5c 67 a0 9f 0f 47 81 0f 47 81 0f 47 81 0f 47 81 0f 47 81 0f 47 81 0f 47 81 0f 47 81 0f 47 01 9b a3 c0 87 9e c8 f5 c4 5d 99 e2 08 b0 e8 34 c4 f3 7e fa 43 45 08 e0 61 c7 0d f1 01 d0 22 3c ee f6 0e bd 8d 55 83 04 a8 85 b5 b5 cc da e6 6f e7 81 bc d8 a1 48 aa c2 65 77 7a 31 b1 1b ce 64 71 af 7a 58 25 9f bd 11 f9 33 8e ee 84 a6 31 f3 3c 95 c5 f8 af 87 aa dc 1d 9a 93 08 6e e4 89 aa 1f 4c 48 bf f3 1d 40 7e b8 c2 1d Data Ascii: Nc%N>i5khh)=XRb8f6B.P+\|Ci6')eXsL]1ezwXq%):D@?~>\gGGGGGGGGG]4~CEa"<UoHewz1dqzX%31<nLH@~
2024-09-27 16:52:04 UTC	1378	IN	Data Raw: 55 df 33 98 e7 69 30 bf a0 b5 b4 1e 2a b4 57 9e ba c1 30 a3 85 34 fd 2c 76 72 dd 20 69 d6 ad b2 1d 12 f5 d9 7e 4d 6e 87 6a 04 17 e9 b1 e4 cb 67 5a 7c 27 25 3e b7 e8 3c 4c 67 b0 bf 83 ee 68 65 57 8f 58 b9 a4 13 59 7a d0 1e 6d 98 f5 2d 10 42 7d d4 5f c5 3a 2a fe 50 04 dc ca a8 0e 97 bd c0 3b b4 42 58 cb b0 fb f6 62 3c 0c f4 20 ea ca 4f 62 64 1f 50 f6 1c ea e3 c4 fd 38 71 ff 08 27 ee c7 96 f4 b1 25 b1 2d a9 fe 15 09 21 0f 0f a6 e8 a9 52 b0 65 10 b3 57 b2 b8 c7 5a 30 16 c9 03 43 9b 59 d1 9f e4 37 3d b2 7c 77 da ef fc 91 8b 3a 55 a0 42 4b 80 93 05 f5 1e d7 59 79 20 03 03 eb cc 59 1e 12 1d 0b 32 94 64 9f ef 12 6c db 3f c1 00 ab 0a 68 1a 64 15 53 2e a9 9e f5 31 f7 8d c6 90 d6 4f c4 31 b2 cf c0 fd 3d 0b 9b a4 e7 02 a3 ef f6 cd c4 f2 b5 94 6d 9c 12 33 63 34 22 2e Data Ascii: U3i0W04,vr i~MnjgZ\|'%><LgheWXYzm-B}_:P;BXb< ObdP8q'%-!ReWZ0CY7=\|w:UBKYy Y2dl?hdS.1O1=m3c4".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	162.159.137.66	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:04 UTC	883	OUT	GET /favicon.ico HTTP/1.1 Host: squareup.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://squareup.com/appointments/book/PPTFWW269H900/eternal-spring-acupuncture-little-canada-mn Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-NY; _savt=b7c03e80-8a6d-4708-aa48-ea195defed9a; __cf_bm=w.sNqQHENGIgSozIcWTc4md_TluzvAZCIjUk1K1xGnM-1727455923-1.0.1.1-wNSOYb78.8cMe3u9xwFPNxveXiaWFPVRft8pkUC4kAxN1XrJAKrw1P3dklkk2LK.iEmiRQGi61if_.ZtDiYaPw
2024-09-27 16:52:05 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:05 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 6518 Connection: close CF-Ray: 8c9d008aff077ca2-EWR CF-Cache-Status: BYPASS Accept-Ranges: bytes Cache-Control: no-store Last-Modified: Wed, 25 Sep 2024 18:27:37 GMT Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /favicon.ico x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Server: cloudflare
2024-09-27 16:52:05 UTC	532	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 00 00 00 c8 00 00 00 d2 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 d2 00 00 00 ca 00 00 00 77 00 00 00 00 00 00 00 73 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 7a 00 00 00 d6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 f6 00 00 00 fc 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 f7 00 Data Ascii: (& (N( swsz
2024-09-27 16:52:05 UTC	1369	IN	Data Raw: 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 37 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 36 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 2f 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 31 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 22 00 00 00 00 00 00 00 02 00 00 00 2f 00 00 00 35 00 00 00 35 00 00 00 30 00 00 00 04 00 00 00 00 00 00 00 18 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 Data Ascii: !76!66!/1"/550
2024-09-27 16:52:05 UTC	1369	IN	Data Raw: ff 00 00 00 ff 00 00 00 47 00 00 00 8d 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 a4 00 00 00 ac 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: G
2024-09-27 16:52:05 UTC	1369	IN	Data Raw: 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 Data Ascii: S.SS.S
2024-09-27 16:52:05 UTC	1369	IN	Data Raw: 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 19 00 00 00 23 00 00 00 a3 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 fe 00 00 00 f3 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f3 00 00 00 fe 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 b4 00 00 00 93 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii: #
2024-09-27 16:52:05 UTC	510	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	151.101.1.49	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:05 UTC	731	OUT	GET /images/fonts/sqmarket/sqmarket-medium.woff2 HTTP/1.1 Host: appointments-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:05 UTC	664	IN	HTTP/1.1 403 Forbidden Connection: close Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true x-amz-request-id: RQHJ798SEC63AK6E x-amz-id-2: d11H76U0PGSxjSZu4rsznWex8q/GcHuAkvvCr4yiafA81PdpaZjoD6XpRQcS50sCBumhL6xPkeI= Content-Type: application/xml Server: AmazonS3 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Date: Fri, 27 Sep 2024 16:52:05 GMT X-Served-By: cache-sjc1000092-SJC, cache-ewr-kewr1740022-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1727455925.370337,VS0,VE345 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method transfer-encoding: chunked
2024-09-27 16:52:05 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-09-27 16:52:05 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 52 51 48 4a 37 39 38 53 45 43 36 33 41 4b 36 45 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 64 31 31 48 37 36 55 30 50 47 53 78 6a 53 5a 75 34 72 73 7a 6e 57 65 78 38 71 2f 47 63 48 75 41 6b 76 76 43 72 34 79 69 61 66 41 38 31 50 64 70 61 5a 6a 6f 44 36 58 70 52 51 63 53 35 30 73 43 42 75 6d 68 4c 36 78 50 6b 65 49 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>RQHJ798SEC63AK6E</RequestId><HostId>d11H76U0PGSxjSZu4rsznWex8q/GcHuAkvvCr4yiafA81PdpaZjoD6XpRQcS50sCBumhL6xPkeI=</HostId></Error>
2024-09-27 16:52:05 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	151.101.1.49	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:05 UTC	732	OUT	GET /images/fonts/sqmarket/sqmarket-regular.woff2 HTTP/1.1 Host: appointments-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:05 UTC	663	IN	HTTP/1.1 403 Forbidden Connection: close Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true x-amz-request-id: RQHQYR8Y2SH4R1CS x-amz-id-2: lOgpEKMXzyAbqd5faf/clRwuysv9mGmCiQ2Vf/cHsTx6qzMEn9bl8qxOBP1g8lthmW2SckiLui0= Content-Type: application/xml Server: AmazonS3 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Date: Fri, 27 Sep 2024 16:52:05 GMT X-Served-By: cache-sjc1000134-SJC, cache-ewr-kewr1740033-EWR X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1727455925.438099,VS0,VE81 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method transfer-encoding: chunked
2024-09-27 16:52:05 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-09-27 16:52:05 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 52 51 48 51 59 52 38 59 32 53 48 34 52 31 43 53 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 6c 4f 67 70 45 4b 4d 58 7a 79 41 62 71 64 35 66 61 66 2f 63 6c 52 77 75 79 73 76 39 6d 47 6d 43 69 51 32 56 66 2f 63 48 73 54 78 36 71 7a 4d 45 6e 39 62 6c 38 71 78 4f 42 50 31 67 38 6c 74 68 6d 57 32 53 63 6b 69 4c 75 69 30 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>RQHQYR8Y2SH4R1CS</RequestId><HostId>lOgpEKMXzyAbqd5faf/clRwuysv9mGmCiQ2Vf/cHsTx6qzMEn9bl8qxOBP1g8lthmW2SckiLui0=</HostId></Error>
2024-09-27 16:52:05 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49769	151.101.1.49	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:07 UTC	730	OUT	GET /images/fonts/sqmarket/sqmarket-medium.woff HTTP/1.1 Host: appointments-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:07 UTC	661	IN	HTTP/1.1 403 Forbidden Connection: close Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true x-amz-request-id: 26MF47H9N2BKD6X3 x-amz-id-2: ilUC+IdBExt41ifKNLCUJVtysrzgZmgAuSCehcOBbSGZMg7F2+d0jK7XOMpXVQLI87aGeNazhXA= Content-Type: application/xml Server: AmazonS3 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Date: Fri, 27 Sep 2024 16:52:07 GMT X-Served-By: cache-sjc10070-SJC, cache-nyc-kteb1890031-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1727455928.843377,VS0,VE81 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method transfer-encoding: chunked
2024-09-27 16:52:07 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-09-27 16:52:07 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 32 36 4d 46 34 37 48 39 4e 32 42 4b 44 36 58 33 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 69 6c 55 43 2b 49 64 42 45 78 74 34 31 69 66 4b 4e 4c 43 55 4a 56 74 79 73 72 7a 67 5a 6d 67 41 75 53 43 65 68 63 4f 42 62 53 47 5a 4d 67 37 46 32 2b 64 30 6a 4b 37 58 4f 4d 70 58 56 51 4c 49 38 37 61 47 65 4e 61 7a 68 58 41 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>26MF47H9N2BKD6X3</RequestId><HostId>ilUC+IdBExt41ifKNLCUJVtysrzgZmgAuSCehcOBbSGZMg7F2+d0jK7XOMpXVQLI87aGeNazhXA=</HostId></Error>
2024-09-27 16:52:07 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49770	151.101.1.49	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:07 UTC	731	OUT	GET /images/fonts/sqmarket/sqmarket-regular.woff HTTP/1.1 Host: appointments-production-f.squarecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://squareup.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://appointments-production-f.squarecdn.com/appointments/assets/appointments-d7c677b36eb29cf392d930057d52548ab0f0ee6f4d8bcbafaeb11d71731f64e6.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:07 UTC	661	IN	HTTP/1.1 403 Forbidden Connection: close Access-Control-Allow-Methods: GET Access-Control-Allow-Credentials: true x-amz-request-id: 26MA41QZEXFMAXQ5 x-amz-id-2: 7ZSq3r6hhRhyT0slCMkhdeA6dr3YoSppfdA1J05GoyP/gzCkHfGRv7drQnq+QbLcCzgpM+welQ0= Content-Type: application/xml Server: AmazonS3 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Date: Fri, 27 Sep 2024 16:52:07 GMT X-Served-By: cache-sjc10033-SJC, cache-nyc-kteb1890066-NYC X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1727455928.843591,VS0,VE81 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method transfer-encoding: chunked
2024-09-27 16:52:07 UTC	4	IN	Data Raw: 66 33 0d 0a Data Ascii: f3
2024-09-27 16:52:07 UTC	243	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 32 36 4d 41 34 31 51 5a 45 58 46 4d 41 58 51 35 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 37 5a 53 71 33 72 36 68 68 52 68 79 54 30 73 6c 43 4d 6b 68 64 65 41 36 64 72 33 59 6f 53 70 70 66 64 41 31 4a 30 35 47 6f 79 50 2f 67 7a 43 6b 48 66 47 52 76 37 64 72 51 6e 71 2b 51 62 4c 63 43 7a 67 70 4d 2b 77 65 6c 51 30 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>26MA41QZEXFMAXQ5</RequestId><HostId>7ZSq3r6hhRhyT0slCMkhdeA6dr3YoSppfdA1J05GoyP/gzCkHfGRv7drQnq+QbLcCzgpM+welQ0=</HostId></Error>
2024-09-27 16:52:07 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49768	162.159.137.66	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:07 UTC	531	OUT	GET /favicon.ico HTTP/1.1 Host: squareup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: squareGeo=US-NY; __cf_bm=w.sNqQHENGIgSozIcWTc4md_TluzvAZCIjUk1K1xGnM-1727455923-1.0.1.1-wNSOYb78.8cMe3u9xwFPNxveXiaWFPVRft8pkUC4kAxN1XrJAKrw1P3dklkk2LK.iEmiRQGi61if_.ZtDiYaPw
2024-09-27 16:52:08 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:07 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 6518 Connection: close CF-Ray: 8c9d009d0fa942f4-EWR CF-Cache-Status: BYPASS Accept-Ranges: bytes Cache-Control: no-store Last-Modified: Wed, 25 Sep 2024 18:27:37 GMT Set-Cookie: squareGeo=DELETE; path=/; SameSite=Strict; Secure; max-age=0 Strict-Transport-Security: max-age=631152000; includeSubDomains; preload Vary: Accept-Encoding access-control-allow-headers: x-kpsdk-cd, x-kpsdk-ct Set-Cookie: squareGeo=US-NY; Domain=squareup.com; path=/; SameSite=Strict; Secure; max-age=2419200 x-content-type-options: nosniff x-download-options: noopen x-envoy-decorator-operation: /favicon.ico x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Server: cloudflare
2024-09-27 16:52:08 UTC	532	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 28 05 00 00 26 00 00 00 20 20 00 00 01 00 20 00 28 14 00 00 4e 05 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 00 00 00 c8 00 00 00 d2 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 cd 00 00 00 d2 00 00 00 ca 00 00 00 77 00 00 00 00 00 00 00 73 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 7a 00 00 00 d6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 f6 00 00 00 fc 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 fd 00 00 00 f7 00 Data Ascii: (& (N( swsz
2024-09-27 16:52:08 UTC	1369	IN	Data Raw: 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 37 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 36 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 36 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 21 00 00 00 00 00 00 00 2f 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 31 00 00 00 00 00 00 00 17 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 00 00 ff 00 00 00 fd 00 00 00 22 00 00 00 00 00 00 00 02 00 00 00 2f 00 00 00 35 00 00 00 35 00 00 00 30 00 00 00 04 00 00 00 00 00 00 00 18 00 00 00 f5 00 00 00 ff 00 00 00 cd 00 00 00 cd 00 Data Ascii: !76!66!/1"/550
2024-09-27 16:52:08 UTC	1369	IN	Data Raw: ff 00 00 00 ff 00 00 00 47 00 00 00 8d 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 a4 00 00 00 ac 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 Data Ascii: G
2024-09-27 16:52:08 UTC	1369	IN	Data Raw: 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 53 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 00 00 00 f6 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 Data Ascii: S.SS.S
2024-09-27 16:52:08 UTC	1369	IN	Data Raw: 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 1c 00 00 00 19 00 00 00 23 00 00 00 a3 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ad 00 00 00 ad 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 fe 00 00 00 f3 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f6 00 00 00 f3 00 00 00 fe 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 b4 00 00 00 93 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff 00 00 00 ff Data Ascii: #
2024-09-27 16:52:08 UTC	510	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:09 UTC	666	OUT	GET /about%20us.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:09 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 20 Nov 2022 17:40:10 GMT ETag: "6612f0-1359-5edea6e2b4c81" Accept-Ranges: bytes Content-Length: 4953 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:52:09 UTC	4953	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 62 6f 75 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Abou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49771	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:09 UTC	586	OUT	GET /css/titleBar.css HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eternalspringacupuncture.com/about%20us.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:09 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:09 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 19:52:05 GMT ETag: "680406-260-5617ff7854340" Accept-Ranges: bytes Content-Length: 608 Vary: Accept-Encoding Content-Type: text/css
2024-09-27 16:52:09 UTC	608	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 20 2d 20 31 20 43 6f 6c 20 50 6f 72 74 66 6f 6c 69 6f 20 28 68 74 74 70 73 3a 2f 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 2d 6f 76 65 72 76 69 65 77 73 2f 31 2d 63 6f 6c 2d 70 6f 72 74 66 6f 6c 69 6f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 42 6c 61 63 6b 72 6f 63 6b 44 69 67 69 74 61 6c 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2d 31 2d 63 6f 6c 2d 70 6f 72 74 66 6f 6c 69 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a Data Ascii: /! Start Bootstrap - 1 Col Portfolio (https://startbootstrap.com/template-overviews/1-col-portfolio) * Copyright 2013-2017 Start Bootstrap * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:10 UTC	638	OUT	GET /images/aboutUs/fei.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/about%20us.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:10 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 21:12:29 GMT ETag: "680408-2dd453-56181170da940" Accept-Ranges: bytes Content-Length: 3003475 Content-Type: image/jpeg
2024-09-27 16:52:10 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 2c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 09 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8a 01 1b 00 05 00 00 00 01 00 00 00 92 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9a 01 32 00 02 00 00 00 14 00 00 00 a6 87 69 00 04 00 00 00 01 00 00 00 ba 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 37 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 37 3a 30 31 3a 30 39 20 31 30 3a 35 38 3a 33 30 00 00 20 82 9a 00 05 00 00 00 01 00 00 02 40 82 9d 00 05 00 00 00 01 00 00 02 48 88 22 00 03 00 00 00 01 00 02 00 00 88 Data Ascii: JFIFHH,ExifMM*z(12iAppleiPhone 7HHPhotos 3.02017:01:09 10:58:30 @H"
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: a8 b1 58 f2 4f da 07 e0 47 8b be 04 f8 be 1f 0d f8 b5 62 68 ee a1 13 45 71 6c 5a 48 65 5c 80 76 ee 00 82 8d c1 56 50 c0 60 e3 04 13 e3 56 70 01 2f 9a 0e 55 b8 1f 4e b5 f4 d7 8d 3c 6b ac fc 4d b5 96 0d 46 d2 69 ee 6e cb cf 7b 75 7d 20 79 1e 57 c1 53 02 e3 08 1b 03 71 39 27 80 40 c7 3f 39 49 6f 3e 9f 30 b5 ba 5d 8e 77 60 7d 3a fe 9f e7 bd 6e a4 ad 62 6c 5e b9 24 c4 01 6e 23 1c 67 b0 ee 73 5f 59 fe cb 3e 0a f8 99 e0 5f 13 59 7e d0 be 1d d2 ec 6f 6d 7c 3c d2 34 31 6a 1b 9e 1b cc a3 c7 3c 71 24 67 7f 99 12 e5 d1 ce 00 65 c8 2d b5 94 fc 98 48 30 fc c3 8c 10 7e 9d 2b db 7e 1f fe d1 ff 00 10 7e 16 78 3c f8 37 c3 89 6c 63 8e ee 4b a8 6e 67 57 95 ed fc d0 3c c4 8d 49 d8 14 91 93 95 3d 4f 7c 11 93 f2 1a b7 53 e9 ff 00 8a 7f 1e 75 ef 8e f6 ee 9a 9e a5 1d 8d a6 9f e7 Data Ascii: XOGbhEqlZHe\vVP`Vp/UN<kMFin{u} yWSq9'@?9Io>0]w`}:nbl^$n#gs_Y>_Y~om\|<41j<q$ge-H0~+~~x<7lcKngW<I=O\|Su
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 72 4c 9b 5b ab 64 e7 e6 f6 f5 ed 8a d0 f0 6f c4 eb 1d 1e df 53 8b 52 d2 4d e5 f4 84 ca 97 45 80 c8 72 7e 43 c8 c7 3d c5 70 d2 e9 f7 11 da 09 9d 59 44 63 04 9e e2 b9 7f dd 84 26 43 e5 a3 f1 9c f6 ed 5a 59 75 33 69 b3 aa 3e 29 8a f6 19 ef 35 47 db 73 97 62 a8 31 1a f7 e2 be b0 f8 72 89 79 a1 c1 2c 9f 33 c9 12 26 4f f7 54 71 5f 00 5f d8 5e 45 3c 06 31 88 8b 83 f2 9c ee e7 f8 87 71 8f f3 e9 fa 51 e0 a8 6d 22 d0 74 f1 67 00 8d 0e 3e ef 5c 7a 1f 5c 74 a8 92 8a 57 42 69 d8 ca f8 8f 6b 9f 0a c9 12 b8 89 24 6d 9b 87 3d 7d 41 38 1f 5a f8 e3 44 d2 e2 d0 6e 76 44 09 24 00 5f bb 0f 7a f7 ff 00 da 5b c4 52 e8 3a 16 9f a6 43 70 63 fb 53 b3 cf 1a 92 18 84 da 53 be 08 cf 3f 55 15 e0 3a 85 c4 d1 f8 7a 0d 4e 00 43 b0 46 c9 1d 15 c6 54 fe 3d 6a a1 f0 9a 53 56 47 5c d7 73 cb Data Ascii: rL[doSRMEr~C=pYDc&CZYu3i>)5Gsb1ry,3&OTq__^E<1qQm"tg>\z\tWBik$m=}A8ZDnvD$_z[R:CpcSS?U:zNCFT=jSVG\s
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 3d 05 49 67 7f 6d aa 99 12 d4 15 f2 89 dc 87 d0 77 fa 7a 50 da 39 e5 26 72 36 9a 4f d9 75 3c 6b ad fe 8a e8 ad 0b 28 e0 b8 fb c1 bd 00 18 af bf ff 00 62 1b 2f 03 49 f1 43 c4 36 7e 2d b5 8a e6 36 d1 d0 db 5c 4b 96 48 40 90 33 e3 dc b0 43 d3 24 2f 1f 76 be 39 9e dc 5d 5b 9b 6b 85 ca 9e c3 a8 fc b9 ab ff 00 0f e2 f8 9d a3 6b f7 f7 bf 0b a0 b9 b9 9b 44 b5 6b 9b 99 a3 8b cd 58 21 00 e4 c8 7e ee 18 64 2a b7 24 83 80 70 71 4a d7 b9 9f d9 22 fd a9 ac 3e 1e 69 9f 18 b5 6f 0d 7c 34 b8 96 e7 47 d2 96 3d d2 48 7e 4f 38 2f cf 14 60 e0 aa c4 08 56 c8 00 9c e0 62 be 6e d1 3c 47 aa f8 6e fb ed ba 14 a6 0b 82 ca 4b 83 9d c1 0f 00 8e 32 39 38 1e f5 bb e3 af 11 6b 3e 31 d6 af bc 63 af 5e 7d b2 f7 5a c4 d2 3e 16 3d d8 50 a3 08 a0 6d 52 a0 60 e3 9e bd 73 5c 2e 99 0b dd 9f dd Data Ascii: =IgmwzP9&r6Ou<k(b/IC6~-6\KH@3C$/v9][kkDkX!~d*$pqJ">io\|4G=H~O8/`Vbn<GnK298k>1c^}Z>=PmR`s\.
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 73 7b d9 9f 53 78 8b e1 a7 8a 10 dd 5d 68 b6 ab 7c 90 28 61 18 6c 6e cf 2d 9e 33 c7 e3 5f 31 5c 5c c9 69 e2 39 ac 2f 2d 4a 4d 19 5c 28 cb 60 b2 83 81 80 09 c0 3d eb ec 4f 81 3e 34 f1 a6 bf ae 2e 8d a8 dc 0b 9d 3a 32 07 98 e0 79 ac 33 82 8c 78 04 63 a1 c6 7d 4d 5c d7 be 14 7c 3d f1 6f 8d f5 57 d3 7c 46 f6 fa bc 8e d3 49 12 22 b4 8b 20 00 b0 db d8 60 0c 8c fb d0 a5 ca 0d 73 6a 8f 95 f5 4b 7b eb 7d 0d 75 a9 10 fd 92 66 f2 c4 aa 0b 05 61 c1 0c dd 8f a5 70 d6 ab 36 a5 23 b0 60 aa 3f 88 fd de 3d 6b ee 5b fb 6b 5d 0a d0 f8 43 5b b4 58 60 bc 8f 77 97 22 ec 5b a5 39 05 f9 e8 de 87 af a6 7a 57 cd 1e 33 f8 77 ad 78 7a d6 4b dd 1e 15 9b 4a 6c ec 3b 87 9a a0 0e 9b 47 2c 79 fe 13 cf 5c 0e 95 a4 65 a9 9f 2b 48 f1 7b 9b b4 b6 1b 73 bc 93 b4 e4 f5 ff 00 1a f4 ef 06 7c 38 Data Ascii: s{Sx]h\|(aln-3_1\\i9/-JM\(`=O>4.:2y3xc}M\\|=oW\|FI" `sjK{}ufap6#`?=k[k]C[X`w"[9zW3wxzKJl;G,y\e+H{s\|8
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 55 7a d8 d5 bf d6 b5 5d 68 63 56 98 dc cf 28 c1 95 8f cc 57 a6 31 e8 2b e8 cf 0b c9 14 9a 65 b5 cb e4 1c a9 8b 1c a8 c7 1c e3 be 6b e5 f8 90 4a 7e 66 db b0 64 63 bf 3c 8a f7 af 0d 6b d1 68 be 16 91 f5 17 65 12 fe f1 17 f8 14 ae 57 3c f0 18 e0 7d 78 cd 74 49 1c d1 5a 8f f8 d7 14 a7 c4 1a 65 ec 4a 8d b6 22 ef 29 3f 33 97 c1 40 4f 4d ab 83 81 5b fe 17 56 ba b4 83 00 2b 49 10 27 3c 57 99 de 6b 13 78 a6 c9 11 f1 2b c0 4b 0c 8c 7c df 5f e5 5e a7 e0 ed 8b 14 6a ff 00 34 88 a0 04 ee a0 f5 3f 9f 4a 87 b0 e5 10 f1 51 b2 d2 34 c8 a5 89 d8 19 89 0c 7b e0 75 03 b6 2b c1 34 3d 36 fa e7 56 97 50 bf 53 35 b6 7f 74 49 e1 81 27 a6 7d 2b eb ab bf 87 57 1e 3d d1 76 5c 3b e9 e2 17 65 05 a3 60 49 c7 61 c6 41 18 c1 1c 0f e7 d0 59 fc 1b d3 f4 ef 03 c1 a6 c8 f2 6a 53 c4 d2 01 26 Data Ascii: Uz]hcV(W1+ekJ~fdc<kheW<}xtIZeJ")?3@OM[V+I'<Wkx+K\|_^j4?JQ4{u+4=6VPS5tI'}+W=v\;e`IaAYjS&
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 75 f1 53 54 f0 7c de 3f d0 ed c5 a6 8b 64 0a 99 a7 6f 29 ca e7 62 98 d4 8f 9f 79 e0 11 df 3d 2a 6f f8 43 7e 28 6b 56 89 77 cc 90 49 92 1b 79 c9 ff 00 7b 8e 09 ac 39 2c f7 35 6f 4b 58 fa d2 d7 43 b3 de 56 dd 84 a9 ea a7 77 1e bc 76 ff 00 f5 d6 9d 87 c3 bb 9d 66 59 20 8d 4e c9 01 00 80 7a 11 8f c0 f3 d6 be 43 d0 b4 9f 8d 5e 15 da 34 4b e9 6d 81 24 ed 57 32 05 07 d3 70 23 f0 c5 75 d6 ba df ed 13 1c ca 8b ad de 2a 16 c8 c0 d8 c4 fe 18 fd 4f e1 4f 47 d4 ce c6 f7 c4 cf 86 7a 0f 83 75 a8 34 49 af d6 ea 2b c5 de 42 15 2e 98 fb ca c4 7c b9 04 e3 03 b6 3b d7 01 e2 7f 83 1e 16 5d 09 ef fc 23 0d cd e5 f8 c9 c0 75 31 90 07 75 c7 04 63 ae 40 c0 e9 5e d5 f0 1f e0 36 a5 f1 d7 5d d5 af f5 ff 00 10 c5 63 a4 68 f2 79 9a 89 f3 83 6a 32 b4 c1 d8 c9 1a 10 c1 17 72 e4 c9 27 1d Data Ascii: uST\|?do)by=oC~(kVwIy{9,5oKXCVwvfY NzC^4Km$W2p#uOOGzu4I+B.\|;]#u1uc@^6]chyj2r'
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 9f f3 d2 ba 9f 13 69 b0 d9 40 2e d2 41 95 01 48 55 ea 07 1c fb d5 32 92 3e 8a f0 d7 ed 19 ac e9 c2 d7 49 f1 8d 97 f6 b6 96 71 0b dc 3e 4d c2 27 45 24 72 1b 6f 71 8d c4 73 92 7a f3 1e 3a f0 77 82 66 4b 3f 17 fc 34 9c 6d 62 4c 70 a8 de 55 94 fd e6 62 59 81 cf 1b 48 e3 b7 5a f9 fe c3 56 2c 59 2e df 78 6c 10 4f 60 2b 73 4b bc bb 4b f8 20 b1 be 1a 7d bc 8d 86 6e a0 03 92 48 1e a7 f0 eb d7 1d 33 71 1b 8b 4e e8 fd 1b d0 7c 0f 73 f1 d3 4e d2 74 ed 2c 5a 4d a9 47 17 db 01 b8 6f dd c7 b0 85 97 19 07 9c 91 80 41 f5 c6 06 47 c6 7f 1f be 15 6b 3f 06 fe 23 af 86 f5 3b bb 4b d6 d6 6d 45 f4 2f 66 1d 44 48 64 78 b6 3a 3a 8d 8d 94 3d cf 18 3c 67 03 d6 3e 1a 6b 3a 7d de a1 26 83 a2 5e cf 05 cc 43 ce 8d e2 73 09 56 ce 08 1d ce 73 9c 11 8e 39 1d 73 f3 bf c5 ab 7d 5b 48 f1 ed Data Ascii: i@.AHU2>Iq>M'E$roqsz:wfK?4mbLpUbYHZV,Y.xlO`+sKK }nH3qN\|sNt,ZMGoAGk?#;KmE/fDHdx::=<g>k:}&^CsVs9s}[H
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 02 3b 13 5b 3a df 8c 2e 2f ec c5 9d e5 8c 33 da ee 26 45 2c d8 75 ed f7 48 38 1d 78 ef ed 5c 89 d9 dd 1b bd 11 c4 f8 6b 46 b6 b8 f0 ad c5 c7 86 2e cd c4 b6 d2 37 9c 18 ed de 02 f1 c7 66 c7 6f e5 5f 62 f8 37 f6 3b f8 a5 e3 4f 80 ba 2f c5 ff 00 0b df c3 ab ea 57 12 33 3e 8d b0 21 4b 6d ec b9 13 17 23 7a ed c9 f9 39 07 a7 7a f8 2b 48 9e fb c3 7a 84 f0 e8 77 6a 2d 65 52 d9 65 ca 9d eb 8d a5 4f 52 3a 7f 2a fa db c3 bf 1f fc 49 e1 6f 87 d2 78 4b c0 fe 37 bd d1 2d cc 04 08 a2 75 47 59 18 92 e2 27 93 2e 83 39 23 6e 30 7d 33 92 e5 bd c9 dc f9 5f c6 1a 3d f6 8d a8 cb f6 cb 65 b7 c3 32 fc 8d 98 cb 0e 70 a7 bf e7 d7 da bd af 4f fd 99 f5 fd 5b f6 7c d0 fe 39 78 4f 52 6b db bb cb 8b 98 ef b4 e9 00 45 8a 28 a7 92 24 78 98 12 58 fc 81 dc 37 24 31 2b c2 9a e0 6e b5 65 7f Data Ascii: ;[:./3&E,uH8x\kF.7fo_b7;O/W3>!Km#z9z+Hzwj-eReOR:*IoxK7-uGY'.9#n0}3_=e2pO[\|9xORkE($xX7$1+ne
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 3c 7b d7 3c 11 d3 69 24 36 3f 5b 7f e0 9a 9f b3 67 c3 fd 66 ce e3 c5 be 37 f0 c5 cf fc 25 2c 82 e2 d2 6d 5a 00 6c 65 d2 ee e0 02 39 a1 86 51 89 43 9d fb 5c 02 08 3c 36 47 1b 2d 09 db 63 f1 13 cb 92 dd 8c 12 30 72 aa 32 ca db 97 3e c4 70 47 7a 56 93 cb 3b b0 37 11 d6 bf 4b 7f e0 a4 1f b2 ef c3 9f d9 f7 c5 7e 1a d5 3e 14 da 9b 0d 2b 53 49 60 bf 84 b9 70 2e 41 de a5 03 fd d5 28 40 e3 be 39 e4 81 f1 df c2 ff 00 80 5e 2c f8 c6 6e a1 f0 8a 19 9a d4 44 65 95 ff 00 75 6d 00 90 90 0c 92 36 07 18 24 aa ee 6d aa 48 04 8c 54 b6 96 e1 66 f6 3c bb 41 d2 75 cf 18 6a f6 7e 16 f0 dd 9b ea 7a a6 a2 fe 5c 30 42 32 c4 e3 39 ec 00 5e ac c4 80 aa 09 24 00 48 fb bb c3 ba 27 c3 af d9 13 ec b7 1e 20 b9 b2 f1 2f c5 6d 40 28 f2 58 e6 d3 45 47 50 7e 62 b9 02 43 d0 39 0a c4 1c 2e d5 Data Ascii: <{<i$6?[gf7%,mZle9QC\<6G-c0r2>pGzV;7K~>+SI`p.A(@9^,nDeum6$mHTf<Auj~z\0B29^$H' /m@(XEGP~bC9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49775	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:10 UTC	640	OUT	GET /images/aboutUs/laoye.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/about%20us.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:10 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:10 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 31 Dec 2017 18:02:52 GMT ETag: "680409-307c74-561a6ac9d2b00" Accept-Ranges: bytes Content-Length: 3177588 Content-Type: image/jpeg
2024-09-27 16:52:10 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e1 02 d8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 0e 00 02 00 00 00 0b 00 00 00 86 01 0f 00 02 00 00 00 06 00 00 00 92 01 10 00 02 00 00 00 0d 00 00 00 98 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 a6 01 1b 00 05 00 00 00 01 00 00 00 ae 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 14 00 00 00 b6 01 32 00 02 00 00 00 14 00 00 00 ca 87 69 00 04 00 00 00 01 00 00 00 de 00 00 00 00 20 20 20 20 20 20 20 20 20 20 00 00 4e 49 4b 4f 4e 00 43 4f 4f 4c 50 49 58 20 50 33 31 30 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 43 4f 4f 4c 50 49 58 20 50 33 31 30 20 20 20 56 31 2e 30 00 32 30 31 33 3a 30 35 3a 32 33 20 30 37 3a 35 34 3a 32 36 00 00 21 82 Data Ascii: JFIF,,ExifMM*(12i NIKONCOOLPIX P310,,COOLPIX P310 V1.02013:05:23 07:54:26!
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 90 48 c3 19 c1 19 a6 17 47 ca c6 4b 63 b8 a8 02 bc 84 e0 aa 11 b8 76 3d 6a ac cc c0 11 29 c6 3a ae 2b 78 a2 d1 46 29 d6 19 46 e6 db 9f 5f 4a d8 8e e5 1e 35 31 9e 0f 19 ad 67 1d 2e 8a 6a e1 f6 dd ae 54 90 7d 73 41 9f cc 3c 00 47 bd 61 cb 60 51 b1 17 99 fb c6 e0 05 1d 07 ad 0c e5 49 dd 95 3d 70 29 a1 b4 02 72 a7 11 1f 97 19 2c 7a 0a 7a ca 4a 96 53 95 ea 31 54 65 20 63 93 f2 e7 18 a5 10 96 01 0b 06 c0 eb 57 d0 11 56 58 f0 f8 04 32 63 1c f6 34 ff 00 27 11 15 07 24 f7 f4 aa 29 91 87 58 ce 24 39 6c e3 06 9d f6 84 24 a8 c6 6b 19 a7 73 16 b5 06 70 9b 59 17 24 f7 ec 69 3e d0 c7 72 a3 71 4d 16 45 6b 2e 26 6d c7 0b 9e f5 bf 6a 01 07 19 c9 1d 2a 67 a0 17 0c 86 31 91 c8 f7 a1 df ed 09 8e 4e 3d eb 99 ab 96 00 a2 ed 55 07 d7 35 28 0c a4 10 30 47 5a 4d 58 09 44 ad 9f 9b Data Ascii: HGKcv=j):+xF)F_J51g.jT}sA<Ga`QI=p)r,zzJS1Te cWVX2c4'$)X$9l$kspY$i>rqMEk.&mj*g1N=U5(0GZMXD
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: f2 c1 1b 4b f8 47 b1 59 06 16 8a 5f 80 47 18 15 99 7e b8 98 7b f5 35 f4 b8 b5 7a 32 3e 72 0e d2 b1 34 24 63 e5 eb 4f 43 93 cd 7e 69 57 49 33 b5 21 fe 58 e4 ee c0 aa d7 b0 99 50 84 61 b8 8e f5 30 4d 8d 1e 6b af 59 b1 95 be 6c 04 39 e7 bd 60 8b 65 db 23 0e 49 e7 02 be b6 84 ad 1b 1c 15 63 a9 97 7f 28 8c aa f9 67 93 c9 ac e8 6d 2e 35 3b b8 a2 8e 32 08 3c 1f 6a f4 62 d2 57 66 0a 07 59 67 63 1e 9b 6e b1 c7 18 de 3e 6c 81 de a8 cb a6 dc 6a 32 f1 0b 01 9c 83 9a e6 f6 a9 7b cc a8 c7 53 6a d7 4c 58 11 3c b0 49 ee 71 5a 03 fd 19 57 72 f4 af 2e 75 1d 47 a9 e8 ad 11 91 7b 73 73 7f 13 2f 96 eb 18 ce 0f 40 c3 eb 5c fc 96 92 31 08 91 bf 23 82 7b d7 a3 85 71 84 4f 3b 13 76 2c 7e 1f b9 70 03 44 e5 47 52 6a f2 78 32 e1 d0 08 13 00 9e 43 0c d7 6c f1 91 82 b1 e6 3a 32 96 a5 Data Ascii: KGY_G~{5z2>r4$cOC~iWI3!XPa0MkYl9`e#Ic(gm.5;2<jbWfYgcn>lj2{SjLX<IqZWr.uG{ss/@\1#{qO;v,~pDGRjx2Cl:2
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: c4 01 9e 07 a0 a4 90 88 15 08 60 f9 1c 9f 43 52 90 0c f3 0e c3 ce 3b e6 9c b3 b3 60 e7 24 71 9a bb 00 a6 41 e6 64 02 de bc d0 a0 82 cc 3e 60 7f 84 f6 a6 80 55 e1 0f 3b 7d a9 81 cb e0 83 8a ca da 86 e3 b7 15 00 30 04 75 cd 29 27 1f 37 39 ef 56 d1 93 dc 6b fc ff 00 c4 c0 af a1 a6 81 be 4c bb 03 8f 4a 50 8d 8b 5b 09 f6 81 0e c5 40 1f 27 9f 6a 69 9d 12 5c b6 40 63 c7 35 a2 87 52 59 04 93 64 7c 98 5e 7a 0a 63 5e 7c e5 72 7a 01 8a 1c 02 da 0e 2f b9 b6 a1 dc 47 63 55 dd 5d 09 2c cc 39 ed da ae 2a c5 20 8f 2a 72 70 73 db 34 86 49 1e 30 1b e4 20 fa 55 48 bb 8c 13 6d 2d bf 82 3a 1f 4a 58 e7 dc a3 f7 9b fd 4d 66 90 5c 90 c8 9e 60 8d 5d b2 dd 46 3a 55 88 ae 22 85 4a cb 91 9e 95 4c 86 c8 ae 27 00 80 03 49 81 9c a1 cd 64 cd 7f 04 65 e6 91 b6 04 fe f1 aa a5 06 dd 90 27 Data Ascii: `CR;`$qAd>`U;}0u)'79VkLJP[@'ji\@c5RYd\|^zc^\|rz/GcU],9* *rps4I0 UHm-:JXMf\`]F:U"JL'Ide'
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: b9 c3 5f 02 33 07 c6 3d 6e 7b e4 17 13 a1 8c 37 cd b7 86 03 b0 af 72 f8 41 f1 39 35 b2 89 3c 85 66 12 14 51 9e 0e 2b c9 ce 72 d8 c6 8f 3c 16 c1 83 cd 27 52 b7 2c cf a0 2c 66 13 c2 24 46 ca b7 a5 5c ce ec 1c f1 dc 0a fc 82 a5 d4 ac 7d 73 97 36 a8 40 30 58 29 18 34 73 dc 9a f5 70 51 f7 d3 22 6f dd 66 bd 9a 9f 2d 40 3d 39 ad 18 86 e2 30 7a 0e 6b f6 8c 17 f0 62 7e 6f 8e fe 2b 24 95 70 06 3b d4 64 1c 65 ba e2 bb 9b d0 f3 0a 52 82 5c 82 78 ac eb b7 dd b4 3f 0a be 95 84 91 d1 01 b0 8c 46 d8 e3 d3 35 cf 6a a3 cc b9 1b f1 81 fa 57 24 f4 92 3d 08 ec 3a de 11 1c 40 2f 3f 53 52 ae 18 70 7f 0a e8 8a 3c f7 b9 0f 66 04 7d 3d aa 3b 76 cc ea 58 7c c4 e0 56 75 0b 82 19 af 2e 2d 5b 3f 9d 73 b6 63 7b 1d a3 77 d2 b0 8b 3a 66 ad 12 77 18 50 4f 5e e2 ab fc 86 52 1f 20 03 cd 6e Data Ascii: _3=n{7rA95<fQ+r<'R,,f$F\}s6@0X)4spQ"of-@=90zkb~o+$p;deR\x?F5jW$=:@/?SRp<f}=;vX\|Vu.-[?sc{w:fwPO^R n
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: a3 f3 4a 81 b0 12 7a 50 5e e0 65 c0 f9 86 4e 7b fa d3 12 46 da cd 20 f9 b3 c5 0b 61 d8 71 79 26 20 30 e0 77 a8 42 c8 5d b6 f5 e9 93 4d 14 85 4b 42 37 62 52 59 b9 cd 48 23 57 c1 91 b7 76 19 ed 56 d8 98 ac 8a 3e 60 db 47 5a 23 09 bb 2a 81 49 ea de b5 9c 9d ca 43 95 19 f2 09 cf bd 3a 26 2a a4 6c c6 0f 15 09 94 c4 f3 b6 c8 ad d8 72 73 4d 33 ab ae e5 70 0f bf 7a bb 5c cd 88 8c c5 b7 16 c1 3d a8 90 ed 18 53 d7 a8 f5 a9 68 69 0f 2c bb 10 0e c3 8c d4 25 c8 62 4b 96 52 7e b8 a7 11 58 88 c8 cc c7 1c 81 4a 92 b8 62 41 ce 3b d5 94 90 8a ce dc 9c 7e 34 09 59 49 55 ac db 1d 87 cb 23 0c 02 3e b4 80 87 46 c0 e0 f4 e6 85 aa 1a d0 6a 6f e7 20 02 a7 83 ed 53 17 0a 02 a1 38 3d 71 52 c1 8d 3b 76 8c 8c e3 a5 36 32 ad 82 49 e7 a0 15 51 21 2b b0 0e 49 3b f0 07 a9 a5 20 cd 80 cc Data Ascii: JzP^eN{F aqy& 0wB]MKB7bRYH#WvV>`GZ#IC:&lrsM3pz\=Shi,%bKR~XJbA;~4YIU#>Fjo S8=qR;v62IQ!+I;
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: a6 62 07 25 73 ed 49 85 c8 14 82 c7 07 3e d4 e0 48 3c 11 9f 4a 00 14 12 c7 27 03 d0 d3 37 1f 98 67 00 f4 35 56 01 db 88 23 d3 14 11 b5 7a 0e 7a 13 52 26 1e 5b 14 52 3a 1a 1c 28 25 65 53 91 de 9b 16 c3 4e 48 54 e7 1d 45 34 29 56 c3 71 e9 54 81 89 93 82 57 bf 14 f3 28 01 48 e0 0e e7 bd 3b 08 73 2b 3b e3 a5 08 81 54 e0 92 0d 22 90 d0 36 b6 18 0e 7d 69 82 27 73 f2 f6 3d e8 19 2b 01 f7 4f 15 1b 92 5d 40 c0 c5 4f 52 64 39 3e 62 77 2f 4a 63 49 cf 1c 67 d6 a8 44 9b 82 61 80 04 d3 64 ce 0e 7b fa 50 36 22 0f 94 63 96 ef 4e 68 f7 ae 47 de 06 82 12 19 1b 16 60 18 e3 14 31 3b fe 56 ce 78 a3 62 89 58 1c 29 62 36 8a 61 94 bb 1f 97 2b e9 40 0e 67 50 3e 6e 09 e9 51 a9 5c 1c 29 04 7e b4 09 8a 72 ca 30 30 d4 b9 63 92 dd a8 b0 5c 6b ca 09 f9 3b 76 a5 49 37 2f cd c5 4d 84 c7 Data Ascii: b%sI>H<J'7g5V#zzR&[R:(%eSNHTE4)VqTW(H;s+;T"6}i's=+O]@ORd9>bw/JcIgDad{P6"cNhG`1;VxbX)b6a+@gP>nQ\)~r00c\k;vI7/M
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 46 0e bd ba 9e d5 53 5f 94 b1 41 08 55 2b c9 23 f8 ab 26 9f 31 ac 4a ea 86 40 bc 9c 1e c2 91 c1 c9 f2 d7 91 fa d6 66 c8 8e e2 e1 a2 80 a0 03 9e 69 d6 b7 8a b1 fe f0 ec 2a 39 cd 36 b4 2b a8 5d 5f ac 71 83 c3 ab af 53 e9 5e 63 e2 c2 92 41 21 72 23 6d f8 eb da ba b0 f7 48 f5 30 ba 54 4c e3 a4 db 19 08 39 3e b9 ab 36 bb 83 17 27 00 ae 09 35 e8 4b 63 e8 b1 0f f7 4c b7 26 f2 14 6e f9 07 5c 77 a8 4e e5 72 48 c8 ed ed 5c e7 cb cc 81 9c 67 7c 88 c0 f6 02 ad 09 c6 f0 91 2e cf 97 24 f5 a0 c9 10 4e e5 c3 19 f2 7e 9c 54 32 bf 0a 08 da 7d ea 91 7b 90 bb 96 18 c6 07 7a 7c 4a 61 00 44 c7 39 e7 35 4c 4d 12 2e dd 9b d8 9c 82 46 49 a4 63 1c b8 c9 24 13 f3 10 28 d9 92 c8 a3 52 65 06 13 96 ed cd 4f 24 72 47 82 c0 72 2b 41 3d 88 5f 22 60 db 9b 6e 30 07 bd 6c 69 72 0d db 98 72 Data Ascii: FS_AU+#&1J@fi*96+]_qS^cA!r#mH0TL9>6'5KcL&n\wNrH\g\|.$N~T2}{z\|JaD95LM.FIc$(ReO$rGr+A=_"`n0lirr
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 5d 1c 53 c6 41 3d 0c 6b 8f 8a 56 f2 c9 27 91 6a ea 01 f9 4b 30 f9 85 66 4b f1 42 e0 4b 31 84 2c 6c 07 04 57 6d 2c 02 56 52 38 2a e3 ae fd d3 21 fe 26 6a 13 26 5e 72 0e e2 db 7b 67 e9 da b3 7f e1 33 bf 9d d8 5c 5c 6e 63 dc 0e 95 e9 47 0d 4e 3a 58 e5 78 c9 b2 94 fa f5 d4 93 37 ef d8 ee 00 17 53 cd 40 75 29 48 22 59 1b 27 20 73 5d 51 84 62 b4 39 27 5e 53 77 6c 81 5e 48 d3 0a ec 40 39 c9 35 11 90 ab 70 72 4f 3d 69 9c ed 81 b9 2e 00 67 39 5e c2 98 d7 2c 33 cf 3e c2 a9 23 36 c8 a3 27 1c e7 76 73 9a 79 98 8e a7 38 ef 57 61 df 41 be 70 00 e3 24 9e 68 24 38 fb dc 9e c6 8b 10 dd c6 16 c4 bf 29 a4 94 37 39 f9 69 92 22 c8 cd 9f 97 81 d4 d4 87 69 41 8c 92 79 c5 26 80 1d cc aa a4 fc 80 7a 0a 6f 98 f9 1b 06 7d c5 2b 00 33 be 3b 66 98 b2 95 c8 e8 4f 7a a4 84 c5 8d c9 c6 Data Ascii: ]SA=kV'jK0fKBK1,lWm,VR8*!&j&^r{g3\\ncGN:Xx7S@u)H"Y' s]Qb9'^Swl^H@95prO=i.g9^,3>#6'vsy8WaAp$h$8)79i"iAy&zo}+3;fOz
2024-09-27 16:52:10 UTC	8000	IN	Data Raw: 5e c4 d1 e6 84 04 36 39 fd 2b f1 eb 9f b2 8a 09 2c 40 20 e4 52 05 5c 93 d8 8c 60 0e 6a 59 63 52 36 1b 94 12 40 fd 0d 50 bb 76 25 10 10 5c f5 02 b2 ea 34 77 7e 0d 02 18 98 6f 2a 72 36 93 5d 54 6a a2 62 ce 4f 4c 7b 57 cf e2 1f ef 19 76 d4 ad a8 36 d8 99 01 ce 47 50 6b c2 be 34 6a 0d 6e af 6b 1c 8d c3 2e 76 ff 00 15 7b b9 24 14 f1 11 33 af 3f 67 42 72 f2 38 cf 84 de 10 9f 5b d7 83 4a a9 6f 6e 58 2a 12 32 c4 e7 af b7 ff 00 5e bd e7 55 f0 ad ad cc 0f 05 ba ac 9c e3 7a f0 30 3b 57 ea d5 1e b6 3f 27 a9 ad 46 cd ef 09 e8 f0 68 0f e6 c1 6b 19 95 fb 91 d0 57 43 a8 dc 93 19 57 0a 43 0c e4 73 58 b3 25 b8 cd 12 20 e4 ee 3b 48 3d 6b 62 fa f1 62 48 c2 af 1d 09 a4 9d 98 6e 1a 6c 9e 79 63 c8 00 e4 9f 6a ba f2 2b c2 41 20 90 73 9a d1 b2 6c 47 6b b5 db 03 82 3d 2a 5d 49 47 Data Ascii: ^69+,@ R\`jYcR6@Pv%\4w~or6]TjbOL{Wv6GPk4jnk.v{$3?gBr8[JonX2^Uz0;W?'FhkWCWCsX% ;H=kbbHnlycj+A slGk=*]IG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49777	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:13 UTC	374	OUT	GET /images/aboutUs/fei.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:13 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 21:12:29 GMT ETag: "680408-2dd453-56181170da940" Accept-Ranges: bytes Content-Length: 3003475 Content-Type: image/jpeg
2024-09-27 16:52:13 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 2c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 09 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8a 01 1b 00 05 00 00 00 01 00 00 00 92 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9a 01 32 00 02 00 00 00 14 00 00 00 a6 87 69 00 04 00 00 00 01 00 00 00 ba 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 37 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 37 3a 30 31 3a 30 39 20 31 30 3a 35 38 3a 33 30 00 00 20 82 9a 00 05 00 00 00 01 00 00 02 40 82 9d 00 05 00 00 00 01 00 00 02 48 88 22 00 03 00 00 00 01 00 02 00 00 88 Data Ascii: JFIFHH,ExifMM*z(12iAppleiPhone 7HHPhotos 3.02017:01:09 10:58:30 @H"
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: a8 b1 58 f2 4f da 07 e0 47 8b be 04 f8 be 1f 0d f8 b5 62 68 ee a1 13 45 71 6c 5a 48 65 5c 80 76 ee 00 82 8d c1 56 50 c0 60 e3 04 13 e3 56 70 01 2f 9a 0e 55 b8 1f 4e b5 f4 d7 8d 3c 6b ac fc 4d b5 96 0d 46 d2 69 ee 6e cb cf 7b 75 7d 20 79 1e 57 c1 53 02 e3 08 1b 03 71 39 27 80 40 c7 3f 39 49 6f 3e 9f 30 b5 ba 5d 8e 77 60 7d 3a fe 9f e7 bd 6e a4 ad 62 6c 5e b9 24 c4 01 6e 23 1c 67 b0 ee 73 5f 59 fe cb 3e 0a f8 99 e0 5f 13 59 7e d0 be 1d d2 ec 6f 6d 7c 3c d2 34 31 6a 1b 9e 1b cc a3 c7 3c 71 24 67 7f 99 12 e5 d1 ce 00 65 c8 2d b5 94 fc 98 48 30 fc c3 8c 10 7e 9d 2b db 7e 1f fe d1 ff 00 10 7e 16 78 3c f8 37 c3 89 6c 63 8e ee 4b a8 6e 67 57 95 ed fc d0 3c c4 8d 49 d8 14 91 93 95 3d 4f 7c 11 93 f2 1a b7 53 e9 ff 00 8a 7f 1e 75 ef 8e f6 ee 9a 9e a5 1d 8d a6 9f e7 Data Ascii: XOGbhEqlZHe\vVP`Vp/UN<kMFin{u} yWSq9'@?9Io>0]w`}:nbl^$n#gs_Y>_Y~om\|<41j<q$ge-H0~+~~x<7lcKngW<I=O\|Su
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 72 4c 9b 5b ab 64 e7 e6 f6 f5 ed 8a d0 f0 6f c4 eb 1d 1e df 53 8b 52 d2 4d e5 f4 84 ca 97 45 80 c8 72 7e 43 c8 c7 3d c5 70 d2 e9 f7 11 da 09 9d 59 44 63 04 9e e2 b9 7f dd 84 26 43 e5 a3 f1 9c f6 ed 5a 59 75 33 69 b3 aa 3e 29 8a f6 19 ef 35 47 db 73 97 62 a8 31 1a f7 e2 be b0 f8 72 89 79 a1 c1 2c 9f 33 c9 12 26 4f f7 54 71 5f 00 5f d8 5e 45 3c 06 31 88 8b 83 f2 9c ee e7 f8 87 71 8f f3 e9 fa 51 e0 a8 6d 22 d0 74 f1 67 00 8d 0e 3e ef 5c 7a 1f 5c 74 a8 92 8a 57 42 69 d8 ca f8 8f 6b 9f 0a c9 12 b8 89 24 6d 9b 87 3d 7d 41 38 1f 5a f8 e3 44 d2 e2 d0 6e 76 44 09 24 00 5f bb 0f 7a f7 ff 00 da 5b c4 52 e8 3a 16 9f a6 43 70 63 fb 53 b3 cf 1a 92 18 84 da 53 be 08 cf 3f 55 15 e0 3a 85 c4 d1 f8 7a 0d 4e 00 43 b0 46 c9 1d 15 c6 54 fe 3d 6a a1 f0 9a 53 56 47 5c d7 73 cb Data Ascii: rL[doSRMEr~C=pYDc&CZYu3i>)5Gsb1ry,3&OTq__^E<1qQm"tg>\z\tWBik$m=}A8ZDnvD$_z[R:CpcSS?U:zNCFT=jSVG\s
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 3d 05 49 67 7f 6d aa 99 12 d4 15 f2 89 dc 87 d0 77 fa 7a 50 da 39 e5 26 72 36 9a 4f d9 75 3c 6b ad fe 8a e8 ad 0b 28 e0 b8 fb c1 bd 00 18 af bf ff 00 62 1b 2f 03 49 f1 43 c4 36 7e 2d b5 8a e6 36 d1 d0 db 5c 4b 96 48 40 90 33 e3 dc b0 43 d3 24 2f 1f 76 be 39 9e dc 5d 5b 9b 6b 85 ca 9e c3 a8 fc b9 ab ff 00 0f e2 f8 9d a3 6b f7 f7 bf 0b a0 b9 b9 9b 44 b5 6b 9b 99 a3 8b cd 58 21 00 e4 c8 7e ee 18 64 2a b7 24 83 80 70 71 4a d7 b9 9f d9 22 fd a9 ac 3e 1e 69 9f 18 b5 6f 0d 7c 34 b8 96 e7 47 d2 96 3d d2 48 7e 4f 38 2f cf 14 60 e0 aa c4 08 56 c8 00 9c e0 62 be 6e d1 3c 47 aa f8 6e fb ed ba 14 a6 0b 82 ca 4b 83 9d c1 0f 00 8e 32 39 38 1e f5 bb e3 af 11 6b 3e 31 d6 af bc 63 af 5e 7d b2 f7 5a c4 d2 3e 16 3d d8 50 a3 08 a0 6d 52 a0 60 e3 9e bd 73 5c 2e 99 0b dd 9f dd Data Ascii: =IgmwzP9&r6Ou<k(b/IC6~-6\KH@3C$/v9][kkDkX!~d*$pqJ">io\|4G=H~O8/`Vbn<GnK298k>1c^}Z>=PmR`s\.
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 73 7b d9 9f 53 78 8b e1 a7 8a 10 dd 5d 68 b6 ab 7c 90 28 61 18 6c 6e cf 2d 9e 33 c7 e3 5f 31 5c 5c c9 69 e2 39 ac 2f 2d 4a 4d 19 5c 28 cb 60 b2 83 81 80 09 c0 3d eb ec 4f 81 3e 34 f1 a6 bf ae 2e 8d a8 dc 0b 9d 3a 32 07 98 e0 79 ac 33 82 8c 78 04 63 a1 c6 7d 4d 5c d7 be 14 7c 3d f1 6f 8d f5 57 d3 7c 46 f6 fa bc 8e d3 49 12 22 b4 8b 20 00 b0 db d8 60 0c 8c fb d0 a5 ca 0d 73 6a 8f 95 f5 4b 7b eb 7d 0d 75 a9 10 fd 92 66 f2 c4 aa 0b 05 61 c1 0c dd 8f a5 70 d6 ab 36 a5 23 b0 60 aa 3f 88 fd de 3d 6b ee 5b fb 6b 5d 0a d0 f8 43 5b b4 58 60 bc 8f 77 97 22 ec 5b a5 39 05 f9 e8 de 87 af a6 7a 57 cd 1e 33 f8 77 ad 78 7a d6 4b dd 1e 15 9b 4a 6c ec 3b 87 9a a0 0e 9b 47 2c 79 fe 13 cf 5c 0e 95 a4 65 a9 9f 2b 48 f1 7b 9b b4 b6 1b 73 bc 93 b4 e4 f5 ff 00 1a f4 ef 06 7c 38 Data Ascii: s{Sx]h\|(aln-3_1\\i9/-JM\(`=O>4.:2y3xc}M\\|=oW\|FI" `sjK{}ufap6#`?=k[k]C[X`w"[9zW3wxzKJl;G,y\e+H{s\|8
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 55 7a d8 d5 bf d6 b5 5d 68 63 56 98 dc cf 28 c1 95 8f cc 57 a6 31 e8 2b e8 cf 0b c9 14 9a 65 b5 cb e4 1c a9 8b 1c a8 c7 1c e3 be 6b e5 f8 90 4a 7e 66 db b0 64 63 bf 3c 8a f7 af 0d 6b d1 68 be 16 91 f5 17 65 12 fe f1 17 f8 14 ae 57 3c f0 18 e0 7d 78 cd 74 49 1c d1 5a 8f f8 d7 14 a7 c4 1a 65 ec 4a 8d b6 22 ef 29 3f 33 97 c1 40 4f 4d ab 83 81 5b fe 17 56 ba b4 83 00 2b 49 10 27 3c 57 99 de 6b 13 78 a6 c9 11 f1 2b c0 4b 0c 8c 7c df 5f e5 5e a7 e0 ed 8b 14 6a ff 00 34 88 a0 04 ee a0 f5 3f 9f 4a 87 b0 e5 10 f1 51 b2 d2 34 c8 a5 89 d8 19 89 0c 7b e0 75 03 b6 2b c1 34 3d 36 fa e7 56 97 50 bf 53 35 b6 7f 74 49 e1 81 27 a6 7d 2b eb ab bf 87 57 1e 3d d1 76 5c 3b e9 e2 17 65 05 a3 60 49 c7 61 c6 41 18 c1 1c 0f e7 d0 59 fc 1b d3 f4 ef 03 c1 a6 c8 f2 6a 53 c4 d2 01 26 Data Ascii: Uz]hcV(W1+ekJ~fdc<kheW<}xtIZeJ")?3@OM[V+I'<Wkx+K\|_^j4?JQ4{u+4=6VPS5tI'}+W=v\;e`IaAYjS&
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 75 f1 53 54 f0 7c de 3f d0 ed c5 a6 8b 64 0a 99 a7 6f 29 ca e7 62 98 d4 8f 9f 79 e0 11 df 3d 2a 6f f8 43 7e 28 6b 56 89 77 cc 90 49 92 1b 79 c9 ff 00 7b 8e 09 ac 39 2c f7 35 6f 4b 58 fa d2 d7 43 b3 de 56 dd 84 a9 ea a7 77 1e bc 76 ff 00 f5 d6 9d 87 c3 bb 9d 66 59 20 8d 4e c9 01 00 80 7a 11 8f c0 f3 d6 be 43 d0 b4 9f 8d 5e 15 da 34 4b e9 6d 81 24 ed 57 32 05 07 d3 70 23 f0 c5 75 d6 ba df ed 13 1c ca 8b ad de 2a 16 c8 c0 d8 c4 fe 18 fd 4f e1 4f 47 d4 ce c6 f7 c4 cf 86 7a 0f 83 75 a8 34 49 af d6 ea 2b c5 de 42 15 2e 98 fb ca c4 7c b9 04 e3 03 b6 3b d7 01 e2 7f 83 1e 16 5d 09 ef fc 23 0d cd e5 f8 c9 c0 75 31 90 07 75 c7 04 63 ae 40 c0 e9 5e d5 f0 1f e0 36 a5 f1 d7 5d d5 af f5 ff 00 10 c5 63 a4 68 f2 79 9a 89 f3 83 6a 32 b4 c1 d8 c9 1a 10 c1 17 72 e4 c9 27 1d Data Ascii: uST\|?do)by=oC~(kVwIy{9,5oKXCVwvfY NzC^4Km$W2p#uOOGzu4I+B.\|;]#u1uc@^6]chyj2r'
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 9f f3 d2 ba 9f 13 69 b0 d9 40 2e d2 41 95 01 48 55 ea 07 1c fb d5 32 92 3e 8a f0 d7 ed 19 ac e9 c2 d7 49 f1 8d 97 f6 b6 96 71 0b dc 3e 4d c2 27 45 24 72 1b 6f 71 8d c4 73 92 7a f3 1e 3a f0 77 82 66 4b 3f 17 fc 34 9c 6d 62 4c 70 a8 de 55 94 fd e6 62 59 81 cf 1b 48 e3 b7 5a f9 fe c3 56 2c 59 2e df 78 6c 10 4f 60 2b 73 4b bc bb 4b f8 20 b1 be 1a 7d bc 8d 86 6e a0 03 92 48 1e a7 f0 eb d7 1d 33 71 1b 8b 4e e8 fd 1b d0 7c 0f 73 f1 d3 4e d2 74 ed 2c 5a 4d a9 47 17 db 01 b8 6f dd c7 b0 85 97 19 07 9c 91 80 41 f5 c6 06 47 c6 7f 1f be 15 6b 3f 06 fe 23 af 86 f5 3b bb 4b d6 d6 6d 45 f4 2f 66 1d 44 48 64 78 b6 3a 3a 8d 8d 94 3d cf 18 3c 67 03 d6 3e 1a 6b 3a 7d de a1 26 83 a2 5e cf 05 cc 43 ce 8d e2 73 09 56 ce 08 1d ce 73 9c 11 8e 39 1d 73 f3 bf c5 ab 7d 5b 48 f1 ed Data Ascii: i@.AHU2>Iq>M'E$roqsz:wfK?4mbLpUbYHZV,Y.xlO`+sKK }nH3qN\|sNt,ZMGoAGk?#;KmE/fDHdx::=<g>k:}&^CsVs9s}[H
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 02 3b 13 5b 3a df 8c 2e 2f ec c5 9d e5 8c 33 da ee 26 45 2c d8 75 ed f7 48 38 1d 78 ef ed 5c 89 d9 dd 1b bd 11 c4 f8 6b 46 b6 b8 f0 ad c5 c7 86 2e cd c4 b6 d2 37 9c 18 ed de 02 f1 c7 66 c7 6f e5 5f 62 f8 37 f6 3b f8 a5 e3 4f 80 ba 2f c5 ff 00 0b df c3 ab ea 57 12 33 3e 8d b0 21 4b 6d ec b9 13 17 23 7a ed c9 f9 39 07 a7 7a f8 2b 48 9e fb c3 7a 84 f0 e8 77 6a 2d 65 52 d9 65 ca 9d eb 8d a5 4f 52 3a 7f 2a fa db c3 bf 1f fc 49 e1 6f 87 d2 78 4b c0 fe 37 bd d1 2d cc 04 08 a2 75 47 59 18 92 e2 27 93 2e 83 39 23 6e 30 7d 33 92 e5 bd c9 dc f9 5f c6 1a 3d f6 8d a8 cb f6 cb 65 b7 c3 32 fc 8d 98 cb 0e 70 a7 bf e7 d7 da bd af 4f fd 99 f5 fd 5b f6 7c d0 fe 39 78 4f 52 6b db bb cb 8b 98 ef b4 e9 00 45 8a 28 a7 92 24 78 98 12 58 fc 81 dc 37 24 31 2b c2 9a e0 6e b5 65 7f Data Ascii: ;[:./3&E,uH8x\kF.7fo_b7;O/W3>!Km#z9z+Hzwj-eReOR:*IoxK7-uGY'.9#n0}3_=e2pO[\|9xORkE($xX7$1+ne
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 3c 7b d7 3c 11 d3 69 24 36 3f 5b 7f e0 9a 9f b3 67 c3 fd 66 ce e3 c5 be 37 f0 c5 cf fc 25 2c 82 e2 d2 6d 5a 00 6c 65 d2 ee e0 02 39 a1 86 51 89 43 9d fb 5c 02 08 3c 36 47 1b 2d 09 db 63 f1 13 cb 92 dd 8c 12 30 72 aa 32 ca db 97 3e c4 70 47 7a 56 93 cb 3b b0 37 11 d6 bf 4b 7f e0 a4 1f b2 ef c3 9f d9 f7 c5 7e 1a d5 3e 14 da 9b 0d 2b 53 49 60 bf 84 b9 70 2e 41 de a5 03 fd d5 28 40 e3 be 39 e4 81 f1 df c2 ff 00 80 5e 2c f8 c6 6e a1 f0 8a 19 9a d4 44 65 95 ff 00 75 6d 00 90 90 0c 92 36 07 18 24 aa ee 6d aa 48 04 8c 54 b6 96 e1 66 f6 3c bb 41 d2 75 cf 18 6a f6 7e 16 f0 dd 9b ea 7a a6 a2 fe 5c 30 42 32 c4 e3 39 ec 00 5e ac c4 80 aa 09 24 00 48 fb bb c3 ba 27 c3 af d9 13 ec b7 1e 20 b9 b2 f1 2f c5 6d 40 28 f2 58 e6 d3 45 47 50 7e 62 b9 02 43 d0 39 0a c4 1c 2e d5 Data Ascii: <{<i$6?[gf7%,mZle9QC\<6G-c0r2>pGzV;7K~>+SI`p.A(@9^,nDeum6$mHTf<Auj~z\0B29^$H' /m@(XEGP~bC9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49776	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:13 UTC	376	OUT	GET /images/aboutUs/laoye.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:13 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:13 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 31 Dec 2017 18:02:52 GMT ETag: "680409-307c74-561a6ac9d2b00" Accept-Ranges: bytes Content-Length: 3177588 Content-Type: image/jpeg
2024-09-27 16:52:13 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 01 2c 01 2c 00 00 ff e1 02 d8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0a 01 0e 00 02 00 00 00 0b 00 00 00 86 01 0f 00 02 00 00 00 06 00 00 00 92 01 10 00 02 00 00 00 0d 00 00 00 98 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 a6 01 1b 00 05 00 00 00 01 00 00 00 ae 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 14 00 00 00 b6 01 32 00 02 00 00 00 14 00 00 00 ca 87 69 00 04 00 00 00 01 00 00 00 de 00 00 00 00 20 20 20 20 20 20 20 20 20 20 00 00 4e 49 4b 4f 4e 00 43 4f 4f 4c 50 49 58 20 50 33 31 30 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 43 4f 4f 4c 50 49 58 20 50 33 31 30 20 20 20 56 31 2e 30 00 32 30 31 33 3a 30 35 3a 32 33 20 30 37 3a 35 34 3a 32 36 00 00 21 82 Data Ascii: JFIF,,ExifMM*(12i NIKONCOOLPIX P310,,COOLPIX P310 V1.02013:05:23 07:54:26!
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 90 48 c3 19 c1 19 a6 17 47 ca c6 4b 63 b8 a8 02 bc 84 e0 aa 11 b8 76 3d 6a ac cc c0 11 29 c6 3a ae 2b 78 a2 d1 46 29 d6 19 46 e6 db 9f 5f 4a d8 8e e5 1e 35 31 9e 0f 19 ad 67 1d 2e 8a 6a e1 f6 dd ae 54 90 7d 73 41 9f cc 3c 00 47 bd 61 cb 60 51 b1 17 99 fb c6 e0 05 1d 07 ad 0c e5 49 dd 95 3d 70 29 a1 b4 02 72 a7 11 1f 97 19 2c 7a 0a 7a ca 4a 96 53 95 ea 31 54 65 20 63 93 f2 e7 18 a5 10 96 01 0b 06 c0 eb 57 d0 11 56 58 f0 f8 04 32 63 1c f6 34 ff 00 27 11 15 07 24 f7 f4 aa 29 91 87 58 ce 24 39 6c e3 06 9d f6 84 24 a8 c6 6b 19 a7 73 16 b5 06 70 9b 59 17 24 f7 ec 69 3e d0 c7 72 a3 71 4d 16 45 6b 2e 26 6d c7 0b 9e f5 bf 6a 01 07 19 c9 1d 2a 67 a0 17 0c 86 31 91 c8 f7 a1 df ed 09 8e 4e 3d eb 99 ab 96 00 a2 ed 55 07 d7 35 28 0c a4 10 30 47 5a 4d 58 09 44 ad 9f 9b Data Ascii: HGKcv=j):+xF)F_J51g.jT}sA<Ga`QI=p)r,zzJS1Te cWVX2c4'$)X$9l$kspY$i>rqMEk.&mj*g1N=U5(0GZMXD
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: f2 c1 1b 4b f8 47 b1 59 06 16 8a 5f 80 47 18 15 99 7e b8 98 7b f5 35 f4 b8 b5 7a 32 3e 72 0e d2 b1 34 24 63 e5 eb 4f 43 93 cd 7e 69 57 49 33 b5 21 fe 58 e4 ee c0 aa d7 b0 99 50 84 61 b8 8e f5 30 4d 8d 1e 6b af 59 b1 95 be 6c 04 39 e7 bd 60 8b 65 db 23 0e 49 e7 02 be b6 84 ad 1b 1c 15 63 a9 97 7f 28 8c aa f9 67 93 c9 ac e8 6d 2e 35 3b b8 a2 8e 32 08 3c 1f 6a f4 62 d2 57 66 0a 07 59 67 63 1e 9b 6e b1 c7 18 de 3e 6c 81 de a8 cb a6 dc 6a 32 f1 0b 01 9c 83 9a e6 f6 a9 7b cc a8 c7 53 6a d7 4c 58 11 3c b0 49 ee 71 5a 03 fd 19 57 72 f4 af 2e 75 1d 47 a9 e8 ad 11 91 7b 73 73 7f 13 2f 96 eb 18 ce 0f 40 c3 eb 5c fc 96 92 31 08 91 bf 23 82 7b d7 a3 85 71 84 4f 3b 13 76 2c 7e 1f b9 70 03 44 e5 47 52 6a f2 78 32 e1 d0 08 13 00 9e 43 0c d7 6c f1 91 82 b1 e6 3a 32 96 a5 Data Ascii: KGY_G~{5z2>r4$cOC~iWI3!XPa0MkYl9`e#Ic(gm.5;2<jbWfYgcn>lj2{SjLX<IqZWr.uG{ss/@\1#{qO;v,~pDGRjx2Cl:2
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: c4 01 9e 07 a0 a4 90 88 15 08 60 f9 1c 9f 43 52 90 0c f3 0e c3 ce 3b e6 9c b3 b3 60 e7 24 71 9a bb 00 a6 41 e6 64 02 de bc d0 a0 82 cc 3e 60 7f 84 f6 a6 80 55 e1 0f 3b 7d a9 81 cb e0 83 8a ca da 86 e3 b7 15 00 30 04 75 cd 29 27 1f 37 39 ef 56 d1 93 dc 6b fc ff 00 c4 c0 af a1 a6 81 be 4c bb 03 8f 4a 50 8d 8b 5b 09 f6 81 0e c5 40 1f 27 9f 6a 69 9d 12 5c b6 40 63 c7 35 a2 87 52 59 04 93 64 7c 98 5e 7a 0a 63 5e 7c e5 72 7a 01 8a 1c 02 da 0e 2f b9 b6 a1 dc 47 63 55 dd 5d 09 2c cc 39 ed da ae 2a c5 20 8f 2a 72 70 73 db 34 86 49 1e 30 1b e4 20 fa 55 48 bb 8c 13 6d 2d bf 82 3a 1f 4a 58 e7 dc a3 f7 9b fd 4d 66 90 5c 90 c8 9e 60 8d 5d b2 dd 46 3a 55 88 ae 22 85 4a cb 91 9e 95 4c 86 c8 ae 27 00 80 03 49 81 9c a1 cd 64 cd 7f 04 65 e6 91 b6 04 fe f1 aa a5 06 dd 90 27 Data Ascii: `CR;`$qAd>`U;}0u)'79VkLJP[@'ji\@c5RYd\|^zc^\|rz/GcU],9* *rps4I0 UHm-:JXMf\`]F:U"JL'Ide'
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: b9 c3 5f 02 33 07 c6 3d 6e 7b e4 17 13 a1 8c 37 cd b7 86 03 b0 af 72 f8 41 f1 39 35 b2 89 3c 85 66 12 14 51 9e 0e 2b c9 ce 72 d8 c6 8f 3c 16 c1 83 cd 27 52 b7 2c cf a0 2c 66 13 c2 24 46 ca b7 a5 5c ce ec 1c f1 dc 0a fc 82 a5 d4 ac 7d 73 97 36 a8 40 30 58 29 18 34 73 dc 9a f5 70 51 f7 d3 22 6f dd 66 bd 9a 9f 2d 40 3d 39 ad 18 86 e2 30 7a 0e 6b f6 8c 17 f0 62 7e 6f 8e fe 2b 24 95 70 06 3b d4 64 1c 65 ba e2 bb 9b d0 f3 0a 52 82 5c 82 78 ac eb b7 dd b4 3f 0a be 95 84 91 d1 01 b0 8c 46 d8 e3 d3 35 cf 6a a3 cc b9 1b f1 81 fa 57 24 f4 92 3d 08 ec 3a de 11 1c 40 2f 3f 53 52 ae 18 70 7f 0a e8 8a 3c f7 b9 0f 66 04 7d 3d aa 3b 76 cc ea 58 7c c4 e0 56 75 0b 82 19 af 2e 2d 5b 3f 9d 73 b6 63 7b 1d a3 77 d2 b0 8b 3a 66 ad 12 77 18 50 4f 5e e2 ab fc 86 52 1f 20 03 cd 6e Data Ascii: _3=n{7rA95<fQ+r<'R,,f$F\}s6@0X)4spQ"of-@=90zkb~o+$p;deR\x?F5jW$=:@/?SRp<f}=;vX\|Vu.-[?sc{w:fwPO^R n
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: a3 f3 4a 81 b0 12 7a 50 5e e0 65 c0 f9 86 4e 7b fa d3 12 46 da cd 20 f9 b3 c5 0b 61 d8 71 79 26 20 30 e0 77 a8 42 c8 5d b6 f5 e9 93 4d 14 85 4b 42 37 62 52 59 b9 cd 48 23 57 c1 91 b7 76 19 ed 56 d8 98 ac 8a 3e 60 db 47 5a 23 09 bb 2a 81 49 ea de b5 9c 9d ca 43 95 19 f2 09 cf bd 3a 26 2a a4 6c c6 0f 15 09 94 c4 f3 b6 c8 ad d8 72 73 4d 33 ab ae e5 70 0f bf 7a bb 5c cd 88 8c c5 b7 16 c1 3d a8 90 ed 18 53 d7 a8 f5 a9 68 69 0f 2c bb 10 0e c3 8c d4 25 c8 62 4b 96 52 7e b8 a7 11 58 88 c8 cc c7 1c 81 4a 92 b8 62 41 ce 3b d5 94 90 8a ce dc 9c 7e 34 09 59 49 55 ac db 1d 87 cb 23 0c 02 3e b4 80 87 46 c0 e0 f4 e6 85 aa 1a d0 6a 6f e7 20 02 a7 83 ed 53 17 0a 02 a1 38 3d 71 52 c1 8d 3b 76 8c 8c e3 a5 36 32 ad 82 49 e7 a0 15 51 21 2b b0 0e 49 3b f0 07 a9 a5 20 cd 80 cc Data Ascii: JzP^eN{F aqy& 0wB]MKB7bRYH#WvV>`GZ#IC:&lrsM3pz\=Shi,%bKR~XJbA;~4YIU#>Fjo S8=qR;v62IQ!+I;
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: a6 62 07 25 73 ed 49 85 c8 14 82 c7 07 3e d4 e0 48 3c 11 9f 4a 00 14 12 c7 27 03 d0 d3 37 1f 98 67 00 f4 35 56 01 db 88 23 d3 14 11 b5 7a 0e 7a 13 52 26 1e 5b 14 52 3a 1a 1c 28 25 65 53 91 de 9b 16 c3 4e 48 54 e7 1d 45 34 29 56 c3 71 e9 54 81 89 93 82 57 bf 14 f3 28 01 48 e0 0e e7 bd 3b 08 73 2b 3b e3 a5 08 81 54 e0 92 0d 22 90 d0 36 b6 18 0e 7d 69 82 27 73 f2 f6 3d e8 19 2b 01 f7 4f 15 1b 92 5d 40 c0 c5 4f 52 64 39 3e 62 77 2f 4a 63 49 cf 1c 67 d6 a8 44 9b 82 61 80 04 d3 64 ce 0e 7b fa 50 36 22 0f 94 63 96 ef 4e 68 f7 ae 47 de 06 82 12 19 1b 16 60 18 e3 14 31 3b fe 56 ce 78 a3 62 89 58 1c 29 62 36 8a 61 94 bb 1f 97 2b e9 40 0e 67 50 3e 6e 09 e9 51 a9 5c 1c 29 04 7e b4 09 8a 72 ca 30 30 d4 b9 63 92 dd a8 b0 5c 6b ca 09 f9 3b 76 a5 49 37 2f cd c5 4d 84 c7 Data Ascii: b%sI>H<J'7g5V#zzR&[R:(%eSNHTE4)VqTW(H;s+;T"6}i's=+O]@ORd9>bw/JcIgDad{P6"cNhG`1;VxbX)b6a+@gP>nQ\)~r00c\k;vI7/M
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 46 0e bd ba 9e d5 53 5f 94 b1 41 08 55 2b c9 23 f8 ab 26 9f 31 ac 4a ea 86 40 bc 9c 1e c2 91 c1 c9 f2 d7 91 fa d6 66 c8 8e e2 e1 a2 80 a0 03 9e 69 d6 b7 8a b1 fe f0 ec 2a 39 cd 36 b4 2b a8 5d 5f ac 71 83 c3 ab af 53 e9 5e 63 e2 c2 92 41 21 72 23 6d f8 eb da ba b0 f7 48 f5 30 ba 54 4c e3 a4 db 19 08 39 3e b9 ab 36 bb 83 17 27 00 ae 09 35 e8 4b 63 e8 b1 0f f7 4c b7 26 f2 14 6e f9 07 5c 77 a8 4e e5 72 48 c8 ed ed 5c e7 cb cc 81 9c 67 7c 88 c0 f6 02 ad 09 c6 f0 91 2e cf 97 24 f5 a0 c9 10 4e e5 c3 19 f2 7e 9c 54 32 bf 0a 08 da 7d ea 91 7b 90 bb 96 18 c6 07 7a 7c 4a 61 00 44 c7 39 e7 35 4c 4d 12 2e dd 9b d8 9c 82 46 49 a4 63 1c b8 c9 24 13 f3 10 28 d9 92 c8 a3 52 65 06 13 96 ed cd 4f 24 72 47 82 c0 72 2b 41 3d 88 5f 22 60 db 9b 6e 30 07 bd 6c 69 72 0d db 98 72 Data Ascii: FS_AU+#&1J@fi*96+]_qS^cA!r#mH0TL9>6'5KcL&n\wNrH\g\|.$N~T2}{z\|JaD95LM.FIc$(ReO$rGr+A=_"`n0lirr
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 5d 1c 53 c6 41 3d 0c 6b 8f 8a 56 f2 c9 27 91 6a ea 01 f9 4b 30 f9 85 66 4b f1 42 e0 4b 31 84 2c 6c 07 04 57 6d 2c 02 56 52 38 2a e3 ae fd d3 21 fe 26 6a 13 26 5e 72 0e e2 db 7b 67 e9 da b3 7f e1 33 bf 9d d8 5c 5c 6e 63 dc 0e 95 e9 47 0d 4e 3a 58 e5 78 c9 b2 94 fa f5 d4 93 37 ef d8 ee 00 17 53 cd 40 75 29 48 22 59 1b 27 20 73 5d 51 84 62 b4 39 27 5e 53 77 6c 81 5e 48 d3 0a ec 40 39 c9 35 11 90 ab 70 72 4f 3d 69 9c ed 81 b9 2e 00 67 39 5e c2 98 d7 2c 33 cf 3e c2 a9 23 36 c8 a3 27 1c e7 76 73 9a 79 98 8e a7 38 ef 57 61 df 41 be 70 00 e3 24 9e 68 24 38 fb dc 9e c6 8b 10 dd c6 16 c4 bf 29 a4 94 37 39 f9 69 92 22 c8 cd 9f 97 81 d4 d4 87 69 41 8c 92 79 c5 26 80 1d cc aa a4 fc 80 7a 0a 6f 98 f9 1b 06 7d c5 2b 00 33 be 3b 66 98 b2 95 c8 e8 4f 7a a4 84 c5 8d c9 c6 Data Ascii: ]SA=kV'jK0fKBK1,lWm,VR8*!&j&^r{g3\\ncGN:Xx7S@u)H"Y' s]Qb9'^Swl^H@95prO=i.g9^,3>#6'vsy8WaAp$h$8)79i"iAy&zo}+3;fOz
2024-09-27 16:52:13 UTC	8000	IN	Data Raw: 5e c4 d1 e6 84 04 36 39 fd 2b f1 eb 9f b2 8a 09 2c 40 20 e4 52 05 5c 93 d8 8c 60 0e 6a 59 63 52 36 1b 94 12 40 fd 0d 50 bb 76 25 10 10 5c f5 02 b2 ea 34 77 7e 0d 02 18 98 6f 2a 72 36 93 5d 54 6a a2 62 ce 4f 4c 7b 57 cf e2 1f ef 19 76 d4 ad a8 36 d8 99 01 ce 47 50 6b c2 be 34 6a 0d 6e af 6b 1c 8d c3 2e 76 ff 00 15 7b b9 24 14 f1 11 33 af 3f 67 42 72 f2 38 cf 84 de 10 9f 5b d7 83 4a a9 6f 6e 58 2a 12 32 c4 e7 af b7 ff 00 5e bd e7 55 f0 ad ad cc 0f 05 ba ac 9c e3 7a f0 30 3b 57 ea d5 1e b6 3f 27 a9 ad 46 cd ef 09 e8 f0 68 0f e6 c1 6b 19 95 fb 91 d0 57 43 a8 dc 93 19 57 0a 43 0c e4 73 58 b3 25 b8 cd 12 20 e4 ee 3b 48 3d 6b 62 fa f1 62 48 c2 af 1d 09 a4 9d 98 6e 1a 6c 9e 79 63 c8 00 e4 9f 6a ba f2 2b c2 41 20 90 73 9a d1 b2 6c 47 6b b5 db 03 82 3d 2a 5d 49 47 Data Ascii: ^69+,@ R\`jYcR6@Pv%\4w~or6]TjbOL{Wv6GPk4jnk.v{$3?gBr8[JonX2^Uz0;W?'FhkWCWCsX% ;H=kbbHnlycj+A slGk=*]IG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49779	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:16 UTC	662	OUT	GET /prices.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:16 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 27 Dec 2021 23:06:23 GMT ETag: "6612f7-211c-5d428c0e95500" Accept-Ranges: bytes Content-Length: 8476 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:52:16 UTC	7902	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 72 69 63 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Pric
2024-09-27 16:52:16 UTC	574	IN	Data Raw: 3d 22 70 79 2d 35 20 62 67 2d 64 61 72 6b 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6d 2d 30 20 74 65 78 74 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 77 68 69 74 65 22 3e 32 39 37 38 20 52 69 63 65 20 53 74 72 65 65 74 20 7c 20 4c 69 74 74 6c 65 20 43 61 6e 61 64 61 2c 20 4d 4e 20 35 35 31 31 33 20 7c 20 54 65 6c 3a 20 28 36 35 31 29 20 33 33 30 2d 38 35 38 33 20 7c 20 46 61 78 3a 20 28 36 35 31 29 20 33 33 30 2d 33 39 36 39 20 0a 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 31 35 33 30 20 57 2e 20 46 72 6f 6e 74 61 67 65 20 52 6f 61 64 2c 20 48 77 79 20 33 36 20 28 69 6e 73 69 64 65 20 56 61 6c 6c 65 79 20 52 69 64 67 65 20 4d 61 6c 6c 29 20 7c 20 53 Data Ascii: ="py-5 bg-dark"> <div class="container"> <p class="m-0 text-center text-white">2978 Rice Street \| Little Canada, MN 55113 \| Tel: (651) 330-8583 \| Fax: (651) 330-3969 <br>1530 W. Frontage Road, Hwy 36 (inside Valley Ridge Mall) \| S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49778	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:16 UTC	632	OUT	GET /images/prices/c1.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:16 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:16 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680415-1c8f8e-5616f045cad80" Accept-Ranges: bytes Content-Length: 1871758 Content-Type: image/jpeg
2024-09-27 16:52:16 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 09 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8a 01 1b 00 05 00 00 00 01 00 00 00 92 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9a 01 32 00 02 00 00 00 14 00 00 00 a6 87 69 00 04 00 00 00 01 00 00 00 ba 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 37 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 37 3a 30 31 3a 30 39 20 30 39 3a 35 31 3a 35 39 00 00 21 82 9a 00 05 00 00 00 01 00 00 02 4c 82 9d 00 05 00 00 00 01 00 00 02 54 88 22 00 03 00 00 00 01 00 02 00 00 88 Data Ascii: JFIFHH@ExifMM*z(12iAppleiPhone 7HHPhotos 3.02017:01:09 09:51:59!LT"
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 77 26 c1 4b 9e 73 49 4a 06 69 80 64 d2 51 47 63 ed d6 80 0a 5c 9a 4a 28 01 7e f1 e6 83 c1 a3 a1 a3 a9 a0 9e a3 b0 bc 60 d2 fc a0 1c 54 40 0e b4 be f4 1a 5c 33 ed 4e cf 63 c5 20 5e 28 1c 9e 79 ac de bb 12 48 31 9e 29 09 c1 a4 fc 29 58 7c b9 aa 5a 68 1c bd 46 ed f5 a9 00 23 a5 27 5f 6a 76 78 f7 a8 e6 60 33 68 3d 78 a0 00 0f 14 fe 0d 21 3d a8 e6 60 33 68 a5 dc 47 4e 69 db 85 46 7a fa 53 5a ee 00 58 91 ef 52 00 07 5a 8c e3 a0 a5 ce 7d ab 47 76 03 c2 8c e0 9e 2a 2c f3 9a 71 39 cf 34 7e 55 2a fd 40 56 04 0a 62 83 c1 3c 53 cf 23 06 97 8e 73 cd 4b 6d 30 98 df 4e f4 6e c9 f4 a5 03 03 ad 34 fa 74 aa 4e eb 50 01 d0 8a 68 20 e6 9d 81 eb 4d aa 01 f9 c8 00 d1 cf dd a4 1e 9d c5 3c 60 0c f7 a9 6e db 01 1f 22 94 f1 c5 07 9e 73 48 d9 cd 3b 80 94 1f ca 8c 67 8a 76 07 ad 29 Data Ascii: w&KsIJidQGc\J(~`T@\3Nc ^(yH1))X\|ZhF#'_jvx`3h=x!=`3hGNiFzSZXRZ}Gv,q94~U@Vb<S#sKm0Nn4tNPh M<`n"sH;gv)
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 29 cf 7a 5c 8f 4a 57 46 5c a2 72 33 8a 01 3d 3a d2 11 c9 a7 1c 63 22 a8 76 01 ce 3d e9 30 33 4a 0e 3a f7 a4 ef 50 f5 28 50 78 c7 7a 40 07 43 47 4e 45 1e fd ea 39 48 e5 14 67 3c d1 8c f2 28 da 4f 39 a4 c7 19 a7 6d 49 e5 d6 c2 9e 7a 76 a6 d2 83 f2 d2 aa e6 b4 b6 85 3d 36 10 67 d2 97 00 53 f9 14 84 0e b5 8e ec 8b 8d fb dd 69 31 ce 28 e7 3c d0 06 7b e0 d6 89 ea 3e a3 b7 0a 30 0f 5a 6e 39 c5 1f 85 26 d8 49 8e e4 f5 a6 52 f5 ea 71 47 07 ad 11 14 b7 17 20 9a 4c 9c e4 8e b4 03 83 4e 6c 74 1d eb 42 af a0 c6 ff 00 38 a7 03 d3 b5 36 8a 96 99 37 64 bc 1e b4 11 91 8c 62 9a a7 71 c5 49 f5 a9 7e 65 c5 8c 27 02 8d dc 74 e2 99 de 92 a6 e2 93 77 25 c9 34 b8 23 a5 03 a7 5a 4c fa d1 72 1b b8 bc e7 38 a6 94 02 97 1e 9c d2 76 c5 2d 50 35 61 70 40 e6 83 83 40 c9 ef 42 8e f4 84 Data Ascii: )z\JWF\r3=:c"v=03J:P(Pxz@CGNE9Hg<(O9mIzv=6gSi1(<{>0Zn9&IRqG LNltB867dbqI~e'tw%4#ZLr8v-P5ap@@B
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 51 db 1d e8 e2 8e 83 06 9d ec 40 9c f4 ea 69 c0 1c 62 90 2e 4e 45 20 24 8c 9a a4 53 42 9c 0e 3b d1 90 0e 05 1f 5a 06 3b d4 92 07 9e 69 9b 8d 04 90 79 a5 23 34 15 b6 e0 0b 66 9d d4 62 80 a4 50 3a d0 4b f2 13 db d2 8a 32 07 5a 5d c0 76 a0 ab 08 cd 86 f5 a1 70 47 34 87 af a0 34 2f 4e 05 00 d6 82 82 7a 51 c7 7a 53 c1 a5 c6 7d a8 07 6e 83 47 1d 29 70 68 ce 3a 51 8e 3d e8 24 4a 29 7b 6e a0 0c d0 02 1c 81 48 3a 52 f3 8e 69 19 b3 c0 e2 8b d8 3a 0f 20 9a 33 93 48 3a d2 e0 9e 45 2b 8a e2 13 9a 40 32 33 4e 2a 31 4c 1c 8f 4a 65 f4 1c 00 3c 7f 3a 53 ec 71 49 91 9a 18 0e 31 40 58 8f 71 ea b4 a3 2d cb 52 11 91 e9 48 b9 3c d0 1d 03 60 3d 0d 28 f9 7d e8 ef 4b 8d e7 8e 31 d6 92 21 31 79 c7 bd 38 00 07 34 28 ed d3 de 9a ec 0f 14 c6 21 04 d4 35 2f 34 d3 82 33 41 48 7f 18 eb Data Ascii: Q@ib.NE $SB;Z;iy#4fbP:K2Z]vpG44/NzQzS}nG)ph:Q=$J){nH:Ri: 3H:E+@23N*1LJe<:SqI1@Xq-RH<`=(}K1!1y84(!5/43AH
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 24 0e d9 a4 4f ce 82 ba 8e 20 8a 60 eb 41 2d d7 b5 1c 8a 34 e8 27 a8 67 b7 6a 7e 00 e9 40 0a 40 f4 a5 24 1e 94 ac 52 1a a0 1c fa 51 b5 4a d0 06 17 03 8a 6a f0 30 78 a5 1b 14 ed 70 2a 07 22 a2 ab 3c 63 15 5c 8c 1a 9b d8 99 21 29 c5 89 e6 93 dc 74 a4 a5 72 07 01 c1 3d 68 03 23 d6 9b 8c 67 1d ff 00 2a 5e 47 43 8a 56 b0 00 19 a4 a7 1c 9e 05 38 2e 38 ef 5a a7 6d c6 95 c4 24 83 48 c7 69 1e f4 31 04 e2 a2 c1 63 f4 a8 48 1c 75 1f 48 09 ee 28 03 14 84 29 1c 55 dc 42 f4 fb a6 99 d4 e6 94 e3 b5 21 e3 a7 e9 51 17 62 6c 38 f4 f7 a5 5e 9f 35 37 93 4e 5c e2 94 9f 61 b1 69 59 87 18 a4 cf b5 30 9f 6a 49 5c 94 89 06 0a e7 a1 a8 0a 9c e7 91 52 02 46 0f 5a 18 93 f7 ba d5 24 d3 1d 84 51 c6 73 4a 23 62 72 29 01 c5 3b 7e 3a 55 3b 89 22 3d a4 f7 a7 00 3b 9a 1b b6 29 2a 8b 1f b8 Data Ascii: $O `A-4'gj~@@$RQJj0xp"<c\!)tr=h#g^GCV8.8Zm$Hi1cHuH()UB!Qbl8^57N\aiY0jI\RFZ$QsJ#br);~:U;"=;)*
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: b8 cd 38 1c 1c 7a d2 95 1c 66 90 0c 1c d0 2d 07 6e 39 c6 29 87 af 34 fc 71 e8 69 ae 31 83 40 d6 e3 72 73 cf 34 a3 91 46 72 69 c1 70 73 40 db 10 9c 51 8c 8e 68 73 93 4e 5c 12 49 e9 40 11 93 9e b4 ec 73 9a 52 07 d2 99 8e 33 49 82 63 b6 81 8c d2 7d 05 38 9d c2 9c be e6 8b 82 43 72 2a 78 d4 b3 80 79 1e b4 d4 50 cf 80 33 9a f3 cf 88 9e 3b b4 f0 b5 84 96 96 72 03 a9 4a b8 0a 3a 46 09 0a 4b 7a 1e e2 b9 31 78 9a 78 7a 6e a4 de 88 f5 72 fc be ae 36 bc 68 d3 5a b3 9b f8 ab e3 c5 b1 86 4f 0b e9 6f b6 67 c7 9f 22 9c ec c1 07 60 c7 f7 86 73 5f 32 bc e0 e4 0c d4 73 5d 4b 70 ef 73 3c 8d 24 92 12 cc cc 72 4e 7a f3 55 a3 25 df a6 07 a9 23 a7 ad 7f 3a e6 f9 9d 4c 6d 66 df c3 d0 fe c0 c8 b2 6a 19 66 1a 30 82 f7 ba b2 f4 28 08 32 39 d8 ab c9 27 8e 2b e2 bf da 33 e3 77 95 14 Data Ascii: 8zf-n9)4qi1@rs4Frips@QhsN\I@sR3Ic}8Cr*xyP3;rJ:FKz1xxznr6hZOog"`s_2s]Kps<$rNzU%#:Lmfjf0(29'+3w
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: df 8a 53 d0 54 6c 79 34 0b 40 38 26 97 b7 a5 34 64 1a 3a f5 a0 4c 52 3d 29 39 e9 4e 5f 9a 9a c7 9a 2f a8 f6 42 50 32 4f 3d 29 c4 77 a4 c6 7a 50 1a 0b 82 3a 50 0f 6e d4 a3 a5 37 04 0e 6a ef 71 8f f7 a6 ee 27 8e d4 1c 8e 28 db df bd 41 98 a3 81 4e 1d 69 9f c3 4f 52 79 cd 54 74 00 6c 03 8e d4 c2 00 38 1c d3 ca ee e7 d6 9b 81 43 34 4c 6e 77 76 a9 0f 04 0a 8f 9e 29 f9 e3 26 84 43 b8 85 b3 d2 9b c7 4e f4 a3 38 eb 40 19 e6 8b 8f 51 7b fa 50 c7 8c 51 9e 7d a8 e1 aa 93 06 f5 17 00 74 a5 2d 81 c7 e5 51 f7 c8 a3 19 e7 bd 2b 8e c0 72 29 e0 2e 33 4c e4 d2 86 f5 a1 30 6c 6b b1 c6 7b d3 37 37 04 0a 7c 98 cf 14 83 81 47 52 09 15 81 23 8e 69 ac e7 a0 14 a3 9f c2 a3 2d ce 45 0c 09 3f d9 a6 93 9c 93 4d c9 dd 47 38 cf af 6a 60 d1 22 9c 8c 9a 53 91 48 be e6 95 87 ad 05 58 4c Data Ascii: STly4@8&4d:LR=)9N_/BP2O=)wzP:Pn7jq'(ANiORyTtl8C4Lnwv)&CN8@Q{PQ}t-Q+r).3L0lk{77\|GR#i-E?MG8j`"SHXL
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 4a db f0 90 fd dc fd 7a d5 0d 5b 55 d3 3c 37 a7 c9 a9 6a 93 a4 22 30 4e 09 c1 e0 67 8c f5 ab f7 b7 76 7a 15 8c fa 96 a3 2a 45 15 ba 97 6d c7 1c 0e 4f e9 de bf 36 7e 31 7c 53 d4 7e 24 78 8e 5d 2b 49 b9 2f a3 42 c4 46 a8 a5 4b e3 ae 72 72 49 f4 af ce a8 50 75 a5 ae c7 eb 18 8c 44 69 43 4d fb 18 7f 15 fe 28 6a ff 00 13 75 74 49 e5 75 d2 2c 99 fc 98 71 c6 49 ea 71 dc f4 fa 56 87 c3 8f 87 f3 4e cd e2 5d 61 02 c7 f7 6d e0 71 8f f8 11 07 f4 cd 76 df b3 b7 c2 bb 0f 1a f8 9e 4b af 12 7f a2 d8 e9 d6 e6 78 60 c8 0d 23 82 14 07 cf 45 1c 92 7a d7 79 75 f6 cb ef 10 de e9 b6 11 f9 ad 68 37 c8 c3 01 36 e7 b0 e3 80 3d 85 7b ee aa a7 1f 67 4c f9 95 4a 55 65 ed 6a 6e 4a ba ad b5 83 f9 97 ed ba 30 bb 70 7a 0f a0 a3 c2 76 37 3e 3a d4 6e e7 7b 70 3c 3d 70 ac 83 6f c8 c1 90 63 Data Ascii: Jz[U<7j"0Ngvz*EmO6~1\|S~$x]+I/BFKrrIPuDiCM(jutIu,qIqVN]amqvKx`#Ezyuh76={gLJUejnJ0pzv7>:n{p<=poc
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: f0 47 22 be 83 2c cd 2a 61 6a 29 45 e8 7c e6 71 92 51 cc 28 b8 cf 47 d1 9f ac e4 07 21 87 21 bf 2f 6c 1a 85 90 e3 9a f8 b7 e0 d7 c7 99 7c 38 90 78 4b e2 0c de 66 9a b8 8e da f9 8e 1a 00 78 0b 29 62 49 4c f7 c6 47 7a fb 65 5a 19 e0 4b 8b 69 56 78 24 01 92 58 c8 64 65 3d 18 30 38 20 f6 fe 7d ab f7 9c 06 61 4f 19 05 28 33 f9 57 36 ca 2b e5 f5 9c 2a 47 d3 cc af 8c 1c 77 14 6e c8 34 ac 36 9a 8f 3b 45 7b 2b 43 e7 12 d6 e3 8a 8e b4 06 db 48 4e 07 ad 45 9e 71 43 66 b7 44 d9 cf 5a 66 7b 67 8a 66 72 7a d0 07 1c 1a 5a f4 21 8f 05 7b 51 dc 9a 72 af ad 3b 63 0e dd 69 a2 1b 22 27 34 a1 7d 69 fe 53 03 cf 6e b4 e6 4d bd f3 41 49 09 19 c9 c9 f5 c5 70 9f 10 da 4b 9b 5b 1d 3a 18 cb 4f 21 77 00 1e 08 5c 67 3d 3f 5a ef 10 60 e2 bc e7 e2 3d eb d8 5c e9 97 71 f0 fe 5c c1 49 e7 Data Ascii: G",aj)E\|qQ(G!!/l\|8xKfx)bILGzeZKiVx$Xde=08 }aO(3W6+Gwn46;E{+CHNEqCfDZf{gfrzZ!{Qr;ci"'4}iSnMAIpK[:O!w\g=?Z`=\q\I
2024-09-27 16:52:16 UTC	8000	IN	Data Raw: 49 eb 4e c8 1c 52 40 37 18 3c 9c d2 30 e3 ad 0c 40 34 84 83 c7 4a bb 80 d5 e0 d2 91 8e 45 3a 97 23 d2 a4 a6 07 1d 2a 3c 9a 7d 27 1d 28 24 4c 8e bd e9 31 81 46 79 cd 39 46 4f 26 92 d0 04 ff 00 68 73 49 c8 ed 4e 2a 07 4a 6e 4d 34 c0 93 af 1d 28 2d 81 4c 19 f5 a4 cf 39 a0 ab 81 c9 34 ec 0a 66 0e 38 38 34 a7 00 d0 4a 62 53 8e 48 a0 10 05 00 f7 14 90 0d dc 79 e3 02 90 f2 38 a5 65 27 e6 34 9b 7d 29 99 b4 d8 80 91 9c 50 1c 91 8e 94 10 d8 a5 03 24 50 2d 50 2b 13 4e 27 34 dc e0 62 80 45 06 a9 0e e2 90 e3 18 a2 82 49 14 de 85 31 ac c0 0c 1a 66 e1 4b cf 7a 69 f6 14 8c 64 87 81 c7 ca 69 ca 0f 42 69 b9 52 31 4e 57 5a 08 bb ec 38 16 7e f4 c7 3c 63 1c d2 ae 47 3d 28 6e 45 55 cd 56 c3 0f ca 3b 53 47 23 19 c5 3b a9 db e9 4d c1 07 15 21 24 4a 98 34 99 ec 28 8c 10 68 3c 74 Data Ascii: INR@7<0@4JE:#<}'($L1Fy9FO&hsINJnM4(-L94f884JbSHy8e'4})P$P-P+N'4bEI1fKzidiBiR1NWZ8~<cG=(nEUV;SG#;M!$J4(h<t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:17 UTC	635	OUT	GET /images/prices/tuina.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:17 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041e-27afb-5616f045cad80" Accept-Ranges: bytes Content-Length: 162555 Content-Type: image/jpeg
2024-09-27 16:52:17 UTC	7921	IN	Data Raw: ff d8 ff e1 26 60 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 29 00 00 00 66 00 00 00 32 01 02 00 14 00 00 00 90 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 c2 00 00 00 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 31 37 3a 30 38 3a 30 32 20 31 37 3a 34 36 3a 35 30 00 02 00 00 90 07 00 04 00 00 00 30 32 33 30 01 a0 03 00 01 00 00 00 01 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 10 01 00 00 1b 01 05 00 01 00 00 00 18 01 00 00 28 01 03 00 01 00 00 00 02 00 00 Data Ascii: &`ExifII*V^(1)f2i,,Adobe Photoshop Lightroom 6.12 (Windows)2017:08:02 17:46:500230(
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: ae 83 88 65 d3 0c 70 d9 e2 18 61 38 11 a7 75 47 d0 54 6d bc e3 9f 0e 81 c3 9e d3 6d a7 b6 78 ef 58 24 71 af 3b c8 4e cb 8f 1c f9 7e 2a db 0e 4f c3 9b 9f c5 93 dc 73 3b ee 2b ff 00 bc ee 30 3a 6c 19 6d 0b 4e 24 da c3 92 bd bc c7 ba 25 7f d8 5d ff 00 77 fb 7b 6b 97 a8 e3 e2 b3 2b eb e2 3e 87 e1 6d 3a db 48 d2 22 b6 8c 2a 24 08 17 61 81 eb d2 ab 0f 51 97 2d dd 71 ff 00 d2 27 da 03 59 db 41 c3 b6 93 72 4f 7e a6 4b d2 0e eb 6f 9e 50 9e 9d a1 cf ee ad 5e 33 68 cb d4 7c fe 93 db e3 3c c2 b4 40 82 4b 66 19 0c 3e 54 c5 34 24 07 c4 50 44 30 c2 7c 45 1a 3d 99 f6 74 cd 1d 47 6a 7a db a6 3a 51 a1 da 9f d8 a6 3a 52 d4 3e d5 ff d6 ef 0a 77 af 35 ec 08 ad 41 08 1c 53 d9 1e ae 3c a9 ec b4 7f 38 a3 65 a2 19 68 d8 d0 6d 37 95 2d 9e 81 6b a6 f4 a3 6a ea 11 99 89 a5 b3 d1 bd Data Ascii: epa8uGTmmxX$q;N~Os;+0:lmN$%]w{k+>m:H"$aQ-q'YArO~KoP^3h\|<@Kf>T4$PD0\|E=tGjz:Q:R>w5AS<8ehm7-kj
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: db 92 18 11 a4 76 f2 55 19 a4 72 3e 4e e2 3d 5e 7d 5b 5a bc d5 25 c9 92 ee 56 93 1e 4b d1 57 e8 b8 15 9b ae 7a 32 c6 59 53 0d 9f a5 4d 69 8a ee 1b eb 97 23 0d b5 2d ac 1b a9 2e 19 b2 5c e2 9e d3 63 c9 74 71 ca 5b 7a 55 72 8a b7 04 8f 7a 82 7f ff d3 ef ed 08 61 b8 ae 96 0a cd 4b 44 8e e5 08 c6 e6 9c c8 ae 2c b5 ef 0a dd c5 96 8c 64 79 55 f6 45 c5 81 e3 7e 1c bc 6b 7f b5 b4 6d 98 36 93 c8 a1 3d 7f 77 35 cd e4 e1 b9 b7 7f 83 cb d7 2e bf b7 3e 0a d0 5c 63 9b 0a dd 3e 75 e5 e5 1e ee 35 61 10 c1 28 d9 e6 1e f0 3d 6b 2a d6 55 06 b7 60 d0 cf f6 a8 54 1c 7b cb 8d 88 f5 ad 38 f3 d5 63 cb 84 b1 03 4d e2 8f b1 de 98 66 5e 4b 19 0e 23 f1 ec cf ff 00 c9 ad f9 31 ef ef f2 e4 e1 e4 fa 77 ad fe ab fb 9b b4 91 31 b1 56 e8 47 43 5c 9a 7a 1b 8a 88 b5 19 ec 1c c0 0e 6d 5c 92 Data Ascii: vUr>N=^}[Z%VKWz2YSMi#-.\ctq[zUrzaKD,dyUE~km6=w5.>\c>u5a(=k*U`T{8cMf^K#1w1VGC\zm\
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: ee d5 e0 51 95 f8 62 00 df e2 4c 62 a9 0a d0 30 89 3f 99 56 d5 c5 b6 a9 74 b9 10 81 32 9f 8f 94 18 fb f3 81 4c 10 65 1f 78 46 ca c2 f6 53 fc 89 aa 85 55 5c 1d 48 ae a9 74 29 3d e7 ff 00 0c 6d 20 1e 20 9c 6a 2f 83 a6 23 c2 16 f3 84 96 4c 93 e2 2a e8 59 dc 6d c6 59 34 0b 94 94 24 8d 07 57 87 68 fc 27 6c 6a 63 a2 ea 06 d9 52 e6 5d a8 b9 52 b8 d2 5a 71 e0 a7 48 4e 94 82 40 92 20 9f 5c 4b 65 47 84 93 f0 57 2b b3 6f e6 28 6d a5 3c a7 82 9d 48 87 4a 55 a4 41 df 49 e9 3e 78 61 9c 42 a7 58 b7 38 56 8e c3 79 7e 99 60 32 54 b5 25 01 0b 24 9f 11 1c ab 7d b7 fb f4 20 48 f8 aa 15 1a 08 d9 4d b9 4b 31 29 aa bd 2b 5a 80 29 49 f1 91 04 ed 1e bb ce 2d 50 71 0e 10 56 ba e1 81 cd 32 14 f5 6f bc a1 ed 04 39 a5 50 35 69 3b 4c 01 cf 1c e3 73 4e ab b0 b9 fa d6 ad 21 c0 36 53 9d Data Ascii: QbLb0?Vt2LexFSU\Ht)=m j/#L*YmY4$Wh'ljcR]RZqHN@ \KeGW+o(m<HJUAI>xaBX8Vy~`2T%$} HMK1)+Z)I-PqV2o9P5i;LsN!6S
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: e9 58 e7 10 00 5c a6 ed 63 b7 1a 9a 1b 9b f6 9a a7 5e 43 0a 5b cd db 56 80 54 87 5a 21 0d eb 30 27 52 16 0f 31 8b 72 06 c3 28 d8 40 6c 38 a9 43 d9 49 35 b5 f7 5b e6 74 bb 84 a9 db 5a 18 a5 b4 53 bc 0a 12 86 ea d2 a7 9d ac 41 51 dd 64 20 27 7f 14 1c 40 cc 94 35 e0 31 ad 6a e9 5f 66 f9 d1 0e 5f 18 6d f5 17 12 1d 52 5d 40 23 fa 8a 7c 43 7a 0c 89 4a 15 24 f4 c1 35 f0 44 aa 75 69 4b 09 1b ab 46 d3 a9 ef 45 48 7f bc 0b 46 94 a2 21 08 41 3f 89 33 bc c6 dd 3f b5 91 c9 51 83 11 09 66 85 d6 9b ac 69 45 5a 90 b5 00 60 92 27 ca 27 04 37 09 6f 04 b0 e1 4f 76 b6 e9 ea ad a5 a2 80 5b 75 95 25 60 ef 29 52 21 49 03 9f 10 f2 c6 d2 93 69 be 8b 9a 46 08 5c 8d e5 4a b4 6e db 50 1c 82 08 fa e1 72 eb 3b 66 11 92 bb 1c f6 8a 6a e5 50 b2 e7 66 f4 9d a0 34 a7 dc 4a 1a 6c d6 5a ec Data Ascii: X\c^C[VTZ!0'R1r(@l8CI5[tZSAQd '@51j_f_mR]@#\|CzJ$5DuiKFEHF!A?3?QfiEZ`''7oOv[u%`)R!IiF\JnPr;fjPf4JlZ
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: b8 05 0e 30 14 85 49 41 a1 bd 25 3e 2d 88 1f 73 c6 2e b7 0a b3 8c a3 dd c6 c0 10 04 00 07 1f 97 1b ce 0a 50 fc 96 8d 86 db 70 c6 c6 46 fe 5e 9d 26 71 84 61 4b 70 53 a2 99 d2 a6 87 4e 9b 6f 3b 75 df cf 14 dd ba b6 dd 90 55 62 41 dc fe 1f 2f 4e 23 6d f0 b2 53 07 25 5f f3 d7 7c 7b f4 a5 25 24 95 01 1e 50 48 3b 4e f3 8d 75 e1 30 63 75 7e da 25 57 b6 69 ab 95 58 b2 b4 aa 35 19 e7 61 27 a7 4d b1 a9 68 74 9c 2d 8c 88 52 fe 5d 42 da 64 05 c8 88 02 47 20 f2 77 3d 31 b8 b7 10 c8 2a 9d 6d d3 ea 89 c9 52 41 1b 4e e7 eb d7 8e 71 6c 0e 6a ab 92 d2 ab 3b 94 9d 3e 5b 42 a2 3f 6c 10 30 90 e1 25 14 37 47 39 d4 64 6f cc 01 3e 5d 70 52 a3 48 e4 b7 4d d1 66 77 3b 79 9f 87 a0 81 8c 95 9a 17 df cc d4 48 dc c9 db f1 71 3f e3 19 a9 4e 94 56 a2 f2 86 81 d4 b4 c8 04 9d 4b 00 08 e9 Data Ascii: 0IA%>-s.PpF^&qaKpSNo;uUbA/N#mS%_\|{%$PH;Nu0cu~%WiX5a'Mht-R]BdG w=1*mRANqlj;>[B?l0%7G9do>]pRHMfw;yHq?NVK
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: af 7f 5c 52 b1 a6 cd dc 61 b8 e6 3e 2b bf fe c0 be c9 36 ef 66 7e cd a9 ab f3 1d 25 1d 4f 6b 59 cd 86 6b f3 65 c0 04 bc bb 1d 12 9a 6c d0 65 5a 07 48 2a 43 54 08 ff 00 ca a4 90 97 5c 95 71 11 ed 9d 9c e0 74 f8 6d bb 5d 52 98 15 88 e7 ba f8 b3 b7 bd b5 b8 ed 57 11 ad a2 b1 36 4c 79 0d 83 82 d0 71 1e 44 64 7c 57 43 92 f3 6c a3 bd 59 d2 94 20 aa 26 0e 90 24 c1 31 b4 0c 74 35 37 92 20 05 c0 0d a1 73 93 db 53 da 67 24 da 32 8d db 23 bd 4d 4d 7c fe 64 db b4 f5 6c 1a 84 b8 29 df 0d 38 d3 15 4d a9 41 4d 31 55 4c e8 0a 69 cd 8a 08 94 99 8c 69 f8 9d 3b 7b db 2b 8b 7a d1 a5 cd 8c 85 d6 f6 5e e3 88 70 5e 2d 61 c4 ed 75 4d 37 c9 d2 62 7c 97 35 3b 32 f6 8e b4 30 29 2d 17 aa e6 a8 eb 90 96 d9 a7 5b ee 95 a6 ad 0d 21 21 2e b0 ad bb c5 c6 c7 cf 6c 78 3f 1f e0 95 78 6d 6e Data Ascii: \Ra>+6f~%OkYkeleZH*CT\qtm]RW6LyqDd\|WClY &$1t57 sSg$2#MM\|dl)8MAM1ULii;{+z^p^-auM7b\|5;20)-[!!.lx?xmn
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: c6 4f 35 f3 67 1a e2 95 78 ad ed 4a ce 71 ee 67 03 c9 5a 35 3a 80 37 81 b6 db 8f ee 31 78 2d 58 d9 26 54 56 24 24 8d 40 6e 7a 8e 9f b6 08 7c 14 12 9a d5 d5 20 c9 07 9f 23 fe 70 40 24 94 88 2a fc 47 71 b1 8e 7e 83 07 0a 25 28 d2 57 a4 28 78 b7 9e 7d 7f ce 33 4a 84 f8 b6 d5 a5 65 1c 6e 04 f0 67 fe 30 0e 0b 13 da 80 77 90 06 e3 ef 68 e9 18 4b b6 59 e6 9c 48 60 84 8f ec 70 ac 75 59 04 e5 7f ff d0 62 b2 ef 84 08 32 7d 47 cf cf 1d 0a f3 70 12 bd 2b a9 29 f5 3c 4f af 48 18 20 51 84 b9 4e ad 21 27 d7 7e 9b 47 9c 75 c4 82 b2 12 e3 2f 05 a0 00 98 00 1d cc 7f 69 3b e0 a5 64 25 46 1c 09 48 85 0f 23 89 06 14 80 8c 97 e0 14 cf 59 eb e4 3a 6d c9 c4 4a 90 11 ba 65 95 84 4f 43 b7 1e 5c e2 65 4c 27 45 12 c0 52 36 9d c6 de 9e 9b 4e 24 2c 55 af b7 75 b4 dd e2 81 e2 54 55 ee Data Ascii: O5gxJqgZ5:71x-X&TV$$@nz\| #p@$*Gq~%(W(x}3Jeng0whKYH`puYb2}Gp+)<OH QN!'~Gu/i;d%FH#Y:mJeOC\eL'ER6N$,UuTU
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: e5 b2 f1 8b 87 5c fe 23 95 2e e5 fb 65 03 2f 6a 60 ac 97 20 c1 e1 32 77 09 d8 40 c6 c2 93 1b c8 ee b5 55 eb 54 2c 3a 80 c2 94 29 db 43 49 80 67 7d a7 88 f5 18 ba c6 86 f3 5c f5 67 ba a1 92 12 9b 48 42 86 c6 3c c1 23 7f f8 8c 3c 00 63 aa a4 f7 38 1d 90 15 2d 68 49 70 04 cc c2 7a c7 fb 84 0f 3c 2d ed 00 13 cd 32 8d 4d 44 30 cc 24 b6 16 15 50 13 dd 94 98 3a 09 10 24 ec 3e 93 84 34 cb a2 15 fa ad 2d a4 4e a9 1c d2 a9 a7 2a 03 56 f0 42 7c 5c 81 e7 23 0e d3 3c d5 01 58 02 74 a1 5b 61 96 ce 85 82 a9 de 7a 8f a7 4d f1 21 ad 18 29 6f ab 51 e3 53 70 85 7e a9 96 5a 51 26 08 4f 03 9f 48 1c ef 86 1a 8d 6b 4a 5d 2a 15 6a 54 6c 09 04 a6 9b ab 5d 53 80 ac 92 37 3a 79 1a 66 01 24 08 04 e3 5b 50 9a a4 4e cb a0 63 5b 41 84 34 65 60 50 b6 a5 a5 44 12 15 a9 2a 42 77 1e 90 78 Data Ascii: \#.e/j` 2w@UT,:)CIg}\gHB<#<c8-hIpz<-2MD0$P:$>4-NVB\|\#<Xt[azM!)oQSp~ZQ&OHkJ]jTl]S7:yf$[PNc[A4e`PD*Bwx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49784	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:17 UTC	637	OUT	GET /images/prices/cupping.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:17 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041c-1a6bf-5616f045cad80" Accept-Ranges: bytes Content-Length: 108223 Content-Type: image/jpeg
2024-09-27 16:52:17 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 03 6e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 03 52 1c 01 00 00 02 00 02 1c 01 05 00 41 52 50 41 2c 4d 41 52 4b 2c 4d 45 44 54 4f 52 2c 4d 45 44 57 41 53 2c 4d 45 44 4c 4f 4e 2c 41 53 49 41 2c 41 50 43 2c 55 53 41 2c 43 41 4e 2c 53 41 4d 2c 53 50 54 53 2c 52 4f 4e 4c 2c 41 4f 4e 4c 1c 01 14 00 02 00 0b 1c 01 16 00 02 00 01 1c 01 1e 00 06 52 54 52 50 49 58 1c 01 28 00 08 30 30 36 37 35 31 31 35 1c 01 32 00 03 50 49 58 1c 01 3c 00 01 34 1c 01 46 00 08 32 30 31 36 30 38 30 38 1c 01 50 00 0b 31 36 35 31 35 36 2b 30 30 30 30 1c 01 5a 00 03 1b 25 35 1c 02 00 00 02 00 02 1c 02 05 00 14 4f 4c 59 4d 50 49 43 53 2d 52 49 4f 2d 43 55 50 50 49 4e 47 1c 02 07 00 08 4f 52 Data Ascii: JFIF,,nPhotoshop 3.08BIMRARPA,MARK,MEDTOR,MEDWAS,MEDLON,ASIA,APC,USA,CAN,SAM,SPTS,RONL,AONLRTRPIX(006751152PIX<4F20160808P165156+0000Z%5OLYMPICS-RIO-CUPPINGOR
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 56 c7 ad f4 c0 64 24 2a e3 1e d4 89 66 e0 38 e4 e4 b9 b4 d1 b7 ec c4 7c 1e bc d6 69 6a 68 74 5d b2 de 2d 09 7c b2 4a 0f a9 eb 59 5e af 93 46 de 04 ef 34 75 11 9c 01 c7 51 8c 53 f1 ea 98 2f a3 39 a9 69 48 5f 1e 5a e0 8e 70 2b a3 8f 53 c7 62 39 b2 82 6d 11 33 b1 03 34 8c c7 d2 17 24 d6 bf ad da ad ba 41 c7 7b e1 1b 4f 02 7e 09 ea ba f3 25 e6 a6 0e 91 60 1b 3b e4 5c cb 28 f6 55 ed f5 35 e7 bc 9f eb 0c 3a 74 e1 83 ee 97 fa 23 b5 a3 f1 79 24 f7 64 e1 7c 1f 77 f0 9f 82 bc 3b e1 28 76 78 7f 45 54 9c 8f 5d dc a9 e6 4c e7 ff 00 b8 f4 fa 0c 57 cf b5 de 57 55 ae 95 e6 9b 6b e3 d8 ef 63 c3 1c 6a a2 a8 b2 bb b4 bd b8 c9 7d ec 7e 73 58 10 65 45 dd b5 c5 bb 16 91 58 81 db e2 88 89 10 86 45 90 61 08 cf 70 6a 88 1a db 52 92 02 63 62 55 4f 0c a4 65 48 f9 1d ea 02 d1 4f ae Data Ascii: Vd$*f8\|ijht]-\|JY^F4uQS/9iH_Zp+Sb9m34$A{O~%`;\(U5:t#y$d\|w;(vxET]LWWUkcj}~sXeEXEapjRcbUOeHO
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: e6 86 c8 71 b2 0d 4b 21 09 21 f3 17 02 ad 4a 8a 6a c5 5f 4b 89 b9 20 67 34 d5 9d 8a 78 22 45 f4 d0 a9 fa 57 1f 4a bf 5a cb f4 92 10 ba b0 2d 85 db 80 29 f1 ca a8 4c b1 72 4a 3d 35 77 64 a8 3f 6a a7 99 91 62 45 85 b5 af 96 db 87 f8 ac f2 9b 63 e3 04 86 8e 71 40 30 f2 21 66 e7 8a 96 40 e1 14 0e 3a 50 f6 43 db 80 e0 e2 ae 88 45 f6 95 3c d5 94 c5 59 82 e7 3c 66 8d 20 4a 6d 54 09 23 78 c3 92 48 a7 63 54 ec 4e 4a 69 a3 13 ac da 4a f1 b3 05 c1 5e c0 57 7f 47 9d 47 b3 cd f9 0d 34 a6 dd 19 77 be cb 0c 1e 4f cd 74 b6 9c 67 23 c2 e0 96 03 70 cf 50 45 4e 09 47 65 bf 0a 4e 54 0e 3d f1 56 95 91 ba 14 37 bb 9b 24 fd 29 a9 21 2c 6a 2b bd ca 0b 1c 1c f3 cd 0b 41 a1 88 2e 81 2a 43 e6 81 8c 5f 23 ff 00 99 53 17 4c 9c f7 3d bd a9 55 c8 db 54 27 35 ca a3 7b 7c 53 a2 ac cd 2e Data Ascii: qK!!Jj_K g4x"EWJZ-)LrJ=5wd?jbEcq@0!f@:PCE<Y<f JmT#xHcTNJiJ^WGG4wOtg#pPENGeNT=V7$)!,j+A.*C_#SL=UT'5{\|S.
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 98 ca 38 3c d6 fc 31 92 8f df d9 e6 b5 b9 30 cf 2b 78 15 47 f2 59 c5 b5 48 62 dd e9 ad 19 6c b0 92 74 d9 1b 6d 24 f3 83 f1 c5 55 04 83 47 72 9c 05 01 4d 53 44 1a 89 dd 80 e5 4d 0b 44 0a 1c 8e 0f 5a a2 1d dd 91 c5 42 15 fa b7 9d f9 19 ff 00 2e db 65 f2 d8 a6 46 46 ec 71 45 0a b5 64 67 c8 0e b1 e1 7f 1f 06 d1 3c 47 6e b6 5a aa 36 c8 e4 07 19 61 fe 96 ff 00 63 5d e8 e0 d4 68 e3 eb 61 77 13 9d eb 63 cf 78 f2 70 64 ef 74 af 17 7e 1a df 3d fe 95 74 f7 3a 61 6c b6 01 2a 47 b3 2f 6f ad 6d 8e a3 4d af 5b 32 aa 91 92 50 cb a5 77 0e 50 f7 8d bf 14 61 d7 bc 18 b6 71 db 49 6d 74 ce 0c e0 9c a0 c7 b7 c1 3f e2 83 4d e2 25 87 3e e6 ed 21 99 35 fb e1 b5 2e 4d 57 87 6c ae 53 f0 12 e8 c5 e6 c5 73 77 6c f3 9c 1f 51 1f 19 ed 81 58 73 66 8b d7 26 fa 4c d5 08 bf 43 83 2b f8 3d Data Ascii: 8<10+xGYHbltm$UGrMSDMDZB.eFFqEdg<GnZ6ac]hawcxpdt~=t:al*G/omM[2PwPaqImt?M%>!5.MWlSswlQXsf&LC+=
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: c8 20 0f bd 37 0e 9d 4d 4e 08 0d fc d9 4d e3 4f 1c 5a eb be 2a f0 e6 a9 63 a7 5e db c5 69 70 17 cc 9d 76 87 05 86 40 fd e9 f8 74 af 1c 25 16 d1 1c 98 ff 00 8d 97 57 b2 fc 64 86 e3 42 92 da 1b ad 46 d9 44 6f 3a e5 0f a7 9f bf a4 d0 61 70 78 1a 9f 34 03 6e cd 77 84 13 54 b4 d5 5d 3c 47 e2 eb 0d 42 7b a5 f2 d2 d2 20 17 61 ef b4 75 3c 56 6c bb 5a ff 00 2e 2d 51 13 b7 d9 84 f0 3f 89 e1 f0 4f 88 35 ed 2e ea d2 f6 ec c9 73 98 52 da 3d d8 23 20 e4 7b 63 15 af 3e 17 9e 11 95 d0 30 7b 5f 06 cf 53 fe 33 f8 83 e0 8d 4e da 1f 0e dc d8 49 bd 3f 2e 2e 4e dd fc f5 e4 0e 31 58 d3 c7 a6 ca 9b 95 ff 00 03 94 65 35 d1 a5 fc 38 f0 72 e8 7e 1a b1 82 f2 ca ce 3b d8 e3 02 77 89 41 2c dd c9 38 e6 91 a8 d4 bc b2 74 f8 0e 38 d4 59 79 e2 0f 0a e8 5a ed a4 76 fa c5 94 77 4b 11 ca ef Data Ascii: 7MNMOZ*c^ipv@t%WdBFDo:apx4nwT]<GB{ au<VlZ.-Q?O5.sR=# {c>0{_S3NI?..N1Xe58r~;wA,8t8YyZvwK
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 38 4b 5c 87 1e c0 93 c9 fb 62 82 71 f8 1b 16 97 62 f0 cd ad e9 7a 44 1a d2 5e d9 eb 96 97 0a a6 47 b5 91 8b 42 ec b9 11 be f0 0e f1 df 00 81 d3 35 8f 26 05 2e c7 e3 d5 25 d1 4e 93 78 8f c6 9a cc 5a 3e 95 18 9f 50 91 4f 95 69 24 ab 13 3e 07 21 77 10 09 c7 6e a6 aa 38 54 46 bd 45 88 eb 3e 0b fc 46 d0 e5 7f e2 3e 0e d6 21 5e 77 37 e5 1a 45 ff 00 f9 97 22 98 90 bd e5 2b 5d 6a 76 52 79 57 11 24 6f d3 6c 8b b7 1f be 2a f6 32 9f 65 84 7a cc 8a e2 da e2 2b 45 90 36 32 27 4c 74 cf 5c e2 a3 8f 25 0e db 78 9b 4c 8e 15 69 c4 40 39 da 30 ea 48 c7 5c 80 78 ab a2 31 db 0b ed 1e f5 b7 43 73 6e 48 3c e5 c2 9f ef 56 90 23 46 c2 09 81 28 aa e3 fd 4a 41 cd 58 22 12 e8 e8 ef bb ca 00 03 8c f7 35 0a 63 16 fe 1d 77 5c af cf 6e 95 1a b2 26 40 40 6d ee 44 7b c1 1c 72 3b d2 da 1d Data Ascii: 8K\bqbzD^GB5&.%NxZ>POi$>!wn8TFE>F>!^w7E"+]jvRyW$ol*2ez+E62'Lt\%xLi@90H\x1CsnH<V#F(JAX"5cw\n&@@mD{r;
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 99 fa ee 66 24 d5 b6 df b9 4a 31 f8 26 d7 33 cd 28 79 65 77 72 79 24 e4 9f bd 55 d9 36 a5 d2 1b b3 ba 68 f8 2e 4b 13 8c e7 9a 38 70 26 70 4c 94 f3 82 e5 86 01 27 24 81 d7 8e f4 4e 45 28 d1 57 33 33 7a 81 c0 ed cd 2d b1 d1 e0 3d 85 85 e5 cc c2 3b 7b 79 25 24 a8 07 04 28 c9 e3 27 a0 fb d5 a4 e4 fa 29 ce 2b b6 6a b4 c8 2c 6c 74 29 60 d6 13 c3 ee b1 cb 24 72 2c 71 bc d7 33 72 18 07 3c 2e 01 27 6b 06 1d 2b 74 76 c3 1f 2d 7f d4 e7 65 4f 2e 4b 8a 97 fb 22 be e3 57 b3 fc bb 41 1e 9a 1a 66 40 bf 99 12 34 6c d8 18 04 aa 9d a4 fd 7a e4 d6 57 9e 0a e9 1b 23 a6 97 6d 82 5d 5b 50 bc bc b9 b8 bd 99 e4 37 28 16 5c e0 6f 03 a6 71 ec 69 12 cf 29 36 c6 fa 10 8a a4 88 3c 1e 54 db b7 8c 38 c1 d8 4f 4f 6a 5d b5 ee 1a a6 ba 19 f3 01 88 46 8a a1 17 f4 61 46 71 f2 47 5a 8d b6 5c Data Ascii: f$J1&3(yewry$U6h.K8p&pL'$NE(W33z-=;{y%$(')+j,lt)`$r,q3r<.'k+tv-eO.K"WAf@4lzW#m][P7(\oqi)6<T8OOj]FaFqGZ\
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 05 21 f8 5a 62 b0 18 c9 57 53 ce 3d ea fd 8a a2 af 50 8d e2 df 1b 0e 41 dc 30 3a 7b 50 7b 04 68 f4 d7 f3 2d 22 90 11 86 03 3c f1 59 32 7e e3 7e 1a db 45 a4 05 a3 54 f2 e4 db 9e a2 80 6d a3 93 b9 57 d8 0f da ae 8a dc 2d 70 dc 0e 4f c1 a3 48 a7 20 12 02 23 dc 41 23 a6 47 4a 62 14 e4 02 41 80 7d 8d 31 21 12 90 07 38 19 6c 0e 7b 75 a3 40 db 0f 68 b2 6d 01 72 e9 9c 95 ab a4 55 8c c3 73 a0 fe 4a e2 19 ad ee e3 d5 cb a9 86 75 b8 22 35 5c 1c ae cc 60 b1 38 3b 8f 6e 2a d2 54 4d d2 be f8 16 66 f2 e3 54 ca 90 41 cf b9 a9 b4 17 30 6c c0 8c 6d 1c f1 f3 9a 9b 41 de 2b 2b 88 d8 c4 8b d4 f2 4f 6a aa 0e 36 c4 6e a3 c1 e0 e4 e0 9a 5c a0 cd 2a 5c 16 3a 44 f1 44 a5 98 aa aa 8e 47 bd 57 a6 e4 1a cd 18 96 71 ea b6 98 66 17 11 ae d1 9c 16 15 6b 49 60 cb c8 24 41 7c 4d 61 1c 6c Data Ascii: !ZbWS=PA0:{P{h-"<Y2~~ETmW-pOH #A#GJbA}1!8l{u@hmrUsJu"5\`8;nTMfTA0lmA++Oj6n\\:DDGWqfkI`$A\|Mal
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 94 27 80 46 89 87 45 eb cf b9 e8 7e d4 e8 a7 66 79 38 a5 c9 7d 6c ab 0c 08 ca 85 98 b6 d6 53 8f dc 56 c4 a9 18 db b6 0e e2 3f 32 16 56 89 15 d6 41 82 fd 71 ed 51 a2 45 d1 97 f1 83 66 38 b7 05 44 2e 5b 18 ef d3 02 b0 6a fa 47 43 48 fe e6 66 25 03 7e 37 16 18 e7 8a c7 46 f6 c4 6e 19 1f 3c 1c ad 5d 02 c2 dc c8 1f 4f cb ab 8f ed 9a 6a 8f 02 1c d5 90 8a c6 e4 e9 3f 98 fd 31 33 65 4f 73 46 a3 c0 b7 3e 4a f2 24 08 80 e1 b3 da 89 15 68 1c 82 26 fd 05 b9 15 60 b6 45 ce e4 5d a0 93 df 8a 34 03 20 01 27 b9 00 f1 46 80 90 d8 83 27 0a a4 92 70 b8 ef f4 ab 40 85 81 15 25 36 d7 22 48 c0 53 92 17 90 7d aa 7b 84 84 a5 27 78 39 20 0e 3a f6 a1 0d 31 c8 1a 3f 20 15 19 93 1f bd 59 45 86 95 73 e5 80 db b0 51 b2 32 39 c8 e9 50 5c 8e 6a 13 49 34 be 73 9d c5 9f 24 a8 c7 5a bb 00 Data Ascii: 'FE~fy8}lSV?2VAqQEf8D.[jGCHf%~7Fn<]Oj?13eOsF>J$h&`E]4 'F'p@%6"HS}{'x9 :1? YEsQ29P\jI4s$Z
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: ea 1a ba a5 bc 88 2d a5 8f 74 2d e6 61 94 8e 18 36 46 07 4c f1 d8 d6 15 97 26 34 ed 72 74 e7 a7 c3 91 46 bd cb 1d 2a d2 e7 c2 70 b0 d2 65 93 55 7b 97 3f fb 58 e1 1e 96 3f e9 60 73 d7 de a6 4b d5 4b 76 46 a3 45 e3 87 d0 c1 fa 49 ca fd 8d 35 9d 8c 52 69 ef 3f 89 2c e4 b7 91 97 f4 38 20 2e 79 db bb 3e aa c1 27 f7 d6 37 68 dd 06 e5 0b ca a9 fc 13 d3 7c 35 0d 95 a1 bd b3 d4 ae 2d 85 c0 dc 63 2a a5 76 9f e9 39 e7 8e b9 ed 4b 96 59 cd d3 41 63 d3 c7 1a 6e 0f b2 86 ee 2f 11 49 2d c5 bd 8e b5 71 72 13 85 8e 59 41 11 9c f1 fa 40 eb f5 ad 58 e1 89 53 9a 33 4d 66 e5 63 99 f3 51 a7 6b 17 5e 22 84 5e dc b3 dc 47 36 fe 49 21 42 9c e0 1e dd 2b bd 28 63 fa 67 e9 aa 4c f3 91 79 be b1 47 23 b6 b9 fe 85 17 8d 19 b5 8f 1a 4b 65 68 f7 06 26 93 f9 0b 70 c0 b2 9c 73 93 f5 cd 69 Data Ascii: -t-a6FL&4rtFpeU{?X?`sKKvFEI5Ri?,8 .y>'7h\|5-cv9KYAcn/I-qrYA@XS3MfcQk^"^G6I!B+(cgLyG#Keh&psi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49781	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:17 UTC	635	OUT	GET /images/prices/herbs.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:17 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041d-8544d-5616f045cad80" Accept-Ranges: bytes Content-Length: 545869 Content-Type: image/jpeg
2024-09-27 16:52:17 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 dc 00 dc 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 03 b9 05 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 13 11 a9 51 e5 f6 Data Ascii: JFIFCC"Q
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 30 c5 d3 3f 25 69 da 97 5a 69 af 95 bc cf 20 9a fb 86 7d cd e9 ce 23 0f bf ba 83 12 72 e3 ad aa 8c a7 85 91 fb e1 aa aa 72 c7 09 e6 df 2b b6 76 b7 c4 ba 28 bc 06 19 5e 49 23 4e 6e 84 62 0c 07 4a e8 be 48 7a 75 51 6d a8 5f 94 a2 33 d2 a4 74 11 ac 90 d4 02 e9 58 d1 db e6 db 4d a6 98 95 e0 2d 6e 83 45 54 d2 57 e2 f9 1b b3 da 0c d3 9d 12 6d 32 81 42 f5 98 d7 1a 6f 3c 1e 30 a5 4c 14 34 ba 5a a5 ba d7 48 ce 99 a9 cb 18 f6 85 76 c5 0a c1 d7 24 bf 70 a8 13 63 57 b2 b4 3e 94 c8 3d 88 66 52 30 04 ff 00 b6 c8 e9 47 4b 1e 8d 7d 39 b0 f9 7a 5a 62 da aa ea e7 9c ca 8f 47 36 42 e3 98 d9 46 fb 46 9d 0b 3c f9 89 25 68 76 ae 6f b6 e2 e9 c5 d7 ac 66 e9 97 d4 66 7c db 7d cd ba 46 59 0b cc 37 45 e7 c5 b0 9a 70 44 ed 8f 57 b9 46 ea 4b cf 1c 6a dc b0 61 6d 37 77 f9 df 7d 0f 88 Data Ascii: 0?%iZi }#rr+v(^I#NnbJHzuQm_3tXM-nETWm2Bo<0L4ZHv$pcW>=fR0GK}9zZbG6BFF<%hvoff\|}FY7EpDWFKjam7w}
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 14 40 62 12 42 af 3a 51 a6 95 13 68 31 6a e4 12 b4 f2 ee 99 55 33 9f 74 e4 cd 14 37 98 3d 26 e6 c5 76 3c 9a ce 13 cb 5d 86 52 42 95 6d 5e 06 cc 6b 55 a5 9b ea e7 49 7c d6 4f 69 63 b6 fb d3 3c 52 6a e3 d5 29 2c 12 96 1d 9c 52 4d be 87 26 7d da 96 39 5b 92 a1 ac 3a 33 b9 fd 4f 3e e8 96 de ec bb 85 67 1e 2f ca 11 4e cb 2b d2 31 b7 c9 51 cd d5 9a d1 65 f6 16 e6 bd 71 fe cc 81 d2 79 73 8e 98 75 d2 95 1b d3 c8 44 aa 99 1e db 4d b8 4f d1 e6 74 be 8d 9b 79 e5 de 6d 19 fd f6 de 2f 63 1c 33 ef 65 3c 7e fa ca ce fb cf 7d db cf 25 ee d1 fa 7e 0d e5 b5 59 b7 90 97 bb 42 7f 43 69 7d f5 7b 4e 33 fb 68 7d 29 6d 4c a7 f6 d5 f9 38 9d 08 db 0d bc a2 e8 6c 20 a6 0c 46 0f 9b f7 9c fc ba 38 f5 cc 3c e1 f5 9f b3 98 fc ea 9d 8b 02 5b 57 7d 17 84 a3 3f a0 cc 97 c4 b7 bd 67 52 6f Data Ascii: @bB:Qh1jU3t7=&v<]RBm^kUI\|Oic<Rj),RM&}9[:3O>g/N+1QeqysuDMOtym/c3e<~}%~YBCi}{N3h})mL8l F8<[W}?gRo
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 34 59 9e ce 7a 21 b2 2f 64 67 9d ef 2f 40 45 1f 71 56 1f 09 f7 47 1a aa cd aa 89 4b bc f6 d7 20 35 32 26 65 2a bd 92 86 2a 8f a2 db 46 bf 8a 2c 8c fb 9a 07 19 be 2b 4f 56 cc e8 5b 7a 3e 6c f8 f8 f9 85 e9 bd 2a f6 f5 25 90 6d 34 95 b0 f9 ed 20 98 e4 56 ef 72 2a e4 48 9a 23 d1 55 f7 dd 1b 89 41 16 86 02 f6 74 0c 14 dc a8 64 d7 67 0b 43 32 2e 9d 16 c3 a6 05 fd e7 8d 19 ab 21 78 36 12 97 4e d2 69 e0 00 83 81 28 99 dd 76 87 24 6d cd 6c ce 5b a3 72 8a af 48 44 e8 2d a4 b2 d7 3b 73 1d e2 bc d5 67 d5 8f ce 35 91 3f 96 f4 db c3 e1 9f e4 36 05 4a f6 ab 55 93 95 7a f7 cd ac a6 d6 9d e4 54 41 02 fd 75 63 7c 29 43 02 3a 77 ca 15 9b e8 f0 bb 7e 1e b0 50 74 1c 45 82 3c e3 71 4d 74 7a af 6b 8c fe ca bc 4b 17 f1 fa a2 fd 4e 2d 1b ee 7d 75 f9 fa 27 98 47 55 93 ff 00 2b 93 Data Ascii: 4Yz!/dg/@EqVGK 52&e*F,+OV[z>l%m4 Vr*H#UAtdgC2.!x6Ni(v$ml[rHD-;sg5?6JUzTAuc\|)C:w~PtE<qMtzkKN-}u'GU+
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: b4 93 d6 e5 23 8b 35 ea b4 96 26 68 6a d6 d5 84 35 4a 64 eb aa 27 9b 28 65 59 48 01 32 e5 98 04 ad 50 a0 7b e7 c9 45 b6 a9 8a 7a cd 96 20 2a bc cb c3 71 90 0d ae 36 49 0c d3 b0 46 c1 b3 cc e2 3e 19 c9 ad 9b 34 78 d1 41 44 d9 b4 44 c6 5d 29 5d 55 33 ed 4b ca 2b de 14 23 34 6a f1 0e d8 04 b5 74 6c 8c db 2d 25 47 a0 d3 ed 77 9a cd 77 9d d5 77 15 dc 75 df 29 5f a8 a9 52 d8 0b 56 69 3d 06 c6 ee bb 2e 58 53 4f c7 72 db 2c 7a 76 fd 95 69 b4 89 ae af 5c e9 8e dd 45 d4 8a ae d6 b5 a9 cf 52 b7 ca 71 52 f4 d4 ef 76 a2 98 d8 26 59 71 1b 46 b5 9d 85 8d 66 ae b5 1a 9b 39 4d 8b 01 5e 1a 7e 32 ac 63 1c a4 07 a0 bf b6 2f e2 10 c3 5b f4 57 22 e5 6b 2a 22 9a ea e0 6f c8 85 5a c4 2a 55 66 d4 10 f3 57 ef 65 a2 63 e2 f8 57 71 cf b9 8c 2e 3b 12 f9 15 af 0e 49 62 50 e6 00 ab ae Data Ascii: #5&hj5Jd'(eYH2P{Ez q6IF>4xADD])]U3K+#4jtl-%Gwwwu)_RVi=.XSOr,zvi\ERqRv&YqFf9M^~2c/[W"k"oZ*UfWecWq.;IbP
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 18 8f 1e 21 d6 c0 41 44 e3 40 d8 00 7e a1 a1 8a af 53 c1 e9 d8 eb ac 9e 00 7d 45 79 17 b6 b4 6d f4 61 5b 91 56 c5 ec f0 c2 f9 9e 8c 58 e9 6d 4d 9b 97 c8 82 07 b7 4d 94 f1 62 cb 19 0c d0 d3 d8 5d 3d d6 8e c0 d5 d7 8f 8e 86 f8 20 31 01 00 80 e5 b8 e5 ca ee 94 49 06 d3 c6 bb b5 1b 1d 09 75 c9 7c 0a 22 e3 bb cd 37 1d 4c d7 36 db 23 5b a6 18 81 a3 4c 23 65 42 b1 26 59 1e 7d 5e c1 3d 37 80 30 1a 54 31 cd d7 af db d5 1e 33 8f d3 8f d2 33 f3 31 93 39 1c 70 53 f3 f9 c6 7e 76 34 e7 21 5b 09 52 f4 4e 79 54 d3 52 54 78 b8 8e 91 97 f5 34 ed c8 fa 7e 8c 43 d3 53 58 9d 3d c9 b3 91 85 f1 9e aa 74 aa 85 b8 89 6d e7 f3 3e 61 1c ad 32 4b ad 4f ca 4d 08 14 db b0 63 21 16 26 6d 28 a5 77 8f c9 58 10 25 48 ae bd 5b 11 e4 a3 62 ce 02 8c 94 a0 ad f1 57 5e 1d 29 56 08 e0 53 f2 6a Data Ascii: !AD@~S}Eyma[VXmMMb]= 1Iu\|"7L6#[L#eB&Y}^=70T13319pS~v4![RNyTRTx4~CSX=tm>a2KOMc!&m(wX%H[bW^)VSj
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 26 ba 58 51 d9 4b 8d d2 45 aa 43 47 c5 55 f5 e1 5b 1d 94 08 6b b9 36 ac 97 d4 a3 b2 d7 fb 61 5e c4 8c 29 f2 52 c9 cd b3 3a 57 18 31 61 db 48 e0 bb fb 9d 86 c0 44 5e f6 0d 85 cc 9e 68 ea 1b b0 c0 d7 6b 5a 9e 33 eb 39 bc a5 30 8a 43 11 9d 79 42 98 21 8e b5 32 da b3 fb 62 53 24 b0 18 1f 83 13 2f 11 91 e3 58 39 5a dc 46 56 11 7d 80 a6 63 34 c9 48 1f 4d b3 b4 d6 e3 98 fc ff 00 ac 9c 8e 73 9f d2 66 39 ff 00 7c fe bc 67 c6 4e 73 cc 46 6d 35 f5 6f a3 49 ad ad aa af 13 91 87 9f 8c 8c 9e 30 b3 7a 89 6d 3d 51 13 23 fd e7 3f 12 51 19 b6 70 8a 37 34 8e ab 29 36 44 f4 ac 83 aa e1 fa de a1 e3 d8 b8 22 73 83 ac 68 be f5 b1 bb 5e 2a dc 6b ac 9e 9f 6c d5 0b b6 4f 01 b9 ea 4b 11 8d d9 5e b1 9e 22 e6 b5 69 73 75 b4 c1 35 ee d8 eb 8d bb d6 25 8e b1 35 f5 36 99 8d d1 ca a0 b5 Data Ascii: &XQKECGU[k6a^)R:W1aHD^hkZ390CyB!2bS$/X9ZFV}c4HMsf9\|gNsFm5oI0zm=Q#?Qp74)6D"sh^*klOK^"isu5%56
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: af a3 4f 82 97 81 40 be 4e 01 e5 04 cd 05 ae 6e 9f 49 96 97 03 13 e5 79 71 19 bb fc 73 33 16 f9 f2 a6 4b a9 07 38 bb 00 24 d6 2f 3f 60 d5 55 ce f1 ab 5e d0 19 26 aa da e6 26 3b 98 da b2 c6 91 52 6f 02 33 f6 dd 34 7d ae bd 30 14 d9 18 84 af 9d 7f ce 5b e7 84 21 45 96 aa 44 26 84 76 c3 98 01 a0 c8 c9 e4 e5 31 c6 69 24 bd 9e 4c ce 0e 47 e7 06 33 fd cf e3 9c e7 27 27 f1 f3 cf 39 25 c6 35 c0 38 4e 19 cb 17 54 11 63 6b 56 22 de d8 0f 0d 45 05 a4 44 1c 10 83 82 8c f0 f2 0f 69 ea 1d fa e0 36 1b 18 96 3e df 8c 33 71 ed d9 72 96 c7 f6 6e 9c b1 fa 65 a0 b6 2a a6 a8 cf dc b9 4b 5c 73 66 14 be 1f ea 26 79 b6 da 0b be ee 80 4e 71 19 d3 e4 7f 4f f6 71 ce 6c 7e 15 71 a4 6f 71 49 18 fd b2 0c d7 9e 68 9c ec 05 9a be d3 86 ce 23 64 fe d1 aa d7 8b ab 2b 50 03 8b d7 c8 9b 75 Data Ascii: O@NnIyqs3K8$/?`U^&&;Ro34}0[!ED&v1i$LG3''9%58NTckV"EDi6>3qrne*K\sf&yNqOql~qoqIh#d+Pu
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 1b 75 a9 39 40 c4 74 64 fe dd de 66 ed 65 42 84 5d 1d 76 b5 d6 74 ea 5d f6 56 35 7b 14 5a 11 2c 1f d2 67 02 7e 73 9f d3 f1 91 91 f8 89 e6 22 7f 46 65 84 2d a0 bd 4d 18 31 11 88 88 8c e2 22 33 af e9 c6 47 e3 fd 7f bc 18 c9 e7 27 f1 1f 8f cc 73 f1 fe b8 f8 9f d3 8f 8c 28 f8 c9 f9 ce 33 8f ac fe 0b 19 19 bc d3 26 ce 3f 5f 79 78 9d 4b 79 79 cc 9e a2 8c c5 30 49 90 b6 a2 d4 d1 ba f8 88 9e 71 d0 0c 51 10 1e 7a 8d 91 08 25 c8 8e 86 7a d7 46 2f f3 91 81 39 cc e7 68 8c 6b 7e b7 6e 0a b1 9c 74 5b 4a 58 f5 c7 69 32 59 f6 12 53 62 7c 94 81 15 6b ec 64 20 75 b6 03 c0 90 fd c7 d9 fa cb 7a 10 d9 12 2a ae 8e ea 3f aa a3 04 7e 4b 9c e2 7a 41 46 17 f2 68 4c c2 83 ae 30 63 97 72 2c 4f 56 31 2a 18 c2 e3 c7 31 11 96 24 64 4c 88 33 5c c8 39 44 47 0c e6 33 98 cb c8 09 cb 5e 14 Data Ascii: u9@tdfeB]vt]V5{Z,g~s"Fe-M1"3G's(3&?_yxKyy0IqQz%zF/9hk~nt[JXi2YSb\|kd uz?~KzAFhL0cr,OV11$dL3\9DG3^
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: c4 35 4a 4b 09 f7 1c ba 8b 1c e6 06 3d d7 dd b6 47 04 64 c2 00 9c d5 42 d2 ad 05 49 96 2f 9e b0 5f 18 51 93 8c 2e 22 e3 7b db 61 17 67 16 32 7e 09 a4 38 36 2c 1c 8a a6 49 61 db 0a b0 40 d8 ad ce 15 79 15 be b1 0c d8 0e b3 5c bf 66 80 ac c2 bb a6 0d 27 de 5c c9 22 4f 2a ca ed 61 ad bf 46 55 8e 26 82 f9 04 04 16 59 48 4e 07 d3 2b ff 00 15 8f d9 c3 24 45 59 72 41 5d d7 b6 15 12 b1 15 fe 37 1b 24 ad ac 63 9f 6f ca 81 0a 6e f2 63 7e f2 e1 13 c8 98 a5 b1 96 c8 d8 65 cf ad ab 36 01 34 3b 4b 54 70 01 6a ea 50 36 f6 73 6c e8 b4 54 b5 5d 5c 13 6d f7 5a e8 da ee 96 36 ab 59 70 7a ae 3c ad f8 83 67 31 8a 1e 73 8e 65 9f 18 36 e2 02 b5 8a ca 07 58 3e ec b0 50 d6 59 f7 09 78 10 91 47 12 5d 7a 83 23 b4 bc b2 6c 76 64 44 cc 8a be f5 43 c7 96 3a 12 40 8e b1 d7 78 59 45 ab Data Ascii: 5JK=GdBI/_Q."{ag2~86,Ia@y\f'\"O*aFU&YHN+$EYrA]7$conc~e64;KTpjP6slT]\mZ6Ypz<g1se6X>PYxG]z#lvdDC:@xYE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:17 UTC	632	OUT	GET /images/prices/c2.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:17 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680416-167a70-5616f045cad80" Accept-Ranges: bytes Content-Length: 1473136 Content-Type: image/jpeg
2024-09-27 16:52:17 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 36 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0e 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 aa 87 69 00 04 00 00 00 01 00 00 00 be 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 36 20 50 6c 75 73 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 35 3a 30 38 3a 31 39 20 31 36 3a 32 38 3a 31 36 00 00 20 82 9a 00 05 00 00 00 01 00 00 02 44 82 9d 00 05 00 00 00 01 00 00 02 4c 88 22 00 03 00 00 00 01 00 Data Ascii: JFIFHH6ExifMM*z(12iAppleiPhone 6 PlusHHPhotos 3.02015:08:19 16:28:16 DL"
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 62 80 ae 55 98 ae 3d 0f 1c d4 1a 21 98 53 d0 0e 69 c3 d3 b1 ef e9 4b 86 04 9c 8e d8 14 ed a9 8c 63 8f 4a 04 f5 20 90 9e 71 f7 68 d8 48 2c bc 9e d9 a7 95 5c f6 6a 93 61 51 82 7e ef a7 5a 09 44 2a 18 81 b9 b1 4f 72 00 cd 4a 54 7a e7 1f de a6 00 a4 36 30 4f 03 91 41 4c 84 ae 42 bf 62 0e 7f 0e 94 1c 6e 20 0a 94 fc ab b0 75 ce 3d a9 36 fc d9 ff 00 26 81 26 47 83 b4 1c d3 30 07 dd 03 f1 a9 00 21 8b 76 3d 73 52 33 1c ed 38 c1 f6 a0 08 00 27 19 fb a0 8e 3e bd 69 c5 4b 13 92 39 f6 a3 f8 81 f4 e3 f3 a0 02 39 5e a7 f2 a0 5c a2 14 27 01 cf 23 a1 f4 a4 5e a7 6f 18 fc 6a 5d 87 69 52 73 c5 27 96 10 f1 c1 3e c6 96 cc a2 36 e5 7c d0 09 3d 08 03 3d 69 a5 4e e3 9e a0 f3 8e b5 23 2f 5c 1d bb b9 a4 e4 2b 14 3d 7a 9f 5a 60 44 10 8f 9c 73 8c fe 34 e6 ec ab 81 b8 7f 0d 3c 26 07 Data Ascii: bU=!SiKcJ qhH,\jaQ~ZD*OrJTz60OALBbn u=6&&G0!v=sR38'>iK99^\'#^oj]iRs'>6\|==iN#/\+=zZ`Ds4<&
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 18 27 d2 a4 50 d9 0c a7 ad 23 e4 0c 9f 7f d2 80 13 04 e4 9e 84 93 f9 53 36 06 38 3c 03 fd 6a 51 9c fb 71 fa d0 ca 30 43 1f a5 05 a1 3e 7f bd ce 17 a7 b5 30 28 01 91 58 fd 71 53 94 ce 53 38 0d d7 1c 9a 1a 34 41 92 38 cf af 34 0c 87 07 82 07 6a 57 01 89 63 8e 4d 3c 64 12 de 9f d6 9e 51 78 c7 4a 05 72 30 57 3b 40 c0 07 b7 7a 71 1f 26 cf 98 81 c0 14 8c 09 39 43 8d a3 bf bd 21 2c c0 92 c3 82 31 52 d8 d3 ea 07 61 e1 b9 27 f0 c5 18 53 c9 27 a7 eb 4a ca 37 16 5e 47 70 68 64 01 06 7a f5 e3 d6 9d c1 8d 44 1f 78 76 f5 a4 31 82 0b 12 32 a3 f9 d3 94 1e 99 c9 3f 80 c5 49 95 61 c1 18 27 9a 64 a2 06 e1 47 1c 8e 47 3e b4 e5 72 ac 17 1f 77 1c f6 a5 f2 c1 60 47 38 a6 90 e1 b1 9f 94 1f f2 28 2b a8 ec 7d c3 80 37 67 38 eb 4b e5 a9 cb 29 c1 fe 9f e3 53 15 39 e0 60 0f 7e 69 9b Data Ascii: 'P#S68<jQq0C>0(XqSS84A84jWcM<dQxJr0W;@zq&9C!,1Ra'S'J7^GphdzDxv12?Ia'dGG>rw`G8(+}7g8K)S9`~i
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 08 54 9c ee 14 d0 a4 95 c7 43 52 e7 76 57 8c d2 60 00 0f 61 45 f4 19 07 97 c1 20 6e da 71 d7 d6 9c ab f2 e7 3d 3a d2 95 04 60 11 8e b8 cd 4a 8a 98 c6 30 69 14 46 71 8e 39 07 a5 20 55 39 27 a0 35 29 1b 79 e3 9a 6a a8 3c 16 e3 ae 28 02 3c 31 2c d8 f9 48 e0 1a 72 90 38 c6 d0 06 29 cb f3 28 27 8f c6 9b d4 7c 87 68 ef de 82 6f a8 ee 14 0c 1f 9b 23 f2 a6 60 e7 25 88 1f 9d 20 19 52 7b 8a 7e d2 30 7d a8 1b 10 63 71 51 d3 ad 28 21 97 04 e3 3d a9 02 03 ca 9e bd a8 08 b9 14 09 21 a4 16 1b 73 8c 67 15 03 29 0c 15 b9 c0 cd 5a db 95 18 1f 76 a3 72 41 c9 38 e7 1d 0d 68 31 99 2c d9 6f c0 53 b2 9e 9d 3a 50 83 cc 7f 64 a9 0a 10 cd 9f 50 47 b6 2b 30 23 45 6e a3 90 7e f7 63 4b 80 46 06 47 7e 29 d8 38 19 19 c5 34 65 8e 49 07 b6 33 da 80 13 ef 1e 0f d3 3f ce 90 a0 00 81 d1 71 Data Ascii: TCRvW`aE nq=:`J0iFq9 U9'5)yj<(<1,Hr8)('\|ho#`% R{~0}cqQ(!=!sg)ZvrA8h1,oS:PdPG+0#En~cKFG~)84eI3?q
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: ec a3 3f 2e 46 3b fa d3 0e de 50 6d ca f4 a0 06 6c 00 f0 09 a7 ed e3 8e dc 53 d8 bf 21 17 07 b1 a6 92 72 41 38 e7 d3 8a 04 29 0a 0f a1 14 83 82 ce bc 10 3e b4 f7 19 3f 39 0c 7d 86 29 aa 0a 64 67 83 db 14 86 33 18 05 64 eb ed 52 04 23 a9 04 7d 68 da a3 a9 27 fa d3 9b 18 03 f9 51 70 23 21 7e eb 37 1e d5 1e 53 6f 20 ee a9 ca 80 09 c0 c7 6c 0a 6a 90 54 67 a9 a9 2b 42 2d a0 e5 73 8c 0a 50 06 76 1e a3 14 f3 18 3f 77 bf 07 e9 4a 14 a9 c3 71 ea 3b 9f c6 a8 5b 91 93 fb cd b8 e0 73 9a 50 0c 8d 8f c4 76 a9 d1 15 63 0a 79 00 7e 34 85 70 37 75 e9 b7 35 03 b1 00 56 c6 e4 e3 eb e9 51 a0 cb 67 04 63 f5 ab 7c e3 dc d4 6c 72 47 35 49 92 33 68 21 ba f3 c7 43 d2 9a 46 78 4e 05 48 c3 91 dc 7b 71 48 42 28 cb 1e 87 1d 49 cd 50 08 10 10 46 7e f5 2b 2a 8e bc d0 72 ec 33 8e 39 e2 Data Ascii: ?.F;PmlS!rA8)>?9})dg3dR#}h'Qp#!~7So ljTg+B-sPv?wJq;[sPvcy~4p7u5VQgc\|lrG5I3h!CFxNH{qHB(IPF~+*r39
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 8f 07 00 03 d7 8a 50 a1 80 23 8f 6a 76 06 38 03 8a 7a 84 72 31 c6 08 39 35 17 2a e4 4c b9 fb df 74 fa 76 a7 92 09 21 f2 73 4e 20 84 c0 e3 23 3f ad 30 0c 91 ca d0 d9 37 d4 1b a0 ee 69 3e 62 0e de 3b f3 52 7d d3 c6 38 a1 82 6d 60 7f 3a 9b ea 55 c6 12 ac bb 4e e0 47 e4 68 03 3c ff 00 3a 5e 18 80 39 04 7d 29 57 39 3e be fd 2a ae 31 bb 3b 8c 1f ad 3c 11 8e 00 a0 05 3d 0f 3c 13 91 c5 38 af 57 04 8d c7 18 f4 a9 4c 4d 22 2f 94 f5 23 e9 52 f5 e7 14 dd 9b 46 0e 0f bd 3d 78 cf 6c 52 16 a3 4a 8e bb 7e 5f d6 9e 37 10 aa 87 a7 39 20 72 28 03 3c f1 8a 50 17 70 07 19 1d 3d 28 1b 19 c7 de 05 54 9e dd e9 c7 25 40 1f 30 3d 28 50 37 97 6c 7c bd 06 3d 7d ea 57 0a 8a 1b d3 20 0a d0 64 18 f9 4b 8e 3b 7e 54 22 02 78 c8 c1 18 34 8d f3 47 b5 4e 31 ed 52 00 bb 14 fd e0 71 8e dd 2b Data Ascii: P#jv8zr195Ltv!sN #?07i>b;R}8m`:UNGh<:^9})W9>1;<=<8WLM"/#RF=xlRJ~_79 r(<Pp=(T%@0=(P7l\|=}W dK;~T"x4GN1Rq+
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 6f 7e 28 ea 32 4b ff 00 12 5b 31 6c 00 f9 9a 40 24 62 c3 93 c0 03 e9 8e 9f 91 15 e5 bf d9 b1 c9 a8 c9 aa 11 e6 4b 3e 4c cc c7 24 9f 53 9e bf 85 6a 5a c6 cb 38 93 3b fe 53 cf 43 bb 18 e7 eb e9 57 be c5 71 1b 46 ea 72 5b d1 48 1c f5 cd 7e 23 8e ce 71 18 a7 fb d6 7e eb 97 64 18 6c 2a fd dc 75 2a c5 6d 2b af ee c8 65 e0 e4 70 4e 07 1d 33 da ba 98 6f f5 bd 2e 34 7d 2b 51 b8 b6 77 21 81 46 f9 87 19 cf 5e b9 ab 30 5a 65 4b b2 7e ef 07 20 71 9f f2 6a e4 56 52 4b 12 46 f1 ee 0a 7f d6 11 90 b8 1e b5 f2 f3 9a 6f 53 e9 23 82 8d b6 3b 9d 13 e3 ef c5 cf 0c 94 96 c3 58 69 51 40 dc 92 a9 70 76 f4 6c 38 6e 7d fe b5 e9 5a 97 ed 27 a5 fc 43 d3 2d f4 7f 8a 1e 1c 5f 3d 24 0e 35 2b 23 b2 68 9b 3f 7d 43 70 dc 60 6d 27 1f 90 af 03 97 4e 80 a6 d9 10 ab b7 de 61 c1 38 e8 79 e2 b3 Data Ascii: o~(2K[1l@$bK>L$SjZ8;SCWqFr[H~#q~dlum+epN3o.4}+Qw!F^0ZeK~ qjVRKFoS#;XiQ@pvl8n}Z'C-_=$5+#h?}Cp`m'Na8y
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 94 ec 65 72 39 03 b0 e7 f9 d3 b6 9d c3 1f 77 d2 8b ea 08 89 3e ee 5b 9c fa d0 8a 40 e3 af 5e 95 28 8b 24 60 fd da 76 ec 7c c8 70 78 a6 d8 3b 11 a8 cf 5e fd 4d 00 12 09 6e c3 34 f0 0e 1b b6 38 14 9b 59 95 8e 46 31 8c 66 95 f4 00 c2 90 42 f2 31 c5 46 c0 aa 0c e3 70 eb b7 a7 e1 52 84 6f 99 53 00 20 07 f0 a7 37 20 80 31 42 60 57 db c1 ce 30 69 c4 17 04 01 90 07 ae 33 4f da 0e 4e dc 1f 5a 73 28 c6 14 52 40 44 02 b2 e4 8c 67 f1 5a 0c 6b f7 49 c7 07 a7 af f8 54 81 1c 00 d8 ea 3d 69 0a 81 c9 eb 4e c0 47 8d cc 72 71 c7 e1 48 43 15 2f 9c 01 f9 9a 90 6e dd c9 c8 f4 a0 aa fd 7a 9a 7a 01 11 19 c9 e9 e9 ff 00 d7 a4 da d9 0c 3d b3 f8 d5 80 ac 54 33 2f 6f 7a 43 85 c8 1c ee 14 20 22 6d a3 2a 0e 18 e0 60 d1 85 27 03 27 da 9c db 79 de 01 e9 d6 9c 43 e5 7f ba c7 92 7f c2 a4 Data Ascii: er9w>[@^($`v\|px;^Mn48YF1fB1FpRoS 7 1B`W0i3ONZs(R@DgZkIT=iNGrqHC/nzz=T3/ozC "m*`''yC
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 8e 4f cb db f5 a4 6d 8c 08 e3 9a 69 80 b8 04 17 42 79 ef 49 b4 73 b7 19 1d 0f 4a 72 8d a3 d8 7a 50 03 1e 9f af 5a 49 90 c8 cc 67 8c 76 eb 4d db 82 4a 8c 01 d4 9a 95 9d 58 16 39 53 18 cf d7 b5 46 c3 e5 64 f5 ea ad fc 54 23 44 c4 50 bd 80 cf ae 7d 28 20 6e ea 40 eb 9a 62 67 ee e3 b7 e5 52 79 64 64 29 f9 45 5b 10 e2 bd 5c 0e b4 04 62 78 e0 53 c0 dd c8 6e 3d e9 a4 ee 18 e7 ae 3d 38 a8 be 80 39 55 58 01 d0 ad 22 63 76 49 3f e7 39 34 8b 9c 95 43 c7 bd 3c 0c e1 87 41 48 a1 18 10 7e 80 7b d2 11 bc e4 60 ed c1 15 27 dc 62 17 8a 69 01 57 91 9c f4 34 12 46 17 6e 76 f5 a3 20 f2 c7 91 c0 db 53 2a ee 19 3c 10 09 3f 5a 89 81 19 f9 4e 07 20 fa 9a b6 8a 42 f9 7b ba 64 02 79 cd 35 06 5c 85 e7 d3 35 2e c5 71 92 4e de 33 48 e0 16 f3 1b a0 a9 24 68 5e 4b 12 b8 14 e5 c1 3d 38 Data Ascii: OmiByIsJrzPZIgvMJX9SFdT#DP}( n@bgRydd)E[\bxSn==89UX"cvI?94C<AH~{`'biW4Fnv S*<?ZN B{dy5\5.qN3H$h^K=8
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 2b 5d cf b5 fa 02 71 d7 d6 a6 96 18 42 ee 38 04 64 f1 df 15 84 66 cd 79 4c ad 8a a3 0b c3 7a d2 28 0e dc 0e 09 e9 8e 7f 3a b0 10 4d 2f 92 ae a1 8e 70 0b 75 3d 08 e3 f4 1f 5e d5 0d bd ab db 02 df da 2b f3 0c aa b0 ce dc fa d4 bd 48 d8 fa 27 f6 6e 80 1f 18 eb 32 10 01 16 2b 82 3d 1a 41 9a fb 2d 55 18 73 d4 7e b5 f2 5f ec e1 68 f0 df 6b 5a 9d d4 e2 46 78 a1 8e 3e d9 56 2c 49 f6 e5 31 5f 58 79 e8 30 46 0f d2 bc 3a bf 11 d0 9b b1 39 c0 f9 71 c1 a5 1c e0 e0 54 8b 86 01 c7 43 da 99 f2 b0 c1 18 ef 58 0a e4 32 5b 46 fc b7 f0 f4 f5 a6 08 50 74 0c bc f6 39 ab 78 04 71 d5 79 a8 c0 e7 e6 ea 68 45 5d be a5 77 12 28 38 39 cf 00 1f eb 50 dc e9 f6 7a 9d ab 5a ea 70 45 75 14 83 0c 92 26 e8 c8 f7 56 ce 6a e9 0a 71 bb b7 4f e7 52 c6 a7 68 cf 63 56 9b 15 ed b1 f2 9f c4 9f d9 Data Ascii: +]qB8dfyLz(:M/pu=^+H'n2+=A-Us~_hkZFx>V,I1_Xy0F:9qTCX2[FPt9xqyhE]w(89PzZpEu&VjqORhcV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49782	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:17 UTC	633	OUT	GET /images/prices/c3.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:17 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:17 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680417-57b454-5616f045cad80" Accept-Ranges: bytes Content-Length: 5747796 Content-Type: image/jpeg
2024-09-27 16:52:17 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 f0 00 f0 00 00 ff e1 01 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 08 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 6e 01 1b 00 05 00 00 00 01 00 00 00 76 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 7e 01 32 00 02 00 00 00 14 00 00 00 a0 87 69 00 04 00 00 00 01 00 00 00 b4 00 00 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 38 3a 33 30 20 30 32 3a 33 34 3a 34 35 00 00 05 90 00 00 07 00 00 00 04 30 32 33 30 90 04 00 02 00 00 00 14 00 00 00 f6 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 Data Ascii: JFIFExifMM*nv(1"~2iAdobe Photoshop CC 2015 (Windows)2016:08:30 02:34:450230
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 3b e8 73 71 bb f2 f2 1c bd 7e 8f f8 2f ef 1d 07 28 7b d1 a1 4a 11 42 c4 bc 82 96 d6 ce 12 5e 53 98 ae 75 23 10 51 11 c0 5a 80 83 0c 51 65 16 83 51 13 22 5c c5 02 14 10 c8 dd c0 5c 05 35 02 33 69 1b 29 68 e4 5a bb 33 04 86 19 91 e5 09 66 8f 57 bc 3a 11 02 7a 09 1a 30 44 15 52 1a 1b 58 41 91 20 cd e2 b1 24 aa 1e 6c 45 5a d5 c0 d6 99 83 06 a4 a2 99 c5 a6 81 9b ab 60 6b 9c b4 a6 90 af d1 6b 88 6a 40 1f 2f a3 be 83 c3 fb c7 e8 3e 55 df bd e1 fa 17 91 e8 fe 77 69 d7 f5 87 cb 7d 17 bd ed c8 5e 6e f7 5e 8f 91 5b f1 bf 50 b2 66 04 8a d1 a4 19 9b 29 48 0a b4 1e 47 12 32 12 cb 08 c8 98 25 9b 36 60 0a 12 c9 05 be 47 40 60 85 76 6e 84 2f 11 4a 66 d9 68 a8 29 0c 66 c9 b3 4e e0 39 68 9c 50 19 6c 2e ac 1a 53 6d 20 63 a3 4a 6d d1 30 71 5e 6a e2 18 6b 9d 7e 98 b3 65 69 b4 Data Ascii: ;sq~/({JB^Su#QZQeQ"\\53i)hZ3fW:z0DRXA $lEZ`kkj@/>Uwi}^n^[Pf)HG2%6`G@`vn/Jfh)fN9hPl.Sm cJm0q^jk~ei
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: e7 db 8e 3b 79 bf d0 7c fd 4f d3 fc cb 8e 9e 2b 50 3b 4f 1f d5 73 75 0b 5c 5e 17 c0 36 70 cb 4c f0 09 81 b1 62 67 b0 b5 59 22 26 9c f4 f5 1e 2e 4f b0 3d 9f 17 a2 f5 f8 2f bc bf 71 ff 00 e7 3f 79 f2 f7 da 7c d1 fe bf f3 fe 5f 4c ec 39 7a 7b bf 0f e9 a8 7b 3c 4a 3e a7 7d e7 f7 1f 97 b5 a6 69 cb f4 63 c7 62 38 56 6e 40 75 56 2e 8d b4 47 ba 73 27 45 23 27 41 f2 5f 65 d5 7c 47 d3 59 74 a3 9d 86 b1 6e c9 e5 fd fe 7f 9c 74 0e f7 83 d0 ee 39 ba ba 4c 2e 81 b0 6d ae 7c 23 b3 77 ba ae 6e be a8 b1 0a 9a c8 73 e9 51 01 40 18 d0 fb 67 61 28 91 25 4e c6 48 b3 14 a0 8a 81 b4 ab 0a 96 8c 94 38 59 35 92 e8 95 6b 98 d8 41 93 38 50 b2 0a cd cb 21 56 28 ad dd 39 2f 5b 83 a4 f3 3d 47 3c 1d 94 de 8e 56 4a b4 1a 73 52 ea 29 fa 71 6a eb 6b cf d0 30 20 8f a4 6f 47 ea 4f b9 fc c6 Data Ascii: ;y\|O+P;Osu\^6pLbgY"&.O=/q?y\|_L9z{{<J>}icb8Vn@uV.Gs'E#'A_e\|GYtnt9L.m\|#wnsQ@ga(%NH8Y5kA8P!V(9/[=G<VJsR)qjk0 oGO
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 6f df e3 fd c8 12 ff 00 da f3 3a 6f 2f d5 4f e7 df a1 7c c9 f6 ff 00 1c af ac f8 6a c4 d2 cf 93 d1 b4 e4 df 97 ec f3 b9 16 5a be 4f 52 8b 87 b3 94 e4 ec 6d cb d3 46 59 be 22 8f 4c d9 ea 02 9b dc 73 6c ac 76 2f 07 ae ff 00 87 a6 c7 c8 f5 5c 8d 53 af 39 b5 8a d9 8c e4 22 64 3d fe 6f d5 64 fd 0a a3 2d 72 f3 fd b3 ba 99 f6 62 bd b0 e3 76 cb 86 ee e5 e7 3a 83 ec 74 f4 af 37 a7 d0 78 fd 17 d8 93 2e ea cf 49 41 28 ea 00 e1 c6 af 01 94 af 2b a2 94 8b 26 49 90 1a 54 21 0c 07 48 65 29 c0 a8 18 0b 9a af 74 a1 db 97 9a eb cb 9c d4 72 7e 86 0c db 32 74 06 bb f0 a7 9b a4 28 74 b5 4e 30 d9 61 57 98 b3 c3 ae f3 8f d0 33 b7 d1 fe 83 fb cf e9 1f 8c 3c f3 3d 6a 6f b3 fc bf e4 ff 00 cc 3f a2 7e bb e9 f9 77 df 4b e2 76 1e 77 4a fe af e4 42 33 73 1a 8d f9 e8 3b 78 2a 1d 5d f9 Data Ascii: o:o/O\|jZORmFY"Lslv/\S9"d=od-rbv:t7x.IA(+&IT!He)tr~2t(tN0aW3<=jo?~wKvwJB3s;x*]
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 63 af 44 23 b9 66 7b 95 75 96 b7 4b 95 f6 5d 47 b4 5e 86 14 ce 6c b2 cb 40 4c fa 22 03 6a bf 54 60 b3 1c 95 99 66 a5 86 a5 ab ab 62 1a 38 ae 74 66 26 ac 8d 93 46 90 ae d2 65 4d 6d 3d 73 dc f1 7e d7 fd 0f f3 1e ab d6 f3 3d 4b e5 3e 9f f3 e3 d0 e3 f7 cf 9d fa 0f 74 f7 3e 6f d0 7c 5f 7e c3 87 a7 86 f9 ff 00 5a 41 8b 41 0d 1b c0 5a e6 08 82 2c 8a b6 0e df 39 a1 20 69 ae b9 0e dc 2b 0b 38 49 25 f5 1c b2 0a 00 56 65 09 a3 72 58 3b 31 cd 58 ae ac d4 b1 6c eb 56 a9 76 ad 45 0e ca ee cb ac ea ca 93 a9 78 3f 47 cb 68 9b 3b c7 a9 de 1b b9 e6 36 19 ec fb 36 3a a5 8a 33 89 9d ae ae 9d 5b ae 23 7c a7 49 b3 54 9d 2b cd af 3f 37 a3 51 ec 94 fd 79 d9 e2 2d 39 37 f5 bf 2f d4 3c d3 42 8b 58 57 90 d3 4c 5b 6e 1a 90 c1 8b 1a 6d 06 f9 06 61 d9 62 f4 d9 bf 9d fd 9f ca 9b ab 8f Data Ascii: cD#f{uK]G^l@L"jT`fb8tf&FeMm=s~=K>t>o\|_~ZAAZ,9 i+8I%VerX;1XlVvEx?Gh;66:3[#\|IT+?7Qy-97/<BXWL[nmab
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 30 b3 aa 6a a8 96 31 63 2f 4c 47 93 f0 76 71 7e 9e fe 7d ec 78 fc b7 7f 9c 4b 56 fe 47 6b 8f 23 db aa ec e7 e8 3c df 47 b2 f1 bd 9e 23 dd f2 2f 78 ba 84 8b cf 7a 5e 6f b7 7c 77 d4 f1 3f 47 e7 74 3c a9 e7 fe af 2b f3 8f d0 5f 2f ee 7b 0f 9f d7 d3 69 d7 c2 6d e7 f9 5f d2 f9 9e 02 bd 3d 3f 1a f9 0f d7 7c be 5a d3 a7 c4 fb 67 c7 ee b7 5d 5b 4a de 99 3c 06 21 8b 68 82 56 70 68 84 16 b5 ea d5 09 bf 01 f5 5f 24 cf d2 f3 6c f2 7b de 0f 49 c0 6e af 9b ba bb af 8f dd bd 8f 1b ef bc 79 e8 3e af e6 3d 13 cf ef f9 73 e6 7e bb c3 fe 73 d8 da e6 eb 23 74 95 71 cf cb 3b b8 e9 1b 3f 08 d7 aa a9 3a 67 3d 9b 79 be d5 df 8f e8 f2 5e c7 93 ea ff 00 1f ee f2 1e df 27 6b e2 fa 81 d3 0e 23 e8 38 3e 92 f8 cf 63 c7 be 9b cb 61 d1 cf 6f cf d5 eb fe 2f 77 4c 76 ec 78 fa 58 6c 9f 22 Data Ascii: 0j1c/LGvq~}xKVGk#<G#/xz^o\|w?Gt<+_/{im_=?\|Zg][J<!hVph_$l{Iny>=s~s#tq;?:g=y^'k#8>cao/wLvxXl"
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 77 dd 9f cf 7f d4 5e 81 f3 7f 1f f2 97 ec 5f 94 fc bd fa d7 e7 f6 f9 7b 3f aa 7f 99 fe bd ec 0d f3 93 71 15 76 46 9c bc 0f a7 c1 cf f7 e3 cf f3 f5 30 0d cb 27 bd cc 62 be 3b ea f1 72 97 cf 0d 72 f1 ff 00 ab f9 8e a7 c8 f6 1b eb 93 4d ab 4e 4e eb fe 3e 9f 4b e1 d3 d0 f5 f3 1d 92 fd 01 b3 65 28 73 9e 8e 13 45 e6 cc 74 2c c9 a9 8d 59 35 ce ed 60 db 45 43 e3 e2 de ef 99 f6 3f e4 3f b7 7b 4f 2e 35 5e af 1f 73 cb ad a9 24 db 06 9a f2 f4 50 6f 83 fe 6f fe 8d f9 87 94 37 b0 7c bb 96 0d ef 19 79 84 73 9f 94 7d 5f ca 84 e9 d8 78 7f 45 61 87 1f 9b 7d 3f ce bc 1d ff 00 a5 bc 9e df 75 fa 07 e3 fe a7 e4 fb be 0d fa 0f e3 9e 2f f8 a7 f5 1f d2 9f 5d f9 7f 5b cb ee f6 1f 41 f1 f3 e9 79 03 c7 a6 8b b3 cd a1 eb c5 8b e1 c4 bf 9d e5 7c fe 97 86 79 7e d7 13 e7 7a ec 31 dd 8f Data Ascii: w^_{?qvF0'b;rrMNN>Ke(sEt,Y5`EC??{O.5^s$Poo7\|ys}_xEa}?u/][Ay\|y~z1
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 4e 9e d7 4f 93 fc 0c fa 45 a7 cb b4 4f 9a 83 76 9e 0f d4 76 7c 3e a7 a3 f9 5d be 6d f5 5f 23 c5 5d 76 5c 1e ed 1f a1 f3 fe f7 e3 7d 4f de 7e 77 91 ec d8 ec 1f 43 82 8d 3a 6a bc 6f 5b 77 f9 ec b7 6b ed 1b d3 d3 86 bf a7 8b 8f e5 eb f1 4f 73 e4 7f 3e 7c ef b0 e1 7d 5e 1e 43 d6 f1 fa 5f 37 b5 b6 a9 4d d9 cd 71 c7 a7 3d e9 f9 fe 91 f3 be ef b7 f8 be 93 92 48 18 45 83 65 5f ba 36 60 ce 56 cc 02 c8 1d 2f b2 7d 6c 7d df f4 4f c9 a3 d5 f3 fe 82 f9 9f a6 a5 f7 3e 61 9f 1f 4f 83 a8 f8 cb 41 e6 be 47 d2 bf f2 7d 6f 59 f8 af a4 26 99 36 d9 5b eb 36 64 61 a2 b2 6c 59 cb c4 fa 9e 6f 8d f6 05 d3 99 ae 1f a7 eb 7f 96 fd 03 eb 4f 0d 7d 5f 97 3b 0e 8c e9 f3 d2 c9 9e ab d2 f2 b8 2f 3f a3 b1 cf 6f 45 28 1e ee 67 80 f9 27 67 8f f9 2f 97 d4 71 1e bf 8d f6 17 e7 1f 61 c8 7d 07 Data Ascii: NOEOvv\|>]m_#]v\}O~wC:jo[wkOs>\|}^C_7Mq=HEe_6`V/}l}O>aOAG}oY&6[6dalYoO}_;/?oE(g'g/qa}
2024-09-27 16:52:17 UTC	8000	IN	Data Raw: 86 dd 27 3a fd 0f e2 7a de e2 6f 08 ec f2 7c b3 bb cc 9f a4 f2 7f 56 98 fe 73 79 9e af cf 1e 9f 89 e5 fd 9c 95 1a a3 67 5f a9 be 7b d2 32 4e 03 1b 54 77 93 e7 56 a7 4a f7 0d 08 6d 9c 1d 0e d0 68 22 d0 36 4c e9 a3 ab 7d 55 b3 06 6c 58 d3 6a 66 c3 df c7 67 e8 6f db fe 6e 0f b0 f8 bf 46 fc fb f4 0f 86 3e a7 c0 fa 3f e5 fe b3 d7 fd ef 98 f5 0f 9c fa 3e 5d 3a 3e 68 f9 5f 79 75 16 30 36 03 86 e0 02 99 e2 8d 3a 59 a6 53 1d 0c 58 96 bd 67 93 d9 5e bd 0c b0 a9 1e a6 26 a4 2b 2d 72 68 bc b3 4d db 4a 47 c2 89 f3 ac d3 3a c6 aa c6 75 bb b5 19 ca 99 92 18 f6 18 f4 78 97 5e 7c 47 7f 24 e5 b7 65 e4 fa 54 be 9f 31 3c fe ef a6 7f 0f fd 73 ad fd 53 f3 1f bb dc a0 d5 09 53 73 6a e7 a7 03 2a 79 c6 3e a7 73 c1 d7 e8 f8 2d cf 67 0f 97 f5 f3 7c 0e be 8f d8 3c 9c bf 78 7d 57 c5 Data Ascii: ':zo\|Vsyg_{2NTwVJmh"6L}UlXjfgonF>?>]:>h_yu06:YSXg^&+-rhMJG:ux^\|G$eT1<sSSsj*y>s-g\|<x}W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	633	OUT	GET /images/prices/acu.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	268	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680414-252a-5616f045cad80" Accept-Ranges: bytes Content-Length: 9514 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7924	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 84 00 06 04 05 05 05 04 06 05 05 05 07 06 06 07 09 0f 0a 09 08 08 09 13 0d 0e 0b 0f 16 13 17 17 16 13 15 15 18 1b 23 1e 18 1a 21 1a 15 15 1e 29 1f 21 24 25 27 28 27 18 1d 2b 2e 2b 26 2e 23 26 27 26 01 06 07 07 09 08 09 12 0a 0a 12 26 19 15 19 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c2 00 11 08 01 2c 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f2 e1 24 96 66 66 62 60 86 31 24 c8 00 80 c9 21 32 49 37 5d f7 8b e3 80 82 49 24 b4 24 92 cc ec cc 48 26 46 26 19 00 02 08 0c Data Ascii: JFIF,,#!)!$%'('+.+&.#&'&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&,"$ffb`1$!2I7]I$$H&F&
2024-09-27 16:52:18 UTC	1590	IN	Data Raw: 07 c3 08 3e 18 48 79 96 ca 45 14 0d 21 07 c0 3f 48 41 af c3 f4 84 9a fc 3f 48 06 bf 0f d2 36 d1 bf 48 71 35 ba 92 22 65 bd 80 9f 28 7d bf bc d9 82 0e 20 8d 0e 9a 62 d0 b3 0e c9 e9 27 10 91 f5 a4 5e 4f a8 8f 86 37 d2 3e 17 9e 9d 08 8a b6 39 45 6e f3 cf d5 ad 69 47 ab 4b ae 0a c7 41 6f cd 00 35 56 42 c7 9e 85 61 73 2e a5 4a 4e 15 80 90 8d 48 0d b6 91 76 02 12 30 ec f1 d2 10 20 1e e8 07 ba 12 83 2c f5 28 12 f0 07 91 c2 10 7b a1 27 b8 42 0f 86 10 af 08 84 2a ba 83 f4 84 2a ba 82 12 6b f0 e0 1a fc 3f 48 18 fc 3f 48 22 b4 41 1c a1 f4 6c 06 26 9b f0 56 1e b3 6d d9 09 b5 20 80 d3 e9 2a fe 9a d0 fa 56 0c 95 af 3b 2b 4a 25 a7 94 13 ca b5 1e 91 f0 4f 61 f0 93 ca 35 47 3c f7 54 14 3c 26 b0 1d 32 13 a3 10 f3 00 13 c4 67 c6 17 34 ea 54 53 84 00 13 a9 e9 01 b4 a7 56 02 Data Ascii: >HyE!?HA?H6Hq5"e(} b'^O7>9EniGKAo5VBas.JNHv0 ,({'B*k?H?H"Al&Vm V;+J%Oa5G<T<&2g4TSV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49786	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	375	OUT	GET /images/prices/tuina.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041e-27afb-5616f045cad80" Accept-Ranges: bytes Content-Length: 162555 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7921	IN	Data Raw: ff d8 ff e1 26 60 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 29 00 00 00 66 00 00 00 32 01 02 00 14 00 00 00 90 00 00 00 69 87 04 00 01 00 00 00 a4 00 00 00 c2 00 00 00 2c 01 00 00 01 00 00 00 2c 01 00 00 01 00 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 4c 69 67 68 74 72 6f 6f 6d 20 36 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 31 37 3a 30 38 3a 30 32 20 31 37 3a 34 36 3a 35 30 00 02 00 00 90 07 00 04 00 00 00 30 32 33 30 01 a0 03 00 01 00 00 00 01 00 00 00 00 00 00 00 06 00 03 01 03 00 01 00 00 00 06 00 00 00 1a 01 05 00 01 00 00 00 10 01 00 00 1b 01 05 00 01 00 00 00 18 01 00 00 28 01 03 00 01 00 00 00 02 00 00 Data Ascii: &`ExifII*V^(1)f2i,,Adobe Photoshop Lightroom 6.12 (Windows)2017:08:02 17:46:500230(
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: ae 83 88 65 d3 0c 70 d9 e2 18 61 38 11 a7 75 47 d0 54 6d bc e3 9f 0e 81 c3 9e d3 6d a7 b6 78 ef 58 24 71 af 3b c8 4e cb 8f 1c f9 7e 2a db 0e 4f c3 9b 9f c5 93 dc 73 3b ee 2b ff 00 bc ee 30 3a 6c 19 6d 0b 4e 24 da c3 92 bd bc c7 ba 25 7f d8 5d ff 00 77 fb 7b 6b 97 a8 e3 e2 b3 2b eb e2 3e 87 e1 6d 3a db 48 d2 22 b6 8c 2a 24 08 17 61 81 eb d2 ab 0f 51 97 2d dd 71 ff 00 d2 27 da 03 59 db 41 c3 b6 93 72 4f 7e a6 4b d2 0e eb 6f 9e 50 9e 9d a1 cf ee ad 5e 33 68 cb d4 7c fe 93 db e3 3c c2 b4 40 82 4b 66 19 0c 3e 54 c5 34 24 07 c4 50 44 30 c2 7c 45 1a 3d 99 f6 74 cd 1d 47 6a 7a db a6 3a 51 a1 da 9f d8 a6 3a 52 d4 3e d5 ff d6 ef 0a 77 af 35 ec 08 ad 41 08 1c 53 d9 1e ae 3c a9 ec b4 7f 38 a3 65 a2 19 68 d8 d0 6d 37 95 2d 9e 81 6b a6 f4 a3 6a ea 11 99 89 a5 b3 d1 bd Data Ascii: epa8uGTmmxX$q;N~Os;+0:lmN$%]w{k+>m:H"$aQ-q'YArO~KoP^3h\|<@Kf>T4$PD0\|E=tGjz:Q:R>w5AS<8ehm7-kj
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: db 92 18 11 a4 76 f2 55 19 a4 72 3e 4e e2 3d 5e 7d 5b 5a bc d5 25 c9 92 ee 56 93 1e 4b d1 57 e8 b8 15 9b ae 7a 32 c6 59 53 0d 9f a5 4d 69 8a ee 1b eb 97 23 0d b5 2d ac 1b a9 2e 19 b2 5c e2 9e d3 63 c9 74 71 ca 5b 7a 55 72 8a b7 04 8f 7a 82 7f ff d3 ef ed 08 61 b8 ae 96 0a cd 4b 44 8e e5 08 c6 e6 9c c8 ae 2c b5 ef 0a dd c5 96 8c 64 79 55 f6 45 c5 81 e3 7e 1c bc 6b 7f b5 b4 6d 98 36 93 c8 a1 3d 7f 77 35 cd e4 e1 b9 b7 7f 83 cb d7 2e bf b7 3e 0a d0 5c 63 9b 0a dd 3e 75 e5 e5 1e ee 35 61 10 c1 28 d9 e6 1e f0 3d 6b 2a d6 55 06 b7 60 d0 cf f6 a8 54 1c 7b cb 8d 88 f5 ad 38 f3 d5 63 cb 84 b1 03 4d e2 8f b1 de 98 66 5e 4b 19 0e 23 f1 ec cf ff 00 c9 ad f9 31 ef ef f2 e4 e1 e4 fa 77 ad fe ab fb 9b b4 91 31 b1 56 e8 47 43 5c 9a 7a 1b 8a 88 b5 19 ec 1c c0 0e 6d 5c 92 Data Ascii: vUr>N=^}[Z%VKWz2YSMi#-.\ctq[zUrzaKD,dyUE~km6=w5.>\c>u5a(=k*U`T{8cMf^K#1w1VGC\zm\
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: ee d5 e0 51 95 f8 62 00 df e2 4c 62 a9 0a d0 30 89 3f 99 56 d5 c5 b6 a9 74 b9 10 81 32 9f 8f 94 18 fb f3 81 4c 10 65 1f 78 46 ca c2 f6 53 fc 89 aa 85 55 5c 1d 48 ae a9 74 29 3d e7 ff 00 0c 6d 20 1e 20 9c 6a 2f 83 a6 23 c2 16 f3 84 96 4c 93 e2 2a e8 59 dc 6d c6 59 34 0b 94 94 24 8d 07 57 87 68 fc 27 6c 6a 63 a2 ea 06 d9 52 e6 5d a8 b9 52 b8 d2 5a 71 e0 a7 48 4e 94 82 40 92 20 9f 5c 4b 65 47 84 93 f0 57 2b b3 6f e6 28 6d a5 3c a7 82 9d 48 87 4a 55 a4 41 df 49 e9 3e 78 61 9c 42 a7 58 b7 38 56 8e c3 79 7e 99 60 32 54 b5 25 01 0b 24 9f 11 1c ab 7d b7 fb f4 20 48 f8 aa 15 1a 08 d9 4d b9 4b 31 29 aa bd 2b 5a 80 29 49 f1 91 04 ed 1e bb ce 2d 50 71 0e 10 56 ba e1 81 cd 32 14 f5 6f bc a1 ed 04 39 a5 50 35 69 3b 4c 01 cf 1c e3 73 4e ab b0 b9 fa d6 ad 21 c0 36 53 9d Data Ascii: QbLb0?Vt2LexFSU\Ht)=m j/#L*YmY4$Wh'ljcR]RZqHN@ \KeGW+o(m<HJUAI>xaBX8Vy~`2T%$} HMK1)+Z)I-PqV2o9P5i;LsN!6S
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: e9 58 e7 10 00 5c a6 ed 63 b7 1a 9a 1b 9b f6 9a a7 5e 43 0a 5b cd db 56 80 54 87 5a 21 0d eb 30 27 52 16 0f 31 8b 72 06 c3 28 d8 40 6c 38 a9 43 d9 49 35 b5 f7 5b e6 74 bb 84 a9 db 5a 18 a5 b4 53 bc 0a 12 86 ea d2 a7 9d ac 41 51 dd 64 20 27 7f 14 1c 40 cc 94 35 e0 31 ad 6a e9 5f 66 f9 d1 0e 5f 18 6d f5 17 12 1d 52 5d 40 23 fa 8a 7c 43 7a 0c 89 4a 15 24 f4 c1 35 f0 44 aa 75 69 4b 09 1b ab 46 d3 a9 ef 45 48 7f bc 0b 46 94 a2 21 08 41 3f 89 33 bc c6 dd 3f b5 91 c9 51 83 11 09 66 85 d6 9b ac 69 45 5a 90 b5 00 60 92 27 ca 27 04 37 09 6f 04 b0 e1 4f 76 b6 e9 ea ad a5 a2 80 5b 75 95 25 60 ef 29 52 21 49 03 9f 10 f2 c6 d2 93 69 be 8b 9a 46 08 5c 8d e5 4a b4 6e db 50 1c 82 08 fa e1 72 eb 3b 66 11 92 bb 1c f6 8a 6a e5 50 b2 e7 66 f4 9d a0 34 a7 dc 4a 1a 6c d6 5a ec Data Ascii: X\c^C[VTZ!0'R1r(@l8CI5[tZSAQd '@51j_f_mR]@#\|CzJ$5DuiKFEHF!A?3?QfiEZ`''7oOv[u%`)R!IiF\JnPr;fjPf4JlZ
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: b8 05 0e 30 14 85 49 41 a1 bd 25 3e 2d 88 1f 73 c6 2e b7 0a b3 8c a3 dd c6 c0 10 04 00 07 1f 97 1b ce 0a 50 fc 96 8d 86 db 70 c6 c6 46 fe 5e 9d 26 71 84 61 4b 70 53 a2 99 d2 a6 87 4e 9b 6f 3b 75 df cf 14 dd ba b6 dd 90 55 62 41 dc fe 1f 2f 4e 23 6d f0 b2 53 07 25 5f f3 d7 7c 7b f4 a5 25 24 95 01 1e 50 48 3b 4e f3 8d 75 e1 30 63 75 7e da 25 57 b6 69 ab 95 58 b2 b4 aa 35 19 e7 61 27 a7 4d b1 a9 68 74 9c 2d 8c 88 52 fe 5d 42 da 64 05 c8 88 02 47 20 f2 77 3d 31 b8 b7 10 c8 2a 9d 6d d3 ea 89 c9 52 41 1b 4e e7 eb d7 8e 71 6c 0e 6a ab 92 d2 ab 3b 94 9d 3e 5b 42 a2 3f 6c 10 30 90 e1 25 14 37 47 39 d4 64 6f cc 01 3e 5d 70 52 a3 48 e4 b7 4d d1 66 77 3b 79 9f 87 a0 81 8c 95 9a 17 df cc d4 48 dc c9 db f1 71 3f e3 19 a9 4e 94 56 a2 f2 86 81 d4 b4 c8 04 9d 4b 00 08 e9 Data Ascii: 0IA%>-s.PpF^&qaKpSNo;uUbA/N#mS%_\|{%$PH;Nu0cu~%WiX5a'Mht-R]BdG w=1*mRANqlj;>[B?l0%7G9do>]pRHMfw;yHq?NVK
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: af 7f 5c 52 b1 a6 cd dc 61 b8 e6 3e 2b bf fe c0 be c9 36 ef 66 7e cd a9 ab f3 1d 25 1d 4f 6b 59 cd 86 6b f3 65 c0 04 bc bb 1d 12 9a 6c d0 65 5a 07 48 2a 43 54 08 ff 00 ca a4 90 97 5c 95 71 11 ed 9d 9c e0 74 f8 6d bb 5d 52 98 15 88 e7 ba f8 b3 b7 bd b5 b8 ed 57 11 ad a2 b1 36 4c 79 0d 83 82 d0 71 1e 44 64 7c 57 43 92 f3 6c a3 bd 59 d2 94 20 aa 26 0e 90 24 c1 31 b4 0c 74 35 37 92 20 05 c0 0d a1 73 93 db 53 da 67 24 da 32 8d db 23 bd 4d 4d 7c fe 64 db b4 f5 6c 1a 84 b8 29 df 0d 38 d3 15 4d a9 41 4d 31 55 4c e8 0a 69 cd 8a 08 94 99 8c 69 f8 9d 3b 7b db 2b 8b 7a d1 a5 cd 8c 85 d6 f6 5e e3 88 70 5e 2d 61 c4 ed 75 4d 37 c9 d2 62 7c 97 35 3b 32 f6 8e b4 30 29 2d 17 aa e6 a8 eb 90 96 d9 a7 5b ee 95 a6 ad 0d 21 21 2e b0 ad bb c5 c6 c7 cf 6c 78 3f 1f e0 95 78 6d 6e Data Ascii: \Ra>+6f~%OkYkeleZH*CT\qtm]RW6LyqDd\|WClY &$1t57 sSg$2#MM\|dl)8MAM1ULii;{+z^p^-auM7b\|5;20)-[!!.lx?xmn
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: c6 4f 35 f3 67 1a e2 95 78 ad ed 4a ce 71 ee 67 03 c9 5a 35 3a 80 37 81 b6 db 8f ee 31 78 2d 58 d9 26 54 56 24 24 8d 40 6e 7a 8e 9f b6 08 7c 14 12 9a d5 d5 20 c9 07 9f 23 fe 70 40 24 94 88 2a fc 47 71 b1 8e 7e 83 07 0a 25 28 d2 57 a4 28 78 b7 9e 7d 7f ce 33 4a 84 f8 b6 d5 a5 65 1c 6e 04 f0 67 fe 30 0e 0b 13 da 80 77 90 06 e3 ef 68 e9 18 4b b6 59 e6 9c 48 60 84 8f ec 70 ac 75 59 04 e5 7f ff d0 62 b2 ef 84 08 32 7d 47 cf cf 1d 0a f3 70 12 bd 2b a9 29 f5 3c 4f af 48 18 20 51 84 b9 4e ad 21 27 d7 7e 9b 47 9c 75 c4 82 b2 12 e3 2f 05 a0 00 98 00 1d cc 7f 69 3b e0 a5 64 25 46 1c 09 48 85 0f 23 89 06 14 80 8c 97 e0 14 cf 59 eb e4 3a 6d c9 c4 4a 90 11 ba 65 95 84 4f 43 b7 1e 5c e2 65 4c 27 45 12 c0 52 36 9d c6 de 9e 9b 4e 24 2c 55 af b7 75 b4 dd e2 81 e2 54 55 ee Data Ascii: O5gxJqgZ5:71x-X&TV$$@nz\| #p@$*Gq~%(W(x}3Jeng0whKYH`puYb2}Gp+)<OH QN!'~Gu/i;d%FH#Y:mJeOC\eL'ER6N$,UuTU
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: e5 b2 f1 8b 87 5c fe 23 95 2e e5 fb 65 03 2f 6a 60 ac 97 20 c1 e1 32 77 09 d8 40 c6 c2 93 1b c8 ee b5 55 eb 54 2c 3a 80 c2 94 29 db 43 49 80 67 7d a7 88 f5 18 ba c6 86 f3 5c f5 67 ba a1 92 12 9b 48 42 86 c6 3c c1 23 7f f8 8c 3c 00 63 aa a4 f7 38 1d 90 15 2d 68 49 70 04 cc c2 7a c7 fb 84 0f 3c 2d ed 00 13 cd 32 8d 4d 44 30 cc 24 b6 16 15 50 13 dd 94 98 3a 09 10 24 ec 3e 93 84 34 cb a2 15 fa ad 2d a4 4e a9 1c d2 a9 a7 2a 03 56 f0 42 7c 5c 81 e7 23 0e d3 3c d5 01 58 02 74 a1 5b 61 96 ce 85 82 a9 de 7a 8f a7 4d f1 21 ad 18 29 6f ab 51 e3 53 70 85 7e a9 96 5a 51 26 08 4f 03 9f 48 1c ef 86 1a 8d 6b 4a 5d 2a 15 6a 54 6c 09 04 a6 9b ab 5d 53 80 ac 92 37 3a 79 1a 66 01 24 08 04 e3 5b 50 9a a4 4e cb a0 63 5b 41 84 34 65 60 50 b6 a5 a5 44 12 15 a9 2a 42 77 1e 90 78 Data Ascii: \#.e/j` 2w@UT,:)CIg}\gHB<#<c8-hIpz<-2MD0$P:$>4-NVB\|\#<Xt[azM!)oQSp~ZQ&OHkJ]jTl]S7:yf$[PNc[A4e`PD*Bwx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49787	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	638	OUT	GET /images/prices/consult1.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680419-47eab-5616f045cad80" Accept-Ranges: bytes Content-Length: 294571 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 17 8e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 03 dd 1c 01 00 00 02 00 04 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 04 1c 02 78 00 32 48 61 6e 64 20 66 69 6c 6c 69 6e 67 20 6f 75 74 20 63 68 65 63 6b 6c 69 73 74 20 6f 6e 20 63 6c 69 70 62 6f 61 72 64 20 77 69 74 68 20 61 20 70 65 6e 1c 02 7a 00 0f 52 6f 62 65 72 74 20 4b 6e 65 73 63 68 6b 65 1c 02 69 00 27 48 61 6e 64 20 66 69 6c 6c 69 6e 67 20 6f 75 74 20 63 68 65 63 6b 6c 69 73 74 20 6f 6e 20 63 6c 69 70 62 6f 61 72 64 1c 02 50 00 0f 52 6f 62 65 72 74 20 4b 6e 65 73 63 68 6b 65 1c 02 55 00 0d 46 6f 74 6f 70 72 6f 64 75 7a 65 6e 74 1c 02 Data Ascii: JFIF,,Photoshop 3.08BIMZ%GZ%GZ%GZ%Gx2Hand filling out checklist on clipboard with a penzRobert Kneschkei'Hand filling out checklist on clipboardPRobert KneschkeUFotoproduzent
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 40 34 b3 32 87 10 5e df 0b e8 db b1 fe d1 f9 df 43 fc 1a d2 7d 66 e9 17 39 cf 1d db 3e df f3 44 35 73 76 66 d8 fc ab 32 89 8b 6c 71 74 73 b7 f3 58 cf ec 33 d8 b6 30 58 fb 6a 0f b9 e6 4f 6f 15 07 15 9e ed 9f 6c 00 0e 80 f5 f3 6c fa d8 74 43 65 ad f0 68 12 4c 78 35 be e4 ff 00 6c 2e 23 d3 a5 c1 a7 b9 00 18 f8 29 0a ea af 81 13 c9 ee 9e cb 69 a9 9b ac 01 8c 08 eb dc 04 69 d8 c9 bd 4d f5 dc 09 61 d4 72 0e 84 22 2c cc 0c aa 6f c8 fd 09 d3 69 91 df b7 2b 4d 4b 13 62 d8 27 1e 13 4a 49 33 9c 1a 0b 9c 60 0e 49 5c 9f 52 fa cf 99 d4 b2 df d1 fe ac d5 f6 ac 86 c0 c8 ca 26 29 a4 3b f3 ad ba 1d b7 fe 9d 96 7f 80 a6 ef f0 6e 01 6b 1f ad 99 dd 37 ed 55 33 ac 38 64 e2 d2 f0 71 ba 55 33 63 b2 6e 31 e9 3b 2a a0 3f 49 e9 bb d9 8f 85 fe 11 ff 00 a6 bb d4 fd 1d 35 ce 8e 89 9f Data Ascii: @42^C}f9>D5svf2lqtsX30XjOolltCehLx5l.#)iiMar",oi+MKb'JI3`I\R&);nk7U38dqU3cn1;*?I5
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 2c 32 37 30 2c 32 37 31 2c 32 37 32 2c 33 30 35 2c 33 31 35 2c 33 33 34 33 32 3b 33 32 32 44 38 37 33 42 41 41 35 33 37 30 43 39 36 37 39 45 35 41 37 34 37 45 42 41 46 44 36 44 22 20 65 78 69 66 3a 45 78 69 66 56 65 72 73 69 6f 6e 3d 22 30 32 32 30 22 20 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3d 22 31 22 20 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3d 22 35 34 39 32 22 20 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 69 6f 6e 3d 22 33 36 36 31 22 20 65 78 69 66 3a 44 61 74 65 54 69 6d 65 4f 72 69 67 69 6e 61 6c 3d 22 32 30 31 31 2d 30 37 2d 30 32 54 31 32 3a 30 32 3a 34 38 2b 30 31 3a 30 30 22 20 65 78 69 66 3a 44 61 74 65 54 69 6d 65 44 69 67 69 74 69 7a 65 64 3d 22 32 30 31 31 2d 30 35 2d 31 38 54 31 30 3a 30 31 3a 32 33 2b Data Ascii: ,270,271,272,305,315,33432;322D873BAA5370C9679E5A747EBAFD6D" exif:ExifVersion="0220" exif:ColorSpace="1" exif:PixelXDimension="5492" exif:PixelYDimension="3661" exif:DateTimeOriginal="2011-07-02T12:02:48+01:00" exif:DateTimeDigitized="2011-05-18T10:01:23+
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 2e 83 2e 41 de de ab 09 89 23 9d 88 b8 be c5 49 15 a7 d4 e6 45 b6 1b ac dd ee 25 dc a8 dd 86 f6 21 44 89 59 ae e8 49 29 6c 5c 1c b9 a8 83 81 04 dc fd 14 02 17 b9 8f 69 69 b3 81 bf cd 57 52 37 24 99 bb 30 ba c1 5d 43 04 e1 c1 ce 22 ce f8 ad 32 24 82 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 20 08 02 00 80 Data Ascii: ..A#IE%!DYI)l\iiWR7$0]C"2$
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 74 a1 91 c7 4e cd 4e 82 e4 37 bd 91 a2 e7 4d dc 3e 26 c1 77 b8 77 2e a6 5c b4 25 7b 6e fb 7b 94 eb 6a c7 45 4d ce bc 5a 5d 17 7f 91 89 60 19 de 87 b2 3e 6b 8b 27 64 d7 0a 9c 56 92 6f 68 c7 31 96 86 93 57 88 db c4 c8 dd d2 28 81 31 82 0f 88 99 0f 27 2d 2d 47 14 8b aa e9 d1 ff 00 c6 b0 bd fb bf af 4f 62 ed 3f 04 94 a8 f9 da 8f fc b2 cf ff 00 b2 ba 2f bf bb 3d fe ec 79 f6 81 51 e2 38 6c 03 36 57 99 2a e7 11 8b 4a 03 7b 86 58 59 9c f7 3a b5 12 7e 1e 4a 72 8a 92 b3 38 75 28 4a 32 bf 63 d9 5c 97 c5 5c a5 9d a8 e2 a8 c3 71 2a 63 23 80 3a 75 82 b4 ea 50 6b 28 46 77 c3 36 50 21 c0 16 90 47 98 5a e4 cf a8 08 cc 4f 07 c3 b1 78 1d 05 75 34 73 30 8b 6e 37 56 42 ab 8e c5 55 28 a9 1d 45 e2 c7 65 ac bd 9a 20 a8 a8 c3 e9 a3 6c 84 13 b3 7a fc 16 e4 6a 42 6a d2 35 a4 a7 0d Data Ascii: tNN7M>&ww.\%{n{jEMZ]`>k'dVoh1W(1'--GOb?/=yQ8l6WJ{XY:~Jr8u(J2c\\qc#:uPk(Fw6P!GZOxu4s0n7VBU(Ee lzjBj5
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 04 cc 0e d0 f6 3c 5d ba 9c 2e d2 41 1c ac 61 57 87 e9 f5 54 9d 1a f0 4d b5 87 d9 f4 cf 6e e4 f4 bc 53 51 a2 aa aa d0 9b 4b aa dd 5b ae 0f c3 37 69 fe d3 3c 41 e0 76 7d c3 b2 3f 67 3e dc fc 7a ce fc 66 39 89 d8 06 2b 93 6a f3 2c ef af a2 c4 04 9d d8 61 98 47 14 4c 70 94 f7 4e 8d fb dc 12 4d 85 d7 cc a7 c2 74 f1 55 3f bb a5 e4 ca 1b ef 6f 7c f4 b6 f7 cd fa 1f 52 d3 71 4d 6c 9d 3f 2a a2 ad 19 ed 65 1b fc ad 9d fe 87 59 78 cd db 97 b7 c6 75 ad 3c 1d e3 07 11 73 a4 18 9c 34 ec 9f 11 a4 c4 73 58 93 5c 2e 3e 0b b4 4e 63 24 69 23 43 2c e0 79 ee 6c b7 29 e8 a3 a7 8f 32 95 ef b6 7a 76 b9 5f f7 ff 00 dc 3f 4c 6d 6b 5e cb be 53 b5 af b1 c7 27 f6 7f cf bc 4c cd fc 12 c8 d9 92 be 5c 6b 1a c4 f1 30 cc b7 92 9d 3c 32 63 99 8f 11 98 31 90 99 69 a9 a4 91 d4 f8 74 4e d3 24 Data Ascii: <].AaWTMnSQK[7i<Av}?g>zf9+j,aGLpNMtU?o\|RqMl?*eYxu<s4sX\.>Nc$i#C,yl)2zv_?Lmk^S'L\k0<2c1itN$
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 9a 47 15 c0 b3 1e 56 aa 35 54 32 cc 18 d7 5c 39 a6 d6 5a b2 85 be 13 61 25 35 66 8d cd c3 5e d2 59 b3 2b cf 0d 3d 5d 6d 40 0d 20 02 5c 54 23 aa 71 39 fa 9e 13 09 6c 8f 45 f8 63 db bb 18 c2 45 31 97 14 74 8c 16 e6 fd c2 db a5 c4 57 53 cf ea 78 03 ec 7a 55 c2 4f b4 07 2e 63 6c a6 a4 c6 2a e1 2e 36 1e 27 0b 85 d6 a5 c4 23 6c 9e 6b 55 c0 e7 1d 8e fc e5 1e 2f e4 9c e1 04 72 e1 f8 ad 3b 64 70 07 4b 9c 36 5b d4 ab 46 7b 33 8d 57 4f 38 7c 48 d9 91 d4 d3 cc d0 f8 a6 8a 46 79 b5 d7 56 36 52 75 3f 8f fc 70 c9 19 56 92 7c 06 0a 7a 0c c1 99 1d e0 2d bd d9 4d e6 5c 47 bc e1 fc bf 99 5e 3f 8e 78 da 1a 4b d3 a1 ea 9f e4 8f 69 e1 df 02 55 d7 35 56 af a6 1f 9b fb 1d 04 66 3f 89 63 72 48 c6 bd 91 46 f7 6b f6 78 59 a4 34 f9 ec be 59 ab e2 35 f5 72 e6 ad 37 26 7d 97 87 78 77 Data Ascii: GV5T2\9Za%5f^Y+=]m@ \T#q9lEcE1tWSxzUO.cl*.6'#lkU/r;dpK6[F{3WO8\|HFyV6Ru?pV\|z-M\G^?xKiU5Vf?crHFkxY4Y5r7&}xw
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: d7 3f ca 3f 23 ca cc e1 c5 9c c9 c4 37 8c b9 97 60 39 7b 28 b0 d8 44 cb b7 bc 1e 6f 3f 88 af 1b ac e2 55 75 1f e3 a7 e9 87 63 b5 1a 4a 9f aa 4e ef b9 86 d0 c7 85 61 9d f6 13 43 86 7f 12 c5 e5 78 64 2e 88 17 bd cf be d6 03 fa 79 ae 66 a7 59 47 4d 06 e5 d1 17 e9 f4 b5 6b c9 28 ad cf 7e be ce 2f b0 e7 8a 5d a7 a7 c0 f8 99 da 36 93 12 c8 1c 2f 63 99 3c 54 32 5e 3a ac 42 3e 62 e0 fb 8d 22 de ab e6 ba ee 39 5f 5e dd 3d 36 20 bf e5 f6 3d 0b 85 0d 07 aa a7 aa a7 6e 8b e6 7e b1 a2 ce 7d 91 be cf 5c 9b 94 78 49 90 32 f4 75 59 be bd ed c3 f2 f6 54 cb 94 8d a8 c5 31 fa a2 43 43 63 68 b0 17 71 b1 95 e4 34 6f 73 b5 95 70 a7 43 45 0f 4c 6f 27 f8 b6 71 2a cb 53 c4 26 e7 37 68 ad fb 24 7a 19 82 52 57 d5 e1 f4 15 b9 82 95 94 78 8b e2 64 b2 d1 36 41 24 74 92 10 0b 99 af fe Data Ascii: ??#7`9{(Do?UucJNaCxd.yfYGMk(~/]6/c<T2^:B>b"9_^=6 =n~}\xI2uYT1CCchq4ospCELo'q*S&7h$zRWxd6A$t
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 94 30 30 5e f7 68 fe a5 6c 53 d3 24 af 63 42 ae bd cb 1b 95 e4 c3 98 fd 4c 8a 32 5c f3 ac dc ff 00 54 f2 ae f0 46 3a 96 95 e4 f6 2d 7f 85 c1 33 cc 31 c5 1c b2 07 0d 60 0e 5e 77 71 b9 53 fe de 2f d3 b9 17 ac 9c 7d 44 cd 1e 5c ee 6c e0 1a 58 47 3d fa fc 7a ad 9a 7a 14 8a 2a 71 47 27 9d cf b3 e0 92 fd dc b0 b5 cf b1 e6 c6 5c 0f 89 2a c9 e8 d5 b1 d0 cc 75 fd 1f 52 62 9f 0a 35 10 34 4a c0 25 e6 46 ee bf a6 ca ca 3a 7b ac ee 68 d4 d4 59 e0 ad dd 50 82 d6 35 fa 34 d8 10 c6 dd d7 f5 e6 ac 71 8e c8 8d e7 6c 95 61 a5 a7 ab 7b bb ae f1 af 02 d7 92 5b 58 fa 00 b1 c8 9b c7 ea 42 53 92 59 fc 8a 42 09 4c 8f 85 f7 8e 98 ec ed 2c be 9f 2d fa a9 24 ef 6e 84 9b 4b 2b 72 c5 b4 71 c6 e7 b1 b2 77 32 6a f7 9c ce 67 a5 88 f3 55 ba 0b a6 0b dd 66 f7 2d 26 c3 65 01 b5 31 c3 aa 46 Data Ascii: 00^hlS$cBL2\TF:-31`^wqS/}D\lXG=zzqG'\uRb54J%F:{hYP54qla{[XBSYBL,-$nK+rqw2jgUf-&e1F
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: d7 b5 c6 41 21 8a 3f 41 72 7d 54 79 8c d9 5a c7 d6 eb 00 0e f4 b6 e7 f1 37 6f cf cd 4d 34 61 e1 96 d2 d6 45 01 2d 79 b8 26 c4 82 7f 45 89 4a c4 e1 4d cb 62 b1 c5 5b 13 75 77 ef 79 22 c0 5c 10 3d 14 25 51 6e 89 47 4c db b3 46 3d 88 62 e0 97 4b 13 c1 07 67 37 a3 8a d1 ad 5e fb 1d 6d 26 92 d8 91 8f d4 62 b0 39 a0 97 47 af 96 92 2c 41 5a d2 d4 c5 e1 9d 38 69 24 b6 44 7b f1 ab 69 6b 25 7b ac 2c 47 23 ff 00 85 af 2d 4a 4a c8 d8 8e 87 ab 45 0a 8c 50 98 f6 0c d4 37 b1 1f ba 84 ab ab 60 8c 34 ad bc 90 75 55 b7 6b ec 40 db a2 82 ab d5 96 4a 86 52 31 2a c7 3c 17 4a f7 5e 4e 76 f2 f5 51 8c ba b6 2a c1 6c b6 3d 26 e1 44 4d 87 87 39 3a 36 87 01 ec 31 bb 73 d4 dc 9f dd 7d 1f 81 b5 fd ac 2d d8 f8 77 1f 77 d6 54 f9 9b 09 75 8e 40 40 10 04 01 00 40 10 04 01 00 40 10 04 01 Data Ascii: A!?Ar}TyZ7oM4aE-y&EJMb[uwy"\=%QnGLF=bKg7^m&b9G,AZ8i$D{ik%{,G#-JJEP7`4uUk@JR1<J^NvQl=&DM9:61s}-wwTu@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49788	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	377	OUT	GET /images/prices/cupping.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041c-1a6bf-5616f045cad80" Accept-Ranges: bytes Content-Length: 108223 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff ed 03 6e 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 03 52 1c 01 00 00 02 00 02 1c 01 05 00 41 52 50 41 2c 4d 41 52 4b 2c 4d 45 44 54 4f 52 2c 4d 45 44 57 41 53 2c 4d 45 44 4c 4f 4e 2c 41 53 49 41 2c 41 50 43 2c 55 53 41 2c 43 41 4e 2c 53 41 4d 2c 53 50 54 53 2c 52 4f 4e 4c 2c 41 4f 4e 4c 1c 01 14 00 02 00 0b 1c 01 16 00 02 00 01 1c 01 1e 00 06 52 54 52 50 49 58 1c 01 28 00 08 30 30 36 37 35 31 31 35 1c 01 32 00 03 50 49 58 1c 01 3c 00 01 34 1c 01 46 00 08 32 30 31 36 30 38 30 38 1c 01 50 00 0b 31 36 35 31 35 36 2b 30 30 30 30 1c 01 5a 00 03 1b 25 35 1c 02 00 00 02 00 02 1c 02 05 00 14 4f 4c 59 4d 50 49 43 53 2d 52 49 4f 2d 43 55 50 50 49 4e 47 1c 02 07 00 08 4f 52 Data Ascii: JFIF,,nPhotoshop 3.08BIMRARPA,MARK,MEDTOR,MEDWAS,MEDLON,ASIA,APC,USA,CAN,SAM,SPTS,RONL,AONLRTRPIX(006751152PIX<4F20160808P165156+0000Z%5OLYMPICS-RIO-CUPPINGOR
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 56 c7 ad f4 c0 64 24 2a e3 1e d4 89 66 e0 38 e4 e4 b9 b4 d1 b7 ec c4 7c 1e bc d6 69 6a 68 74 5d b2 de 2d 09 7c b2 4a 0f a9 eb 59 5e af 93 46 de 04 ef 34 75 11 9c 01 c7 51 8c 53 f1 ea 98 2f a3 39 a9 69 48 5f 1e 5a e0 8e 70 2b a3 8f 53 c7 62 39 b2 82 6d 11 33 b1 03 34 8c c7 d2 17 24 d6 bf ad da ad ba 41 c7 7b e1 1b 4f 02 7e 09 ea ba f3 25 e6 a6 0e 91 60 1b 3b e4 5c cb 28 f6 55 ed f5 35 e7 bc 9f eb 0c 3a 74 e1 83 ee 97 fa 23 b5 a3 f1 79 24 f7 64 e1 7c 1f 77 f0 9f 82 bc 3b e1 28 76 78 7f 45 54 9c 8f 5d dc a9 e6 4c e7 ff 00 b8 f4 fa 0c 57 cf b5 de 57 55 ae 95 e6 9b 6b e3 d8 ef 63 c3 1c 6a a2 a8 b2 bb b4 bd b8 c9 7d ec 7e 73 58 10 65 45 dd b5 c5 bb 16 91 58 81 db e2 88 89 10 86 45 90 61 08 cf 70 6a 88 1a db 52 92 02 63 62 55 4f 0c a4 65 48 f9 1d ea 02 d1 4f ae Data Ascii: Vd$*f8\|ijht]-\|JY^F4uQS/9iH_Zp+Sb9m34$A{O~%`;\(U5:t#y$d\|w;(vxET]LWWUkcj}~sXeEXEapjRcbUOeHO
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: e6 86 c8 71 b2 0d 4b 21 09 21 f3 17 02 ad 4a 8a 6a c5 5f 4b 89 b9 20 67 34 d5 9d 8a 78 22 45 f4 d0 a9 fa 57 1f 4a bf 5a cb f4 92 10 ba b0 2d 85 db 80 29 f1 ca a8 4c b1 72 4a 3d 35 77 64 a8 3f 6a a7 99 91 62 45 85 b5 af 96 db 87 f8 ac f2 9b 63 e3 04 86 8e 71 40 30 f2 21 66 e7 8a 96 40 e1 14 0e 3a 50 f6 43 db 80 e0 e2 ae 88 45 f6 95 3c d5 94 c5 59 82 e7 3c 66 8d 20 4a 6d 54 09 23 78 c3 92 48 a7 63 54 ec 4e 4a 69 a3 13 ac da 4a f1 b3 05 c1 5e c0 57 7f 47 9d 47 b3 cd f9 0d 34 a6 dd 19 77 be cb 0c 1e 4f cd 74 b6 9c 67 23 c2 e0 96 03 70 cf 50 45 4e 09 47 65 bf 0a 4e 54 0e 3d f1 56 95 91 ba 14 37 bb 9b 24 fd 29 a9 21 2c 6a 2b bd ca 0b 1c 1c f3 cd 0b 41 a1 88 2e 81 2a 43 e6 81 8c 5f 23 ff 00 99 53 17 4c 9c f7 3d bd a9 55 c8 db 54 27 35 ca a3 7b 7c 53 a2 ac cd 2e Data Ascii: qK!!Jj_K g4x"EWJZ-)LrJ=5wd?jbEcq@0!f@:PCE<Y<f JmT#xHcTNJiJ^WGG4wOtg#pPENGeNT=V7$)!,j+A.*C_#SL=UT'5{\|S.
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 98 ca 38 3c d6 fc 31 92 8f df d9 e6 b5 b9 30 cf 2b 78 15 47 f2 59 c5 b5 48 62 dd e9 ad 19 6c b0 92 74 d9 1b 6d 24 f3 83 f1 c5 55 04 83 47 72 9c 05 01 4d 53 44 1a 89 dd 80 e5 4d 0b 44 0a 1c 8e 0f 5a a2 1d dd 91 c5 42 15 fa b7 9d f9 19 ff 00 2e db 65 f2 d8 a6 46 46 ec 71 45 0a b5 64 67 c8 0e b1 e1 7f 1f 06 d1 3c 47 6e b6 5a aa 36 c8 e4 07 19 61 fe 96 ff 00 63 5d e8 e0 d4 68 e3 eb 61 77 13 9d eb 63 cf 78 f2 70 64 ef 74 af 17 7e 1a df 3d fe 95 74 f7 3a 61 6c b6 01 2a 47 b3 2f 6f ad 6d 8e a3 4d af 5b 32 aa 91 92 50 cb a5 77 0e 50 f7 8d bf 14 61 d7 bc 18 b6 71 db 49 6d 74 ce 0c e0 9c a0 c7 b7 c1 3f e2 83 4d e2 25 87 3e e6 ed 21 99 35 fb e1 b5 2e 4d 57 87 6c ae 53 f0 12 e8 c5 e6 c5 73 77 6c f3 9c 1f 51 1f 19 ed 81 58 73 66 8b d7 26 fa 4c d5 08 bf 43 83 2b f8 3d Data Ascii: 8<10+xGYHbltm$UGrMSDMDZB.eFFqEdg<GnZ6ac]hawcxpdt~=t:al*G/omM[2PwPaqImt?M%>!5.MWlSswlQXsf&LC+=
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: c8 20 0f bd 37 0e 9d 4d 4e 08 0d fc d9 4d e3 4f 1c 5a eb be 2a f0 e6 a9 63 a7 5e db c5 69 70 17 cc 9d 76 87 05 86 40 fd e9 f8 74 af 1c 25 16 d1 1c 98 ff 00 8d 97 57 b2 fc 64 86 e3 42 92 da 1b ad 46 d9 44 6f 3a e5 0f a7 9f bf a4 d0 61 70 78 1a 9f 34 03 6e cd 77 84 13 54 b4 d5 5d 3c 47 e2 eb 0d 42 7b a5 f2 d2 d2 20 17 61 ef b4 75 3c 56 6c bb 5a ff 00 2e 2d 51 13 b7 d9 84 f0 3f 89 e1 f0 4f 88 35 ed 2e ea d2 f6 ec c9 73 98 52 da 3d d8 23 20 e4 7b 63 15 af 3e 17 9e 11 95 d0 30 7b 5f 06 cf 53 fe 33 f8 83 e0 8d 4e da 1f 0e dc d8 49 bd 3f 2e 2e 4e dd fc f5 e4 0e 31 58 d3 c7 a6 ca 9b 95 ff 00 03 94 65 35 d1 a5 fc 38 f0 72 e8 7e 1a b1 82 f2 ca ce 3b d8 e3 02 77 89 41 2c dd c9 38 e6 91 a8 d4 bc b2 74 f8 0e 38 d4 59 79 e2 0f 0a e8 5a ed a4 76 fa c5 94 77 4b 11 ca ef Data Ascii: 7MNMOZ*c^ipv@t%WdBFDo:apx4nwT]<GB{ au<VlZ.-Q?O5.sR=# {c>0{_S3NI?..N1Xe58r~;wA,8t8YyZvwK
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 38 4b 5c 87 1e c0 93 c9 fb 62 82 71 f8 1b 16 97 62 f0 cd ad e9 7a 44 1a d2 5e d9 eb 96 97 0a a6 47 b5 91 8b 42 ec b9 11 be f0 0e f1 df 00 81 d3 35 8f 26 05 2e c7 e3 d5 25 d1 4e 93 78 8f c6 9a cc 5a 3e 95 18 9f 50 91 4f 95 69 24 ab 13 3e 07 21 77 10 09 c7 6e a6 aa 38 54 46 bd 45 88 eb 3e 0b fc 46 d0 e5 7f e2 3e 0e d6 21 5e 77 37 e5 1a 45 ff 00 f9 97 22 98 90 bd e5 2b 5d 6a 76 52 79 57 11 24 6f d3 6c 8b b7 1f be 2a f6 32 9f 65 84 7a cc 8a e2 da e2 2b 45 90 36 32 27 4c 74 cf 5c e2 a3 8f 25 0e db 78 9b 4c 8e 15 69 c4 40 39 da 30 ea 48 c7 5c 80 78 ab a2 31 db 0b ed 1e f5 b7 43 73 6e 48 3c e5 c2 9f ef 56 90 23 46 c2 09 81 28 aa e3 fd 4a 41 cd 58 22 12 e8 e8 ef bb ca 00 03 8c f7 35 0a 63 16 fe 1d 77 5c af cf 6e 95 1a b2 26 40 40 6d ee 44 7b c1 1c 72 3b d2 da 1d Data Ascii: 8K\bqbzD^GB5&.%NxZ>POi$>!wn8TFE>F>!^w7E"+]jvRyW$ol*2ez+E62'Lt\%xLi@90H\x1CsnH<V#F(JAX"5cw\n&@@mD{r;
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 99 fa ee 66 24 d5 b6 df b9 4a 31 f8 26 d7 33 cd 28 79 65 77 72 79 24 e4 9f bd 55 d9 36 a5 d2 1b b3 ba 68 f8 2e 4b 13 8c e7 9a 38 70 26 70 4c 94 f3 82 e5 86 01 27 24 81 d7 8e f4 4e 45 28 d1 57 33 33 7a 81 c0 ed cd 2d b1 d1 e0 3d 85 85 e5 cc c2 3b 7b 79 25 24 a8 07 04 28 c9 e3 27 a0 fb d5 a4 e4 fa 29 ce 2b b6 6a b4 c8 2c 6c 74 29 60 d6 13 c3 ee b1 cb 24 72 2c 71 bc d7 33 72 18 07 3c 2e 01 27 6b 06 1d 2b 74 76 c3 1f 2d 7f d4 e7 65 4f 2e 4b 8a 97 fb 22 be e3 57 b3 fc bb 41 1e 9a 1a 66 40 bf 99 12 34 6c d8 18 04 aa 9d a4 fd 7a e4 d6 57 9e 0a e9 1b 23 a6 97 6d 82 5d 5b 50 bc bc b9 b8 bd 99 e4 37 28 16 5c e0 6f 03 a6 71 ec 69 12 cf 29 36 c6 fa 10 8a a4 88 3c 1e 54 db b7 8c 38 c1 d8 4f 4f 6a 5d b5 ee 1a a6 ba 19 f3 01 88 46 8a a1 17 f4 61 46 71 f2 47 5a 8d b6 5c Data Ascii: f$J1&3(yewry$U6h.K8p&pL'$NE(W33z-=;{y%$(')+j,lt)`$r,q3r<.'k+tv-eO.K"WAf@4lzW#m][P7(\oqi)6<T8OOj]FaFqGZ\
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 05 21 f8 5a 62 b0 18 c9 57 53 ce 3d ea fd 8a a2 af 50 8d e2 df 1b 0e 41 dc 30 3a 7b 50 7b 04 68 f4 d7 f3 2d 22 90 11 86 03 3c f1 59 32 7e e3 7e 1a db 45 a4 05 a3 54 f2 e4 db 9e a2 80 6d a3 93 b9 57 d8 0f da ae 8a dc 2d 70 dc 0e 4f c1 a3 48 a7 20 12 02 23 dc 41 23 a6 47 4a 62 14 e4 02 41 80 7d 8d 31 21 12 90 07 38 19 6c 0e 7b 75 a3 40 db 0f 68 b2 6d 01 72 e9 9c 95 ab a4 55 8c c3 73 a0 fe 4a e2 19 ad ee e3 d5 cb a9 86 75 b8 22 35 5c 1c ae cc 60 b1 38 3b 8f 6e 2a d2 54 4d d2 be f8 16 66 f2 e3 54 ca 90 41 cf b9 a9 b4 17 30 6c c0 8c 6d 1c f1 f3 9a 9b 41 de 2b 2b 88 d8 c4 8b d4 f2 4f 6a aa 0e 36 c4 6e a3 c1 e0 e4 e0 9a 5c a0 cd 2a 5c 16 3a 44 f1 44 a5 98 aa aa 8e 47 bd 57 a6 e4 1a cd 18 96 71 ea b6 98 66 17 11 ae d1 9c 16 15 6b 49 60 cb c8 24 41 7c 4d 61 1c 6c Data Ascii: !ZbWS=PA0:{P{h-"<Y2~~ETmW-pOH #A#GJbA}1!8l{u@hmrUsJu"5\`8;nTMfTA0lmA++Oj6n\\:DDGWqfkI`$A\|Mal
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 94 27 80 46 89 87 45 eb cf b9 e8 7e d4 e8 a7 66 79 38 a5 c9 7d 6c ab 0c 08 ca 85 98 b6 d6 53 8f dc 56 c4 a9 18 db b6 0e e2 3f 32 16 56 89 15 d6 41 82 fd 71 ed 51 a2 45 d1 97 f1 83 66 38 b7 05 44 2e 5b 18 ef d3 02 b0 6a fa 47 43 48 fe e6 66 25 03 7e 37 16 18 e7 8a c7 46 f6 c4 6e 19 1f 3c 1c ad 5d 02 c2 dc c8 1f 4f cb ab 8f ed 9a 6a 8f 02 1c d5 90 8a c6 e4 e9 3f 98 fd 31 33 65 4f 73 46 a3 c0 b7 3e 4a f2 24 08 80 e1 b3 da 89 15 68 1c 82 26 fd 05 b9 15 60 b6 45 ce e4 5d a0 93 df 8a 34 03 20 01 27 b9 00 f1 46 80 90 d8 83 27 0a a4 92 70 b8 ef f4 ab 40 85 81 15 25 36 d7 22 48 c0 53 92 17 90 7d aa 7b 84 84 a5 27 78 39 20 0e 3a f6 a1 0d 31 c8 1a 3f 20 15 19 93 1f bd 59 45 86 95 73 e5 80 db b0 51 b2 32 39 c8 e9 50 5c 8e 6a 13 49 34 be 73 9d c5 9f 24 a8 c7 5a bb 00 Data Ascii: 'FE~fy8}lSV?2VAqQEf8D.[jGCHf%~7Fn<]Oj?13eOsF>J$h&`E]4 'F'p@%6"HS}{'x9 :1? YEsQ29P\jI4s$Z
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: ea 1a ba a5 bc 88 2d a5 8f 74 2d e6 61 94 8e 18 36 46 07 4c f1 d8 d6 15 97 26 34 ed 72 74 e7 a7 c3 91 46 bd cb 1d 2a d2 e7 c2 70 b0 d2 65 93 55 7b 97 3f fb 58 e1 1e 96 3f e9 60 73 d7 de a6 4b d5 4b 76 46 a3 45 e3 87 d0 c1 fa 49 ca fd 8d 35 9d 8c 52 69 ef 3f 89 2c e4 b7 91 97 f4 38 20 2e 79 db bb 3e aa c1 27 f7 d6 37 68 dd 06 e5 0b ca a9 fc 13 d3 7c 35 0d 95 a1 bd b3 d4 ae 2d 85 c0 dc 63 2a a5 76 9f e9 39 e7 8e b9 ed 4b 96 59 cd d3 41 63 d3 c7 1a 6e 0f b2 86 ee 2f 11 49 2d c5 bd 8e b5 71 72 13 85 8e 59 41 11 9c f1 fa 40 eb f5 ad 58 e1 89 53 9a 33 4d 66 e5 63 99 f3 51 a7 6b 17 5e 22 84 5e dc b3 dc 47 36 fe 49 21 42 9c e0 1e dd 2b bd 28 63 fa 67 e9 aa 4c f3 91 79 be b1 47 23 b6 b9 fe 85 17 8d 19 b5 8f 1a 4b 65 68 f7 06 26 93 f9 0b 70 c0 b2 9c 73 93 f5 cd 69 Data Ascii: -t-a6FL&4rtFpeU{?X?`sKKvFEI5Ri?,8 .y>'7h\|5-cv9KYAcn/I-qrYA@XS3MfcQk^"^G6I!B+(cgLyG#Keh&psi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49789	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	638	OUT	GET /images/prices/consult2.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/prices.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	274	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041a-ab7874-5616f045cad80" Accept-Ranges: bytes Content-Length: 11237492 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7918	IN	Data Raw: ff d8 ff e1 1f 99 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0e 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 c8 00 00 00 3b 01 02 00 07 00 00 00 dc 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 3c 03 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 36 30 44 00 00 9f 24 00 10 27 00 00 00 9f 24 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 35 3a 30 31 3a 30 33 20 30 30 3a 30 34 3a 30 34 00 59 75 20 4c 61 6e 00 00 22 00 9a 82 05 00 01 00 00 00 82 02 00 00 9d Data Ascii: ExifII*(12;i<CanonCanon EOS 60D$'$'Adobe Photoshop CS5 Macintosh2015:01:03 00:04:04Yu Lan"
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 16 b3 f7 c8 00 08 9f 9a 63 ab 00 8d a0 84 5c 78 f5 6b fa 5f 4b b7 3c b7 f9 bf e5 21 3f f3 be 51 bb 95 64 34 f2 6e 5a d8 ba 17 f9 12 b6 fa 1f d3 be 0b 44 ec 32 e3 b4 73 60 da 6c 3e d5 87 8f f4 9f cf 27 85 b3 d0 7e 9d d3 3c 33 fe a9 fc 42 19 fe 59 7d 3f 35 fc 8f f3 d0 ff 00 0b fe 8c 9d 20 32 cb c5 57 3c 5a 77 6e 69 68 8d 5b bd df bf 63 5c dd 59 b3 6b d6 76 59 02 fb 76 93 a3 cc 93 c1 d2 16 95 93 f6 b1 e3 ef e6 37 73 5f f3 7f c8 ff 00 d4 4b 2f 26 3d 6b 22 67 71 f1 85 04 37 e9 f4 d9 bb cc 7c 83 7d f4 e3 be 2f f9 fe a7 ff d9 ff ed 24 5c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 37 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 1c 02 50 00 06 59 75 20 4c 61 6e 1c 02 37 00 08 32 30 31 34 31 32 32 32 1c 02 3c 00 0b 31 32 34 35 32 31 Data Ascii: c\xk_K<!?Qd4nZD2s`l>'~<3BY}?5 2W<Zwnih[c\YkvYv7s_K/&=k"gq7\|}/$\Photoshop 3.08BIM7Z%GPYu Lan720141222<124521
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: b9 1d 35 c7 ad 62 3d a6 8b b1 9d 56 4b c8 69 7d 59 3b 3e cf f6 47 32 5c f7 55 7b 5a d7 e3 7e 8f d3 ba 9f fc 2e 9b 02 9d bd 2a ab 5a e1 55 4d 2e 6b 1b 6c ef 20 bd e6 af ed d8 df cc fa 69 6d 6e e0 48 13 11 3d c2 bd 84 2c 38 af 6b 27 57 16 90 20 72 dd 1c e3 b9 8e f6 bb f7 51 24 01 f6 7d 8c 78 e1 72 3b 9b 06 bc d0 83 76 3d 95 ba d1 c1 90 d3 a4 c7 fd 4f f6 95 aa f3 a9 73 a0 35 ed 25 bc 06 ee 88 9f 77 e8 b7 bb f3 bf 71 57 ea 25 d5 d3 8c 79 d1 c0 f7 3f e0 dd de 15 8e 9d 95 4d 58 ef 14 b4 df d4 ae 79 18 b8 55 ed 16 dc 2b 6b 9d 65 8d 2f 7b 3f 45 57 a7 6f d1 f7 e4 df fa 1a bf 48 9b 5c 51 ba b3 b6 9e 6c 92 c8 71 48 c6 26 c0 a3 ea f1 8a 46 5f 8e fb 01 65 8d 76 e6 9e 0e a4 cb 3b 3f 6b be 8b 55 3c af 4c e4 3c 68 ee 35 e7 50 02 ab 76 4d 19 19 2e 73 7d be a3 19 79 6c 70 Data Ascii: 5b=VKi}Y;>G2\U{Z~.*ZUM.kl imnH=,8k'W rQ$}xr;v=Os5%wqW%y?MXyU+ke/{?EWoH\QlqH&F_ev;?kU<L<h5PvM.s}ylp
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 74 69 66 66 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 64 65 72 69 76 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 63 6f 6e 76 65 72 74 65 64 20 66 72 6f 6d 20 69 6d 61 67 65 2f 74 69 66 66 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 39 43 31 30 38 36 34 37 30 32 Data Ascii: hanged="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/tiff to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/tiff to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:39C10864702
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 4b 79 1b 56 90 41 e3 eb 73 7f 6e 05 53 f1 74 85 9f f1 57 ac af fb 88 1e 40 09 2a 02 68 61 63 2f 09 72 2c 01 02 f7 1c 0e 7f 27 f3 a2 aa 3b 57 87 fa 8f db d6 c4 b1 81 9c 91 e5 5f cb fc 1d 44 94 89 42 44 4c 83 46 a6 0e ef ea f5 70 c1 50 72 6f c3 7e 6d fe 1e ee a2 9d 78 dc 92 3b 56 9d 44 9b c1 22 24 51 f9 24 bc 6e 81 a5 2c 18 ba 9d 36 1a b8 ff 00 7d fd 7d dd 41 5c 91 fb 3a 6d a7 97 d6 83 fd 5f 6f 51 a1 85 49 21 86 a0 15 f5 8d 64 69 26 51 75 70 bf ea 81 51 75 e7 f3 fe bb 84 01 e5 d5 96 e1 87 1c ff 00 2f f2 75 30 0d 12 a2 48 69 ec ea cb a9 55 41 00 1b 25 cd 87 3e ab ff 00 8f d3 fd 7a 05 2c 2a 07 4e fd 52 70 f4 fb 7a e8 03 e7 69 69 84 4b 16 89 a0 66 1e ab 12 40 ba 96 26 e5 79 b1 bf d0 ad fd ef 4b 01 46 e3 d5 5a e2 07 f8 bf 3e a1 c9 21 49 e7 36 0d fb 7c 34 88 b6 Data Ascii: KyVAsnStW@hac/r,';W_DBDLFpPro~mx;VD"$Q$n,6}}A\:m_oQI!di&QupQu/u0HiUA%>z,NRpziiKf@&yKFZ>!I6\|4
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: f2 7b 4d 25 8d 5a ac 6a 33 ff 00 17 fe af f2 74 fc 77 2b c4 7f ab 8e 3a 93 16 e0 68 ee f2 c9 e6 9e 4b 17 92 45 8e 57 f2 ff 00 c7 71 78 bd d5 ac a3 03 2d fe af db d2 85 bc 61 c3 8f 59 a6 ca 49 3e 88 7e a3 c1 24 9e a9 22 8e 38 fc 54 fc fd 7c 5e b9 7e 97 fe 9e dc fa 28 eb 50 7f d5 fe c7 4c cb 21 27 fd 5f 2e a2 52 64 aa ea 64 8a 66 12 46 89 0c da bc b0 ca 23 8e 43 cf 26 6b fd 3f e3 af fb df bb c9 64 00 a2 b7 fa bf d5 e5 d6 8b d0 54 f4 e5 52 67 92 25 67 62 c5 da d2 80 c2 23 e4 ff 00 8e 06 ff 00 a2 dc ff 00 c9 1f e3 ed 0c 96 fa 1f 3e 5d 2c 87 c5 5f f5 7d bd 36 d7 63 2a 19 3c b3 6b 65 94 cd 77 65 93 c6 63 f3 db f3 fe b9 e2 df d3 db aa ea ab fe af f5 7f a8 fa 74 b4 c2 ce 35 7f c5 74 9e ab 82 b2 20 da e3 20 46 4c 48 eb e2 79 3c 7f 52 22 07 fb 12 58 7f be f1 fb 56 Data Ascii: {M%Zj3tw+:hKEWqx-aYI>~$"8T\|^~(PL!'_.RddfF#C&k?dTRg%gb#>],_}6c*<kewect5t FLHy<R"XV
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 7b f6 99 ec ca d7 4f 46 10 ee 32 50 6a 1f ea cf 4e 73 e3 b1 95 a1 6a 29 59 05 9c 48 0a c9 3a 55 47 fb b7 b5 c0 8f fa 5f d9 6c f1 1a e9 61 fe 6e 8c 56 44 93 2a dd 67 7a 5a 41 1f a1 aa 22 e1 2c 60 96 47 91 df e9 eb fd c4 ff 00 53 fe f3 fd 3d a7 f0 a3 5e 2b 53 f3 ff 00 51 e9 48 a6 9a ea 3f ea af 58 d2 9a 9d e7 65 d0 58 5e 35 90 b3 bc 8e ef fe b1 ff 00 6f ed f5 65 03 a6 e4 a8 38 34 e9 3f 97 a8 69 0f d9 c0 64 48 e2 f2 1d 02 47 f1 f3 c0 1f e7 3f c3 da 94 64 19 3d 14 5d 34 8d 80 71 ff 00 15 d3 24 14 d3 a4 be 94 95 ee 11 ae ce ce fe 4f cf fb 5d ff 00 e8 e6 ff 00 62 fc ce 80 d4 0e 91 c7 19 d7 4a f4 b4 a6 a1 91 91 3c 94 e5 16 41 a9 8d 40 47 d6 c6 d2 fe d7 ac fa 3d 96 4f 3a 79 0a 91 fe c7 47 b1 42 74 0a ff 00 ab 8f 4f 54 f8 cf ba 04 ac 29 0c 76 94 cb 03 79 2f 08 fa Data Ascii: {OF2PjNsj)YH:UG_lanVD*gzZA",`GS=^+SQH?XeX^5oe84?idHG?d=]4q$O]bJ<A@G=O:yGBtOT)vy/
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: ce ac ab ab 56 8b dd 43 7e 55 b9 3f e3 f8 1f f1 4f 7a 20 af 4d 9a 37 fa bf d5 e7 d4 a8 ae 87 f0 dc 30 23 9d 3f ab 8b 5c df df 8b 75 a0 3c ba 77 a7 25 6e 15 08 d3 c1 e0 91 6f eb 6b 9f f6 1e e8 5c 11 5e 9e 0a a4 d0 1e a6 b0 ba f3 c6 a0 6d 65 fc 5a dc 5f db 5e 28 ae 3a bb 46 3a 6d 68 e2 b9 12 b3 73 61 e9 8d 0d af f4 01 99 c7 e7 eb ed f5 90 79 74 99 a1 a9 a5 3a 91 15 35 38 b1 07 55 90 01 7d 28 43 03 73 6d 2e 47 fb ef a7 d7 dd 1d c5 09 3f e5 e9 44 70 3e 00 03 f6 f5 3e 34 0a 2c 16 d6 b0 3c f2 df 90 6c 09 f6 9f c4 8f d6 bd 3c 51 80 cf 51 26 76 00 fd 46 a0 3e a7 f3 fe df da 98 c8 6e 1d 26 92 9e 62 bd 35 d4 16 65 36 32 70 01 bf d1 38 20 f3 62 38 b9 fa 00 4f fa fc 0f 6a 93 8e 3a 4a ca 84 64 01 f9 75 0e 29 9d 41 8d 91 58 33 36 a3 e4 ba ad c5 ae 49 e0 11 fa 6c 5b fe Data Ascii: VC~U?Oz M70#?\u<w%nok\^meZ_^(:F:mhsayt:58U}(Csm.G?Dp>>4,<l<QQ&vF>n&b5e62p8 b8Oj:Jdu)AX36Il[
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: ee ab 13 b6 6b e9 d7 93 54 9c 17 a8 33 d7 4a 3f 75 43 30 1e 2d 48 ce 53 c7 1f fb 1f a2 7f bb 7f de 7d ba 62 73 da 5b d7 fd 5f e4 ea cf ab 47 1f f5 57 fd 47 ae fe fe 09 5a aa 20 5c ea 78 b9 6f 13 82 e2 a3 4f 04 7f 8d bd d5 60 20 03 51 fe a1 ff 00 17 d1 4e 75 11 ab 8d 3a 4c d6 d2 7a a6 d6 e8 0b 12 e1 7f c4 f1 37 83 c1 f4 fa 7f be fa 7b 39 85 a9 c0 7f ab 3d 15 de 05 73 fe af 97 51 28 c8 15 20 58 4a 92 34 6b a9 a4 f1 c7 0f fc 71 1c 7f bc 7f c6 bd ae d6 54 54 f9 7f 3e 98 8f 4a 8a 7f c5 74 bf c7 4e 95 1f b6 f1 aa 78 43 a1 f2 7e e0 92 48 08 bd ed fe b0 f6 49 71 68 ea d5 89 bf d5 fe ae 3d 08 ed ef 52 4c 96 a7 fa 8f 4f 22 9e 14 81 cc 93 53 22 1f 18 28 de b7 96 43 7b f1 c7 ba 05 75 1f aa df ea ff 00 3f 0e 9d 96 41 c7 57 49 4c b6 72 92 91 09 12 c4 59 64 70 88 8d 2f Data Ascii: kT3J?uC0-HS}bs[_GWGZ \xoO` QNu:Lz7{9=sQ( XJ4kqTT>JtNxC~HIqh=RLO"S"(C{u?AWILrYdp/
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 65 ad a4 a1 80 22 23 0e 47 8a 4f f7 df f5 b3 db c4 d4 57 fd 5f ea ff 00 57 a7 54 35 06 81 7f d5 fe af f5 71 ea 74 b8 d8 49 4d 6a e4 6a 8c 10 ab 22 3a 27 1f 88 bf da ff 00 1e d9 12 9a f1 ea fa 08 f2 ff 00 8a fc ba 8b 26 1e a2 12 92 52 bc 53 c6 c2 45 2a 1a a3 5a 27 04 fd 7f 5b fe af f7 d7 f7 ef 1a 3e 0e d4 fd 9d 69 a2 2d c1 7f d5 fe 7e a7 b6 3d bc 36 9c ca e8 e9 13 bc 6e ae ef 24 9f ef bf c7 db c9 3c 34 ed e3 d5 4c 6c 38 e7 fe 2b a6 f6 c6 bc 8b 24 86 02 ca ac 14 6b fd 4b fd 4d cf fa ff 00 8f 6d f8 c9 aa 95 eb 6f 1b b2 f0 c7 5d 2c 10 b4 6b e8 29 2c 2b 29 8a e1 0e 94 b7 d2 c4 7f c4 7b 7c 4c 5b e7 5e 8b 24 81 94 f1 a7 59 7e db c9 23 09 34 5f 44 a1 7c 61 07 8f 9b 0f 2f ba 3c 9a 45 47 4d 3e b0 38 f5 c2 4a 22 59 9c c7 72 17 42 b7 a1 12 64 88 dc dc 0f f5 c7 fb e4 Data Ascii: e"#GOW_WT5qtIMjj":'&RSE*Z'[>i-~=6n$<4Ll8+$kKMmo],k),+){\|L[^$Y~#4_D\|a/<EGM>8J"YrBd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49790	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	375	OUT	GET /images/prices/herbs.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:18 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:18 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041d-8544d-5616f045cad80" Accept-Ranges: bytes Content-Length: 545869 Content-Type: image/jpeg
2024-09-27 16:52:18 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 dc 00 dc 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c2 00 11 08 03 b9 05 96 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 13 11 a9 51 e5 f6 Data Ascii: JFIFCC"Q
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 30 c5 d3 3f 25 69 da 97 5a 69 af 95 bc cf 20 9a fb 86 7d cd e9 ce 23 0f bf ba 83 12 72 e3 ad aa 8c a7 85 91 fb e1 aa aa 72 c7 09 e6 df 2b b6 76 b7 c4 ba 28 bc 06 19 5e 49 23 4e 6e 84 62 0c 07 4a e8 be 48 7a 75 51 6d a8 5f 94 a2 33 d2 a4 74 11 ac 90 d4 02 e9 58 d1 db e6 db 4d a6 98 95 e0 2d 6e 83 45 54 d2 57 e2 f9 1b b3 da 0c d3 9d 12 6d 32 81 42 f5 98 d7 1a 6f 3c 1e 30 a5 4c 14 34 ba 5a a5 ba d7 48 ce 99 a9 cb 18 f6 85 76 c5 0a c1 d7 24 bf 70 a8 13 63 57 b2 b4 3e 94 c8 3d 88 66 52 30 04 ff 00 b6 c8 e9 47 4b 1e 8d 7d 39 b0 f9 7a 5a 62 da aa ea e7 9c ca 8f 47 36 42 e3 98 d9 46 fb 46 9d 0b 3c f9 89 25 68 76 ae 6f b6 e2 e9 c5 d7 ac 66 e9 97 d4 66 7c db 7d cd ba 46 59 0b cc 37 45 e7 c5 b0 9a 70 44 ed 8f 57 b9 46 ea 4b cf 1c 6a dc b0 61 6d 37 77 f9 df 7d 0f 88 Data Ascii: 0?%iZi }#rr+v(^I#NnbJHzuQm_3tXM-nETWm2Bo<0L4ZHv$pcW>=fR0GK}9zZbG6BFF<%hvoff\|}FY7EpDWFKjam7w}
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 14 40 62 12 42 af 3a 51 a6 95 13 68 31 6a e4 12 b4 f2 ee 99 55 33 9f 74 e4 cd 14 37 98 3d 26 e6 c5 76 3c 9a ce 13 cb 5d 86 52 42 95 6d 5e 06 cc 6b 55 a5 9b ea e7 49 7c d6 4f 69 63 b6 fb d3 3c 52 6a e3 d5 29 2c 12 96 1d 9c 52 4d be 87 26 7d da 96 39 5b 92 a1 ac 3a 33 b9 fd 4f 3e e8 96 de ec bb 85 67 1e 2f ca 11 4e cb 2b d2 31 b7 c9 51 cd d5 9a d1 65 f6 16 e6 bd 71 fe cc 81 d2 79 73 8e 98 75 d2 95 1b d3 c8 44 aa 99 1e db 4d b8 4f d1 e6 74 be 8d 9b 79 e5 de 6d 19 fd f6 de 2f 63 1c 33 ef 65 3c 7e fa ca ce fb cf 7d db cf 25 ee d1 fa 7e 0d e5 b5 59 b7 90 97 bb 42 7f 43 69 7d f5 7b 4e 33 fb 68 7d 29 6d 4c a7 f6 d5 f9 38 9d 08 db 0d bc a2 e8 6c 20 a6 0c 46 0f 9b f7 9c fc ba 38 f5 cc 3c e1 f5 9f b3 98 fc ea 9d 8b 02 5b 57 7d 17 84 a3 3f a0 cc 97 c4 b7 bd 67 52 6f Data Ascii: @bB:Qh1jU3t7=&v<]RBm^kUI\|Oic<Rj),RM&}9[:3O>g/N+1QeqysuDMOtym/c3e<~}%~YBCi}{N3h})mL8l F8<[W}?gRo
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: 34 59 9e ce 7a 21 b2 2f 64 67 9d ef 2f 40 45 1f 71 56 1f 09 f7 47 1a aa cd aa 89 4b bc f6 d7 20 35 32 26 65 2a bd 92 86 2a 8f a2 db 46 bf 8a 2c 8c fb 9a 07 19 be 2b 4f 56 cc e8 5b 7a 3e 6c f8 f8 f9 85 e9 bd 2a f6 f5 25 90 6d 34 95 b0 f9 ed 20 98 e4 56 ef 72 2a e4 48 9a 23 d1 55 f7 dd 1b 89 41 16 86 02 f6 74 0c 14 dc a8 64 d7 67 0b 43 32 2e 9d 16 c3 a6 05 fd e7 8d 19 ab 21 78 36 12 97 4e d2 69 e0 00 83 81 28 99 dd 76 87 24 6d cd 6c ce 5b a3 72 8a af 48 44 e8 2d a4 b2 d7 3b 73 1d e2 bc d5 67 d5 8f ce 35 91 3f 96 f4 db c3 e1 9f e4 36 05 4a f6 ab 55 93 95 7a f7 cd ac a6 d6 9d e4 54 41 02 fd 75 63 7c 29 43 02 3a 77 ca 15 9b e8 f0 bb 7e 1e b0 50 74 1c 45 82 3c e3 71 4d 74 7a af 6b 8c fe ca bc 4b 17 f1 fa a2 fd 4e 2d 1b ee 7d 75 f9 fa 27 98 47 55 93 ff 00 2b 93 Data Ascii: 4Yz!/dg/@EqVGK 52&e*F,+OV[z>l%m4 Vr*H#UAtdgC2.!x6Ni(v$ml[rHD-;sg5?6JUzTAuc\|)C:w~PtE<qMtzkKN-}u'GU+
2024-09-27 16:52:18 UTC	8000	IN	Data Raw: b4 93 d6 e5 23 8b 35 ea b4 96 26 68 6a d6 d5 84 35 4a 64 eb aa 27 9b 28 65 59 48 01 32 e5 98 04 ad 50 a0 7b e7 c9 45 b6 a9 8a 7a cd 96 20 2a bc cb c3 71 90 0d ae 36 49 0c d3 b0 46 c1 b3 cc e2 3e 19 c9 ad 9b 34 78 d1 41 44 d9 b4 44 c6 5d 29 5d 55 33 ed 4b ca 2b de 14 23 34 6a f1 0e d8 04 b5 74 6c 8c db 2d 25 47 a0 d3 ed 77 9a cd 77 9d d5 77 15 dc 75 df 29 5f a8 a9 52 d8 0b 56 69 3d 06 c6 ee bb 2e 58 53 4f c7 72 db 2c 7a 76 fd 95 69 b4 89 ae af 5c e9 8e dd 45 d4 8a ae d6 b5 a9 cf 52 b7 ca 71 52 f4 d4 ef 76 a2 98 d8 26 59 71 1b 46 b5 9d 85 8d 66 ae b5 1a 9b 39 4d 8b 01 5e 1a 7e 32 ac 63 1c a4 07 a0 bf b6 2f e2 10 c3 5b f4 57 22 e5 6b 2a 22 9a ea e0 6f c8 85 5a c4 2a 55 66 d4 10 f3 57 ef 65 a2 63 e2 f8 57 71 cf b9 8c 2e 3b 12 f9 15 af 0e 49 62 50 e6 00 ab ae Data Ascii: #5&hj5Jd'(eYH2P{Ez q6IF>4xADD])]U3K+#4jtl-%Gwwwu)_RVi=.XSOr,zvi\ERqRv&YqFf9M^~2c/[W"k"oZ*UfWecWq.;IbP
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 18 8f 1e 21 d6 c0 41 44 e3 40 d8 00 7e a1 a1 8a af 53 c1 e9 d8 eb ac 9e 00 7d 45 79 17 b6 b4 6d f4 61 5b 91 56 c5 ec f0 c2 f9 9e 8c 58 e9 6d 4d 9b 97 c8 82 07 b7 4d 94 f1 62 cb 19 0c d0 d3 d8 5d 3d d6 8e c0 d5 d7 8f 8e 86 f8 20 31 01 00 80 e5 b8 e5 ca ee 94 49 06 d3 c6 bb b5 1b 1d 09 75 c9 7c 0a 22 e3 bb cd 37 1d 4c d7 36 db 23 5b a6 18 81 a3 4c 23 65 42 b1 26 59 1e 7d 5e c1 3d 37 80 30 1a 54 31 cd d7 af db d5 1e 33 8f d3 8f d2 33 f3 31 93 39 1c 70 53 f3 f9 c6 7e 76 34 e7 21 5b 09 52 f4 4e 79 54 d3 52 54 78 b8 8e 91 97 f5 34 ed c8 fa 7e 8c 43 d3 53 58 9d 3d c9 b3 91 85 f1 9e aa 74 aa 85 b8 89 6d e7 f3 3e 61 1c ad 32 4b ad 4f ca 4d 08 14 db b0 63 21 16 26 6d 28 a5 77 8f c9 58 10 25 48 ae bd 5b 11 e4 a3 62 ce 02 8c 94 a0 ad f1 57 5e 1d 29 56 08 e0 53 f2 6a Data Ascii: !AD@~S}Eyma[VXmMMb]= 1Iu\|"7L6#[L#eB&Y}^=70T13319pS~v4![RNyTRTx4~CSX=tm>a2KOMc!&m(wX%H[bW^)VSj
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 26 ba 58 51 d9 4b 8d d2 45 aa 43 47 c5 55 f5 e1 5b 1d 94 08 6b b9 36 ac 97 d4 a3 b2 d7 fb 61 5e c4 8c 29 f2 52 c9 cd b3 3a 57 18 31 61 db 48 e0 bb fb 9d 86 c0 44 5e f6 0d 85 cc 9e 68 ea 1b b0 c0 d7 6b 5a 9e 33 eb 39 bc a5 30 8a 43 11 9d 79 42 98 21 8e b5 32 da b3 fb 62 53 24 b0 18 1f 83 13 2f 11 91 e3 58 39 5a dc 46 56 11 7d 80 a6 63 34 c9 48 1f 4d b3 b4 d6 e3 98 fc ff 00 ac 9c 8e 73 9f d2 66 39 ff 00 7c fe bc 67 c6 4e 73 cc 46 6d 35 f5 6f a3 49 ad ad aa af 13 91 87 9f 8c 8c 9e 30 b3 7a 89 6d 3d 51 13 23 fd e7 3f 12 51 19 b6 70 8a 37 34 8e ab 29 36 44 f4 ac 83 aa e1 fa de a1 e3 d8 b8 22 73 83 ac 68 be f5 b1 bb 5e 2a dc 6b ac 9e 9f 6c d5 0b b6 4f 01 b9 ea 4b 11 8d d9 5e b1 9e 22 e6 b5 69 73 75 b4 c1 35 ee d8 eb 8d bb d6 25 8e b1 35 f5 36 99 8d d1 ca a0 b5 Data Ascii: &XQKECGU[k6a^)R:W1aHD^hkZ390CyB!2bS$/X9ZFV}c4HMsf9\|gNsFm5oI0zm=Q#?Qp74)6D"sh^*klOK^"isu5%56
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: af a3 4f 82 97 81 40 be 4e 01 e5 04 cd 05 ae 6e 9f 49 96 97 03 13 e5 79 71 19 bb fc 73 33 16 f9 f2 a6 4b a9 07 38 bb 00 24 d6 2f 3f 60 d5 55 ce f1 ab 5e d0 19 26 aa da e6 26 3b 98 da b2 c6 91 52 6f 02 33 f6 dd 34 7d ae bd 30 14 d9 18 84 af 9d 7f ce 5b e7 84 21 45 96 aa 44 26 84 76 c3 98 01 a0 c8 c9 e4 e5 31 c6 69 24 bd 9e 4c ce 0e 47 e7 06 33 fd cf e3 9c e7 27 27 f1 f3 cf 39 25 c6 35 c0 38 4e 19 cb 17 54 11 63 6b 56 22 de d8 0f 0d 45 05 a4 44 1c 10 83 82 8c f0 f2 0f 69 ea 1d fa e0 36 1b 18 96 3e df 8c 33 71 ed d9 72 96 c7 f6 6e 9c b1 fa 65 a0 b6 2a a6 a8 cf dc b9 4b 5c 73 66 14 be 1f ea 26 79 b6 da 0b be ee 80 4e 71 19 d3 e4 7f 4f f6 71 ce 6c 7e 15 71 a4 6f 71 49 18 fd b2 0c d7 9e 68 9c ec 05 9a be d3 86 ce 23 64 fe d1 aa d7 8b ab 2b 50 03 8b d7 c8 9b 75 Data Ascii: O@NnIyqs3K8$/?`U^&&;Ro34}0[!ED&v1i$LG3''9%58NTckV"EDi6>3qrne*K\sf&yNqOql~qoqIh#d+Pu
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 1b 75 a9 39 40 c4 74 64 fe dd de 66 ed 65 42 84 5d 1d 76 b5 d6 74 ea 5d f6 56 35 7b 14 5a 11 2c 1f d2 67 02 7e 73 9f d3 f1 91 91 f8 89 e6 22 7f 46 65 84 2d a0 bd 4d 18 31 11 88 88 8c e2 22 33 af e9 c6 47 e3 fd 7f bc 18 c9 e7 27 f1 1f 8f cc 73 f1 fe b8 f8 9f d3 8f 8c 28 f8 c9 f9 ce 33 8f ac fe 0b 19 19 bc d3 26 ce 3f 5f 79 78 9d 4b 79 79 cc 9e a2 8c c5 30 49 90 b6 a2 d4 d1 ba f8 88 9e 71 d0 0c 51 10 1e 7a 8d 91 08 25 c8 8e 86 7a d7 46 2f f3 91 81 39 cc e7 68 8c 6b 7e b7 6e 0a b1 9c 74 5b 4a 58 f5 c7 69 32 59 f6 12 53 62 7c 94 81 15 6b ec 64 20 75 b6 03 c0 90 fd c7 d9 fa cb 7a 10 d9 12 2a ae 8e ea 3f aa a3 04 7e 4b 9c e2 7a 41 46 17 f2 68 4c c2 83 ae 30 63 97 72 2c 4f 56 31 2a 18 c2 e3 c7 31 11 96 24 64 4c 88 33 5c c8 39 44 47 0c e6 33 98 cb c8 09 cb 5e 14 Data Ascii: u9@tdfeB]vt]V5{Z,g~s"Fe-M1"3G's(3&?_yxKyy0IqQz%zF/9hk~nt[JXi2YSb\|kd uz?~KzAFhL0cr,OV11$dL3\9DG3^
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: c4 35 4a 4b 09 f7 1c ba 8b 1c e6 06 3d d7 dd b6 47 04 64 c2 00 9c d5 42 d2 ad 05 49 96 2f 9e b0 5f 18 51 93 8c 2e 22 e3 7b db 61 17 67 16 32 7e 09 a4 38 36 2c 1c 8a a6 49 61 db 0a b0 40 d8 ad ce 15 79 15 be b1 0c d8 0e b3 5c bf 66 80 ac c2 bb a6 0d 27 de 5c c9 22 4f 2a ca ed 61 ad bf 46 55 8e 26 82 f9 04 04 16 59 48 4e 07 d3 2b ff 00 15 8f d9 c3 24 45 59 72 41 5d d7 b6 15 12 b1 15 fe 37 1b 24 ad ac 63 9f 6f ca 81 0a 6e f2 63 7e f2 e1 13 c8 98 a5 b1 96 c8 d8 65 cf ad ab 36 01 34 3b 4b 54 70 01 6a ea 50 36 f6 73 6c e8 b4 54 b5 5d 5c 13 6d f7 5a e8 da ee 96 36 ab 59 70 7a ae 3c ad f8 83 67 31 8a 1e 73 8e 65 9f 18 36 e2 02 b5 8a ca 07 58 3e ec b0 50 d6 59 f7 09 78 10 91 47 12 5d 7a 83 23 b4 bc b2 6c 76 64 44 cc 8a be f5 43 c7 96 3a 12 40 8e b1 d7 78 59 45 ab Data Ascii: 5JK=GdBI/_Q."{ag2~86,Ia@y\f'\"O*aFU&YHN+$EYrA]7$conc~e64;KTpjP6slT]\mZ6Ypz<g1se6X>PYxG]z#lvdDC:@xYE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49791	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:18 UTC	372	OUT	GET /images/prices/c1.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:19 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:19 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680415-1c8f8e-5616f045cad80" Accept-Ranges: bytes Content-Length: 1871758 Content-Type: image/jpeg
2024-09-27 16:52:19 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 09 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8a 01 1b 00 05 00 00 00 01 00 00 00 92 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9a 01 32 00 02 00 00 00 14 00 00 00 a6 87 69 00 04 00 00 00 01 00 00 00 ba 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 37 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 37 3a 30 31 3a 30 39 20 30 39 3a 35 31 3a 35 39 00 00 21 82 9a 00 05 00 00 00 01 00 00 02 4c 82 9d 00 05 00 00 00 01 00 00 02 54 88 22 00 03 00 00 00 01 00 02 00 00 88 Data Ascii: JFIFHH@ExifMM*z(12iAppleiPhone 7HHPhotos 3.02017:01:09 09:51:59!LT"
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 77 26 c1 4b 9e 73 49 4a 06 69 80 64 d2 51 47 63 ed d6 80 0a 5c 9a 4a 28 01 7e f1 e6 83 c1 a3 a1 a3 a9 a0 9e a3 b0 bc 60 d2 fc a0 1c 54 40 0e b4 be f4 1a 5c 33 ed 4e cf 63 c5 20 5e 28 1c 9e 79 ac de bb 12 48 31 9e 29 09 c1 a4 fc 29 58 7c b9 aa 5a 68 1c bd 46 ed f5 a9 00 23 a5 27 5f 6a 76 78 f7 a8 e6 60 33 68 3d 78 a0 00 0f 14 fe 0d 21 3d a8 e6 60 33 68 a5 dc 47 4e 69 db 85 46 7a fa 53 5a ee 00 58 91 ef 52 00 07 5a 8c e3 a0 a5 ce 7d ab 47 76 03 c2 8c e0 9e 2a 2c f3 9a 71 39 cf 34 7e 55 2a fd 40 56 04 0a 62 83 c1 3c 53 cf 23 06 97 8e 73 cd 4b 6d 30 98 df 4e f4 6e c9 f4 a5 03 03 ad 34 fa 74 aa 4e eb 50 01 d0 8a 68 20 e6 9d 81 eb 4d aa 01 f9 c8 00 d1 cf dd a4 1e 9d c5 3c 60 0c f7 a9 6e db 01 1f 22 94 f1 c5 07 9e 73 48 d9 cd 3b 80 94 1f ca 8c 67 8a 76 07 ad 29 Data Ascii: w&KsIJidQGc\J(~`T@\3Nc ^(yH1))X\|ZhF#'_jvx`3h=x!=`3hGNiFzSZXRZ}Gv,q94~U@Vb<S#sKm0Nn4tNPh M<`n"sH;gv)
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 29 cf 7a 5c 8f 4a 57 46 5c a2 72 33 8a 01 3d 3a d2 11 c9 a7 1c 63 22 a8 76 01 ce 3d e9 30 33 4a 0e 3a f7 a4 ef 50 f5 28 50 78 c7 7a 40 07 43 47 4e 45 1e fd ea 39 48 e5 14 67 3c d1 8c f2 28 da 4f 39 a4 c7 19 a7 6d 49 e5 d6 c2 9e 7a 76 a6 d2 83 f2 d2 aa e6 b4 b6 85 3d 36 10 67 d2 97 00 53 f9 14 84 0e b5 8e ec 8b 8d fb dd 69 31 ce 28 e7 3c d0 06 7b e0 d6 89 ea 3e a3 b7 0a 30 0f 5a 6e 39 c5 1f 85 26 d8 49 8e e4 f5 a6 52 f5 ea 71 47 07 ad 11 14 b7 17 20 9a 4c 9c e4 8e b4 03 83 4e 6c 74 1d eb 42 af a0 c6 ff 00 38 a7 03 d3 b5 36 8a 96 99 37 64 bc 1e b4 11 91 8c 62 9a a7 71 c5 49 f5 a9 7e 65 c5 8c 27 02 8d dc 74 e2 99 de 92 a6 e2 93 77 25 c9 34 b8 23 a5 03 a7 5a 4c fa d1 72 1b b8 bc e7 38 a6 94 02 97 1e 9c d2 76 c5 2d 50 35 61 70 40 e6 83 83 40 c9 ef 42 8e f4 84 Data Ascii: )z\JWF\r3=:c"v=03J:P(Pxz@CGNE9Hg<(O9mIzv=6gSi1(<{>0Zn9&IRqG LNltB867dbqI~e'tw%4#ZLr8v-P5ap@@B
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 51 db 1d e8 e2 8e 83 06 9d ec 40 9c f4 ea 69 c0 1c 62 90 2e 4e 45 20 24 8c 9a a4 53 42 9c 0e 3b d1 90 0e 05 1f 5a 06 3b d4 92 07 9e 69 9b 8d 04 90 79 a5 23 34 15 b6 e0 0b 66 9d d4 62 80 a4 50 3a d0 4b f2 13 db d2 8a 32 07 5a 5d c0 76 a0 ab 08 cd 86 f5 a1 70 47 34 87 af a0 34 2f 4e 05 00 d6 82 82 7a 51 c7 7a 53 c1 a5 c6 7d a8 07 6e 83 47 1d 29 70 68 ce 3a 51 8e 3d e8 24 4a 29 7b 6e a0 0c d0 02 1c 81 48 3a 52 f3 8e 69 19 b3 c0 e2 8b d8 3a 0f 20 9a 33 93 48 3a d2 e0 9e 45 2b 8a e2 13 9a 40 32 33 4e 2a 31 4c 1c 8f 4a 65 f4 1c 00 3c 7f 3a 53 ec 71 49 91 9a 18 0e 31 40 58 8f 71 ea b4 a3 2d cb 52 11 91 e9 48 b9 3c d0 1d 03 60 3d 0d 28 f9 7d e8 ef 4b 8d e7 8e 31 d6 92 21 31 79 c7 bd 38 00 07 34 28 ed d3 de 9a ec 0f 14 c6 21 04 d4 35 2f 34 d3 82 33 41 48 7f 18 eb Data Ascii: Q@ib.NE $SB;Z;iy#4fbP:K2Z]vpG44/NzQzS}nG)ph:Q=$J){nH:Ri: 3H:E+@23N*1LJe<:SqI1@Xq-RH<`=(}K1!1y84(!5/43AH
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 24 0e d9 a4 4f ce 82 ba 8e 20 8a 60 eb 41 2d d7 b5 1c 8a 34 e8 27 a8 67 b7 6a 7e 00 e9 40 0a 40 f4 a5 24 1e 94 ac 52 1a a0 1c fa 51 b5 4a d0 06 17 03 8a 6a f0 30 78 a5 1b 14 ed 70 2a 07 22 a2 ab 3c 63 15 5c 8c 1a 9b d8 99 21 29 c5 89 e6 93 dc 74 a4 a5 72 07 01 c1 3d 68 03 23 d6 9b 8c 67 1d ff 00 2a 5e 47 43 8a 56 b0 00 19 a4 a7 1c 9e 05 38 2e 38 ef 5a a7 6d c6 95 c4 24 83 48 c7 69 1e f4 31 04 e2 a2 c1 63 f4 a8 48 1c 75 1f 48 09 ee 28 03 14 84 29 1c 55 dc 42 f4 fb a6 99 d4 e6 94 e3 b5 21 e3 a7 e9 51 17 62 6c 38 f4 f7 a5 5e 9f 35 37 93 4e 5c e2 94 9f 61 b1 69 59 87 18 a4 cf b5 30 9f 6a 49 5c 94 89 06 0a e7 a1 a8 0a 9c e7 91 52 02 46 0f 5a 18 93 f7 ba d5 24 d3 1d 84 51 c6 73 4a 23 62 72 29 01 c5 3b 7e 3a 55 3b 89 22 3d a4 f7 a7 00 3b 9a 1b b6 29 2a 8b 1f b8 Data Ascii: $O `A-4'gj~@@$RQJj0xp"<c\!)tr=h#g^GCV8.8Zm$Hi1cHuH()UB!Qbl8^57N\aiY0jI\RFZ$QsJ#br);~:U;"=;)*
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: b8 cd 38 1c 1c 7a d2 95 1c 66 90 0c 1c d0 2d 07 6e 39 c6 29 87 af 34 fc 71 e8 69 ae 31 83 40 d6 e3 72 73 cf 34 a3 91 46 72 69 c1 70 73 40 db 10 9c 51 8c 8e 68 73 93 4e 5c 12 49 e9 40 11 93 9e b4 ec 73 9a 52 07 d2 99 8e 33 49 82 63 b6 81 8c d2 7d 05 38 9d c2 9c be e6 8b 82 43 72 2a 78 d4 b3 80 79 1e b4 d4 50 cf 80 33 9a f3 cf 88 9e 3b b4 f0 b5 84 96 96 72 03 a9 4a b8 0a 3a 46 09 0a 4b 7a 1e e2 b9 31 78 9a 78 7a 6e a4 de 88 f5 72 fc be ae 36 bc 68 d3 5a b3 9b f8 ab e3 c5 b1 86 4f 0b e9 6f b6 67 c7 9f 22 9c ec c1 07 60 c7 f7 86 73 5f 32 bc e0 e4 0c d4 73 5d 4b 70 ef 73 3c 8d 24 92 12 cc cc 72 4e 7a f3 55 a3 25 df a6 07 a9 23 a7 ad 7f 3a e6 f9 9d 4c 6d 66 df c3 d0 fe c0 c8 b2 6a 19 66 1a 30 82 f7 ba b2 f4 28 08 32 39 d8 ab c9 27 8e 2b e2 bf da 33 e3 77 95 14 Data Ascii: 8zf-n9)4qi1@rs4Frips@QhsN\I@sR3Ic}8Cr*xyP3;rJ:FKz1xxznr6hZOog"`s_2s]Kps<$rNzU%#:Lmfjf0(29'+3w
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: df 8a 53 d0 54 6c 79 34 0b 40 38 26 97 b7 a5 34 64 1a 3a f5 a0 4c 52 3d 29 39 e9 4e 5f 9a 9a c7 9a 2f a8 f6 42 50 32 4f 3d 29 c4 77 a4 c6 7a 50 1a 0b 82 3a 50 0f 6e d4 a3 a5 37 04 0e 6a ef 71 8f f7 a6 ee 27 8e d4 1c 8e 28 db df bd 41 98 a3 81 4e 1d 69 9f c3 4f 52 79 cd 54 74 00 6c 03 8e d4 c2 00 38 1c d3 ca ee e7 d6 9b 81 43 34 4c 6e 77 76 a9 0f 04 0a 8f 9e 29 f9 e3 26 84 43 b8 85 b3 d2 9b c7 4e f4 a3 38 eb 40 19 e6 8b 8f 51 7b fa 50 c7 8c 51 9e 7d a8 e1 aa 93 06 f5 17 00 74 a5 2d 81 c7 e5 51 f7 c8 a3 19 e7 bd 2b 8e c0 72 29 e0 2e 33 4c e4 d2 86 f5 a1 30 6c 6b b1 c6 7b d3 37 37 04 0a 7c 98 cf 14 83 81 47 52 09 15 81 23 8e 69 ac e7 a0 14 a3 9f c2 a3 2d ce 45 0c 09 3f d9 a6 93 9c 93 4d c9 dd 47 38 cf af 6a 60 d1 22 9c 8c 9a 53 91 48 be e6 95 87 ad 05 58 4c Data Ascii: STly4@8&4d:LR=)9N_/BP2O=)wzP:Pn7jq'(ANiORyTtl8C4Lnwv)&CN8@Q{PQ}t-Q+r).3L0lk{77\|GR#i-E?MG8j`"SHXL
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 4a db f0 90 fd dc fd 7a d5 0d 5b 55 d3 3c 37 a7 c9 a9 6a 93 a4 22 30 4e 09 c1 e0 67 8c f5 ab f7 b7 76 7a 15 8c fa 96 a3 2a 45 15 ba 97 6d c7 1c 0e 4f e9 de bf 36 7e 31 7c 53 d4 7e 24 78 8e 5d 2b 49 b9 2f a3 42 c4 46 a8 a5 4b e3 ae 72 72 49 f4 af ce a8 50 75 a5 ae c7 eb 18 8c 44 69 43 4d fb 18 7f 15 fe 28 6a ff 00 13 75 74 49 e5 75 d2 2c 99 fc 98 71 c6 49 ea 71 dc f4 fa 56 87 c3 8f 87 f3 4e cd e2 5d 61 02 c7 f7 6d e0 71 8f f8 11 07 f4 cd 76 df b3 b7 c2 bb 0f 1a f8 9e 4b af 12 7f a2 d8 e9 d6 e6 78 60 c8 0d 23 82 14 07 cf 45 1c 92 7a d7 79 75 f6 cb ef 10 de e9 b6 11 f9 ad 68 37 c8 c3 01 36 e7 b0 e3 80 3d 85 7b ee aa a7 1f 67 4c f9 95 4a 55 65 ed 6a 6e 4a ba ad b5 83 f9 97 ed ba 30 bb 70 7a 0f a0 a3 c2 76 37 3e 3a d4 6e e7 7b 70 3c 3d 70 ac 83 6f c8 c1 90 63 Data Ascii: Jz[U<7j"0Ngvz*EmO6~1\|S~$x]+I/BFKrrIPuDiCM(jutIu,qIqVN]amqvKx`#Ezyuh76={gLJUejnJ0pzv7>:n{p<=poc
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: f0 47 22 be 83 2c cd 2a 61 6a 29 45 e8 7c e6 71 92 51 cc 28 b8 cf 47 d1 9f ac e4 07 21 87 21 bf 2f 6c 1a 85 90 e3 9a f8 b7 e0 d7 c7 99 7c 38 90 78 4b e2 0c de 66 9a b8 8e da f9 8e 1a 00 78 0b 29 62 49 4c f7 c6 47 7a fb 65 5a 19 e0 4b 8b 69 56 78 24 01 92 58 c8 64 65 3d 18 30 38 20 f6 fe 7d ab f7 9c 06 61 4f 19 05 28 33 f9 57 36 ca 2b e5 f5 9c 2a 47 d3 cc af 8c 1c 77 14 6e c8 34 ac 36 9a 8f 3b 45 7b 2b 43 e7 12 d6 e3 8a 8e b4 06 db 48 4e 07 ad 45 9e 71 43 66 b7 44 d9 cf 5a 66 7b 67 8a 66 72 7a d0 07 1c 1a 5a f4 21 8f 05 7b 51 dc 9a 72 af ad 3b 63 0e dd 69 a2 1b 22 27 34 a1 7d 69 fe 53 03 cf 6e b4 e6 4d bd f3 41 49 09 19 c9 c9 f5 c5 70 9f 10 da 4b 9b 5b 1d 3a 18 cb 4f 21 77 00 1e 08 5c 67 3d 3f 5a ef 10 60 e2 bc e7 e2 3d eb d8 5c e9 97 71 f0 fe 5c c1 49 e7 Data Ascii: G",aj)E\|qQ(G!!/l\|8xKfx)bILGzeZKiVx$Xde=08 }aO(3W6+Gwn46;E{+CHNEqCfDZf{gfrzZ!{Qr;ci"'4}iSnMAIpK[:O!w\g=?Z`=\q\I
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 49 eb 4e c8 1c 52 40 37 18 3c 9c d2 30 e3 ad 0c 40 34 84 83 c7 4a bb 80 d5 e0 d2 91 8e 45 3a 97 23 d2 a4 a6 07 1d 2a 3c 9a 7d 27 1d 28 24 4c 8e bd e9 31 81 46 79 cd 39 46 4f 26 92 d0 04 ff 00 68 73 49 c8 ed 4e 2a 07 4a 6e 4d 34 c0 93 af 1d 28 2d 81 4c 19 f5 a4 cf 39 a0 ab 81 c9 34 ec 0a 66 0e 38 38 34 a7 00 d0 4a 62 53 8e 48 a0 10 05 00 f7 14 90 0d dc 79 e3 02 90 f2 38 a5 65 27 e6 34 9b 7d 29 99 b4 d8 80 91 9c 50 1c 91 8e 94 10 d8 a5 03 24 50 2d 50 2b 13 4e 27 34 dc e0 62 80 45 06 a9 0e e2 90 e3 18 a2 82 49 14 de 85 31 ac c0 0c 1a 66 e1 4b cf 7a 69 f6 14 8c 64 87 81 c7 ca 69 ca 0f 42 69 b9 52 31 4e 57 5a 08 bb ec 38 16 7e f4 c7 3c 63 1c d2 ae 47 3d 28 6e 45 55 cd 56 c3 0f ca 3b 53 47 23 19 c5 3b a9 db e9 4d c1 07 15 21 24 4a 98 34 99 ec 28 8c 10 68 3c 74 Data Ascii: INR@7<0@4JE:#<}'($L1Fy9FO&hsINJnM4(-L94f884JbSHy8e'4})P$P-P+N'4bEI1fKzidiBiR1NWZ8~<cG=(nEUV;SG#;M!$J4(h<t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:19 UTC	373	OUT	GET /images/prices/acu.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:19 UTC	268	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:19 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680414-252a-5616f045cad80" Accept-Ranges: bytes Content-Length: 9514 Content-Type: image/jpeg
2024-09-27 16:52:19 UTC	7924	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 84 00 06 04 05 05 05 04 06 05 05 05 07 06 06 07 09 0f 0a 09 08 08 09 13 0d 0e 0b 0f 16 13 17 17 16 13 15 15 18 1b 23 1e 18 1a 21 1a 15 15 1e 29 1f 21 24 25 27 28 27 18 1d 2b 2e 2b 26 2e 23 26 27 26 01 06 07 07 09 08 09 12 0a 0a 12 26 19 15 19 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c2 00 11 08 01 2c 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 01 05 01 00 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f2 e1 24 96 66 66 62 60 86 31 24 c8 00 80 c9 21 32 49 37 5d f7 8b e3 80 82 49 24 b4 24 92 cc ec cc 48 26 46 26 19 00 02 08 0c Data Ascii: JFIF,,#!)!$%'('+.+&.#&'&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&,"$ffb`1$!2I7]I$$H&F&
2024-09-27 16:52:19 UTC	1590	IN	Data Raw: 07 c3 08 3e 18 48 79 96 ca 45 14 0d 21 07 c0 3f 48 41 af c3 f4 84 9a fc 3f 48 06 bf 0f d2 36 d1 bf 48 71 35 ba 92 22 65 bd 80 9f 28 7d bf bc d9 82 0e 20 8d 0e 9a 62 d0 b3 0e c9 e9 27 10 91 f5 a4 5e 4f a8 8f 86 37 d2 3e 17 9e 9d 08 8a b6 39 45 6e f3 cf d5 ad 69 47 ab 4b ae 0a c7 41 6f cd 00 35 56 42 c7 9e 85 61 73 2e a5 4a 4e 15 80 90 8d 48 0d b6 91 76 02 12 30 ec f1 d2 10 20 1e e8 07 ba 12 83 2c f5 28 12 f0 07 91 c2 10 7b a1 27 b8 42 0f 86 10 af 08 84 2a ba 83 f4 84 2a ba 82 12 6b f0 e0 1a fc 3f 48 18 fc 3f 48 22 b4 41 1c a1 f4 6c 06 26 9b f0 56 1e b3 6d d9 09 b5 20 80 d3 e9 2a fe 9a d0 fa 56 0c 95 af 3b 2b 4a 25 a7 94 13 ca b5 1e 91 f0 4f 61 f0 93 ca 35 47 3c f7 54 14 3c 26 b0 1d 32 13 a3 10 f3 00 13 c4 67 c6 17 34 ea 54 53 84 00 13 a9 e9 01 b4 a7 56 02 Data Ascii: >HyE!?HA?H6Hq5"e(} b'^O7>9EniGKAo5VBas.JNHv0 ,({'B*k?H?H"Al&Vm V;+J%Oa5G<T<&2g4TSV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49793	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:19 UTC	372	OUT	GET /images/prices/c2.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:19 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:19 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680416-167a70-5616f045cad80" Accept-Ranges: bytes Content-Length: 1473136 Content-Type: image/jpeg
2024-09-27 16:52:19 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 04 36 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 09 01 0f 00 02 00 00 00 06 00 00 00 7a 01 10 00 02 00 00 00 0e 00 00 00 80 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 8e 01 1b 00 05 00 00 00 01 00 00 00 96 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 0b 00 00 00 9e 01 32 00 02 00 00 00 14 00 00 00 aa 87 69 00 04 00 00 00 01 00 00 00 be 00 00 00 00 41 70 70 6c 65 00 69 50 68 6f 6e 65 20 36 20 50 6c 75 73 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 50 68 6f 74 6f 73 20 33 2e 30 00 00 32 30 31 35 3a 30 38 3a 31 39 20 31 36 3a 32 38 3a 31 36 00 00 20 82 9a 00 05 00 00 00 01 00 00 02 44 82 9d 00 05 00 00 00 01 00 00 02 4c 88 22 00 03 00 00 00 01 00 Data Ascii: JFIFHH6ExifMM*z(12iAppleiPhone 6 PlusHHPhotos 3.02015:08:19 16:28:16 DL"
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 62 80 ae 55 98 ae 3d 0f 1c d4 1a 21 98 53 d0 0e 69 c3 d3 b1 ef e9 4b 86 04 9c 8e d8 14 ed a9 8c 63 8f 4a 04 f5 20 90 9e 71 f7 68 d8 48 2c bc 9e d9 a7 95 5c f6 6a 93 61 51 82 7e ef a7 5a 09 44 2a 18 81 b9 b1 4f 72 00 cd 4a 54 7a e7 1f de a6 00 a4 36 30 4f 03 91 41 4c 84 ae 42 bf 62 0e 7f 0e 94 1c 6e 20 0a 94 fc ab b0 75 ce 3d a9 36 fc d9 ff 00 26 81 26 47 83 b4 1c d3 30 07 dd 03 f1 a9 00 21 8b 76 3d 73 52 33 1c ed 38 c1 f6 a0 08 00 27 19 fb a0 8e 3e bd 69 c5 4b 13 92 39 f6 a3 f8 81 f4 e3 f3 a0 02 39 5e a7 f2 a0 5c a2 14 27 01 cf 23 a1 f4 a4 5e a7 6f 18 fc 6a 5d 87 69 52 73 c5 27 96 10 f1 c1 3e c6 96 cc a2 36 e5 7c d0 09 3d 08 03 3d 69 a5 4e e3 9e a0 f3 8e b5 23 2f 5c 1d bb b9 a4 e4 2b 14 3d 7a 9f 5a 60 44 10 8f 9c 73 8c fe 34 e6 ec ab 81 b8 7f 0d 3c 26 07 Data Ascii: bU=!SiKcJ qhH,\jaQ~ZD*OrJTz60OALBbn u=6&&G0!v=sR38'>iK99^\'#^oj]iRs'>6\|==iN#/\+=zZ`Ds4<&
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 18 27 d2 a4 50 d9 0c a7 ad 23 e4 0c 9f 7f d2 80 13 04 e4 9e 84 93 f9 53 36 06 38 3c 03 fd 6a 51 9c fb 71 fa d0 ca 30 43 1f a5 05 a1 3e 7f bd ce 17 a7 b5 30 28 01 91 58 fd 71 53 94 ce 53 38 0d d7 1c 9a 1a 34 41 92 38 cf af 34 0c 87 07 82 07 6a 57 01 89 63 8e 4d 3c 64 12 de 9f d6 9e 51 78 c7 4a 05 72 30 57 3b 40 c0 07 b7 7a 71 1f 26 cf 98 81 c0 14 8c 09 39 43 8d a3 bf bd 21 2c c0 92 c3 82 31 52 d8 d3 ea 07 61 e1 b9 27 f0 c5 18 53 c9 27 a7 eb 4a ca 37 16 5e 47 70 68 64 01 06 7a f5 e3 d6 9d c1 8d 44 1f 78 76 f5 a4 31 82 0b 12 32 a3 f9 d3 94 1e 99 c9 3f 80 c5 49 95 61 c1 18 27 9a 64 a2 06 e1 47 1c 8e 47 3e b4 e5 72 ac 17 1f 77 1c f6 a5 f2 c1 60 47 38 a6 90 e1 b1 9f 94 1f f2 28 2b a8 ec 7d c3 80 37 67 38 eb 4b e5 a9 cb 29 c1 fe 9f e3 53 15 39 e0 60 0f 7e 69 9b Data Ascii: 'P#S68<jQq0C>0(XqSS84A84jWcM<dQxJr0W;@zq&9C!,1Ra'S'J7^GphdzDxv12?Ia'dGG>rw`G8(+}7g8K)S9`~i
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 08 54 9c ee 14 d0 a4 95 c7 43 52 e7 76 57 8c d2 60 00 0f 61 45 f4 19 07 97 c1 20 6e da 71 d7 d6 9c ab f2 e7 3d 3a d2 95 04 60 11 8e b8 cd 4a 8a 98 c6 30 69 14 46 71 8e 39 07 a5 20 55 39 27 a0 35 29 1b 79 e3 9a 6a a8 3c 16 e3 ae 28 02 3c 31 2c d8 f9 48 e0 1a 72 90 38 c6 d0 06 29 cb f3 28 27 8f c6 9b d4 7c 87 68 ef de 82 6f a8 ee 14 0c 1f 9b 23 f2 a6 60 e7 25 88 1f 9d 20 19 52 7b 8a 7e d2 30 7d a8 1b 10 63 71 51 d3 ad 28 21 97 04 e3 3d a9 02 03 ca 9e bd a8 08 b9 14 09 21 a4 16 1b 73 8c 67 15 03 29 0c 15 b9 c0 cd 5a db 95 18 1f 76 a3 72 41 c9 38 e7 1d 0d 68 31 99 2c d9 6f c0 53 b2 9e 9d 3a 50 83 cc 7f 64 a9 0a 10 cd 9f 50 47 b6 2b 30 23 45 6e a3 90 7e f7 63 4b 80 46 06 47 7e 29 d8 38 19 19 c5 34 65 8e 49 07 b6 33 da 80 13 ef 1e 0f d3 3f ce 90 a0 00 81 d1 71 Data Ascii: TCRvW`aE nq=:`J0iFq9 U9'5)yj<(<1,Hr8)('\|ho#`% R{~0}cqQ(!=!sg)ZvrA8h1,oS:PdPG+0#En~cKFG~)84eI3?q
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: ec a3 3f 2e 46 3b fa d3 0e de 50 6d ca f4 a0 06 6c 00 f0 09 a7 ed e3 8e dc 53 d8 bf 21 17 07 b1 a6 92 72 41 38 e7 d3 8a 04 29 0a 0f a1 14 83 82 ce bc 10 3e b4 f7 19 3f 39 0c 7d 86 29 aa 0a 64 67 83 db 14 86 33 18 05 64 eb ed 52 04 23 a9 04 7d 68 da a3 a9 27 fa d3 9b 18 03 f9 51 70 23 21 7e eb 37 1e d5 1e 53 6f 20 ee a9 ca 80 09 c0 c7 6c 0a 6a 90 54 67 a9 a9 2b 42 2d a0 e5 73 8c 0a 50 06 76 1e a3 14 f3 18 3f 77 bf 07 e9 4a 14 a9 c3 71 ea 3b 9f c6 a8 5b 91 93 fb cd b8 e0 73 9a 50 0c 8d 8f c4 76 a9 d1 15 63 0a 79 00 7e 34 85 70 37 75 e9 b7 35 03 b1 00 56 c6 e4 e3 eb e9 51 a0 cb 67 04 63 f5 ab 7c e3 dc d4 6c 72 47 35 49 92 33 68 21 ba f3 c7 43 d2 9a 46 78 4e 05 48 c3 91 dc 7b 71 48 42 28 cb 1e 87 1d 49 cd 50 08 10 10 46 7e f5 2b 2a 8e bc d0 72 ec 33 8e 39 e2 Data Ascii: ?.F;PmlS!rA8)>?9})dg3dR#}h'Qp#!~7So ljTg+B-sPv?wJq;[sPvcy~4p7u5VQgc\|lrG5I3h!CFxNH{qHB(IPF~+*r39
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 8f 07 00 03 d7 8a 50 a1 80 23 8f 6a 76 06 38 03 8a 7a 84 72 31 c6 08 39 35 17 2a e4 4c b9 fb df 74 fa 76 a7 92 09 21 f2 73 4e 20 84 c0 e3 23 3f ad 30 0c 91 ca d0 d9 37 d4 1b a0 ee 69 3e 62 0e de 3b f3 52 7d d3 c6 38 a1 82 6d 60 7f 3a 9b ea 55 c6 12 ac bb 4e e0 47 e4 68 03 3c ff 00 3a 5e 18 80 39 04 7d 29 57 39 3e be fd 2a ae 31 bb 3b 8c 1f ad 3c 11 8e 00 a0 05 3d 0f 3c 13 91 c5 38 af 57 04 8d c7 18 f4 a9 4c 4d 22 2f 94 f5 23 e9 52 f5 e7 14 dd 9b 46 0e 0f bd 3d 78 cf 6c 52 16 a3 4a 8e bb 7e 5f d6 9e 37 10 aa 87 a7 39 20 72 28 03 3c f1 8a 50 17 70 07 19 1d 3d 28 1b 19 c7 de 05 54 9e dd e9 c7 25 40 1f 30 3d 28 50 37 97 6c 7c bd 06 3d 7d ea 57 0a 8a 1b d3 20 0a d0 64 18 f9 4b 8e 3b 7e 54 22 02 78 c8 c1 18 34 8d f3 47 b5 4e 31 ed 52 00 bb 14 fd e0 71 8e dd 2b Data Ascii: P#jv8zr195Ltv!sN #?07i>b;R}8m`:UNGh<:^9})W9>1;<=<8WLM"/#RF=xlRJ~_79 r(<Pp=(T%@0=(P7l\|=}W dK;~T"x4GN1Rq+
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 6f 7e 28 ea 32 4b ff 00 12 5b 31 6c 00 f9 9a 40 24 62 c3 93 c0 03 e9 8e 9f 91 15 e5 bf d9 b1 c9 a8 c9 aa 11 e6 4b 3e 4c cc c7 24 9f 53 9e bf 85 6a 5a c6 cb 38 93 3b fe 53 cf 43 bb 18 e7 eb e9 57 be c5 71 1b 46 ea 72 5b d1 48 1c f5 cd 7e 23 8e ce 71 18 a7 fb d6 7e eb 97 64 18 6c 2a fd dc 75 2a c5 6d 2b af ee c8 65 e0 e4 70 4e 07 1d 33 da ba 98 6f f5 bd 2e 34 7d 2b 51 b8 b6 77 21 81 46 f9 87 19 cf 5e b9 ab 30 5a 65 4b b2 7e ef 07 20 71 9f f2 6a e4 56 52 4b 12 46 f1 ee 0a 7f d6 11 90 b8 1e b5 f2 f3 9a 6f 53 e9 23 82 8d b6 3b 9d 13 e3 ef c5 cf 0c 94 96 c3 58 69 51 40 dc 92 a9 70 76 f4 6c 38 6e 7d fe b5 e9 5a 97 ed 27 a5 fc 43 d3 2d f4 7f 8a 1e 1c 5f 3d 24 0e 35 2b 23 b2 68 9b 3f 7d 43 70 dc 60 6d 27 1f 90 af 03 97 4e 80 a6 d9 10 ab b7 de 61 c1 38 e8 79 e2 b3 Data Ascii: o~(2K[1l@$bK>L$SjZ8;SCWqFr[H~#q~dlum+epN3o.4}+Qw!F^0ZeK~ qjVRKFoS#;XiQ@pvl8n}Z'C-_=$5+#h?}Cp`m'Na8y
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 94 ec 65 72 39 03 b0 e7 f9 d3 b6 9d c3 1f 77 d2 8b ea 08 89 3e ee 5b 9c fa d0 8a 40 e3 af 5e 95 28 8b 24 60 fd da 76 ec 7c c8 70 78 a6 d8 3b 11 a8 cf 5e fd 4d 00 12 09 6e c3 34 f0 0e 1b b6 38 14 9b 59 95 8e 46 31 8c 66 95 f4 00 c2 90 42 f2 31 c5 46 c0 aa 0c e3 70 eb b7 a7 e1 52 84 6f 99 53 00 20 07 f0 a7 37 20 80 31 42 60 57 db c1 ce 30 69 c4 17 04 01 90 07 ae 33 4f da 0e 4e dc 1f 5a 73 28 c6 14 52 40 44 02 b2 e4 8c 67 f1 5a 0c 6b f7 49 c7 07 a7 af f8 54 81 1c 00 d8 ea 3d 69 0a 81 c9 eb 4e c0 47 8d cc 72 71 c7 e1 48 43 15 2f 9c 01 f9 9a 90 6e dd c9 c8 f4 a0 aa fd 7a 9a 7a 01 11 19 c9 e9 e9 ff 00 d7 a4 da d9 0c 3d b3 f8 d5 80 ac 54 33 2f 6f 7a 43 85 c8 1c ee 14 20 22 6d a3 2a 0e 18 e0 60 d1 85 27 03 27 da 9c db 79 de 01 e9 d6 9c 43 e5 7f ba c7 92 7f c2 a4 Data Ascii: er9w>[@^($`v\|px;^Mn48YF1fB1FpRoS 7 1B`W0i3ONZs(R@DgZkIT=iNGrqHC/nzz=T3/ozC "m*`''yC
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 8e 4f cb db f5 a4 6d 8c 08 e3 9a 69 80 b8 04 17 42 79 ef 49 b4 73 b7 19 1d 0f 4a 72 8d a3 d8 7a 50 03 1e 9f af 5a 49 90 c8 cc 67 8c 76 eb 4d db 82 4a 8c 01 d4 9a 95 9d 58 16 39 53 18 cf d7 b5 46 c3 e5 64 f5 ea ad fc 54 23 44 c4 50 bd 80 cf ae 7d 28 20 6e ea 40 eb 9a 62 67 ee e3 b7 e5 52 79 64 64 29 f9 45 5b 10 e2 bd 5c 0e b4 04 62 78 e0 53 c0 dd c8 6e 3d e9 a4 ee 18 e7 ae 3d 38 a8 be 80 39 55 58 01 d0 ad 22 63 76 49 3f e7 39 34 8b 9c 95 43 c7 bd 3c 0c e1 87 41 48 a1 18 10 7e 80 7b d2 11 bc e4 60 ed c1 15 27 dc 62 17 8a 69 01 57 91 9c f4 34 12 46 17 6e 76 f5 a3 20 f2 c7 91 c0 db 53 2a ee 19 3c 10 09 3f 5a 89 81 19 f9 4e 07 20 fa 9a b6 8a 42 f9 7b ba 64 02 79 cd 35 06 5c 85 e7 d3 35 2e c5 71 92 4e de 33 48 e0 16 f3 1b a0 a9 24 68 5e 4b 12 b8 14 e5 c1 3d 38 Data Ascii: OmiByIsJrzPZIgvMJX9SFdT#DP}( n@bgRydd)E[\bxSn==89UX"cvI?94C<AH~{`'biW4Fnv S*<?ZN B{dy5\5.qN3H$h^K=8
2024-09-27 16:52:19 UTC	8000	IN	Data Raw: 2b 5d cf b5 fa 02 71 d7 d6 a6 96 18 42 ee 38 04 64 f1 df 15 84 66 cd 79 4c ad 8a a3 0b c3 7a d2 28 0e dc 0e 09 e9 8e 7f 3a b0 10 4d 2f 92 ae a1 8e 70 0b 75 3d 08 e3 f4 1f 5e d5 0d bd ab db 02 df da 2b f3 0c aa b0 ce dc fa d4 bd 48 d8 fa 27 f6 6e 80 1f 18 eb 32 10 01 16 2b 82 3d 1a 41 9a fb 2d 55 18 73 d4 7e b5 f2 5f ec e1 68 f0 df 6b 5a 9d d4 e2 46 78 a1 8e 3e d9 56 2c 49 f6 e5 31 5f 58 79 e8 30 46 0f d2 bc 3a bf 11 d0 9b b1 39 c0 f9 71 c1 a5 1c e0 e0 54 8b 86 01 c7 43 da 99 f2 b0 c1 18 ef 58 0a e4 32 5b 46 fc b7 f0 f4 f5 a6 08 50 74 0c bc f6 39 ab 78 04 71 d5 79 a8 c0 e7 e6 ea 68 45 5d be a5 77 12 28 38 39 cf 00 1f eb 50 dc e9 f6 7a 9d ab 5a ea 70 45 75 14 83 0c 92 26 e8 c8 f7 56 ce 6a e9 0a 71 bb b7 4f e7 52 c6 a7 68 cf 63 56 9b 15 ed b1 f2 9f c4 9f d9 Data Ascii: +]qB8dfyLz(:M/pu=^+H'n2+=A-Us~_hkZFx>V,I1_Xy0F:9qTCX2[FPt9xqyhE]w(89PzZpEu&VjqORhcV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49797	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:22 UTC	373	OUT	GET /images/prices/c3.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:22 UTC	273	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:22 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "680417-57b454-5616f045cad80" Accept-Ranges: bytes Content-Length: 5747796 Content-Type: image/jpeg
2024-09-27 16:52:22 UTC	7919	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 f0 00 f0 00 00 ff e1 01 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 08 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 6e 01 1b 00 05 00 00 00 01 00 00 00 76 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 7e 01 32 00 02 00 00 00 14 00 00 00 a0 87 69 00 04 00 00 00 01 00 00 00 b4 00 00 00 00 00 00 00 f0 00 00 00 01 00 00 00 f0 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 36 3a 30 38 3a 33 30 20 30 32 3a 33 34 3a 34 35 00 00 05 90 00 00 07 00 00 00 04 30 32 33 30 90 04 00 02 00 00 00 14 00 00 00 f6 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 Data Ascii: JFIFExifMM*nv(1"~2iAdobe Photoshop CC 2015 (Windows)2016:08:30 02:34:450230
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 3b e8 73 71 bb f2 f2 1c bd 7e 8f f8 2f ef 1d 07 28 7b d1 a1 4a 11 42 c4 bc 82 96 d6 ce 12 5e 53 98 ae 75 23 10 51 11 c0 5a 80 83 0c 51 65 16 83 51 13 22 5c c5 02 14 10 c8 dd c0 5c 05 35 02 33 69 1b 29 68 e4 5a bb 33 04 86 19 91 e5 09 66 8f 57 bc 3a 11 02 7a 09 1a 30 44 15 52 1a 1b 58 41 91 20 cd e2 b1 24 aa 1e 6c 45 5a d5 c0 d6 99 83 06 a4 a2 99 c5 a6 81 9b ab 60 6b 9c b4 a6 90 af d1 6b 88 6a 40 1f 2f a3 be 83 c3 fb c7 e8 3e 55 df bd e1 fa 17 91 e8 fe 77 69 d7 f5 87 cb 7d 17 bd ed c8 5e 6e f7 5e 8f 91 5b f1 bf 50 b2 66 04 8a d1 a4 19 9b 29 48 0a b4 1e 47 12 32 12 cb 08 c8 98 25 9b 36 60 0a 12 c9 05 be 47 40 60 85 76 6e 84 2f 11 4a 66 d9 68 a8 29 0c 66 c9 b3 4e e0 39 68 9c 50 19 6c 2e ac 1a 53 6d 20 63 a3 4a 6d d1 30 71 5e 6a e2 18 6b 9d 7e 98 b3 65 69 b4 Data Ascii: ;sq~/({JB^Su#QZQeQ"\\53i)hZ3fW:z0DRXA $lEZ`kkj@/>Uwi}^n^[Pf)HG2%6`G@`vn/Jfh)fN9hPl.Sm cJm0q^jk~ei
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: e7 db 8e 3b 79 bf d0 7c fd 4f d3 fc cb 8e 9e 2b 50 3b 4f 1f d5 73 75 0b 5c 5e 17 c0 36 70 cb 4c f0 09 81 b1 62 67 b0 b5 59 22 26 9c f4 f5 1e 2e 4f b0 3d 9f 17 a2 f5 f8 2f bc bf 71 ff 00 e7 3f 79 f2 f7 da 7c d1 fe bf f3 fe 5f 4c ec 39 7a 7b bf 0f e9 a8 7b 3c 4a 3e a7 7d e7 f7 1f 97 b5 a6 69 cb f4 63 c7 62 38 56 6e 40 75 56 2e 8d b4 47 ba 73 27 45 23 27 41 f2 5f 65 d5 7c 47 d3 59 74 a3 9d 86 b1 6e c9 e5 fd fe 7f 9c 74 0e f7 83 d0 ee 39 ba ba 4c 2e 81 b0 6d ae 7c 23 b3 77 ba ae 6e be a8 b1 0a 9a c8 73 e9 51 01 40 18 d0 fb 67 61 28 91 25 4e c6 48 b3 14 a0 8a 81 b4 ab 0a 96 8c 94 38 59 35 92 e8 95 6b 98 d8 41 93 38 50 b2 0a cd cb 21 56 28 ad dd 39 2f 5b 83 a4 f3 3d 47 3c 1d 94 de 8e 56 4a b4 1a 73 52 ea 29 fa 71 6a eb 6b cf d0 30 20 8f a4 6f 47 ea 4f b9 fc c6 Data Ascii: ;y\|O+P;Osu\^6pLbgY"&.O=/q?y\|_L9z{{<J>}icb8Vn@uV.Gs'E#'A_e\|GYtnt9L.m\|#wnsQ@ga(%NH8Y5kA8P!V(9/[=G<VJsR)qjk0 oGO
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 6f df e3 fd c8 12 ff 00 da f3 3a 6f 2f d5 4f e7 df a1 7c c9 f6 ff 00 1c af ac f8 6a c4 d2 cf 93 d1 b4 e4 df 97 ec f3 b9 16 5a be 4f 52 8b 87 b3 94 e4 ec 6d cb d3 46 59 be 22 8f 4c d9 ea 02 9b dc 73 6c ac 76 2f 07 ae ff 00 87 a6 c7 c8 f5 5c 8d 53 af 39 b5 8a d9 8c e4 22 64 3d fe 6f d5 64 fd 0a a3 2d 72 f3 fd b3 ba 99 f6 62 bd b0 e3 76 cb 86 ee e5 e7 3a 83 ec 74 f4 af 37 a7 d0 78 fd 17 d8 93 2e ea cf 49 41 28 ea 00 e1 c6 af 01 94 af 2b a2 94 8b 26 49 90 1a 54 21 0c 07 48 65 29 c0 a8 18 0b 9a af 74 a1 db 97 9a eb cb 9c d4 72 7e 86 0c db 32 74 06 bb f0 a7 9b a4 28 74 b5 4e 30 d9 61 57 98 b3 c3 ae f3 8f d0 33 b7 d1 fe 83 fb cf e9 1f 8c 3c f3 3d 6a 6f b3 fc bf e4 ff 00 cc 3f a2 7e bb e9 f9 77 df 4b e2 76 1e 77 4a fe af e4 42 33 73 1a 8d f9 e8 3b 78 2a 1d 5d f9 Data Ascii: o:o/O\|jZORmFY"Lslv/\S9"d=od-rbv:t7x.IA(+&IT!He)tr~2t(tN0aW3<=jo?~wKvwJB3s;x*]
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 63 af 44 23 b9 66 7b 95 75 96 b7 4b 95 f6 5d 47 b4 5e 86 14 ce 6c b2 cb 40 4c fa 22 03 6a bf 54 60 b3 1c 95 99 66 a5 86 a5 ab ab 62 1a 38 ae 74 66 26 ac 8d 93 46 90 ae d2 65 4d 6d 3d 73 dc f1 7e d7 fd 0f f3 1e ab d6 f3 3d 4b e5 3e 9f f3 e3 d0 e3 f7 cf 9d fa 0f 74 f7 3e 6f d0 7c 5f 7e c3 87 a7 86 f9 ff 00 5a 41 8b 41 0d 1b c0 5a e6 08 82 2c 8a b6 0e df 39 a1 20 69 ae b9 0e dc 2b 0b 38 49 25 f5 1c b2 0a 00 56 65 09 a3 72 58 3b 31 cd 58 ae ac d4 b1 6c eb 56 a9 76 ad 45 0e ca ee cb ac ea ca 93 a9 78 3f 47 cb 68 9b 3b c7 a9 de 1b b9 e6 36 19 ec fb 36 3a a5 8a 33 89 9d ae ae 9d 5b ae 23 7c a7 49 b3 54 9d 2b cd af 3f 37 a3 51 ec 94 fd 79 d9 e2 2d 39 37 f5 bf 2f d4 3c d3 42 8b 58 57 90 d3 4c 5b 6e 1a 90 c1 8b 1a 6d 06 f9 06 61 d9 62 f4 d9 bf 9d fd 9f ca 9b ab 8f Data Ascii: cD#f{uK]G^l@L"jT`fb8tf&FeMm=s~=K>t>o\|_~ZAAZ,9 i+8I%VerX;1XlVvEx?Gh;66:3[#\|IT+?7Qy-97/<BXWL[nmab
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 30 b3 aa 6a a8 96 31 63 2f 4c 47 93 f0 76 71 7e 9e fe 7d ec 78 fc b7 7f 9c 4b 56 fe 47 6b 8f 23 db aa ec e7 e8 3c df 47 b2 f1 bd 9e 23 dd f2 2f 78 ba 84 8b cf 7a 5e 6f b7 7c 77 d4 f1 3f 47 e7 74 3c a9 e7 fe af 2b f3 8f d0 5f 2f ee 7b 0f 9f d7 d3 69 d7 c2 6d e7 f9 5f d2 f9 9e 02 bd 3d 3f 1a f9 0f d7 7c be 5a d3 a7 c4 fb 67 c7 ee b7 5d 5b 4a de 99 3c 06 21 8b 68 82 56 70 68 84 16 b5 ea d5 09 bf 01 f5 5f 24 cf d2 f3 6c f2 7b de 0f 49 c0 6e af 9b ba bb af 8f dd bd 8f 1b ef bc 79 e8 3e af e6 3d 13 cf ef f9 73 e6 7e bb c3 fe 73 d8 da e6 eb 23 74 95 71 cf cb 3b b8 e9 1b 3f 08 d7 aa a9 3a 67 3d 9b 79 be d5 df 8f e8 f2 5e c7 93 ea ff 00 1f ee f2 1e df 27 6b e2 fa 81 d3 0e 23 e8 38 3e 92 f8 cf 63 c7 be 9b cb 61 d1 cf 6f cf d5 eb fe 2f 77 4c 76 ec 78 fa 58 6c 9f 22 Data Ascii: 0j1c/LGvq~}xKVGk#<G#/xz^o\|w?Gt<+_/{im_=?\|Zg][J<!hVph_$l{Iny>=s~s#tq;?:g=y^'k#8>cao/wLvxXl"
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 77 dd 9f cf 7f d4 5e 81 f3 7f 1f f2 97 ec 5f 94 fc bd fa d7 e7 f6 f9 7b 3f aa 7f 99 fe bd ec 0d f3 93 71 15 76 46 9c bc 0f a7 c1 cf f7 e3 cf f3 f5 30 0d cb 27 bd cc 62 be 3b ea f1 72 97 cf 0d 72 f1 ff 00 ab f9 8e a7 c8 f6 1b eb 93 4d ab 4e 4e eb fe 3e 9f 4b e1 d3 d0 f5 f3 1d 92 fd 01 b3 65 28 73 9e 8e 13 45 e6 cc 74 2c c9 a9 8d 59 35 ce ed 60 db 45 43 e3 e2 de ef 99 f6 3f e4 3f b7 7b 4f 2e 35 5e af 1f 73 cb ad a9 24 db 06 9a f2 f4 50 6f 83 fe 6f fe 8d f9 87 94 37 b0 7c bb 96 0d ef 19 79 84 73 9f 94 7d 5f ca 84 e9 d8 78 7f 45 61 87 1f 9b 7d 3f ce bc 1d ff 00 a5 bc 9e df 75 fa 07 e3 fe a7 e4 fb be 0d fa 0f e3 9e 2f f8 a7 f5 1f d2 9f 5d f9 7f 5b cb ee f6 1f 41 f1 f3 e9 79 03 c7 a6 8b b3 cd a1 eb c5 8b e1 c4 bf 9d e5 7c fe 97 86 79 7e d7 13 e7 7a ec 31 dd 8f Data Ascii: w^_{?qvF0'b;rrMNN>Ke(sEt,Y5`EC??{O.5^s$Poo7\|ys}_xEa}?u/][Ay\|y~z1
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 4e 9e d7 4f 93 fc 0c fa 45 a7 cb b4 4f 9a 83 76 9e 0f d4 76 7c 3e a7 a3 f9 5d be 6d f5 5f 23 c5 5d 76 5c 1e ed 1f a1 f3 fe f7 e3 7d 4f de 7e 77 91 ec d8 ec 1f 43 82 8d 3a 6a bc 6f 5b 77 f9 ec b7 6b ed 1b d3 d3 86 bf a7 8b 8f e5 eb f1 4f 73 e4 7f 3e 7c ef b0 e1 7d 5e 1e 43 d6 f1 fa 5f 37 b5 b6 a9 4d d9 cd 71 c7 a7 3d e9 f9 fe 91 f3 be ef b7 f8 be 93 92 48 18 45 83 65 5f ba 36 60 ce 56 cc 02 c8 1d 2f b2 7d 6c 7d df f4 4f c9 a3 d5 f3 fe 82 f9 9f a6 a5 f7 3e 61 9f 1f 4f 83 a8 f8 cb 41 e6 be 47 d2 bf f2 7d 6f 59 f8 af a4 26 99 36 d9 5b eb 36 64 61 a2 b2 6c 59 cb c4 fa 9e 6f 8d f6 05 d3 99 ae 1f a7 eb 7f 96 fd 03 eb 4f 0d 7d 5f 97 3b 0e 8c e9 f3 d2 c9 9e ab d2 f2 b8 2f 3f a3 b1 cf 6f 45 28 1e ee 67 80 f9 27 67 8f f9 2f 97 d4 71 1e bf 8d f6 17 e7 1f 61 c8 7d 07 Data Ascii: NOEOvv\|>]m_#]v\}O~wC:jo[wkOs>\|}^C_7Mq=HEe_6`V/}l}O>aOAG}oY&6[6dalYoO}_;/?oE(g'g/qa}
2024-09-27 16:52:22 UTC	8000	IN	Data Raw: 86 dd 27 3a fd 0f e2 7a de e2 6f 08 ec f2 7c b3 bb cc 9f a4 f2 7f 56 98 fe 73 79 9e af cf 1e 9f 89 e5 fd 9c 95 1a a3 67 5f a9 be 7b d2 32 4e 03 1b 54 77 93 e7 56 a7 4a f7 0d 08 6d 9c 1d 0e d0 68 22 d0 36 4c e9 a3 ab 7d 55 b3 06 6c 58 d3 6a 66 c3 df c7 67 e8 6f db fe 6e 0f b0 f8 bf 46 fc fb f4 0f 86 3e a7 c0 fa 3f e5 fe b3 d7 fd ef 98 f5 0f 9c fa 3e 5d 3a 3e 68 f9 5f 79 75 16 30 36 03 86 e0 02 99 e2 8d 3a 59 a6 53 1d 0c 58 96 bd 67 93 d9 5e bd 0c b0 a9 1e a6 26 a4 2b 2d 72 68 bc b3 4d db 4a 47 c2 89 f3 ac d3 3a c6 aa c6 75 bb b5 19 ca 99 92 18 f6 18 f4 78 97 5e 7c 47 7f 24 e5 b7 65 e4 fa 54 be 9f 31 3c fe ef a6 7f 0f fd 73 ad fd 53 f3 1f bb dc a0 d5 09 53 73 6a e7 a7 03 2a 79 c6 3e a7 73 c1 d7 e8 f8 2d cf 67 0f 97 f5 f3 7c 0e be 8f d8 3c 9c bf 78 7d 57 c5 Data Ascii: ':zo\|Vsyg_{2NTwVJmh"6L}UlXjfgonF>?>]:>h_yu06:YSXg^&+-rhMJG:ux^\|G$eT1<sSSsj*y>s-g\|<x}W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49799	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:28 UTC	378	OUT	GET /images/prices/consult2.jpg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:28 UTC	274	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041a-ab7874-5616f045cad80" Accept-Ranges: bytes Content-Length: 11237492 Content-Type: image/jpeg
2024-09-27 16:52:28 UTC	7918	IN	Data Raw: ff d8 ff e1 1f 99 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0a 00 0f 01 02 00 06 00 00 00 86 00 00 00 10 01 02 00 0e 00 00 00 8c 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 9a 00 00 00 1b 01 05 00 01 00 00 00 a2 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 1e 00 00 00 aa 00 00 00 32 01 02 00 14 00 00 00 c8 00 00 00 3b 01 02 00 07 00 00 00 dc 00 00 00 69 87 04 00 01 00 00 00 e4 00 00 00 3c 03 00 00 43 61 6e 6f 6e 00 43 61 6e 6f 6e 20 45 4f 53 20 36 30 44 00 00 9f 24 00 10 27 00 00 00 9f 24 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 4d 61 63 69 6e 74 6f 73 68 00 32 30 31 35 3a 30 31 3a 30 33 20 30 30 3a 30 34 3a 30 34 00 59 75 20 4c 61 6e 00 00 22 00 9a 82 05 00 01 00 00 00 82 02 00 00 9d Data Ascii: ExifII*(12;i<CanonCanon EOS 60D$'$'Adobe Photoshop CS5 Macintosh2015:01:03 00:04:04Yu Lan"
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: 16 b3 f7 c8 00 08 9f 9a 63 ab 00 8d a0 84 5c 78 f5 6b fa 5f 4b b7 3c b7 f9 bf e5 21 3f f3 be 51 bb 95 64 34 f2 6e 5a d8 ba 17 f9 12 b6 fa 1f d3 be 0b 44 ec 32 e3 b4 73 60 da 6c 3e d5 87 8f f4 9f cf 27 85 b3 d0 7e 9d d3 3c 33 fe a9 fc 42 19 fe 59 7d 3f 35 fc 8f f3 d0 ff 00 0b fe 8c 9d 20 32 cb c5 57 3c 5a 77 6e 69 68 8d 5b bd df bf 63 5c dd 59 b3 6b d6 76 59 02 fb 76 93 a3 cc 93 c1 d2 16 95 93 f6 b1 e3 ef e6 37 73 5f f3 7f c8 ff 00 d4 4b 2f 26 3d 6b 22 67 71 f1 85 04 37 e9 f4 d9 bb cc 7c 83 7d f4 e3 be 2f f9 fe a7 ff d9 ff ed 24 5c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 37 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 00 1c 02 50 00 06 59 75 20 4c 61 6e 1c 02 37 00 08 32 30 31 34 31 32 32 32 1c 02 3c 00 0b 31 32 34 35 32 31 Data Ascii: c\xk_K<!?Qd4nZD2s`l>'~<3BY}?5 2W<Zwnih[c\YkvYv7s_K/&=k"gq7\|}/$\Photoshop 3.08BIM7Z%GPYu Lan720141222<124521
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: b9 1d 35 c7 ad 62 3d a6 8b b1 9d 56 4b c8 69 7d 59 3b 3e cf f6 47 32 5c f7 55 7b 5a d7 e3 7e 8f d3 ba 9f fc 2e 9b 02 9d bd 2a ab 5a e1 55 4d 2e 6b 1b 6c ef 20 bd e6 af ed d8 df cc fa 69 6d 6e e0 48 13 11 3d c2 bd 84 2c 38 af 6b 27 57 16 90 20 72 dd 1c e3 b9 8e f6 bb f7 51 24 01 f6 7d 8c 78 e1 72 3b 9b 06 bc d0 83 76 3d 95 ba d1 c1 90 d3 a4 c7 fd 4f f6 95 aa f3 a9 73 a0 35 ed 25 bc 06 ee 88 9f 77 e8 b7 bb f3 bf 71 57 ea 25 d5 d3 8c 79 d1 c0 f7 3f e0 dd de 15 8e 9d 95 4d 58 ef 14 b4 df d4 ae 79 18 b8 55 ed 16 dc 2b 6b 9d 65 8d 2f 7b 3f 45 57 a7 6f d1 f7 e4 df fa 1a bf 48 9b 5c 51 ba b3 b6 9e 6c 92 c8 71 48 c6 26 c0 a3 ea f1 8a 46 5f 8e fb 01 65 8d 76 e6 9e 0e a4 cb 3b 3f 6b be 8b 55 3c af 4c e4 3c 68 ee 35 e7 50 02 ab 76 4d 19 19 2e 73 7d be a3 19 79 6c 70 Data Ascii: 5b=VKi}Y;>G2\U{Z~.*ZUM.kl imnH=,8k'W rQ$}xr;v=Os5%wqW%y?MXyU+ke/{?EWoH\QlqH&F_ev;?kU<L<h5PvM.s}ylp
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 63 6f 6e 76 65 72 74 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 66 72 6f 6d 20 69 6d 61 67 65 2f 74 69 66 66 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 64 65 72 69 76 65 64 22 20 73 74 45 76 74 3a 70 61 72 61 6d 65 74 65 72 73 3d 22 63 6f 6e 76 65 72 74 65 64 20 66 72 6f 6d 20 69 6d 61 67 65 2f 74 69 66 66 20 74 6f 20 69 6d 61 67 65 2f 6a 70 65 67 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 39 43 31 30 38 36 34 37 30 32 Data Ascii: hanged="/"/> <rdf:li stEvt:action="converted" stEvt:parameters="from image/tiff to image/jpeg"/> <rdf:li stEvt:action="derived" stEvt:parameters="converted from image/tiff to image/jpeg"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:39C10864702
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: 4b 79 1b 56 90 41 e3 eb 73 7f 6e 05 53 f1 74 85 9f f1 57 ac af fb 88 1e 40 09 2a 02 68 61 63 2f 09 72 2c 01 02 f7 1c 0e 7f 27 f3 a2 aa 3b 57 87 fa 8f db d6 c4 b1 81 9c 91 e5 5f cb fc 1d 44 94 89 42 44 4c 83 46 a6 0e ef ea f5 70 c1 50 72 6f c3 7e 6d fe 1e ee a2 9d 78 dc 92 3b 56 9d 44 9b c1 22 24 51 f9 24 bc 6e 81 a5 2c 18 ba 9d 36 1a b8 ff 00 7d fd 7d dd 41 5c 91 fb 3a 6d a7 97 d6 83 fd 5f 6f 51 a1 85 49 21 86 a0 15 f5 8d 64 69 26 51 75 70 bf ea 81 51 75 e7 f3 fe bb 84 01 e5 d5 96 e1 87 1c ff 00 2f f2 75 30 0d 12 a2 48 69 ec ea cb a9 55 41 00 1b 25 cd 87 3e ab ff 00 8f d3 fd 7a 05 2c 2a 07 4e fd 52 70 f4 fb 7a e8 03 e7 69 69 84 4b 16 89 a0 66 1e ab 12 40 ba 96 26 e5 79 b1 bf d0 ad fd ef 4b 01 46 e3 d5 5a e2 07 f8 bf 3e a1 c9 21 49 e7 36 0d fb 7c 34 88 b6 Data Ascii: KyVAsnStW@hac/r,';W_DBDLFpPro~mx;VD"$Q$n,6}}A\:m_oQI!di&QupQu/u0HiUA%>z,NRpziiKf@&yKFZ>!I6\|4
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: f2 7b 4d 25 8d 5a ac 6a 33 ff 00 17 fe af f2 74 fc 77 2b c4 7f ab 8e 3a 93 16 e0 68 ee f2 c9 e6 9e 4b 17 92 45 8e 57 f2 ff 00 c7 71 78 bd d5 ac a3 03 2d fe af db d2 85 bc 61 c3 8f 59 a6 ca 49 3e 88 7e a3 c1 24 9e a9 22 8e 38 fc 54 fc fd 7c 5e b9 7e 97 fe 9e dc fa 28 eb 50 7f d5 fe c7 4c cb 21 27 fd 5f 2e a2 52 64 aa ea 64 8a 66 12 46 89 0c da bc b0 ca 23 8e 43 cf 26 6b fd 3f e3 af fb df bb c9 64 00 a2 b7 fa bf d5 e5 d6 8b d0 54 f4 e5 52 67 92 25 67 62 c5 da d2 80 c2 23 e4 ff 00 8e 06 ff 00 a2 dc ff 00 c9 1f e3 ed 0c 96 fa 1f 3e 5d 2c 87 c5 5f f5 7d bd 36 d7 63 2a 19 3c b3 6b 65 94 cd 77 65 93 c6 63 f3 db f3 fe b9 e2 df d3 db aa ea ab fe af f5 7f a8 fa 74 b4 c2 ce 35 7f c5 74 9e ab 82 b2 20 da e3 20 46 4c 48 eb e2 79 3c 7f 52 22 07 fb 12 58 7f be f1 fb 56 Data Ascii: {M%Zj3tw+:hKEWqx-aYI>~$"8T\|^~(PL!'_.RddfF#C&k?dTRg%gb#>],_}6c*<kewect5t FLHy<R"XV
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: 7b f6 99 ec ca d7 4f 46 10 ee 32 50 6a 1f ea cf 4e 73 e3 b1 95 a1 6a 29 59 05 9c 48 0a c9 3a 55 47 fb b7 b5 c0 8f fa 5f d9 6c f1 1a e9 61 fe 6e 8c 56 44 93 2a dd 67 7a 5a 41 1f a1 aa 22 e1 2c 60 96 47 91 df e9 eb fd c4 ff 00 53 fe f3 fd 3d a7 f0 a3 5e 2b 53 f3 ff 00 51 e9 48 a6 9a ea 3f ea af 58 d2 9a 9d e7 65 d0 58 5e 35 90 b3 bc 8e ef fe b1 ff 00 6f ed f5 65 03 a6 e4 a8 38 34 e9 3f 97 a8 69 0f d9 c0 64 48 e2 f2 1d 02 47 f1 f3 c0 1f e7 3f c3 da 94 64 19 3d 14 5d 34 8d 80 71 ff 00 15 d3 24 14 d3 a4 be 94 95 ee 11 ae ce ce fe 4f cf fb 5d ff 00 e8 e6 ff 00 62 fc ce 80 d4 0e 91 c7 19 d7 4a f4 b4 a6 a1 91 91 3c 94 e5 16 41 a9 8d 40 47 d6 c6 d2 fe d7 ac fa 3d 96 4f 3a 79 0a 91 fe c7 47 b1 42 74 0a ff 00 ab 8f 4f 54 f8 cf ba 04 ac 29 0c 76 94 cb 03 79 2f 08 fa Data Ascii: {OF2PjNsj)YH:UG_lanVD*gzZA",`GS=^+SQH?XeX^5oe84?idHG?d=]4q$O]bJ<A@G=O:yGBtOT)vy/
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: ce ac ab ab 56 8b dd 43 7e 55 b9 3f e3 f8 1f f1 4f 7a 20 af 4d 9a 37 fa bf d5 e7 d4 a8 ae 87 f0 dc 30 23 9d 3f ab 8b 5c df df 8b 75 a0 3c ba 77 a7 25 6e 15 08 d3 c1 e0 91 6f eb 6b 9f f6 1e e8 5c 11 5e 9e 0a a4 d0 1e a6 b0 ba f3 c6 a0 6d 65 fc 5a dc 5f db 5e 28 ae 3a bb 46 3a 6d 68 e2 b9 12 b3 73 61 e9 8d 0d af f4 01 99 c7 e7 eb ed f5 90 79 74 99 a1 a9 a5 3a 91 15 35 38 b1 07 55 90 01 7d 28 43 03 73 6d 2e 47 fb ef a7 d7 dd 1d c5 09 3f e5 e9 44 70 3e 00 03 f6 f5 3e 34 0a 2c 16 d6 b0 3c f2 df 90 6c 09 f6 9f c4 8f d6 bd 3c 51 80 cf 51 26 76 00 fd 46 a0 3e a7 f3 fe df da 98 c8 6e 1d 26 92 9e 62 bd 35 d4 16 65 36 32 70 01 bf d1 38 20 f3 62 38 b9 fa 00 4f fa fc 0f 6a 93 8e 3a 4a ca 84 64 01 f9 75 0e 29 9d 41 8d 91 58 33 36 a3 e4 ba ad c5 ae 49 e0 11 fa 6c 5b fe Data Ascii: VC~U?Oz M70#?\u<w%nok\^meZ_^(:F:mhsayt:58U}(Csm.G?Dp>>4,<l<QQ&vF>n&b5e62p8 b8Oj:Jdu)AX36Il[
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: ee ab 13 b6 6b e9 d7 93 54 9c 17 a8 33 d7 4a 3f 75 43 30 1e 2d 48 ce 53 c7 1f fb 1f a2 7f bb 7f de 7d ba 62 73 da 5b d7 fd 5f e4 ea cf ab 47 1f f5 57 fd 47 ae fe fe 09 5a aa 20 5c ea 78 b9 6f 13 82 e2 a3 4f 04 7f 8d bd d5 60 20 03 51 fe a1 ff 00 17 d1 4e 75 11 ab 8d 3a 4c d6 d2 7a a6 d6 e8 0b 12 e1 7f c4 f1 37 83 c1 f4 fa 7f be fa 7b 39 85 a9 c0 7f ab 3d 15 de 05 73 fe af 97 51 28 c8 15 20 58 4a 92 34 6b a9 a4 f1 c7 0f fc 71 1c 7f bc 7f c6 bd ae d6 54 54 f9 7f 3e 98 8f 4a 8a 7f c5 74 bf c7 4e 95 1f b6 f1 aa 78 43 a1 f2 7e e0 92 48 08 bd ed fe b0 f6 49 71 68 ea d5 89 bf d5 fe ae 3d 08 ed ef 52 4c 96 a7 fa 8f 4f 22 9e 14 81 cc 93 53 22 1f 18 28 de b7 96 43 7b f1 c7 ba 05 75 1f aa df ea ff 00 3f 0e 9d 96 41 c7 57 49 4c b6 72 92 91 09 12 c4 59 64 70 88 8d 2f Data Ascii: kT3J?uC0-HS}bs[_GWGZ \xoO` QNu:Lz7{9=sQ( XJ4kqTT>JtNxC~HIqh=RLO"S"(C{u?AWILrYdp/
2024-09-27 16:52:28 UTC	8000	IN	Data Raw: 65 ad a4 a1 80 22 23 0e 47 8a 4f f7 df f5 b3 db c4 d4 57 fd 5f ea ff 00 57 a7 54 35 06 81 7f d5 fe af f5 71 ea 74 b8 d8 49 4d 6a e4 6a 8c 10 ab 22 3a 27 1f 88 bf da ff 00 1e d9 12 9a f1 ea fa 08 f2 ff 00 8a fc ba 8b 26 1e a2 12 92 52 bc 53 c6 c2 45 2a 1a a3 5a 27 04 fd 7f 5b fe af f7 d7 f7 ef 1a 3e 0e d4 fd 9d 69 a2 2d c1 7f d5 fe 7e a7 b6 3d bc 36 9c ca e8 e9 13 bc 6e ae ef 24 9f ef bf c7 db c9 3c 34 ed e3 d5 4c 6c 38 e7 fe 2b a6 f6 c6 bc 8b 24 86 02 ca ac 14 6b fd 4b fd 4d cf fa ff 00 8f 6d f8 c9 aa 95 eb 6f 1b b2 f0 c7 5d 2c 10 b4 6b e8 29 2c 2b 29 8a e1 0e 94 b7 d2 c4 7f c4 7b 7c 4c 5b e7 5e 8b 24 81 94 f1 a7 59 7e db c9 23 09 34 5f 44 a1 7c 61 07 8f 9b 0f 2f ba 3c 9a 45 47 4d 3e b0 38 f5 c2 4a 22 59 9c c7 72 17 42 b7 a1 12 64 88 dc dc 0f f5 c7 fb e4 Data Ascii: e"#GOW_WT5qtIMjj":'&RSE*Z'[>i-~=6n$<4Ll8+$kKMmo],k),+){\|L[^$Y~#4_D\|a/<EGM>8J"YrBd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49800	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:30 UTC	669	OUT	GET /patientCenter.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:30 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 30 Dec 2017 05:16:36 GMT ETag: "6612f6-17f9-56187da63b500" Accept-Ranges: bytes Content-Length: 6137 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:52:30 UTC	6137	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 74 69 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Pati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49801	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:30 UTC	594	OUT	GET /css/patientCenter.css HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eternalspringacupuncture.com/patientCenter.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:30 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 19:52:27 GMT ETag: "680405-21e-5617ff8d4f4c0" Accept-Ranges: bytes Content-Length: 542 Vary: Accept-Encoding Content-Type: text/css
2024-09-27 16:52:30 UTC	542	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 20 2d 20 31 20 43 6f 6c 20 50 6f 72 74 66 6f 6c 69 6f 20 28 68 74 74 70 73 3a 2f 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 74 65 6d 70 6c 61 74 65 2d 6f 76 65 72 76 69 65 77 73 2f 31 2d 63 6f 6c 2d 70 6f 72 74 66 6f 6c 69 6f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 37 20 53 74 61 72 74 20 42 6f 6f 74 73 74 72 61 70 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 42 6c 61 63 6b 72 6f 63 6b 44 69 67 69 74 61 6c 2f 73 74 61 72 74 62 6f 6f 74 73 74 72 61 70 2d 31 2d 63 6f 6c 2d 70 6f 72 74 66 6f 6c 69 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a Data Ascii: /! Start Bootstrap - 1 Col Portfolio (https://startbootstrap.com/template-overviews/1-col-portfolio) * Copyright 2013-2017 Start Bootstrap * Licensed under MIT (https://github.com/BlackrockDigital/startbootstrap-1-col-portfolio/blob/master/LICENSE)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:31 UTC	648	OUT	GET /images/services/cover.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/css/patientCenter.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:32 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041f-7e226-5616f045cad80" Accept-Ranges: bytes Content-Length: 516646 Content-Type: image/jpeg
2024-09-27 16:52:32 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 98 a0 03 00 04 00 00 00 01 00 00 03 c9 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c2 00 11 08 03 c9 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIFHHExifMM*JR(iZHH8Photoshop 3.08BIM8BIM%B~"
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 8c a9 44 d4 ca 75 2e 22 49 9d 11 09 9d 10 9d a2 a6 22 66 54 27 0a 63 45 2a 34 91 b4 68 ed b4 15 11 81 9d 18 ac c6 d1 9d 13 08 98 d5 b4 69 b6 d8 51 b6 14 6d a1 a3 4c 62 26 2a 62 62 a7 26 6b 44 c5 6d a2 59 94 e8 ce d1 09 d1 13 4e 88 a5 29 31 07 89 9c d6 db 47 4e d2 ed b5 6d a6 a2 74 54 ed ab 4c 6a d3 b3 5b 6c 2d b6 ad 31 8d b6 d5 a7 45 4e d8 5b 6c 6d a6 21 31 31 19 d1 35 b6 d0 db 60 76 da b4 4e 36 db 56 db 54 69 8a 9d 12 06 db 13 b6 d5 b6 d5 b6 d5 b6 d5 a2 70 a2 62 6b 6d 88 db 6a d1 a4 1d b4 1a 76 d5 a2 62 a7 44 d6 da 21 a7 68 c4 c6 a9 db 56 d1 35 b4 6a 9d a2 13 1b 47 6d 35 a3 6a db 6a da 60 53 1b 56 db 1b 6d 85 b6 c6 da 26 b6 8d 53 1b 2d b6 cd 6d b2 d3 1b 56 da 5a 4c ec b6 da 2a 76 d5 b6 d5 a3 6a db 6a db 6a db 6a db 6a d3 1a a6 36 ad b6 a8 98 d3 4b 57 35 Data Ascii: Du."I"fT'cE4hiQmLb&bb&kDmYN)1GNmtTLj[l-1EN[lm!115`vN6VTipbkmjvbD!hV5jGm5jj`SVm&S-mVZL*vjjjjj6KW5
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 88 92 08 84 8e 9c 61 4d 2e 46 aa 81 ce 80 92 a1 8b 32 7a cc 83 bd 16 56 39 9a 39 31 25 0b 25 65 01 0c e2 45 8c 74 a1 34 44 22 54 a9 4d d4 62 e0 2c 83 e1 aa 2b d1 11 22 51 10 24 8e 69 79 33 44 c3 9a 54 22 29 70 34 d2 d1 b4 10 9c 81 2f 06 00 52 86 a8 91 03 4c 1c 24 4a 21 49 44 82 bc 28 a3 c8 b1 2b 50 60 85 a1 30 a1 07 6a 4a 24 21 10 26 1c d1 05 91 4b 58 15 44 50 f4 0e 66 e4 24 a3 44 c6 34 6a 4a 52 30 1d 4b 37 06 32 62 0c 45 27 46 14 94 d1 30 03 45 4b 56 cb 76 0d ce 86 d2 ee f7 86 e8 36 37 b2 34 74 32 4a 25 2c e1 6d c8 e0 93 12 5a 15 1a 13 93 10 56 19 23 a2 62 2c 80 f6 9b 15 0f 2d 6d 4d ce 9d c9 98 30 d9 ac 79 b7 be 6c 99 fa 4f 5d e7 5e 9d ab cc 57 d8 6a da 25 11 43 2b 06 69 33 a8 b6 a5 c1 5c ba a7 7e b0 98 11 8a 2b b0 31 b2 58 bd 05 3b bd 59 89 81 0a 33 18 Data Ascii: aM.F2zV991%%eEt4D"TMb,+"Q$iy3DT")p4/RL$J!ID(+P`0jJ$!&KXDPf$D4jJR0K72bE'F0EKVv674t2J%,mZV#b,-mM0ylO]^Wj%C+i3\~+1X;Y3
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 60 b5 00 20 77 d4 76 6c 68 88 bf 65 50 e1 de 2e a9 ec e2 9e e3 9e 5e 18 f4 35 95 4f d7 20 57 1f ac 7d 68 6a fa 6a d8 d4 9e f5 95 bf 0b df f9 cf 7d a4 e4 f5 49 c7 06 66 b0 6b 66 cd a2 84 fa 0d f3 7a d2 8f 96 97 54 fd d3 54 e6 96 ef aa ba 3c 8b 89 d0 0b cb 2a 8b 0c cb b7 14 f2 ad 64 e2 bd ca ef 9d 68 15 81 6b 16 81 db 07 16 35 4c 6b 16 4c e2 21 6c d4 57 39 78 44 2c 8c d1 4c 1c 0c 73 0f 14 7f 7a c7 b3 1b c7 3c eb 04 6f 6d b0 66 e3 8b b0 ca 1c 07 77 2c 8e a4 ed 64 16 49 c3 66 c1 72 c7 68 ae e1 bc d3 9c 30 08 f5 ee 42 c2 b3 3a 1e 80 6f 58 be 05 6d dc 37 45 66 53 8d c2 1c 01 50 2b ca c7 c1 92 a4 20 c7 3b 35 a9 53 63 0a 50 8d c0 18 bf 3b 55 66 ee 0e c5 d0 57 4a 66 a8 1d 28 9a 72 e9 a2 83 15 b8 50 46 aa b0 aa d2 54 80 ce ad c0 f2 be 96 d0 82 65 1b 27 c8 75 a2 31 Data Ascii: ` wvlheP.^5O W}hjj}IfkfzTT<*dhk5LkL!lW9xD,Lsz<omfw,dIfrh0B:oXm7EfSP+ ;5ScP;UfWJf(rPFTe'u1
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: e4 f1 f3 a5 42 ba 96 51 0a 8a 0a cc 8a 30 09 93 cf 8e 35 e0 d2 4a 17 0a 30 47 06 6e 0a 84 f9 25 9e 95 ae 65 f2 3a b9 be f3 ca 5d 94 f9 3f 3a b5 af 04 c9 25 24 4a e9 11 53 40 ab ad 5c f2 d1 ac 17 14 a5 68 92 ad 5a 3e 20 ab 17 77 2f 35 cb 31 90 d7 08 a1 c6 92 51 29 b2 25 16 a7 22 d5 1a 4a 44 42 70 af 6a 19 79 6d 13 73 5d bc b8 30 6a ea eb a8 e1 56 15 a9 2c 9e c8 0c 17 4e fe 54 ed c5 f9 55 d6 ac 9c 5e 5d 81 ab e0 38 ba d5 87 57 5a be 2e b4 75 af 6f 3c 9d 75 26 8f 27 e5 e5 c4 97 c3 b0 3d ab 47 c5 82 c3 25 f9 8d 5d 75 af 6f 22 ea cb af 60 fc a9 56 7e e7 97 1e d5 d6 bd ea ea cf dc ab ab 2f c9 9f f7 cb e7 fe fa 55 a1 a3 a7 f3 c9 91 2b 77 37 5c 85 1e f7 54 52 4a 24 6b 99 2b b7 93 95 67 e3 dd cf 19 2d 60 81 33 2c 48 8b 69 ec 69 de e6 61 cf e6 24 4b 14 e2 57 5f b8 Data Ascii: BQ05J0Gn%e:]?:%$JS@\hZ> w/51Q)%"JDBpjyms]0jV,NTU^]8WZ.uo<u&'=G%]uo"`V~/U+w7\TRJ$k+g-`3,Hiia$KW_
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 48 24 47 07 ee 17 0d 58 aa 42 4d 7e e0 d0 2f 8d cc 89 8a da 5b 58 6e ec ef 10 06 e3 16 fd cb 81 0a 12 c6 ae 15 e9 2a a8 5e 85 4a 09 0b 57 46 a0 a6 4d 3d a7 cc c1 3e f4 94 b1 28 51 54 a6 99 f4 20 28 35 8d 26 93 dd 4e e4 a2 a8 ae 36 e0 b9 0e 69 37 73 89 2e 3d ca e6 38 f6 fb 6c 55 14 68 41 4c c5 28 f7 83 8e 61 69 2d 12 15 25 22 52 c4 72 15 0b 63 94 96 fc b5 d9 51 31 05 55 95 8c 94 0d 24 93 16 24 c1 c0 a8 ad 77 5b 09 e2 9e 09 40 4a 2d e3 e7 84 9a 26 3f 64 70 15 0e ac 82 e9 8b 4a 6b d8 16 19 64 e9 c1 93 47 97 52 97 a4 8b 21 e5 52 10 79 99 f2 45 09 50 56 84 b0 aa ba d5 83 5e c9 ed 56 5a 99 2c b0 f8 f6 ae 8f 8b 4b e2 7b 03 40 ea ea fc eb 57 e7 e6 55 a5 68 4b 05 9e 2a 75 ec 35 67 4e c5 58 b0 7b 55 a4 f6 25 d5 82 ea f2 d4 97 f9 b2 79 ea 15 93 52 a8 f2 6a 35 79 8e Data Ascii: H$GXBM~/[Xn^JWFM=>(QT (5&N6i7s.=8lUhAL(ai-%"RrcQ1U$$w[@J-&?dpJkdGR!RyEPV^VZ,K{@WUhKu5gNX{U%yRj5y
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 35 1e 62 89 2d 2b 79 e4 eb ad 6a ea eb a3 cc 87 93 cf 44 87 e6 0b ab 25 95 32 a6 55 8b 2a e9 4e ae 94 19 68 15 90 f3 52 b5 1c 73 2d 6a c8 ac eb 21 a3 3c 4c b4 32 2a a0 90 92 8a b5 97 e6 35 29 6b 3a e6 ca c0 39 3a d5 e5 52 4b 2a 7a ba 74 d6 81 4b 08 71 2c 4a 15 d4 e9 a0 65 0d 45 ea 19 d5 a3 da ab 5b ad 5a d7 41 96 45 4a 0c 1f a4 27 26 84 2b 2f 78 5c 6a ba 9f f8 b2 66 c5 26 4a b5 c8 c2 a8 32 a3 4a 8a 90 a9 15 94 a6 8d 4b a4 92 a7 22 25 56 1b 6c ab 8d cf 95 ba 92 64 b4 5f 36 6b a9 d2 04 10 9d 0a 27 49 09 bd a3 4d ca 54 ea e4 46 41 72 72 0d de e2 a5 27 75 bf b9 8a 09 f7 b8 e7 d8 7c 53 bc 7e 8d 5f d5 9e eb 69 b3 5a 23 73 8a f6 6d c2 2b f4 6f 3e 21 ba b7 b3 85 1b b2 63 b2 df ac 6d ee 51 b7 d6 e6 cf 6d dc 7f 46 6e 7b a7 bb 5e dd 58 ee 97 7b 53 bd dc e2 bb f1 ad Data Ascii: 5b-+yjD%2UNhRs-j!<L25)k:9:RK*ztKq,JeE[ZAEJ'&+/x\jf&J2JK"%Vld_6k'IMTFArr'u\|S~_iZ#sm+o>!cmQmFn{^X{S
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: c6 49 8e ef c4 e8 fd 3d bd 4a 76 4b 1d e3 c6 17 b6 db b4 b6 90 5c 29 13 67 75 25 85 8c b1 94 1b e8 b7 3d b6 83 70 db 67 e7 af c3 fe 14 36 8b 41 b7 da 6d 92 bc c1 3a 65 a6 ad 22 af 80 57 02 68 c3 ba b0 17 57 1e 20 be fd 2f e2 2d e6 e5 37 f6 52 a2 6b fd cb 61 82 c6 c2 4f 04 6e 0b db 4d b7 8a 8e e8 b5 db 8b a9 ad b6 28 2d a1 b5 d8 2d 13 79 bc 5e 23 c2 f6 bb 87 8e 93 71 b8 6e 97 b7 30 ee 1e 16 f1 62 93 31 dd e2 ba 86 4d c6 0b 78 3c 51 bf cb 0d ba bc 53 09 4e f1 b6 dd 49 76 b2 b8 21 5c e5 03 92 a9 84 71 74 db cb cb 9e ee 55 67 1c 69 53 5d c2 39 57 30 2e c2 74 04 a6 61 ca 44 f6 32 03 3d bc 91 4a d1 64 76 d8 2d 2f 3f 47 c6 bb a8 97 b7 4d e2 09 2f 36 c4 a5 11 3d ca 1b 79 93 3e de ab 8b 8b 3d c2 7d 8e df c5 3b 97 34 ed f7 89 b1 b5 b3 16 f6 42 d5 6a dc 37 19 ac 6e Data Ascii: I=JvK\)gu%=pg6Am:e"WhW /-7RkaOnM(--y^#qn0b1Mx<QSNIv!\qtUgiS]9W0.taD2=Jdv-/?GM/6=y>=};4Bj7n
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: ed 96 5e 21 5c c9 b0 b9 96 c2 f2 34 88 e1 4a b1 27 a1 9d 16 64 c9 31 f0 2b 29 2a 57 31 f3 02 5c b2 66 ad 43 4d 49 42 05 45 03 93 a4 2e 4a 9c a8 d6 4a ca ed cb e4 f2 90 29 58 56 2d d8 ba c2 13 d6 79 fc b4 c1 32 80 54 c2 a5 09 c2 03 45 03 a4 a1 a8 92 d1 50 91 2a 9d 54 a0 a8 4a 80 01 ac 29 21 1e c8 29 cb aa a7 57 5a 34 91 8e a9 4e 25 2d 2a d2 59 68 ea 58 59 0e 4d 59 d1 5c c3 1a e2 94 15 cd 18 98 4d 69 cc 5c 96 c5 42 aa 4b 44 a5 0f 31 20 5c 79 ad 71 49 1c 13 15 14 cd 22 8a 57 77 93 54 c5 4a cc a8 4e 95 72 8e a9 44 f1 73 55 72 bb 99 f6 b4 c4 a0 99 22 b7 1e 18 b9 e4 dc 6f 13 5d f3 ad 44 9b a5 fc be f2 a8 e6 dc 71 9d 7b d2 a1 b6 86 e2 19 91 11 42 9c c9 52 92 85 29 17 31 d9 98 67 59 9a fd da dc 88 5d dc 0b 91 57 fb 7c 76 ea be 91 5b 70 54 8a 9d 57 36 b3 40 11 76 Data Ascii: ^!\4J'd1+)W1\fCMIBE.JJ)XV-y2TEPTJ)!)WZ4N%-*YhXYMY\Mi\BKD1 \yqI"WwTJNrDsUr"o]Dq{BR)1gY]W\|v[pTW6@v
2024-09-27 16:52:32 UTC	8000	IN	Data Raw: 2d a8 92 eb 8b 35 7b b5 cc 28 b5 9f 6a 51 37 37 87 6d 99 1e 2d 82 4b c8 8a f3 9b 70 b6 f0 fe db 3e f2 6f d1 b3 de 18 f6 85 ac e7 9b 84 b5 ab 26 b5 14 98 e5 21 5c e5 07 ee af 93 90 5a 0c 6d 44 d5 09 c8 26 a9 4c a2 aa 50 e7 a5 64 22 3f c9 35 54 b8 ad ea eb 8b 8e 3c cc 61 31 c7 11 e9 58 ea 4f 5a 94 7a 79 a5 4a 40 75 08 8e 49 28 a9 25 0a 54 89 0e 68 ea 79 69 42 a4 72 db 20 38 91 ac 50 8e 59 46 24 96 aa 05 cd 31 ce 69 97 23 96 22 b5 4f 31 29 80 f3 9d c5 c0 7e c8 54 8a 49 b7 42 a1 68 96 34 c8 a9 06 50 30 57 1c 97 37 7a 05 2e e9 ad 72 42 b9 6f 14 99 67 96 2b 73 32 e4 e5 47 cc 8e 2b 5b 7a a6 1b 9f d1 d7 2a b8 54 f6 d2 c0 2e 66 92 db f8 aa 2f 15 ca 3c c5 8d f1 30 09 b6 cd c6 28 dd cc f4 ba 96 f2 43 2d b5 f0 db 85 cc f6 e1 72 1c e5 ba 42 e2 48 28 55 b4 76 a8 42 e4 Data Ascii: -5{(jQ77m-Kp>o&!\ZmD&LPd"?5T<a1XOZzyJ@uI(%ThyiBr 8PYF$1i#"O1)~TIBh4P0W7z.rBog+s2G+[z*T.f/<0(C-rBH(UvB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49805	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:33 UTC	378	OUT	GET /images/services/cover.jpeg HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:33 UTC	271	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:33 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 28 Dec 2017 23:38:46 GMT ETag: "68041f-7e226-5616f045cad80" Accept-Ranges: bytes Content-Length: 516646 Content-Type: image/jpeg
2024-09-27 16:52:33 UTC	7921	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 8c 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 98 a0 03 00 04 00 00 00 01 00 00 03 c9 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c2 00 11 08 03 c9 08 98 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 Data Ascii: JFIFHHExifMM*JR(iZHH8Photoshop 3.08BIM8BIM%B~"
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 8c a9 44 d4 ca 75 2e 22 49 9d 11 09 9d 10 9d a2 a6 22 66 54 27 0a 63 45 2a 34 91 b4 68 ed b4 15 11 81 9d 18 ac c6 d1 9d 13 08 98 d5 b4 69 b6 d8 51 b6 14 6d a1 a3 4c 62 26 2a 62 62 a7 26 6b 44 c5 6d a2 59 94 e8 ce d1 09 d1 13 4e 88 a5 29 31 07 89 9c d6 db 47 4e d2 ed b5 6d a6 a2 74 54 ed ab 4c 6a d3 b3 5b 6c 2d b6 ad 31 8d b6 d5 a7 45 4e d8 5b 6c 6d a6 21 31 31 19 d1 35 b6 d0 db 60 76 da b4 4e 36 db 56 db 54 69 8a 9d 12 06 db 13 b6 d5 b6 d5 b6 d5 b6 d5 a2 70 a2 62 6b 6d 88 db 6a d1 a4 1d b4 1a 76 d5 a2 62 a7 44 d6 da 21 a7 68 c4 c6 a9 db 56 d1 35 b4 6a 9d a2 13 1b 47 6d 35 a3 6a db 6a da 60 53 1b 56 db 1b 6d 85 b6 c6 da 26 b6 8d 53 1b 2d b6 cd 6d b2 d3 1b 56 da 5a 4c ec b6 da 2a 76 d5 b6 d5 a3 6a db 6a db 6a db 6a db 6a d3 1a a6 36 ad b6 a8 98 d3 4b 57 35 Data Ascii: Du."I"fT'cE4hiQmLb&bb&kDmYN)1GNmtTLj[l-1EN[lm!115`vN6VTipbkmjvbD!hV5jGm5jj`SVm&S-mVZL*vjjjjj6KW5
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 88 92 08 84 8e 9c 61 4d 2e 46 aa 81 ce 80 92 a1 8b 32 7a cc 83 bd 16 56 39 9a 39 31 25 0b 25 65 01 0c e2 45 8c 74 a1 34 44 22 54 a9 4d d4 62 e0 2c 83 e1 aa 2b d1 11 22 51 10 24 8e 69 79 33 44 c3 9a 54 22 29 70 34 d2 d1 b4 10 9c 81 2f 06 00 52 86 a8 91 03 4c 1c 24 4a 21 49 44 82 bc 28 a3 c8 b1 2b 50 60 85 a1 30 a1 07 6a 4a 24 21 10 26 1c d1 05 91 4b 58 15 44 50 f4 0e 66 e4 24 a3 44 c6 34 6a 4a 52 30 1d 4b 37 06 32 62 0c 45 27 46 14 94 d1 30 03 45 4b 56 cb 76 0d ce 86 d2 ee f7 86 e8 36 37 b2 34 74 32 4a 25 2c e1 6d c8 e0 93 12 5a 15 1a 13 93 10 56 19 23 a2 62 2c 80 f6 9b 15 0f 2d 6d 4d ce 9d c9 98 30 d9 ac 79 b7 be 6c 99 fa 4f 5d e7 5e 9d ab cc 57 d8 6a da 25 11 43 2b 06 69 33 a8 b6 a5 c1 5c ba a7 7e b0 98 11 8a 2b b0 31 b2 58 bd 05 3b bd 59 89 81 0a 33 18 Data Ascii: aM.F2zV991%%eEt4D"TMb,+"Q$iy3DT")p4/RL$J!ID(+P`0jJ$!&KXDPf$D4jJR0K72bE'F0EKVv674t2J%,mZV#b,-mM0ylO]^Wj%C+i3\~+1X;Y3
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 60 b5 00 20 77 d4 76 6c 68 88 bf 65 50 e1 de 2e a9 ec e2 9e e3 9e 5e 18 f4 35 95 4f d7 20 57 1f ac 7d 68 6a fa 6a d8 d4 9e f5 95 bf 0b df f9 cf 7d a4 e4 f5 49 c7 06 66 b0 6b 66 cd a2 84 fa 0d f3 7a d2 8f 96 97 54 fd d3 54 e6 96 ef aa ba 3c 8b 89 d0 0b cb 2a 8b 0c cb b7 14 f2 ad 64 e2 bd ca ef 9d 68 15 81 6b 16 81 db 07 16 35 4c 6b 16 4c e2 21 6c d4 57 39 78 44 2c 8c d1 4c 1c 0c 73 0f 14 7f 7a c7 b3 1b c7 3c eb 04 6f 6d b0 66 e3 8b b0 ca 1c 07 77 2c 8e a4 ed 64 16 49 c3 66 c1 72 c7 68 ae e1 bc d3 9c 30 08 f5 ee 42 c2 b3 3a 1e 80 6f 58 be 05 6d dc 37 45 66 53 8d c2 1c 01 50 2b ca c7 c1 92 a4 20 c7 3b 35 a9 53 63 0a 50 8d c0 18 bf 3b 55 66 ee 0e c5 d0 57 4a 66 a8 1d 28 9a 72 e9 a2 83 15 b8 50 46 aa b0 aa d2 54 80 ce ad c0 f2 be 96 d0 82 65 1b 27 c8 75 a2 31 Data Ascii: ` wvlheP.^5O W}hjj}IfkfzTT<*dhk5LkL!lW9xD,Lsz<omfw,dIfrh0B:oXm7EfSP+ ;5ScP;UfWJf(rPFTe'u1
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: e4 f1 f3 a5 42 ba 96 51 0a 8a 0a cc 8a 30 09 93 cf 8e 35 e0 d2 4a 17 0a 30 47 06 6e 0a 84 f9 25 9e 95 ae 65 f2 3a b9 be f3 ca 5d 94 f9 3f 3a b5 af 04 c9 25 24 4a e9 11 53 40 ab ad 5c f2 d1 ac 17 14 a5 68 92 ad 5a 3e 20 ab 17 77 2f 35 cb 31 90 d7 08 a1 c6 92 51 29 b2 25 16 a7 22 d5 1a 4a 44 42 70 af 6a 19 79 6d 13 73 5d bc b8 30 6a ea eb a8 e1 56 15 a9 2c 9e c8 0c 17 4e fe 54 ed c5 f9 55 d6 ac 9c 5e 5d 81 ab e0 38 ba d5 87 57 5a be 2e b4 75 af 6f 3c 9d 75 26 8f 27 e5 e5 c4 97 c3 b0 3d ab 47 c5 82 c3 25 f9 8d 5d 75 af 6f 22 ea cb af 60 fc a9 56 7e e7 97 1e d5 d6 bd ea ea cf dc ab ab 2f c9 9f f7 cb e7 fe fa 55 a1 a3 a7 f3 c9 91 2b 77 37 5c 85 1e f7 54 52 4a 24 6b 99 2b b7 93 95 67 e3 dd cf 19 2d 60 81 33 2c 48 8b 69 ec 69 de e6 61 cf e6 24 4b 14 e2 57 5f b8 Data Ascii: BQ05J0Gn%e:]?:%$JS@\hZ> w/51Q)%"JDBpjyms]0jV,NTU^]8WZ.uo<u&'=G%]uo"`V~/U+w7\TRJ$k+g-`3,Hiia$KW_
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 48 24 47 07 ee 17 0d 58 aa 42 4d 7e e0 d0 2f 8d cc 89 8a da 5b 58 6e ec ef 10 06 e3 16 fd cb 81 0a 12 c6 ae 15 e9 2a a8 5e 85 4a 09 0b 57 46 a0 a6 4d 3d a7 cc c1 3e f4 94 b1 28 51 54 a6 99 f4 20 28 35 8d 26 93 dd 4e e4 a2 a8 ae 36 e0 b9 0e 69 37 73 89 2e 3d ca e6 38 f6 fb 6c 55 14 68 41 4c c5 28 f7 83 8e 61 69 2d 12 15 25 22 52 c4 72 15 0b 63 94 96 fc b5 d9 51 31 05 55 95 8c 94 0d 24 93 16 24 c1 c0 a8 ad 77 5b 09 e2 9e 09 40 4a 2d e3 e7 84 9a 26 3f 64 70 15 0e ac 82 e9 8b 4a 6b d8 16 19 64 e9 c1 93 47 97 52 97 a4 8b 21 e5 52 10 79 99 f2 45 09 50 56 84 b0 aa ba d5 83 5e c9 ed 56 5a 99 2c b0 f8 f6 ae 8f 8b 4b e2 7b 03 40 ea ea fc eb 57 e7 e6 55 a5 68 4b 05 9e 2a 75 ec 35 67 4e c5 58 b0 7b 55 a4 f6 25 d5 82 ea f2 d4 97 f9 b2 79 ea 15 93 52 a8 f2 6a 35 79 8e Data Ascii: H$GXBM~/[Xn^JWFM=>(QT (5&N6i7s.=8lUhAL(ai-%"RrcQ1U$$w[@J-&?dpJkdGR!RyEPV^VZ,K{@WUhKu5gNX{U%yRj5y
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 35 1e 62 89 2d 2b 79 e4 eb ad 6a ea eb a3 cc 87 93 cf 44 87 e6 0b ab 25 95 32 a6 55 8b 2a e9 4e ae 94 19 68 15 90 f3 52 b5 1c 73 2d 6a c8 ac eb 21 a3 3c 4c b4 32 2a a0 90 92 8a b5 97 e6 35 29 6b 3a e6 ca c0 39 3a d5 e5 52 4b 2a 7a ba 74 d6 81 4b 08 71 2c 4a 15 d4 e9 a0 65 0d 45 ea 19 d5 a3 da ab 5b ad 5a d7 41 96 45 4a 0c 1f a4 27 26 84 2b 2f 78 5c 6a ba 9f f8 b2 66 c5 26 4a b5 c8 c2 a8 32 a3 4a 8a 90 a9 15 94 a6 8d 4b a4 92 a7 22 25 56 1b 6c ab 8d cf 95 ba 92 64 b4 5f 36 6b a9 d2 04 10 9d 0a 27 49 09 bd a3 4d ca 54 ea e4 46 41 72 72 0d de e2 a5 27 75 bf b9 8a 09 f7 b8 e7 d8 7c 53 bc 7e 8d 5f d5 9e eb 69 b3 5a 23 73 8a f6 6d c2 2b f4 6f 3e 21 ba b7 b3 85 1b b2 63 b2 df ac 6d ee 51 b7 d6 e6 cf 6d dc 7f 46 6e 7b a7 bb 5e dd 58 ee 97 7b 53 bd dc e2 bb f1 ad Data Ascii: 5b-+yjD%2UNhRs-j!<L25)k:9:RK*ztKq,JeE[ZAEJ'&+/x\jf&J2JK"%Vld_6k'IMTFArr'u\|S~_iZ#sm+o>!cmQmFn{^X{S
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: c6 49 8e ef c4 e8 fd 3d bd 4a 76 4b 1d e3 c6 17 b6 db b4 b6 90 5c 29 13 67 75 25 85 8c b1 94 1b e8 b7 3d b6 83 70 db 67 e7 af c3 fe 14 36 8b 41 b7 da 6d 92 bc c1 3a 65 a6 ad 22 af 80 57 02 68 c3 ba b0 17 57 1e 20 be fd 2f e2 2d e6 e5 37 f6 52 a2 6b fd cb 61 82 c6 c2 4f 04 6e 0b db 4d b7 8a 8e e8 b5 db 8b a9 ad b6 28 2d a1 b5 d8 2d 13 79 bc 5e 23 c2 f6 bb 87 8e 93 71 b8 6e 97 b7 30 ee 1e 16 f1 62 93 31 dd e2 ba 86 4d c6 0b 78 3c 51 bf cb 0d ba bc 53 09 4e f1 b6 dd 49 76 b2 b8 21 5c e5 03 92 a9 84 71 74 db cb cb 9e ee 55 67 1c 69 53 5d c2 39 57 30 2e c2 74 04 a6 61 ca 44 f6 32 03 3d bc 91 4a d1 64 76 d8 2d 2f 3f 47 c6 bb a8 97 b7 4d e2 09 2f 36 c4 a5 11 3d ca 1b 79 93 3e de ab 8b 8b 3d c2 7d 8e df c5 3b 97 34 ed f7 89 b1 b5 b3 16 f6 42 d5 6a dc 37 19 ac 6e Data Ascii: I=JvK\)gu%=pg6Am:e"WhW /-7RkaOnM(--y^#qn0b1Mx<QSNIv!\qtUgiS]9W0.taD2=Jdv-/?GM/6=y>=};4Bj7n
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: ed 96 5e 21 5c c9 b0 b9 96 c2 f2 34 88 e1 4a b1 27 a1 9d 16 64 c9 31 f0 2b 29 2a 57 31 f3 02 5c b2 66 ad 43 4d 49 42 05 45 03 93 a4 2e 4a 9c a8 d6 4a ca ed cb e4 f2 90 29 58 56 2d d8 ba c2 13 d6 79 fc b4 c1 32 80 54 c2 a5 09 c2 03 45 03 a4 a1 a8 92 d1 50 91 2a 9d 54 a0 a8 4a 80 01 ac 29 21 1e c8 29 cb aa a7 57 5a 34 91 8e a9 4e 25 2d 2a d2 59 68 ea 58 59 0e 4d 59 d1 5c c3 1a e2 94 15 cd 18 98 4d 69 cc 5c 96 c5 42 aa 4b 44 a5 0f 31 20 5c 79 ad 71 49 1c 13 15 14 cd 22 8a 57 77 93 54 c5 4a cc a8 4e 95 72 8e a9 44 f1 73 55 72 bb 99 f6 b4 c4 a0 99 22 b7 1e 18 b9 e4 dc 6f 13 5d f3 ad 44 9b a5 fc be f2 a8 e6 dc 71 9d 7b d2 a1 b6 86 e2 19 91 11 42 9c c9 52 92 85 29 17 31 d9 98 67 59 9a fd da dc 88 5d dc 0b 91 57 fb 7c 76 ea be 91 5b 70 54 8a 9d 57 36 b3 40 11 76 Data Ascii: ^!\4J'd1+)W1\fCMIBE.JJ)XV-y2TEPTJ)!)WZ4N%-*YhXYMY\Mi\BKD1 \yqI"WwTJNrDsUr"o]Dq{BR)1gY]W\|v[pTW6@v
2024-09-27 16:52:33 UTC	8000	IN	Data Raw: 2d a8 92 eb 8b 35 7b b5 cc 28 b5 9f 6a 51 37 37 87 6d 99 1e 2d 82 4b c8 8a f3 9b 70 b6 f0 fe db 3e f2 6f d1 b3 de 18 f6 85 ac e7 9b 84 b5 ab 26 b5 14 98 e5 21 5c e5 07 ee af 93 90 5a 0c 6d 44 d5 09 c8 26 a9 4c a2 aa 50 e7 a5 64 22 3f c9 35 54 b8 ad ea eb 8b 8e 3c cc 61 31 c7 11 e9 58 ea 4f 5a 94 7a 79 a5 4a 40 75 08 8e 49 28 a9 25 0a 54 89 0e 68 ea 79 69 42 a4 72 db 20 38 91 ac 50 8e 59 46 24 96 aa 05 cd 31 ce 69 97 23 96 22 b5 4f 31 29 80 f3 9d c5 c0 7e c8 54 8a 49 b7 42 a1 68 96 34 c8 a9 06 50 30 57 1c 97 37 7a 05 2e e9 ad 72 42 b9 6f 14 99 67 96 2b 73 32 e4 e5 47 cc 8e 2b 5b 7a a6 1b 9f d1 d7 2a b8 54 f6 d2 c0 2e 66 92 db f8 aa 2f 15 ca 3c c5 8d f1 30 09 b6 cd c6 28 dd cc f4 ba 96 f2 43 2d b5 f0 db 85 cc f6 e1 72 1c e5 ba 42 e2 48 28 55 b4 76 a8 42 e4 Data Ascii: -5{(jQ77m-Kp>o&!\ZmD&LPd"?5T<a1XOZzyJ@uI(%ThyiBr 8PYF$1i#"O1)~TIBh4P0W7z.rBog+s2G+[z*T.f/<0(C-rBH(UvB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49809	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:35 UTC	710	OUT	GET /classes.htmlhttps://eternalspringacupuncture.com/index.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:35 UTC	164	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 16:52:35 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-27 16:52:35 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49808	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:35 UTC	671	OUT	GET /favicon.ico HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eternalspringacupuncture.com/classes.htmlhttps://eternalspringacupuncture.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:36 UTC	164	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 16:52:36 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-27 16:52:36 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49811	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:38 UTC	665	OUT	GET /contactUs.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:38 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:38 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 04 Jan 2019 08:00:48 GMT ETag: "6612f2-198b-57e9d46e60c00" Accept-Ranges: bytes Content-Length: 6539 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:52:38 UTC	6539	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6e 74 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49812	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:39 UTC	1044	OUT	GET /maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:40 UTC	762	IN	HTTP/1.1 200 OK Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT X-Robots-Tag: noindex,nofollow Cache-Control: no-cache, must-revalidate Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-HbDgFHqFgOBmh92kzKhlng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1 Content-Type: text/html; charset=UTF-8 Vary: Origin Vary: X-Origin Vary: Referer Date: Fri, 27 Sep 2024 16:52:40 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Language,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:40 UTC	628	IN	Data Raw: 39 30 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 23 6d 61 70 44 69 76 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 70 44 69 76 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 62 44 67 46 48 71 Data Ascii: 908<!DOCTYPE html><html> <head> <style type="text/css"> html, body, #mapDiv { height: 100%; margin: 0; padding: 0; } </style> </head> <body> <div id="mapDiv"></div> <script nonce="HbDgFHq
2024-09-27 16:52:40 UTC	1390	IN	Data Raw: 39 34 39 36 38 32 32 33 34 35 37 31 39 22 5d 2c 22 2f 67 2f 31 31 63 32 39 30 35 38 66 36 22 2c 6e 75 6c 6c 2c 5b 34 35 30 33 31 30 36 39 32 2c 33 33 36 33 39 30 38 35 36 34 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 67 63 69 64 3a 67 65 6f 63 6f 64 65 64 5f 61 64 64 72 65 73 73 22 5d 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 30 5d 5d 5d 5d 2c 6e 75 6c 6c 2c 5b 22 65 6e 5f 55 53 22 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 2f 6d 61 70 73 2f 61 70 69 2f 6a 73 2f 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 47 65 74 45 6e 74 69 74 79 44 65 74 61 69 6c 73 22 2c 22 2f 6d 61 70 73 2f 65 6d 62 65 64 2f 75 Data Ascii: 9496822345719"],"/g/11c29058f6",null,[450310692,3363908564],null,null,null,1,null,null,null,null,null,null,"gcid:geocoded_address"],0,0,null,null,0,null,0]]]],null,["en_US"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/u
2024-09-27 16:52:40 UTC	301	IN	Data Raw: 6b 7a 4b 68 6c 6e 67 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 70 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 6d 61 70 73 2f 61 70 69 2f 6a 73 3f 63 6c 69 65 6e 74 3d 67 6f 6f 67 6c 65 2d 6d 61 70 73 2d 65 6d 62 65 64 26 61 6d 70 3b 70 61 69 6e 74 5f 6f 72 69 67 69 6e 3d 26 61 6d 70 3b 6c 69 62 72 61 72 69 65 73 3d 67 65 6f 6d 65 74 72 79 2c 73 65 61 72 63 68 26 61 6d 70 3b 76 3d 77 65 65 6b 6c 79 26 61 6d 70 3b 6c 6f 61 64 69 6e 67 3d 61 73 79 6e 63 26 61 6d 70 3b 6c 61 6e 67 75 61 67 65 3d 65 6e 5f 55 53 26 61 6d 70 3b 63 61 6c 6c 62 61 63 6b 3d 6f 6e 41 70 69 4c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 48 62 44 67 46 48 71 46 67 4f 42 6d 68 39 32 6b 7a 4b 68 6c Data Ascii: kzKhlng" as="script" /> <script src="https://maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=weekly&loading=async&language=en_US&callback=onApiLoad" nonce="HbDgFHqFgOBmh92kzKhl
2024-09-27 16:52:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49813	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:39 UTC	1017	OUT	GET /maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://eternalspringacupuncture.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:40 UTC	762	IN	HTTP/1.1 200 OK X-Robots-Tag: noindex,nofollow Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vna3ecYZtRc6yNylrm-43A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1 Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: text/html; charset=UTF-8 Vary: Origin Vary: X-Origin Vary: Referer Date: Fri, 27 Sep 2024 16:52:40 GMT Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Language,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:40 UTC	628	IN	Data Raw: 63 64 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 2c 20 23 6d 61 70 44 69 76 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 70 44 69 76 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 6e 61 33 65 63 59 Data Ascii: cd4<!DOCTYPE html><html> <head> <style type="text/css"> html, body, #mapDiv { height: 100%; margin: 0; padding: 0; } </style> </head> <body> <div id="mapDiv"></div> <script nonce="vna3ecY
2024-09-27 16:52:40 UTC	1390	IN	Data Raw: 34 39 34 31 38 39 30 39 36 34 30 30 31 30 22 5d 2c 22 2f 67 2f 31 74 66 35 5f 79 63 68 22 2c 6e 75 6c 6c 2c 5b 34 35 30 33 36 34 38 39 32 2c 33 33 36 36 37 30 31 36 35 37 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 67 63 69 64 3a 73 68 6f 70 70 69 6e 67 5f 63 65 6e 74 65 72 22 5d 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 30 5d 5d 5d 5d 2c 6e 75 6c 6c 2c 5b 22 65 6e 5f 55 53 22 5d 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 2f 6d 61 70 73 2f 61 70 69 2f 6a 73 2f 41 70 70 6c 69 63 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 47 65 74 45 6e 74 69 74 79 44 65 74 61 69 6c 73 22 2c 22 2f 6d 61 70 73 2f 65 6d 62 65 64 2f Data Ascii: 49418909640010"],"/g/1tf5_ych",null,[450364892,3366701657],null,null,null,null,null,null,null,null,null,null,"gcid:shopping_center"],0,0,null,null,0,null,0]]]],null,["en_US"],[null,null,null,"/maps/api/js/ApplicationService.GetEntityDetails","/maps/embed/
2024-09-27 16:52:40 UTC	1273	IN	Data Raw: 5d 2c 5b 5b 22 43 6c 6f 73 65 64 22 5d 5d 2c 30 2c 32 5d 2c 5b 22 4d 6f 6e 64 61 79 22 2c 31 2c 5b 32 30 32 34 2c 39 2c 33 30 5d 2c 5b 5b 22 38 e2 80 af 41 4d e2 80 93 38 e2 80 af 50 4d 22 2c 5b 5b 38 5d 2c 5b 32 30 5d 5d 5d 5d 2c 30 2c 31 5d 2c 5b 22 54 75 65 73 64 61 79 22 2c 32 2c 5b 32 30 32 34 2c 31 30 2c 31 5d 2c 5b 5b 22 38 e2 80 af 41 4d e2 80 93 38 e2 80 af 50 4d 22 2c 5b 5b 38 5d 2c 5b 32 30 5d 5d 5d 5d 2c 30 2c 31 5d 2c 5b 22 57 65 64 6e 65 73 64 61 79 22 2c 33 2c 5b 32 30 32 34 2c 31 30 2c 32 5d 2c 5b 5b 22 38 e2 80 af 41 4d e2 80 93 38 e2 80 af 50 4d 22 2c 5b 5b 38 5d 2c 5b 32 30 5d 5d 5d 5d 2c 30 2c 31 5d 2c 5b 22 54 68 75 72 73 64 61 79 22 2c 34 2c 5b 32 30 32 34 2c 31 30 2c 33 5d 2c 5b 5b 22 38 e2 80 af 41 4d e2 80 93 38 e2 80 af 50 4d 22 Data Ascii: ],[["Closed"]],0,2],["Monday",1,[2024,9,30],[["8AM8PM",[[8],[20]]]],0,1],["Tuesday",2,[2024,10,1],[["8AM8PM",[[8],[20]]]],0,1],["Wednesday",3,[2024,10,2],[["8AM8PM",[[8],[20]]]],0,1],["Thursday",4,[2024,10,3],[["8AM8PM"
2024-09-27 16:52:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49844	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:46 UTC	676	OUT	GET /patientCenter/expect.html HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:46 UTC	290	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sat, 30 Dec 2017 05:18:39 GMT ETag: "680427-13ab-56187e1b889c0" Accept-Ranges: bytes Content-Length: 5035 Vary: Accept-Encoding Content-Type: text/html
2024-09-27 16:52:46 UTC	5035	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 3c 68 65 61 64 3e 0a 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 6e 66 6f Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <meta name="description" content=""> <meta name="author" content=""> <title>Info

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49843	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:46 UTC	595	OUT	GET /css/details.css HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://eternalspringacupuncture.com/patientCenter/expect.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:46 UTC	287	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 16:52:46 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 29 Dec 2017 21:37:03 GMT ETag: "680403-208-561816ee91dc0" Accept-Ranges: bytes Content-Length: 520 Vary: Accept-Encoding Content-Type: text/css
2024-09-27 16:52:46 UTC	520	IN	Data Raw: 68 65 61 64 65 72 2e 6a 75 6d 62 6f 74 72 6f 6e 2e 6d 79 2d 34 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 76 68 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2e 2e 2f 69 6d 61 67 65 73 2f 73 65 72 76 69 63 65 73 2f 63 6f 76 65 72 2e 6a 70 65 67 27 29 3b 20 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 31 30 30 25 3b 0a 7d 0a 0a 2e 70 61 67 69 6e 61 74 69 6f 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0a 7d 0a 0a 2e 63 61 72 64 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 70 61 Data Ascii: header.jumbotron.my-4 { height: 40vh; min-height: 100px; background-image: url('../images/services/cover.jpeg'); background-repeat: no-repeat; background-size: 100% 100%;}.pagination { margin-bottom: 15px;}.card { height: 100%;}.pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49852	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:47 UTC	607	OUT	GET /patientCenter/vendor/jquery/jquery.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eternalspringacupuncture.com/patientCenter/expect.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:47 UTC	164	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 16:52:47 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-27 16:52:47 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49851	107.180.47.65	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:47 UTC	623	OUT	GET /patientCenter/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1 Host: eternalspringacupuncture.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eternalspringacupuncture.com/patientCenter/expect.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:47 UTC	164	IN	HTTP/1.1 404 Not Found Date: Fri, 27 Sep 2024 16:52:47 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-09-27 16:52:47 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49859	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:48 UTC	1491	OUT	GET /maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1061	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 16:52:49 GMT Cache-Control: private, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=88 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:49 UTC	329	IN	Data Raw: 31 30 62 31 0d 0a 5b 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 75 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 30 33 36 39 32 38 2c 37 37 31 36 36 31 38 32 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 78 35 32 62 32 64 30 36 33 31 39 34 36 36 33 34 64 3a 30 78 63 61 37 39 32 30 64 30 33 39 66 37 31 36 64 38 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 33 32 2c 2d 31 31 2c 33 32 2c 32 2c 2d 31 38 2c 2d 32 2c 31 38 2c 31 31 5d 2c 22 63 22 Data Ascii: 10b1[{"id":"tuvwwvuwwwu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwwu","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c"
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 32 37 61 61 65 31 33 61 62 30 30 63 33 62 66 22 2c 22 61 22 3a 5b 32 38 36 37 32 2c 2d 37 35 37 37 36 30 5d 2c 22 62 62 22 3a 5b 2d 32 32 2c 2d 36 2c 32 33 2c 37 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 57 65 73 74 6f 6e 5c 22 7d 7d 22 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 77 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 77 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 30 33 36 39 32 38 2c 37 37 31 36 36 31 38 32 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 Data Ascii: 27aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvuwwww","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwww","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"i
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 38 32 39 39 36 34 38 2c 37 37 33 30 37 34 39 34 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 32 36 35 33 35 32 39 39 35 36 31 38 30 37 38 35 36 36 39 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 33 37 2c 2d 32 37 2c 33 37 2c 2d 39 2c 2d 34 35 2c 2d 31 33 2c 34 35 2c 35 2c 2d 34 31 2c 31 2c 34 32 2c 31 39 2c 2d 31 36 2c 31 35 2c 31 37 2c 33 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 4d 69 73 73 69 73 73 69 70 70 69 20 4e 61 74 69 6f 6e 61 6c 20 52 69 76 65 72 20 5c 5c 75 30 30 32 36 20 52 65 63 72 65 61 74 69 6f 6e 20 41 72 65 61 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 Data Ascii: 8299648,773074944],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"12653529956180785669","a":[0,0],"bb":[-37,-27,37,-9,-45,-13,45,5,-41,1,42,19,-16,15,17,33],"c":"{\"1\":{\"title\":\"Mississippi National River \\u0026 Recreation Area\"}}"},{"id"
2024-09-27 16:52:49 UTC	1172	IN	Data Raw: 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 77 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 35 34 38 39 32 38 2c 37 37 32 37 34 37 32 36 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 33 32 32 37 34 30 37 39 31 36 33 34 32 30 37 30 35 35 37 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 34 32 2c 31 2c 34 33 2c 31 39 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 4c 61 6b 65 20 45 6c 6d 6f 20 50 61 72 6b 20 52 65 73 65 72 76 65 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 3a 22 30 78 Data Ascii: zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwwtvvvw","base":[519548928,772747264],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"3227407916342070557","a":[0,0],"bb":[-42,1,43,19],"c":"{\"1\":{\"title\":\"Lake Elmo Park Reserve\"}}"},{"id":"0x
2024-09-27 16:52:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49860	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:48 UTC	1386	OUT	GET /maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1062	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 16:52:49 GMT Cache-Control: private, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=188 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:49 UTC	328	IN	Data Raw: 31 34 61 63 0d 0a 5b 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 74 74 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 33 2c 31 33 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 74 74 75 22 2c 22 62 61 73 65 22 3a 5b 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 33 2c 31 33 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 35 35 39 36 35 37 37 38 34 38 34 33 30 32 35 35 37 33 35 22 2c 22 61 22 3a 5b 30 2c 30 2c 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 2c 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 5d 2c 22 62 62 22 3a 5b 2d 31 31 Data Ascii: 14ac[{"id":"tuvwwwtvvvttu","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttu","base":[518113280,772014080],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"15596577848430255735","a":[0,0,518113280,772014080,518113280,772014080],"bb":[-11
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 73 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 34 34 37 31 38 30 30 33 39 35 30 31 33 30 38 37 37 39 39 22 2c 22 61 22 3a 5b 2d 31 39 34 35 36 2c 37 34 37 35 32 2c 35 31 38 30 39 33 38 32 34 2c 37 37 32 30 38 38 38 33 32 2c 35 31 38 30 39 33 38 32 34 2c 37 37 32 30 38 38 38 33 32 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 31 30 2c 2d 32 32 2c 31 31 31 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 54 61 76 65 72 6e 20 47 72 69 6c 6c 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 37 30 38 35 37 37 38 34 31 36 39 34 30 36 32 39 34 22 Data Ascii: s\"}}","io":[0,-13]},{"id":"4471800395013087799","a":[-19456,74752,518093824,772088832,518093824,772088832],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,10,-22,111,-4],"c":"{\"1\":{\"title\":\"The Tavern Grill\"}}","io":[0,-13]},{"id":"170857784169406294"
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 36 32 36 38 33 30 35 36 36 31 39 36 30 33 36 34 39 38 22 2c 22 61 22 3a 5b 31 31 33 36 36 34 2c 31 31 33 36 36 34 2c 35 31 37 39 39 33 34 37 32 2c 37 37 32 34 33 34 39 34 34 2c 35 31 37 39 39 33 34 37 32 2c 37 37 32 34 33 34 39 34 34 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 61 72 67 65 74 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 33 37 36 35 38 37 31 36 30 32 37 32 37 34 33 38 35 33 31 22 2c 22 61 22 3a 5b 33 35 35 33 32 38 2c 34 35 30 35 36 5d 2c 22 62 62 22 3a 5b 2d 32 32 2c 2d 32 30 2c 32 33 2c 2d 32 2c 2d 33 32 2c 2d 36 2c 33 33 2c 31 Data Ascii: 626830566196036498","a":[113664,113664,517993472,772434944,517993472,772434944],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"Target\"}}","io":[0,-13]},{"id":"3765871602727438531","a":[355328,45056],"bb":[-22,-20,23,-2,-32,-6,33,1
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 37 30 30 33 33 34 35 37 35 31 22 2c 22 61 22 3a 5b 30 2c 30 2c 35 31 38 37 33 35 38 37 32 2c 37 37 32 32 35 31 36 34 38 2c 35 31 38 37 33 35 38 37 32 2c 37 37 32 32 35 31 36 34 38 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 32 37 2c 2d 32 32 2c 2d 31 30 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 43 6f 73 74 63 6f 20 57 68 6f 6c 65 73 61 6c 65 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 31 38 33 34 35 38 34 31 37 33 33 30 31 34 34 38 36 39 22 2c 22 61 22 3a 5b 31 30 31 33 37 36 2c 2d 37 33 37 32 38 5d 2c 22 62 62 22 3a 5b 2d 38 33 2c 2d 32 32 2c 2d 39 2c 2d 34 5d 2c 22 Data Ascii: 7003345751","a":[0,0,518735872,772251648,518735872,772251648],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-127,-22,-10,-4],"c":"{\"1\":{\"title\":\"Costco Wholesale\"}}","io":[0,-13]},{"id":"1183458417330144869","a":[101376,-73728],"bb":[-83,-22,-9,-4],"
2024-09-27 16:52:49 UTC	802	IN	Data Raw: 74 6c 65 5c 22 3a 5c 22 4d 65 6e 61 72 64 73 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 34 32 34 30 36 35 32 38 30 38 37 31 34 34 38 35 34 30 33 22 2c 22 61 22 3a 5b 32 30 38 38 39 36 2c 2d 32 35 36 30 30 5d 2c 22 62 62 22 3a 5b 2d 31 31 39 2c 2d 32 32 2c 2d 39 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 3a 22 31 37 33 30 33 32 31 34 30 30 30 37 30 30 33 31 36 34 32 31 22 2c 22 61 22 3a 5b 31 36 39 39 38 34 2c 33 38 39 31 32 5d 2c 22 62 62 22 3a 5b 2d 31 33 30 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 33 30 2c 2d 31 35 2c 2d 39 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 Data Ascii: tle\":\"Menards\"}}","io":[0,-13]},{"id":"14240652808714485403","a":[208896,-25600],"bb":[-119,-22,-9,-4],"c":"{\"1\":{\"title\":\"The Home Depot\"}}"},{"id":"17303214000700316421","a":[169984,38912],"bb":[-130,-29,-10,-11,-130,-15,-9,3],"c":"{\"1\":{\"ti
2024-09-27 16:52:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49861	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:49 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1031	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0eb78fdfd583b0105 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 11380 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=118 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:49 UTC	359	IN	Data Raw: 52 49 46 46 6c 2c 00 00 57 45 42 50 56 50 38 4c 5f 2c 00 00 2f ff c0 3f 00 07 e3 38 b2 6d 25 7a 1f 87 d1 0c 26 ff 70 5c b6 b0 77 7d 9e 06 db c8 b6 95 fc 8f 3b 84 50 06 39 b5 d3 04 35 78 e4 fa de fd cf 41 00 30 48 83 bb 14 20 10 c9 e8 47 03 bd bb 4d 0e db e6 3f 5c ac 8b 01 72 81 59 89 ed 50 88 94 4c 60 b5 18 07 c3 a8 fc 89 61 fe 6e 36 56 11 47 32 3f 75 05 ca 2c 4f 08 23 ea 54 70 11 b9 3a 41 12 91 88 c0 8a 2c 9f 40 29 94 40 9d b5 72 12 7c 25 f8 49 80 4a 08 12 76 03 79 23 46 0e 04 41 10 04 d9 81 b4 62 23 42 fe 91 e9 75 98 11 87 fd 6b f8 1f 86 ff c9 4b 72 74 4b 71 ec 3a a7 95 73 5e 28 b9 01 1c 03 71 29 94 b0 b8 f9 a8 08 3c 1e 25 f6 38 90 c6 66 fa 80 d2 c6 2e 8f d7 ac de 07 35 ed 34 e7 68 49 49 bb 5c 34 ef 6c e0 b7 81 5e de d1 ac f0 5e fe 5d 6f 5b bf f0 40 b8 Data Ascii: RIFFl,WEBPVP8L_,/?8m%z&p\w};P95xA0H GM?\rYPL`an6VG2?u,O#Tp:A,@)@r\|%IJvy#FAb#BukKrtKq:s^(q)<%8f.54hII\4l^^]o[@
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: b5 4e f4 e1 73 ad 60 02 b0 4a c3 a2 15 48 93 ad d6 09 da 4e 1b cd c5 0d 79 9b 0b 79 70 a1 e8 f5 09 16 ca 2e c1 0c 3a 0c 9a bd fd b2 5d a9 d5 69 cf 79 ac 70 cf 2f b8 57 b2 d1 3b 69 15 cd e2 6a 50 c1 36 e6 63 d0 ea 3a 71 9b cb dd ab 6f 9b 80 35 2c c1 04 82 9a f7 1a 26 36 b7 96 9d 5d 06 7b dd 88 30 0f a5 76 17 a7 4e 31 66 af 5e b5 4d a0 b8 65 22 c8 b9 c5 be a5 e6 e2 07 ff c0 a9 ce 41 b1 dd 6d 0d 58 7c f7 b9 4e 44 15 3b cf 3d bb 60 e7 ab 42 95 9b 82 67 b5 7b ad 06 b7 fc e9 1d 17 79 c1 ce 57 86 4a 8d 4b 06 ae d5 eb b3 b8 f7 a1 4e 7c 34 11 a4 61 93 cd 57 06 a0 52 ad f1 c9 02 d9 44 81 ed 10 2d a7 b6 bd cf 1f f8 58 30 83 d5 3e 71 e6 9c e1 6a 00 47 85 6f c1 76 a5 1c 8c 2f cd 5e 9b c5 fa 9e b8 45 b0 1a fd 93 3e 37 07 56 82 ed 6a 9d 6a 42 ac d6 ca 08 6e 87 db ef 3e Data Ascii: Ns`JHNyyp.:]iyp/W;ijP6c:qo5,&6]{0vN1f^Me"AmX\|ND;=`Bg{yWJKN\|4aWRD-X0>qjGov/^E>7VjjBn>
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: aa 88 65 87 2a c7 f2 83 4b bc 7b cf cb 8b ed 5f e1 3c 5e 78 a9 9a 3e ec 37 b9 b2 e2 d6 de 34 56 2b 8f 05 e1 83 de c6 1e db f2 ff 97 1d be b4 0f e9 26 d7 ef f8 cc 29 17 3c 9e bf 1f f4 57 b9 1a b3 e3 c7 a8 cf f9 c8 b1 45 45 18 94 95 8f 1f a7 d2 ca e4 35 0d ec 78 f6 e5 24 bd 41 b5 fa f5 06 5d b3 83 0e 51 5c 05 8c 2c c4 f3 6d 27 cd e1 6a c7 6d e2 55 3f ad 4f 73 d7 ef 90 a6 1c bb a9 46 a4 9f cd c2 2a 90 95 74 bc 1a ab 3b 5b 36 79 d4 4c eb 6f b9 eb 4f 38 44 6e 77 c3 88 21 1b 63 f9 ba 7a 36 53 30 83 c6 9a 81 ec 68 9d 28 86 ec aa ee 77 c8 26 6f da a3 88 e3 43 ee 10 1a d1 d9 58 55 70 a6 ab a0 f0 64 a6 4f de ce 74 45 1d 9f a9 d0 47 49 56 53 76 35 bb a9 cb 26 ef 88 1c e1 f4 cb e3 c3 4c 57 de ce 54 bc 39 92 9d b7 0e 94 d9 03 bd 8c 95 c7 a7 07 40 8d ad 48 7e b2 6a 37 Data Ascii: eK{_<^x>74V+&)<WEE5x$A]Q\,m'jmU?OsFt;[6yLoO8Dnw!cz6S0h(w&oCXUpdOtEGIVSv5&LWT9@H~j7
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 20 ab d6 5a 58 df 2f 42 f4 f5 fb 25 fd 48 0a 42 d1 6f b8 fc fe 35 7c f1 3d 47 e3 ab 35 01 e9 17 57 c9 73 52 71 4e df 9c 17 f6 5c 61 3b 80 b3 83 8b 1f 5f 09 49 95 43 3f ce 55 4d bf ba 24 95 6f ce 85 e2 cf 1c 7e 89 ad 85 74 7e 15 0d 29 df ce 29 f2 fd 52 74 f9 5d 89 ae 5d 25 41 e3 dc d7 ef b9 eb 3d c7 f7 73 5c 7c ff 16 61 be 7f 8d eb 17 8e ef 5f 55 b6 a7 e8 8f 0b 15 5f 09 59 e6 92 48 85 d3 48 c7 57 d6 9c 6f 81 0a ae 5f b6 70 be fe a7 10 b1 84 cc b7 af e7 c0 0f f6 ca e6 70 49 7b 9f 29 77 f9 e3 1b ae be ea 51 c6 a9 63 fd dc 71 05 35 a6 d2 39 08 c0 d7 ef aa c1 39 bf d2 d5 ef 17 0c ce 2f f1 2d 20 f3 f8 43 9e 83 1b cb 87 1f 17 8e af df 5c 7c ff 06 e0 42 c1 f7 b5 ab 44 ae fe 1e 2c 11 ff 8a b8 ca 33 c8 11 b9 42 22 a5 31 df 58 10 a8 df 2f cf 7f e8 e7 57 61 27 e1 d5 Data Ascii: ZX/B%HBo5\|=G5WsRqN\a;_IC?UM$o~t~))Rt]]%A=s\\|a_U_YHHWo_ppI{)wQcq599/- C\\|BD,3B"1X/Wa'
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: ca db 35 aa ca 93 c3 e6 f2 2a f2 c5 2c de a6 89 40 10 29 e3 b7 88 16 53 67 47 ca cb 91 7a c6 3c 3f a8 1a f7 79 8c eb 14 8d a8 ac 39 1c b0 26 e5 36 6a f2 a3 90 2a 5f 85 8b f6 b2 da 74 3d 1d 15 08 83 88 b4 f0 c3 51 18 e3 d7 94 f2 a6 ab c7 dc 0b 4c 07 aa e1 98 69 a3 74 9f 22 92 e6 80 6b 92 6c f6 59 56 7d 45 96 b4 da fd c6 92 da 2a ce 81 09 20 ab 8e 1f 30 7b 3d 56 e8 f9 65 f6 c0 89 bf 9e 21 eb 50 a7 ad ee 34 22 69 0e f8 26 69 3b 9e 3a e0 d2 59 bb 87 e1 72 2a 59 c1 ab 44 59 88 28 d1 f1 44 21 a2 f0 18 da 99 92 1a 6b 48 8d 1d 09 a7 5c a3 7f 92 8e 8c a1 b2 e6 a8 e0 f3 b5 7c 5d 0c d2 ee 87 4c 91 9d 7c 5a 4a c3 40 55 b6 51 ad d5 29 ca 4f 71 7e f4 81 66 10 51 8c b8 db ce c8 cc c6 e2 46 16 7d 76 4a 3d 06 68 31 18 c4 e5 53 d6 f6 76 14 2a 3d 0d 31 68 f6 5a cb 09 7e 9d Data Ascii: 5,@)SgGz<?y9&6j_t=QLit"klYV}E* 0{=Ve!P4"i&i;:YrYDY(D!kH\\|]L\|ZJ@UQ)Oq~fQF}vJ=h1Sv=1hZ~
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: e7 47 a4 ce 1d 11 a0 31 6f 8f 78 78 49 2a 11 85 0b e9 e9 48 21 8a 2a 44 39 6e fc 6d 84 72 1b 94 0b 1f 1f e5 ae dd 0e bc dd 56 04 fb 30 bc 37 34 f5 f7 7d 09 b8 fd a3 c4 8a 12 46 8e 88 ae d9 5b 7c cd dd 10 a6 c1 b9 9d 40 fb 73 ab e1 f4 df 6f c5 28 2a aa 96 b5 0d 0d 94 d1 54 68 59 4d 05 a0 05 69 ab e8 e1 fa 9d c1 d1 a0 3c 77 42 0a 4d c6 21 42 42 8f 8f 93 48 e9 13 5d d9 c8 d1 74 94 0b 6b d3 f8 04 cf 18 e5 aa f2 13 2f ae 2b 02 65 68 f7 a7 50 ff fd f9 a5 e2 cf ad 52 1a 28 2a 4f 83 45 84 5c 78 00 a2 d2 4f 67 e1 36 6e 94 f3 8c 81 db 7f ac 81 38 d5 0c fc 1c 2a 6a f1 e7 40 57 31 28 01 6a 36 40 45 78 68 45 56 34 3b 0a 8d 5f 66 0f cf 21 1c c4 f5 97 69 87 1d 8f 8f 95 f4 cb e3 c3 63 3c fc f6 3a 3b a0 c7 a3 78 4f 3e 77 5d 11 28 93 bd 94 a5 7f a7 77 2a 5f 9f 20 ac 0e ee Data Ascii: G1oxxIH!D9nmrV074}F[\|@so(ThYMi<wBM!BBH]tk/+ehPR(OE\xOg6n8j@W1(j6@ExhEV4;_f!ic<:;xO>w](w_
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 56 b5 40 f8 b9 4d 21 c5 0a 7a d5 e8 33 6b 44 54 af 4a c6 de 8a a7 5b 3d ef 22 ab 45 89 28 16 68 b6 a9 39 bd a7 9f 19 4d 51 87 f7 9a 52 fc a3 c1 b8 2f 29 ac 0d a5 fb 8c 86 bf 03 4d 4c 64 ee fe 28 83 5f ac f3 ed f8 c9 da 15 7c 2c 7a 19 ac 99 71 a6 b1 67 5d 47 11 8c 64 8d 78 c0 ed 71 17 19 43 68 73 36 50 b6 a1 65 7e de dd ff 36 18 c0 38 bd a5 fb a1 ea 50 85 c3 4a 2d cf b0 f0 db 50 90 19 dc fe 66 86 31 94 ee ef 10 70 dc e2 ce b8 7a 99 a5 75 cf 1a 6c ce 78 58 e3 6d 17 31 d9 c9 fb 40 19 1a 0b c3 7f b7 4a e9 1e aa 71 f7 5b 42 38 ac 54 b3 a6 a1 de 97 c0 85 e2 bf 5f 02 83 4a f7 7f ef 4b c1 76 3d 08 de 42 ca 63 41 9d 57 84 dc 07 c9 ed 77 de 76 11 15 19 c1 d2 06 7f b4 18 3b ec e4 fc bc d3 00 81 70 58 29 d0 0c 22 52 d9 11 fa f0 3e 0c fe 41 bf fd 87 80 fb 5e 5e a7 62 Data Ascii: V@M!z3kDTJ[="E(h9MQR/)MLd(_\|,zqg]GdxqChs6Pe~68PJ-Pf1pzulxXm1@Jq[B8T_JKv=BcAWwv;pX)"R>A^^b
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 30 7b a1 d0 f1 cb e3 cb 61 58 7b 74 5a 37 0a 3f 3e 3d 00 b9 8d 7a 80 27 d9 ad 20 6e 19 30 03 92 5c 4b 61 1e df 68 37 78 3a 88 1e 76 14 97 7b ae 9c c4 71 2e f5 c6 79 e9 1c 82 5e 44 47 33 85 0e 66 a1 d9 61 2e fd 18 3e 7a cc d1 d1 2c 4c 07 39 7a 39 cb 59 01 fe 3d f8 67 0d 11 dc 2f ed 5c fa 33 ee f4 d7 e9 61 c7 ed 9e 23 95 9c 66 68 de 3c 75 58 76 e8 f8 f5 e0 38 17 76 36 a5 f5 37 a7 26 4d a5 b3 58 60 6f fb 18 45 6f 61 d3 e2 03 bf af c0 7e 69 33 89 85 80 a3 97 03 af a4 09 57 b9 f4 d1 e3 83 8c 1a a0 b5 51 4a 07 32 9b 1e 94 f8 30 a4 cd b8 ee ed d3 94 05 0c 15 31 d3 f5 97 76 31 68 b3 57 31 21 0a 0b a4 45 5e a1 8c 25 89 a7 69 8e de 84 44 40 c4 d7 6b a4 ab fa 59 ca df 20 22 35 35 d2 b2 5e a2 0a 20 35 55 b3 fc 2f ed bc ff d2 dc 18 b1 f1 eb a1 e4 9e ab 63 ee 9e 2b 4f Data Ascii: 0{aX{tZ7?>=z' n0\Kah7x:v{q.y^DG3fa.>z,L9z9Y=g/\3a#fh<uXv8v67&MX`oEoa~i3WQJ201v1hW1!E^%iD@kY "55^ 5U/c+O
2024-09-27 16:52:49 UTC	1291	IN	Data Raw: 22 44 cf ce bc 33 0d 1d 1d 87 66 2c 2b f1 54 e3 d7 d4 aa 20 a4 59 af 83 2a ae 88 12 c9 b5 64 8a 05 f1 8f 06 92 91 3d 06 2f 06 18 d6 2a 53 da 14 cd 42 c4 72 d0 09 bd ce 1e c6 21 9a ed f0 b7 5c 6f db a8 a5 6d ee 56 1c db 9d 0e a2 04 cf 94 04 c3 c3 9d 68 c5 52 81 c8 ce af 28 96 9c 3e 23 3a 0a 11 4d 9f 1d e2 3f 4a 62 a7 c4 dd 89 57 85 c0 3d b8 75 79 62 e4 c5 d0 26 5a 55 86 90 27 88 08 e3 e4 84 c6 4f 4e a2 2a dc 72 5d 4c c1 26 aa 6c d7 b6 3d 23 22 cd c8 78 18 d7 b8 20 5a 4b 40 5e 84 f0 7c 40 ba 53 d9 34 34 3d dc aa f1 dd 8e ed 62 c2 da e6 fe 5e fc 20 22 2d eb 12 63 8b a3 39 5c f4 ba 5c 2a 1a 27 89 88 26 49 8a 3e 9d ae 55 b8 bb ee aa 25 d4 76 eb 14 00 72 63 ac 48 9b 25 d3 73 bf ab 63 17 d3 a5 1d 22 4a cb 8e 41 fc e2 1a 2f 7b 17 56 a4 22 4c af fd ee 8e 4d 54 dc Data Ascii: "D3f,+T Yd=/SBr!\omVhR(>#:M?JbW=uyb&ZU'ONr]L&l=#"x ZK@^\|@S44=b^ "-c9\\'&I>U%vrcH%sc"JA/{V"LMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49865	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:49 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 048bd5eff4a918464 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9930 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=72 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:49 UTC	361	IN	Data Raw: 52 49 46 46 c2 26 00 00 57 45 42 50 56 50 38 4c b5 26 00 00 2f ff c0 3f 00 a7 e2 aa b6 6d a5 c2 dd 2d 01 b4 d2 32 94 23 01 df f2 dc 5d cf 3e 35 dc 06 00 98 26 a9 bb ce de 1f 3a f7 4c 9e 61 e7 02 66 df 1c e2 ee 36 b6 6d a5 ba 07 97 88 dc 42 fa a0 3b aa a1 16 42 22 86 98 ef fa ec de 3b ff c1 56 33 50 6c 15 69 06 23 48 33 d2 0c 8a 40 09 00 c1 8a 40 2b 58 c6 1a fe 2a 80 22 42 c8 fe 44 11 00 b2 3f a0 a5 0f 35 6e d0 fa 40 e7 85 d8 4f 78 3f 21 7e 36 10 24 7c 45 00 ad 5e d4 79 20 23 b5 23 2f 6a 85 5d 2c c2 35 bf bc 93 22 90 42 a2 14 20 46 a0 b6 a0 14 20 17 a0 80 27 86 06 43 e3 1e a5 e4 25 66 e4 a0 f1 c1 f2 18 1c ef ec df af be dc da 3d 2e 8e ef ab 07 fa 7b d2 8f cb f7 ed 0a 1f ae bf 8f eb ff ed fa 7f b9 c1 8f cb ef a1 3d 45 b2 70 e3 8e 64 08 4e 66 09 66 19 31 2a Data Ascii: RIFF&WEBPVP8L&/?m-2#]>5&:Laf6mB;B";V3Pli#H3@@+X"BD?5n@Ox?!~6$\|E^y ##/j],5"B F 'C%f=.{=EpdNff1
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: f9 92 24 f2 32 45 e9 36 3f 18 af 6f 3e b4 f0 ea 03 af 9d db 0f 74 6e d8 c2 ee 3b f2 fd 6b b7 2d e0 f2 f6 03 f9 ee f5 8a b7 1f f8 fe ee 83 bc f9 70 dd e6 87 3b e7 d5 fb 0f 7c fb e1 15 5e 7f e0 fb fb 0f 8e 7b f7 81 f7 ef ee db 52 c3 57 0c 94 35 c0 92 dd 04 8f 13 fc b0 02 d7 e8 80 24 77 af a5 e3 5e 13 2d 37 bf 7b ed b2 2d 00 b8 6d ef d5 b5 e2 4e 1c 74 af a5 4b 87 6d 37 8f 96 bc 0e 5d d2 a1 bc 96 2e 5b e0 ee b5 4b b2 2d a0 8a 02 53 f9 6e 12 3e 36 d2 84 d4 2b 03 d9 b6 04 49 76 48 ba 6d 52 74 48 12 c2 a8 e4 4e 77 6f bf 3f 38 d0 6d 92 ca 53 6d 41 b2 03 1a 41 b3 a0 19 46 2d f2 5a 54 dc 25 54 b5 fe f6 62 01 d2 52 5a 34 32 4a c6 c3 3e c0 69 4f 00 08 13 8a 26 fe 76 e4 25 00 2f dd 88 78 2b 55 ac bc 46 85 76 88 93 6e 4a 5e b2 16 e3 a5 bf 19 13 53 bc f5 a0 1b a5 4b 99 Data Ascii: $2E6?o>tn;k-p;\|^{RW5$w^-7{-mNtKm7].[K-Sn>6+IvHmRtHNwo?8mSmAAF-ZT%TbRZ42J>iO&v%/x+UFvnJ^SK
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: c5 de a8 60 28 ce 67 f9 79 26 00 84 dd 84 e1 86 44 15 65 9b f1 d2 d8 1c 95 a0 ab 45 53 b2 f9 cc 7c 1e 17 1d 64 b3 c2 73 25 00 26 00 02 55 9f f4 cb 85 09 e7 33 90 e4 c2 36 13 8f 80 ea 26 54 c2 36 ad 41 2e cf 66 c5 73 35 36 0d 7a cb 22 60 21 05 10 76 13 90 71 a8 ea d1 b2 12 51 f1 e6 c8 86 68 26 50 c2 3a ac 61 31 b3 16 a3 82 f8 dc 06 67 4b 01 a8 28 e9 02 00 e3 d0 af 8e 78 04 d8 08 15 76 13 4a 51 57 50 4d d6 37 0d c5 99 15 30 17 79 a5 a3 a4 0b 00 8c 03 59 09 fd df 03 3f ea 26 88 45 d9 2a 74 c1 d2 6e b9 6f 3a 50 b3 b2 59 2e 2f 75 18 77 13 80 71 20 05 e8 17 06 21 c9 38 0a 03 1f 80 12 00 7d 00 41 18 27 31 2b 06 8d 11 43 23 68 8c 08 20 e9 d6 0d b0 5e 00 8c c3 06 65 76 8b 5e 6e 38 ed 65 d5 e5 a3 20 ee 26 00 49 a2 5a e6 b1 d1 1b 46 04 02 32 d0 20 cc 52 00 69 81 54 Data Ascii: `(gy&DeES\|ds%&U36&T6A.fs56z"`!vqQh&P:a1gK(xvJQWPM70yY?&E*tno:PY./uwq !8}A'1+C#h ^ev^n8e &IZF2 RiT
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: c9 ce cf 66 c0 a2 5c b0 11 5f bf 38 2f be bb ce fe f7 af 00 be 38 df 7b ae c0 a3 a5 c2 e6 cc 67 c6 ac 94 de 88 ef 2f 9c fd af ae f3 e5 ab 4b d2 d1 df 75 7b 0b c8 8d 41 5a 9b 3f 2a 98 99 e7 4d cb 28 2b d0 df b5 f3 e5 ab eb e8 ef 09 e5 17 f1 e2 bb bb 29 d2 0f c2 7c 9c 00 fe f6 52 e3 82 73 13 b2 12 8a 35 2d 67 98 cb 72 f8 de 76 5f 7c ff 4a 1e 7c ff fa fd 8b c3 af 6d 15 92 4c e2 92 dd 26 26 b6 91 0e 90 f7 55 e3 43 ad 6a f6 8b 96 05 67 b2 41 f2 7c 06 80 e5 3a f9 17 e8 88 4e f4 82 1d b7 0d 44 49 a5 4d 60 8c 90 24 12 c0 17 66 b5 81 71 5d ba 48 16 60 d9 a0 f9 cc 78 5e 4a c0 0b d1 81 20 3a 80 f0 00 15 e6 63 bf ac 30 6a 29 ea f7 ad 36 31 45 cd d1 51 01 e6 05 59 73 b2 59 e1 b2 9c 16 95 6a 51 ad 16 5b 8f b2 a6 9e 69 5f 60 59 20 ed 34 b7 48 50 51 b8 fd 3c bf a6 be 69 Data Ascii: f\_8/8{g/Ku{AZ?*M(+)\|Rs5-grv_\|J\|mL&&UCjgA\|:NDIM`$fq]H`x^J :c0j)61EQYsYjQ[i_`Y 4HPQ<i
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: f1 d1 74 34 b0 c9 73 48 8e f3 93 a9 f1 28 3f 05 14 e9 6b 63 08 40 15 5b 50 d4 a9 45 95 71 02 f8 02 a8 40 6a a7 fd c9 f0 69 75 8a cc f4 a9 ed 68 99 d3 10 f9 de e1 d1 64 d0 b7 e4 64 7a 34 19 f5 07 a3 e9 d8 d0 3f 32 0c a7 43 4e 07 18 f6 c6 fd c1 a1 12 a1 84 bd 16 40 d0 eb 4f 39 19 59 55 3c 18 d2 53 94 a2 4a 2d 1a 59 4d 54 10 94 53 74 ce fe 34 9e 3e fd 93 4f 69 e0 dc 51 14 90 5e c7 65 3b e8 4f 39 ea e3 60 9f e8 03 49 67 d5 9b 1e ec 1c 8c 27 87 7d 60 80 69 af db 9b 4c 73 93 71 3f 3f 1c 4d fa a0 12 d0 a2 03 94 41 07 88 f7 07 47 d3 c9 b0 1e 00 81 a8 78 83 c2 02 5d 4e 0b e7 1f 53 f6 e9 4f 7e 5a 9a fe 71 84 16 9e 6e 61 bd 5c 79 03 f6 01 e8 0e 74 1f 23 b1 86 2b f2 41 6f 34 e9 03 83 d1 18 7d c3 78 32 24 30 99 b2 8f 49 2c 00 dd 69 01 ed 12 6c 01 14 c0 ce fe f8 68 4a Data Ascii: t4sH(?kc@[PEq@jiuhddz4?2CN@O9YU<SJ-YMTSt4>OiQ^e;O9`Ig'}`iLsq??MAGx]NSO~Zqna\yt#+Ao4}x2$0I,ilhJ
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 00 42 97 f2 98 f3 64 41 7e ef 60 7c 34 1d 0d 8a 8c c3 d1 78 ca 23 0c f6 f7 e2 aa c2 b8 f7 fa ed 6b df c9 8b eb b7 37 09 7a 7d 60 c0 21 f6 77 b4 d5 ce c1 14 0e e6 9f 8a 3e cd 81 57 af 53 51 92 a8 37 98 b2 0f 0c f7 56 2d 74 84 a5 16 25 b5 28 a9 45 61 39 84 39 a5 83 d0 2f 02 10 f4 06 53 4e 86 36 66 8e c6 53 1e e1 70 bf b7 63 11 77 7b fb 07 83 e1 80 b7 6f 7c a7 58 f0 c6 60 1c 0c 07 07 3d a2 8f c1 e1 f4 68 4a 1e 5d 3b 70 e7 ff 7c fa 93 9f fe 99 b7 81 dd eb 54 36 0b 03 c3 b4 db a6 d8 1c cf 42 4b d1 25 00 78 ca 26 1f ef 1f 1e 4d 47 03 3b f3 90 e3 29 8f a6 87 f9 a9 ed 5b df 91 d7 12 00 77 1d 88 b7 e3 c9 d4 fe 88 53 62 38 e8 03 3c 9c 5e 3b d6 bb 4c a5 28 e9 a3 ae 3d c3 51 57 d8 37 2d 44 31 8b 54 29 00 dc eb 4f 8f 26 a3 41 19 33 87 65 df bc 76 76 ef 6e ee 42 e7 f5 Data Ascii: BdA~`\|4x#k7z}`!w>WSQ7V-t%(Ea99/SN6fSpcw{o\|X`=hJ];p\|T6BK%x&MG;)[wSb8<^;L(=QW7-D1T)O&A3evvnB
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 10 05 b0 55 46 98 43 a0 cb e7 78 e1 d9 c8 b0 8c 22 40 6e a9 54 6e 14 34 42 c0 53 d5 f8 30 00 a4 00 a0 45 ad 39 24 d2 02 5a 3d 1a 01 b1 59 f6 5d c2 5e 11 79 12 c6 26 20 96 16 88 1e 0b a6 f8 9d 40 64 e3 d1 4a fa 50 04 68 04 98 d7 08 08 80 00 08 23 61 9f 34 24 c5 23 e0 35 09 a1 05 a2 9c 17 e9 10 00 94 1f 28 eb 40 91 52 28 a2 d6 b8 09 01 42 ff 11 80 6e d4 8b 40 15 51 0b 86 5a 14 07 b0 d6 22 bf 05 74 4a 51 9c c9 df 03 e0 c5 b3 80 1a 04 fc 28 d4 c2 96 de 36 42 4a 5d a0 4e 33 83 36 07 b0 57 46 f9 48 00 10 46 15 4b 61 ef 45 aa 01 8b a6 85 be f0 0b e6 b3 a5 21 40 95 d2 14 d4 24 95 ae ed a2 ca 67 e4 f3 ea 22 89 d2 3a 54 f5 9d cb 46 79 21 8a 97 33 2c 0c ba 92 42 5d 8b 0e 7c 25 6a 7b 5e b5 2c f7 cc 10 49 54 19 50 d6 94 cd e6 b2 49 29 8a b3 19 70 9e 93 7e 2d ac a5 d3 Data Ascii: UFCx"@nTn4BS0E9$Z=Y]^y& @dJPh#a4$#5(@R(Bn@QZ"tJQ(6BJ]N36WFHFKaE!@$g":TFy!3,B]\|%j{^,ITPI)p~-
2024-09-27 16:52:49 UTC	1229	IN	Data Raw: df 5f ab 37 e1 2d 9c f7 37 d7 77 f7 4e eb fd 5b f7 f5 87 5d e7 16 2e ff 60 9b 7c bf 49 58 18 b4 6a 80 2f 43 af 3e e8 ba 14 4b 1c 14 b8 24 db fe eb 77 b8 76 4d bc 81 f3 ea 1e b7 0e 78 8f 5b 07 bb 77 f7 37 ce 6b 62 f7 0e 7c db c2 ed b5 ab ee 5c e7 35 5d de b3 cd dd b7 1b 75 2a 73 88 00 28 af a6 b8 bb 05 a4 16 d8 29 c2 a0 57 74 fb 87 f9 36 47 b6 5d d2 69 91 64 db cd b7 dd b6 4b a7 45 33 48 b6 5d cb 4e 9b b0 50 1b 80 73 83 d2 02 64 3d f0 43 ea 8d 03 81 d8 a6 5b e4 98 49 0a 74 da 14 e8 40 74 00 08 74 00 08 c0 eb 40 74 20 d0 c9 8b 0e 44 07 02 1d 88 0e 20 e0 47 81 56 26 6c 02 b2 1c 34 85 57 57 8a ca ad 82 26 a8 a1 45 58 d0 6e a5 6f ef b9 db 72 db 1d 51 b5 16 b5 86 89 80 d2 01 94 00 96 9b 30 37 20 82 16 f5 78 61 23 74 6d 5a 0a 0c 8a 86 a2 c0 55 ef 5f bf 23 52 57 Data Ascii: _7-7wN[].`\|IXj/C>K$wvMx[w7kb\|\5]u*s()Wt6G]idKE3H]NPsd=C[It@tt@t D GV&l4WW&EXnorQ07 xa#tmZU_#RW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49864	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:49 UTC	1298	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0bc4d0deebef5971a Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 10626 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=47 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:49 UTC	360	IN	Data Raw: 52 49 46 46 7a 29 00 00 57 45 42 50 56 50 38 4c 6d 29 00 00 2f ff c0 3f 00 af e2 38 92 6d a5 7a ba c3 1d 02 20 ff 48 88 c1 f9 b2 c2 9d 73 d3 60 5c db b6 8b 2f c7 59 a6 00 25 28 48 89 a6 96 6e 3e f3 bf f2 7b 3f b9 8e 24 5b 55 ce d9 a7 38 bf 64 47 c2 24 e2 72 5d 77 fe 83 22 53 24 8a f4 fa e6 f5 0d a1 40 da 31 a3 80 02 40 84 02 40 40 01 a0 97 13 50 00 08 28 00 04 24 00 19 bb f5 ae 8e 95 74 8c 9c 89 36 58 03 c9 76 63 4e 40 64 20 52 25 73 90 39 88 42 f0 08 32 07 99 83 b6 95 c2 ee 82 44 a9 aa 24 a0 aa ea 09 89 a4 d9 e0 14 1b a2 91 0e 5e 02 d2 4d 58 54 51 7c 2a eb af 99 1b 13 37 66 66 cc c2 58 84 33 73 83 9c 5a e4 cf 24 ac 45 58 33 37 fc 47 7d e8 c7 ff 7b 6b cf 3b dd 16 fd 4f a2 ff 28 b2 9b f3 be 38 4c 71 41 83 d0 e4 fe 61 fc 5e c6 ff ed 64 de c1 bd 93 07 07 f3 Data Ascii: RIFFz)WEBPVP8Lm)/?8mz Hs`\/Y%(Hn>{?$[U8dG$r]w"S$@1@@@P($t6XvcN@d R%s9B2D$^MXTQ\|*7ffX3sZ$EX37G}{k;O(8LqAa^d
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 15 b5 37 08 32 3c a3 d8 dd e3 20 f1 17 ba fd 5c 51 1f be dc 7c b9 9d 8a 60 6d 66 0f d3 cd 56 92 57 b7 eb bb 4b 09 eb 1b dc 4d a5 e9 dd 9a 6e 57 32 4b ac fb 43 db 19 fa f1 9a 26 2a 7f 2f fd 64 73 b2 1e d0 7c c0 8c 1e 1e 69 fe 48 73 00 04 28 0b 55 91 b1 5d 70 28 c0 74 21 43 01 5f f0 2d a5 10 e6 9e 6b 91 c7 a3 ea 2d a2 b4 b4 82 eb 1f 35 db c6 be 90 42 15 a8 1b 66 e7 a0 8a 5a 93 aa 44 a0 0e 55 a9 f3 a0 68 43 a6 2a 44 2a a0 3c 54 ca 04 22 85 88 d4 74 c2 fe d0 b1 87 be 1e 8a 9b a8 5c 29 38 33 bc 37 4a 6e a6 5d 65 70 7c 44 d6 cc c8 36 db af ee bb 96 e3 e9 69 a8 0a 11 a9 40 0b 89 55 7a 6f fa 19 aa 33 e8 16 45 a0 15 81 fa 7e c2 7c 68 7b c9 54 19 0b e2 50 ea cd 44 32 80 22 39 12 1c ed a9 9b 1d a3 cc e0 b9 51 25 c3 04 ea d4 22 a3 bc 37 80 bb 0e 4f a0 ca d3 db 9b f5 Data Ascii: 72< \Q\|`mfVWKMnW2KC&/ds\|iHs(U]p(t!C_-k-5BfZDUhCD*<T"t\)837Jn]ep\|D6i@Uzo3E~\|h{TPD2"9Q%"7O
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: fe de 8c 5a 15 4d 13 06 55 d1 14 54 64 40 65 ae a7 d2 7e 14 19 12 64 7a 4f ec 84 56 a4 4b 9e cf 75 36 e9 c7 c1 88 01 ce 71 14 26 fb aa 3f cc ad 87 8e 59 7b 98 5b 0f a2 e9 5a 56 99 ee 2b 32 f6 33 5d 4b db 33 59 7d 0f 02 b6 57 ee 7b 43 d7 82 e3 0e 8e 29 0a 63 06 6e c5 c0 24 32 bd cd 97 87 7a e7 e1 72 b3 7a 68 d6 aa 38 a8 2c 36 32 14 a2 e9 27 59 51 15 22 52 95 98 0c 44 44 2a 14 92 17 1b e9 6c f5 3e 8c f7 13 c9 bd 63 b2 00 12 61 cc e0 59 31 a2 f7 70 67 3d 10 ae 6f 57 8f 0f 98 cf 1e d4 c5 46 a6 ad 44 57 37 0b 09 32 4d 65 09 24 4f 21 83 a6 32 80 29 c9 00 a6 a0 8d c4 a7 ef c3 28 0b a3 49 4f 68 1d 8b 30 62 70 8e 33 f4 89 1e 60 dd d1 4a 99 dd 7e b9 f9 ac 2c 36 6b dc 9d d1 e7 db 95 b4 bd 5d df 80 4b 9b eb f5 ed e7 35 6e 3f 49 b8 be 21 e2 d2 e7 db f5 cd 46 5a ac df Data Ascii: ZMUTd@e~dzOVKu6q&?Y{[ZV+23]K3Y}W{C)cn$2zrzh8,62'YQ"RDD*l>caY1pg=oWFDW72Me$O!2)(IOh0bp3`J~,6k]K5n?I!FZ
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 63 a2 65 79 95 62 2a 9b 95 c2 69 98 68 a5 e7 9d fe be ff 1a fb fe f7 07 ee 64 a1 56 f6 6c bf d5 29 9a 6a 39 84 76 b3 70 c8 24 2d bd c5 d7 fb af 09 ef bf 6e dd 2c 80 a8 6a 98 a8 ed c1 1f e6 a1 6e a2 55 67 a8 99 a5 22 69 96 99 66 36 58 fa db af a9 4e 33 a0 3b c3 aa 09 a0 b5 07 0f 79 40 c7 44 9d 41 33 28 62 84 09 fa 44 b9 aa 98 46 ad d2 62 7b fc 7d 9f c6 fd ef 18 1e 00 97 10 3d 74 c3 b6 05 f8 ac 62 a2 75 50 2a 9a 9a 89 12 03 1a 1d 06 4c fa d4 8b 0c f2 d4 32 81 36 4a e9 7d bb ff 9a ea 3d 52 03 17 32 61 4d 63 7b cd 09 da 0d 06 a0 5c 65 40 2f f6 24 3f 15 53 d8 4a ef 6b ea 51 61 0f 2c 97 c3 9c 54 10 12 c6 c3 28 37 35 11 28 ad 6f f7 31 ee 89 28 c6 3d f2 a7 5b 94 8f d8 09 30 ca 8b 16 d1 49 eb 77 d4 fd 3f 42 8a a0 df f9 73 3d 56 30 93 bc a0 29 6a a4 c4 bf 46 ff 13 Data Ascii: ceybihdVl)j9vp$-n,jnUg"if6XN3;y@DA3(bDFb{}=tbuPL26J}=R2aMc{\e@/$?SJkQa,T(75(o1(=[0Iw?Bs=V0)jF
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 36 b2 a2 12 93 63 4c 6f b9 ec cf 1f 9a 55 6b 33 7b 50 ce 6e 69 73 59 1a de 4d 17 1b 19 d8 48 b4 91 41 6b e9 7a 25 e3 66 b5 5d 73 79 b1 96 55 56 88 2e c7 5e 1d 88 b5 20 fe ac 9f 8d ee 71 88 58 58 1b bd ec 20 88 3c f1 37 de 7c 77 0e 16 43 5a dd ae 6f 2f 1f 5a 75 5c dd 7e a1 bb 4b 65 73 fb 05 9f a5 24 d3 bb f5 cd dd 4a fa 74 bb be bd 7c 1f a2 27 f1 ba 14 64 73 d6 8f 03 c0 39 39 df 3d 13 a2 4a f3 d2 c9 92 88 4f 4f 95 c5 94 ab e0 92 bc 5d f0 c7 03 13 f4 80 f9 19 67 ea e6 6c 31 95 25 be 90 01 92 f8 42 06 9f 4a a0 05 5f 5f 4a f2 76 b1 85 c2 f6 7e a0 15 c7 28 88 dd 9f 05 91 93 f1 64 1f fd 6e 20 1c 45 00 f0 c0 4f ce f1 f4 f2 b4 bb 58 3a ae b3 24 a2 13 37 7c 42 b6 ab 92 42 c4 4c 00 cd ba e5 3a c3 d2 e6 4c 21 52 15 22 46 42 55 21 e9 ea d3 e2 f2 6e ab a8 0a 91 ca f6 Data Ascii: 6cLoUk3{PnisYMHAkz%f]syUV.^ qXX <7\|wCZo/Zu\~Kes$Jt\|'ds99=JOO]gl1%BJ__Jv~(dn EOX:$7\|BBL:L!R"FBU!n
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 9f 93 e8 16 43 27 02 e5 4e 08 d5 04 95 b6 09 50 a3 56 2e 2c 1e 75 14 8b 88 8e cc a3 4c 2d 2f 9e 9d 74 b4 32 3b a8 88 1c 0e 00 2f 4b 3a 8f 05 87 a3 15 d5 69 08 8c 52 1c ad 6e 46 1b ad 6a 31 79 56 20 ee 87 10 75 64 66 6c 07 ce d2 d0 ea 46 8b 35 cc ba 60 e8 a5 33 f4 58 3d 0a 6d 01 48 8b aa 74 cc d8 46 a9 30 2a d5 38 8e 1d 41 fd a3 66 db 88 38 32 32 c7 90 46 c5 30 01 ad 65 82 b4 18 4f 89 7c 07 07 31 a2 1b 22 ad 69 26 6d 16 46 cb d0 a2 74 6b 10 15 df 30 b3 c6 00 2c 93 a1 61 02 d5 96 09 54 19 e0 f0 d0 6e 49 88 07 8b 55 d2 6b 99 c9 2b 45 51 33 9b 51 be 15 a4 7b 64 64 4f b7 e7 29 a0 69 a2 de 31 d1 61 00 2c 96 92 c3 b5 38 f5 46 8b da 26 69 82 8a 99 22 15 05 ca 46 35 62 98 16 1d 99 a0 6c f9 36 3d a7 a1 b5 cd 4e b3 4e 55 06 70 47 70 9e cc 73 59 a5 13 c5 e2 b7 d2 c0 Data Ascii: C'NPV.,uL-/t2;/K:iRnFj1yV udflF5`3X=mHtF0*8Af822F0eO\|1"i&mFtk0,aTnIUk+EQ3Q{ddO)i1a,8F&i"F5bl6=NNUpGpsY
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 74 fe 4d 5e 0d 72 33 89 87 ba 49 49 be fd 4e 11 45 c1 62 57 1b 86 d9 4c 60 0d 19 6c 3d 1e 7d 38 75 3e e8 2c 9c 4a 50 14 5a a7 95 44 91 52 94 73 33 8e e8 4f 84 f1 80 ba 89 f6 81 16 e5 d9 9c 01 2e 8f 41 5b 87 fc 0f 3a 13 a7 11 14 06 2a 66 92 3f a9 e6 66 12 31 62 a9 56 cd 70 53 e4 92 8e 58 fe f6 94 7c 9d 81 53 7a 83 fc 58 00 e6 f1 50 2f a7 f1 3f 11 01 21 20 4f a3 89 98 a5 5b 11 b4 42 dc 1e 32 a1 c3 01 dd df 9e 92 cf 92 26 ab 06 f9 e1 3a c3 73 02 a4 f0 24 fd fb 87 fe 2d 6b cf 7f e8 7f cd ca d3 9e cb 82 ba 4a e4 db c4 c4 ae e7 3b f4 81 33 a8 44 7b 0a 72 c4 90 42 d2 3f f4 bf f4 3f 11 24 7a fa f7 0f 9d 94 8b 48 21 02 00 41 45 26 d5 d7 99 90 3e d8 f0 99 42 44 b2 24 43 dd 4b 50 60 3a ff ff cf 45 59 c3 f3 ff d2 9f 9d 44 cf ff 5e 58 7f e8 7f 2f ae e5 a5 ce b3 a3 ca Data Ascii: tM^r3IINEbWL`l=}8u>,JPZDRs3O.A[:*f?f1bVpSX\|SzXP/?! O[B2&:s$-kJ;3D{rB??$zH!AE&>BD$CKP`:EYD^X/
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 73 6d 4b 67 38 d9 e5 0a 87 ed cc 19 a2 83 3d 38 83 22 41 5a 3a f7 5c cb 19 fa 3a 58 fe 70 68 50 c6 4c f1 89 9f 9e 57 74 ba 3f 74 2c d7 e3 3a 03 10 41 e7 79 c2 61 27 5b 14 c5 d3 1b 59 85 c6 1d db f5 38 8b 0e e1 25 6f 38 cc 96 11 61 a5 d1 10 8d ed 41 71 e9 43 db 63 f1 0b 02 87 59 ea 9a 51 2c 79 d9 6c 6b 95 83 46 1b 03 bb b0 3c 7b a8 b3 34 9e 97 b4 cb d7 61 3b 4b 87 11 46 1a 15 53 5c 0b ac a2 f2 1c ce 84 e5 83 04 bb dc 99 46 96 8c 88 8e 93 42 35 62 12 0c a8 98 74 8b 98 b0 6c 54 93 3d e7 ea d0 44 37 3b 87 66 94 9b 42 3d 62 1c 90 55 4c 43 82 b8 63 56 92 bd e4 ca 30 71 98 83 c6 30 85 b2 a8 3d 0e c8 1e 14 92 cd 23 aa 89 ce 73 76 68 02 46 76 8c 28 db 4b 01 75 41 6b 1c d0 c0 2e 22 cf 65 d1 4d 96 6c e7 e4 08 87 86 29 36 7a 00 ed 89 cc c8 8e cd 52 6d 87 ea e3 80 c8 Data Ascii: smKg8=8"AZ:\:XphPLWt?t,:Aya'[Y8%o8aAqCcYQ,ylkF<{4a;KFS\FB5btlT=D7;fB=bULCcV0q0=#svhFv(KuAk."eMl)6zRm
2024-09-27 16:52:49 UTC	536	IN	Data Raw: 08 20 59 4c 0c 80 56 37 91 92 1b 85 56 95 c5 15 d4 d9 e8 a8 6d c2 08 88 ba c7 99 39 32 d1 cc 1f 9d 67 c0 0d fd 78 03 f0 dd 93 d5 78 6f dd a8 ee 1b 80 1f 5d 59 65 40 15 95 32 db 57 c2 8e 09 d4 18 46 01 1d b5 11 50 97 82 ec 1e 9a 47 e9 8c 8a e9 55 c6 e0 fb 7f 32 14 00 50 01 40 c2 5b 57 0e 0b 64 78 df df 3c 59 05 00 62 24 03 50 18 48 06 a0 02 90 00 70 92 01 85 00 40 8d d5 32 01 a3 1c 0a 77 29 c8 b2 91 52 3f 3b 78 c9 96 02 ed ad 2b c9 1f 5f 49 93 40 dd 8f 14 d2 5e 67 b2 2a 02 de 3e 4a b2 47 04 59 81 f7 f1 75 20 03 a0 8f a4 49 a0 ee 47 a2 99 aa c8 1f bb 92 3c f8 48 9a ac c6 69 98 00 8c aa a8 4b 41 a6 8f 28 9d 5e 51 a9 21 ed e7 8f 57 fa 29 e1 c7 af ff 5e 43 df 7f 6a 32 8b d0 de 3e 4a f4 eb f5 fb 2f 4f 1a fc fa fe fa eb 55 c2 f7 ff 5e 7f fc 94 f0 e3 d7 7f af 1f Data Ascii: YLV7Vm92gxxo]Ye@2WFPGU2P@[Wdx<Yb$PHp@2w)R?;x+_I@^g*>JGYu IG<HiKA(^Q!W)^Cj2>J/OU^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49863	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:49 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:49 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 013f239d107c90d5b Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 10088 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=80 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:49 UTC	360	IN	Data Raw: 52 49 46 46 60 27 00 00 57 45 42 50 56 50 38 4c 53 27 00 00 2f ff c0 3f 00 c7 c1 26 00 c0 24 33 dc a1 07 ad 88 4b 0e f8 e6 6e 35 d8 46 b6 ad e4 bb 7f ac 00 1a 20 a6 71 32 aa 61 c8 dc dd 59 47 92 ac e4 b9 e0 f9 90 18 61 12 85 7e b9 b3 77 f3 1f f5 e7 e5 27 f9 05 7c 80 c3 24 9e 90 9e 5f 7d 84 f2 b2 f2 43 3c a1 3c 02 60 90 36 16 fe cb b6 0b 0b d3 1a e1 25 2a 41 1b b4 b7 24 6a cb e6 c4 66 60 83 16 0d 95 51 a7 f0 56 b9 9e d3 c1 8c 1a 47 6f ba 93 d5 c3 2c 8f 78 41 b8 7e 7a 79 e8 e5 76 83 49 ef 24 3a 1b d1 c8 fb 8b 9e 9a 2f 5f d1 11 d3 4c 4c 07 3e ac d4 b2 93 f3 86 8f b3 e7 ac f5 4e a2 73 13 bd 93 e8 dc 84 4c 1a 06 ef b6 b6 c7 69 b4 6d 9b 65 eb 90 2c 1b d3 77 21 70 a6 a9 2a 42 08 e9 0a 12 ae f5 5f 35 cb 72 03 a9 eb ef be 47 f4 7f 02 44 37 68 05 ba 41 97 43 fb 2d Data Ascii: RIFF`'WEBPVP8LS'/?&$3Kn5F q2aYGa~w'\|$_}C<<`6%A$jf`QVGo,xA~zyvI$:/_LL>NsLime,w!pB_5rGD7hAC-
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 3a 58 32 a3 91 12 3d d1 3e 1d 2c 4e 2c 53 ab c3 c6 95 c3 0d 78 a5 5c 9e 75 0a 60 5e 48 55 ba e8 e4 2c c8 38 4d 87 54 f7 44 97 74 6d 31 ba 26 53 81 f6 4f ba 24 de 14 65 d3 01 93 17 1d cb 72 68 bf cc 17 dd d4 a1 a9 05 00 d1 3d d1 4d 21 40 6c 6a 09 fc 04 28 28 75 5c 4b 45 9e fa b8 e8 e8 2c 40 9c 68 6f 4f 74 17 a0 bd 55 d8 00 9d 81 97 28 4b 17 72 da 3a 6c c7 e5 85 f6 ce 16 5d d5 d5 e2 b4 bf 27 fa 22 42 af 4e 96 bb 4e 15 79 56 b2 f3 45 57 d3 00 0b 7f 4f f4 cf e0 ba e3 f2 ac c2 74 41 f2 02 1a 98 2d 3a 3b d7 f5 7b a2 7f 08 76 87 39 7d b0 0d 99 b0 2c a7 06 64 d1 dd b4 86 35 e8 89 6e c5 99 00 02 f8 21 a4 60 3b 60 58 91 a7 00 66 dd 49 75 4d e9 d1 e8 56 00 b1 ce 78 20 00 2d f9 13 a0 c8 4d 97 08 40 16 5d 9d e9 fa 21 62 b3 66 00 88 af f2 12 5c 0d 76 21 cb 5d d7 66 1d Data Ascii: :X2=>,N,Sx\u`^HU,8MTDtm1&SO$erh=M!@lj((u\KE,@hoOtU(Kr:l]'"BNNyVEWOtA-:;{v9},d5n!`;`XfIuMVx -M@]!bf\v!]f
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 35 64 0b 71 a9 bf 6f 6a de 31 db 01 14 b9 05 46 a5 c1 06 18 f4 44 87 e0 0a e5 a1 05 73 07 98 72 ad d5 5f 7e bc b1 df 14 99 76 69 d6 85 2c 77 1a 93 52 0f 83 42 74 b0 bd 46 45 48 70 51 ce b3 b2 2b a8 23 bf 8a 69 1c 00 6b c8 80 66 5b b0 8b 2e b8 bc 10 2d a5 41 3f d5 65 31 b4 ae 9c b9 4e 67 39 5d a3 99 ab 5b b0 47 16 64 5e 90 79 91 95 f3 a2 9c 07 ea de 4b 25 25 af 2c bc 83 ac ec fc d6 78 35 04 8d c9 7c 01 cc 5a 43 91 67 1a c3 cd a0 ef 7a a2 91 e6 05 f3 6b ee 80 9e b7 ef 2d 7a 5e 07 a0 e8 01 45 8f 04 9a 69 b3 28 67 80 f3 5a 43 16 34 a4 68 60 be 00 50 a4 34 24 ad 2b b3 91 34 2f 0c 07 fd 9e 68 63 d3 22 27 0b 66 80 eb 7e 96 17 83 56 9d 5f d7 ec 89 d7 94 80 1e fb 24 01 ab 80 c8 ab a4 28 f7 c8 82 cc 90 17 e5 5a cd 17 95 79 cd 02 12 62 3c 52 e4 fd 5e 2a 1a e2 8a 9c Data Ascii: 5dqoj1FDsr_~vi,wRBtFEHpQ+#ikf[.-A?e1Ng9][Gd^yK%%,x5\|ZCgzk-z^Ei(gZC4h`P4$+4/hc"'f~V_$(Zyb<R^*
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 75 5c 47 e7 a7 84 eb 93 1a 1f 31 4d 96 5f 9c 72 77 8e 96 df 49 39 da 3e 79 9c 0e 19 03 13 bf ae a9 7a fb 77 ec fb 2a 0e 5b 74 4d d7 de 00 cd cc 36 17 33 0e 8c d7 c7 78 3a 4e d6 47 51 e7 a7 64 f2 7d 8e d6 c7 64 ca dd 39 19 f3 bc 53 e3 e3 20 99 6c a7 ea bc 4b 38 dc 18 86 50 74 d3 b1 8a d0 db bf af c2 64 81 d9 c5 a1 89 f9 b0 89 c9 18 13 00 a5 89 77 0c 34 30 d9 04 26 bb 73 32 42 b2 3c c5 5c 1e bf 4f 67 46 bb 73 32 e5 79 97 80 df 4b 95 2c 8f e7 d3 53 a2 76 27 26 c3 4d 16 24 cd 41 45 2b 4a 84 b0 d9 55 40 03 9b da 03 16 9b 66 27 f5 c6 41 24 87 48 18 73 9a 8c d7 13 32 22 39 4a 48 8e 12 72 0a 8e d7 63 4e c1 f5 98 1b 68 e3 a4 29 09 55 f2 8e 4f 3e d7 98 2f 90 5e 01 0c ed 6c ce 96 d0 d0 b0 1e 43 38 e2 10 e0 c8 66 9b d1 14 60 79 b8 e1 88 43 8c 48 80 53 80 1b 4c 01 6e Data Ascii: u\G1M_rwI9>yzw*[tM63x:NGQd}d9S lK8Ptdw40&s2B<\OgFs2yK,Sv'&M$AE+JU@f'A$Hs2"9JHrcNh)UO>/^lC8f`yCHSLn
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 53 18 1c 6d a4 f2 dd 52 47 76 f7 75 5e 46 cb 81 82 dd 45 76 67 77 16 7a b9 b3 2a d6 a0 da 7d 03 c0 69 19 29 bb 5b ea 08 6b e4 0d 35 eb aa 86 15 0b cc ab 16 5e 5e 2b b4 6a d5 ee 7b 79 12 b5 3e 46 78 3a 3d 6d 4f da ee 8e db 75 f4 b5 54 d8 9d a3 e5 e9 78 d6 c3 d3 f6 e9 98 ab d2 69 a9 34 55 6e a3 e5 e9 69 fb a5 a3 ed f7 b9 c2 a2 7b f3 90 85 df fe 44 46 6d a1 be 96 6a 77 8e c0 81 c2 71 10 0d a8 23 70 a0 b0 45 f4 f4 ad 23 9c 77 0a 4f 5b a5 a1 06 47 ad 34 62 46 fa 34 50 f8 5e 46 dc aa 8a d4 c3 96 b2 a0 f9 02 01 f4 51 ff 44 a2 be 77 e0 97 da 22 82 5e 92 c7 75 34 38 a9 68 40 05 9c 77 d1 79 a7 a2 fc b8 1e 60 7b 2e 2d 8f 2a f6 2c bf 06 c0 f7 2e 3a 0e aa ac 87 ad 98 a0 f9 c2 bb f1 2f bc 1c fe 48 50 c7 81 d2 a7 e5 f7 2e ca 4f db 1d 8e 2a da 9d 55 b4 fe 52 c0 71 1d 9d Data Ascii: SmRGvu^FEvgwz}i)[k5^^+j{y>Fx:=mOuTxi4Uni{DFmjwq#pE#wO[G4bF4P^FQDw"^u48h@wy`{.-,.:/HP.O*URq
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: d6 ea e0 b4 f0 de de f9 1f 01 fc fe 43 fe e2 03 1a a9 c4 e3 af df fc f3 62 a2 6a fd b2 2f 32 c0 de 3e e0 de 8f bb fc 0e 00 1e 81 87 f2 23 7e dd dd ba 00 f1 45 a8 c0 9f ea 5f 8f c0 6f f2 d7 e1 39 c2 ea 75 4f 17 71 cf 7e 74 b3 77 ba 6d 9b dd de dd 3f 00 ac 44 f5 5d 7e 87 fb 32 70 57 88 ee 24 fb 77 7c fc fd 87 fc c5 07 34 52 c6 c1 44 7a 85 08 d0 fd 08 fa f0 e7 37 1a 65 30 c0 c7 bb be 94 24 ad 5a 54 dc 88 0e 95 db 87 7b 1c 4c 04 b7 d2 11 40 17 e9 c3 6d 7b 7e 57 dc de dd 3f 80 c1 77 f9 dd 3d 09 de 66 ba eb 59 71 c7 c7 5f 7f f0 9b bf 1e 1f ea bd 3c 47 fd d7 3d 5d f4 fc fa 0c e0 e6 f0 80 fb f6 f1 eb 37 ff fc ba bf 2b 74 ca 3a aa 1f 06 dc de 73 ff 62 a2 6a fd b2 cf bb e2 95 ec 96 77 0f d5 cc ef 70 7f eb f4 85 a6 79 96 16 b7 77 0f 8f 7f f0 9b bf 1e 1f 02 0e 26 5a Data Ascii: Cbj/2>#~E_o9uOq~twm?D]~2pW$w\|4RDz7e0$ZT{L@m{~W?w=fYq_<G=]7+t:sbjwpyw&Z
2024-09-27 16:52:49 UTC	1390	IN	Data Raw: 23 78 22 f9 38 28 79 7f 53 5a 74 cd 4d f8 20 cf f4 e5 16 34 d5 71 ff 53 69 28 44 7f 63 f2 6d 55 81 98 25 85 8f fe 61 1f 3b 1b ff 7d c1 fb 21 96 3c 7e f9 78 e3 7b 3f fa 1b f3 e6 2d 76 b9 ee bf 3f 1f e2 8f 1e 62 1b d2 ab 74 c0 7f 44 ac 3e cb 07 89 0e 14 85 17 ca cd e7 e1 46 54 f4 fc b9 5f f1 f0 19 dd 7c ae 9e 3f fb 41 cf 9f fb 15 0f 9f d7 0d d5 b1 fa ec 01 cf af d1 5f 05 7c b8 17 28 94 14 7c 2f fb 8f 5e 6c b4 fa 1b 93 ef cf b1 e3 cb 5b 7c f3 ae a2 bf 0a bd b7 64 3c 98 f2 f3 f0 ac 5e f0 aa 62 ed 17 e8 ff c2 4b 6f ab 9b cf 43 84 d7 4f 15 63 ff b9 8a 6e de 3e f9 12 ed e9 8d f0 f1 72 78 57 41 7b 7a eb 4d ae d5 f3 fb cd f3 e7 2a 7a 39 f0 e5 2d 7a 79 55 fb a0 a8 ff f9 aa 62 4d f5 17 c0 db 0d b4 7a 79 53 e0 73 f4 b1 52 fd cf 64 b4 61 f2 fa d7 aa 9b cf bd d2 95 16 Data Ascii: #x"8(ySZtM 4qSi(DcmU%a;}!<~x{?-v?btD>FT_\|?A_\|(\|/^l[\|d<^bKoCOcn>rxWA{zM*z9-zyUbMzySsRda
2024-09-27 16:52:49 UTC	1388	IN	Data Raw: 07 c7 75 e4 19 24 1c 5f 80 86 05 f0 1f 20 d0 6d ff 28 5f fc 3e 2e 23 9c b7 03 e0 b4 8e be cf eb 84 b1 3a 2e d7 58 72 32 60 32 e5 e0 98 e0 a4 70 5c 27 63 9e 77 be 64 3a dc 5c 0c ae cd 64 8c 49 2d 4b 47 bf 00 ed ed 80 2f 46 38 7f 91 e4 32 9a 3c 7d 1f 11 ab e3 f7 99 e4 70 70 4c 46 d3 e4 6b fd b4 55 93 e3 7a 3a 0c 19 6d fe 1d 36 18 d7 42 a0 00 ae 0b cb a3 8d ce 3b 05 c4 d0 eb 84 e3 af 65 74 5c 27 24 d5 fa 98 8c 86 c9 72 fb b5 56 3c ae 93 29 bf ff b5 00 d8 0e c4 f8 de 46 cb 93 55 7a 87 e1 71 90 f0 6b 19 9d 39 49 c6 3b cf 26 19 9f be 48 6e cf 93 64 79 1c 5f 06 26 63 0c 79 ad a4 35 43 01 5a d2 6a 70 b4 d1 d3 f1 7c da 2a 3c 1d cf 5f 9c aa 09 4f 3c 2e 7d e3 e4 fb 29 19 25 93 f3 e9 1b cb 44 5d 46 75 a7 a4 6c ac df d1 0b 7a d3 b0 49 6b 10 c0 58 6f 6a 49 37 0e 9f 28 Data Ascii: u$_ m(_>.#:.Xr2`2p\'cwd:\dI-KG/F82<}ppLFkUz:m6B;et\'$rV<)FUzqk9I;&Hndy_&cy5CZjp\|*<_O<.})%D]FulzIkXojI7(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49868	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1298	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 01e8bf7a3637a1d40 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 7992 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=37 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	361	IN	Data Raw: 52 49 46 46 30 1f 00 00 57 45 42 50 56 50 38 4c 23 1f 00 00 2f ff c0 3f 00 3f c1 3a 92 a4 54 e8 1f 45 fe 31 10 98 f3 14 f7 34 18 06 00 50 26 37 1e b9 df 6d 64 ab 89 64 ab e1 07 42 45 85 7f 21 98 c0 00 02 a0 ce 79 e6 3f 76 fe 81 bb 1a 78 8e 17 46 be 58 01 db 6c cb 6c c0 6c 2d 3c c8 29 5d a2 69 c0 b2 08 f4 06 ee 01 e9 01 ee 41 82 1d ad 51 bc 97 4d 36 7e 1f cd 5f 1c 7e d6 7d 4f d3 fd a3 55 ea 28 4e ce eb 02 b5 65 72 4b 82 28 82 a8 82 28 82 28 c4 e0 21 0e 10 03 06 e9 b6 ad 57 69 45 20 d5 00 82 10 40 2b b5 16 2f 49 de ff 19 b9 05 d0 73 fe ee 1d d1 ff 09 08 79 bb 06 00 5a 1d 00 5a 06 00 ae b7 70 f3 d1 11 0c 97 ce 0d 50 1e ad 71 51 38 5f 57 9c 58 9a 45 6d 48 32 2a 59 94 e1 ec dc cc cc 39 5c 81 3e f5 1f 82 e9 9a d8 de 2a cb 5e c8 32 0a 3d ca 3a 9a 70 5c 26 0b c9 Data Ascii: RIFF0WEBPVP8L#/??:TE14P&7mddBE!y?vxFXlll-<)]iAQM6~_~}OU(NerK(((!WiE @+/IsyZZpPqQ8_WXEmH2Y9\>^2=:p\&
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 8d 68 e2 ce f9 0b c7 8b 0c 28 fc cc fe b7 28 0c dc c8 4e cd 3f 51 4d ce 7c 39 35 d5 1a 24 9c b9 f7 5a 83 93 77 fd 09 fc 34 a5 01 50 ac 85 99 a7 c3 24 67 60 93 19 7e 4f 54 f3 3f 56 e4 7a ce 5f 7c 9e c1 cc 4f 3a e9 f0 26 aa 0f 92 99 7e b9 1e 66 5e 92 19 36 51 6f a0 fe 1c 85 e9 1f c3 15 d1 7a 70 9c 9c 98 54 fd 53 31 33 00 c3 55 65 f3 0e 6a 66 aa de c2 e5 83 44 d6 58 2e 72 99 97 ce b1 89 1a 4e 47 56 ba 18 f9 41 58 1a 86 4b d0 43 32 23 53 c3 89 33 36 59 d3 39 5e e4 e7 c3 50 72 4d df 00 ec 14 9b aa c1 ef cc 00 88 ff d5 26 af 24 9b e0 12 35 f8 ed 0c 80 ec 1b 6f e4 f7 9f e6 30 c6 6f c4 43 59 ef fb 7d 5c 7e ff 71 60 ac 03 32 7e 0f c7 0a df a9 01 dc 37 e2 29 0e 87 0d d5 de ca cf 74 8e 3d 78 b5 06 e9 37 d4 d4 d4 d8 f7 53 1a 9b 73 24 fa 54 f0 97 19 f7 3d 83 d6 6d 48 Data Ascii: h((N?QM\|95$Zw4P$g`~OT?Vz_\|O:&~f^6QozpTS13UejfDX.rNGVAXKC2#S36Y9^PrM&$5o0oCY}\~q`2~7)t=x7Ss$T=mH
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 49 ee 07 48 a6 2e 9b 71 3a ab d4 4c b7 54 1e 33 03 d0 43 4d 1f a9 01 0e 99 33 c3 a9 ea d7 bf 3f 08 e7 47 d6 43 b1 1a 37 04 b9 92 e1 09 64 82 69 bc c4 2a 9b 46 e5 33 31 0e 59 3a 4b c7 5e b2 43 66 a6 da 81 1f 7a c9 8d c7 72 35 e5 48 b1 95 d9 f1 45 31 9b e2 d4 6a 63 4d 2f 09 ed 24 64 bd df 1f 72 9e 34 1e 2d d7 7b ec b9 22 7a 13 3c 9f 14 b3 31 a7 d6 5b d3 0f 13 33 33 19 c0 65 5e ee 23 5f 11 9d 3d 4a ae 7c 91 f8 a2 c8 6c c8 aa f5 d6 9c 97 a0 77 98 63 87 aa 59 a5 f1 c9 35 45 e1 fa 17 e1 89 8a cc 7a 36 59 49 b5 57 35 3d f0 60 b3 34 b1 43 d6 f5 b3 03 93 81 70 76 ee c3 72 93 e5 11 88 b6 c7 4b ac c8 cc 00 a9 ea 1f b2 c5 f6 ba 8e bd 30 b1 66 38 e1 f4 1f 1f ce 47 be 0d 3a 83 e3 1b 38 9d 15 c9 cc a4 6a d0 9a 74 21 dd 30 56 7e c8 6c c8 cd e2 3c e3 b3 dc 48 09 80 db e3 Data Ascii: IH.q:LT3CM3?GC7di*F31Y:K^Cfzr5HE1jcM/$dr4-{"z<1[33e^#_=J\|lwcY5Ez6YIW5=`4CpvrK0f8G:8jt!0V~l<H
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 37 47 32 37 72 81 dc f4 0f 0b f1 7c 52 24 33 03 97 cc d0 bd cc f4 93 09 e9 90 bd c4 ca a3 35 c8 56 73 1c 41 f9 06 4a 17 2e 88 81 64 29 5e 62 45 d2 19 d8 d4 c3 a1 97 aa a9 6e 20 3d 7b 49 0f 4c a7 e4 01 00 7f c5 98 db d4 11 45 48 b2 58 c2 ac e4 c4 1e 0f 24 a7 31 de 53 d1 1a 64 6a 72 d2 cb 94 9f b9 22 68 5a 40 f8 92 63 38 6e 29 33 c7 de 92 65 cf 65 6a 2d 83 69 32 b6 af 74 45 c5 83 b1 6a e6 c1 c0 a9 75 74 77 3e 9a c0 17 dd 18 ca 0d 1d 6d b4 54 91 1d 52 b5 c6 69 99 b1 2e 19 a2 56 7d 9b cc a1 45 b2 8e 5b 17 e0 ca 40 f8 2a 26 b8 0d 95 c7 70 f1 bd 5a e7 b4 c4 c0 72 34 46 2f e1 ec 94 6a 1d dd 2d 80 7c f9 93 13 50 6c 87 d1 3b a2 33 c9 18 eb 9e ef ed 31 9f 50 6e 68 85 1e 92 11 a4 fe d2 4c bd 8b 5b 17 e0 ca 05 8a 09 a1 cf a8 7c 5b a9 cd 52 95 1e 9c 01 bd 4d 8f 31 92 Data Ascii: 7G27r\|R$35VsAJ.d)^bEn ={ILEHX$1Sdjr"hZ@c8n)3eej-i2tEjutw>mTRi.V}E[@*&pZr4F/j-\|Pl;31PnhL[\|[RM1
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: c8 8e 39 7a cb 8f f4 c6 a3 01 5c 19 46 b9 33 c9 04 67 fa c9 2c ea e6 12 ab f5 e2 bc 22 b7 b1 cc 4c 3c fa 2a 0d 17 60 96 97 21 c9 e8 60 dd 04 32 49 33 ab e6 35 17 ad de 93 d9 56 81 a9 99 2f 67 a2 29 51 3d 67 5c f1 90 4c 99 7f 3a ab f8 72 8e f7 ab ba ac 27 d9 56 89 a9 2e f2 54 18 17 4e 5e a0 9f 66 f4 c5 f8 72 56 2b 5f 4d aa d2 8d d9 29 c7 d0 6b 54 58 93 af 25 39 58 03 a4 9e ce 17 a8 f7 94 18 eb b6 c5 d2 2e 53 3a 03 a0 98 11 f9 73 a6 6f fd 9c db 93 7a 5b c0 c6 58 4e c8 3d 14 66 b0 9c a6 a5 bf c3 00 12 1f f5 e5 ac de 55 fa 06 58 8c 65 f3 4a c0 66 cc 8f e1 5a 92 9e 4d 38 3f 6e 70 e2 16 b0 82 34 c1 e1 1d f0 e8 ad b4 86 a1 c7 25 98 19 50 cd dc 2b b2 06 b9 89 d3 65 05 d6 0c 6f ae f0 15 39 93 87 3e 2b 2c 90 5a aa 59 55 dc 28 6e 84 e7 d3 72 6e 64 cf dd b6 ca 11 37 Data Ascii: 9z\F3g,"L<*`!`2I35V/g)Q=g\L:r'V.TN^frV+_M)kTX%9X.S:soz[XN=fUXeJfZM8?np4%P+eo9>+,ZYU(nrnd7
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 5b e9 e5 cc f0 61 d2 ab 12 d7 2e f8 bb 09 dc db e0 25 82 b6 c3 95 02 b7 2e e0 4d e0 d1 7e 29 46 ba 9a 12 59 03 c0 d1 47 54 87 ef 36 aa 6a 54 e1 aa b5 5c 8a 99 01 8e 05 d5 34 a0 ed 82 57 fb 25 80 e0 25 d0 76 01 6f 02 f2 35 d0 f5 42 a9 a7 b0 b4 d9 b1 28 43 9f 95 7e 37 55 a3 21 c3 75 57 7a b1 d4 20 8b 2e b5 f0 83 25 58 4f 5a 50 cb f7 52 35 08 01 ae bd 96 4b d1 9a 2c fa a3 00 6f c1 df 4d 54 8f b1 bf 9b c0 5f 13 bc 44 d0 76 b8 52 e0 d6 4d d3 72 0d a8 f9 36 25 58 35 08 b9 05 e8 c5 32 63 cb fa d1 dd 1f 4d d0 3e bb 7b 2f ea 35 8f ee fe 27 82 3b 9a b6 0b 04 ef 7c 36 d3 2a ac 01 78 1f d4 4d 15 f6 37 10 d5 5c ea db 20 11 68 09 7c 89 a6 ad ce 12 8c 44 75 16 40 7b 16 5f 42 12 68 04 c0 16 40 a3 05 28 07 a4 1e 93 1e ab 51 2d df 46 d5 00 e1 56 08 2c 96 a5 88 77 24 f1 bd Data Ascii: [a.%.M~)FYGT6jT\4W%%vo5B(C~7U!uWz .%XOZPR5K,oMT_DvRMr6%X52cM>{/5';\|6*xM7\ h\|Du@{_Bh@(Q-FV,w$
2024-09-27 16:52:50 UTC	681	IN	Data Raw: a0 ad 76 df a3 71 38 bb 2c 4a 46 59 2f 0a 57 aa a5 0f 96 ee c8 f0 0d be 0b 5c 4e 8a 01 da 47 87 6b 00 b6 02 af 76 11 33 ce b5 48 3d 24 a7 79 2e f1 66 d2 83 03 6c b2 5c 7c 81 ea 3d ae a2 79 ae 41 ae 8f 5a 0e 44 59 5e 2e 24 0d f2 62 a1 72 65 d6 00 48 d5 62 f1 05 aa 27 5e 08 11 00 dd df 8d 93 30 8f 13 8a d5 48 3d c0 28 37 36 5f 24 33 00 ec b1 5c 22 ca b9 a6 d4 00 c8 d4 62 f1 05 aa 2f f0 8a 08 60 5e ec 21 1b 2b 57 43 2d 07 c8 dc a0 5c a0 c0 60 be 08 a5 2b 57 64 0d e0 b8 d8 e9 12 ab c1 4a 3c ae 51 f3 0c d0 b5 22 7c b5 bb d3 c8 ce c3 71 c8 96 e1 7a a5 1e 61 6e f2 05 9c 01 6c 2e b9 70 69 8a d5 24 06 b0 c9 62 a7 b3 1a bd 06 d7 47 87 6b 20 d8 06 78 b5 91 ae 71 e2 37 e2 d0 63 54 38 03 38 19 ae b9 1e 2b 8d 5d a0 34 c8 a3 70 58 96 91 2f 1e cd 6a 9c 01 52 b5 d4 19 1c Data Ascii: vq8,JFY/W\NGkv3H=$y.fl\\|=yAZDY^.$breHb'^0H=(76_$3\"b/`^!+WC-\`+WdJ<Q"\|qzanl.pi$bGk xq7cT88+]4pX/jR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49872	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1089	OUT	GET /maps/vt?pb=!1m4!1m3!1i11!2i494!3i735!1m4!1m3!1i11!2i495!3i735!1m4!1m3!1i11!2i496!3i735!1m4!1m3!1i11!2i497!3i735!1m4!1m3!1i11!2i494!3i736!1m4!1m3!1i11!2i494!3i737!1m4!1m3!1i11!2i495!3i736!1m4!1m3!1i11!2i495!3i737!1m4!1m3!1i11!2i496!3i736!1m4!1m3!1i11!2i496!3i737!1m4!1m3!1i11!2i497!3i736!1m4!1m3!1i11!2i497!3i737!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47647 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1061	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 16:52:50 GMT Cache-Control: private, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=43 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:50 UTC	329	IN	Data Raw: 31 30 62 31 0d 0a 5b 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 75 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 30 33 36 39 32 38 2c 37 37 31 36 36 31 38 32 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 78 35 32 62 32 64 30 36 33 31 39 34 36 36 33 34 64 3a 30 78 63 61 37 39 32 30 64 30 33 39 66 37 31 36 64 38 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 33 32 2c 2d 31 31 2c 33 32 2c 32 2c 2d 31 38 2c 2d 32 2c 31 38 2c 31 31 5d 2c 22 63 22 Data Ascii: 10b1[{"id":"tuvwwvuwwwu","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwwu","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"0x52b2d0631946634d:0xca7920d039f716d8","a":[0,0],"bb":[-32,-11,32,2,-18,-2,18,11],"c"
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 32 37 61 61 65 31 33 61 62 30 30 63 33 62 66 22 2c 22 61 22 3a 5b 32 38 36 37 32 2c 2d 37 35 37 37 36 30 5d 2c 22 62 62 22 3a 5b 2d 32 32 2c 2d 36 2c 32 33 2c 37 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 57 65 73 74 6f 6e 5c 22 7d 7d 22 7d 5d 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 77 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 76 75 77 77 77 77 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 30 33 36 39 32 38 2c 37 37 31 36 36 31 38 32 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 Data Ascii: 27aae13ab00c3bf","a":[28672,-757760],"bb":[-22,-6,23,7],"c":"{\"1\":{\"title\":\"Weston\"}}"}]},{"id":"tuvwwvuwwww","zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwvuwwww","base":[519036928,771661824],"zrange":[11,11],"layer":"m@707457737","features":[{"i
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 38 32 39 39 36 34 38 2c 37 37 33 30 37 34 39 34 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 32 36 35 33 35 32 39 39 35 36 31 38 30 37 38 35 36 36 39 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 33 37 2c 2d 32 37 2c 33 37 2c 2d 39 2c 2d 34 35 2c 2d 31 33 2c 34 35 2c 35 2c 2d 34 31 2c 31 2c 34 32 2c 31 39 2c 2d 31 36 2c 31 35 2c 31 37 2c 33 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 4d 69 73 73 69 73 73 69 70 70 69 20 4e 61 74 69 6f 6e 61 6c 20 52 69 76 65 72 20 5c 5c 75 30 30 32 36 20 52 65 63 72 65 61 74 69 6f 6e 20 41 72 65 61 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 Data Ascii: 8299648,773074944],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"12653529956180785669","a":[0,0],"bb":[-37,-27,37,-9,-45,-13,45,5,-41,1,42,19,-16,15,17,33],"c":"{\"1\":{\"title\":\"Mississippi National River \\u0026 Recreation Area\"}}"},{"id"
2024-09-27 16:52:50 UTC	1172	IN	Data Raw: 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 77 22 2c 22 62 61 73 65 22 3a 5b 35 31 39 35 34 38 39 32 38 2c 37 37 32 37 34 37 32 36 34 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 31 2c 31 31 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 33 32 32 37 34 30 37 39 31 36 33 34 32 30 37 30 35 35 37 22 2c 22 61 22 3a 5b 30 2c 30 5d 2c 22 62 62 22 3a 5b 2d 34 32 2c 31 2c 34 33 2c 31 39 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 4c 61 6b 65 20 45 6c 6d 6f 20 50 61 72 6b 20 52 65 73 65 72 76 65 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 3a 22 30 78 Data Ascii: zrange":[11,11],"layer":"spotlit"},{"id":"tuvwwwtvvvw","base":[519548928,772747264],"zrange":[11,11],"layer":"m@707457737","features":[{"id":"3227407916342070557","a":[0,0],"bb":[-42,1,43,19],"c":"{\"1\":{\"title\":\"Lake Elmo Park Reserve\"}}"},{"id":"0x
2024-09-27 16:52:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49869	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	832	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110306 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 10626 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 ETag: 0bc4d0deebef5971a Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=7 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	353	IN	Data Raw: 52 49 46 46 7a 29 00 00 57 45 42 50 56 50 38 4c 6d 29 00 00 2f ff c0 3f 00 af e2 38 92 6d a5 7a ba c3 1d 02 20 ff 48 88 c1 f9 b2 c2 9d 73 d3 60 5c db b6 8b 2f c7 59 a6 00 25 28 48 89 a6 96 6e 3e f3 bf f2 7b 3f b9 8e 24 5b 55 ce d9 a7 38 bf 64 47 c2 24 e2 72 5d 77 fe 83 22 53 24 8a f4 fa e6 f5 0d a1 40 da 31 a3 80 02 40 84 02 40 40 01 a0 97 13 50 00 08 28 00 04 24 00 19 bb f5 ae 8e 95 74 8c 9c 89 36 58 03 c9 76 63 4e 40 64 20 52 25 73 90 39 88 42 f0 08 32 07 99 83 b6 95 c2 ee 82 44 a9 aa 24 a0 aa ea 09 89 a4 d9 e0 14 1b a2 91 0e 5e 02 d2 4d 58 54 51 7c 2a eb af 99 1b 13 37 66 66 cc c2 58 84 33 73 83 9c 5a e4 cf 24 ac 45 58 33 37 fc 47 7d e8 c7 ff 7b 6b cf 3b dd 16 fd 4f a2 ff 28 b2 9b f3 be 38 4c 71 41 83 d0 e4 fe 61 fc 5e c6 ff ed 64 de c1 bd 93 07 07 f3 Data Ascii: RIFFz)WEBPVP8Lm)/?8mz Hs`\/Y%(Hn>{?$[U8dG$r]w"S$@1@@@P($t6XvcN@d R%s9B2D$^MXTQ\|*7ffX3sZ$EX37G}{k;O(8LqAa^d
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 59 d2 9a d9 62 62 8b 15 b5 37 08 32 3c a3 d8 dd e3 20 f1 17 ba fd 5c 51 1f be dc 7c b9 9d 8a 60 6d 66 0f d3 cd 56 92 57 b7 eb bb 4b 09 eb 1b dc 4d a5 e9 dd 9a 6e 57 32 4b ac fb 43 db 19 fa f1 9a 26 2a 7f 2f fd 64 73 b2 1e d0 7c c0 8c 1e 1e 69 fe 48 73 00 04 28 0b 55 91 b1 5d 70 28 c0 74 21 43 01 5f f0 2d a5 10 e6 9e 6b 91 c7 a3 ea 2d a2 b4 b4 82 eb 1f 35 db c6 be 90 42 15 a8 1b 66 e7 a0 8a 5a 93 aa 44 a0 0e 55 a9 f3 a0 68 43 a6 2a 44 2a a0 3c 54 ca 04 22 85 88 d4 74 c2 fe d0 b1 87 be 1e 8a 9b a8 5c 29 38 33 bc 37 4a 6e a6 5d 65 70 7c 44 d6 cc c8 36 db af ee bb 96 e3 e9 69 a8 0a 11 a9 40 0b 89 55 7a 6f fa 19 aa 33 e8 16 45 a0 15 81 fa 7e c2 7c 68 7b c9 54 19 0b e2 50 ea cd 44 32 80 22 39 12 1c ed a9 9b 1d a3 cc e0 b9 51 25 c3 04 ea d4 22 a3 bc 37 80 bb 0e Data Ascii: Ybb72< \Q\|`mfVWKMnW2KC&/ds\|iHs(U]p(t!C_-k-5BfZDUhCD*<T"t\)837Jn]ep\|D6i@Uzo3E~\|h{TPD2"9Q%"7
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 8a 87 11 03 86 56 8c fe de 8c 5a 15 4d 13 06 55 d1 14 54 64 40 65 ae a7 d2 7e 14 19 12 64 7a 4f ec 84 56 a4 4b 9e cf 75 36 e9 c7 c1 88 01 ce 71 14 26 fb aa 3f cc ad 87 8e 59 7b 98 5b 0f a2 e9 5a 56 99 ee 2b 32 f6 33 5d 4b db 33 59 7d 0f 02 b6 57 ee 7b 43 d7 82 e3 0e 8e 29 0a 63 06 6e c5 c0 24 32 bd cd 97 87 7a e7 e1 72 b3 7a 68 d6 aa 38 a8 2c 36 32 14 a2 e9 27 59 51 15 22 52 95 98 0c 44 44 2a 14 92 17 1b e9 6c f5 3e 8c f7 13 c9 bd 63 b2 00 12 61 cc e0 59 31 a2 f7 70 67 3d 10 ae 6f 57 8f 0f 98 cf 1e d4 c5 46 a6 ad 44 57 37 0b 09 32 4d 65 09 24 4f 21 83 a6 32 80 29 c9 00 a6 a0 8d c4 a7 ef c3 28 0b a3 49 4f 68 1d 8b 30 62 70 8e 33 f4 89 1e 60 dd d1 4a 99 dd 7e b9 f9 ac 2c 36 6b dc 9d d1 e7 db 95 b4 bd 5d df 80 4b 9b eb f5 ed e7 35 6e 3f 49 b8 be 21 e2 d2 e7 Data Ascii: VZMUTd@e~dzOVKu6q&?Y{[ZV+23]K3Y}W{C)cn$2zrzh8,62'YQ"RDD*l>caY1pg=oWFDW72Me$O!2)(IOh0bp3`J~,6k]K5n?I!
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: e1 3d 7d 85 e7 67 a3 63 a2 65 79 95 62 2a 9b 95 c2 69 98 68 a5 e7 9d fe be ff 1a fb fe f7 07 ee 64 a1 56 f6 6c bf d5 29 9a 6a 39 84 76 b3 70 c8 24 2d bd c5 d7 fb af 09 ef bf 6e dd 2c 80 a8 6a 98 a8 ed c1 1f e6 a1 6e a2 55 67 a8 99 a5 22 69 96 99 66 36 58 fa db af a9 4e 33 a0 3b c3 aa 09 a0 b5 07 0f 79 40 c7 44 9d 41 33 28 62 84 09 fa 44 b9 aa 98 46 ad d2 62 7b fc 7d 9f c6 fd ef 18 1e 00 97 10 3d 74 c3 b6 05 f8 ac 62 a2 75 50 2a 9a 9a 89 12 03 1a 1d 06 4c fa d4 8b 0c f2 d4 32 81 36 4a e9 7d bb ff 9a ea 3d 52 03 17 32 61 4d 63 7b cd 09 da 0d 06 a0 5c 65 40 2f f6 24 3f 15 53 d8 4a ef 6b ea 51 61 0f 2c 97 c3 9c 54 10 12 c6 c3 28 37 35 11 28 ad 6f f7 31 ee 89 28 c6 3d f2 a7 5b 94 8f d8 09 30 ca 8b 16 d1 49 eb 77 d4 fd 3f 42 8a a0 df f9 73 3d 56 30 93 bc a0 29 Data Ascii: =}gceybihdVl)j9vp$-n,jnUg"if6XN3;y@DA3(bDFb{}=tbuPL26J}=R2aMc{\e@/$?SJkQa,T(75(o1(=[0Iw?Bs=V0)
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 8b dd f3 0b 70 7e c2 36 b2 a2 12 93 63 4c 6f b9 ec cf 1f 9a 55 6b 33 7b 50 ce 6e 69 73 59 1a de 4d 17 1b 19 d8 48 b4 91 41 6b e9 7a 25 e3 66 b5 5d 73 79 b1 96 55 56 88 2e c7 5e 1d 88 b5 20 fe ac 9f 8d ee 71 88 58 58 1b bd ec 20 88 3c f1 37 de 7c 77 0e 16 43 5a dd ae 6f 2f 1f 5a 75 5c dd 7e a1 bb 4b 65 73 fb 05 9f a5 24 d3 bb f5 cd dd 4a fa 74 bb be bd 7c 1f a2 27 f1 ba 14 64 73 d6 8f 03 c0 39 39 df 3d 13 a2 4a f3 d2 c9 92 88 4f 4f 95 c5 94 ab e0 92 bc 5d f0 c7 03 13 f4 80 f9 19 67 ea e6 6c 31 95 25 be 90 01 92 f8 42 06 9f 4a a0 05 5f 5f 4a f2 76 b1 85 c2 f6 7e a0 15 c7 28 88 dd 9f 05 91 93 f1 64 1f fd 6e 20 1c 45 00 f0 c0 4f ce f1 f4 f2 b4 bb 58 3a ae b3 24 a2 13 37 7c 42 b6 ab 92 42 c4 4c 00 cd ba e5 3a c3 d2 e6 4c 21 52 15 22 46 42 55 21 e9 ea d3 e2 f2 Data Ascii: p~6cLoUk3{PnisYMHAkz%f]syUV.^ qXX <7\|wCZo/Zu\~Kes$Jt\|'ds99=JOO]gl1%BJ__Jv~(dn EOX:$7\|BBL:L!R"FBU!
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 2c e9 99 f6 04 2b c4 9f 93 e8 16 43 27 02 e5 4e 08 d5 04 95 b6 09 50 a3 56 2e 2c 1e 75 14 8b 88 8e cc a3 4c 2d 2f 9e 9d 74 b4 32 3b a8 88 1c 0e 00 2f 4b 3a 8f 05 87 a3 15 d5 69 08 8c 52 1c ad 6e 46 1b ad 6a 31 79 56 20 ee 87 10 75 64 66 6c 07 ce d2 d0 ea 46 8b 35 cc ba 60 e8 a5 33 f4 58 3d 0a 6d 01 48 8b aa 74 cc d8 46 a9 30 2a d5 38 8e 1d 41 fd a3 66 db 88 38 32 32 c7 90 46 c5 30 01 ad 65 82 b4 18 4f 89 7c 07 07 31 a2 1b 22 ad 69 26 6d 16 46 cb d0 a2 74 6b 10 15 df 30 b3 c6 00 2c 93 a1 61 02 d5 96 09 54 19 e0 f0 d0 6e 49 88 07 8b 55 d2 6b 99 c9 2b 45 51 33 9b 51 be 15 a4 7b 64 64 4f b7 e7 29 a0 69 a2 de 31 d1 61 00 2c 96 92 c3 b5 38 f5 46 8b da 26 69 82 8a 99 22 15 05 ca 46 35 62 98 16 1d 99 a0 6c f9 36 3d a7 a1 b5 cd 4e b3 4e 55 06 70 47 70 9e cc 73 59 Data Ascii: ,+C'NPV.,uL-/t2;/K:iRnFj1yV udflF5`3X=mHtF0*8Af822F0eO\|1"i&mFtk0,aTnIUk+EQ3Q{ddO)i1a,8F&i"F5bl6=NNUpGpsY
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 64 a4 fb 0e 6d 39 30 74 fe 4d 5e 0d 72 33 89 87 ba 49 49 be fd 4e 11 45 c1 62 57 1b 86 d9 4c 60 0d 19 6c 3d 1e 7d 38 75 3e e8 2c 9c 4a 50 14 5a a7 95 44 91 52 94 73 33 8e e8 4f 84 f1 80 ba 89 f6 81 16 e5 d9 9c 01 2e 8f 41 5b 87 fc 0f 3a 13 a7 11 14 06 2a 66 92 3f a9 e6 66 12 31 62 a9 56 cd 70 53 e4 92 8e 58 fe f6 94 7c 9d 81 53 7a 83 fc 58 00 e6 f1 50 2f a7 f1 3f 11 01 21 20 4f a3 89 98 a5 5b 11 b4 42 dc 1e 32 a1 c3 01 dd df 9e 92 cf 92 26 ab 06 f9 e1 3a c3 73 02 a4 f0 24 fd fb 87 fe 2d 6b cf 7f e8 7f cd ca d3 9e cb 82 ba 4a e4 db c4 c4 ae e7 3b f4 81 33 a8 44 7b 0a 72 c4 90 42 d2 3f f4 bf f4 3f 11 24 7a fa f7 0f 9d 94 8b 48 21 02 00 41 45 26 d5 d7 99 90 3e d8 f0 99 42 44 b2 24 43 dd 4b 50 60 3a ff ff cf 45 59 c3 f3 ff d2 9f 9d 44 cf ff 5e 58 7f e8 7f 2f Data Ascii: dm90tM^r3IINEbWL`l=}8u>,JPZDRs3O.A[:*f?f1bVpSX\|SzXP/?! O[B2&:s$-kJ;3D{rB??$zH!AE&>BD$CKP`:EYD^X/
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f0 de 03 06 7d 2f dc 73 6d 4b 67 38 d9 e5 0a 87 ed cc 19 a2 83 3d 38 83 22 41 5a 3a f7 5c cb 19 fa 3a 58 fe 70 68 50 c6 4c f1 89 9f 9e 57 74 ba 3f 74 2c d7 e3 3a 03 10 41 e7 79 c2 61 27 5b 14 c5 d3 1b 59 85 c6 1d db f5 38 8b 0e e1 25 6f 38 cc 96 11 61 a5 d1 10 8d ed 41 71 e9 43 db 63 f1 0b 02 87 59 ea 9a 51 2c 79 d9 6c 6b 95 83 46 1b 03 bb b0 3c 7b a8 b3 34 9e 97 b4 cb d7 61 3b 4b 87 11 46 1a 15 53 5c 0b ac a2 f2 1c ce 84 e5 83 04 bb dc 99 46 96 8c 88 8e 93 42 35 62 12 0c a8 98 74 8b 98 b0 6c 54 93 3d e7 ea d0 44 37 3b 87 66 94 9b 42 3d 62 1c 90 55 4c 43 82 b8 63 56 92 bd e4 ca 30 71 98 83 c6 30 85 b2 a8 3d 0e c8 1e 14 92 cd 23 aa 89 ce 73 76 68 02 46 76 8c 28 db 4b 01 75 41 6b 1c d0 c0 2e 22 cf 65 d1 4d 96 6c e7 e4 08 87 86 29 36 7a 00 ed 89 cc c8 8e cd Data Ascii: }/smKg8=8"AZ:\:XphPLWt?t,:Aya'[Y8%o8aAqCcYQ,ylkF<{4a;KFS\FB5btlT=D7;fB=bULCcV0q0=#svhFv(KuAk."eMl)6z
2024-09-27 16:52:50 UTC	543	IN	Data Raw: 54 39 92 12 bc 7a 4a 08 20 59 4c 0c 80 56 37 91 92 1b 85 56 95 c5 15 d4 d9 e8 a8 6d c2 08 88 ba c7 99 39 32 d1 cc 1f 9d 67 c0 0d fd 78 03 f0 dd 93 d5 78 6f dd a8 ee 1b 80 1f 5d 59 65 40 15 95 32 db 57 c2 8e 09 d4 18 46 01 1d b5 11 50 97 82 ec 1e 9a 47 e9 8c 8a e9 55 c6 e0 fb 7f 32 14 00 50 01 40 c2 5b 57 0e 0b 64 78 df df 3c 59 05 00 62 24 03 50 18 48 06 a0 02 90 00 70 92 01 85 00 40 8d d5 32 01 a3 1c 0a 77 29 c8 b2 91 52 3f 3b 78 c9 96 02 ed ad 2b c9 1f 5f 49 93 40 dd 8f 14 d2 5e 67 b2 2a 02 de 3e 4a b2 47 04 59 81 f7 f1 75 20 03 a0 8f a4 49 a0 ee 47 a2 99 aa c8 1f bb 92 3c f8 48 9a ac c6 69 98 00 8c aa a8 4b 41 a6 8f 28 9d 5e 51 a9 21 ed e7 8f 57 fa 29 e1 c7 af ff 5e 43 df 7f 6a 32 8b d0 de 3e 4a f4 eb f5 fb 2f 4f 1a fc fa fe fa eb 55 c2 f7 ff 5e 7f fc Data Ascii: T9zJ YLV7Vm92gxxo]Ye@2WFPGU2P@[Wdx<Yb$PHp@2w)R?;x+_I@^g*>JGYu IG<HiKA(^Q!W)^Cj2>J/OU^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49874	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=33163 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9930 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 ETag: 048bd5eff4a918464 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	354	IN	Data Raw: 52 49 46 46 c2 26 00 00 57 45 42 50 56 50 38 4c b5 26 00 00 2f ff c0 3f 00 a7 e2 aa b6 6d a5 c2 dd 2d 01 b4 d2 32 94 23 01 df f2 dc 5d cf 3e 35 dc 06 00 98 26 a9 bb ce de 1f 3a f7 4c 9e 61 e7 02 66 df 1c e2 ee 36 b6 6d a5 ba 07 97 88 dc 42 fa a0 3b aa a1 16 42 22 86 98 ef fa ec de 3b ff c1 56 33 50 6c 15 69 06 23 48 33 d2 0c 8a 40 09 00 c1 8a 40 2b 58 c6 1a fe 2a 80 22 42 c8 fe 44 11 00 b2 3f a0 a5 0f 35 6e d0 fa 40 e7 85 d8 4f 78 3f 21 7e 36 10 24 7c 45 00 ad 5e d4 79 20 23 b5 23 2f 6a 85 5d 2c c2 35 bf bc 93 22 90 42 a2 14 20 46 a0 b6 a0 14 20 17 a0 80 27 86 06 43 e3 1e a5 e4 25 66 e4 a0 f1 c1 f2 18 1c ef ec df af be dc da 3d 2e 8e ef ab 07 fa 7b d2 8f cb f7 ed 0a 1f ae bf 8f eb ff ed fa 7f b9 c1 8f cb ef a1 3d 45 b2 70 e3 8e 64 08 4e 66 09 66 19 31 2a Data Ascii: RIFF&WEBPVP8L&/?m-2#]>5&:Laf6mB;B";V3Pli#H3@@+X"BD?5n@Ox?!~6$\|E^y ##/j],5"B F 'C%f=.{=EpdNff1
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 16 5e f2 25 29 58 7c f9 92 24 f2 32 45 e9 36 3f 18 af 6f 3e b4 f0 ea 03 af 9d db 0f 74 6e d8 c2 ee 3b f2 fd 6b b7 2d e0 f2 f6 03 f9 ee f5 8a b7 1f f8 fe ee 83 bc f9 70 dd e6 87 3b e7 d5 fb 0f 7c fb e1 15 5e 7f e0 fb fb 0f 8e 7b f7 81 f7 ef ee db 52 c3 57 0c 94 35 c0 92 dd 04 8f 13 fc b0 02 d7 e8 80 24 77 af a5 e3 5e 13 2d 37 bf 7b ed b2 2d 00 b8 6d ef d5 b5 e2 4e 1c 74 af a5 4b 87 6d 37 8f 96 bc 0e 5d d2 a1 bc 96 2e 5b e0 ee b5 4b b2 2d a0 8a 02 53 f9 6e 12 3e 36 d2 84 d4 2b 03 d9 b6 04 49 76 48 ba 6d 52 74 48 12 c2 a8 e4 4e 77 6f bf 3f 38 d0 6d 92 ca 53 6d 41 b2 03 1a 41 b3 a0 19 46 2d f2 5a 54 dc 25 54 b5 fe f6 62 01 d2 52 5a 34 32 4a c6 c3 3e c0 69 4f 00 08 13 8a 26 fe 76 e4 25 00 2f dd 88 78 2b 55 ac bc 46 85 76 88 93 6e 4a 5e b2 16 e3 a5 bf 19 13 53 Data Ascii: ^%)X\|$2E6?o>tn;k-p;\|^{RW5$w^-7{-mNtKm7].[K-Sn>6+IvHmRtHNwo?8mSmAAF-ZT%TbRZ42J>iO&v%/x+UFvnJ^S
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 61 28 1a a3 ce 67 f9 c5 de a8 60 28 ce 67 f9 79 26 00 84 dd 84 e1 86 44 15 65 9b f1 d2 d8 1c 95 a0 ab 45 53 b2 f9 cc 7c 1e 17 1d 64 b3 c2 73 25 00 26 00 02 55 9f f4 cb 85 09 e7 33 90 e4 c2 36 13 8f 80 ea 26 54 c2 36 ad 41 2e cf 66 c5 73 35 36 0d 7a cb 22 60 21 05 10 76 13 90 71 a8 ea d1 b2 12 51 f1 e6 c8 86 68 26 50 c2 3a ac 61 31 b3 16 a3 82 f8 dc 06 67 4b 01 a8 28 e9 02 00 e3 d0 af 8e 78 04 d8 08 15 76 13 4a 51 57 50 4d d6 37 0d c5 99 15 30 17 79 a5 a3 a4 0b 00 8c 03 59 09 fd df 03 3f ea 26 88 45 d9 2a 74 c1 d2 6e b9 6f 3a 50 b3 b2 59 2e 2f 75 18 77 13 80 71 20 05 e8 17 06 21 c9 38 0a 03 1f 80 12 00 7d 00 41 18 27 31 2b 06 8d 11 43 23 68 8c 08 20 e9 d6 0d b0 5e 00 8c c3 06 65 76 8b 5e 6e 38 ed 65 d5 e5 a3 20 ee 26 00 49 a2 5a e6 b1 d1 1b 46 04 02 32 d0 Data Ascii: a(g`(gy&DeES\|ds%&U36&T6A.fs56z"`!vqQh&P:a1gK(xvJQWPM70yY?&E*tno:PY./uwq !8}A'1+C#h ^ev^n8e &IZF2
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f0 13 74 37 27 94 cd c9 ce cf 66 c0 a2 5c b0 11 5f bf 38 2f be bb ce fe f7 af 00 be 38 df 7b ae c0 a3 a5 c2 e6 cc 67 c6 ac 94 de 88 ef 2f 9c fd af ae f3 e5 ab 4b d2 d1 df 75 7b 0b c8 8d 41 5a 9b 3f 2a 98 99 e7 4d cb 28 2b d0 df b5 f3 e5 ab eb e8 ef 09 e5 17 f1 e2 bb bb 29 d2 0f c2 7c 9c 00 fe f6 52 e3 82 73 13 b2 12 8a 35 2d 67 98 cb 72 f8 de 76 5f 7c ff 4a 1e 7c ff fa fd 8b c3 af 6d 15 92 4c e2 92 dd 26 26 b6 91 0e 90 f7 55 e3 43 ad 6a f6 8b 96 05 67 b2 41 f2 7c 06 80 e5 3a f9 17 e8 88 4e f4 82 1d b7 0d 44 49 a5 4d 60 8c 90 24 12 c0 17 66 b5 81 71 5d ba 48 16 60 d9 a0 f9 cc 78 5e 4a c0 0b d1 81 20 3a 80 f0 00 15 e6 63 bf ac 30 6a 29 ea f7 ad 36 31 45 cd d1 51 01 e6 05 59 73 b2 59 e1 b2 9c 16 95 6a 51 ad 16 5b 8f b2 a6 9e 69 5f 60 59 20 ed 34 b7 48 50 51 Data Ascii: t7'f\_8/8{g/Ku{AZ?*M(+)\|Rs5-grv_\|J\|mL&&UCjgA\|:NDIM`$fq]H`x^J :c0j)61EQYsYjQ[i_`Y 4HPQ
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 93 31 85 2d e3 bd 83 f1 d1 74 34 b0 c9 73 48 8e f3 93 a9 f1 28 3f 05 14 e9 6b 63 08 40 15 5b 50 d4 a9 45 95 71 02 f8 02 a8 40 6a a7 fd c9 f0 69 75 8a cc f4 a9 ed 68 99 d3 10 f9 de e1 d1 64 d0 b7 e4 64 7a 34 19 f5 07 a3 e9 d8 d0 3f 32 0c a7 43 4e 07 18 f6 c6 fd c1 a1 12 a1 84 bd 16 40 d0 eb 4f 39 19 59 55 3c 18 d2 53 94 a2 4a 2d 1a 59 4d 54 10 94 53 74 ce fe 34 9e 3e fd 93 4f 69 e0 dc 51 14 90 5e c7 65 3b e8 4f 39 ea e3 60 9f e8 03 49 67 d5 9b 1e ec 1c 8c 27 87 7d 60 80 69 af db 9b 4c 73 93 71 3f 3f 1c 4d fa a0 12 d0 a2 03 94 41 07 88 f7 07 47 d3 c9 b0 1e 00 81 a8 78 83 c2 02 5d 4e 0b e7 1f 53 f6 e9 4f 7e 5a 9a fe 71 84 16 9e 6e 61 bd 5c 79 03 f6 01 e8 0e 74 1f 23 b1 86 2b f2 41 6f 34 e9 03 83 d1 18 7d c3 78 32 24 30 99 b2 8f 49 2c 00 dd 69 01 ed 12 6c 01 Data Ascii: 1-t4sH(?kc@[PEq@jiuhddz4?2CN@O9YU<SJ-YMTSt4>OiQ^e;O9`Ig'}`iLsq??MAGx]NSO~Zqna\yt#+Ao4}x2$0I,il
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 88 0e 20 a0 3a 02 e8 00 42 97 f2 98 f3 64 41 7e ef 60 7c 34 1d 0d 8a 8c c3 d1 78 ca 23 0c f6 f7 e2 aa c2 b8 f7 fa ed 6b df c9 8b eb b7 37 09 7a 7d 60 c0 21 f6 77 b4 d5 ce c1 14 0e e6 9f 8a 3e cd 81 57 af 53 51 92 a8 37 98 b2 0f 0c f7 56 2d 74 84 a5 16 25 b5 28 a9 45 61 39 84 39 a5 83 d0 2f 02 10 f4 06 53 4e 86 36 66 8e c6 53 1e e1 70 bf b7 63 11 77 7b fb 07 83 e1 80 b7 6f 7c a7 58 f0 c6 60 1c 0c 07 07 3d a2 8f c1 e1 f4 68 4a 1e 5d 3b 70 e7 ff 7c fa 93 9f fe 99 b7 81 dd eb 54 36 0b 03 c3 b4 db a6 d8 1c cf 42 4b d1 25 00 78 ca 26 1f ef 1f 1e 4d 47 03 3b f3 90 e3 29 8f a6 87 f9 a9 ed 5b df 91 d7 12 00 77 1d 88 b7 e3 c9 d4 fe 88 53 62 38 e8 03 3c 9c 5e 3b d6 bb 4c a5 28 e9 a3 ae 3d c3 51 57 d8 37 2d 44 31 8b 54 29 00 dc eb 4f 8f 26 a3 41 19 33 87 65 df bc 76 Data Ascii: :BdA~`\|4x#k7z}`!w>WSQ7V-t%(Ea99/SN6fSpcw{o\|X`=hJ];p\|T6BK%x&MG;)[wSb8<^;L(=QW7-D1T)O&A3ev
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 50 f9 2e 55 d5 9e 06 10 05 b0 55 46 98 43 a0 cb e7 78 e1 d9 c8 b0 8c 22 40 6e a9 54 6e 14 34 42 c0 53 d5 f8 30 00 a4 00 a0 45 ad 39 24 d2 02 5a 3d 1a 01 b1 59 f6 5d c2 5e 11 79 12 c6 26 20 96 16 88 1e 0b a6 f8 9d 40 64 e3 d1 4a fa 50 04 68 04 98 d7 08 08 80 00 08 23 61 9f 34 24 c5 23 e0 35 09 a1 05 a2 9c 17 e9 10 00 94 1f 28 eb 40 91 52 28 a2 d6 b8 09 01 42 ff 11 80 6e d4 8b 40 15 51 0b 86 5a 14 07 b0 d6 22 bf 05 74 4a 51 9c c9 df 03 e0 c5 b3 80 1a 04 fc 28 d4 c2 96 de 36 42 4a 5d a0 4e 33 83 36 07 b0 57 46 f9 48 00 10 46 15 4b 61 ef 45 aa 01 8b a6 85 be f0 0b e6 b3 a5 21 40 95 d2 14 d4 24 95 ae ed a2 ca 67 e4 f3 ea 22 89 d2 3a 54 f5 9d cb 46 79 21 8a 97 33 2c 0c ba 92 42 5d 8b 0e 7c 25 6a 7b 5e b5 2c f7 cc 10 49 54 19 50 d6 94 cd e6 b2 49 29 8a b3 19 70 Data Ascii: P.UUFCx"@nTn4BS0E9$Z=Y]^y& @dJPh#a4$#5(@R(Bn@QZ"tJQ(6BJ]N36WFHFKaE!@$g":TFy!3,B]\|%j{^,ITPI)p
2024-09-27 16:52:50 UTC	1236	IN	Data Raw: d7 e1 87 54 dd bf 0a df 5f ab 37 e1 2d 9c f7 37 d7 77 f7 4e eb fd 5b f7 f5 87 5d e7 16 2e ff 60 9b 7c bf 49 58 18 b4 6a 80 2f 43 af 3e e8 ba 14 4b 1c 14 b8 24 db fe eb 77 b8 76 4d bc 81 f3 ea 1e b7 0e 78 8f 5b 07 bb 77 f7 37 ce 6b 62 f7 0e 7c db c2 ed b5 ab ee 5c e7 35 5d de b3 cd dd b7 1b 75 2a 73 88 00 28 af a6 b8 bb 05 a4 16 d8 29 c2 a0 57 74 fb 87 f9 36 47 b6 5d d2 69 91 64 db cd b7 dd b6 4b a7 45 33 48 b6 5d cb 4e 9b b0 50 1b 80 73 83 d2 02 64 3d f0 43 ea 8d 03 81 d8 a6 5b e4 98 49 0a 74 da 14 e8 40 74 00 08 74 00 08 c0 eb 40 74 20 d0 c9 8b 0e 44 07 02 1d 88 0e 20 e0 47 81 56 26 6c 02 b2 1c 34 85 57 57 8a ca ad 82 26 a8 a1 45 58 d0 6e a5 6f ef b9 db 72 db 1d 51 b5 16 b5 86 89 80 d2 01 94 00 96 9b 30 37 20 82 16 f5 78 61 23 74 6d 5a 0a 0c 8a 86 a2 c0 Data Ascii: T_7-7wN[].`\|IXj/C>K$wvMx[w7kb\|\5]u*s()Wt6G]idKE3H]NPsd=C[It@tt@t D GV&l4WW&EXnorQ07 xa#tmZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49873	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i736!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94473 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 11380 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 ETag: 0eb78fdfd583b0105 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	353	IN	Data Raw: 52 49 46 46 6c 2c 00 00 57 45 42 50 56 50 38 4c 5f 2c 00 00 2f ff c0 3f 00 07 e3 38 b2 6d 25 7a 1f 87 d1 0c 26 ff 70 5c b6 b0 77 7d 9e 06 db c8 b6 95 fc 8f 3b 84 50 06 39 b5 d3 04 35 78 e4 fa de fd cf 41 00 30 48 83 bb 14 20 10 c9 e8 47 03 bd bb 4d 0e db e6 3f 5c ac 8b 01 72 81 59 89 ed 50 88 94 4c 60 b5 18 07 c3 a8 fc 89 61 fe 6e 36 56 11 47 32 3f 75 05 ca 2c 4f 08 23 ea 54 70 11 b9 3a 41 12 91 88 c0 8a 2c 9f 40 29 94 40 9d b5 72 12 7c 25 f8 49 80 4a 08 12 76 03 79 23 46 0e 04 41 10 04 d9 81 b4 62 23 42 fe 91 e9 75 98 11 87 fd 6b f8 1f 86 ff c9 4b 72 74 4b 71 ec 3a a7 95 73 5e 28 b9 01 1c 03 71 29 94 b0 b8 f9 a8 08 3c 1e 25 f6 38 90 c6 66 fa 80 d2 c6 2e 8f d7 ac de 07 35 ed 34 e7 68 49 49 bb 5c 34 ef 6c e0 b7 81 5e de d1 ac f0 5e fe 5d 6f 5b bf f0 40 b8 Data Ascii: RIFFl,WEBPVP8L_,/?8m%z&p\w};P95xA0H GM?\rYPL`an6VG2?u,O#Tp:A,@)@r\|%IJvy#FAb#BukKrtKq:s^(q)<%8f.54hII\4l^^]o[@
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: d0 ec f7 1a 36 51 b5 4e f4 e1 73 ad 60 02 b0 4a c3 a2 15 48 93 ad d6 09 da 4e 1b cd c5 0d 79 9b 0b 79 70 a1 e8 f5 09 16 ca 2e c1 0c 3a 0c 9a bd fd b2 5d a9 d5 69 cf 79 ac 70 cf 2f b8 57 b2 d1 3b 69 15 cd e2 6a 50 c1 36 e6 63 d0 ea 3a 71 9b cb dd ab 6f 9b 80 35 2c c1 04 82 9a f7 1a 26 36 b7 96 9d 5d 06 7b dd 88 30 0f a5 76 17 a7 4e 31 66 af 5e b5 4d a0 b8 65 22 c8 b9 c5 be a5 e6 e2 07 ff c0 a9 ce 41 b1 dd 6d 0d 58 7c f7 b9 4e 44 15 3b cf 3d bb 60 e7 ab 42 95 9b 82 67 b5 7b ad 06 b7 fc e9 1d 17 79 c1 ce 57 86 4a 8d 4b 06 ae d5 eb b3 b8 f7 a1 4e 7c 34 11 a4 61 93 cd 57 06 a0 52 ad f1 c9 02 d9 44 81 ed 10 2d a7 b6 bd cf 1f f8 58 30 83 d5 3e 71 e6 9c e1 6a 00 47 85 6f c1 76 a5 1c 8c 2f cd 5e 9b c5 fa 9e b8 45 b0 1a fd 93 3e 37 07 56 82 ed 6a 9d 6a 42 ac d6 ca Data Ascii: 6QNs`JHNyyp.:]iyp/W;ijP6c:qo5,&6]{0vN1f^Me"AmX\|ND;=`Bg{yWJKN\|4aWRD-X0>qjGov/^E>7VjjB
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: d9 b6 0b de b4 e6 aa 88 65 87 2a c7 f2 83 4b bc 7b cf cb 8b ed 5f e1 3c 5e 78 a9 9a 3e ec 37 b9 b2 e2 d6 de 34 56 2b 8f 05 e1 83 de c6 1e db f2 ff 97 1d be b4 0f e9 26 d7 ef f8 cc 29 17 3c 9e bf 1f f4 57 b9 1a b3 e3 c7 a8 cf f9 c8 b1 45 45 18 94 95 8f 1f a7 d2 ca e4 35 0d ec 78 f6 e5 24 bd 41 b5 fa f5 06 5d b3 83 0e 51 5c 05 8c 2c c4 f3 6d 27 cd e1 6a c7 6d e2 55 3f ad 4f 73 d7 ef 90 a6 1c bb a9 46 a4 9f cd c2 2a 90 95 74 bc 1a ab 3b 5b 36 79 d4 4c eb 6f b9 eb 4f 38 44 6e 77 c3 88 21 1b 63 f9 ba 7a 36 53 30 83 c6 9a 81 ec 68 9d 28 86 ec aa ee 77 c8 26 6f da a3 88 e3 43 ee 10 1a d1 d9 58 55 70 a6 ab a0 f0 64 a6 4f de ce 74 45 1d 9f a9 d0 47 49 56 53 76 35 bb a9 cb 26 ef 88 1c e1 f4 cb e3 c3 4c 57 de ce 54 bc 39 92 9d b7 0e 94 d9 03 bd 8c 95 c7 a7 07 40 8d Data Ascii: eK{_<^x>74V+&)<WEE5x$A]Q\,m'jmU?OsFt;[6yLoO8Dnw!cz6S0h(w&oCXUpdOtEGIVSv5&LWT9@
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 5c 0d 7b 34 87 af 20 ab d6 5a 58 df 2f 42 f4 f5 fb 25 fd 48 0a 42 d1 6f b8 fc fe 35 7c f1 3d 47 e3 ab 35 01 e9 17 57 c9 73 52 71 4e df 9c 17 f6 5c 61 3b 80 b3 83 8b 1f 5f 09 49 95 43 3f ce 55 4d bf ba 24 95 6f ce 85 e2 cf 1c 7e 89 ad 85 74 7e 15 0d 29 df ce 29 f2 fd 52 74 f9 5d 89 ae 5d 25 41 e3 dc d7 ef b9 eb 3d c7 f7 73 5c 7c ff 16 61 be 7f 8d eb 17 8e ef 5f 55 b6 a7 e8 8f 0b 15 5f 09 59 e6 92 48 85 d3 48 c7 57 d6 9c 6f 81 0a ae 5f b6 70 be fe a7 10 b1 84 cc b7 af e7 c0 0f f6 ca e6 70 49 7b 9f 29 77 f9 e3 1b ae be ea 51 c6 a9 63 fd dc 71 05 35 a6 d2 39 08 c0 d7 ef aa c1 39 bf d2 d5 ef 17 0c ce 2f f1 2d 20 f3 f8 43 9e 83 1b cb 87 1f 17 8e af df 5c 7c ff 06 e0 42 c1 f7 b5 ab 44 ae fe 1e 2c 11 ff 8a b8 ca 33 c8 11 b9 42 22 a5 31 df 58 10 a8 df 2f cf 7f e8 Data Ascii: \{4 ZX/B%HBo5\|=G5WsRqN\a;_IC?UM$o~t~))Rt]]%A=s\\|a_U_YHHWo_ppI{)wQcq599/- C\\|BD,3B"1X/
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: c7 b9 eb ba 3c 54 ca db 35 aa ca 93 c3 e6 f2 2a f2 c5 2c de a6 89 40 10 29 e3 b7 88 16 53 67 47 ca cb 91 7a c6 3c 3f a8 1a f7 79 8c eb 14 8d a8 ac 39 1c b0 26 e5 36 6a f2 a3 90 2a 5f 85 8b f6 b2 da 74 3d 1d 15 08 83 88 b4 f0 c3 51 18 e3 d7 94 f2 a6 ab c7 dc 0b 4c 07 aa e1 98 69 a3 74 9f 22 92 e6 80 6b 92 6c f6 59 56 7d 45 96 b4 da fd c6 92 da 2a ce 81 09 20 ab 8e 1f 30 7b 3d 56 e8 f9 65 f6 c0 89 bf 9e 21 eb 50 a7 ad ee 34 22 69 0e f8 26 69 3b 9e 3a e0 d2 59 bb 87 e1 72 2a 59 c1 ab 44 59 88 28 d1 f1 44 21 a2 f0 18 da 99 92 1a 6b 48 8d 1d 09 a7 5c a3 7f 92 8e 8c a1 b2 e6 a8 e0 f3 b5 7c 5d 0c d2 ee 87 4c 91 9d 7c 5a 4a c3 40 55 b6 51 ad d5 29 ca 4f 71 7e f4 81 66 10 51 8c b8 db ce c8 cc c6 e2 46 16 7d 76 4a 3d 06 68 31 18 c4 e5 53 d6 f6 76 14 2a 3d 0d 31 68 Data Ascii: <T5,@)SgGz<?y9&6j_t=QLit"klYV}E* 0{=Ve!P4"i&i;:YrYDY(D!kH\\|]L\|ZJ@UQ)Oq~fQF}vJ=h1Sv=1h
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 4e 03 b5 0c 9f 95 e7 47 a4 ce 1d 11 a0 31 6f 8f 78 78 49 2a 11 85 0b e9 e9 48 21 8a 2a 44 39 6e fc 6d 84 72 1b 94 0b 1f 1f e5 ae dd 0e bc dd 56 04 fb 30 bc 37 34 f5 f7 7d 09 b8 fd a3 c4 8a 12 46 8e 88 ae d9 5b 7c cd dd 10 a6 c1 b9 9d 40 fb 73 ab e1 f4 df 6f c5 28 2a aa 96 b5 0d 0d 94 d1 54 68 59 4d 05 a0 05 69 ab e8 e1 fa 9d c1 d1 a0 3c 77 42 0a 4d c6 21 42 42 8f 8f 93 48 e9 13 5d d9 c8 d1 74 94 0b 6b d3 f8 04 cf 18 e5 aa f2 13 2f ae 2b 02 65 68 f7 a7 50 ff fd f9 a5 e2 cf ad 52 1a 28 2a 4f 83 45 84 5c 78 00 a2 d2 4f 67 e1 36 6e 94 f3 8c 81 db 7f ac 81 38 d5 0c fc 1c 2a 6a f1 e7 40 57 31 28 01 6a 36 40 45 78 68 45 56 34 3b 0a 8d 5f 66 0f cf 21 1c c4 f5 97 69 87 1d 8f 8f 95 f4 cb e3 c3 63 3c fc f6 3a 3b a0 c7 a3 78 4f 3e 77 5d 11 28 93 bd 94 a5 7f a7 77 2a Data Ascii: NG1oxxIH!D9nmrV074}F[\|@so(ThYMi<wBM!BBH]tk/+ehPR(OE\xOg6n8j@W1(j6@ExhEV4;_f!ic<:;xO>w](w
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: df dd c0 a1 df fd 56 b5 40 f8 b9 4d 21 c5 0a 7a d5 e8 33 6b 44 54 af 4a c6 de 8a a7 5b 3d ef 22 ab 45 89 28 16 68 b6 a9 39 bd a7 9f 19 4d 51 87 f7 9a 52 fc a3 c1 b8 2f 29 ac 0d a5 fb 8c 86 bf 03 4d 4c 64 ee fe 28 83 5f ac f3 ed f8 c9 da 15 7c 2c 7a 19 ac 99 71 a6 b1 67 5d 47 11 8c 64 8d 78 c0 ed 71 17 19 43 68 73 36 50 b6 a1 65 7e de dd ff 36 18 c0 38 bd a5 fb a1 ea 50 85 c3 4a 2d cf b0 f0 db 50 90 19 dc fe 66 86 31 94 ee ef 10 70 dc e2 ce b8 7a 99 a5 75 cf 1a 6c ce 78 58 e3 6d 17 31 d9 c9 fb 40 19 1a 0b c3 7f b7 4a e9 1e aa 71 f7 5b 42 38 ac 54 b3 a6 a1 de 97 c0 85 e2 bf 5f 02 83 4a f7 7f ef 4b c1 76 3d 08 de 42 ca 63 41 9d 57 84 dc 07 c9 ed 77 de 76 11 15 19 c1 d2 06 7f b4 18 3b ec e4 fc bc d3 00 81 70 58 29 d0 0c 22 52 d9 11 fa f0 3e 0c fe 41 bf fd 87 Data Ascii: V@M!z3kDTJ[="E(h9MQR/)MLd(_\|,zqg]GdxqChs6Pe~68PJ-Pf1pzulxXm1@Jq[B8T_JKv=BcAWwv;pX)"R>A
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 37 28 f4 16 d2 1f 30 7b a1 d0 f1 cb e3 cb 61 58 7b 74 5a 37 0a 3f 3e 3d 00 b9 8d 7a 80 27 d9 ad 20 6e 19 30 03 92 5c 4b 61 1e df 68 37 78 3a 88 1e 76 14 97 7b ae 9c c4 71 2e f5 c6 79 e9 1c 82 5e 44 47 33 85 0e 66 a1 d9 61 2e fd 18 3e 7a cc d1 d1 2c 4c 07 39 7a 39 cb 59 01 fe 3d f8 67 0d 11 dc 2f ed 5c fa 33 ee f4 d7 e9 61 c7 ed 9e 23 95 9c 66 68 de 3c 75 58 76 e8 f8 f5 e0 38 17 76 36 a5 f5 37 a7 26 4d a5 b3 58 60 6f fb 18 45 6f 61 d3 e2 03 bf af c0 7e 69 33 89 85 80 a3 97 03 af a4 09 57 b9 f4 d1 e3 83 8c 1a a0 b5 51 4a 07 32 9b 1e 94 f8 30 a4 cd b8 ee ed d3 94 05 0c 15 31 d3 f5 97 76 31 68 b3 57 31 21 0a 0b a4 45 5e a1 8c 25 89 a7 69 8e de 84 44 40 c4 d7 6b a4 ab fa 59 ca df 20 22 35 35 d2 b2 5e a2 0a 20 35 55 b3 fc 2f ed bc ff d2 dc 18 b1 f1 eb a1 e4 9e Data Ascii: 7(0{aX{tZ7?>=z' n0\Kah7x:v{q.y^DG3fa.>z,L9z9Y=g/\3a#fh<uXv8v67&MX`oEoa~i3WQJ201v1hW1!E^%iD@kY "55^ 5U/
2024-09-27 16:52:50 UTC	1297	IN	Data Raw: d8 27 48 15 57 98 22 44 cf ce bc 33 0d 1d 1d 87 66 2c 2b f1 54 e3 d7 d4 aa 20 a4 59 af 83 2a ae 88 12 c9 b5 64 8a 05 f1 8f 06 92 91 3d 06 2f 06 18 d6 2a 53 da 14 cd 42 c4 72 d0 09 bd ce 1e c6 21 9a ed f0 b7 5c 6f db a8 a5 6d ee 56 1c db 9d 0e a2 04 cf 94 04 c3 c3 9d 68 c5 52 81 c8 ce af 28 96 9c 3e 23 3a 0a 11 4d 9f 1d e2 3f 4a 62 a7 c4 dd 89 57 85 c0 3d b8 75 79 62 e4 c5 d0 26 5a 55 86 90 27 88 08 e3 e4 84 c6 4f 4e a2 2a dc 72 5d 4c c1 26 aa 6c d7 b6 3d 23 22 cd c8 78 18 d7 b8 20 5a 4b 40 5e 84 f0 7c 40 ba 53 d9 34 34 3d dc aa f1 dd 8e ed 62 c2 da e6 fe 5e fc 20 22 2d eb 12 63 8b a3 39 5c f4 ba 5c 2a 1a 27 89 88 26 49 8a 3e 9d ae 55 b8 bb ee aa 25 d4 76 eb 14 00 72 63 ac 48 9b 25 d3 73 bf ab 63 17 d3 a5 1d 22 4a cb 8e 41 fc e2 1a 2f 7b 17 56 a4 22 4c af Data Ascii: 'HW"D3f,+T Yd=/SBr!\omVhR(>#:M?JbW=uyb&ZU'ONr]L&l=#"x ZK@^\|@S44=b^ "-c9\\'&I>U%vrcH%sc"JA/{V"L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49875	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 02075248af2d66a44 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 12504 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=68 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	360	IN	Data Raw: 52 49 46 46 d0 30 00 00 57 45 42 50 56 50 38 4c c3 30 00 00 2f ff c0 3f 00 67 c2 3a 92 64 25 ef e1 ce 27 e9 11 03 61 bb 3b 37 97 86 db da b6 95 08 77 08 89 e8 82 12 68 8f b2 e8 83 48 23 87 99 e7 6c 03 80 4d 12 dc 7d d6 95 af b8 91 17 38 24 dd 71 d7 64 fe 43 8d 63 44 e4 27 f2 43 89 1a 30 04 70 89 f1 18 0c 60 22 4c 10 86 fd 54 24 af de 0c 2a 7e fe bc 76 2a 7f 20 8f 14 7a 5f 2e 27 25 0f 03 01 c0 14 01 c0 40 00 b0 a5 ed 69 32 39 df dd 03 0f 39 64 87 37 59 ef d5 0b 8f 07 2e ce 6e 0b dc 52 5c a9 5c 55 04 b1 2c 48 74 79 6d a8 ba 0e f9 6a 3c 06 1d a1 9e 84 8e 50 4f a8 23 14 05 35 bf d7 64 79 20 4a 35 51 62 73 b7 4a 9c ea da 21 71 36 8d 36 10 b6 6b b5 5e 8b ed de 2c e7 a4 1e 65 cd bf 25 ee c6 9d 0c bf 13 70 62 89 8d 40 60 86 7d 39 19 bc ed ff a7 27 cd b6 6d 99 e4 Data Ascii: RIFF0WEBPVP8L0/?g:d%'a;7whH#lM}8$qdCcD'C0p`"LT$~v z_.'%@i299d7Y.nR\\U,Htymj<PO#5dy J5QbsJ!q66k^,e%pb@`}9'm
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 16 36 84 9f 2e 10 e7 c7 a7 67 8c e3 fc 57 0b 00 f2 68 be e0 cb 99 a9 ce d3 a7 d9 51 42 58 61 b0 8d c3 0f e1 80 3a 72 d5 31 b4 f8 d5 88 9f bf f8 a6 0f fe d5 d2 50 ef cf 17 3c 9d 35 00 b8 9c 3e 4d 8f 12 c2 78 0b 07 69 c1 7a d7 26 83 d5 07 f5 d3 89 db 9f b0 cf af a7 8b e9 55 03 80 2b 7e 9a 5e 4f b6 b0 49 0b 4e 77 6d 35 aa f8 c3 88 b4 65 6a 99 6f 8b 1c e6 47 d3 a7 e9 55 03 80 2b 5e 30 26 83 fa a8 dd 2a 2d b8 7f c4 cc e9 0e 01 ab c1 87 21 41 e6 9f bf 6c d3 6d fd 74 00 20 39 ba 7c 9a 5e 36 00 98 4d 17 3c ef 13 86 b5 e1 c4 86 d2 82 af e7 00 66 e9 2e 59 af 06 70 87 8f 8a dd 00 90 47 b3 a7 c5 25 4c 00 66 bc e0 39 2a 60 43 d8 8c 1b 46 54 34 60 96 ee 50 cc 36 e3 6a 72 b0 59 13 7a 9b 83 6a b2 b6 e8 2f fe 7b 00 c8 fe 7c c1 d3 99 09 c0 ec 72 fa 34 bd 96 04 60 35 34 0c Data Ascii: 6.gWhQBXa:r1P<5>Mxiz&U+~^OINwm5ejoGU+^0&-!Almt 9\|^6M<f.YpG%Lf9`CFT4`P6jrYzj/{\|r4`54
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 9b f1 7e ab b4 53 f8 31 5f fd b8 2e 00 0c 8f 16 05 af 83 ab 1f b3 f9 e5 62 96 90 6f a7 f9 23 4b ba d7 6b 31 de 6b 53 16 ba 5b d9 8f 15 bc ab 1f 57 41 f1 03 c0 75 81 e9 1c 00 3f c1 a0 90 72 8e 3e 50 e6 48 99 15 10 1b 58 7d 24 3a ee 1c 46 76 bc df 8a a3 6e e1 e8 c7 14 00 16 30 f2 d3 dc 3c a5 1c 7d e4 48 59 81 a0 13 85 94 39 07 fa 28 53 15 aa a4 e1 68 b7 4a 43 a4 3b 1a db 0c ec 86 6d 3e 15 25 75 3d fb 61 7d 7d b9 b8 34 80 14 c8 32 95 64 19 27 79 bf cc a5 89 17 1f c0 2e ae ec 06 ed b8 2b bd 26 e0 ba 69 4e 40 79 b9 b8 aa 05 e4 7e 78 b0 c9 d3 b2 9f eb f8 3f ab d7 62 af 55 da 95 41 cf 02 38 ba fa 81 e9 b5 22 e3 d1 74 31 9b 83 b6 f8 5e 8d cb 01 85 2a 2f 39 ed 9b 64 b8 0b d9 ee f4 c6 76 18 b6 28 0b dd 95 d1 c0 aa f5 d1 62 3a 0b d8 1d 06 d5 64 44 f5 38 39 32 e5 f1 Data Ascii: ~S1_.bo#Kk1kS[WAu?r>PHX}$:Fvn0<}HY9(ShJC;m>%u=a}}42d'y.+&iN@y~x?bUA8"t1^*/9dv(b:dD892
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f2 c8 bb 75 71 0b d5 8f 89 95 7f 7b 17 e4 e0 bb db 20 ba f9 2e f8 3b 33 7f fd e6 ab 3c 65 f8 b7 77 be 4e 7d be b9 e5 3b f6 fc ef 37 bf 71 23 ee be de 30 7f ff e2 7d 67 02 7f 0f 4c 89 6f b8 63 fe e2 dd de 89 00 06 5f dc dd fa da 28 01 24 8c 66 5d 4f 58 b7 4f 35 97 05 73 58 0b c4 f9 b2 ff 72 2f 3c b1 7c 05 bc 93 25 5e 81 63 af ff ca 2f cb 73 ef f3 f2 f5 05 38 11 04 9f 97 f7 02 30 2c 3f 37 1d 2f 5f 9e 97 17 c2 27 84 39 bc bf 5c fc e5 e5 08 09 10 b7 77 08 18 77 b7 08 6e be 7b fc fd ae 2e 48 37 29 ff cb b7 9a f0 bf f2 97 6f be b8 fb c6 cc fc 45 7c bf 91 e0 ef 81 e4 bb 5b bf e4 e8 67 ed 86 bf dd 7a 7c e7 4b be bb 15 26 28 63 c2 cc a9 4d 4c 00 34 a3 25 33 00 14 25 17 9c 32 73 e8 3f 83 2f 96 b9 e0 e5 eb 69 ea bd b0 f4 1f 96 c7 e2 fe 45 f9 0f cb e8 f3 f2 fc bd c4 Data Ascii: uq{ .;3<ewN};7q#0}gLoc_($f]OXO5sXr/<\|%^c/s80,?7/_'9\wwn{.H7)oE\|[gz\|K&(cML4%3%2s?/iE
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 4c 7e 76 ca a1 6e 13 08 c0 67 3e e6 d3 73 31 b4 38 78 27 eb 58 ef 44 5a 94 a1 41 69 72 83 2b 13 35 1f 56 03 1b b9 8d 6a 43 1f 0a 02 66 e1 c3 3b f5 5e fd 41 c3 68 45 2d 95 dc 89 a8 2c 74 4d 66 e4 6a 6e bc b6 18 54 9b 6e 14 d5 70 07 a4 75 3b 04 02 ea fc f5 59 fa bf 0f 0c 87 1b 6a 9d a2 cb 61 a2 4d c8 8b 8c 22 9d 71 e8 40 45 b5 a3 ab 39 70 c5 16 bd c9 aa 1b 3f 07 1b 5f b3 cf cc 9d 89 75 a6 6a 0a ae 44 fe b8 7c e8 7b 7d 4f ac 06 a3 f1 64 40 ad c3 54 75 8a 23 34 26 45 99 e9 88 9c 4a d4 ca cb 39 30 2d 2d 30 78 df d6 5b ed a7 cf bf 45 c0 00 e0 77 43 26 0c 32 4a 50 dd c5 e9 63 ee f5 5f 5f 5e 4f 45 40 2e 65 16 51 97 a5 a6 e6 b0 2c 34 59 47 b2 59 19 d2 e9 1c 58 48 9b 1e 9c a1 f6 36 aa c6 35 f1 fc af f9 b8 0b b1 ca 74 4c 8d ee 7c 01 2f 5a 9e f9 ea d5 13 3e 07 ad 74 Data Ascii: L~vng>s18x'XDZAir+5VjCf;^AhE-,tMfjnTnpu;YjaM"q@E9p?_ujD\|{}Od@Tu#4&EJ90--0x[EwC&2JPc__^OE@.eQ,4YGYXH65tL\|/Z>t
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 10 5e ff 98 99 63 11 6c 27 ce 68 17 3c 08 ea c1 47 87 22 e5 6c 6c 87 b2 c8 2a 60 40 49 53 46 16 47 74 50 0d a8 a5 7a db b7 2c 22 02 56 a3 0d 19 d3 90 84 f4 c0 e7 17 a7 9e a0 ed 40 72 f7 02 01 40 15 29 75 09 89 33 ac ed b2 22 1f 57 18 92 8e 4d 52 1b 16 b3 39 b8 a4 cd 88 ac a3 b7 bd 7d fb 42 91 a5 d4 e4 8b 87 e3 b3 e5 e3 c5 cb 83 f0 b7 84 44 76 2d 10 f2 e1 b9 4f 4a 7e 10 43 3b 5d 94 9b 49 35 22 95 c6 86 34 36 3c cd 01 4e a8 c7 16 d1 db de 7e fb 4f ca 22 23 f8 e2 05 cf b9 08 f8 25 f7 65 73 02 84 0e c2 2c 74 c5 da 71 e0 bf 9c 9f f8 cc 02 9d e2 d0 d9 a4 67 85 b2 48 b0 19 c9 24 4e 38 a6 30 51 64 43 b6 6a 6f df ed 5b 1a 9a 14 4c f7 b2 06 1b 40 69 66 4e b5 39 d1 c6 34 d3 cc 4a 02 50 90 75 05 59 67 72 2c ce 1e 00 c5 ff 3e 0a bf 4b 12 ce b0 b1 cb 8a 9c 20 b3 90 10 Data Ascii: ^cl'h<G"ll*`@ISFGtPz,"V@r@)u3"WMR9}BDv-OJ~C;]I5"46<N~O"#%es,tqgH$N80QdCjo[L@ifN94JPuYgr,>K
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 93 a0 3e 6e d3 bc 6a 92 65 91 34 64 64 df 1b bb 0a 4d bd c3 ca f1 8a 1c b7 78 9a 03 b3 05 6d a7 2e c1 9c 68 66 4e b4 59 49 84 e2 fe a1 ef 33 b3 41 81 8c da 6d 66 18 b8 3a 6c 2a 98 61 56 68 81 de b0 61 44 52 d9 28 69 38 a8 5c 6f dc a5 16 e5 62 0e 5c a2 03 75 09 6a 19 88 fc 7c f9 7a 9e 0b f8 84 38 c5 36 15 0c 2b 57 18 98 54 c1 30 85 19 b5 1f 36 41 db 24 a8 0f 2a e7 ec 2a b3 ba 9e ce 81 45 d9 91 48 b7 41 20 f0 7c 76 f1 7a 7f 26 7c 92 d8 4a 46 c6 9e b3 c9 bb a1 60 86 59 4b 07 6b 27 a1 69 e2 6e 44 2b 37 a9 d5 e5 d5 1c b3 29 75 04 ed 10 88 e7 13 bf ff fc 6f 7f 5b 52 9b c6 ce 70 50 53 05 c3 14 a6 e4 70 60 91 58 28 59 db 54 ee c7 34 d8 0a 9f ff 7d 6f c4 59 bb a4 2b be c0 f3 c3 0b 9f 49 b1 ad 34 34 0c ab 2d ae 08 28 98 61 d6 d2 c5 c4 04 02 cb e6 94 ea 87 5b 40 ef Data Ascii: >nje4ddMxm.hfNYI3Amf:laVhaDR(i8\ob\uj\|z86+WT06A$*EHA \|vz&\|JF`YKk'inD+7)uo[RpPSp`X(YT4}oY+I44-(a[@
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f0 d6 c4 a1 61 5c 61 40 80 96 64 fb 5e 75 a4 be 9e 54 00 56 16 e5 d3 6c 0e 2c ae 09 51 c6 54 3f a8 3a 38 ec 39 08 c4 c5 bf 8f 27 cc c7 2c fd 9d 89 ca 22 45 4b 2d 09 fb 96 aa f6 5e 01 1b 02 12 58 0f 3b b4 9e 54 00 46 d4 9c 2f ae e6 c0 94 09 32 0b a9 de ab 3a 39 ee b9 78 7c 36 f7 77 27 2f 4a 6a 9b 11 de 6c 50 db 54 c0 3b 21 52 56 bd 49 87 06 55 7d 45 58 19 e4 f4 72 0e cc 16 09 29 26 f3 a6 1b 18 af 5b 41 00 f0 99 01 ec 4c 54 16 49 1b 05 c2 9e 0d 6a 18 56 13 02 94 b4 1a 54 1d 15 08 e0 ff 66 f6 7f 03 cc bd da 6c 3a 07 b0 38 a2 44 a3 71 dc 11 4c d6 ad 10 30 eb 8c 03 66 da 95 bc 28 a9 6d 46 50 fb d6 06 0c 47 04 24 b0 3e ec ca 71 e8 e1 e4 e8 9a c5 1f fa 18 fd c0 27 5c 2f e6 00 a6 b3 30 55 d4 f8 5e 75 76 b2 69 05 20 2d 72 bd d5 68 3b aa e0 a4 8d d4 84 37 3b 65 c0 Data Ascii: a\a@d^uTVl,QT?:89',"EK-^X;TF/2:9x\|6w'/JjlPT;!RVIU}EXr)&[ALTIjVTfl:8DqL0f(mFPG$>q'\/0U^uvi -rh;7;e
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: bf 57 5b df 10 10 c6 36 eb aa a1 ad 46 5b 59 16 79 03 86 9d 38 30 a5 2e 5c 4a d0 36 4b 06 80 28 ad 49 65 35 80 a5 82 c5 70 5b 93 0d 01 61 56 44 4d eb 49 57 c0 45 d9 84 83 2e 0c f6 3e 18 28 5d 83 55 cf 26 45 73 af da f2 90 09 08 b3 88 8b a8 61 52 75 06 25 87 4d bd 71 57 ca 42 7d 1c d0 8a a0 ec 6c 25 5b 0c b6 33 7a 27 00 61 16 11 b8 88 4c e3 2e 15 aa 09 bd f1 f6 56 06 0e 3f 10 a4 11 74 e8 28 09 9b 7a 93 6d 8c 57 64 4c 24 01 88 8a c8 70 50 81 bb 92 5b a1 37 dc d6 84 de f6 f9 53 51 d2 47 12 66 a1 26 b7 71 82 e6 4d e5 fe 70 43 e6 44 91 31 2a a2 da ea 60 ac 12 46 d4 39 60 35 de ce 81 29 ff 50 10 a5 ec 28 89 2d 0e dd 1d f4 c8 9c 28 6a 8c 8a 08 cd ac 52 dd 36 63 f3 9b 65 c1 89 1d b0 99 6c 63 43 fb b5 ec 63 08 1b a0 32 37 61 42 cd ab ca fd 88 cc 32 21 cb a8 88 9a Data Ascii: W[6F[Yy80.\J6K(Ie5p[aVDMIWE.>(]U&EsaRu%MqWB}l%[3z'aL.V?t(zmWdL$pP[7SQGf&qMpCD1*`F9`5)P(-(jR6celcCc27aB2!
2024-09-27 16:52:50 UTC	1024	IN	Data Raw: 86 9a 65 42 80 2f 1e ef 8f cf 5e e1 e5 f7 cb 47 e1 33 21 d4 29 08 aa 41 c3 9c 86 26 1d 77 43 35 48 d5 06 79 c1 74 68 33 5e d3 16 a3 2d 81 1c 6a 69 d3 9b b8 1b 35 45 19 d5 e4 ab 80 af 5e ce 3d 1c 9f 89 80 10 66 92 00 68 b4 08 53 6a 40 c7 d0 4a 16 8c a1 c5 80 76 36 2d 52 07 21 93 f5 c6 d9 64 d8 10 65 a1 a1 ff 22 54 16 e4 4b e9 09 80 00 2d c9 2e 31 49 f5 51 a0 e0 7c d3 70 b8 a2 8f 45 4b 3b b8 39 1c ac a8 31 ca 42 32 88 d7 13 3f 89 fc fb 63 9f 02 00 51 8a 16 dc 80 2d 84 5b 90 3a 73 90 14 e5 da 74 d0 a3 8f 25 64 b2 5f 39 19 91 65 94 85 04 04 0c 16 a7 cb be cf e2 a5 ef 53 3d 0b 4d 89 b3 a4 5d a1 1c 49 9d b0 8a 62 dd 2e 2c 8b 84 3e 40 27 49 d4 62 e3 64 65 c1 59 48 f0 05 80 50 f1 d9 f2 e2 f8 fe 41 18 b4 22 33 37 24 ad 74 ab dc 59 1a a3 9e b6 43 5e f0 c7 14 27 68 Data Ascii: eB/^G3!)A&wC5Hyth3^-ji5E^=fhSj@Jv6-R!de"TK-.1IQ\|pEK;91B2?cQ-[:st%d_9eS=M]Ib.,>@'IbdeYHPA"37$tYC^'h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49870	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	957	OUT	GET /maps/vt?pb=!1m4!1m3!1i13!2i1976!3i2945!1m4!1m3!1i13!2i1977!3i2945!1m4!1m3!1i13!2i1976!3i2946!1m4!1m3!1i13!2i1977!3i2946!1m4!1m3!1i13!2i1978!3i2945!1m4!1m3!1i13!2i1978!3i2946!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e3!12m1!5b1!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=47349 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1061	IN	HTTP/1.1 200 OK Content-Type: application/json Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 16:52:50 GMT Cache-Control: private, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=46 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 16:52:50 UTC	329	IN	Data Raw: 31 34 61 63 0d 0a 5b 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 74 74 75 22 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 33 2c 31 33 5d 2c 22 6c 61 79 65 72 22 3a 22 73 70 6f 74 6c 69 74 22 7d 2c 7b 22 69 64 22 3a 22 74 75 76 77 77 77 74 76 76 76 74 74 75 22 2c 22 62 61 73 65 22 3a 5b 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 5d 2c 22 7a 72 61 6e 67 65 22 3a 5b 31 33 2c 31 33 5d 2c 22 6c 61 79 65 72 22 3a 22 6d 40 37 30 37 34 35 37 37 33 37 22 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 35 35 39 36 35 37 37 38 34 38 34 33 30 32 35 35 37 33 35 22 2c 22 61 22 3a 5b 30 2c 30 2c 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 2c 35 31 38 31 31 33 32 38 30 2c 37 37 32 30 31 34 30 38 30 5d 2c 22 62 62 22 3a 5b 2d 31 31 Data Ascii: 14ac[{"id":"tuvwwwtvvvttu","zrange":[13,13],"layer":"spotlit"},{"id":"tuvwwwtvvvttu","base":[518113280,772014080],"zrange":[13,13],"layer":"m@707457737","features":[{"id":"15596577848430255735","a":[0,0,518113280,772014080,518113280,772014080],"bb":[-11
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 34 34 37 31 38 30 30 33 39 35 30 31 33 30 38 37 37 39 39 22 2c 22 61 22 3a 5b 2d 31 39 34 35 36 2c 37 34 37 35 32 2c 35 31 38 30 39 33 38 32 34 2c 37 37 32 30 38 38 38 33 32 2c 35 31 38 30 39 33 38 32 34 2c 37 37 32 30 38 38 38 33 32 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 31 30 2c 2d 32 32 2c 31 31 31 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 54 61 76 65 72 6e 20 47 72 69 6c 6c 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 37 30 38 35 37 37 38 34 31 36 39 34 30 36 32 39 34 22 2c Data Ascii: \"}}","io":[0,-13]},{"id":"4471800395013087799","a":[-19456,74752,518093824,772088832,518093824,772088832],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,10,-22,111,-4],"c":"{\"1\":{\"title\":\"The Tavern Grill\"}}","io":[0,-13]},{"id":"170857784169406294",
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 32 36 38 33 30 35 36 36 31 39 36 30 33 36 34 39 38 22 2c 22 61 22 3a 5b 31 31 33 36 36 34 2c 31 31 33 36 36 34 2c 35 31 37 39 39 33 34 37 32 2c 37 37 32 34 33 34 39 34 34 2c 35 31 37 39 39 33 34 37 32 2c 37 37 32 34 33 34 39 34 34 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 61 72 67 65 74 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 33 37 36 35 38 37 31 36 30 32 37 32 37 34 33 38 35 33 31 22 2c 22 61 22 3a 5b 33 35 35 33 32 38 2c 34 35 30 35 36 5d 2c 22 62 62 22 3a 5b 2d 32 32 2c 2d 32 30 2c 32 33 2c 2d 32 2c 2d 33 32 2c 2d 36 2c 33 33 2c 31 32 Data Ascii: 26830566196036498","a":[113664,113664,517993472,772434944,517993472,772434944],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2],"c":"{\"1\":{\"title\":\"Target\"}}","io":[0,-13]},{"id":"3765871602727438531","a":[355328,45056],"bb":[-22,-20,23,-2,-32,-6,33,12
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 30 30 33 33 34 35 37 35 31 22 2c 22 61 22 3a 5b 30 2c 30 2c 35 31 38 37 33 35 38 37 32 2c 37 37 32 32 35 31 36 34 38 2c 35 31 38 37 33 35 38 37 32 2c 37 37 32 32 35 31 36 34 38 5d 2c 22 62 62 22 3a 5b 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 31 2c 2d 32 39 2c 31 31 2c 32 2c 2d 31 32 37 2c 2d 32 32 2c 2d 31 30 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 43 6f 73 74 63 6f 20 57 68 6f 6c 65 73 61 6c 65 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 31 38 33 34 35 38 34 31 37 33 33 30 31 34 34 38 36 39 22 2c 22 61 22 3a 5b 31 30 31 33 37 36 2c 2d 37 33 37 32 38 5d 2c 22 62 62 22 3a 5b 2d 38 33 2c 2d 32 32 2c 2d 39 2c 2d 34 5d 2c 22 63 Data Ascii: 003345751","a":[0,0,518735872,772251648,518735872,772251648],"bb":[-11,-29,11,2,-11,-29,11,2,-11,-29,11,2,-127,-22,-10,-4],"c":"{\"1\":{\"title\":\"Costco Wholesale\"}}","io":[0,-13]},{"id":"1183458417330144869","a":[101376,-73728],"bb":[-83,-22,-9,-4],"c
2024-09-27 16:52:50 UTC	801	IN	Data Raw: 6c 65 5c 22 3a 5c 22 4d 65 6e 61 72 64 73 5c 22 7d 7d 22 2c 22 69 6f 22 3a 5b 30 2c 2d 31 33 5d 7d 2c 7b 22 69 64 22 3a 22 31 34 32 34 30 36 35 32 38 30 38 37 31 34 34 38 35 34 30 33 22 2c 22 61 22 3a 5b 32 30 38 38 39 36 2c 2d 32 35 36 30 30 5d 2c 22 62 62 22 3a 5b 2d 31 31 39 2c 2d 32 32 2c 2d 39 2c 2d 34 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 6c 65 5c 22 3a 5c 22 54 68 65 20 48 6f 6d 65 20 44 65 70 6f 74 5c 22 7d 7d 22 7d 2c 7b 22 69 64 22 3a 22 31 37 33 30 33 32 31 34 30 30 30 37 30 30 33 31 36 34 32 31 22 2c 22 61 22 3a 5b 31 36 39 39 38 34 2c 33 38 39 31 32 5d 2c 22 62 62 22 3a 5b 2d 31 33 30 2c 2d 32 39 2c 2d 31 30 2c 2d 31 31 2c 2d 31 33 30 2c 2d 31 35 2c 2d 39 2c 33 5d 2c 22 63 22 3a 22 7b 5c 22 31 5c 22 3a 7b 5c 22 74 69 74 Data Ascii: le\":\"Menards\"}}","io":[0,-13]},{"id":"14240652808714485403","a":[208896,-25600],"bb":[-119,-22,-9,-4],"c":"{\"1\":{\"title\":\"The Home Depot\"}}"},{"id":"17303214000700316421","a":[169984,38912],"bb":[-130,-29,-10,-11,-130,-15,-9,3],"c":"{\"1\":{\"tit
2024-09-27 16:52:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49876	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0929c0f80c054359c Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9480 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=35 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	361	IN	Data Raw: 52 49 46 46 00 25 00 00 57 45 42 50 56 50 38 4c f3 24 00 00 2f ff c0 3f 00 0f c2 b8 b6 6d 17 f7 cb 99 99 a5 31 3d ab 83 99 d1 cf f9 bf 36 18 47 92 ad 04 77 89 81 e2 46 fe 19 71 fb ee 2e 0c 23 49 52 72 bc e7 40 11 01 f9 47 f5 ee 0a 37 ff 41 15 93 db 28 7d 90 7f 61 26 82 fe f5 59 aa 53 42 76 29 76 f1 1d f0 1d f2 1d f0 2d aa 92 d0 df a8 ed 15 f6 7b 53 03 52 47 c1 08 c9 11 94 aa 1c a8 ec 29 34 4a 0e 5b f6 54 72 42 89 c0 e7 41 84 c0 be 17 b4 08 c3 b4 17 b0 ed 5c 33 81 6e a0 b6 f6 47 f1 f3 de c8 98 46 eb 46 9b 46 eb aa 66 b7 aa a7 30 4a c3 c2 b5 a1 f8 c8 e7 90 cb 65 bd 27 7b fd 73 70 55 18 59 28 d1 71 99 84 30 69 5d fd 44 93 32 bb c1 eb fc 1e 06 e9 da b6 59 49 c5 08 04 53 1a b2 71 0b 93 1a ca a4 e6 96 56 66 c6 5a 75 fe 87 c5 56 d4 d6 df f7 8b e8 ff 04 68 a5 95 Data Ascii: RIFF%WEBPVP8L$/?m1=6GwFq.#IRr@G7A(}a&YSBv)v-{SRG)4J[TrBA\3nGFFFf0Je'{spUY(q0i]D2YISqVfZuVh
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 1f 7a 50 c3 ef 29 a2 6f 05 4c 49 ab 8d d9 b7 d6 e0 aa 02 20 67 d6 a0 e9 cf 9f 86 a1 36 48 79 9c b6 1b 44 4a f4 7d 47 d4 20 b3 2b 30 c2 f0 85 64 a6 c3 8b 7b d7 c3 8d c7 f1 95 52 d4 ef 48 01 fe bc 87 f8 46 5b 41 f8 87 34 85 fe 7c e3 9e e1 61 1f aa 4a 8e 6a 34 a6 df 0c c6 fe cf 54 d7 f4 3f f6 3e 4a e1 4f d4 f0 47 02 c3 17 92 99 0e bf da e1 76 b7 bf 4e 4c f9 fe a3 a4 33 d4 1f 02 51 46 5b f9 f3 03 22 05 39 66 63 fa ad d8 df 7f f0 03 8d 7d d3 4f 18 7d df 99 3f 7f 1a 77 6f 10 c3 17 92 00 1c f0 6b 1e 8f 63 f7 4a 85 df 3f fb 36 80 e8 5b c1 c3 0f a0 7f 47 ca 8c 1a ca ec bb ad e0 27 cc 69 d0 fd 0f 29 e1 9f 06 4d bf 35 46 fb 86 12 7d 1b 3f 7f 54 23 78 12 c3 97 94 c3 af fc 74 3d de 5c 09 b5 ac 82 f6 fe e7 fb 8f aa 44 df 0c d0 a7 7f f0 3d 63 33 6a b0 3f 3f 11 40 7f b2 Data Ascii: zP)oLI g6HyDJ}G +0d{RHF[A4\|aJj4T?>JOGvNL3QF["9fc}O}?wokcJ?6[G'i)M5F}?T#xt=\D=c3j??@
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: b4 9c b6 ae 1c 4e 0d 3a 1d ee a8 fd 4f 39 10 c3 ea df 92 99 b7 05 f1 76 ca 61 e7 46 39 d3 30 f7 39 9f f2 67 b9 76 7e 6d 14 0b 0a f0 79 cc 69 fd 53 80 f6 c1 a2 53 e3 ae 10 fd 5b 31 e3 c6 6c c6 7b 5e bd 23 b3 39 5c 3b 33 c2 94 88 52 14 e6 3e d7 e7 35 d1 15 f6 91 01 8d 29 5f 2b b0 e5 5f 25 b5 3a dd d1 ea 84 03 a1 f9 77 f1 97 d8 8d d9 8f d7 b5 c8 95 99 0e af 6b 19 7c 24 27 c0 52 3e 92 57 45 83 d2 4a 4e f4 f7 55 39 9c ee a8 7d 4a e8 ef 3c 75 3a 30 fa 64 c6 6d 09 77 f1 8d 80 02 7d 31 67 0a b0 b0 14 0d 4c c1 02 3a 58 73 7e d7 69 dd cd 17 0d 62 4d 4b 5f 30 e8 8b 5b 13 ad 63 b7 3e ce 65 81 29 80 06 28 00 d3 00 28 68 3f 86 dc a0 8e 78 f2 4c 83 38 48 25 22 53 25 c2 8d 8d b7 d3 5b 91 b6 b4 c2 db f1 fe 85 a4 00 10 c8 34 bf e6 de 39 d6 e3 fd 2d 69 17 5b ef f6 e1 9f 9e Data Ascii: N:O9vaF909gv~myiSS[1l{^#9\;3R>5)_+_%:wk\|$'R>WEJNU9}J<u:0dmw}1gL:Xs~ibMK_0[c>e)((h?xL8H%"S%[49-i[
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f4 10 e8 09 60 c0 81 a0 40 57 02 ce ff 8e 23 b3 bb 40 20 80 90 03 83 02 32 fd 7f e3 c8 a2 5d 01 e0 83 03 4e b7 ef 67 51 57 02 ce 7f 0b 6d a7 b2 f8 50 20 c0 2a 25 81 7e 46 00 f4 fe 67 36 61 b1 17 81 a0 db 77 39 00 09 f8 02 08 fa 2f 81 40 d0 fb 7f 21 59 7c 28 d0 95 b3 a8 40 d0 97 e8 8b 74 e0 fd ae 22 f7 52 02 d1 93 08 df 72 82 8c 20 03 bd eb e7 fe 06 fa a2 27 81 e9 7a 90 d1 15 00 02 5f 64 7b 57 6f 3b fd 0d 04 42 66 fa 1d 0e d9 0d 52 05 ff 53 a2 75 b1 9e c8 59 8d 3c de 13 65 af de e6 46 d1 b6 98 2f 28 eb e5 3d 70 86 a5 f8 ff ca ba 90 c8 43 5f 38 72 f8 5f 87 51 08 0c 8b 05 ff 5b 4f 1f 5c 62 58 c8 e7 86 ca 60 fc 5f 98 44 0f f3 a9 69 10 0a f4 e5 8b 9f 21 42 8e 7e 77 98 37 f0 ee 18 f4 a5 a5 fe 47 18 2c ad 03 0d b2 a8 08 44 90 11 f4 38 30 24 5f 00 c1 c0 bb 23 6a Data Ascii: `@W#@ 2]NgQWmP *%~Fg6aw9/@!Y\|(@t"Rr 'z_d{Wo;BfRSuY<eF/(=pC_8r_Q[O\bX`_Di!B~w7G,D80$_#j
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 9e 50 19 b7 0e 9e f0 ae 18 af bf 3d 73 f3 c0 e6 44 d4 c2 e2 8b 56 7a 3b af 97 f7 36 12 e8 78 c2 e3 ee c0 64 c9 6b 4a 65 8b a4 55 c4 eb 00 bc 96 1e ff 4d c0 9e 51 9e c1 00 e8 87 e4 b3 a5 5b 9b 3c f8 39 ef 00 06 04 22 78 06 3b 7e 36 ef 98 81 c5 e7 89 19 19 5e 6f 40 1e bf ae b5 01 9c 0b 83 1b cd dc 2c 40 65 ad cf e4 a0 b3 c7 70 5d 00 dd ac cc 40 00 1d 6e b2 56 82 55 c3 63 c9 57 8b 99 dc eb f9 c1 c0 e3 57 b7 46 80 83 0a bc 81 5b 1b c0 9e 45 19 26 c3 6b f2 b5 60 40 43 6f 47 05 90 f1 96 81 61 4f 3a 1c 06 6b 1d 96 4c c5 6b 9b 79 be 08 06 1e bf c6 b5 02 2a 18 88 a0 53 1f 20 9a d9 1c 50 f5 8f e4 6b 45 44 47 1c f4 69 81 6e 6a f4 0e 04 fd ae cc 76 0c 05 00 53 80 bb 01 79 fc 4a 5f 5a 20 00 bf 46 70 67 11 87 3a 4f f2 8f fa 73 29 02 ba b2 a0 d1 68 1d 4e 09 68 a5 33 93 Data Ascii: P=sDVz;6xdkJeUMQ[<9"x;~6^o@,@ep]@nVUcWWF[E&k`@CoGaO:kLky*S PkEDGinjvSyJ_Z Fpg:Os)hNh3
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 1d a1 6f ed 32 bd d1 bb c8 e9 ca c6 2a c9 a7 5f 81 1d 75 7c b7 5c ef 12 4c 32 88 48 25 76 38 ea 21 2f d3 7d 7a 13 dd 8c 40 a2 b1 3c ac 88 e6 44 2d 86 5f 41 64 f3 cc 8b 33 59 66 6b 4e 87 a3 7e 5f 0a 02 e8 67 0c 25 54 a5 20 83 79 1b 00 83 88 4c 22 17 70 ca cd 5c ef 3a 18 ec 78 4a 72 75 a3 10 32 46 f0 33 ba 12 86 3e 27 5a 11 1d 8e a0 db 51 dc 28 d5 71 2b 08 bc 8b 48 8e c0 c7 8a 08 95 f8 ef 4f 22 53 02 c6 3c c9 3f fe 06 dc e9 80 97 23 97 5f 44 ae be 48 58 15 6f 23 81 21 40 29 6b 45 af 73 5a 1c 93 cf d6 6f 20 7a 72 4b f9 1e bf 4c 83 c8 24 22 77 be 48 74 b5 5c 5f 00 78 f1 d1 97 00 6f 30 00 ad cf e4 c0 60 f0 9b 67 87 43 94 08 3a fc 52 55 d6 30 4c 8e fd 63 6b 65 55 32 42 20 bb e2 45 02 70 4c 86 d7 e4 6b c1 54 c3 bc 79 ee 54 78 65 7a fc 52 4d b6 b0 18 a0 3e 3f ea Data Ascii: o2*_u\|\L2H%v8!/}z@<D-_Ad3YfkN~_g%T yL"p\:xJru2F3>'ZQ(q+HO"S<?#_DHXo#!@)kEsZo zrKL$"wHt\_xo0`gC:RU0LckeU2B EpLkTyTxezRM>?
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: e1 e9 7a 3b 01 b6 14 f1 dc 2a 1c 5e 61 90 02 fc ce d9 dc 78 bc db f0 8a 65 a9 40 bc 8d 52 c1 85 d8 b3 f0 99 66 bc 60 19 e8 56 96 55 ca de 60 02 6c d7 53 5e d0 29 e7 f0 2a 07 59 40 d0 39 d3 66 47 e0 15 3b a5 fa 08 44 b6 77 01 f6 2c 7c a6 99 fd 42 24 33 1d a0 14 74 2b a3 a5 97 d8 c7 13 60 17 4f 79 e1 72 bc e2 20 07 08 bc 73 6c 76 e3 35 af 5a 96 1b 42 e0 fd 09 40 af 6e f6 2c 7c a6 99 cd e1 bc 14 ad 00 ba a5 6b d0 5b 5a b1 70 3b 01 36 7b 97 5f c2 a0 08 3f e3 7e 37 8e dd ca d2 0e 8a f4 fc 17 81 d1 3b 80 4e ad ec 59 f8 4c 33 9b a7 65 31 b5 1c 60 e9 5a db 2a e6 ae 27 d8 c5 53 5e b6 2e 6e 81 ce 19 c2 f5 38 76 f9 99 8b 74 7d 0c 45 a6 57 1f 7b 16 3e d3 cc e6 b9 e7 83 a5 b7 29 a5 e6 ec 77 93 cd de e5 17 02 3f 27 e0 d5 87 eb 71 1c f1 5a bd 08 60 54 a3 59 f8 4c 33 9b Data Ascii: z;^axe@Rf`VU`lS^)Y@9fG;Dw,\|B$3t+`Oyr slv5ZB@n,\|k[Zp;6{_?~7;NYL3e1`Z*'S^.n8vt}EW{>)w?'qZ`TYL3
2024-09-27 16:52:50 UTC	779	IN	Data Raw: 38 12 81 40 7f f8 f6 2e 30 94 e7 d9 ef f6 1f a7 cc cf c3 82 df 12 00 55 44 33 9b 9f 3d 1e af 51 43 47 62 28 10 90 18 01 81 3c 8f bb 9e 80 6c 7e 5d 6b 54 21 cd f8 f9 29 de 85 75 90 e8 0b 00 6f 4f 02 e8 9e 69 bf 9b d0 86 df 3e d7 4b b9 33 b7 06 fb 5d ec d6 c0 91 5d 01 e0 ed 5d 00 7d 99 ef f0 2a dd f5 04 e4 de bc 8e 2f 06 a9 99 cd 6b 18 8f 37 fc fc 8e 44 90 1a 01 f0 65 3e af 76 bf 9b d0 9e df 3a 2f 10 f0 53 11 47 87 ce 15 ad 37 d3 1a 48 f8 02 78 1b 09 20 78 c9 71 78 b5 76 3c c1 da bd 75 1d 78 81 08 52 80 27 bc 73 ed c7 31 ce ef c8 be 00 46 ef 00 d0 93 d9 0e af 78 33 c1 6e cf 6f 9a e7 0b 10 f7 04 32 bc 40 b8 e7 8a c7 9b f3 39 b2 2b f2 87 32 db e1 15 db eb 09 62 f7 c6 09 00 3e ef 08 2f 05 8f f8 d9 76 fb f3 c9 6e 20 f0 36 4a 05 32 db e1 55 6f 26 d8 85 fc fa ce Data Ascii: 8@.0UD3=QCGb(<l~]kT!)uoOi>K3]]]}*/k7De>v:/SG7Hx xqxv<uxR's1Fx3no2@9+2b>/vn 6J2Uo&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49867	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0e238d1a27c30fb96 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 13910 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=56 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	360	IN	Data Raw: 52 49 46 46 4e 36 00 00 57 45 42 50 56 50 38 4c 41 36 00 00 2f ff c0 3f 00 d7 e3 aa b6 6d 55 b9 e7 19 ee 2e 19 88 40 09 52 93 03 be f4 b9 6e ce 3e 35 5c d5 b6 ad 2a 57 71 e7 cf 13 38 49 28 4a 10 42 b8 bb 3c e1 9c 73 cd 6d 6c db aa 72 3e ee ee 1a d2 00 31 ed 52 96 7b f4 dd ee bf f7 cc 7f 58 60 63 64 81 e8 0d bd a1 37 f4 c6 08 48 60 04 44 d2 88 48 e0 8c 83 de 68 4c 24 20 92 11 10 89 04 44 02 08 80 80 58 7b b3 40 c9 ff 58 fd 53 47 a0 42 87 02 c6 a8 33 b0 85 bf 51 20 b5 09 07 f1 39 33 76 7b f1 c9 c4 27 15 f6 2e 2e 3a 30 aa b7 0d 6b 2d a3 7a 5b 35 68 2a c2 17 1d 69 f3 ae c5 5c 8b 99 8e 72 f4 d4 42 aa 48 22 f9 cf 17 bf 5d 79 14 c8 a3 50 1e 05 f2 28 90 7e 5d 83 05 8c ca 0d d3 6a 53 7f 35 b5 6d cc 9d f9 da b1 f0 b4 d6 7b 03 77 c4 25 44 b9 ba a9 18 d0 9c e8 e5 6a Data Ascii: RIFFN6WEBPVP8LA6/?mU.@Rn>5\Wq8I(JB<smlr>1R{X`cd7H`DHhL$ DX{@XSGB3Q 93v{'..:0k-z[5hi\rBH"]yP(~]jS5m{w%Dj
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: f7 ff 93 9b b6 fe 3f 79 24 cb 60 38 6c 81 b4 29 3b e9 de b4 e0 40 bd 3b 67 6d 1a 6a 23 1b bc cb 92 02 3d 6d ba be 5e 5d 5e ef d3 94 f7 9f 2f cd 8c 46 63 e7 fc fc 9c e7 33 a2 ff 10 25 49 8a 2a d5 80 1c 0f 59 44 94 e1 70 3f c0 15 65 7b 07 1f b8 a9 b2 be 23 ca a6 ab 41 1c cb eb 40 1b 20 bc 99 dc ee 64 94 a2 50 d2 cd 1d dd 62 5c 25 19 0c 7d 5c 0c d9 50 ba b0 c2 b6 c8 9a 0e f2 76 a5 9e c8 55 ed 45 66 56 85 ab da f9 ef c2 d2 b6 52 eb 5a 13 59 d2 41 e0 58 9c bc bc 35 ab 59 59 e7 29 be e9 a8 d5 f1 92 b2 b3 ee ea e0 c6 ce 5d d6 ea 95 e1 ed dd fa 4e 36 24 cf b7 f9 6f 40 14 a2 4c 1e 28 d5 ef aa 70 c5 7a 60 97 8d cb f6 79 b3 78 a7 a1 02 0b fc 75 fe 37 60 2a c7 70 35 92 2a 0f 38 5c 1d f8 01 ab b5 d1 75 2a 5f e9 c0 24 2c ef fc 37 60 22 94 42 f2 20 ac a6 b3 c2 37 14 2d Data Ascii: ?y$`8l);@;gmj#=m^]^/Fc3%IYDp?e{#A@ dPb\%}\PvUEfVRZYAX5YY)]N6$o@L(pz`yxu7`p58\u_$,7`"B 7-
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: a3 55 8b 98 eb b0 6a 2b 42 97 5d b4 6a 8d d6 05 cb 41 ab d6 6c 78 2c df 6e 75 96 6d af d1 44 f2 98 31 ce d3 d6 e5 ed f6 dd 57 50 bd 35 5f 81 0e 05 0c 32 4d 40 a7 fb 50 5d 25 e4 de 27 a5 46 ce aa 13 c3 98 6a 9b a8 5f 46 9b 78 10 11 ad a4 99 99 e4 d0 6e b0 b8 10 44 86 c2 c1 70 9c 1d 16 35 9f b2 a8 71 c1 f2 d8 6f 35 5e b0 7c 0c e2 53 48 40 ac 34 6c ea b4 3a b7 ac 56 45 a4 06 73 00 1a 48 66 3d 06 88 47 8b b3 a4 7a d6 8f 3f 24 be 74 93 01 ac 55 ac 73 c0 a0 e9 75 28 64 97 51 92 84 a3 d1 66 d8 37 c9 6b 06 19 d5 11 4d c9 6a b6 59 f8 0c 61 1c 33 c9 cc 8b 16 22 b6 0d 3a f8 b4 8e 86 01 07 09 f4 81 58 a7 f5 95 1d 41 07 91 00 1d f4 5a 9d 56 f1 2e a6 6e 34 81 eb ea 89 df fa fe e7 9f e0 93 27 6f a5 97 b3 e0 62 d1 ac 2d ab 10 36 2f ad 4a b3 c5 25 69 54 65 78 cd 3a 95 04 Data Ascii: Uj+B]jAlx,numD1WP5_2M@P]%'Fj_FxnDp5qo5^\|SH@4l:VEsHf=Gz?$tUsu(dQf7kMjYa3":XAZV.n4'ob-6/J%iTex:
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 01 63 10 7d 30 88 38 92 95 08 11 27 7c 29 60 0c c5 1d dc da a4 6d 24 22 9c 2b 1b 92 a9 97 4f 77 30 cb 04 dc da fc 28 b5 1a 75 f3 ac ee aa 1a 3a be 42 5c 51 5d 82 0c 7b fc 5e 33 b5 0b 1c 0f 0d ee 48 64 ae ac ee c4 87 ef 93 c0 8f a9 a4 4d 3a 14 b6 e7 84 63 f5 3b 9c b8 ca e6 2c c3 38 6c c2 59 bc 41 75 36 17 82 a5 6d 2e 36 49 0b 3f 2a 21 6b 11 6b d9 88 94 71 18 59 51 a9 5c 22 e3 6a 37 41 77 e4 66 66 6d 11 48 b9 77 3f 3f cc f6 05 4e 21 db a7 54 44 aa b0 76 3d 6c 54 cb d4 ea bb 9a 4d 74 dd 0b 91 c3 87 0c 14 e7 41 21 95 35 e9 bc e3 c7 3f ed a4 91 75 7f 50 e4 f3 bb b0 20 a4 0c e4 59 b5 7d 5e 41 07 4a 65 57 9f f1 11 71 dc 05 44 d1 cd 00 ce 83 4d 29 d2 b5 d8 4f 3f fe f1 e7 9f e0 2d 85 71 7a c1 d5 21 21 c5 37 00 11 09 42 35 2e 91 e3 3c bd b0 c1 94 88 3c 25 13 5f 40 Data Ascii: c}08'\|)`m$"+Ow0(u:B\Q]{^3HdM:c;,8lYAu6m.6I?*!kkqYQ\"j7AwffmHw??N!TDv=lTMtA!5?uP Y}^AJeWqDM)O?-qz!!7B5.<<%_@
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: ff 90 31 4a 2f a5 1a 73 a0 56 e2 53 8a 1b 3f 96 d9 f3 f8 39 8b d3 7d 2b c0 1c fc f5 b7 6f 93 92 f4 96 c6 cf 03 e7 f7 2f 0b 6e 30 65 bf 3d 47 4c 08 3c df fa 2e 1d b2 00 83 a2 76 9d a3 90 90 f9 43 a4 87 df ff 94 f5 cf ac 69 a5 7c c9 5c e7 b2 2c 51 bb 96 39 73 77 fb fc f7 df e0 d7 57 2c 27 e1 8b 5f 18 20 d2 ef bf fc f6 45 72 b8 3a 0d 90 7d 49 bf 60 5c 38 37 ea 77 98 ca b8 0b a1 1f b9 f3 3a 47 d8 82 a6 be 13 39 bb 3a bb ac 93 76 a3 ef f4 1a 94 4c 28 4a 67 fb b6 ef 6e dd 57 c8 d0 b1 11 29 87 88 9c 82 96 77 19 7e fb aa 37 4b 52 75 0f f7 af 1d 86 5c e1 5c 0c bc 8e ca b8 1b 31 70 71 53 7b 22 d9 b4 8b 32 4f 7e fa 58 47 f3 2d ea c3 c9 95 5a cf 00 73 53 22 c9 15 73 1d be c9 1b db 31 2e 02 14 00 c0 b8 06 00 10 11 88 f0 6a cf 18 c3 ed d1 e3 be ba c8 73 4a 4c db 4b 9f Data Ascii: 1J/sVS?9}+o/n0e=GL<.vCi\|\,Q9swW,'_ Er:}I`\87w:G9:vL(JgnW)w~7KRu\\1pqS{"2O~XG-ZsS"s1.jsJLK
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: a4 ee 10 90 6f 85 53 17 09 39 c5 aa 4b 24 7f dc 0a 9b 19 3e 9a c7 bc b1 c3 56 dd f4 2e 4d ce c9 17 d6 37 17 3c a2 d8 25 d9 6c bf be fd d1 72 47 be 47 6d 4f 98 8d ba ea 9e 71 98 7b 0e c4 71 97 88 48 f6 ae 59 7e 90 71 af 8c dd ae b3 be 69 5c 5a 39 86 f8 f2 76 63 a1 29 c8 28 68 eb ac 53 a6 1f ae 51 26 83 03 71 20 7a df 3d dd e5 9c d0 9d aa 0d 28 85 f2 67 80 35 ce db 58 b2 b0 5e 09 59 f9 ea 76 91 d9 76 63 74 86 15 1e 96 c9 38 48 f9 66 eb 50 32 1b d5 dd 3b 35 60 ae a4 ac 15 8d b0 b4 91 d9 62 9e 85 e5 67 25 ab da 68 9f 57 4b 8d d0 5e 5f 60 36 63 34 87 b7 97 dd 14 52 1c c4 d3 e3 33 71 36 ea 1e 8c 01 0a 03 09 fc 85 d2 da 96 60 b3 9a 73 ab d3 f4 1d a8 b7 fa 16 73 0a 6b 0f 16 95 35 19 85 f9 cc 10 46 d3 14 07 f1 4a 54 c1 f0 fe 0c f6 4e e9 4a 46 ea fe 9a cc 06 ad 32 Data Ascii: oS9K$>V.M7<%lrGGmOq{qHY~qi\Z9vc)(hSQ&q z=(g5X^Yvvct8HfP2;5`bg%hWK^_`6c4R3q6`ssk5FJTNJF2
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 90 c5 71 26 68 82 d7 2a b1 5b 63 8a b7 e6 81 82 8f 60 30 f2 95 b7 54 99 1b 0c a6 22 d5 be d7 b8 b4 3a b5 06 ab 97 2a 96 d7 f6 a9 6e 95 1a 58 0f d8 65 ad ea b1 97 e5 46 f3 12 5c df 2e 23 51 ed 3c 06 8c d3 6b 58 75 72 2e 0d 4c c6 50 2f b5 9b be 69 3b fc 97 c8 43 09 5d e2 bb a3 e9 fd c1 89 30 10 3d be 9a 84 82 e8 7f de b8 4c 8b 66 85 5b ac b2 c3 32 b3 2e 2b a5 a6 17 9d 97 bb b7 95 0b b3 99 ee 1b 65 ba 77 37 dc 74 98 c8 79 dd 5c 32 2b 7c 56 62 d5 66 ff b2 51 ae 35 aa 56 bd fd b2 7a ee 35 f1 b2 65 95 6a 8e 4f bd fc d0 39 6f d6 a9 75 1d 17 89 35 7b a5 8a f5 cc 01 68 39 b3 09 50 d9 ae 54 09 41 b6 db 80 a6 44 14 74 41 30 38 8e 75 50 31 0b 01 7f 9a f6 25 94 f8 07 20 52 ac 6c d8 90 7c 8c b8 21 2e 4f 55 9a b5 90 1a d5 52 f3 05 15 97 b7 75 fa f0 c6 47 01 4e ef 60 36 Data Ascii: q&h[c`0T":nXeF\.#Q<kXur.LP/i;C]0=Lf[2.+ew7ty\2+\|VbfQ5Vz5ejO9ou5{h9PTADtA08uP1% Rl\|!.OURuGN`6
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: d2 30 cc 23 e6 90 13 17 1d 98 de c7 9e 7d b0 f8 f0 db cc 18 63 6c c3 07 2d ea 4b 6a 40 4d 1e e8 c8 62 e4 45 6e 6a 0e 2a a8 78 0a c5 15 d8 d8 dc 49 83 28 e6 a5 79 ff 5d b3 6c 8a 1f fc f1 32 3e 3c 62 8e 8d 1f 98 f7 b1 10 92 f3 fa 43 e6 16 90 ec 3f 80 d9 cb 8f 72 06 5f 23 14 d1 20 ae dc be dc f8 83 3d 7a ff 03 64 af 09 6d 7c b4 6c fd f1 9a c8 e4 96 e9 b3 a2 33 3a 3d 79 6c 19 a1 a6 79 11 ee 82 65 7a 51 46 15 78 7b 45 83 ae 3d 19 a5 b4 c3 89 ab 8c b0 d0 b8 26 cf 2f 15 63 62 ec e5 0f 37 cc 36 de be fb 7e cc a3 0f 0a 0c ff 30 8f 24 38 88 36 c5 77 23 6e 83 39 83 1f bc ff c7 6b 8c 4b f5 e1 4a 1c c3 f3 08 62 3e 7c 6d bd ff 81 79 64 c5 25 46 53 cc 0f bc 5d 81 ff 58 e6 6d 86 c6 32 24 e0 89 ac cc 49 01 1f df 20 06 52 68 84 4a a8 88 1a 1f 00 00 18 88 6b 74 e5 6e 67 fb Data Ascii: 0#}cl-Kj@MbEnj*xI(y]l2><bC?r_# =zdm\|l3:=ylyezQFx{E=&/cb76~0$86w#n9kKJb>\|myd%FS]Xm2$I RhJktng
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 85 83 43 31 43 3d 71 a2 8c 49 41 82 05 61 4d 19 ba 9e dc 44 3a ac 3c 66 4a ea 81 20 91 fb 93 33 21 83 bd 53 77 a1 a4 4b 13 5a 10 42 22 19 bd eb b1 06 eb 73 96 26 c2 f9 04 a9 c5 42 1c c9 02 38 39 39 3a e5 c7 e0 07 87 e1 02 c5 5c 9d 1e 9c 98 e3 c5 20 12 bf 24 98 d0 28 0e 44 3a 14 82 5e 12 03 5d e3 2b bc 12 82 a4 f4 48 94 b2 81 65 5f dc b4 7c 74 72 b5 08 4c ba f7 f1 94 ee f1 d1 c1 de ee 29 2c 06 98 16 8d d7 d9 08 fc d8 3f 4a 62 64 4d 88 68 4a 13 2e 24 69 c0 53 b9 02 7f 75 28 44 c1 01 0d 34 f1 fc cb 20 e1 d5 bf 10 5c be 00 7c 63 bb 8f 67 f2 4e 8e 0f f6 85 9d 5f 8b 8a 4a c2 40 1e 6b bc 1e de 84 49 23 9b 09 8d 2c 08 15 9e d4 b0 3b 1c 48 0a 13 1e 1d 60 ec df e3 76 29 79 7a f8 a7 89 cf 45 34 89 20 3c 47 63 da f7 bb 47 8f 8f 0f 0f f6 f8 dd 3e 8b 0d 40 3a d7 fc a9 Data Ascii: C1C=qIAaMD:<fJ 3!SwKZB"s&B899:\ $(D:^]+He_\|trL),?JbdMhJ.$iSu(D4 \\|cgN_J@kI#,;H`v)yzE4 <GcG>@:
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: cf 52 ae 65 0b d5 44 06 c4 dc ef 09 60 9c f0 fe 80 e2 bf 25 fc 85 24 a7 77 ae 62 9b 68 7b 73 64 0d fe 42 b4 ec 3a 2c b4 ea 3d 27 68 5e 32 70 c7 c3 01 a6 8b d2 a8 2b 94 bb c6 18 a3 dd 29 6e 66 24 18 76 39 4e f7 78 0e ce e0 f1 fe e9 ee 47 52 b9 17 e6 28 e6 c1 a6 e4 19 e7 3f 9b c2 a0 69 d5 e2 df 2e 5b 21 73 fd 61 57 9d 62 0a ff 12 7f c7 ff cf 89 a4 18 ff 52 66 e6 cb 59 d3 b0 3e c4 2b 1e 3c ef ec 1d 1e 9c 02 c0 bb 92 7e 65 1a db c0 9d 13 2b 92 ef a8 99 77 6e 19 66 3b 0d af d3 f4 59 a9 7e c9 dc a8 4b a1 42 f0 81 c2 3a 3a d1 3f 64 36 cd 80 ab c5 29 ae 66 66 18 f0 8a 87 70 a0 43 e0 04 8f 93 1f 0f 27 a3 d8 86 ee bc 10 fb d0 bc 93 0b 5b 5e d4 68 3b e7 64 95 5a f5 46 c8 1c 17 87 a0 d4 9a 57 1f ac 2d 61 1a e2 93 66 44 24 05 51 27 9c ca 28 14 b3 32 04 9f 57 3c 56 78 Data Ascii: ReD`%$wbh{sdB:,='h^2p+)nf$v9NxGR(?i.[!saWbRfY>+<~e+wnf;Y~KB::?d6)ffpC'[^h;dZFW-afD$Q'(2W<Vx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49871	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2946!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=73638 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:50 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 10088 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:49 GMT Expires: Fri, 27 Sep 2024 17:07:49 GMT Cache-Control: public, max-age=900 ETag: 013f239d107c90d5b Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:50 UTC	353	IN	Data Raw: 52 49 46 46 60 27 00 00 57 45 42 50 56 50 38 4c 53 27 00 00 2f ff c0 3f 00 c7 c1 26 00 c0 24 33 dc a1 07 ad 88 4b 0e f8 e6 6e 35 d8 46 b6 ad e4 bb 7f ac 00 1a 20 a6 71 32 aa 61 c8 dc dd 59 47 92 ac e4 b9 e0 f9 90 18 61 12 85 7e b9 b3 77 f3 1f f5 e7 e5 27 f9 05 7c 80 c3 24 9e 90 9e 5f 7d 84 f2 b2 f2 43 3c a1 3c 02 60 90 36 16 fe cb b6 0b 0b d3 1a e1 25 2a 41 1b b4 b7 24 6a cb e6 c4 66 60 83 16 0d 95 51 a7 f0 56 b9 9e d3 c1 8c 1a 47 6f ba 93 d5 c3 2c 8f 78 41 b8 7e 7a 79 e8 e5 76 83 49 ef 24 3a 1b d1 c8 fb 8b 9e 9a 2f 5f d1 11 d3 4c 4c 07 3e ac d4 b2 93 f3 86 8f b3 e7 ac f5 4e a2 73 13 bd 93 e8 dc 84 4c 1a 06 ef b6 b6 c7 69 b4 6d 9b 65 eb 90 2c 1b d3 77 21 70 a6 a9 2a 42 08 e9 0a 12 ae f5 5f 35 cb 72 03 a9 eb ef be 47 f4 7f 02 44 37 68 05 ba 41 97 43 fb 2d Data Ascii: RIFF`'WEBPVP8LS'/?&$3Kn5F q2aYGa~w'\|$_}C<<`6%A$jf`QVGo,xA~zyvI$:/_LL>NsLime,w!pB_5rGD7hAC-
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 14 b9 0b 90 f9 a2 8b 3a 58 32 a3 91 12 3d d1 3e 1d 2c 4e 2c 53 ab c3 c6 95 c3 0d 78 a5 5c 9e 75 0a 60 5e 48 55 ba e8 e4 2c c8 38 4d 87 54 f7 44 97 74 6d 31 ba 26 53 81 f6 4f ba 24 de 14 65 d3 01 93 17 1d cb 72 68 bf cc 17 dd d4 a1 a9 05 00 d1 3d d1 4d 21 40 6c 6a 09 fc 04 28 28 75 5c 4b 45 9e fa b8 e8 e8 2c 40 9c 68 6f 4f 74 17 a0 bd 55 d8 00 9d 81 97 28 4b 17 72 da 3a 6c c7 e5 85 f6 ce 16 5d d5 d5 e2 b4 bf 27 fa 22 42 af 4e 96 bb 4e 15 79 56 b2 f3 45 57 d3 00 0b 7f 4f f4 cf e0 ba e3 f2 ac c2 74 41 f2 02 1a 98 2d 3a 3b d7 f5 7b a2 7f 08 76 87 39 7d b0 0d 99 b0 2c a7 06 64 d1 dd b4 86 35 e8 89 6e c5 99 00 02 f8 21 a4 60 3b 60 58 91 a7 00 66 dd 49 75 4d e9 d1 e8 56 00 b1 ce 78 20 00 2d f9 13 a0 c8 4d 97 08 40 16 5d 9d e9 fa 21 62 b3 66 00 88 af f2 12 5c 0d Data Ascii: :X2=>,N,Sx\u`^HU,8MTDtm1&SO$erh=M!@lj((u\KE,@hoOtU(Kr:l]'"BNNyVEWOtA-:;{v9},d5n!`;`XfIuMVx -M@]!bf\
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 8a be 36 80 2b 67 2e 35 64 0b 71 a9 bf 6f 6a de 31 db 01 14 b9 05 46 a5 c1 06 18 f4 44 87 e0 0a e5 a1 05 73 07 98 72 ad d5 5f 7e bc b1 df 14 99 76 69 d6 85 2c 77 1a 93 52 0f 83 42 74 b0 bd 46 45 48 70 51 ce b3 b2 2b a8 23 bf 8a 69 1c 00 6b c8 80 66 5b b0 8b 2e b8 bc 10 2d a5 41 3f d5 65 31 b4 ae 9c b9 4e 67 39 5d a3 99 ab 5b b0 47 16 64 5e 90 79 91 95 f3 a2 9c 07 ea de 4b 25 25 af 2c bc 83 ac ec fc d6 78 35 04 8d c9 7c 01 cc 5a 43 91 67 1a c3 cd a0 ef 7a a2 91 e6 05 f3 6b ee 80 9e b7 ef 2d 7a 5e 07 a0 e8 01 45 8f 04 9a 69 b3 28 67 80 f3 5a 43 16 34 a4 68 60 be 00 50 a4 34 24 ad 2b b3 91 34 2f 0c 07 fd 9e 68 63 d3 22 27 0b 66 80 eb 7e 96 17 83 56 9d 5f d7 ec 89 d7 94 80 1e fb 24 01 ab 80 c8 ab a4 28 f7 c8 82 cc 90 17 e5 5a cd 17 95 79 cd 02 12 62 3c 52 e4 Data Ascii: 6+g.5dqoj1FDsr_~vi,wRBtFEHpQ+#ikf[.-A?e1Ng9][Gd^yK%%,x5\|ZCgzk-z^Ei(gZC4h`P4$+4/hc"'f~V_$(Zyb<R
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 64 73 05 f2 a3 8d 41 75 5c 47 e7 a7 84 eb 93 1a 1f 31 4d 96 5f 9c 72 77 8e 96 df 49 39 da 3e 79 9c 0e 19 03 13 bf ae a9 7a fb 77 ec fb 2a 0e 5b 74 4d d7 de 00 cd cc 36 17 33 0e 8c d7 c7 78 3a 4e d6 47 51 e7 a7 64 f2 7d 8e d6 c7 64 ca dd 39 19 f3 bc 53 e3 e3 20 99 6c a7 ea bc 4b 38 dc 18 86 50 74 d3 b1 8a d0 db bf af c2 64 81 d9 c5 a1 89 f9 b0 89 c9 18 13 00 a5 89 77 0c 34 30 d9 04 26 bb 73 32 42 b2 3c c5 5c 1e bf 4f 67 46 bb 73 32 e5 79 97 80 df 4b 95 2c 8f e7 d3 53 a2 76 27 26 c3 4d 16 24 cd 41 45 2b 4a 84 b0 d9 55 40 03 9b da 03 16 9b 66 27 f5 c6 41 24 87 48 18 73 9a 8c d7 13 32 22 39 4a 48 8e 12 72 0a 8e d7 63 4e c1 f5 98 1b 68 e3 a4 29 09 55 f2 8e 4f 3e d7 98 2f 90 5e 01 0c ed 6c ce 96 d0 d0 b0 1e 43 38 e2 10 e0 c8 66 9b d1 14 60 79 b8 e1 88 43 8c 48 Data Ascii: dsAu\G1M_rwI9>yzw*[tM63x:NGQd}d9S lK8Ptdw40&s2B<\OgFs2yK,Sv'&M$AE+JU@f'A$Hs2"9JHrcNh)UO>/^lC8f`yCH
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: a9 f5 a7 f1 fa f8 b5 53 18 1c 6d a4 f2 dd 52 47 76 f7 75 5e 46 cb 81 82 dd 45 76 67 77 16 7a b9 b3 2a d6 a0 da 7d 03 c0 69 19 29 bb 5b ea 08 6b e4 0d 35 eb aa 86 15 0b cc ab 16 5e 5e 2b b4 6a d5 ee 7b 79 12 b5 3e 46 78 3a 3d 6d 4f da ee 8e db 75 f4 b5 54 d8 9d a3 e5 e9 78 d6 c3 d3 f6 e9 98 ab d2 69 a9 34 55 6e a3 e5 e9 69 fb a5 a3 ed f7 b9 c2 a2 7b f3 90 85 df fe 44 46 6d a1 be 96 6a 77 8e c0 81 c2 71 10 0d a8 23 70 a0 b0 45 f4 f4 ad 23 9c 77 0a 4f 5b a5 a1 06 47 ad 34 62 46 fa 34 50 f8 5e 46 dc aa 8a d4 c3 96 b2 a0 f9 02 01 f4 51 ff 44 a2 be 77 e0 97 da 22 82 5e 92 c7 75 34 38 a9 68 40 05 9c 77 d1 79 a7 a2 fc b8 1e 60 7b 2e 2d 8f 2a f6 2c bf 06 c0 f7 2e 3a 0e aa ac 87 ad 98 a0 f9 c2 bb f1 2f bc 1c fe 48 50 c7 81 d2 a7 e5 f7 2e ca 4f db 1d 8e 2a da 9d 55 Data Ascii: SmRGvu^FEvgwz}i)[k5^^+j{y>Fx:=mOuTxi4Uni{DFmjwq#pE#wO[G4bF4P^FQDw"^u48h@wy`{.-,.:/HP.O*U
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: e2 ee 01 f7 65 e0 ee d6 ea e0 b4 f0 de de f9 1f 01 fc fe 43 fe e2 03 1a a9 c4 e3 af df fc f3 62 a2 6a fd b2 2f 32 c0 de 3e e0 de 8f bb fc 0e 00 1e 81 87 f2 23 7e dd dd ba 00 f1 45 a8 c0 9f ea 5f 8f c0 6f f2 d7 e1 39 c2 ea 75 4f 17 71 cf 7e 74 b3 77 ba 6d 9b dd de dd 3f 00 ac 44 f5 5d 7e 87 fb 32 70 57 88 ee 24 fb 77 7c fc fd 87 fc c5 07 34 52 c6 c1 44 7a 85 08 d0 fd 08 fa f0 e7 37 1a 65 30 c0 c7 bb be 94 24 ad 5a 54 dc 88 0e 95 db 87 7b 1c 4c 04 b7 d2 11 40 17 e9 c3 6d 7b 7e 57 dc de dd 3f 80 c1 77 f9 dd 3d 09 de 66 ba eb 59 71 c7 c7 5f 7f f0 9b bf 1e 1f ea bd 3c 47 fd d7 3d 5d f4 fc fa 0c e0 e6 f0 80 fb f6 f1 eb 37 ff fc ba bf 2b 74 ca 3a aa 1f 06 dc de 73 ff 62 a2 6a fd b2 cf bb e2 95 ec 96 77 0f d5 cc ef 70 7f eb f4 85 a6 79 96 16 b7 77 0f 8f 7f f0 9b Data Ascii: eCbj/2>#~E_o9uOq~twm?D]~2pW$w\|4RDz7e0$ZT{L@m{~W?w=fYq_<G=]7+t:sbjwpyw
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: 0e 1f 4a 3e 5f a2 3d 23 78 22 f9 38 28 79 7f 53 5a 74 cd 4d f8 20 cf f4 e5 16 34 d5 71 ff 53 69 28 44 7f 63 f2 6d 55 81 98 25 85 8f fe 61 1f 3b 1b ff 7d c1 fb 21 96 3c 7e f9 78 e3 7b 3f fa 1b f3 e6 2d 76 b9 ee bf 3f 1f e2 8f 1e 62 1b d2 ab 74 c0 7f 44 ac 3e cb 07 89 0e 14 85 17 ca cd e7 e1 46 54 f4 fc b9 5f f1 f0 19 dd 7c ae 9e 3f fb 41 cf 9f fb 15 0f 9f d7 0d d5 b1 fa ec 01 cf af d1 5f 05 7c b8 17 28 94 14 7c 2f fb 8f 5e 6c b4 fa 1b 93 ef cf b1 e3 cb 5b 7c f3 ae a2 bf 0a bd b7 64 3c 98 f2 f3 f0 ac 5e f0 aa 62 ed 17 e8 ff c2 4b 6f ab 9b cf 43 84 d7 4f 15 63 ff b9 8a 6e de 3e f9 12 ed e9 8d f0 f1 72 78 57 41 7b 7a eb 4d ae d5 f3 fb cd f3 e7 2a 7a 39 f0 e5 2d 7a 79 55 fb a0 a8 ff f9 aa 62 4d f5 17 c0 db 0d b4 7a 79 53 e0 73 f4 b1 52 fd cf 64 b4 61 f2 fa d7 Data Ascii: J>_=#x"8(ySZtM 4qSi(DcmU%a;}!<~x{?-v?btD>FT_\|?A_\|(\|/^l[\|d<^bKoCOcn>rxWA{zM*z9-zyUbMzySsRda
2024-09-27 16:52:50 UTC	1390	IN	Data Raw: ce 09 bf d6 d1 99 09 07 c7 75 e4 19 24 1c 5f 80 86 05 f0 1f 20 d0 6d ff 28 5f fc 3e 2e 23 9c b7 03 e0 b4 8e be cf eb 84 b1 3a 2e d7 58 72 32 60 32 e5 e0 98 e0 a4 70 5c 27 63 9e 77 be 64 3a dc 5c 0c ae cd 64 8c 49 2d 4b 47 bf 00 ed ed 80 2f 46 38 7f 91 e4 32 9a 3c 7d 1f 11 ab e3 f7 99 e4 70 70 4c 46 d3 e4 6b fd b4 55 93 e3 7a 3a 0c 19 6d fe 1d 36 18 d7 42 a0 00 ae 0b cb a3 8d ce 3b 05 c4 d0 eb 84 e3 af 65 74 5c 27 24 d5 fa 98 8c 86 c9 72 fb b5 56 3c ae 93 29 bf ff b5 00 d8 0e c4 f8 de 46 cb 93 55 7a 87 e1 71 90 f0 6b 19 9d 39 49 c6 3b cf 26 19 9f be 48 6e cf 93 64 79 1c 5f 06 26 63 0c 79 ad a4 35 43 01 5a d2 6a 70 b4 d1 d3 f1 7c da 2a 3c 1d cf 5f 9c aa 09 4f 3c 2e 7d e3 e4 fb 29 19 25 93 f3 e9 1b cb 44 5d 46 75 a7 a4 6c ac df d1 0b 7a d3 b0 49 6b 10 c0 58 Data Ascii: u$_ m(_>.#:.Xr2`2p\'cwd:\dI-KG/F82<}ppLFkUz:m6B;et\'$rV<)FUzqk9I;&Hndy_&cy5CZjp\|*<_O<.})%D]FulzIkX
2024-09-27 16:52:50 UTC	5	IN	Data Raw: 15 4e 77 07 00 Data Ascii: Nw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49877	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0aee6ad5a994716ec Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 5942 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=27 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	361	IN	Data Raw: 52 49 46 46 2e 17 00 00 57 45 42 50 56 50 38 4c 22 17 00 00 2f ff c0 3f 00 2f c1 38 00 40 44 9a 97 fd 47 b2 46 f3 72 1d 7a 0d 36 01 00 a4 c1 2d 02 f9 e9 c6 e5 be 61 6c 63 db 4a 84 4b 4c ff 2d d0 0d 31 a1 65 ba fe 96 f9 8f f5 f6 35 5f 05 00 1b b0 da 2d 53 a2 24 ab c0 6a da 1b 5c 0f c1 04 09 7f 6b 01 a4 4e 9f 4c 09 5c 2d 4c 2d 8c d1 05 a0 17 90 6e c7 92 8e 78 a8 2a b8 f2 70 95 29 d8 e4 ac d3 5d 86 ab 4e 57 19 94 f1 ca 02 72 e0 39 9b c6 0d 70 46 5a 91 01 96 6d db 51 a2 d0 55 44 0a 48 54 44 d1 f2 45 d0 f9 0f 92 1e c1 fa bd 37 a2 ff 13 20 2b 9c db c9 33 19 5e 83 b3 9f 29 f3 3e 13 e6 d6 fc 26 d2 86 ed 94 e9 7f c7 ca aa 9b e9 88 61 6e bf 06 34 96 79 2b 45 46 4b e6 df 81 9d 13 eb 93 5b d2 38 69 67 96 c4 57 90 ce 62 d6 87 39 0c 99 b5 72 4b 23 33 3e 81 a4 73 03 b2 Data Ascii: RIFF.WEBPVP8L"/?/8@DGFrz6-alcJKL-1e5_-S$j\kNL\-L-nx*p)]NWr9pFZmQUDHTDE7 +3^)>&an4y+EFK[8igWb9rK#3>s
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: b2 ff 90 a4 ff 39 93 ed 34 40 d2 06 36 84 66 ae 6c 3d f8 5c 42 2a 24 92 f6 96 70 ae fc e3 9e 09 09 99 76 8a 4c 98 42 b6 27 9d c9 ac 82 2c 25 43 4e 52 9e 9b 92 e6 19 89 59 40 d7 57 63 41 92 74 f6 a1 7b 1e 66 39 8c 6d 43 5a cf 8d c8 ec ec 46 52 ac 41 ef 4c 9d b9 25 29 cf ed c8 ed fc 99 0c ad f7 1f 92 2d 8a b9 25 21 43 d7 cd 19 3b bf 91 e1 fb fa 23 4c be 2c 1a 4b 9a 6c 48 e7 4a a5 76 89 d9 08 c6 6e 69 2e 61 6e a7 78 76 4f 44 63 49 9a b4 a7 1b ab 94 da 45 ca 58 17 d7 3d c1 42 38 d1 33 99 57 8c a5 c9 dc 08 ae 12 4d 57 6e e6 c8 46 d1 ed e3 9a 0b 63 be 3c 66 9c 30 19 f4 4c a6 fd 04 d7 ca 9d 10 53 99 4c 26 75 75 8c 7a 59 fc 5d 1a 01 4c 80 55 62 66 20 2e 3e 62 97 4d 62 20 d3 bb 7d cc d9 f8 6c 85 1d 43 7b 96 fd fc ed 5e 27 b2 7e 1d b9 23 f0 1a 97 a7 32 af 8b e7 a3 Data Ascii: 94@6fl=\B*$pvLB',%CNRY@WcAt{f9mCZFRAL%)-%!C;#L,KlHJvni.anxvODcIEX=B83WMWnFc<f0LSL&uuzY]LUbf .>bMb }lC{^'~#2
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 34 c9 ea 64 dc b2 d3 02 92 c1 b9 25 99 ad 8e b1 d9 57 f3 1c 92 59 d2 e4 bf c9 da e4 96 4c bf 98 67 42 f2 d7 30 ff 4d 48 83 2c 19 3e 28 0c 48 08 81 51 c0 6c 99 6d 7f 39 b9 25 89 64 ca 21 81 17 35 da 6b 87 23 3c 20 9c c3 49 4a d3 91 7e 2f 4c 7e 8d 25 f9 9b cc 13 78 97 47 75 ab 7c 75 d1 5e 88 80 04 d8 e9 5d b4 17 62 ba 4e d3 ca be 98 d4 92 34 bf c9 5c fa 11 79 b8 96 cd 0d 5a 79 6c 22 0f 3a 62 e3 29 de 4a ad bc 99 f2 16 be 18 fe 1a 9b 27 53 0f d3 1e c8 f2 7e 6d d4 f5 56 dd b5 aa ae 37 12 e5 fd da a8 72 a6 ec 3b c9 87 3c 91 3d 01 8e c4 38 ef f2 77 7d 7b 0a 55 83 a8 f4 50 5e 55 75 f1 70 6f 54 d5 40 ff cd c4 dc 58 9a 6f 23 33 43 a6 1d 17 7a d0 e5 ed ae 55 d5 78 e0 b5 ba 53 b1 f4 c0 8e b2 9a 8b 64 9a ad 5a 8d e5 39 9b 2f cd d3 04 70 a5 aa 1a e8 bf c6 2b 17 b7 f2 Data Ascii: 4d%WYLgB0MH,>(HQlm9%d!5k#< IJ~/L~%xGu\|u^]bN4\yZyl":b)J'S~mV7r;<=8w}{UP^UupoT@Xo#3CzUxSdZ9/p+
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 17 13 24 83 7f 6d 67 9e 50 c8 2c fd 20 69 d7 c8 ac 91 6e 8c 30 b2 f2 f1 18 0e 3b 1f 4e 53 fd b6 f2 ae df 24 cb 8d 25 d3 8f e9 74 b1 18 4a 6f 3e 02 e9 c6 70 88 9c 0b 4c f4 6b f3 84 bf 96 86 96 30 96 34 00 99 7d d4 be 76 46 fa b3 74 18 4c ba 59 fb e2 ec 26 ca 2c 0d 68 89 9c 9d 46 06 7e 8a 8b 25 c7 00 66 5d 29 01 21 9d b1 26 df 92 bc 4f 5e c5 59 26 32 b6 d3 24 59 87 91 cf db d7 34 d9 10 e6 30 b4 9d 99 90 84 c5 86 a4 76 c0 e9 50 4c 93 db de 2c 61 6e 68 4d f2 79 2e 96 cc ba 41 24 53 92 c8 61 33 21 53 c8 86 e4 43 8a c3 69 92 1c a6 6d 69 92 fe 27 f0 61 b1 93 dc c8 c4 99 4d c5 51 36 24 b5 cc fa ce a7 e3 24 4b 94 c5 d7 7b d2 e6 53 31 35 99 93 ed 48 8d a5 f9 e9 3f 17 d8 08 38 c9 2c 26 63 4a d9 8e dc 92 c6 f5 bd 8a b3 db 86 7a 4f 1a 9b 4e b7 fa c3 52 cb fc 67 e0 a1 Data Ascii: $mgP, in0;NS$%tJo>pLk04}vFtLY&,hF~%f])!&O^Y&2$Y40vPL,anhMy.A$Sa3!SCimi'aMQ6$$K{S15H?8,&cJzONRg
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: aa 29 15 cb 4b c5 bf 8b 42 74 95 f1 c7 3d bb 9d 96 f6 32 1e 15 6f 77 ad ca b7 f2 01 78 aa ac 14 e0 a9 e8 07 ca 53 80 e7 13 0a a0 a7 e0 29 90 9e 42 f3 f0 34 9d 30 a2 cb 72 63 b3 be 4f 4f f8 9c ad 7c 2b 54 25 b5 02 2a 00 ef 72 0a d4 1d da c9 24 cf 49 42 ef 01 e0 72 55 11 14 d0 68 a0 ac fc c6 57 68 fc 46 03 8d 06 00 36 00 b4 1f 35 0a 80 66 f3 f0 9c 68 46 90 ce 3c 5d 8b a7 cc be af 22 85 26 52 00 34 e0 57 fb 09 70 84 16 3a 2d bd 0b 90 ae 77 a5 4a 28 7d af 6e 57 55 de 6f d5 5f a4 1e 15 ef d7 8a b8 28 f0 56 dd b5 aa ae 37 12 b8 de ab db 43 39 21 35 bb 68 d2 95 90 05 be 2f 91 ea f7 2f a5 4c e9 8e d8 69 27 cb 41 87 f2 6f 65 eb 5a 2a dc 9a f2 a6 70 2d d5 e3 ed 47 8f 46 f1 4f bd 2b 85 92 8a 17 85 7b a3 ff 7c 75 ec 88 40 cd 8e cc 4c 12 2d 6f 99 ef 0a 51 87 df 5c 4b Data Ascii: )KBt=2owxS)B40rcOO\|+T%r$IBrUhWhF65fhF<]"&R4Wp:-wJ(}nWUo_(V7C9!5h//Li'AoeZp-GFO+{\|u@L-oQ\K
2024-09-27 16:52:51 UTC	21	IN	Data Raw: c4 4e fe 75 2e 96 e5 ff 37 f6 ff 3d e0 bf b7 77 ff bd f8 2b 02 Data Ascii: Nu.7=w+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49878	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:50 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 040c2f157ebc9bd28 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 2736 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=30 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	361	IN	Data Raw: 52 49 46 46 a8 0a 00 00 57 45 42 50 56 50 38 4c 9b 0a 00 00 2f ff c0 3f 00 cf c0 26 00 80 34 7c 7c 7c 5e 83 ca 64 73 b7 b9 d4 60 1b 00 60 99 58 53 e6 fc 7f 9b 5d bb aa 22 db 4a 1e 4e 06 8a 90 93 78 14 90 5f 77 99 ff f8 ff ff 3f b6 13 5c 63 34 7d ca f0 f2 41 4a f4 75 3a af 03 c1 e7 bf af f0 21 59 35 23 70 e0 96 c0 16 d5 8b a8 ad 7a b5 25 8c 22 77 6d 5a 4a 45 43 3b 47 bb 40 3b 4f e2 5b 92 64 db 6d 68 db ea 83 a3 43 43 63 70 48 93 9a 14 09 8c ff ff d4 7e 45 bf b5 71 1f ad d8 13 a8 6c d5 6e 11 fd 9f 80 6f 9b 7b f9 cd 91 af 5c e1 ff fd 7c f2 ae 81 6b fd 53 e4 6e ba 1f e1 7c a3 dd 49 d5 f9 3e 8e dc 5f b6 41 ff d1 17 a3 eb 01 c7 07 df b7 6d fe 63 84 2d 8b f5 10 6d 39 02 dd 0e 01 8e 57 23 dd 2e 56 ba 1d 02 dd 0e 01 8e 17 22 dd 2e 0c d7 89 71 22 a6 f6 fd ba 0f 10 Data Ascii: RIFFWEBPVP8L/?&4\|\|\|^ds``XS]"JNx_w?\c4}AJu:!Y5#pz%"wmZJEC;G@;O[dmhCCcpH~Eqlno{\\|kSn\|I>_Amc-m9W#.V".q"
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: a5 30 c3 f8 a3 16 03 b8 22 7b 7c 7d 7d 81 e3 0f 57 ad e0 7a cd cc f4 e0 a1 56 ae 19 5f fd 07 0e 21 d2 e9 62 00 9d 2e 56 ae fd f8 bc f4 ce f5 07 35 e3 1e 61 57 fe a8 7f 4d 29 a9 ce f5 fe a9 8b 78 4c c4 0c 8f c7 57 ff 72 ea be fc ed 2a 72 6b f5 9b 99 19 59 cc cc 68 fd fa ff d7 46 6d 90 34 33 a3 f5 2e eb f7 c7 d1 51 d5 ec 55 35 b5 aa 2f 5a 92 68 23 22 02 4d e2 af 68 8b 24 55 49 aa aa 92 8a aa 14 49 aa 4b 7a 7c d8 d7 f1 b9 fa a6 bd 5d 45 4a f3 7e 13 9c 8d bf c1 bf 08 04 d2 48 37 8b 08 90 45 6e 6d 73 cd 22 a2 b6 a0 af c7 ef 1d a9 58 85 c8 2d 6b 93 bd 6a f6 f0 ad a6 5b e3 af 0a 2f a6 59 20 59 f5 e6 55 d9 16 af ea 73 73 cd aa b7 b4 a8 b1 47 25 a5 24 be 61 52 7d 17 b4 f9 2a ec 68 f6 a6 5e 20 5e 55 92 2a 13 52 96 9b 34 e2 55 65 79 9c 7a 30 54 f5 5d 86 6e 5e d3 90 Data Ascii: 0"{\|}}WzV_!b.V5aWM)xLWrrkYhFm43.QU5/Zh#"Mh$UIIKz\|]EJ~H7Enms"X-kj[/Y YUssG%$aR}h^ ^U*R4Ueyz0T]n^
2024-09-27 16:52:51 UTC	985	IN	Data Raw: eb 13 4e 81 f7 00 4e cf 05 16 2e fa 57 26 c9 62 73 57 de 75 21 65 28 dd bc 3f 1b 94 25 c4 f0 e3 f9 7c 0b 39 87 20 05 00 7c 02 80 cf 02 a0 c8 26 15 9b 7f 03 fc d9 53 0c 25 a5 d4 02 a7 bf cf 33 84 9c 43 78 fe 1c bc 62 84 7f 47 57 5a b2 4c 29 23 2e bd d2 8f e5 d8 3d 37 a0 7e 4a 67 a4 e4 7a 9f 9f 63 43 f8 95 c3 98 77 8f be 4b 2b a3 00 a0 40 c6 02 28 04 49 40 04 e8 94 5d e3 eb f5 2c 23 ca 29 81 f7 7a 0b 39 e7 10 9e cf d7 4a 52 ca 40 ba 79 ff de 00 45 c8 d2 ca 05 32 12 05 5d 8e 2c 1c 86 88 60 ef 08 ff 79 15 c9 67 16 91 ec c1 3b 3f 9f 21 80 63 fd d9 29 86 92 52 6a 01 9c 9e 2c e4 a5 cb c1 c2 bb 42 44 b0 6f fd e9 33 71 95 35 4b 33 5e 72 e5 f2 4b b9 88 08 ee 50 f6 61 bd e1 7a 96 11 e5 94 c0 35 90 e4 a5 15 c1 21 23 fc e7 55 24 9f 59 44 b2 07 d7 0c b4 22 20 59 8e 55 Data Ascii: NN.W&bsWu!e(?%\|9 \|&S%3CxbGWZL)#.=7~JgzcCwK+@(I@],#)z9JR@yE2],`yg;?!c)Rj,BDo3q5K3^rKPaz5!#U$YD" YU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49879	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0e19ad63dbf49c2e1 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 4016 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=27 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	361	IN	Data Raw: 52 49 46 46 a8 0f 00 00 57 45 42 50 56 50 38 4c 9b 0f 00 00 2f ff c0 3f 00 ef c0 36 b6 ad 44 9f 88 8c d4 ea a7 1c aa d0 d4 5d 76 db 60 13 00 40 1a dc 2e 5e e8 5f 83 0a d4 b0 cb 61 3e 35 01 00 32 f6 2e 40 6b c5 dc 1a 08 b0 b7 f9 8f ff ff e7 31 94 da e4 96 7d 61 42 f7 f2 3d 50 c0 48 2d 00 fc 10 d0 01 ea b4 b0 32 f6 f4 9f 43 39 80 ef 7b 9e 8e 84 75 b8 b1 e8 d2 08 7c fe fb da 4a c2 94 c0 0c d3 ce 90 d9 f3 21 51 3e 30 78 bb 6d 3b 4b 6d 6d db 00 21 90 77 d4 b8 93 6c 99 ff ff 87 f2 22 02 c2 f9 7e f6 1e d1 ff 09 f8 67 fd 94 77 29 fe 9d 45 5e dd 49 cf af a6 c0 af 22 f1 78 fb 69 ef 3e d6 af 7d 70 26 7f d1 9f 8e 6e 75 e3 9d fe 67 bc b5 38 12 f9 8b c2 4a f7 b3 d0 ac bb 1e 49 e3 9d de 1e c9 14 f9 4d 2d 3f a9 4a fe 0c 34 89 ab f6 b3 ce ce 2f 20 69 bc 53 69 73 5f 76 12 Data Ascii: RIFFWEBPVP8L/?6D]v`@.^_a>52.@k1}aB=PH-2C9{u\|J!Q>0xm;Kmm!wl"~gw)E^I"xi>}p&nug8JIM-?J4/ iSis_v
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 2d f2 d9 22 19 34 49 31 46 9e 85 58 ae 97 5b b7 dc f7 93 ce 4e 90 b6 8f d5 f9 3a c4 28 b4 eb ad e9 48 c2 56 bf 08 3f 6f 52 f8 9e a6 23 a1 aa 1f 14 4e 01 95 e9 b5 eb 48 d3 d7 17 4d 4b 97 a3 b3 1d 89 f6 9a 39 a9 33 a9 5d 47 a2 bd 64 bd 69 33 c9 e8 6c 47 b4 17 0c 0e 61 44 6a d7 d1 b2 22 79 ad 5a d3 e7 59 f4 1d ad 4b f9 e3 ab a3 a5 9b 2b 6f 7d 47 d3 a7 8b e5 a5 9e 29 81 9b 37 9d 41 f8 24 e2 d2 c0 59 31 55 8e 2b 6f 3a f6 e1 5b 69 fe 12 68 e9 f3 64 39 5d 79 d3 d1 a9 ef a4 d7 fc 61 b5 75 48 bf c3 4b 3b 51 ce 57 96 1d 9d fa 6d b5 68 15 28 ea f8 0b 82 b3 62 54 2e b6 ec 68 dd 4f 1b c7 50 b7 0a 14 75 3c 38 65 7c fe 0c 96 1d ad 4b eb bd 8e 23 e2 1b 93 29 d4 ad 02 59 c7 e3 f2 d2 4d 70 19 94 eb 68 fa 74 02 26 53 ac 5b 35 e6 74 0d a4 e3 88 de b4 53 5c 86 d6 75 34 3e 9c Data Ascii: -"4I1FX[N:(HV?oR#NHMK93]Gdi3lGaDj"yZYK+o}G)7A$Y1U+o:[ihd9]yauHK;QWmh(bT.hOPu<8e\|K#)YMpht&S[5tS\u4>
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 3b 3f aa 7c b8 c9 1b e9 75 3e e4 df 55 6e 2b 78 69 7c c8 27 2a 6d 02 5b 0a 5e 1a 9b 8f fa a0 f2 36 b0 9d e8 a5 d3 f9 8a 60 33 ca b8 36 9f ac b4 15 6c a5 97 2e 9f 2d 6e 06 db 08 ce b6 87 16 8f 29 6d a0 9a e0 26 b4 f4 f9 c8 e3 41 71 2b cc 9b f4 d2 9e b1 94 81 2f dd df c3 e4 5d 7c 4d 58 27 ce 18 c9 6f 3d aa 62 5c 3e df f7 6f 39 e9 79 49 8a f9 f2 7d ff 4e ea 8d be 28 e5 b3 2c 70 7b a2 2a 87 f0 15 65 7c bc 26 b7 e1 8e aa 18 ee 7c 16 0f 7e c5 4b c7 d3 05 6e f2 59 15 f7 67 31 14 00 aa f7 37 a2 37 ed 45 29 aa fb 50 16 7f 03 6e 05 86 6f 68 d9 a7 ab 52 3e df 28 00 c5 ef 24 2f 6d be 28 cf aa 50 f7 ea 59 dc de a8 de eb 89 5e 5a 71 59 86 3b aa 72 b8 43 15 0f ae a6 bd b4 cc 57 a5 a8 9e 65 01 3c 59 94 43 58 09 de 48 df e6 eb 32 5f be a9 d7 51 5e 1a 1f f3 f1 87 f4 ab 1e Data Ascii: ;?\|u>Un+xi\|'m[^6`36l.-n)m&Aq+/]\|MX'o=b\>o9yI}N(,p{e\|&\|~KnYg177E)PnohR>($/m(PY^ZqY;rCWe<YCXH2_Q^
2024-09-27 16:52:51 UTC	875	IN	Data Raw: 29 9c 37 d2 7a 1d bf 14 76 52 e2 56 94 05 ca 27 cb 82 55 79 03 8a 8a 13 b8 11 cf a2 64 51 b2 00 9e 28 2b 3d 91 17 ef 24 44 ae 3e 14 93 ef ea fe 28 1e 2c 30 4c 91 51 7b 2b 8d 77 e2 1b a9 e1 3e 58 4e 16 55 4e 05 ca ba 2a 81 02 e5 b8 58 5c 16 25 d8 f5 2f a6 fc e1 3e d0 f0 5b f7 47 51 0e c0 32 92 c2 79 23 ad d7 71 b5 26 ed 85 64 09 c4 7f c9 12 35 ca f5 ab 1c 3d 56 c0 2e 22 be f0 ae 0a e0 71 2f c6 ef 1b aa f7 22 32 6a 6f a5 f1 4e ac 13 c0 5d c5 7f 47 95 e2 57 e8 91 f8 f1 3e 42 fa c2 fd 51 40 fd 91 8f e2 f1 be 17 78 f0 03 92 c2 79 23 ad d7 f1 b3 d4 70 4f 55 fc 77 e2 d6 e2 4b 56 7c c6 5d 34 5c 5f f4 43 55 f0 09 dc 0a 56 40 39 84 cf c8 a8 bd 95 c6 3b f1 49 93 be 27 be 01 4c b5 b7 51 ae 56 73 ab 24 80 5b 47 58 4d 38 c8 fb bb 2a e6 cb f7 3d af 2c 9c 37 d2 7a 1d e7 Data Ascii: )7zvRV'UydQ(+=$D>(,0LQ{+w>XNUNX\%/>[GQ2y#q&d5=V."q/"2joN]GW>BQ@xy#pOUwKV\|]4\_CUV@9;I'LQVs$[GXM8=,7z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49881	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	832	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=115282 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 7992 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 01e8bf7a3637a1d40 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	354	IN	Data Raw: 52 49 46 46 30 1f 00 00 57 45 42 50 56 50 38 4c 23 1f 00 00 2f ff c0 3f 00 3f c1 3a 92 a4 54 e8 1f 45 fe 31 10 98 f3 14 f7 34 18 06 00 50 26 37 1e b9 df 6d 64 ab 89 64 ab e1 07 42 45 85 7f 21 98 c0 00 02 a0 ce 79 e6 3f 76 fe 81 bb 1a 78 8e 17 46 be 58 01 db 6c cb 6c c0 6c 2d 3c c8 29 5d a2 69 c0 b2 08 f4 06 ee 01 e9 01 ee 41 82 1d ad 51 bc 97 4d 36 7e 1f cd 5f 1c 7e d6 7d 4f d3 fd a3 55 ea 28 4e ce eb 02 b5 65 72 4b 82 28 82 a8 82 28 82 28 c4 e0 21 0e 10 03 06 e9 b6 ad 57 69 45 20 d5 00 82 10 40 2b b5 16 2f 49 de ff 19 b9 05 d0 73 fe ee 1d d1 ff 09 08 79 bb 06 00 5a 1d 00 5a 06 00 ae b7 70 f3 d1 11 0c 97 ce 0d 50 1e ad 71 51 38 5f 57 9c 58 9a 45 6d 48 32 2a 59 94 e1 ec dc cc cc 39 5c 81 3e f5 1f 82 e9 9a d8 de 2a cb 5e c8 32 0a 3d ca 3a 9a 70 5c 26 0b c9 Data Ascii: RIFF0WEBPVP8L#/??:TE14P&7mddBE!y?vxFXlll-<)]iAQM6~_~}OU(NerK(((!WiE @+/IsyZZpPqQ8_WXEmH2Y9\>^2=:p\&
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 9a dc 94 23 d1 6e 7e 8d 68 e2 ce f9 0b c7 8b 0c 28 fc cc fe b7 28 0c dc c8 4e cd 3f 51 4d ce 7c 39 35 d5 1a 24 9c b9 f7 5a 83 93 77 fd 09 fc 34 a5 01 50 ac 85 99 a7 c3 24 67 60 93 19 7e 4f 54 f3 3f 56 e4 7a ce 5f 7c 9e c1 cc 4f 3a e9 f0 26 aa 0f 92 99 7e b9 1e 66 5e 92 19 36 51 6f a0 fe 1c 85 e9 1f c3 15 d1 7a 70 9c 9c 98 54 fd 53 31 33 00 c3 55 65 f3 0e 6a 66 aa de c2 e5 83 44 d6 58 2e 72 99 97 ce b1 89 1a 4e 47 56 ba 18 f9 41 58 1a 86 4b d0 43 32 23 53 c3 89 33 36 59 d3 39 5e e4 e7 c3 50 72 4d df 00 ec 14 9b aa c1 ef cc 00 88 ff d5 26 af 24 9b e0 12 35 f8 ed 0c 80 ec 1b 6f e4 f7 9f e6 30 c6 6f c4 43 59 ef fb 7d 5c 7e ff 71 60 ac 03 32 7e 0f c7 0a df a9 01 dc 37 e2 29 0e 87 0d d5 de ca cf 74 8e 3d 78 b5 06 e9 37 d4 d4 d4 d8 f7 53 1a 9b 73 24 fa 54 f0 97 Data Ascii: #n~h((N?QM\|95$Zw4P$g`~OT?Vz_\|O:&~f^6QozpTS13UejfDX.rNGVAXKC2#S36Y9^PrM&$5o0oCY}\~q`2~7)t=x7Ss$T
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 9a 12 83 6e 2d 32 0a 49 ee 07 48 a6 2e 9b 71 3a ab d4 4c b7 54 1e 33 03 d0 43 4d 1f a9 01 0e 99 33 c3 a9 ea d7 bf 3f 08 e7 47 d6 43 b1 1a 37 04 b9 92 e1 09 64 82 69 bc c4 2a 9b 46 e5 33 31 0e 59 3a 4b c7 5e b2 43 66 a6 da 81 1f 7a c9 8d c7 72 35 e5 48 b1 95 d9 f1 45 31 9b e2 d4 6a 63 4d 2f 09 ed 24 64 bd df 1f 72 9e 34 1e 2d d7 7b ec b9 22 7a 13 3c 9f 14 b3 31 a7 d6 5b d3 0f 13 33 33 19 c0 65 5e ee 23 5f 11 9d 3d 4a ae 7c 91 f8 a2 c8 6c c8 aa f5 d6 9c 97 a0 77 98 63 87 aa 59 a5 f1 c9 35 45 e1 fa 17 e1 89 8a cc 7a 36 59 49 b5 57 35 3d f0 60 b3 34 b1 43 d6 f5 b3 03 93 81 70 76 ee c3 72 93 e5 11 88 b6 c7 4b ac c8 cc 00 a9 ea 1f b2 c5 f6 ba 8e bd 30 b1 66 38 e1 f4 1f 1f ce 47 be 0d 3a 83 e3 1b 38 9d 15 c9 cc a4 6a d0 9a 74 21 dd 30 56 7e c8 6c c8 cd e2 3c e3 Data Ascii: n-2IH.q:LT3CM3?GC7di*F31Y:K^Cfzr5HE1jcM/$dr4-{"z<1[33e^#_=J\|lwcY5Ez6YIW5=`4CpvrK0f8G:8jt!0V~l<
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 91 14 00 57 53 8c 1c 37 47 32 37 72 81 dc f4 0f 0b f1 7c 52 24 33 03 97 cc d0 bd cc f4 93 09 e9 90 bd c4 ca a3 35 c8 56 73 1c 41 f9 06 4a 17 2e 88 81 64 29 5e 62 45 d2 19 d8 d4 c3 a1 97 aa a9 6e 20 3d 7b 49 0f 4c a7 e4 01 00 7f c5 98 db d4 11 45 48 b2 58 c2 ac e4 c4 1e 0f 24 a7 31 de 53 d1 1a 64 6a 72 d2 cb 94 9f b9 22 68 5a 40 f8 92 63 38 6e 29 33 c7 de 92 65 cf 65 6a 2d 83 69 32 b6 af 74 45 c5 83 b1 6a e6 c1 c0 a9 75 74 77 3e 9a c0 17 dd 18 ca 0d 1d 6d b4 54 91 1d 52 b5 c6 69 99 b1 2e 19 a2 56 7d 9b cc a1 45 b2 8e 5b 17 e0 ca 40 f8 2a 26 b8 0d 95 c7 70 f1 bd 5a e7 b4 c4 c0 72 34 46 2f e1 ec 94 6a 1d dd 2d 80 7c f9 93 13 50 6c 87 d1 3b a2 33 c9 18 eb 9e ef ed 31 9f 50 6e 68 85 1e 92 11 a4 fe d2 4c bd 8b 5b 17 e0 ca 05 8a 09 a1 cf a8 7c 5b a9 cd 52 95 1e Data Ascii: WS7G27r\|R$35VsAJ.d)^bEn ={ILEHX$1Sdjr"hZ@c8n)3eej-i2tEjutw>mTRi.V}E[@*&pZr4F/j-\|Pl;31PnhL[\|[R
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: cd e5 a4 de 51 b6 b1 c8 8e 39 7a cb 8f f4 c6 a3 01 5c 19 46 b9 33 c9 04 67 fa c9 2c ea e6 12 ab f5 e2 bc 22 b7 b1 cc 4c 3c fa 2a 0d 17 60 96 97 21 c9 e8 60 dd 04 32 49 33 ab e6 35 17 ad de 93 d9 56 81 a9 99 2f 67 a2 29 51 3d 67 5c f1 90 4c 99 7f 3a ab f8 72 8e f7 ab ba ac 27 d9 56 89 a9 2e f2 54 18 17 4e 5e a0 9f 66 f4 c5 f8 72 56 2b 5f 4d aa d2 8d d9 29 c7 d0 6b 54 58 93 af 25 39 58 03 a4 9e ce 17 a8 f7 94 18 eb b6 c5 d2 2e 53 3a 03 a0 98 11 f9 73 a6 6f fd 9c db 93 7a 5b c0 c6 58 4e c8 3d 14 66 b0 9c a6 a5 bf c3 00 12 1f f5 e5 ac de 55 fa 06 58 8c 65 f3 4a c0 66 cc 8f e1 5a 92 9e 4d 38 3f 6e 70 e2 16 b0 82 34 c1 e1 1d f0 e8 ad b4 86 a1 c7 25 98 19 50 cd dc 2b b2 06 b9 89 d3 65 05 d6 0c 6f ae f0 15 39 93 87 3e 2b 2c 90 5a aa 59 55 dc 28 6e 84 e7 d3 72 6e Data Ascii: Q9z\F3g,"L<*`!`2I35V/g)Q=g\L:r'V.TN^frV+_M)kTX%9X.S:soz[XN=fUXeJfZM8?np4%P+eo9>+,ZYU(nrn
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 45 00 80 04 40 00 9c 5b e9 e5 cc f0 61 d2 ab 12 d7 2e f8 bb 09 dc db e0 25 82 b6 c3 95 02 b7 2e e0 4d e0 d1 7e 29 46 ba 9a 12 59 03 c0 d1 47 54 87 ef 36 aa 6a 54 e1 aa b5 5c 8a 99 01 8e 05 d5 34 a0 ed 82 57 fb 25 80 e0 25 d0 76 01 6f 02 f2 35 d0 f5 42 a9 a7 b0 b4 d9 b1 28 43 9f 95 7e 37 55 a3 21 c3 75 57 7a b1 d4 20 8b 2e b5 f0 83 25 58 4f 5a 50 cb f7 52 35 08 01 ae bd 96 4b d1 9a 2c fa a3 00 6f c1 df 4d 54 8f b1 bf 9b c0 5f 13 bc 44 d0 76 b8 52 e0 d6 4d d3 72 0d a8 f9 36 25 58 35 08 b9 05 e8 c5 32 63 cb fa d1 dd 1f 4d d0 3e bb 7b 2f ea 35 8f ee fe 27 82 3b 9a b6 0b 04 ef 7c 36 d3 2a ac 01 78 1f d4 4d 15 f6 37 10 d5 5c ea db 20 11 68 09 7c 89 a6 ad ce 12 8c 44 75 16 40 7b 16 5f 42 12 68 04 c0 16 40 a3 05 28 07 a4 1e 93 1e ab 51 2d df 46 d5 00 e1 56 08 2c Data Ascii: E@[a.%.M~)FYGT6jT\4W%%vo5B(C~7U!uWz .%XOZPR5K,oMT_DvRMr6%X52cM>{/5';\|6*xM7\ h\|Du@{_Bh@(Q-FV,
2024-09-27 16:52:51 UTC	688	IN	Data Raw: 30 80 6c 75 00 34 52 a0 ad 76 df a3 71 38 bb 2c 4a 46 59 2f 0a 57 aa a5 0f 96 ee c8 f0 0d be 0b 5c 4e 8a 01 da 47 87 6b 00 b6 02 af 76 11 33 ce b5 48 3d 24 a7 79 2e f1 66 d2 83 03 6c b2 5c 7c 81 ea 3d ae a2 79 ae 41 ae 8f 5a 0e 44 59 5e 2e 24 0d f2 62 a1 72 65 d6 00 48 d5 62 f1 05 aa 27 5e 08 11 00 dd df 8d 93 30 8f 13 8a d5 48 3d c0 28 37 36 5f 24 33 00 ec b1 5c 22 ca b9 a6 d4 00 c8 d4 62 f1 05 aa 2f f0 8a 08 60 5e ec 21 1b 2b 57 43 2d 07 c8 dc a0 5c a0 c0 60 be 08 a5 2b 57 64 0d e0 b8 d8 e9 12 ab c1 4a 3c ae 51 f3 0c d0 b5 22 7c b5 bb d3 c8 ce c3 71 c8 96 e1 7a a5 1e 61 6e f2 05 9c 01 6c 2e b9 70 69 8a d5 24 06 b0 c9 62 a7 b3 1a bd 06 d7 47 87 6b 20 d8 06 78 b5 91 ae 71 e2 37 e2 d0 63 54 38 03 38 19 ae b9 1e 2b 8d 5d a0 34 c8 a3 70 58 96 91 2f 1e cd 6a Data Ascii: 0lu4Rvq8,JFY/W\NGkv3H=$y.fl\\|=yAZDY^.$breHb'^0H=(76_$3\"b/`^!+WC-\`+WdJ<Q"\|qzanl.pi$bGk xq7cT88+]4pX/j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49882	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0d5ab5a9c46aa302f Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 12298 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=67 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	360	IN	Data Raw: 52 49 46 46 02 30 00 00 57 45 42 50 56 50 38 4c f5 2f 00 00 2f ff c0 3f 00 cf e2 a0 b6 6d d3 7a b6 8d 1e bf 7f 0d 05 30 af 75 6e 0d d7 91 6c 9b d6 b5 f1 ed fc f3 79 01 d8 7e d7 77 d3 8d 64 db 4a f4 1e ee 92 6b 46 cc 92 d8 f7 58 36 21 ee 4f e6 3f ac 6a 6b 28 ab 0a 44 80 08 10 01 22 0c 33 20 60 88 00 01 60 05 ca 04 de 1c 30 69 22 c6 40 46 77 e4 87 c4 4c c4 fc 10 0b 91 1d 53 c0 14 10 a5 c4 41 24 81 28 60 12 88 02 22 81 8c da 2a bd 42 9a a1 24 43 69 6e 48 33 94 64 a8 37 6e ba 57 e2 22 7e 5d 8e 3d 01 7f 80 0b 0d 78 a7 58 27 58 a7 d8 5f 84 ed 57 5b b8 f6 4d 07 ed c1 1d 5a 6c 1b c8 ac cc 13 7f a8 8c 08 8f 12 a7 77 88 d5 e0 d6 46 b7 31 b8 b5 dc ce b4 66 86 3b 9e 7c af b4 91 32 ae ab f0 91 f1 c1 f7 ac e8 4f 4c f2 72 0c 76 72 7d f0 65 47 e7 dd ff bf 42 fd 82 8e 87 Data Ascii: RIFF0WEBPVP8L//?mz0unly~wdJkFX6!O?jk(D"3 ``0i"@FwLSA$(`"*B$CinH3d7nW"~]=xX'X_W[MZlwF1f;\|2OLrvr}eGB
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: e6 86 26 23 a3 14 85 b6 0d 82 1f cb e4 d0 72 a5 e7 df cc 9e ef d5 ab 09 7d 1d 20 22 75 91 27 fd 81 2d 11 cd bd 99 48 a7 3a d1 9a 08 5b c3 50 ad 02 d6 81 53 46 29 13 db 96 c8 b4 7c 43 1e 5d ff 45 87 7e 1e f5 ae e3 e3 d5 bd 45 2f 55 57 ea fe 16 53 25 43 bf 2f 06 e9 44 eb 98 98 ec 48 eb 44 63 4b 18 af e5 6c b8 dc 8d 8c 51 26 0d 6d 6b e4 c3 c7 0a 3f 82 d1 ec c1 27 c4 ab d4 0b 9f 67 12 1f b5 9a bd 1a c4 c7 99 c1 17 9f ac 8d b8 32 c8 25 d1 14 f6 db 29 73 c3 cd 82 f1 72 e1 6c 6c 86 49 bf 3d 44 1f 9d f8 8f e0 6a 76 ef 17 d2 f1 d4 6c e4 df cd 6e ae f0 d1 0f 5f 66 ce bf 9f 5d 95 42 64 5b 2c 34 67 76 56 72 b6 96 86 a3 cc 5a 4b 6a ae 4d f5 7b 28 80 73 e7 3c ae 66 88 4f de 8b 56 ea 06 ef 41 45 b8 99 8f 57 05 6f 48 e2 e1 08 b2 00 9c 0d e7 54 6a 6d 5b 4f 1d e6 a0 e5 11 Data Ascii: &#r} "u'-H:[PSF)\|C]E~E/UWS%C/DHDcKlQ&mk?'g2%)srllI=Djvln_f]Bd[,4gvVrZKjM{(s<fOVAEWoHTjm[O
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 6e 83 2b ce 82 18 25 87 48 6c 35 cd fa 72 f4 35 af 74 ff df b2 02 be fe 77 60 ce 7e 97 85 75 40 f6 cc c7 6f ff 31 0c 64 13 99 ab 8c 01 ca 7f 7b dc 0b 20 43 d1 b2 be fd ae be b0 20 e6 cf 9a 08 ff 42 a2 28 5d 71 9b cb b6 15 84 c5 59 98 5e 13 df 59 21 19 af 46 5f 7f cf a2 fc c1 af 46 57 e2 ef 9f bf 15 25 f9 e7 67 f2 91 4b da f3 cd ef df b0 d0 9b 77 01 8b c4 ee fe f0 51 7f ce 3d dc 8c 44 20 74 46 47 0b 6b 9b c4 21 6e 78 36 dd 71 5a 60 a9 c3 32 29 cc 8e 24 fd f7 67 c2 2f 7e 45 62 fc 52 f8 ad 44 fd 99 fe 43 96 25 56 96 0a 55 50 fb 1e e7 02 5f 3e 3b e7 0a ba 79 9d b8 ff 28 9d f7 58 5c bb ab 23 44 72 f6 f9 2c da 1a f1 16 99 85 0d 32 e4 4f 97 c4 8a 63 7e e2 37 21 89 76 56 96 06 34 3a 93 3e 06 88 1d 83 e0 02 d8 45 44 8f b9 00 b4 a6 24 f0 5b 8b 68 cf f2 9f ba 00 31 Data Ascii: n+%Hl5r5tw`~u@o1d{ C B(]qY^Y!F_FW%gKwQ=D tFGk!nx6qZ`2)$g/~EbRDC%VUP_>;y(X\#Dr,2Oc~7!vV4:>ED$[h1
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: bc 33 11 50 cf b1 9d 73 57 4a c9 dd b1 d3 69 8c cd af e1 8c 1d 47 81 ea bb 64 72 8f d1 82 7f 33 eb f8 4f cf 57 6a 54 70 a5 94 00 16 11 11 6d 0f d1 29 44 24 43 ce 75 25 79 32 17 44 a3 31 55 11 a2 d6 18 10 46 4a 05 14 56 21 0f b7 96 0d b1 83 b5 15 1d 71 9f a5 91 17 88 e0 eb 6b c7 14 18 34 fc 60 56 91 0d 90 d5 43 a2 41 59 36 bd 8a 88 c4 7f 74 50 0a 30 98 28 54 b1 ff f8 9c e3 a8 2b 43 3f f7 c8 9e 16 c0 32 d5 2b 89 e4 f4 d0 6a 49 32 1a 14 92 32 93 98 3a 90 b9 44 21 a8 71 5d d5 e4 5a b6 9c 10 6b d7 9c 73 bc 31 05 8d 06 de 59 39 a8 d3 eb 39 c6 dd cf 5e 9e 47 7e 17 dc 64 ce f5 ec f9 55 17 7a 10 fe 55 f0 f0 fa 2c a5 0b 58 05 10 46 07 cd e3 da 60 c8 87 28 27 a2 a7 97 bb 07 bc f1 0b be c9 94 72 7a df 6d f9 69 9e fa 70 b9 9e d5 44 12 bc 5f 53 59 e8 23 ca 38 82 4f 8d Data Ascii: 3PsWJiGdr3OWjTpm)D$Cu%y2D1UFJV!qk4`VCAY6tP0(T+C?2+jI22:D!q]Zks1Y99^G~dUzU,XF`('rzmipD_SY#8O
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: b9 fa 88 b5 4e 75 58 5b 73 b4 96 f9 e2 b3 c7 f4 d8 56 32 1d 33 02 45 ca 00 7d 16 93 4e cb 28 44 a9 a5 f4 f1 f9 f1 ea 7e f6 d8 f1 bb 52 03 95 02 22 92 44 a4 e5 b7 8a ec 80 90 25 70 89 8a b3 29 83 a1 d2 b6 b6 e6 a4 e1 53 56 23 e3 75 e6 7d ab b6 cc bf 91 d6 da da 14 a4 f3 b5 2d 11 b1 b6 d0 c5 9b e7 d9 eb 63 e8 0b 35 8a aa c0 10 70 09 a1 c7 a7 a6 6f af a2 e6 49 76 56 e0 fb d6 14 cb 4a 15 a4 f3 4b 9d 60 5b e8 62 20 11 b1 27 42 58 91 31 08 d9 ce 8f 46 84 b4 6c 11 5b 58 37 56 57 40 70 c9 f3 b6 2a 75 e8 20 35 ad 2d 8a c3 9e 12 6b a0 ee 5b 45 b6 40 c8 a6 d0 25 ac 8d 55 e9 22 b6 b6 51 fe c5 cf 56 a9 b3 4a 55 c6 f0 da 82 cb ac 8d 04 9b 66 55 60 c8 9a d3 69 c5 23 19 e5 6c 8b d9 96 20 24 14 b8 ef aa 38 65 ca be 9f 6a 02 e6 85 23 b8 44 b5 77 29 43 a5 b0 21 e8 3b 90 8a Data Ascii: NuX[sV23E}N(D~R"D%p)SV#u}-c5poIvVJK`[b 'BX1Fl[X7VW@p*u 5-k[E@%U"QVJUfU`i#l $8ej#Dw)C!;
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: ef e3 fb 93 83 8e 41 ec 21 62 57 07 88 48 1a 11 d1 cb 41 44 5d 20 09 11 65 29 12 81 32 08 84 b4 95 88 00 89 8c 92 19 7a d0 ff 33 ca 5c 02 09 bd 1e 65 62 fd c4 20 df 85 8d a1 93 4a 06 ff bc 10 8e 0b 1e ed 7a 17 d6 0f f0 dd a5 41 74 f6 3d 1a 63 a7 07 97 05 d3 fd 29 c8 6e a2 f6 a7 d8 65 90 3d 84 ca 1c ec 5f 22 9a 77 ce 59 89 88 e8 ac b4 a7 c6 a0 db 3f b8 c0 2e f8 a6 91 29 69 28 4c 2d 78 1a 94 6f ac 4a 9d b5 cd ed 52 55 f1 1b 5f 01 86 25 4c 3e 1d e4 8d 2b e7 68 5f 4f 8e d1 ca bd 8e 77 7a 42 ef 72 26 b4 0b 54 72 27 6a 4f bf c7 1e 04 31 a7 63 a6 27 47 7b 7a b7 e3 21 bc 80 d9 3f 55 4a e7 a8 4f fb 4a 5f f8 e0 9b 46 e6 49 d3 3f fb 28 b5 36 0c ae 20 8d ca 1c 2c 48 11 89 15 55 10 45 dc 61 52 9d 29 b3 61 cc f2 09 f1 64 d7 e7 60 a5 8f 17 a7 a4 ed 41 a1 4b ee 30 a7 3b Data Ascii: A!bWHAD] e)2z3\eb JzAt=c)ne=_"wY?.)i(L-xoJRU_%L>+h_OwzBr&Tr'jO1c'G{z!?UJOJ_FI?(6 ,HUEaR)ad`AK0;
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 0f 62 6e 35 8f 15 05 6b 9a 71 71 3b c4 a7 2b a5 ec b1 29 07 dc db 96 3e 62 3d e8 4a 73 72 5a 6b a7 91 eb 1f e7 60 15 54 7d 34 14 99 98 19 97 3e 8f 9e 0f a4 cb a6 0c 13 0e c1 c5 bb 46 e1 49 18 73 fd e0 43 27 aa 40 56 5b cb 47 d1 ff e0 69 4d 43 ce 79 be 9b ec 9e 9c 1e bf c7 2e 1b 93 25 4a 7a 97 47 f5 10 aa ca d8 01 c7 cf 4c 3a 8c 97 9a c7 5a c1 ed bc fe 21 67 d7 3f 3e 9a 4e de 9d e6 1b 62 20 7b 12 91 10 91 0a c1 ba 88 a9 3a 09 cf 0f 5f 39 ae e5 d4 36 ef 5a b7 15 62 2b c1 99 f1 5f e0 12 4c 4e 2f 7d c4 5d e5 75 2e f6 ed 14 35 ed 4f 0e 2c 05 97 f6 1d 7a 53 59 0f 03 5b 85 12 cd 72 a3 0b cc 39 ae 56 c3 58 db e4 f6 a1 16 9b 5b 6e 53 c9 ee 64 0f be d1 7f 77 b2 67 f4 7b ef f2 f4 d8 1c 9d ec a2 d1 ca eb f8 1a 10 46 54 69 dd 4d 2a b6 ee a6 6c c7 b2 05 72 5d d7 6e dc Data Ascii: bn5kqq;+)>b=JsrZk`T}4>FIsC'@V[GiMCy.%JzGL:Z!g?>Nb {:_96Zb+_LN/}]u.5O,zSY[r9VX[nSdwg{FTiM*lr]n
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 8a 3e b0 19 c9 b3 5a dd 2c 84 94 58 ff 51 b9 82 ea 20 1b 99 95 75 b1 be 53 bc e3 df 40 26 fa 78 67 8b f2 1b c3 bf 1d 4c 7f bb 74 e8 3c 7b f1 db 64 ff fd 94 10 de d1 5c 2e 0b 85 f5 30 54 b6 71 19 28 b9 b8 bc ba 26 79 ff ac 52 4b 55 98 75 1a b7 47 f3 6e 05 b5 c6 e2 af 46 4a b9 6c dc 3a 47 76 aa d5 90 41 ab dc 76 d1 a7 c2 be f3 37 c4 9f 72 01 f1 7e 83 48 f8 37 83 08 fb 70 e2 fe 39 48 cd 06 ec 4f f1 dd 25 22 ba f7 3f 39 77 31 d9 c3 a4 fc 75 7b 6b cc 5d 35 bf 50 18 60 ac c9 05 5f 74 2c 0d 16 81 22 d2 d9 0a 8b 28 8b ff 10 7e 53 86 32 e6 14 63 f1 7f 31 b9 f4 08 a7 d6 bd 43 7d e1 dc 4f 58 db 3f dd c6 e6 f6 6f 53 9b ab bc 37 b9 2c 12 e6 9e 62 e5 47 e9 88 bb 5d 92 9a 85 a5 65 4e 07 b8 05 87 5e 1a e7 6c fd e2 9c 73 3c f6 f0 f2 00 3d 42 44 ed 10 b1 3a e0 df 7d 2b b7 Data Ascii: >Z,XQ uS@&xgLt<{d\.0Tq(&yRKUuGnFJl:GvAv7r~H7p9HO%"?9w1u{k]5P`_t,"(~S2c1C}OX?oS7,bG]eN^ls<=BD:}+
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: e1 13 b7 03 43 f0 f2 1d ef c6 22 62 8f 1f 7f c9 f3 f9 99 73 a0 52 88 18 12 1d 5b 60 78 b6 92 ae 7f 79 7c 7a b2 3b 29 df 82 89 43 29 c4 c9 7b 94 f8 69 1f 09 8f ad 77 ea 38 44 64 03 77 0a 08 e7 87 66 e4 8c 52 ca ae c0 39 17 7f ff 88 c7 c0 7a bf 42 2e 8a 8c 98 83 f1 fa 83 32 22 6e 6f 19 52 6b e9 f9 97 a7 07 17 d3 dd 63 0c 24 22 78 8e 08 81 5c 9e 22 4a 42 f0 2c 85 40 25 c0 d1 9e 8f d3 d3 23 1f d1 ba 1c 44 94 4c 73 94 00 49 28 65 3c 4c 27 52 ca c8 2d ce 13 51 4c 41 01 7b 5f 19 7a d0 ff 33 ca 5c 02 09 bd 1e 65 a5 50 c5 ae 80 78 12 2b 2a 11 55 27 5d 3c de 95 16 27 a7 ef 3d bc d8 b7 84 01 a2 b2 ef 26 9e dc 3d dd bf d0 40 07 c4 00 a8 d4 2d aa 69 ff 18 f1 e0 e8 74 e2 5f da 4e ce bb 7d 87 88 e8 ec c1 04 4d 51 55 a8 d5 fe 14 a3 ae 7e b7 af ba bd 01 a9 bd 83 0b 99 23 Data Ascii: C"bsR[`xy\|z;)C){iw8DdwfR9zB.2"noRkc$"x\"JB,@%#DLsI(e<L'R-QLA{_z3\ePx+*U']<'=&=@-it_N}MQU~#
2024-09-27 16:52:51 UTC	818	IN	Data Raw: 7b c4 71 cb 36 4e 34 97 ea 21 b5 63 1a 20 e2 52 d6 cf b6 0a a5 4a 6a 41 9c e5 f2 e5 66 f9 af c3 5a b1 73 cd 92 3a 6e 57 53 13 cd 0d 40 cb 10 5c 6c de eb 16 92 33 15 a7 a7 1b 24 11 81 f8 fd 2c 87 b6 6e 31 89 fe d7 11 77 b5 29 33 33 f5 c1 9e 0b e3 23 a2 d0 77 97 0d ed 42 98 3e 03 fd 6c 5b b1 2e e2 c6 a9 16 b2 69 01 0f af cf 46 d2 a4 a7 c1 b4 54 2e 03 59 48 2f 97 02 8d 77 0f 58 68 01 2e a3 35 bb 06 8f 9a 40 a7 73 9c 3f 99 36 63 93 58 e4 86 12 b1 10 06 83 f8 78 ef f9 3c e9 20 23 32 47 e2 cb 6b d4 81 73 98 c6 20 a2 64 4c 85 da 89 52 53 e1 d3 f7 a4 65 58 ad d9 75 1c 4e b4 66 d7 8b 90 c5 91 29 44 3e 18 29 1f 8d e7 5e 5f d0 c7 87 57 73 8f d7 fa 49 3f de 3e cb 51 37 c9 52 39 7a c6 3b 3f 78 8a bb a3 07 cf 3d 3e 8d a4 65 16 2e 64 e5 52 85 10 fc c7 1a 62 0a b8 bd 3b Data Ascii: {q6N4!c RJjAfZs:nWS@\l3$,n1w)33#wB>l[.iFT.YH/wXh.5@s?6cXx< #2Gks dLRSeXuNf)D>)^_WsI?>Q7R9z;?x=>e.dRb;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49880	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0624d69d8cbec335a Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 6790 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=34 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	361	IN	Data Raw: 52 49 46 46 7e 1a 00 00 57 45 42 50 56 50 38 4c 72 1a 00 00 2f ff c0 3f 00 17 c2 30 92 ed 24 3f b8 bb 96 41 ff 55 d0 87 13 0f 91 36 18 07 00 60 24 9b bf ee 97 6b e8 36 68 ad 43 b6 c9 34 00 c0 24 53 1c 3a 8d e8 bf f3 d9 dc 6d fe c3 fd ad fd 2a fb 55 fa c9 a2 07 f8 37 0a 1e e1 63 01 b5 16 ea cc 2c 17 e9 2f f0 4a 00 dd 51 22 10 15 5d a9 3b 42 e7 ca da 4d ce 42 9a c5 62 1e d3 0a a1 9d 06 5d 1b 80 1d 51 65 ba 62 fe 8d 50 73 47 be 9e 99 2b ad 44 f2 f5 c4 eb 18 10 7c 2f a5 77 8f 1c 45 b7 66 eb ce ed 94 63 5d 63 36 77 f1 7f 48 24 0a 7e 08 78 af 7a 2a a4 f7 7e d6 0a 2d 84 66 83 97 08 b4 37 58 6f 3c 84 3b a2 53 0b 7a 24 fd e1 5d c2 bd 87 17 89 ac 0a 5e 34 3c 2b 5b fe 31 78 d7 b6 ed 49 b3 6d db 50 54 20 8a 1c 34 4f 0c ec 69 0a b9 a2 62 4d 37 46 73 8d ff 58 51 45 42 Data Ascii: RIFF~WEBPVP8Lr/?0$?AU6`$k6hC4$S:mU7c,/JQ"];BMBb]QebPsG+D\|/wEfc]c6wH$~xz~-f7Xo<;Sz$]^4<+[1xImPT 4OibM7FsXQEB
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: f1 81 48 5a 7e 00 51 72 9a 5c c4 97 88 29 23 20 04 c0 c9 e3 c7 a7 27 63 f3 29 47 ea e6 f3 e3 d1 d5 d7 d3 30 e2 32 ce 3b cd 0b c0 2a 59 1f 9e 6f b1 9c ae 33 7c 71 77 9f fa c4 c7 d4 70 52 7c 85 69 6a 94 4a f2 03 4b ed 63 b3 c4 a7 87 44 7c 99 8b 29 23 00 13 ae f5 a1 9b 6d 7d 00 9f de 03 34 c8 de e7 c7 9d 9b aa af a7 61 c4 8c a2 97 33 5d 46 96 a1 af 43 44 00 a6 99 fb b8 ba 9f 1f 4b 15 03 ed 63 49 8d 1f f8 cc 58 4c 53 a3 d4 30 95 93 9c 4f 11 48 86 93 ec b5 3e 74 a3 18 6e d1 c7 8f a5 c4 0f 00 1a 3f 3e dd dc fa 64 1a 46 5c 16 72 4b b6 70 36 44 40 08 2c e2 6a 63 9a 33 fa f8 f4 64 6c 3e e5 48 dd 7c 7e 7c 4e 57 0b 4e c8 8d 9e 1c ba d0 1d 97 ec 91 1c a5 ba a9 51 8c b5 e5 16 2d c3 fa 04 3e 92 9f f8 f0 f3 a5 ea eb 49 32 cc 8e 2e 03 83 45 b4 8c 8b 2f a6 64 94 19 e6 9d Data Ascii: HZ~Qr\)# 'c)G02;*Yo3\|qwpR\|ijJKcD\|)#m}4a3]FCDKcIXLS0OH>tn?>dF\rKp6D@,jc3dl>H\|~\|NWNQ->I2.E/d
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 1f bd 52 7a 6e 58 63 31 17 e1 d4 1a ea 8e 5b 42 e1 73 d9 22 e7 d3 99 bc 3c bd 91 4b 47 47 01 f6 4a 9b ea 35 35 0d d7 0e f4 a1 9b fb 42 cc 3c fb 5c 7e 09 cc ea b9 49 dd 72 0b 8f 4a 99 d4 98 ee d2 d1 2d f7 f2 46 7e 9e fb 5c 46 f2 bf 02 23 ca 64 6f e4 26 2d 7d e8 96 d9 fb 4d 3e 49 4b 77 dc 1a 70 82 3c b9 83 72 5c b9 e7 92 74 86 fa 1a 74 4a 61 4f 26 3d f4 92 23 d2 25 d7 8b 9a fa fc 78 54 35 8c 0a 3b 60 7a a5 0c 91 f7 fe b1 d0 88 3d 32 17 e9 0c f5 35 38 74 dc ca ea d3 da 5a 2a 9e 5c 5c a1 5c c9 02 3d 33 d7 cd 3e 07 fc 44 e6 48 66 8f 2e c9 e1 1a 9b a1 e3 56 7a 58 57 1f 9f 72 a9 aa 77 01 ae 9f 0b 77 79 90 cb 1d b9 a9 8e 6e b9 d5 8f ea 4a 2b 07 97 60 04 f9 f2 fb 79 6c 37 5d 77 dc c6 a0 c9 25 b1 7a 8e 29 f2 3f 3e e4 01 8b 39 ba 7b 89 61 cc 49 1d c9 e5 7a 6a f5 46 Data Ascii: RznXc1[Bs"<KGGJ55B<\~IrJ-F~\F#do&-}M>IKwp<r\ttJaO&=#%xT5;`z=258tZ*\\\=3>DHf.VzXWrwwynJ+`yl7]w%z)?>9{aIzjF
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 76 fc 39 cd 24 cc 8f 33 ec 4f dd eb a0 0b 65 fe 75 5a b5 66 e8 8a bc 81 51 7f d4 a7 31 c3 ba e1 d8 3b 47 1b 7b 7a ed c4 ec a4 4a b3 e3 0c 40 f7 7a ac 0c 00 cc 8e 89 20 8f f9 1b 70 b2 88 31 a9 9b b2 13 c9 c3 56 52 13 98 7d 4b fd a3 d2 e1 b6 eb 8f b5 9f 41 17 ab 14 04 59 be f1 2b 30 8c 19 0d 6b c1 d3 2a 70 00 d0 9f 9f 0e df 4c e0 30 93 66 c7 c3 71 de f5 af 31 3f 1e 70 5a b5 e6 dc 77 fd 8c c0 48 75 6b 0f 61 4c d4 02 55 e5 6c bb a4 27 a9 bb 76 df c3 4e 82 47 a9 7d b5 55 3a 63 01 76 b1 25 00 0c 98 c3 4c b1 eb 8f eb 45 8c 49 2d 78 da 99 d8 4a 6f 43 26 92 04 3a a3 1e e9 0a 00 d7 63 92 d7 e0 98 d7 48 fa 34 8d a4 ed fe 02 0c 97 31 f4 3a 60 49 ed 16 c0 94 f4 b6 04 c5 93 d3 db 9d 1e c9 71 22 fd e6 51 a4 5f 77 d1 71 69 c3 e0 af e0 44 31 e1 d4 54 5b 42 7f 07 b4 f3 60 Data Ascii: v9$3OeuZfQ1;G{zJ@z p1VR}KAY+0k*pL0fq1?pZwHukaLUl'vNG}U:cv%LEI-xJoC&:cH41:`Iq"Q_wqiD1T[B`
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: c9 e1 6f c2 c9 32 5e 86 17 e0 29 2a db f3 7d 07 df fd 76 e7 67 0b 1c 76 ad d9 a1 03 7c 73 76 e8 62 86 ae b8 01 91 37 80 4f 93 b6 5b d1 df 05 51 cc 45 e8 54 4b 51 35 2a 5e 5b fa fe 21 b9 6f 33 57 37 c7 d3 83 48 0d e0 9b 34 6c c0 ad f2 ef c2 61 14 73 89 61 95 14 d5 93 49 4a ea a9 03 5c d1 6b a5 49 fd 93 d2 1d 9c bc 8c 7b 81 c0 a4 01 d8 ee 05 fe 32 1c 46 31 89 75 75 14 55 4e 95 66 fb 4e 8f 38 cc a5 c4 fe 38 97 66 c7 c3 69 de ca 10 00 7c 03 b6 7b 91 bf 0d d7 8b 98 44 e8 54 44 51 e5 8c be d7 31 ec ce 95 2a 6d 95 1e 3b bb ab 56 e7 6a ab 74 db da a0 0b ad ef 25 60 da 6e 23 62 b8 88 c9 65 38 ac 84 a2 ca 99 ed 16 6c 03 6e 2f 69 1b f4 38 62 6f cc 6b 8e 79 cd f1 c0 4f 31 dc 86 c4 49 18 93 c4 ba 02 8a 2a e7 36 72 6b 06 4c 91 f3 06 c9 c0 6e 4c dc 44 31 c9 e9 e4 6c 8a Data Ascii: o2^)}vgv\|svb7O[QETKQ5^[!o3W7H4lasaIJ\kI{2F1uuUNfN88fi\|{DTDQ1m;Vjt%`n#be8ln/i8bokyO1I6rkLnLD1l
2024-09-27 16:52:51 UTC	869	IN	Data Raw: 3c e2 fd 55 00 81 db a4 d2 e5 32 2b 17 a4 88 77 00 30 ff 62 be 48 bd 79 16 40 60 ff c5 44 f2 f1 46 24 4d f7 0f 16 a4 3c 21 19 d8 7f 31 91 bc b9 4f 31 dd 6a af fe 06 7e 4a 7a 60 54 8d 7f 82 20 e5 29 c5 b4 1b 95 61 9f 41 61 95 44 f2 11 89 c0 70 1b 94 6d 9c c7 32 aa 6b a6 e0 26 61 36 29 db 00 50 0f 7e e2 06 c9 c0 b0 9b 93 6d 24 ed 5a 08 12 8f 0f 09 d3 70 1b 93 6d a4 d7 81 29 92 4f 48 1a 76 03 70 86 3a 2c e7 7c 46 b6 5d 03 7e 4a 2a 0d f7 17 b2 8a ea 84 03 6b 48 c2 aa ae 03 85 e4 05 05 89 fb 14 c3 be 00 fd 22 87 16 1c a4 60 a8 17 72 dc 74 58 e7 75 d4 a4 42 4f 26 09 05 6d a2 57 54 1d 56 47 24 9f 12 be e1 56 5f 77 2f d1 81 85 a1 4e c2 22 e1 5e a8 27 a7 b6 a5 1d d9 07 b0 eb c3 2d ac b3 22 ff fc 5f 28 d3 81 e5 f0 62 e5 ac 9f 03 be 8f 7d 69 b6 2d 81 fa bf 4a e8 ff Data Ascii: <U2+w0bHy@`DF$M<!1O1j~Jz`T )aAaDpm2k&a6)P~m$Zpm)OHvp:,\|F]~J*kH"`rtXuBO&mWTVG$V_w/N"^'-"_(b}i-J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49884	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i735!4i256!2m3!1e0!2sm!3i707457521!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=99449 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9480 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 0929c0f80c054359c Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	354	IN	Data Raw: 52 49 46 46 00 25 00 00 57 45 42 50 56 50 38 4c f3 24 00 00 2f ff c0 3f 00 0f c2 b8 b6 6d 17 f7 cb 99 99 a5 31 3d ab 83 99 d1 cf f9 bf 36 18 47 92 ad 04 77 89 81 e2 46 fe 19 71 fb ee 2e 0c 23 49 52 72 bc e7 40 11 01 f9 47 f5 ee 0a 37 ff 41 15 93 db 28 7d 90 7f 61 26 82 fe f5 59 aa 53 42 76 29 76 f1 1d f0 1d f2 1d f0 2d aa 92 d0 df a8 ed 15 f6 7b 53 03 52 47 c1 08 c9 11 94 aa 1c a8 ec 29 34 4a 0e 5b f6 54 72 42 89 c0 e7 41 84 c0 be 17 b4 08 c3 b4 17 b0 ed 5c 33 81 6e a0 b6 f6 47 f1 f3 de c8 98 46 eb 46 9b 46 eb aa 66 b7 aa a7 30 4a c3 c2 b5 a1 f8 c8 e7 90 cb 65 bd 27 7b fd 73 70 55 18 59 28 d1 71 99 84 30 69 5d fd 44 93 32 bb c1 eb fc 1e 06 e9 da b6 59 49 c5 08 04 53 1a b2 71 0b 93 1a ca a4 e6 96 56 66 c6 5a 75 fe 87 c5 56 d4 d6 df f7 8b e8 ff 04 68 a5 95 Data Ascii: RIFF%WEBPVP8L$/?m1=6GwFq.#IRr@G7A(}a&YSBv)v-{SRG)4J[TrBA\3nGFFFf0Je'{spUY(q0i]D2YISqVfZuVh
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: dc ef d6 d3 2b c5 94 1f 7a 50 c3 ef 29 a2 6f 05 4c 49 ab 8d d9 b7 d6 e0 aa 02 20 67 d6 a0 e9 cf 9f 86 a1 36 48 79 9c b6 1b 44 4a f4 7d 47 d4 20 b3 2b 30 c2 f0 85 64 a6 c3 8b 7b d7 c3 8d c7 f1 95 52 d4 ef 48 01 fe bc 87 f8 46 5b 41 f8 87 34 85 fe 7c e3 9e e1 61 1f aa 4a 8e 6a 34 a6 df 0c c6 fe cf 54 d7 f4 3f f6 3e 4a e1 4f d4 f0 47 02 c3 17 92 99 0e bf da e1 76 b7 bf 4e 4c f9 fe a3 a4 33 d4 1f 02 51 46 5b f9 f3 03 22 05 39 66 63 fa ad d8 df 7f f0 03 8d 7d d3 4f 18 7d df 99 3f 7f 1a 77 6f 10 c3 17 92 00 1c f0 6b 1e 8f 63 f7 4a 85 df 3f fb 36 80 e8 5b c1 c3 0f a0 7f 47 ca 8c 1a ca ec bb ad e0 27 cc 69 d0 fd 0f 29 e1 9f 06 4d bf 35 46 fb 86 12 7d 1b 3f 7f 54 23 78 12 c3 97 94 c3 af fc 74 3d de 5c 09 b5 ac 82 f6 fe e7 fb 8f aa 44 df 0c d0 a7 7f f0 3d 63 33 6a Data Ascii: +zP)oLI g6HyDJ}G +0d{RHF[A4\|aJj4T?>JOGvNL3QF["9fc}O}?wokcJ?6[G'i)M5F}?T#xt=\D=c3j
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: af 0a ac d5 57 62 a5 b4 9c b6 ae 1c 4e 0d 3a 1d ee a8 fd 4f 39 10 c3 ea df 92 99 b7 05 f1 76 ca 61 e7 46 39 d3 30 f7 39 9f f2 67 b9 76 7e 6d 14 0b 0a f0 79 cc 69 fd 53 80 f6 c1 a2 53 e3 ae 10 fd 5b 31 e3 c6 6c c6 7b 5e bd 23 b3 39 5c 3b 33 c2 94 88 52 14 e6 3e d7 e7 35 d1 15 f6 91 01 8d 29 5f 2b b0 e5 5f 25 b5 3a dd d1 ea 84 03 a1 f9 77 f1 97 d8 8d d9 8f d7 b5 c8 95 99 0e af 6b 19 7c 24 27 c0 52 3e 92 57 45 83 d2 4a 4e f4 f7 55 39 9c ee a8 7d 4a e8 ef 3c 75 3a 30 fa 64 c6 6d 09 77 f1 8d 80 02 7d 31 67 0a b0 b0 14 0d 4c c1 02 3a 58 73 7e d7 69 dd cd 17 0d 62 4d 4b 5f 30 e8 8b 5b 13 ad 63 b7 3e ce 65 81 29 80 06 28 00 d3 00 28 68 3f 86 dc a0 8e 78 f2 4c 83 38 48 25 22 53 25 c2 8d 8d b7 d3 5b 91 b6 b4 c2 db f1 fe 85 a4 00 10 c8 34 bf e6 de 39 d6 e3 fd 2d 69 Data Ascii: WbN:O9vaF909gv~myiSS[1l{^#9\;3R>5)_+_%:wk\|$'R>WEJNU9}J<u:0dmw}1gL:Xs~ibMK_0[c>e)((h?xL8H%"S%[49-i
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 30 ab d1 76 9a e1 c8 f4 10 e8 09 60 c0 81 a0 40 57 02 ce ff 8e 23 b3 bb 40 20 80 90 03 83 02 32 fd 7f e3 c8 a2 5d 01 e0 83 03 4e b7 ef 67 51 57 02 ce 7f 0b 6d a7 b2 f8 50 20 c0 2a 25 81 7e 46 00 f4 fe 67 36 61 b1 17 81 a0 db 77 39 00 09 f8 02 08 fa 2f 81 40 d0 fb 7f 21 59 7c 28 d0 95 b3 a8 40 d0 97 e8 8b 74 e0 fd ae 22 f7 52 02 d1 93 08 df 72 82 8c 20 03 bd eb e7 fe 06 fa a2 27 81 e9 7a 90 d1 15 00 02 5f 64 7b 57 6f 3b fd 0d 04 42 66 fa 1d 0e d9 0d 52 05 ff 53 a2 75 b1 9e c8 59 8d 3c de 13 65 af de e6 46 d1 b6 98 2f 28 eb e5 3d 70 86 a5 f8 ff ca ba 90 c8 43 5f 38 72 f8 5f 87 51 08 0c 8b 05 ff 5b 4f 1f 5c 62 58 c8 e7 86 ca 60 fc 5f 98 44 0f f3 a9 69 10 0a f4 e5 8b 9f 21 42 8e 7e 77 98 37 f0 ee 18 f4 a5 a5 fe 47 18 2c ad 03 0d b2 a8 08 44 90 11 f4 38 30 24 Data Ascii: 0v`@W#@ 2]NgQWmP *%~Fg6aw9/@!Y\|(@t"Rr 'z_d{Wo;BfRSuY<eF/(=pC_8r_Q[O\bX`_Di!B~w7G,D80$
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: c0 92 25 33 4c 4e 6c 9e 50 19 b7 0e 9e f0 ae 18 af bf 3d 73 f3 c0 e6 44 d4 c2 e2 8b 56 7a 3b af 97 f7 36 12 e8 78 c2 e3 ee c0 64 c9 6b 4a 65 8b a4 55 c4 eb 00 bc 96 1e ff 4d c0 9e 51 9e c1 00 e8 87 e4 b3 a5 5b 9b 3c f8 39 ef 00 06 04 22 78 06 3b 7e 36 ef 98 81 c5 e7 89 19 19 5e 6f 40 1e bf ae b5 01 9c 0b 83 1b cd dc 2c 40 65 ad cf e4 a0 b3 c7 70 5d 00 dd ac cc 40 00 1d 6e b2 56 82 55 c3 63 c9 57 8b 99 dc eb f9 c1 c0 e3 57 b7 46 80 83 0a bc 81 5b 1b c0 9e 45 19 26 c3 6b f2 b5 60 40 43 6f 47 05 90 f1 96 81 61 4f 3a 1c 06 6b 1d 96 4c c5 6b 9b 79 be 08 06 1e bf c6 b5 02 2a 18 88 a0 53 1f 20 9a d9 1c 50 f5 8f e4 6b 45 44 47 1c f4 69 81 6e 6a f4 0e 04 fd ae cc 76 0c 05 00 53 80 bb 01 79 fc 4a 5f 5a 20 00 bf 46 70 67 11 87 3a 4f f2 8f fa 73 29 02 ba b2 a0 d1 68 Data Ascii: %3LNlP=sDVz;6xdkJeUMQ[<9"x;~6^o@,@ep]@nVUcWWF[E&k`@CoGaO:kLky*S PkEDGinjvSyJ_Z Fpg:Os)h
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 54 a0 73 15 00 33 93 1d a1 6f ed 32 bd d1 bb c8 e9 ca c6 2a c9 a7 5f 81 1d 75 7c b7 5c ef 12 4c 32 88 48 25 76 38 ea 21 2f d3 7d 7a 13 dd 8c 40 a2 b1 3c ac 88 e6 44 2d 86 5f 41 64 f3 cc 8b 33 59 66 6b 4e 87 a3 7e 5f 0a 02 e8 67 0c 25 54 a5 20 83 79 1b 00 83 88 4c 22 17 70 ca cd 5c ef 3a 18 ec 78 4a 72 75 a3 10 32 46 f0 33 ba 12 86 3e 27 5a 11 1d 8e a0 db 51 dc 28 d5 71 2b 08 bc 8b 48 8e c0 c7 8a 08 95 f8 ef 4f 22 53 02 c6 3c c9 3f fe 06 dc e9 80 97 23 97 5f 44 ae be 48 58 15 6f 23 81 21 40 29 6b 45 af 73 5a 1c 93 cf d6 6f 20 7a 72 4b f9 1e bf 4c 83 c8 24 22 77 be 48 74 b5 5c 5f 00 78 f1 d1 97 00 6f 30 00 ad cf e4 c0 60 f0 9b 67 87 43 94 08 3a fc 52 55 d6 30 4c 8e fd 63 6b 65 55 32 42 20 bb e2 45 02 70 4c 86 d7 e4 6b c1 54 c3 bc 79 ee 54 78 65 7a fc 52 4d Data Ascii: Ts3o2*_u\|\L2H%v8!/}z@<D-_Ad3YfkN~_g%T yL"p\:xJru2F3>'ZQ(q+HO"S<?#_DHXo#!@)kEsZo zrKL$"wHt\_xo0`gC:RU0LckeU2B EpLkTyTxezRM
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 76 19 e8 56 1e a5 78 e1 e9 7a 3b 01 b6 14 f1 dc 2a 1c 5e 61 90 02 fc ce d9 dc 78 bc db f0 8a 65 a9 40 bc 8d 52 c1 85 d8 b3 f0 99 66 bc 60 19 e8 56 96 55 ca de 60 02 6c d7 53 5e d0 29 e7 f0 2a 07 59 40 d0 39 d3 66 47 e0 15 3b a5 fa 08 44 b6 77 01 f6 2c 7c a6 99 fd 42 24 33 1d a0 14 74 2b a3 a5 97 d8 c7 13 60 17 4f 79 e1 72 bc e2 20 07 08 bc 73 6c 76 e3 35 af 5a 96 1b 42 e0 fd 09 40 af 6e f6 2c 7c a6 99 cd e1 bc 14 ad 00 ba a5 6b d0 5b 5a b1 70 3b 01 36 7b 97 5f c2 a0 08 3f e3 7e 37 8e dd ca d2 0e 8a f4 fc 17 81 d1 3b 80 4e ad ec 59 f8 4c 33 9b a7 65 31 b5 1c 60 e9 5a db 2a e6 ae 27 d8 c5 53 5e b6 2e 6e 81 ce 19 c2 f5 38 76 f9 99 8b 74 7d 0c 45 a6 57 1f 7b 16 3e d3 cc e6 b9 e7 83 a5 b7 29 a5 e6 ec 77 93 cd de e5 17 02 3f 27 e0 d5 87 eb 71 1c f1 5a bd 08 60 Data Ascii: vVxz;^axe@Rf`VU`lS^)Y@9fG;Dw,\|B$3t+`Oyr slv5ZB@n,\|k[Zp;6{_?~7;NYL3e1`Z*'S^.n8vt}EW{>)w?'qZ`
2024-09-27 16:52:51 UTC	786	IN	Data Raw: 11 3f 73 b8 8b ed 3a 38 12 81 40 7f f8 f6 2e 30 94 e7 d9 ef f6 1f a7 cc cf c3 82 df 12 00 55 44 33 9b 9f 3d 1e af 51 43 47 62 28 10 90 18 01 81 3c 8f bb 9e 80 6c 7e 5d 6b 54 21 cd f8 f9 29 de 85 75 90 e8 0b 00 6f 4f 02 e8 9e 69 bf 9b d0 86 df 3e d7 4b b9 33 b7 06 fb 5d ec d6 c0 91 5d 01 e0 ed 5d 00 7d 99 ef f0 2a dd f5 04 e4 de bc 8e 2f 06 a9 99 cd 6b 18 8f 37 fc fc 8e 44 90 1a 01 f0 65 3e af 76 bf 9b d0 9e df 3a 2f 10 f0 53 11 47 87 ce 15 ad 37 d3 1a 48 f8 02 78 1b 09 20 78 c9 71 78 b5 76 3c c1 da bd 75 1d 78 81 08 52 80 27 bc 73 ed c7 31 ce ef c8 be 00 46 ef 00 d0 93 d9 0e af 78 33 c1 6e cf 6f 9a e7 0b 10 f7 04 32 bc 40 b8 e7 8a c7 9b f3 39 b2 2b f2 87 32 db e1 15 db eb 09 62 f7 c6 09 00 3e ef 08 2f 05 8f f8 d9 76 fb f3 c9 6e 20 f0 36 4a 05 32 db e1 55 Data Ascii: ?s:8@.0UD3=QCGb(<l~]kT!)uoOi>K3]]]}*/k7De>v:/SG7Hx xqxv<uxR's1Fx3no2@9+2b>/vn 6J2U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49885	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1977!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=48996 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 13910 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 0e238d1a27c30fb96 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	353	IN	Data Raw: 52 49 46 46 4e 36 00 00 57 45 42 50 56 50 38 4c 41 36 00 00 2f ff c0 3f 00 d7 e3 aa b6 6d 55 b9 e7 19 ee 2e 19 88 40 09 52 93 03 be f4 b9 6e ce 3e 35 5c d5 b6 ad 2a 57 71 e7 cf 13 38 49 28 4a 10 42 b8 bb 3c e1 9c 73 cd 6d 6c db aa 72 3e ee ee 1a d2 00 31 ed 52 96 7b f4 dd ee bf f7 cc 7f 58 60 63 64 81 e8 0d bd a1 37 f4 c6 08 48 60 04 44 d2 88 48 e0 8c 83 de 68 4c 24 20 92 11 10 89 04 44 02 08 80 80 58 7b b3 40 c9 ff 58 fd 53 47 a0 42 87 02 c6 a8 33 b0 85 bf 51 20 b5 09 07 f1 39 33 76 7b f1 c9 c4 27 15 f6 2e 2e 3a 30 aa b7 0d 6b 2d a3 7a 5b 35 68 2a c2 17 1d 69 f3 ae c5 5c 8b 99 8e 72 f4 d4 42 aa 48 22 f9 cf 17 bf 5d 79 14 c8 a3 50 1e 05 f2 28 90 7e 5d 83 05 8c ca 0d d3 6a 53 7f 35 b5 6d cc 9d f9 da b1 f0 b4 d6 7b 03 77 c4 25 44 b9 ba a9 18 d0 9c e8 e5 6a Data Ascii: RIFFN6WEBPVP8LA6/?mU.@Rn>5\Wq8I(JB<smlr>1R{X`cd7H`DHhL$ DX{@XSGB3Q 93v{'..:0k-z[5hi\rBH"]yP(~]jS5m{w%Dj
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: c7 e1 e1 c6 4f 14 fe f7 ff 93 9b b6 fe 3f 79 24 cb 60 38 6c 81 b4 29 3b e9 de b4 e0 40 bd 3b 67 6d 1a 6a 23 1b bc cb 92 02 3d 6d ba be 5e 5d 5e ef d3 94 f7 9f 2f cd 8c 46 63 e7 fc fc 9c e7 33 a2 ff 10 25 49 8a 2a d5 80 1c 0f 59 44 94 e1 70 3f c0 15 65 7b 07 1f b8 a9 b2 be 23 ca a6 ab 41 1c cb eb 40 1b 20 bc 99 dc ee 64 94 a2 50 d2 cd 1d dd 62 5c 25 19 0c 7d 5c 0c d9 50 ba b0 c2 b6 c8 9a 0e f2 76 a5 9e c8 55 ed 45 66 56 85 ab da f9 ef c2 d2 b6 52 eb 5a 13 59 d2 41 e0 58 9c bc bc 35 ab 59 59 e7 29 be e9 a8 d5 f1 92 b2 b3 ee ea e0 c6 ce 5d d6 ea 95 e1 ed dd fa 4e 36 24 cf b7 f9 6f 40 14 a2 4c 1e 28 d5 ef aa 70 c5 7a 60 97 8d cb f6 79 b3 78 a7 a1 02 0b fc 75 fe 37 60 2a c7 70 35 92 2a 0f 38 5c 1d f8 01 ab b5 d1 75 2a 5f e9 c0 24 2c ef fc 37 60 22 94 42 f2 20 Data Ascii: O?y$`8l);@;gmj#=m^]^/Fc3%IYDp?e{#A@ dPb\%}\PvUEfVRZYAX5YY)]N6$o@L(pz`yxu7`p58\u_$,7`"B
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: cc 86 30 d2 61 5f 50 a3 55 8b 98 eb b0 6a 2b 42 97 5d b4 6a 8d d6 05 cb 41 ab d6 6c 78 2c df 6e 75 96 6d af d1 44 f2 98 31 ce d3 d6 e5 ed f6 dd 57 50 bd 35 5f 81 0e 05 0c 32 4d 40 a7 fb 50 5d 25 e4 de 27 a5 46 ce aa 13 c3 98 6a 9b a8 5f 46 9b 78 10 11 ad a4 99 99 e4 d0 6e b0 b8 10 44 86 c2 c1 70 9c 1d 16 35 9f b2 a8 71 c1 f2 d8 6f 35 5e b0 7c 0c e2 53 48 40 ac 34 6c ea b4 3a b7 ac 56 45 a4 06 73 00 1a 48 66 3d 06 88 47 8b b3 a4 7a d6 8f 3f 24 be 74 93 01 ac 55 ac 73 c0 a0 e9 75 28 64 97 51 92 84 a3 d1 66 d8 37 c9 6b 06 19 d5 11 4d c9 6a b6 59 f8 0c 61 1c 33 c9 cc 8b 16 22 b6 0d 3a f8 b4 8e 86 01 07 09 f4 81 58 a7 f5 95 1d 41 07 91 00 1d f4 5a 9d 56 f1 2e a6 6e 34 81 eb ea 89 df fa fe e7 9f e0 93 27 6f a5 97 b3 e0 62 d1 ac 2d ab 10 36 2f ad 4a b3 c5 25 69 Data Ascii: 0a_PUj+B]jAlx,numD1WP5_2M@P]%'Fj_FxnDp5qo5^\|SH@4l:VEsHf=Gz?$tUsu(dQf7kMjYa3":XAZV.n4'ob-6/J%i
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 08 24 86 5f a8 92 fc 01 63 10 7d 30 88 38 92 95 08 11 27 7c 29 60 0c c5 1d dc da a4 6d 24 22 9c 2b 1b 92 a9 97 4f 77 30 cb 04 dc da fc 28 b5 1a 75 f3 ac ee aa 1a 3a be 42 5c 51 5d 82 0c 7b fc 5e 33 b5 0b 1c 0f 0d ee 48 64 ae ac ee c4 87 ef 93 c0 8f a9 a4 4d 3a 14 b6 e7 84 63 f5 3b 9c b8 ca e6 2c c3 38 6c c2 59 bc 41 75 36 17 82 a5 6d 2e 36 49 0b 3f 2a 21 6b 11 6b d9 88 94 71 18 59 51 a9 5c 22 e3 6a 37 41 77 e4 66 66 6d 11 48 b9 77 3f 3f cc f6 05 4e 21 db a7 54 44 aa b0 76 3d 6c 54 cb d4 ea bb 9a 4d 74 dd 0b 91 c3 87 0c 14 e7 41 21 95 35 e9 bc e3 c7 3f ed a4 91 75 7f 50 e4 f3 bb b0 20 a4 0c e4 59 b5 7d 5e 41 07 4a 65 57 9f f1 11 71 dc 05 44 d1 cd 00 ce 83 4d 29 d2 b5 d8 4f 3f fe f1 e7 9f e0 2d 85 71 7a c1 d5 21 21 c5 37 00 11 09 42 35 2e 91 e3 3c bd b0 c1 Data Ascii: $_c}08'\|)`m$"+Ow0(u:B\Q]{^3HdM:c;,8lYAu6m.6I?*!kkqYQ\"j7AwffmHw??N!TDv=lTMtA!5?uP Y}^AJeWqDM)O?-qz!!7B5.<
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: df 55 37 21 4a 7c 1f ff 90 31 4a 2f a5 1a 73 a0 56 e2 53 8a 1b 3f 96 d9 f3 f8 39 8b d3 7d 2b c0 1c fc f5 b7 6f 93 92 f4 96 c6 cf 03 e7 f7 2f 0b 6e 30 65 bf 3d 47 4c 08 3c df fa 2e 1d b2 00 83 a2 76 9d a3 90 90 f9 43 a4 87 df ff 94 f5 cf ac 69 a5 7c c9 5c e7 b2 2c 51 bb 96 39 73 77 fb fc f7 df e0 d7 57 2c 27 e1 8b 5f 18 20 d2 ef bf fc f6 45 72 b8 3a 0d 90 7d 49 bf 60 5c 38 37 ea 77 98 ca b8 0b a1 1f b9 f3 3a 47 d8 82 a6 be 13 39 bb 3a bb ac 93 76 a3 ef f4 1a 94 4c 28 4a 67 fb b6 ef 6e dd 57 c8 d0 b1 11 29 87 88 9c 82 96 77 19 7e fb aa 37 4b 52 75 0f f7 af 1d 86 5c e1 5c 0c bc 8e ca b8 1b 31 70 71 53 7b 22 d9 b4 8b 32 4f 7e fa 58 47 f3 2d ea c3 c9 95 5a cf 00 73 53 22 c9 15 73 1d be c9 1b db 31 2e 02 14 00 c0 b8 06 00 10 11 88 f0 6a cf 18 c3 ed d1 e3 be ba Data Ascii: U7!J\|1J/sVS?9}+o/n0e=GL<.vCi\|\,Q9swW,'_ Er:}I`\87w:G9:vL(JgnW)w~7KRu\\1pqS{"2O~XG-ZsS"s1.j
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 7b 8d b9 3f 13 b2 38 a4 ee 10 90 6f 85 53 17 09 39 c5 aa 4b 24 7f dc 0a 9b 19 3e 9a c7 bc b1 c3 56 dd f4 2e 4d ce c9 17 d6 37 17 3c a2 d8 25 d9 6c bf be fd d1 72 47 be 47 6d 4f 98 8d ba ea 9e 71 98 7b 0e c4 71 97 88 48 f6 ae 59 7e 90 71 af 8c dd ae b3 be 69 5c 5a 39 86 f8 f2 76 63 a1 29 c8 28 68 eb ac 53 a6 1f ae 51 26 83 03 71 20 7a df 3d dd e5 9c d0 9d aa 0d 28 85 f2 67 80 35 ce db 58 b2 b0 5e 09 59 f9 ea 76 91 d9 76 63 74 86 15 1e 96 c9 38 48 f9 66 eb 50 32 1b d5 dd 3b 35 60 ae a4 ac 15 8d b0 b4 91 d9 62 9e 85 e5 67 25 ab da 68 9f 57 4b 8d d0 5e 5f 60 36 63 34 87 b7 97 dd 14 52 1c c4 d3 e3 33 71 36 ea 1e 8c 01 0a 03 09 fc 85 d2 da 96 60 b3 9a 73 ab d3 f4 1d a8 b7 fa 16 73 0a 6b 0f 16 95 35 19 85 f9 cc 10 46 d3 14 07 f1 4a 54 c1 f0 fe 0c f6 4e e9 4a 46 Data Ascii: {?8oS9K$>V.M7<%lrGGmOq{qHY~qi\Z9vc)(hSQ&q z=(g5X^Yvvct8HfP2;5`bg%hWK^_`6c4R3q6`ssk5FJTNJF
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 4e 3e d2 f6 bc 65 1f 90 c5 71 26 68 82 d7 2a b1 5b 63 8a b7 e6 81 82 8f 60 30 f2 95 b7 54 99 1b 0c a6 22 d5 be d7 b8 b4 3a b5 06 ab 97 2a 96 d7 f6 a9 6e 95 1a 58 0f d8 65 ad ea b1 97 e5 46 f3 12 5c df 2e 23 51 ed 3c 06 8c d3 6b 58 75 72 2e 0d 4c c6 50 2f b5 9b be 69 3b fc 97 c8 43 09 5d e2 bb a3 e9 fd c1 89 30 10 3d be 9a 84 82 e8 7f de b8 4c 8b 66 85 5b ac b2 c3 32 b3 2e 2b a5 a6 17 9d 97 bb b7 95 0b b3 99 ee 1b 65 ba 77 37 dc 74 98 c8 79 dd 5c 32 2b 7c 56 62 d5 66 ff b2 51 ae 35 aa 56 bd fd b2 7a ee 35 f1 b2 65 95 6a 8e 4f bd fc d0 39 6f d6 a9 75 1d 17 89 35 7b a5 8a f5 cc 01 68 39 b3 09 50 d9 ae 54 09 41 b6 db 80 a6 44 14 74 41 30 38 8e 75 50 31 0b 01 7f 9a f6 25 94 f8 07 20 52 ac 6c d8 90 7c 8c b8 21 2e 4f 55 9a b5 90 1a d5 52 f3 05 15 97 b7 75 fa f0 Data Ascii: N>eq&h[c`0T":nXeF\.#Q<kXur.LP/i;C]0=Lf[2.+ew7ty\2+\|VbfQ5Vz5ejO9ou5{h9PTADtA08uP1% Rl\|!.OURu
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 4c f1 35 be 8c 0b fd d2 30 cc 23 e6 90 13 17 1d 98 de c7 9e 7d b0 f8 f0 db cc 18 63 6c c3 07 2d ea 4b 6a 40 4d 1e e8 c8 62 e4 45 6e 6a 0e 2a a8 78 0a c5 15 d8 d8 dc 49 83 28 e6 a5 79 ff 5d b3 6c 8a 1f fc f1 32 3e 3c 62 8e 8d 1f 98 f7 b1 10 92 f3 fa 43 e6 16 90 ec 3f 80 d9 cb 8f 72 06 5f 23 14 d1 20 ae dc be dc f8 83 3d 7a ff 03 64 af 09 6d 7c b4 6c fd f1 9a c8 e4 96 e9 b3 a2 33 3a 3d 79 6c 19 a1 a6 79 11 ee 82 65 7a 51 46 15 78 7b 45 83 ae 3d 19 a5 b4 c3 89 ab 8c b0 d0 b8 26 cf 2f 15 63 62 ec e5 0f 37 cc 36 de be fb 7e cc a3 0f 0a 0c ff 30 8f 24 38 88 36 c5 77 23 6e 83 39 83 1f bc ff c7 6b 8c 4b f5 e1 4a 1c c3 f3 08 62 3e 7c 6d bd ff 81 79 64 c5 25 46 53 cc 0f bc 5d 81 ff 58 e6 6d 86 c6 32 24 e0 89 ac cc 49 01 1f df 20 06 52 68 84 4a a8 88 1a 1f 00 00 18 Data Ascii: L50#}cl-Kj@MbEnj*xI(y]l2><bC?r_# =zdm\|l3:=ylyezQFx{E=&/cb76~0$86w#n9kKJb>\|myd%FS]Xm2$I RhJ
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: ee 10 51 bc 17 c2 2e 85 83 43 31 43 3d 71 a2 8c 49 41 82 05 61 4d 19 ba 9e dc 44 3a ac 3c 66 4a ea 81 20 91 fb 93 33 21 83 bd 53 77 a1 a4 4b 13 5a 10 42 22 19 bd eb b1 06 eb 73 96 26 c2 f9 04 a9 c5 42 1c c9 02 38 39 39 3a e5 c7 e0 07 87 e1 02 c5 5c 9d 1e 9c 98 e3 c5 20 12 bf 24 98 d0 28 0e 44 3a 14 82 5e 12 03 5d e3 2b bc 12 82 a4 f4 48 94 b2 81 65 5f dc b4 7c 74 72 b5 08 4c ba f7 f1 94 ee f1 d1 c1 de ee 29 2c 06 98 16 8d d7 d9 08 fc d8 3f 4a 62 64 4d 88 68 4a 13 2e 24 69 c0 53 b9 02 7f 75 28 44 c1 01 0d 34 f1 fc cb 20 e1 d5 bf 10 5c be 00 7c 63 bb 8f 67 f2 4e 8e 0f f6 85 9d 5f 8b 8a 4a c2 40 1e 6b bc 1e de 84 49 23 9b 09 8d 2c 08 15 9e d4 b0 3b 1c 48 0a 13 1e 1d 60 ec df e3 76 29 79 7a f8 a7 89 cf 45 34 89 20 3c 47 63 da f7 bb 47 8f 8f 0f 0f f6 f8 dd 3e Data Ascii: Q.C1C=qIAaMD:<fJ 3!SwKZB"s&B899:\ $(D:^]+He_\|trL),?JbdMhJ.$iSu(D4 \\|cgN_J@kI#,;H`v)yzE4 <GcG>
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: f8 8f bf 2b 0a 28 e3 cf 52 ae 65 0b d5 44 06 c4 dc ef 09 60 9c f0 fe 80 e2 bf 25 fc 85 24 a7 77 ae 62 9b 68 7b 73 64 0d fe 42 b4 ec 3a 2c b4 ea 3d 27 68 5e 32 70 c7 c3 01 a6 8b d2 a8 2b 94 bb c6 18 a3 dd 29 6e 66 24 18 76 39 4e f7 78 0e ce e0 f1 fe e9 ee 47 52 b9 17 e6 28 e6 c1 a6 e4 19 e7 3f 9b c2 a0 69 d5 e2 df 2e 5b 21 73 fd 61 57 9d 62 0a ff 12 7f c7 ff cf 89 a4 18 ff 52 66 e6 cb 59 d3 b0 3e c4 2b 1e 3c ef ec 1d 1e 9c 02 c0 bb 92 7e 65 1a db c0 9d 13 2b 92 ef a8 99 77 6e 19 66 3b 0d af d3 f4 59 a9 7e c9 dc a8 4b a1 42 f0 81 c2 3a 3a d1 3f 64 36 cd 80 ab c5 29 ae 66 66 18 f0 8a 87 70 a0 43 e0 04 8f 93 1f 0f 27 a3 d8 86 ee bc 10 fb d0 bc 93 0b 5b 5e d4 68 3b e7 64 95 5a f5 46 c8 1c 17 87 a0 d4 9a 57 1f ac 2d 61 1a e2 93 66 44 24 05 51 27 9c ca 28 14 b3 Data Ascii: +(ReD`%$wbh{sdB:,='h^2p+)nf$v9NxGR(?i.[!saWbRfY>+<~e+wnf;Y~KB::?d6)ffpC'[^h;dZFW-afD$Q'(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49886	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1976!3i2945!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=89471 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:51 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 12504 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 02075248af2d66a44 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:51 UTC	353	IN	Data Raw: 52 49 46 46 d0 30 00 00 57 45 42 50 56 50 38 4c c3 30 00 00 2f ff c0 3f 00 67 c2 3a 92 64 25 ef e1 ce 27 e9 11 03 61 bb 3b 37 97 86 db da b6 95 08 77 08 89 e8 82 12 68 8f b2 e8 83 48 23 87 99 e7 6c 03 80 4d 12 dc 7d d6 95 af b8 91 17 38 24 dd 71 d7 64 fe 43 8d 63 44 e4 27 f2 43 89 1a 30 04 70 89 f1 18 0c 60 22 4c 10 86 fd 54 24 af de 0c 2a 7e fe bc 76 2a 7f 20 8f 14 7a 5f 2e 27 25 0f 03 01 c0 14 01 c0 40 00 b0 a5 ed 69 32 39 df dd 03 0f 39 64 87 37 59 ef d5 0b 8f 07 2e ce 6e 0b dc 52 5c a9 5c 55 04 b1 2c 48 74 79 6d a8 ba 0e f9 6a 3c 06 1d a1 9e 84 8e 50 4f a8 23 14 05 35 bf d7 64 79 20 4a 35 51 62 73 b7 4a 9c ea da 21 71 36 8d 36 10 b6 6b b5 5e 8b ed de 2c e7 a4 1e 65 cd bf 25 ee c6 9d 0c bf 13 70 62 89 8d 40 60 86 7d 39 19 bc ed ff a7 27 cd b6 6d 99 e4 Data Ascii: RIFF0WEBPVP8L0/?g:d%'a;7whH#lM}8$qdCcD'C0p`"LT$~v z_.'%@i299d7Y.nR\\U,Htymj<PO#5dy J5QbsJ!q66k^,e%pb@`}9'm
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 2b ea e0 f5 74 3e eb 16 36 84 9f 2e 10 e7 c7 a7 67 8c e3 fc 57 0b 00 f2 68 be e0 cb 99 a9 ce d3 a7 d9 51 42 58 61 b0 8d c3 0f e1 80 3a 72 d5 31 b4 f8 d5 88 9f bf f8 a6 0f fe d5 d2 50 ef cf 17 3c 9d 35 00 b8 9c 3e 4d 8f 12 c2 78 0b 07 69 c1 7a d7 26 83 d5 07 f5 d3 89 db 9f b0 cf af a7 8b e9 55 03 80 2b 7e 9a 5e 4f b6 b0 49 0b 4e 77 6d 35 aa f8 c3 88 b4 65 6a 99 6f 8b 1c e6 47 d3 a7 e9 55 03 80 2b 5e 30 26 83 fa a8 dd 2a 2d b8 7f c4 cc e9 0e 01 ab c1 87 21 41 e6 9f bf 6c d3 6d fd 74 00 20 39 ba 7c 9a 5e 36 00 98 4d 17 3c ef 13 86 b5 e1 c4 86 d2 82 af e7 00 66 e9 2e 59 af 06 70 87 8f 8a dd 00 90 47 b3 a7 c5 25 4c 00 66 bc e0 39 2a 60 43 d8 8c 1b 46 54 34 60 96 ee 50 cc 36 e3 6a 72 b0 59 13 7a 9b 83 6a b2 b6 e8 2f fe 7b 00 c8 fe 7c c1 d3 99 09 c0 ec 72 fa 34 Data Ascii: +t>6.gWhQBXa:r1P<5>Mxiz&U+~^OINwm5ejoGU+^0&-!Almt 9\|^6M<f.YpG%Lf9`CFT4`P6jrYzj/{\|r4
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 68 27 f3 06 dd bd 55 9b f1 7e ab b4 53 f8 31 5f fd b8 2e 00 0c 8f 16 05 af 83 ab 1f b3 f9 e5 62 96 90 6f a7 f9 23 4b ba d7 6b 31 de 6b 53 16 ba 5b d9 8f 15 bc ab 1f 57 41 f1 03 c0 75 81 e9 1c 00 3f c1 a0 90 72 8e 3e 50 e6 48 99 15 10 1b 58 7d 24 3a ee 1c 46 76 bc df 8a a3 6e e1 e8 c7 14 00 16 30 f2 d3 dc 3c a5 1c 7d e4 48 59 81 a0 13 85 94 39 07 fa 28 53 15 aa a4 e1 68 b7 4a 43 a4 3b 1a db 0c ec 86 6d 3e 15 25 75 3d fb 61 7d 7d b9 b8 34 80 14 c8 32 95 64 19 27 79 bf cc a5 89 17 1f c0 2e ae ec 06 ed b8 2b bd 26 e0 ba 69 4e 40 79 b9 b8 aa 05 e4 7e 78 b0 c9 d3 b2 9f eb f8 3f ab d7 62 af 55 da 95 41 cf 02 38 ba fa 81 e9 b5 22 e3 d1 74 31 9b 83 b6 f8 5e 8d cb 01 85 2a 2f 39 ed 9b 64 b8 0b d9 ee f4 c6 76 18 b6 28 0b dd 95 d1 c0 aa f5 d1 62 3a 0b d8 1d 06 d5 64 Data Ascii: h'U~S1_.bo#Kk1kS[WAu?r>PHX}$:Fvn0<}HY9(ShJC;m>%u=a}}42d'y.+&iN@y~x?bUA8"t1^*/9dv(b:d
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 3c 91 9e 7f ee 0b d4 f2 c8 bb 75 71 0b d5 8f 89 95 7f 7b 17 e4 e0 bb db 20 ba f9 2e f8 3b 33 7f fd e6 ab 3c 65 f8 b7 77 be 4e 7d be b9 e5 3b f6 fc ef 37 bf 71 23 ee be de 30 7f ff e2 7d 67 02 7f 0f 4c 89 6f b8 63 fe e2 dd de 89 00 06 5f dc dd fa da 28 01 24 8c 66 5d 4f 58 b7 4f 35 97 05 73 58 0b c4 f9 b2 ff 72 2f 3c b1 7c 05 bc 93 25 5e 81 63 af ff ca 2f cb 73 ef f3 f2 f5 05 38 11 04 9f 97 f7 02 30 2c 3f 37 1d 2f 5f 9e 97 17 c2 27 84 39 bc bf 5c fc e5 e5 08 09 10 b7 77 08 18 77 b7 08 6e be 7b fc fd ae 2e 48 37 29 ff cb b7 9a f0 bf f2 97 6f be b8 fb c6 cc fc 45 7c bf 91 e0 ef 81 e4 bb 5b bf e4 e8 67 ed 86 bf dd 7a 7c e7 4b be bb 15 26 28 63 c2 cc a9 4d 4c 00 34 a3 25 33 00 14 25 17 9c 32 73 e8 3f 83 2f 96 b9 e0 e5 eb 69 ea bd b0 f4 1f 96 c7 e2 fe 45 f9 0f Data Ascii: <uq{ .;3<ewN};7q#0}gLoc_($f]OXO5sXr/<\|%^c/s80,?7/_'9\wwn{.H7)oE\|[gz\|K&(cML4%3%2s?/iE
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 5c 55 43 1b 25 b7 30 4c 7e 76 ca a1 6e 13 08 c0 67 3e e6 d3 73 31 b4 38 78 27 eb 58 ef 44 5a 94 a1 41 69 72 83 2b 13 35 1f 56 03 1b b9 8d 6a 43 1f 0a 02 66 e1 c3 3b f5 5e fd 41 c3 68 45 2d 95 dc 89 a8 2c 74 4d 66 e4 6a 6e bc b6 18 54 9b 6e 14 d5 70 07 a4 75 3b 04 02 ea fc f5 59 fa bf 0f 0c 87 1b 6a 9d a2 cb 61 a2 4d c8 8b 8c 22 9d 71 e8 40 45 b5 a3 ab 39 70 c5 16 bd c9 aa 1b 3f 07 1b 5f b3 cf cc 9d 89 75 a6 6a 0a ae 44 fe b8 7c e8 7b 7d 4f ac 06 a3 f1 64 40 ad c3 54 75 8a 23 34 26 45 99 e9 88 9c 4a d4 ca cb 39 30 2d 2d 30 78 df d6 5b ed a7 cf bf 45 c0 00 e0 77 43 26 0c 32 4a 50 dd c5 e9 63 ee f5 5f 5f 5e 4f 45 40 2e 65 16 51 97 a5 a6 e6 b0 2c 34 59 47 b2 59 19 d2 e9 1c 58 48 9b 1e 9c a1 f6 36 aa c6 35 f1 fc af f9 b8 0b b1 ca 74 4c 8d ee 7c 01 2f 5a 9e f9 Data Ascii: \UC%0L~vng>s18x'XDZAir+5VjCf;^AhE-,tMfjnTnpu;YjaM"q@E9p?_ujD\|{}Od@Tu#4&EJ90--0x[EwC&2JPc__^OE@.eQ,4YGYXH65tL\|/Z
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 56 e0 41 8f 00 a9 29 10 5e ff 98 99 63 11 6c 27 ce 68 17 3c 08 ea c1 47 87 22 e5 6c 6c 87 b2 c8 2a 60 40 49 53 46 16 47 74 50 0d a8 a5 7a db b7 2c 22 02 56 a3 0d 19 d3 90 84 f4 c0 e7 17 a7 9e a0 ed 40 72 f7 02 01 40 15 29 75 09 89 33 ac ed b2 22 1f 57 18 92 8e 4d 52 1b 16 b3 39 b8 a4 cd 88 ac a3 b7 bd 7d fb 42 91 a5 d4 e4 8b 87 e3 b3 e5 e3 c5 cb 83 f0 b7 84 44 76 2d 10 f2 e1 b9 4f 4a 7e 10 43 3b 5d 94 9b 49 35 22 95 c6 86 34 36 3c cd 01 4e a8 c7 16 d1 db de 7e fb 4f ca 22 23 f8 e2 05 cf b9 08 f8 25 f7 65 73 02 84 0e c2 2c 74 c5 da 71 e0 bf 9c 9f f8 cc 02 9d e2 d0 d9 a4 67 85 b2 48 b0 19 c9 24 4e 38 a6 30 51 64 43 b6 6a 6f df ed 5b 1a 9a 14 4c f7 b2 06 1b 40 69 66 4e b5 39 d1 c6 34 d3 cc 4a 02 50 90 75 05 59 67 72 2c ce 1e 00 c5 ff 3e 0a bf 4b 12 ce b0 b1 Data Ascii: VA)^cl'h<G"ll*`@ISFGtPz,"V@r@)u3"WMR9}BDv-OJ~C;]I5"46<N~O"#%es,tqgH$N80QdCjo[L@ifN94JPuYgr,>K
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: b3 a6 34 02 c0 99 74 93 a0 3e 6e d3 bc 6a 92 65 91 34 64 64 df 1b bb 0a 4d bd c3 ca f1 8a 1c b7 78 9a 03 b3 05 6d a7 2e c1 9c 68 66 4e b4 59 49 84 e2 fe a1 ef 33 b3 41 81 8c da 6d 66 18 b8 3a 6c 2a 98 61 56 68 81 de b0 61 44 52 d9 28 69 38 a8 5c 6f dc a5 16 e5 62 0e 5c a2 03 75 09 6a 19 88 fc 7c f9 7a 9e 0b f8 84 38 c5 36 15 0c 2b 57 18 98 54 c1 30 85 19 b5 1f 36 41 db 24 a8 0f 2a e7 ec 2a b3 ba 9e ce 81 45 d9 91 48 b7 41 20 f0 7c 76 f1 7a 7f 26 7c 92 d8 4a 46 c6 9e b3 c9 bb a1 60 86 59 4b 07 6b 27 a1 69 e2 6e 44 2b 37 a9 d5 e5 d5 1c b3 29 75 04 ed 10 88 e7 13 bf ff fc 6f 7f 5b 52 9b c6 ce 70 50 53 05 c3 14 a6 e4 70 60 91 58 28 59 db 54 ee c7 34 d8 0a 9f ff 7d 6f c4 59 bb a4 2b be c0 f3 c3 0b 9f 49 b1 ad 34 34 0c ab 2d ae 08 28 98 61 d6 d2 c5 c4 04 02 cb Data Ascii: 4t>nje4ddMxm.hfNYI3Amf:laVhaDR(i8\ob\uj\|z86+WT06A$*EHA \|vz&\|JF`YKk'inD+7)uo[RpPSp`X(YT4}oY+I44-(a
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 9d ac 28 43 3b c4 09 f0 d6 c4 a1 61 5c 61 40 80 96 64 fb 5e 75 a4 be 9e 54 00 56 16 e5 d3 6c 0e 2c ae 09 51 c6 54 3f a8 3a 38 ec 39 08 c4 c5 bf 8f 27 cc c7 2c fd 9d 89 ca 22 45 4b 2d 09 fb 96 aa f6 5e 01 1b 02 12 58 0f 3b b4 9e 54 00 46 d4 9c 2f ae e6 c0 94 09 32 0b a9 de ab 3a 39 ee b9 78 7c 36 f7 77 27 2f 4a 6a 9b 11 de 6c 50 db 54 c0 3b 21 52 56 bd 49 87 06 55 7d 45 58 19 e4 f4 72 0e cc 16 09 29 26 f3 a6 1b 18 af 5b 41 00 f0 99 01 ec 4c 54 16 49 1b 05 c2 9e 0d 6a 18 56 13 02 94 b4 1a 54 1d 15 08 e0 ff 66 f6 7f 03 cc bd da 6c 3a 07 b0 38 a2 44 a3 71 dc 11 4c d6 ad 10 30 eb 8c 03 66 da 95 bc 28 a9 6d 46 50 fb d6 06 0c 47 04 24 b0 3e ec ca 71 e8 e1 e4 e8 9a c5 1f fa 18 fd c0 27 5c 2f e6 00 a6 b3 30 55 d4 f8 5e 75 76 b2 69 05 20 2d 72 bd d5 68 3b aa e0 a4 Data Ascii: (C;a\a@d^uTVl,QT?:89',"EK-^X;TF/2:9x\|6w'/JjlPT;!RVIU}EXr)&[ALTIjVTfl:8DqL0f(mFPG$>q'\/0U^uvi -rh;
2024-09-27 16:52:51 UTC	1390	IN	Data Raw: 42 2b 1c ae 6c 52 34 bf 57 5b df 10 10 c6 36 eb aa a1 ad 46 5b 59 16 79 03 86 9d 38 30 a5 2e 5c 4a d0 36 4b 06 80 28 ad 49 65 35 80 a5 82 c5 70 5b 93 0d 01 61 56 44 4d eb 49 57 c0 45 d9 84 83 2e 0c f6 3e 18 28 5d 83 55 cf 26 45 73 af da f2 90 09 08 b3 88 8b a8 61 52 75 06 25 87 4d bd 71 57 ca 42 7d 1c d0 8a a0 ec 6c 25 5b 0c b6 33 7a 27 00 61 16 11 b8 88 4c e3 2e 15 aa 09 bd f1 f6 56 06 0e 3f 10 a4 11 74 e8 28 09 9b 7a 93 6d 8c 57 64 4c 24 01 88 8a c8 70 50 81 bb 92 5b a1 37 dc d6 84 de f6 f9 53 51 d2 47 12 66 a1 26 b7 71 82 e6 4d e5 fe 70 43 e6 44 91 31 2a a2 da ea 60 ac 12 46 d4 39 60 35 de ce 81 29 ff 50 10 a5 ec 28 89 2d 0e dd 1d f4 c8 9c 28 6a 8c 8a 08 cd ac 52 dd 36 63 f3 9b 65 c1 89 1d b0 99 6c 63 43 fb b5 ec 63 08 1b a0 32 37 61 42 cd ab ca fd 88 Data Ascii: B+lR4W[6F[Yy80.\J6K(Ie5p[aVDMIWE.>(]U&EsaRu%MqWB}l%[3z'aL.V?t(zmWdL$pP[7SQGf&qMpCD1*`F9`5)P(-(jR6celcCc27aB
2024-09-27 16:52:51 UTC	1031	IN	Data Raw: d8 14 a6 64 b9 d9 c2 86 9a 65 42 80 2f 1e ef 8f cf 5e e1 e5 f7 cb 47 e1 33 21 d4 29 08 aa 41 c3 9c 86 26 1d 77 43 35 48 d5 06 79 c1 74 68 33 5e d3 16 a3 2d 81 1c 6a 69 d3 9b b8 1b 35 45 19 d5 e4 ab 80 af 5e ce 3d 1c 9f 89 80 10 66 92 00 68 b4 08 53 6a 40 c7 d0 4a 16 8c a1 c5 80 76 36 2d 52 07 21 93 f5 c6 d9 64 d8 10 65 a1 a1 ff 22 54 16 e4 4b e9 09 80 00 2d c9 2e 31 49 f5 51 a0 e0 7c d3 70 b8 a2 8f 45 4b 3b b8 39 1c ac a8 31 ca 42 32 88 d7 13 3f 89 fc fb 63 9f 02 00 51 8a 16 dc 80 2d 84 5b 90 3a 73 90 14 e5 da 74 d0 a3 8f 25 64 b2 5f 39 19 91 65 94 85 04 04 0c 16 a7 cb be cf e2 a5 ef 53 3d 0b 4d 89 b3 a4 5d a1 1c 49 9d b0 8a 62 dd 2e 2c 8b 84 3e 40 27 49 d4 62 e3 64 65 c1 59 48 f0 05 80 50 f1 d9 f2 e2 f8 fe 41 18 b4 22 33 37 24 ad 74 ab dc 59 1a a3 9e b6 Data Ascii: deB/^G3!)A&wC5Hyth3^-ji5E^=fhSj@Jv6-R!de"TK-.1IQ\|pEK;91B2?cQ-[:st%d_9eS=M]Ib.,>@'IbdeYHPA"37$tY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49883	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1332	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d22559.697193080832!2d-93.08807132016642!3d45.025693840180075!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b32a0076bd0dc1%3A0x35c0b95ee8cb8ff7!2s2978+Rice+St%2C+St+Paul%2C+MN+55113%2C+USA!5e0!3m2!1sen!2s!4v1423834823329 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:52 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0413a38e4e165ef6b Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 13290 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=59 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:52 UTC	360	IN	Data Raw: 52 49 46 46 e2 33 00 00 57 45 42 50 56 50 38 4c d6 33 00 00 2f ff c0 3f 00 77 e3 38 92 6d 55 f9 b8 3b 2c 59 41 18 44 01 e1 5b 06 ce 93 ab e7 a6 e1 38 b6 ed b4 91 1d 66 66 a6 1a d2 7c 6a 48 0f 59 65 27 96 fc fd 05 df 8d 6d bb aa 92 fc 8f bb 56 cc 84 9e 11 30 65 3a 5a b7 de 1d 9e df 64 fe 23 48 07 53 41 0a 59 20 8b 26 31 14 80 2c 02 89 11 78 4c 10 09 92 02 01 92 f2 28 10 89 c5 c4 19 d3 e2 8d 2a 4b 30 e8 a5 a1 5d 19 f5 5a 05 b3 76 ae d7 2d b3 16 33 d6 d6 ee b0 11 73 a4 4d ba d4 d6 eb 47 0f ab 12 c0 de 11 13 ca ad 0a 9f f1 04 81 a4 c3 fe d8 d4 a0 56 0a 91 42 a4 e5 c8 b3 ff 43 93 8d 62 3d a5 a4 09 4c 30 51 04 c1 44 31 11 4c 7c b3 52 ab 3f aa a2 52 7d 7d d5 cf 4f 7e fc ed d7 df fc 7c d5 cb 19 67 96 87 cc e6 90 3b 76 7a 8c e6 96 bb 0e 9e 2f 74 06 84 b5 45 da 60 Data Ascii: RIFF3WEBPVP8L3/?w8mU;,YAD[8ff\|jHYe'mV0e:Zd#HSAY &1,xL(*K0]Zv-3sMGVBCb=L0QD1L\|R?R}}O~\|g;vz/tE`
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 9f cc 0c 0a ea f3 e5 ca 62 e9 cc b8 f1 ff ff 9c 9c 73 72 92 f4 f9 fa f9 b1 44 f4 df 81 24 49 51 54 a3 20 88 30 ab ac 0e d7 07 ea 5c ab 14 5d 23 09 d8 b9 1c fa 57 07 7e 73 d0 a0 cb 51 13 ad f1 be d5 eb 8f 0e 1a 96 20 ca bb 81 9b 81 b4 bb 5b a6 b2 b1 4e 1a 95 6e f9 ae 81 dc 7f b0 4d b4 f3 d0 cd 5a ca 35 36 d0 a5 43 c6 e2 d7 6b 5e 63 28 68 74 d8 60 20 f0 c3 98 83 46 93 c1 19 8d ad c1 e5 b9 c8 97 d2 67 79 63 cb 5c d6 5d 22 5a 82 0e 44 d9 75 21 9e ea a3 ed 90 87 33 93 88 df 35 a7 5e e3 bc 78 b2 b4 ca a3 fd 46 ff 49 df ef 5f 9e 0f ad 71 bf 77 80 e3 e6 61 6f 20 f2 a1 53 48 15 af b3 85 09 d8 d0 ea 77 2b 3c 58 8a 63 7b 37 e2 71 69 12 d9 dc 32 a6 46 75 3f bf 3a aa b7 3b ab 8e 60 66 fa 7a 7e d5 a3 f1 be 43 97 e7 83 91 83 76 21 c8 0b a2 74 af 4a 44 cc d3 ef e0 16 ae Data Ascii: bsrD$IQT 0\]#W~sQ [NnMZ56Ck^c(ht` Fgyc\]"ZDu!35^xFI_qwao SHw+<Xc{7qi2Fu?:;`fz~Cv!tJD
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: e6 7c f7 dd 9b e4 dc ae d5 4b d9 f8 88 09 6d 8e 1d b9 c3 21 28 4d 46 a0 a9 88 09 e5 1a 19 8e 8f df 95 92 f0 9b 17 77 92 ef f5 1a b9 19 f9 b8 6c 6e 72 ea 6d 0e af 5c f4 d3 91 64 0d cf 9c 85 e8 5f 36 d1 66 a3 70 d9 25 a3 5c df bd 79 0b 2f 5e 12 a6 d0 7a a8 d7 66 b7 6e 79 2e b1 3c 73 24 5d 96 8c fd 58 9b c3 d7 51 44 73 30 d1 26 a8 71 35 18 f6 9a c2 25 23 02 7d 57 a4 d6 7b f9 e2 ed 1b 22 86 a4 4c d5 ea 61 7d dd 8c b9 36 63 c3 cb 7f b4 93 a4 b7 39 49 f5 82 64 8c 9f 0c 1a 0e 92 6d 44 8d 8a 2e f9 ed 8e e9 1f e6 ce cb 17 ef d2 c9 bd 8d d9 48 27 49 6f eb 83 5d 77 a2 a0 c6 fe 41 ff ea 9c 8c a8 d7 da e6 75 e6 e5 0b bc 9b 62 ee 4b 51 78 73 12 f0 15 93 ab 3e 51 e4 05 51 a3 7f 38 32 84 6f 6d 19 ef 6f e4 40 f2 dc 63 c4 5b 6a a7 59 0a 25 f0 77 77 fc c9 72 1a bd 03 be 74 Data Ascii: \|Km!(MFwlnrm\d_6fp%\y/^zfny.<s$]XQDs0&q5%#}W{"La}6c9IdmD.H'Io]wAubKQxs>QQ82omo@c[jY%wwrt
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 37 dc 04 ec c4 ae ae ae 4c d0 91 f2 11 76 90 88 a8 60 78 5f 36 62 47 9c 38 6c 74 e1 1d b3 f5 26 d1 5e a2 ac 08 8f 92 b0 bb 13 33 cf aa e4 d3 c4 49 9d 13 dc 97 65 93 70 d4 e8 e2 97 46 c9 88 cb 94 0d d1 55 09 30 48 e9 17 69 b2 28 08 a2 92 47 94 37 65 d3 b4 84 17 6c b4 48 c0 ab 50 46 dc 70 13 e0 95 88 f8 71 8c d5 e5 43 36 dc 58 64 be a1 88 a7 47 c0 15 39 c5 51 83 f2 7a 96 bb e6 a6 d7 bb b7 f0 e2 ae 59 32 2a 56 28 2b 92 69 19 80 62 75 3e d6 68 e2 65 c3 fc 19 1b b6 70 f3 62 b0 7f 5e 1c 0e a8 29 34 48 8b 6f 8c e3 5e bc 7d 29 f5 bb 18 24 2b 56 90 26 12 62 9a 89 d8 d9 d5 a9 39 21 e8 32 12 74 d5 a3 66 5f 9f 64 69 0b 8d e3 c2 42 c2 94 6f 50 ff bd 51 8f 26 94 00 2e 76 a5 94 59 73 66 4e 98 1f 1d 34 85 3f 88 b9 6c 43 a2 83 26 e1 70 c4 11 91 75 6c 2e 2b 47 e9 81 5e ca Data Ascii: 7Lv`x_6bG8lt&^3IepFU0Hi(G7elHPFpqC6XdG9QzY2*V(+ibu>hepb^)4Ho^})$+V&b9!2tf_diBoPQ&.vYsfN4?lC&pul.+G^
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 90 7b 5f 8b 1a 8a dc ab 53 02 96 12 b2 68 40 40 25 b2 43 3c a6 e7 cf 9e e3 b3 df 6c de 24 fc 8d 96 85 82 4d 12 b7 53 5c 18 1d 3f 53 b3 5d a3 72 0a 24 9e 47 85 57 7d 00 f8 f7 57 02 00 1a a1 9b 01 9d 04 b8 44 aa 43 82 3e 3d b5 57 9f 6d 0a fa 8d a9 10 f1 ec 39 11 3d 3b 33 0f 26 1e f2 04 94 fa 1e d3 38 91 74 1e 91 3a dd f2 61 af e1 4a 92 1e 1d 00 e9 1b 14 62 d8 ea 72 e3 40 89 4f 4f 3f 21 86 9a e4 23 7e fb 84 88 7c 16 17 34 34 37 4c 23 d7 a3 75 a7 73 e8 a7 46 89 8c d9 bd 2f cf b6 4d 99 36 c5 cb 7c 62 6c 89 e7 91 b0 17 f8 f6 f3 7b ec b9 36 9e 25 0c b6 13 de 87 7a 8d bf 9c 55 d3 a2 68 fa 82 52 a7 db 41 2a 8f 0f f4 f7 23 33 88 a4 8b b5 97 25 0b 76 dc 84 52 af cd e2 ed f9 94 12 fb 25 4a 16 7e b0 93 8e f2 9a 7f c3 12 25 87 0c e1 67 51 49 9b 54 88 83 bb e6 b9 27 a4 Data Ascii: {_Sh@@%C<l$MS\?S]r$GW}WDC>=Wm9=;3&8t:aJbr@OO?!#~\|447L#usF/M6\|bl{6%zUhRA*#3%vR%J~%gQIT'
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 10 0f a5 e1 bc f6 a7 a7 5e c5 a1 7b 56 fb d9 3d fc ed 69 ce 7e fa a9 b6 7c ef b9 3f 03 21 f0 e9 b7 67 74 0f a6 76 1e 9f cb 19 b5 d5 68 96 33 9a 6a aa df 1b 56 0b d8 26 da c5 07 00 17 bc b3 ff d5 9a 8e 92 28 b3 15 2e af a6 92 c8 cc 85 a9 c8 66 2f 22 62 f6 5c ef 3e 08 9e df f3 f1 d9 73 82 0d a9 82 ad 32 b3 f8 f4 b4 b5 02 21 f2 80 5f 0e 9f 7e b2 e9 de 33 bf 14 62 b7 59 04 e1 7f b0 b6 b3 dd b0 9c ff 46 01 8d 44 61 61 35 14 a3 29 76 a5 37 55 71 0a 6a 33 cd 30 61 59 ca 68 ba 2c 4f 54 cb 40 34 8d ec 65 ca 98 cf db 7b fc e0 c2 0f 59 7a f6 f4 53 69 e3 a9 83 cf 09 56 db f7 ec 4f 4f 57 41 82 00 7e 7b 6a 0b fc 04 dc 0e 93 86 39 f0 bd 67 a5 e0 53 c4 45 a3 18 1a 5e b1 72 cb 0a c0 77 c9 f4 80 ca 35 36 b0 bb 32 60 59 37 b2 94 2d 33 3b 8f a3 41 23 89 22 3d 5b 0e 5f 36 ec Data Ascii: ^{V=i~\|?!gtvh3jV&(.f/"b\>s2!_~3bYFDaa5)v7Uqj30aYh,OT@4e{YzSiVOOWA~{j9gSE^rw562`Y7-3;A#"=[_6
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 7e dc 0c 91 54 f9 eb 87 6f d1 47 e1 f2 2f 41 df 3e 5a c0 7f 11 43 0e e5 02 04 be e7 bf fe fe 21 41 f0 fe 3b 10 4e 14 cb e9 f8 99 f3 fe 2f b2 c5 87 6f 6b 3f 6d f1 eb 23 d1 af 7f 42 5c 41 f0 77 08 ba 61 7e f4 17 21 fd 12 1f bf 7d 0f 4f f9 85 1f 1f 04 f1 8f 82 a6 80 9f 91 b2 12 0c 3e 7e f8 f1 71 a2 a0 f5 54 fc ec b9 f9 d3 13 df 3f ae fd 74 6c bc f9 e1 fd 3f 11 c2 a6 8f 3f 22 d6 7e 12 d1 af 6f d6 c7 6f e2 6f f8 7e 13 be 49 4a 31 fd 5c d3 17 10 46 2b 4b af 3f f2 3f a4 ae 0b cb 98 04 1d 90 67 f1 fe 04 60 7f fb b0 f6 c3 8d ee df c7 1f ef 15 f2 b4 c6 32 10 09 16 d8 65 fa eb c3 2f 90 94 82 10 7d 01 2a 64 8b 9f 1f 15 28 f0 33 23 0f 50 90 ae 93 5b 1f b8 b4 ca c0 cc 9b 4a 58 f5 25 93 73 67 ef 2c 53 7c f0 42 f2 1f bf ff 45 62 2d 8c fe 01 0e 86 2f 9b 10 a2 0f df 65 44 Data Ascii: ~ToG/A>ZC!A;N/ok?m#B\Awa~!}O>~qT?tl??"~ooo~IJ1\F+K??g`2e/}*d(3#P[JX%sg,S\|BEb-/eD
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 5f 98 33 23 1f f1 e1 bb 2b 3e c6 60 47 8e 2d fe 56 ba 1a c4 4d 06 a2 35 26 d7 44 fc 8a 6f c2 f1 29 e2 eb df 3d e1 52 e5 4c 92 39 89 d9 d3 1a 9b 8e be af fe e7 38 64 6f ea f3 69 a4 f1 51 cc 06 47 c7 69 51 21 59 4a 52 02 5b fc fa f9 ed 87 ae 19 99 43 33 ec 10 2f 54 ef 5b 0c 0e c2 8f 8f 79 f1 91 5d 89 50 83 1f df 91 20 67 fa 6a 29 9b 70 24 e8 f3 c9 1f 22 6f 3b d2 9f 86 00 6d 41 56 6e 56 35 82 5c 41 51 69 ed cd 6e 67 95 79 79 5d e2 7a af f6 f9 d4 0f 2a d7 27 d8 5a 01 00 58 5c 00 00 b0 42 56 00 60 21 31 15 4f 97 4d b1 1c b8 82 dc b5 9b b6 d2 8c 8c 33 ba 72 16 11 81 12 9f 23 5a bb 29 28 87 44 c4 4a 01 b2 2a 1f a4 30 11 29 aa 83 6b 28 5e c5 37 c1 a6 a3 93 1c d2 2c 87 f7 90 60 96 b1 74 64 05 2c 88 bc eb 23 20 ca 5d 7f a6 ff e0 2a 2f f1 e7 ff 1c b5 57 9d 88 bd 9d Data Ascii: _3#+>`G-VM5&Do)=RL98doiQGiQ!YJR[C3/T[y]P gj)p$"o;mAVnV5\AQingyy]z'ZX\BV`!1OM3r#Z)(DJ0)k(^7,`td,# ]*/W
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: bb 9a 86 37 f9 10 5b 9b 8b 49 b8 1d 57 d6 64 e1 4b 77 71 a2 21 85 75 a2 b6 b4 33 99 12 b8 e6 dc 56 ed 6d 65 94 71 a2 28 96 28 15 6e 64 05 ea 12 6e ae 7b ca 3f 10 28 7d a2 a7 d5 bd cd 9f a5 d6 e6 fd 87 67 13 45 a9 48 13 0d cb 09 37 a0 ed 69 fe 81 9b 14 4b d1 53 ef 75 3c 5f f8 36 00 cb fb 97 33 96 67 d8 3c fe 3c 51 54 7c 9a 04 94 ae 91 6a 1d 6c 66 89 82 a2 80 47 71 d2 dd ea ae 73 3c 81 6b ea c8 ff b6 2f b2 c9 19 ee db 4a 59 8b 0b 93 81 e7 17 83 12 7b ee 64 90 17 fe 74 83 9c 2a 9d 4f 53 3e 42 f8 48 b6 9b 77 9a b1 b4 a3 fc 13 50 8a e5 8b 54 dd a4 ec 80 a3 45 d5 4a 5f cb fc 22 53 a6 9b 4b 14 7d 69 7c 4f a9 2f 05 17 98 0b f2 0d 24 8f 80 54 7d 80 99 98 99 81 d9 59 d1 c8 82 01 79 f1 75 78 40 83 a2 9b bb 3a 94 28 88 11 5f 0a b7 e8 30 c5 4b 22 02 88 47 5e 56 a4 2c Data Ascii: 7[IWdKwq!u3Vmeq((ndn{?(}gEH7iKSu<_63g<<QT\|jlfGqs<k/JY{dt*OS>BHwPTEJ_"SK}i\|O/$T}Yyux@:(_0K"G^V,
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: a8 c8 c1 b9 3d f4 ad d1 7e 7e d0 18 f5 f2 c0 97 50 85 e8 75 b0 ef 54 ea 49 a5 c6 9f 35 2b 6a 6f df d2 55 2a 35 f5 16 e8 62 6a 61 5a 32 10 67 dc 6b 52 c3 ea 93 38 3f 74 10 87 fe e5 c1 d5 b9 13 51 ad fb ce b0 86 fd cb dc f9 81 d3 6f 34 0f 88 7a 63 a7 16 bb 51 24 3e 22 7a 54 c6 eb 59 87 88 18 af d1 61 22 42 bf 82 25 22 22 45 25 59 3c 44 0c 6a 7a 19 5e 8e 87 a3 5c 91 90 ac f1 13 80 c1 c8 a9 e1 18 1d c4 42 2d 39 44 17 6a 73 f3 cb 96 2e 78 83 65 6e 4b ce 42 0b 6c 50 ef 55 85 89 ab c5 a0 cc cc 25 44 14 63 24 9b ac 41 33 e7 0f 05 d1 e1 b9 05 57 c3 51 48 eb 8c a1 f9 64 80 c3 9e dd 3a 68 90 35 3a 18 23 36 5b 52 65 ad 11 31 55 a4 11 f0 22 22 56 f2 73 a7 d7 76 39 b0 8f 8f ec 32 57 c2 02 88 83 d0 b1 8f 4e 6c 3f 72 b0 94 3f 3e 02 8c 24 64 f6 d4 09 24 ed b9 2a 4b 7f 8c Data Ascii: =~~PuTI5+joU5bjaZ2gkR8?tQo4zcQ$>"zTYa"B%""E%Y<Djz^\B-9Djs.xenKBlPU%Dc$A3WQHd:h5:#6[Re1U""Vsv92WNl?r?>$d$K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49892	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i736!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=36752 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:52 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 2736 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 040c2f157ebc9bd28 Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:52 UTC	354	IN	Data Raw: 52 49 46 46 a8 0a 00 00 57 45 42 50 56 50 38 4c 9b 0a 00 00 2f ff c0 3f 00 cf c0 26 00 80 34 7c 7c 7c 5e 83 ca 64 73 b7 b9 d4 60 1b 00 60 99 58 53 e6 fc 7f 9b 5d bb aa 22 db 4a 1e 4e 06 8a 90 93 78 14 90 5f 77 99 ff f8 ff ff 3f b6 13 5c 63 34 7d ca f0 f2 41 4a f4 75 3a af 03 c1 e7 bf af f0 21 59 35 23 70 e0 96 c0 16 d5 8b a8 ad 7a b5 25 8c 22 77 6d 5a 4a 45 43 3b 47 bb 40 3b 4f e2 5b 92 64 db 6d 68 db ea 83 a3 43 43 63 70 48 93 9a 14 09 8c ff ff d4 7e 45 bf b5 71 1f ad d8 13 a8 6c d5 6e 11 fd 9f 80 6f 9b 7b f9 cd 91 af 5c e1 ff fd 7c f2 ae 81 6b fd 53 e4 6e ba 1f e1 7c a3 dd 49 d5 f9 3e 8e dc 5f b6 41 ff d1 17 a3 eb 01 c7 07 df b7 6d fe 63 84 2d 8b f5 10 6d 39 02 dd 0e 01 8e 57 23 dd 2e 56 ba 1d 02 dd 0e 01 8e 17 22 dd 2e 0c d7 89 71 22 a6 f6 fd ba 0f 10 Data Ascii: RIFFWEBPVP8L/?&4\|\|\|^ds``XS]"JNx_w?\c4}AJu:!Y5#pz%"wmZJEC;G@;O[dmhCCcpH~Eqlno{\\|kSn\|I>_Amc-m9W#.V".q"
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: e5 3a 55 1d 01 21 72 a5 30 c3 f8 a3 16 03 b8 22 7b 7c 7d 7d 81 e3 0f 57 ad e0 7a cd cc f4 e0 a1 56 ae 19 5f fd 07 0e 21 d2 e9 62 00 9d 2e 56 ae fd f8 bc f4 ce f5 07 35 e3 1e 61 57 fe a8 7f 4d 29 a9 ce f5 fe a9 8b 78 4c c4 0c 8f c7 57 ff 72 ea be fc ed 2a 72 6b f5 9b 99 19 59 cc cc 68 fd fa ff d7 46 6d 90 34 33 a3 f5 2e eb f7 c7 d1 51 d5 ec 55 35 b5 aa 2f 5a 92 68 23 22 02 4d e2 af 68 8b 24 55 49 aa aa 92 8a aa 14 49 aa 4b 7a 7c d8 d7 f1 b9 fa a6 bd 5d 45 4a f3 7e 13 9c 8d bf c1 bf 08 04 d2 48 37 8b 08 90 45 6e 6d 73 cd 22 a2 b6 a0 af c7 ef 1d a9 58 85 c8 2d 6b 93 bd 6a f6 f0 ad a6 5b e3 af 0a 2f a6 59 20 59 f5 e6 55 d9 16 af ea 73 73 cd aa b7 b4 a8 b1 47 25 a5 24 be 61 52 7d 17 b4 f9 2a ec 68 f6 a6 5e 20 5e 55 92 2a 13 52 96 9b 34 e2 55 65 79 9c 7a 30 54 Data Ascii: :U!r0"{\|}}WzV_!b.V5aWM)xLWrrkYhFm43.QU5/Zh#"Mh$UIIKz\|]EJ~H7Enms"X-kj[/Y YUssG%$aR}h^ ^U*R4Ueyz0T
2024-09-27 16:52:52 UTC	992	IN	Data Raw: 87 0b 0e e1 f3 04 4a eb 13 4e 81 f7 00 4e cf 05 16 2e fa 57 26 c9 62 73 57 de 75 21 65 28 dd bc 3f 1b 94 25 c4 f0 e3 f9 7c 0b 39 87 20 05 00 7c 02 80 cf 02 a0 c8 26 15 9b 7f 03 fc d9 53 0c 25 a5 d4 02 a7 bf cf 33 84 9c 43 78 fe 1c bc 62 84 7f 47 57 5a b2 4c 29 23 2e bd d2 8f e5 d8 3d 37 a0 7e 4a 67 a4 e4 7a 9f 9f 63 43 f8 95 c3 98 77 8f be 4b 2b a3 00 a0 40 c6 02 28 04 49 40 04 e8 94 5d e3 eb f5 2c 23 ca 29 81 f7 7a 0b 39 e7 10 9e cf d7 4a 52 ca 40 ba 79 ff de 00 45 c8 d2 ca 05 32 12 05 5d 8e 2c 1c 86 88 60 ef 08 ff 79 15 c9 67 16 91 ec c1 3b 3f 9f 21 80 63 fd d9 29 86 92 52 6a 01 9c 9e 2c e4 a5 cb c1 c2 bb 42 44 b0 6f fd e9 33 71 95 35 4b 33 5e 72 e5 f2 4b b9 88 08 ee 50 f6 61 bd e1 7a 96 11 e5 94 c0 35 90 e4 a5 15 c1 21 23 fc e7 55 24 9f 59 44 b2 07 d7 Data Ascii: JNN.W&bsWu!e(?%\|9 \|&S%3CxbGWZL)#.=7~JgzcCwK+@(I@],#)z9JR@yE2],`yg;?!c)Rj,BDo3q5K3^rKPaz5!#U$YD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49889	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:52 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 058ce338749463db0 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 6656 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=123 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:52 UTC	360	IN	Data Raw: 52 49 46 46 f8 19 00 00 57 45 42 50 56 50 38 4c ec 19 00 00 2f ff c0 3f 00 cf c1 a8 b6 6d 25 b8 db 88 00 1a 89 ca 74 20 00 43 fd 2e ef bd 1a 6c 23 db 56 82 3b 1d fc 94 8c da 29 c8 5d d3 0b df 3f 30 aa 6d 5b c9 f7 21 de 82 2a f4 26 00 19 18 db 77 bb 6f fe 83 7e 4a 3f a1 9f 80 e9 c0 74 24 19 f7 35 a0 01 34 90 0d 8e 01 48 06 ad 0e 0d a0 57 f8 2f 1b 5e ad b6 20 0d 0c e6 08 65 24 78 7b 94 65 c5 a3 82 64 18 00 88 07 d1 7b 17 96 b7 31 14 ce 28 fa 56 09 2c 21 d6 5a f0 73 88 c7 6f 34 cd 2b cd 8a cd 7d 3c 85 c2 60 31 58 1c 0e 83 c5 e0 30 58 0c 0e 83 c5 60 31 58 fb bd eb c9 a6 27 ab 3b 3f 5c b5 37 55 97 e3 39 19 fc 6f db e6 a5 cd b6 7d 0c cc 0c e3 c8 9c 54 2b 7e c1 48 a2 55 9b 98 14 bf 9c 6d ec f9 ff ff 69 20 20 a2 b9 ee fb a7 7d 8f e8 ff 04 2c c6 12 5b c8 62 20 e2 Data Ascii: RIFFWEBPVP8L/?m%t C.l#V;)]?0m[!*&wo~J?t$54HW/^ e$x{ed{1(V,!Zso4+}<`1X0X`1X';?\7U9o}T+~HUmi },[b
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 38 18 36 fb 34 ac b9 18 55 f0 c5 fe 4d 20 3e 4e 3c a1 b3 89 f0 0a d9 c4 f3 b3 c9 2e f7 20 9e b3 30 f0 4e 80 98 64 5a 04 75 66 f3 32 d3 bb 20 01 88 9f bf 95 78 ae 22 7e fe 56 a2 cc c7 d3 bf c6 fb fd 53 e0 e9 d9 fb 03 01 fe f6 be ff fb 24 f0 f3 7b 49 20 7e fe 7e 16 f8 fe ef 93 c0 cf ef 8d 44 df eb 0c f8 8d 4f 45 72 c0 61 e9 b7 27 70 d0 b2 f8 24 e0 23 7f f3 5e 0f 39 5e 0b 6f 7b 4d 20 3f d0 8b 0f dc ff 0a c4 09 78 3b e4 c7 d8 57 ba 7a d8 9f 6a 92 a1 85 a1 f6 ff fc a4 21 19 e8 df c5 9f de 9f 9f 81 0e fe 7d 0a f8 07 34 4e 3f fd 1b 18 1d fc f9 29 be fd 06 40 c1 df f8 f3 fb d9 0f 9e 01 60 2c fe fc 0c 5c 14 3c fd 1b 2a 06 cf bf 01 84 d2 35 f9 54 ff 1b 07 c3 da fc f6 54 97 24 c1 9a 8e 24 c0 a2 ce f2 c0 d8 60 07 b1 fb 87 d9 41 ec f2 d7 7d 28 de f2 80 ef b9 78 cd 8c Data Ascii: 864UM >N<. 0NdZuf2 x"~VS${I ~~DOEra'p$#^9^o{M ?x;Wzj!}4N?)@`,\<*5TT$$`A}(x
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 58 ff 20 9f 5c d5 78 8b 35 b9 dc ae b0 e4 36 76 3d c3 8c 5c 9f 3f 43 c5 f4 13 5b 9b 9e f9 f9 ec 48 1a 87 be 6c b1 63 88 2b 1a 2b af 4a 87 db b6 9f e4 b9 f8 49 09 c4 4e cb 8a b3 f9 c5 04 95 9f b7 65 db 17 6d 2c 4b dd 99 64 b8 81 a3 0a 3f cf 2b 59 34 ae a7 5a 65 65 ed 59 15 7d 2d 5b 4f b1 dd fd f3 65 09 68 67 ab a4 97 38 ad 84 78 bb 5e 6e 09 27 61 88 f2 cd 79 e5 ad 48 d2 e1 fc 69 51 86 56 d3 d4 9a cd 5b c4 3a aa e7 d0 2e 72 53 f2 a9 25 a0 1c ab 4c 2b 70 56 09 db 25 b6 1b 2d 81 de 25 fb 49 9e 8b 9f 3c 3b 69 21 81 d0 e9 9b 9a cd ab f5 db a4 7a 0e 4a b6 be bf 39 7f 3e c9 d2 6a 49 15 ce 54 95 97 25 b6 99 04 60 f5 05 f0 7c d9 01 88 42 40 df 56 32 05 2a 68 ba d0 54 b5 b5 fb 04 22 57 b1 a7 e4 6d 47 95 54 25 a6 a8 b0 5e 62 6b ea 80 9b 92 4f 2d 01 d8 e8 06 ac a1 2e Data Ascii: X \x56v=\?C[Hlc++JINem,Kd?+Y4ZeeY}-[Oehg8x^n'ayHiQV[:.rS%L+pV%-%I<;i!zJ9>jIT%`\|B@V2*hT"WmGT%^bkO-.
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: a9 01 c0 cf 8e f9 61 17 f8 1f 6f 02 fc 28 60 4f 0f bb 03 11 5f 9a 1c 77 9e f8 38 e4 c7 e7 ee e2 25 5f 9c 26 e2 f0 f6 21 5e f3 40 e6 7b 1e 62 31 39 70 4f 2d 5e 8f 39 0b 39 8f af de 2e 17 d8 c1 3b 1d f3 f7 bd c0 c7 fb 6d d8 b0 44 67 74 0a c8 b4 00 63 8f 71 c0 08 01 c5 24 d3 02 c8 e0 4d 20 10 4f 3c 81 98 5a f8 dd 17 88 fc 75 72 d0 47 f1 be f3 df 72 81 b7 1c bf 76 02 dc 79 c7 cc d7 85 30 c8 8e 15 9e a1 8f 13 c1 58 c8 5b 30 2c 04 be 17 50 25 08 7c 41 7a 80 98 26 01 49 af 28 bc 72 e1 7b 10 1e c8 40 76 96 b6 15 76 ef 6f 10 79 bc cf fc 7c 27 a0 4f 60 06 3c e7 f1 49 00 85 80 3c c5 97 32 e0 e3 2d 3e 08 ff 26 b4 2d 20 10 b1 51 8e 30 b1 08 30 81 48 d4 53 46 52 7b 19 49 80 a4 16 3e 90 69 f8 b2 6a 77 41 64 fb 5f 99 d8 e1 a4 64 99 57 0b a8 e6 8b e7 fd fb 9b 08 6e c3 5d Data Ascii: ao(`O_w8%_&!^@{b19pO-^99.;mDgtcq$M O<ZurGrvy0X[0,P%\|Az&I(r{@vvoy\|'O`<I<2->&- Q00HSFR{I>ijwAd_dWn]
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 5a 5e 22 31 18 72 01 48 68 1a 0b 47 f4 8c 66 85 a6 e9 22 b4 3a 9d 93 9c 56 18 48 60 bc 80 dc e5 42 e7 1e 44 96 07 d2 7b 3d 08 7c bc 7b d9 71 5f 96 09 78 c8 8f 99 78 3d 74 d0 56 17 d2 32 2e 4a e5 45 a5 0d 6d e4 00 73 95 c8 85 ad 9a cd 49 a6 a8 30 92 e3 c1 02 50 ff 1c 3f 9e 05 02 3f cb 31 f6 76 10 78 cd bd 2c e7 ae e4 63 07 0f fc 80 e0 ae 83 1c 0a f3 cb 35 ca 6d 48 44 ba 39 e3 ac 6c 73 32 2f 26 55 c6 1c 00 a0 92 fa 35 ff 55 16 a0 c2 e4 f0 51 e5 f9 30 39 b0 42 e0 7b 27 e1 07 bc bd d2 6b 69 89 30 32 57 d0 50 2c 0f 4d e5 50 97 d6 48 e6 c5 19 aa 48 00 6a 3c 92 bb 57 81 d3 a5 d7 83 c0 c7 bb 97 e5 62 77 2a 64 02 1e f2 ec 63 bf 43 05 e1 e1 24 00 04 1d 93 36 06 65 41 09 96 9a a2 2d 75 e5 b8 58 0d a5 7d 47 e2 52 32 2f 55 55 86 05 40 c9 f8 90 ef 7f 5d f0 f1 b1 cf a1 Data Ascii: Z^"1rHhGf":VH`BD{=\|{q_xx=tV2.JEmsI0P??1vx,c5mHD9ls2/&U5UQ09B{'ki02WP,MPHHj<Wbw*dcC$6eA-uX}GR2/UU@]
2024-09-27 16:52:52 UTC	736	IN	Data Raw: f7 95 03 a0 ad fb e2 21 ec 47 f6 6b d7 a3 b4 91 fe ca f5 35 10 46 e6 eb a6 1d 00 28 db d7 5f b5 d0 16 00 46 e6 8b d6 0f cb a0 2c f4 57 2c ec a3 a2 71 e6 0b d6 0f ab 40 5b f0 ab 15 46 a8 69 a2 f0 8b d5 37 75 a0 fb 56 7d a5 c2 08 0d 9a 28 fc 42 f5 4d 13 d0 7d fb 65 0a 23 34 dc a3 fe 22 f5 7b 4d 41 47 f6 4b 14 3a d5 18 60 23 fd 05 ea f7 e4 35 75 64 be 3e ce 5c 05 ca f6 f5 d7 0e 08 23 f3 d5 d1 d7 82 b2 60 87 d9 71 a3 a3 36 0f 2f 77 19 60 9c e9 ae ef c3 ce ec 36 d0 86 5f 3c 18 7e 5d 94 93 ad b4 e1 d7 45 b7 45 ff 7f 3f aa 2f 1f be 56 a1 63 f4 a5 0b 23 0d f7 78 85 9a a4 ba 89 7e bd 1e b5 ac 91 5c cd 86 0f 81 2d ba 22 8a a6 a8 8b 17 58 35 34 95 7b 7d 53 d7 42 a2 86 9a 5d 4f 3f 04 b2 a2 2e 16 7a 16 40 e4 2e a2 ea 95 28 6b 4d d3 47 ab ed da ca 46 d9 af 92 12 e1 17 Data Ascii: !Gk5F(_F,W,q@[Fi7uV}(BM}e#4"{MAGK:`#5ud>\#`q6/w`6_<~]EE?/Vc#x~\-"X54{}SB]O?.z@.(kMGF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49891	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i735!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=41728 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:52 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 5942 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:50 GMT Expires: Fri, 27 Sep 2024 17:07:50 GMT Cache-Control: public, max-age=900 ETag: 0aee6ad5a994716ec Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:52 UTC	354	IN	Data Raw: 52 49 46 46 2e 17 00 00 57 45 42 50 56 50 38 4c 22 17 00 00 2f ff c0 3f 00 2f c1 38 00 40 44 9a 97 fd 47 b2 46 f3 72 1d 7a 0d 36 01 00 a4 c1 2d 02 f9 e9 c6 e5 be 61 6c 63 db 4a 84 4b 4c ff 2d d0 0d 31 a1 65 ba fe 96 f9 8f f5 f6 35 5f 05 00 1b b0 da 2d 53 a2 24 ab c0 6a da 1b 5c 0f c1 04 09 7f 6b 01 a4 4e 9f 4c 09 5c 2d 4c 2d 8c d1 05 a0 17 90 6e c7 92 8e 78 a8 2a b8 f2 70 95 29 d8 e4 ac d3 5d 86 ab 4e 57 19 94 f1 ca 02 72 e0 39 9b c6 0d 70 46 5a 91 01 96 6d db 51 a2 d0 55 44 0a 48 54 44 d1 f2 45 d0 f9 0f 92 1e c1 fa bd 37 a2 ff 13 20 2b 9c db c9 33 19 5e 83 b3 9f 29 f3 3e 13 e6 d6 fc 26 d2 86 ed 94 e9 7f c7 ca aa 9b e9 88 61 6e bf 06 34 96 79 2b 45 46 4b e6 df 81 9d 13 eb 93 5b d2 38 69 67 96 c4 57 90 ce 62 d6 87 39 0c 99 b5 72 4b 23 33 3e 81 a4 73 03 b2 Data Ascii: RIFF.WEBPVP8L"/?/8@DGFrz6-alcJKL-1e5_-S$j\kNL\-L-nx*p)]NWr9pFZmQUDHTDE7 +3^)>&an4y+EFK[8igWb9rK#3>s
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 2c 49 b3 49 f9 5c 1c b2 ff 90 a4 ff 39 93 ed 34 40 d2 06 36 84 66 ae 6c 3d f8 5c 42 2a 24 92 f6 96 70 ae fc e3 9e 09 09 99 76 8a 4c 98 42 b6 27 9d c9 ac 82 2c 25 43 4e 52 9e 9b 92 e6 19 89 59 40 d7 57 63 41 92 74 f6 a1 7b 1e 66 39 8c 6d 43 5a cf 8d c8 ec ec 46 52 ac 41 ef 4c 9d b9 25 29 cf ed c8 ed fc 99 0c ad f7 1f 92 2d 8a b9 25 21 43 d7 cd 19 3b bf 91 e1 fb fa 23 4c be 2c 1a 4b 9a 6c 48 e7 4a a5 76 89 d9 08 c6 6e 69 2e 61 6e a7 78 76 4f 44 63 49 9a b4 a7 1b ab 94 da 45 ca 58 17 d7 3d c1 42 38 d1 33 99 57 8c a5 c9 dc 08 ae 12 4d 57 6e e6 c8 46 d1 ed e3 9a 0b 63 be 3c 66 9c 30 19 f4 4c a6 fd 04 d7 ca 9d 10 53 99 4c 26 75 75 8c 7a 59 fc 5d 1a 01 4c 80 55 62 66 20 2e 3e 62 97 4d 62 20 d3 bb 7d cc d9 f8 6c 85 1d 43 7b 96 fd fc ed 5e 27 b2 7e 1d b9 23 f0 1a Data Ascii: ,II\94@6fl=\B*$pvLB',%CNRY@WcAt{f9mCZFRAL%)-%!C;#L,KlHJvni.anxvODcIEX=B83WMWnFc<f0LSL&uuzY]LUbf .>bMb }lC{^'~#
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 4e be a3 27 80 24 b7 34 c9 ea 64 dc b2 d3 02 92 c1 b9 25 99 ad 8e b1 d9 57 f3 1c 92 59 d2 e4 bf c9 da e4 96 4c bf 98 67 42 f2 d7 30 ff 4d 48 83 2c 19 3e 28 0c 48 08 81 51 c0 6c 99 6d 7f 39 b9 25 89 64 ca 21 81 17 35 da 6b 87 23 3c 20 9c c3 49 4a d3 91 7e 2f 4c 7e 8d 25 f9 9b cc 13 78 97 47 75 ab 7c 75 d1 5e 88 80 04 d8 e9 5d b4 17 62 ba 4e d3 ca be 98 d4 92 34 bf c9 5c fa 11 79 b8 96 cd 0d 5a 79 6c 22 0f 3a 62 e3 29 de 4a ad bc 99 f2 16 be 18 fe 1a 9b 27 53 0f d3 1e c8 f2 7e 6d d4 f5 56 dd b5 aa ae 37 12 e5 fd da a8 72 a6 ec 3b c9 87 3c 91 3d 01 8e c4 38 ef f2 77 7d 7b 0a 55 83 a8 f4 50 5e 55 75 f1 70 6f 54 d5 40 ff cd c4 dc 58 9a 6f 23 33 43 a6 1d 17 7a d0 e5 ed ae 55 d5 78 e0 b5 ba 53 b1 f4 c0 8e b2 9a 8b 64 9a ad 5a 8d e5 39 9b 2f cd d3 04 70 a5 aa 1a Data Ascii: N'$4d%WYLgB0MH,>(HQlm9%d!5k#< IJ~/L~%xGu\|u^]bN4\yZyl":b)J'S~mV7r;<=8w}{UP^UupoT@Xo#3CzUxSdZ9/p
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: f2 de 8c 1b 40 76 f5 17 13 24 83 7f 6d 67 9e 50 c8 2c fd 20 69 d7 c8 ac 91 6e 8c 30 b2 f2 f1 18 0e 3b 1f 4e 53 fd b6 f2 ae df 24 cb 8d 25 d3 8f e9 74 b1 18 4a 6f 3e 02 e9 c6 70 88 9c 0b 4c f4 6b f3 84 bf 96 86 96 30 96 34 00 99 7d d4 be 76 46 fa b3 74 18 4c ba 59 fb e2 ec 26 ca 2c 0d 68 89 9c 9d 46 06 7e 8a 8b 25 c7 00 66 5d 29 01 21 9d b1 26 df 92 bc 4f 5e c5 59 26 32 b6 d3 24 59 87 91 cf db d7 34 d9 10 e6 30 b4 9d 99 90 84 c5 86 a4 76 c0 e9 50 4c 93 db de 2c 61 6e 68 4d f2 79 2e 96 cc ba 41 24 53 92 c8 61 33 21 53 c8 86 e4 43 8a c3 69 92 1c a6 6d 69 92 fe 27 f0 61 b1 93 dc c8 c4 99 4d c5 51 36 24 b5 cc fa ce a7 e3 24 4b 94 c5 d7 7b d2 e6 53 31 35 99 93 ed 48 8d a5 f9 e9 3f 17 d8 08 38 c9 2c 26 63 4a d9 8e dc 92 c6 f5 bd 8a b3 db 86 7a 4f 1a 9b 4e b7 fa Data Ascii: @v$mgP, in0;NS$%tJo>pLk04}vFtLY&,hF~%f])!&O^Y&2$Y40vPL,anhMy.A$Sa3!SCimi'aMQ6$$K{S15H?8,&cJzON
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: eb 69 13 52 e6 be 46 aa 29 15 cb 4b c5 bf 8b 42 74 95 f1 c7 3d bb 9d 96 f6 32 1e 15 6f 77 ad ca b7 f2 01 78 aa ac 14 e0 a9 e8 07 ca 53 80 e7 13 0a a0 a7 e0 29 90 9e 42 f3 f0 34 9d 30 a2 cb 72 63 b3 be 4f 4f f8 9c ad 7c 2b 54 25 b5 02 2a 00 ef 72 0a d4 1d da c9 24 cf 49 42 ef 01 e0 72 55 11 14 d0 68 a0 ac fc c6 57 68 fc 46 03 8d 06 00 36 00 b4 1f 35 0a 80 66 f3 f0 9c 68 46 90 ce 3c 5d 8b a7 cc be af 22 85 26 52 00 34 e0 57 fb 09 70 84 16 3a 2d bd 0b 90 ae 77 a5 4a 28 7d af 6e 57 55 de 6f d5 5f a4 1e 15 ef d7 8a b8 28 f0 56 dd b5 aa ae 37 12 b8 de ab db 43 39 21 35 bb 68 d2 95 90 05 be 2f 91 ea f7 2f a5 4c e9 8e d8 69 27 cb 41 87 f2 6f 65 eb 5a 2a dc 9a f2 a6 70 2d d5 e3 ed 47 8f 46 f1 4f bd 2b 85 92 8a 17 85 7b a3 ff 7c 75 ec 88 40 cd 8e cc 4c 12 2d 6f 99 Data Ascii: iRF)KBt=2owxS)B40rcOO\|+T%r$IBrUhWhF65fhF<]"&R4Wp:-wJ(}nWUo_(V7C9!5h//Li'AoeZp-GFO+{\|u@L-o
2024-09-27 16:52:52 UTC	28	IN	Data Raw: 6a 6c 15 62 27 ff 3a c4 4e fe 75 2e 96 e5 ff 37 f6 ff 3d e0 bf b7 77 ff bd f8 2b 02 Data Ascii: jlb':Nu.7=w+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49890	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:51 UTC	1298	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:52 UTC	1031	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0de294e1493b62b3c Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 20262 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=162 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:52 UTC	359	IN	Data Raw: 52 49 46 46 1e 4f 00 00 57 45 42 50 56 50 38 4c 11 4f 00 00 2f ff c0 3f 00 87 e3 b8 91 24 45 ea 5e 3a 66 fa 9f 51 67 31 39 71 3e d0 f2 6e 55 b5 1b 6e 23 49 52 a4 63 66 7a f2 5f 7d b7 48 fa bf e5 dd 01 b7 b1 6d 37 ca 97 c7 46 5b 02 21 fd d7 40 01 b6 08 22 46 5e da f7 34 ff 11 bc 06 2f c1 8b 88 44 24 22 02 99 23 a6 c2 d9 02 0e 04 8a 98 14 04 81 08 24 5a 3c 32 88 53 86 e0 f1 90 05 72 32 92 48 58 80 34 5a 52 04 0b 22 50 f3 b8 f3 dc 48 eb 20 2b bd 26 11 45 65 15 65 60 a9 16 e9 55 56 4f 9e 19 7f fa a9 7f a2 55 13 a8 0b 33 24 f1 26 52 82 56 6a 5b 74 66 1a 3d 18 ee 18 69 29 38 c6 0a 10 00 00 00 04 88 84 e8 05 00 00 80 00 97 56 2c 4a 63 52 18 79 13 4c a8 98 75 47 b3 cc 61 e7 2d 4f 87 de a0 33 e8 0d 3a 03 c6 11 28 d3 bb 31 bf 79 e9 4e 6f f1 15 66 2a 43 51 c9 a2 12 Data Ascii: RIFFOWEBPVP8LO/?$E^:fQg19q>nUn#IRcfz_}Hm7F[!@"F^4/D$"#$Z<2Sr2HX4ZR"PH +&Eee`UVOU3$&RVj[tf=i)8V,JcRyLuGa-O3:(1yNof*CQ
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: c7 58 73 cc f5 fc 6f fe ff bf ff 3f 81 76 ed db bf 5f 44 ff 1d 48 92 14 45 35 20 cb b9 88 a8 c3 e1 07 54 89 b8 2a 22 46 ac 86 6e 86 88 45 68 12 a2 86 a2 90 63 1b 8d 26 19 9a 58 65 93 88 6c 12 44 38 01 6a 6f 04 9b 2b 19 15 51 cf ba 4e 83 32 96 c1 6b 63 ab 68 eb a0 62 ac da eb 01 ae 83 3a ba b6 16 a5 29 4c c2 89 84 68 d2 4a 6a 2e a9 12 a9 f9 a2 4c 44 74 d1 b2 11 4e 32 4b 3a 19 99 ac 93 d1 54 9d 60 95 85 ab 90 75 49 60 2b c0 9e d3 d0 55 cb cd f2 bc a8 13 c7 92 80 28 62 b8 96 8a 3f 1f 36 a9 3f 0d 98 d5 22 9c a4 9e b5 55 44 a3 91 75 2c ca b8 d4 20 72 08 88 db e4 e2 10 61 2f c0 81 91 21 cb 6d ea 61 cd e3 6a 21 90 ed 58 e6 4f 08 d9 6a 44 4c 89 b8 44 64 43 71 dc 28 62 0b 42 44 8e 05 4a b2 50 14 58 31 15 1b 4d 20 6e 53 00 9b 08 20 9d 0c 67 c0 0e 4d a7 91 75 0d 55 Data Ascii: Xso?v_DHE5 T*"FnEhc&XelD8jo+QN2kchb:)LhJj.LDtN2K:T`uI`+U(b?6?"UDu, ra/!maj!XOjDLDdCq(bBDJPX1M nS gMuU
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 74 33 8a e9 97 63 7a 18 22 29 88 b4 c4 b8 a1 11 8d 31 76 af df 0e 49 b9 67 e7 d5 1b fc 40 e9 6e ad af ad e8 61 9c 8f 2f 13 4a 1d 1f 68 51 19 3f 18 76 2b 40 d4 59 70 52 4b e8 dd d5 f4 3d 5a 69 64 a4 69 9c 4c 28 0f 94 58 7c a0 fa 6e 3f 80 b2 39 40 c4 fe 26 90 76 30 15 a1 6e 7f 8b f5 c1 68 9c 8f cf 6f 71 3c 8a 5d a3 ae c8 21 06 5d c4 6e 2e 6e 95 bb f3 9b e0 c7 cb c6 66 7f b0 d5 59 07 b2 ca 3a 4c ba c9 72 25 71 89 ee 79 41 cd 34 ae f5 5b ca f8 61 18 57 11 3b 6b c6 03 e3 0c 40 7a 7c e9 81 e2 9c da c7 c1 46 10 5d 36 81 74 07 a1 d2 eb 48 6a d6 e9 c1 3e 00 04 34 c0 b2 f6 a0 26 ef 6e 2f e2 8c f1 b9 d2 78 18 ca 3c 97 37 0a 2e 35 62 17 77 23 e5 ea ee 22 f8 b9 a4 b3 89 b8 6a 5c 3e d0 2d 3d 10 a6 f1 9a ee ae 8d 35 9d 12 0c 73 7d b5 83 cb e9 bf 1e ee 6e 1f 18 c9 6b ba Data Ascii: t3cz")1vIg@na/JhQ?v+@YpRK=ZidiL(X\|n?9@&v0nhoq<]!]n.nfY:Lr%qyA4[aW;k@z\|F]6tHj>4&n/x<7.5bw#"j\>-=5s}nk
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 51 90 b4 e9 cc 3e 34 ab cb d9 5c be 99 2f 33 2a 65 f0 2e 0e 91 f7 bd 00 b1 f3 0e d4 c1 83 46 77 c4 86 4e 71 b1 38 35 c9 95 13 11 b6 b9 a4 a2 bd 30 b2 a4 65 b4 c8 24 88 48 fc 03 8a 93 11 46 22 4e 49 be 5f 50 27 a0 62 ab d8 6d d9 88 92 b9 42 db b4 dc 5c b9 96 4a b7 36 db 3d 96 fe 95 0f 64 a7 1b 6c c0 be 43 79 cf 97 fc 80 4f 61 fc 65 39 57 e4 c9 d9 af 52 d5 a3 30 e8 8f 7e c0 af 9a 60 5c db 34 10 34 d4 ac 2f 48 91 c4 1a 54 a8 36 9f 72 c3 aa 5d 8b 06 f8 19 95 a4 82 88 09 f8 07 31 34 b5 84 11 56 2b 53 43 83 0f 2a b8 1d 58 ea 7a 90 ce 99 71 e9 ee c5 2c a1 93 ac 9e 2e f4 d9 ab 76 df 17 05 03 7c 07 f1 f2 be 4c 3e 49 8a 81 75 2e 54 2d cc 60 e8 8f 9d c1 86 a4 d6 e4 95 8a 39 74 1d 4b af f9 61 54 30 25 b4 a2 37 0d 74 0b 69 02 9e 1f 35 54 31 a1 7c 79 8c e1 f3 b7 84 1e Data Ascii: Q>4\/3e.FwNq850e$HF"NI_P'bmB\J6=dlCyOae9WR0~`\44/HT6r]14V+SCXzq,.v\|L>Iu.T-`9tKaT0%7ti5T1\|y
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 14 27 67 f5 0d a1 8d 6e 56 e3 35 69 ad da b8 ac da c6 3c 51 0a 9d 6a 0d e7 77 1e 17 4e b1 b4 c3 99 a7 39 6f b6 86 95 5c c9 c7 7c 95 3e 72 f5 db ab e6 49 36 f8 cc 47 e4 95 f0 57 95 6a 41 d4 ba bc 6a b9 20 51 c3 78 c1 fd 1f 85 57 01 32 54 30 36 7c 50 f0 7a 29 ae e0 03 af c4 38 0e f2 25 15 be 56 0c 37 50 82 bc 52 a1 38 21 18 65 80 6f 05 54 44 58 8b c1 6e a5 56 47 74 dc 5c 79 b6 86 73 d5 ef 0b 9f 4f 4a f3 8b db df eb a2 4e 59 cc 79 55 bb 59 f0 de 6f b6 3b 19 d6 80 82 77 02 e8 40 70 a4 23 33 cf af da 0c a7 59 10 c7 ee 53 22 f2 83 e9 7a 44 31 bc 1d 5f e8 4a 3a c1 48 e0 f0 6e 44 c3 d8 f0 f6 ec e2 5e 8f 83 fb 2d a9 82 7c 02 44 94 50 f2 0a 76 90 db 6e 1b 2a ea 1d 64 76 c7 f7 52 d5 97 a4 99 f3 66 eb 38 bf 18 27 5a 48 55 e7 e2 75 94 e0 b9 a5 4a d5 2b 34 f3 cc 29 f8 Data Ascii: 'gnV5i<QjwN9o\\|>rI6GWjAj QxW2T06\|Pz)8%V7PR8!eoTDXnVGt\ysOJNYyUYo;w@p#3YS"zD1_J:HnD^-\|DPvn*dvRf8'ZHUuJ+4)
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 3d 30 80 27 61 60 5c 35 30 68 19 69 44 23 bd bb 93 46 44 0b 77 6b 31 a0 80 59 3b b9 b4 6b 2a 75 9c 4b 22 2e d6 ab 1f e7 ea 18 c7 f9 05 00 26 e7 fc f9 fa a2 b2 a8 a0 a0 b6 83 a1 aa b2 08 b4 2e a2 7e 2b c7 cd f5 52 0c 97 86 d8 88 69 43 e2 99 ae a3 ab 5e 87 bc 29 cb f9 6a 84 e7 6a c6 ca 72 c3 b5 97 90 d0 ac 3e d9 42 a1 ee d8 9a 24 09 d7 bd ae 2f 93 ca e5 35 07 6f 85 bd 99 8d b8 4e 6b ab cb ad 00 37 5a d8 e9 af 59 06 39 86 a9 c7 89 c0 30 cc 74 6d 6c b5 93 35 9c cd 67 4c f2 6a f3 44 88 1f cb b3 cc 1e fa b3 35 cc f9 5e 0d 71 3e 91 14 87 6d c4 6b 9c 9a ad a1 c7 e9 e5 d0 83 87 db 11 0d 97 fe 1a fd d5 88 7c d8 13 35 2f 8f 28 5b 0e bf bb 88 2a f9 26 e6 99 fe d9 dd 16 29 17 5d 7b f2 85 52 72 49 2c 68 88 a8 a1 ae 29 3a d7 b7 14 6c 80 be 70 a6 60 42 6d 77 02 ec 76 d6 Data Ascii: =0'a`\50hiD#FDwk1Y;kuK".&.~+RiC^)jjr>B$/5oNk7ZY90tml5gLjD5^q>mk\|5/([&)]{RrI,h):lp`Bmwv
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 26 59 75 29 a6 60 02 31 bf ab 29 71 61 da 5e a0 c7 b1 75 d9 e6 d0 dd 6e 80 fd 9a 09 b6 8e 95 f2 55 0c eb 59 07 c2 20 8b 93 27 0a 89 96 45 52 b1 ca 83 3a db 3f 15 e2 80 91 88 3a 18 ac b5 d4 4c 0d 71 0e 2b b3 f3 a9 b4 51 f1 2b b5 d3 14 9e d0 e7 ea ac 4f 95 b9 79 a2 59 bf 52 07 d5 b4 85 ea 0a f5 46 b8 5c 49 84 80 2d 8e 49 28 93 ad 00 59 5d 0c 37 ef 59 19 ac 96 0f e8 95 10 03 73 ca a4 10 e1 bd 2c 93 6a 89 07 bd fb 89 90 0b b3 1b 03 53 2f c8 66 b5 8a fe 6c f5 f3 d1 ea e1 d1 a7 57 be 54 6a c2 79 44 15 29 86 25 65 65 33 c0 2d 15 2d b7 50 f1 f3 f4 ea e0 f8 e8 93 74 d4 39 11 32 2f e1 e1 27 b0 14 fb d3 b0 15 6e fb 06 3a 15 71 70 8b a5 99 d3 05 c4 d3 fd 22 6f 9e fd 1f 00 c8 28 15 e6 25 47 c5 aa fb 2b 8b 00 7b 0f 0f 67 7c da 9f 9c fd b0 4f 37 6c 16 d4 dd f9 69 08 b7 Data Ascii: &Yu)`1)qa^unUY 'ER:?:Lq+Q+OyYRF\I-I(Y]7Ys,jS/flWTjyD)%ee3--Pt92/'n:qp"o(%G+{g\|O7li
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 5c 85 63 c0 d7 06 26 e3 94 30 97 5d 1b e9 97 0d 8c 93 ae cd cf 79 94 73 8b c2 ad 1e 7a d9 7f cd fb 91 4a 30 b2 da d4 b0 18 a1 93 6f 1d c9 ee 0c cf 2d 35 a5 ce 3e 91 3c cf 64 5e f0 4d e2 74 58 7c 7d 46 75 e4 93 a6 c9 a5 21 36 94 84 aa e8 4b f1 96 45 67 e7 94 c6 c4 92 b1 68 9c d5 6b 2e b0 24 8b 39 80 b3 7c 50 21 2e bb 46 14 3b 2d 74 3b 8c b5 0d 3e db 29 31 45 b7 94 97 f7 73 09 87 13 40 af 24 11 53 82 ef 30 ca d7 2b 0c 56 83 fb 0b 25 8e 57 0f 8e 65 9f dd 8f 6f 49 8b 8f cf 8c db cb 45 d3 2d 8b 17 7b 5f ba da 75 62 9d 80 75 a2 9c 15 7a f3 64 35 fc 61 ac 07 08 2b 84 b3 90 5c be 2c ed e8 87 92 3c 93 b0 2f 59 c6 99 16 67 f5 d1 4d 7d 96 33 54 ce ef 95 98 72 37 be 4c 1b e7 63 25 fd 70 96 18 9f dd 5c 27 d3 39 4f 72 ed f7 e4 97 fd 84 ab 23 a5 70 ab 65 4d 9c 90 c6 9f Data Ascii: \c&0]yszJ0o-5><d^MtX\|}Fu!6KEghk.$9\|P!.F;-t;>)1Es@$S0+V%WeoIE-{_ubuzd5a+\,</YgM}3Tr7Lc%p\'9Or#peM
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: f3 b7 d8 44 70 db b3 3b 81 f0 ba d5 9d 9a 0f ff 52 be ba c0 07 82 f0 8c ca 79 f0 44 2e c3 61 8c 1a 8e e1 a8 d3 47 62 c2 a9 85 92 f2 41 01 f9 02 ee 85 78 3f 1d fe 26 13 50 a5 19 bf 50 de 17 5b 8d 0f bd 26 61 bd 1d 60 e7 4d 80 b8 09 5e b7 99 86 e6 11 50 26 f7 8f 25 03 0c 98 a5 0f a6 57 f9 04 48 19 5a 2a 99 11 b0 0c 35 05 a4 86 ce d4 90 18 d0 b6 54 c3 ca 20 e8 15 6b 18 6e 11 6b 42 9a 42 e9 f8 f3 91 e8 9d 39 3c 9a 91 82 47 fc de a0 72 01 21 55 6b 7d 23 e8 4b 88 96 68 a3 ab 06 ed de 2a 78 16 18 6a ad 9c e3 f6 d3 b1 4c bb 13 b2 f0 c9 f5 02 7c fc fb b3 44 54 33 a3 e0 7a 92 aa e6 a6 0d 5a b6 6c d6 b5 dd 52 a3 c9 2c 9c fa 2d e4 ed 5f 8e 84 5e c5 9b f7 37 39 c2 e3 36 ff 0a 52 a1 9d 2e 8b 88 8c d3 0f c0 14 4f ef 8d 8a 9a d1 68 ea aa 56 72 b1 2c f9 cc 59 c2 a7 41 80 Data Ascii: Dp;RyD.aGbAx?&PP[&a`M^P&%WHZ5T knkBB9<Gr!Uk}#KhxjL\|DT3zZlR,-_^796R.OhVr,YA
2024-09-27 16:52:52 UTC	1390	IN	Data Raw: 00 b5 75 3b 32 91 66 a1 72 25 22 42 f6 a7 52 39 60 81 c7 b0 d0 f2 27 ac f8 f9 32 5c 3a a0 30 7a 21 63 bb b3 3a 2e e0 6b 5c 20 59 12 66 67 f2 42 2e e0 0a 27 bf b3 19 b4 59 74 78 80 9e 9d 9b 14 5d 2c 97 8b 4f 95 48 18 39 81 cd 95 69 80 73 3c 2d 11 91 c7 02 43 7e f0 08 d0 56 bb fc 9f f2 3c 61 0f 31 04 a7 1b f4 2c 19 f3 a7 27 9f 17 10 e7 69 ce 13 d8 3f a6 19 38 bb 2e c8 1c 23 ab 23 d6 ba b0 90 d0 00 db 9c 9d 12 f0 ba 46 45 73 3d f0 92 98 16 58 13 e6 40 88 0a cb 21 81 47 8c 3d 4e fe 08 5f f9 a5 82 4f 1f 3a f8 77 08 eb 61 ba cd e1 31 b3 70 d0 01 f9 04 f6 11 17 5d f2 e5 ed 64 eb c2 ae 88 77 90 8a 44 aa d9 d9 49 71 a6 02 3a f6 ac c7 ee 91 a8 44 73 ca c2 40 bf 9c ff 14 12 28 50 3e e1 2a 78 1e 9c cb 40 4e a8 1f 8f 4f 16 ce ef a5 4a c7 0c b4 39 92 30 27 d1 21 67 7b Data Ascii: u;2fr%"BR9`'2\:0z!c:.k\ YfgB.'Ytx],OH9is<-C~V<a1,'i?8.##FEs=X@!G=N_O:wa1p]dwDIq:Ds@(P>*x@NOJ90'!g{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49895	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:52 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1030	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 026141beff863e5e7 Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 16316 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=42 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	360	IN	Data Raw: 52 49 46 46 b4 3f 00 00 57 45 42 50 56 50 38 4c a7 3f 00 00 2f ff c0 3f 00 47 e2 38 92 6d 55 f9 ee fe 81 1d 41 b0 24 54 62 74 d7 23 69 30 8a 6d bb 49 e8 dd 01 1a 30 81 5c 56 98 c0 07 ab ec 7f 4d 8f 83 da b6 95 e8 f1 71 f7 18 04 20 39 85 48 a0 33 5f de bd f3 1f ae ec 4a ae c4 ac 98 95 83 50 0b 4c c0 04 4c e0 06 14 85 bb 40 35 60 14 41 4c a8 90 32 fc 32 24 53 80 62 fd b0 f4 16 eb a3 de 1f 45 50 23 c8 0a 49 21 29 44 f5 71 1e 92 42 54 fa 57 67 6b 9d ad 95 de 87 3b 5f 1e f8 13 64 b8 cb eb 0e b7 3b 3d ee 78 db 3c 9b ed be e3 4b ed d1 6a 8f 56 b3 57 0c 13 1a 63 3a bd 75 3b a9 0d a4 63 e6 de 1a e5 6c a0 e9 45 53 a4 68 ad bd 0b 0a 28 01 89 48 0a 42 9e 80 a4 40 f2 b4 ba 4e e1 10 db 7d 07 83 ff 6d db be 24 da fe 8f 2f 07 9c 20 29 50 56 4c 7e 9d c9 18 cd e7 36 bd 23 Data Ascii: RIFF?WEBPVP8L?/?G8mUA$Tbt#i0mI0\VMq 9H3_JPLL@5`AL22$SbEP#I!)DqBTWgk;_d;=x<KjVWc:u;clESh(HB@N}m$/ )PVL~6#
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: fd 46 70 02 bb 9c fa 2e 93 9e ce 25 97 54 6c 65 bc 25 e9 91 77 94 df 7d 94 b1 dd 3f ef 7f 6e 86 11 bf 33 73 c0 ef cb bf d2 4d 29 5e 49 b9 b2 db 6e d4 f7 14 c4 bf 04 4e 70 11 7f cb 58 0a db 8c f9 d3 ca 7d 9c 64 16 95 15 e9 9f 1b 7e 2f 08 df ab ab bd 1b a1 4b aa a7 32 f7 df 0a 5e 7a 01 9f e7 92 1b 52 fc cc 98 f9 f8 41 00 b6 b2 f2 b6 1f bc b3 12 2b 38 f6 05 79 fd a8 7b ab 62 1d d4 4e 5b 7c 2f 78 69 1d d6 ee 94 f1 e1 5c 72 43 aa bb c3 29 63 e6 2d 01 b0 2a b1 1a ad 20 ad c6 71 03 f6 2f 47 bc 3e 44 7d 52 dd bc 1f 94 98 b9 ba f0 52 bd 1a 80 d5 e1 78 2e f9 4e ea d6 3e c7 7b 50 a5 d6 ea e6 cf fb 9f 74 b3 42 11 07 ef 2b f0 19 6f e1 fe 78 08 9d 8b 41 3f 7a 78 55 5a bd f3 f2 74 19 a0 cb b4 c3 3a 36 e7 d2 ef a4 2e 0e 99 1c 55 6c 56 7f 82 77 e6 3f 2e e1 ba 17 0d 09 d8 Data Ascii: Fp.%Tle%w}?n3sM)^InNpX}d~/K2^zRA+8y{bN[\|/xi\rC)c-* q/G>D}RRx.N>{PtB+oxA?zxUZt:6.UlVw?.
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: a6 d2 8e 5f d9 5d 27 ea 87 97 43 c5 21 00 58 07 90 9c 51 e9 36 2b fc 5c 5b 6a 22 a8 cc 3a e6 f8 60 55 21 5a 54 d6 3a 4b df 2b ab d2 77 aa ea 47 e8 6c bf 0b ac c3 ae 96 63 11 33 1f f6 96 02 02 51 d5 2e 93 1f ac 72 4e 13 a5 97 b2 55 99 9e c4 af c6 f1 65 d6 86 df 95 ee 3a 51 df db 7d 1b 58 87 6d 1d 6b 25 e6 83 8a c7 15 7d 64 c5 7b 35 1b 70 ae 50 7a 73 96 8b 32 83 08 7d 42 88 6a 7d 87 ac cd ea 3d 6f 29 88 41 84 0e 7d 7c 1f 60 f7 51 03 76 6a bc 57 10 41 45 87 a2 1d a9 39 e2 aa 41 55 6e 96 39 2a 33 8c d0 21 bb d4 c7 c1 22 c0 5a 05 ef c5 0a ee eb 43 34 f0 08 db 8c 0f f8 26 d8 59 35 e0 90 fb dc c9 78 5b 84 40 54 b2 cd e4 87 0f 2a 61 b7 1a 54 f1 e6 fd bc 2c 73 dd 8b 1e ee 29 75 4b 7c 9c b2 c3 66 f5 ce 1c fc 29 da 14 79 fd e8 e1 bf 04 e0 00 8b d6 87 ef 81 6d 1d e2 Data Ascii: _]'C!XQ6+\[j":`U!ZT:K+wGlc3Q.rNUe:Q}Xmk%}d{5pPzs2}Bj}=o)A}\|`QvjWAE9AUn93!"ZC4&Y5x[@TaT,s)uK\|f)ym
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 5c 82 48 6b 83 13 a6 0a 57 8e 6b 7f 2b 7f 10 e1 55 22 38 17 70 03 94 17 c1 db b9 78 45 c0 15 e0 f7 22 0c c4 b7 c0 6b 2f 02 7a 88 f0 30 b8 fd 27 c0 09 8b 5a 0e d9 df 8b 87 51 f7 56 62 3b dc ba 41 83 20 6c 00 5e f0 76 2e 5e 12 80 06 a1 13 01 4c df 03 d7 c3 08 e8 f1 43 84 5e df fb 17 c0 0b ec 1c b7 98 2a bd 24 fb be 17 f5 7c d9 4d eb a6 69 93 54 04 1e b0 2a b2 64 a2 1f a1 7b fb 5d e0 0d 1e 22 80 01 60 78 27 ea 0a 2e 81 7d 97 00 bb c5 f4 dd 44 e7 21 1a 92 dc 69 09 92 da 5e 20 00 c0 5a 49 37 04 40 38 b8 eb 44 18 d0 b7 81 e8 22 2a 1c f2 7f bd 5a c0 17 20 02 17 04 d1 a2 42 3e 80 bf 4b 2f 42 5f 66 b7 98 f2 c2 0b 3d 94 b6 b9 21 a8 1f 01 af df 08 b8 ef 17 00 9d 3e bf fa 75 5c a2 0b 90 d3 84 dc da 65 cc 0c eb 7b f4 23 f4 24 76 8b f2 4e 1a b8 36 55 e0 b4 1a d7 bd 08 Data Ascii: \HkWk+U"8pxE"k/z0'ZQVb;A l^v.^LC^$\|MiTd{]"`x'.}D!i^ ZI7@8D"*Z B>K/B_f=!>u\e{#$vN6U
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 08 1f 99 6f ef 7e 86 fc 61 f5 1f 3d 85 26 72 07 95 d3 96 55 98 f7 16 01 a6 fe 34 8f e7 ba 36 1f 37 cd b8 d4 88 85 39 4d b4 29 93 58 7c 3d b3 4e 80 e7 56 d4 8f 30 10 74 05 b9 a9 cf be 5e be f4 b8 3d 4e b4 59 ac 83 8b da 53 66 46 bb 3a dd 24 79 f7 c7 eb d5 4d cb 31 da c2 20 16 6d ad b9 40 12 6b 49 9c 3b 66 cc eb d5 19 a1 c8 79 bf 52 68 3f 1f fb 56 f8 eb 91 f9 47 f8 f8 d3 97 08 a0 29 fb 54 e1 b5 b5 3b a9 9c 3e 08 80 be 18 3f eb 06 66 5f ba 33 9e 69 cf 89 2e 24 46 12 6b f1 c2 6c e6 8c c5 48 e8 33 ce b9 15 dd 76 23 f4 08 8d 02 e8 c9 f8 29 d1 67 2f 53 bd 4c 92 e3 56 75 6c 1a cc 6c 1a 1c a4 30 1b 82 cd 38 61 db 40 ac 2d 66 45 06 7f ec 8e d9 56 01 77 8f 3f 7f 31 e3 27 e7 7f fd 44 34 f4 73 0e b7 1a 2c d9 29 ed 09 d6 ee 54 b4 a5 bc a1 3f 8f 74 13 ed e7 78 3c 99 69 Data Ascii: o~a=&rU4679M)X\|=NV0t^=NYSfF:$yM1 m@kI;fyRh?VG)T;>?f_3i.$FklH3v#)g/SLVull08a@-fEVw?1'D4s,)T?tx<i
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 08 c4 da 4b ac e3 4b e1 f7 c2 58 8c 74 cc d8 4c 5d c0 4b e5 41 28 05 80 bb fb 68 48 12 1d 58 c4 da 74 34 63 4e e6 e3 a6 1e 4b 48 66 b2 36 1f 37 f5 78 a6 4d 47 cf 0b 2d c9 71 b3 94 1d c8 1e 4a f8 17 75 c8 f2 20 78 83 87 08 9d 61 2a fc f0 98 31 3e 43 f6 1c 02 07 f6 ae 2a a3 35 89 31 ce f1 98 e3 e7 22 73 34 99 8b 78 8c 49 db a4 aa 7b 11 ba e4 34 84 64 f6 a4 3d bd e8 48 ec d9 97 2e c6 4a 3a a0 cd be 74 31 9e 69 d3 04 cf 4d ed b9 ad 63 81 52 f0 45 6e d8 bb 56 0b 71 41 bb ac 08 ad 5e 37 c2 c3 d0 27 37 08 99 f7 87 0f ca bb 29 97 ba cf 85 0c dd 4c da ac 8b b6 06 3d 69 ce 46 5a bb a9 a3 2d 4c b1 b8 31 f4 76 e2 98 95 79 fd a8 73 47 80 30 a6 31 f0 dc d6 9a 93 18 63 bb fd 1c 8f 27 2a 63 00 f3 f6 73 cc 93 9c ce b1 b6 98 c4 e3 91 6e 96 72 bd dc e0 fb ac 33 f9 27 01 76 Data Ascii: KKXtL]KA(hHXt4cNKHf67xMG-qJu xa1>C51"s4xI{4d=H.J:t1iMcREnVqA^7'7)L=iFZ-L1vysG01c'*csnr3'v
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: c9 bd eb 0d 07 18 46 00 33 f7 79 c8 bd 41 b7 07 60 58 38 40 7e 98 7f 65 7e e8 74 5f 99 f9 f6 ba d8 57 71 3d 02 ce a5 16 ff 57 e1 7f 08 c0 e2 ab a1 15 d3 d7 2c 63 de 57 e2 3b b9 33 64 22 ab 29 04 80 75 91 63 43 f4 bb 11 1e 86 82 1a ad 06 39 76 05 fe ed 6b 6f 28 7f 88 c0 3d 00 9d e8 42 bb 3d c5 61 95 7d c6 dd b5 90 6d b4 0a f5 1c 66 4f f3 86 84 92 d1 2c cb ef ab 08 51 b0 c9 ed 6a 13 90 32 5f 39 0d 5c 71 0b 41 ff 21 42 77 70 d3 20 c0 86 f2 dd ed 6b b7 37 44 37 fa 77 77 7a 03 46 e7 f5 fe ee b1 d2 dc 5d 0f a3 a7 38 ff f4 d5 cb e4 5b 72 bd 7a 4e f5 08 f6 1b 04 d8 a2 d1 ba 41 ab 81 2b 08 0e dd e1 43 84 ee 3d a9 fa b7 af dd de 10 dd a8 da 4e af 3f 64 74 5e b9 db cb 0f ab 86 62 b7 86 c2 6e 2f f7 eb 27 33 e3 57 ee 27 64 fe e0 c7 50 a4 1e 1d 33 e5 1d b9 a8 65 9b d5 Data Ascii: F3yA`X8@~e~t_Wq=W,cW;3d")ucC9vko(=B=a}mfO,Qj2_9\qA!Bwp k7D7wwzF]8[rzNA+C=N?dt^bn/'3W'dP3e
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 39 8e 27 23 dd 20 fd 25 d6 53 ff e6 4b 6f 4f e2 f1 48 4f 26 bf e3 e7 85 d6 9e c4 e3 91 06 9e fc 1e 4f 35 31 8e c1 c2 a8 a1 17 e1 36 fc 87 12 f0 91 95 f1 48 99 59 cd 0e 04 ac 43 26 87 45 b0 03 6e 50 65 5a f2 5b 43 12 eb b9 d1 4c c7 a4 ad 93 3e 63 dc df 09 47 9b 27 3a a6 cd 64 2a f4 79 ac cd 13 dd 9c 36 db cf 8e b9 98 6a c9 5c 47 3c d7 4b 88 f5 ee b0 95 5d f7 22 dc b9 8a 8e 60 0e 45 85 36 01 10 01 2a 0c 51 32 b7 2d 23 52 35 0e d4 52 97 ac 43 26 3f 5a 04 11 b0 cd b5 e8 28 78 1e cd 78 f2 22 7b bd 15 ae c6 2f 31 a6 09 a6 3a 92 58 e3 97 f8 f7 34 79 89 75 24 53 4d 9f 3f c5 cf 33 35 6b 9f 31 33 64 9d 08 bd 6b 2a 19 22 bf a6 f2 22 bd 10 6b 5f 0b 7c 47 c5 4d c9 3a 64 f2 d3 07 c1 69 ba a0 d2 39 c3 64 4d a6 15 4c 47 33 e6 44 27 fd 25 d6 ef dc 9b 2f 6d c4 42 57 18 b1 Data Ascii: 9'# %SKoOHO&O516HYC&EnPeZ[CL>cG':dy6j\G<K]"`E6Q2-#R5RC&?Z(xx"{/1:X4yu$SM?35k13dk*""k_\|GM:di9dMLG3D'%/mBW
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 25 36 e7 53 c6 a7 dd 45 80 6a 2d 61 37 6a 3a 28 ec e8 e3 74 f0 4b dd 76 a3 de 75 81 58 6f 41 c0 e6 0c bc 57 e5 84 41 0a 89 97 2a 06 61 de 91 99 cc 92 6e 2f 02 86 3e 95 79 ff cc f8 70 5e fd 63 70 55 d3 b6 e0 f0 41 00 9f 42 a7 cc 6b 84 21 c9 b7 19 33 1f d7 b4 3a 03 ab 8a bc c0 06 1c 0f 79 83 d9 04 1b 6c 42 1a ae 36 16 99 cc 3a 60 90 b8 eb 77 a2 fb 6b 38 86 59 66 79 3a fe 3d c3 fa d7 34 6b 12 b2 4f 48 d7 a1 5b a6 1f 81 0b d6 19 1f f7 5b 41 cb 33 b0 a9 26 05 01 70 91 33 f5 44 e8 a4 37 19 05 67 60 63 b2 a1 c7 6d fb be df 89 70 e7 8a 66 22 74 53 4d fc fd 3c 03 4b aa c4 49 bf 91 23 ea c1 41 b2 96 a5 bb f3 4a cd eb 47 e8 14 60 2b 28 7f 06 40 55 d8 81 87 bc ef c8 a6 5f ba 81 19 c3 34 98 d9 14 1b b6 8c 39 4c 6d ba f0 fc 20 42 d7 73 e2 e7 78 f2 a5 b9 8a 61 ca ff ce Data Ascii: %6SEj-a7j:(tKvuXoAWA*an/>yp^cpUABk!3:ylB6:`wk8Yfy:=4kOH[[A3&p3D7g`cmpf"tSM<KI#AJG`+(@U_49Lm Bsxa
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 58 cc 42 e5 fb 5e 34 0c eb cf ad 33 e6 41 84 fe df 1c 96 bc da c8 10 22 ef b8 48 01 84 d5 fb 69 a5 8c 20 f4 dc 4a 63 ed 6b 32 6b 6b 78 1e cd 78 f2 d2 7c d6 47 73 6d c6 90 3d 8f 66 3c 79 31 04 b3 e3 0b b9 5b f4 e7 2d 95 40 a8 36 9f 1a 1a 27 b6 06 24 4d 0d f4 c4 04 e0 0a f2 eb 5e 34 24 b8 20 f5 54 90 ba 64 97 71 af 1b 75 3b e7 e2 55 89 62 17 54 e8 f8 04 b8 a0 5a 43 37 70 a8 da 58 43 fb 65 f2 a5 4d 47 33 e6 44 7b 5a 3c 0b 95 e9 68 c6 9c e8 04 88 94 d4 5d 58 67 60 b9 a1 d2 8b af 86 56 4c 5f 2f 04 40 38 97 77 c8 78 18 a1 7f 56 5c d6 65 87 f6 25 a4 36 55 3c 6b c6 42 4f 62 ed e9 c5 e0 44 68 f3 c9 93 ae f2 f4 a2 23 11 06 01 76 58 6a 75 ce 2f 4b 61 f1 34 6f 48 28 19 bd 50 be 69 d7 b5 3b 1e f6 1f 6a 9b 63 36 7c 88 06 77 17 e4 bb 54 5f ca 54 b9 d0 be 26 31 cf b5 e6 Data Ascii: XB^43A"Hi Jck2kkxx\|Gsm=f<y1[-@6'$M^4$ Tdqu;UbTZC7pXCeMG3D{Z<h]Xg`VL_/@8wxV\e%6U<kBObDh#vXju/Ka4oH(Pi;jc6\|wT_T&1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49894	142.250.186.36	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:52 UTC	1297	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/maps/embed?pb=!1m18!1m12!1m3!1d90214.25857459627!2d-92.82381541820322!3d45.04125285185064!2m3!1f0!2f0!3f0!3m2!1i1024!2i768!4f13.1!3m3!1m2!1s0x52b2cbd4ed292aaf%3A0xe8a7ffd2d611654a!2sValley+Ridge+Mall!5e0!3m2!1sen!2s!4v1423834442582 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: image/webp Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin ETag: 0bbf058049ed7354e Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9888 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=36 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	361	IN	Data Raw: 52 49 46 46 98 26 00 00 57 45 42 50 56 50 38 4c 8c 26 00 00 2f ff c0 3f 00 e7 c1 a8 b6 6d 25 0b 77 a9 c1 90 21 fd 33 90 c3 9e 7f ad c1 36 00 80 24 80 dd 47 79 6e de d4 4e 4d 37 eb 48 92 95 bc f2 2f 1c c2 20 00 0b 9c b4 9e 3b 3b ff 91 3d 66 0f d1 76 c1 34 59 11 1d 22 3c 13 9c 29 b2 84 80 21 60 f0 17 24 09 85 72 aa b8 6b ab a2 4e 82 22 62 ca 5c 69 62 09 10 05 90 72 f6 57 27 4d 70 d9 18 cc aa 90 6a 32 aa f0 54 15 52 55 48 0d a2 71 2c ba 37 af 48 b5 f0 ff 80 28 59 30 75 48 a9 a8 9c ec 22 a8 94 56 26 9a 34 1f 9e 33 7b ce ac 6d 3f 40 3d c0 16 60 07 b0 05 d8 02 6c 9d dd e9 2a 2f 7e fa ed cd 68 6d 06 c7 f6 4a 12 0c de b6 6d d3 d2 da b6 36 f0 22 11 05 5f d0 86 4d 50 cb f7 52 30 2d 89 79 19 dd 96 aa ff ff c7 28 8a 17 d3 32 be 5e 67 44 ff 27 80 62 fa 27 c6 1e b5 50 Data Ascii: RIFF&WEBPVP8L&/?m%w!36$GynNM7H/ ;;=fv4Y"<)!`$rkN"b\ibrW'Mpj2TRUHq,7H(Y0uH"V&43{m?@=`l*/~hmJm6"_MPR0-y(2^gD'b'P
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 99 0f 3f 9d 05 b7 01 be 45 d8 cc 2c 97 7c 06 01 88 bd 9f 53 22 5a 81 5e 19 fc 9a 36 85 e4 22 f9 98 11 00 91 d0 cf 29 a6 56 7a 41 2b 16 17 c9 c7 5c 14 56 e9 cf 49 24 ad f0 95 2e 0f a8 a6 09 41 e4 92 f9 02 2a 2e 96 3f 27 e6 56 68 20 e8 f6 0c a2 3e 91 1f 25 5f 12 32 26 e2 e7 94 8a 36 74 75 e0 11 d0 55 1a 01 15 7e 6d 00 94 6c 4a b3 a3 e4 7c 46 e6 98 7e 4e b1 d7 06 5f 87 54 e4 50 b1 29 b2 25 73 7e 96 9c 6d c9 2c 92 9f 93 48 a8 1d 30 00 3e d9 0d 6d f6 67 c9 38 51 e9 92 7f 4e ab b4 15 7d 0d df 64 2e 1b 0c cb b6 b9 e4 53 1e 79 25 e9 ea e7 94 ae da d2 ab c0 00 44 84 a1 1a 99 66 b9 e4 e3 25 c2 a4 24 f6 4a 2e 92 cf b3 9f 4d 22 da e0 6b 04 54 f4 7c ab 4d 84 51 49 92 4b e6 cb 38 02 36 06 91 90 4d f6 b3 f1 62 6a 21 2b 1d 72 81 43 ad fa a2 2c 02 30 42 21 b9 48 e6 cb 28 Data Ascii: ?E,\|S"Z^6")VzA+\VI$.A*.?'Vh >%_2&6tuU~mlJ\|F~N_TP)%s~m,H0>mg8QN}d.Sy%Df%$J.M"kT\|MQIK86Mbj!+rC,0B!H(
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 4a 96 b3 2c 97 cc 9c f3 3e 02 a0 b4 79 d8 82 81 1e d9 21 f8 39 78 01 35 ce 89 28 9b 65 90 cc c7 1c a3 a8 c8 ba 94 5b 31 a8 80 7f 9a 67 d7 c6 05 c8 28 b6 f9 59 32 9f f2 d3 38 32 0f da 85 b1 61 58 e2 fd cb 44 d2 2e 11 7b 85 c5 21 3f 49 e6 2c 3f 46 96 aa 2c 6a 81 06 06 c3 22 4a fc 7f 5a da ae 74 49 c0 ec 94 4b 66 ce f2 7d 64 3b d2 a5 ca 66 30 6c a0 6a db 92 7f 98 48 08 b3 0c cc cc 39 ef 23 fb 61 d9 c0 82 35 d4 a8 9e c1 bd c5 f4 ef 4a 97 db 0c 92 99 73 8c a2 aa aa 86 b1 d2 80 aa 87 ab f5 9b 11 f9 cf 61 75 c8 4f 92 f9 98 9f 16 51 e5 91 2e 1f 96 0d 74 71 54 0b 5a 36 cb 7e 0c db fc 24 99 8f f9 61 41 a8 36 b4 50 25 23 6d 1c d4 33 a8 e4 37 97 2f fe 7d e2 c0 27 c9 9c 9f f6 82 50 87 b2 c0 c8 a4 4c 18 d7 c2 95 ba cd 5d e8 8e c4 f7 20 b6 f9 51 32 e7 a7 05 99 ad 86 03 Data Ascii: J,>y!9x5(e[1g(Y282aXD.{!?I,?F,j"JZtIKf}d;f0ljH9#a5JsauOQ.tqTZ6~$aA6P%#m37/}'PL] Q2
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 07 a3 a8 74 08 8c 18 45 1e 02 23 1e f2 00 4a 8f a1 31 18 45 e5 83 e6 44 5b 72 71 27 2c 4f 5b 3b ce 25 73 7e a0 8a 0d 25 2b d3 26 aa 3e 62 46 f9 d0 72 84 01 47 b6 aa 29 b5 4c 52 66 e6 95 28 ad 45 f0 f2 22 2f c0 6a 69 1b 8b 96 88 5c e6 0b 02 44 62 3a b0 e4 63 3e a3 36 89 84 cc d3 1a 30 42 0b 59 37 1d 90 48 b1 64 46 69 12 d7 99 a4 b8 c8 0b 80 25 33 60 62 c4 29 8b 16 cc ce 32 a7 42 5a 58 f0 49 72 76 16 d4 2a 5e 94 44 77 39 d9 f4 82 86 94 20 2c 19 f5 c6 64 7d 91 17 18 97 8c 72 c1 69 9c b2 68 e8 20 f9 6c b1 cd 25 73 3e a3 1a 9b 49 84 69 5d 65 0d 44 c0 fa 81 a7 95 26 6b 6c 2c 1e f8 11 61 33 3d ba 27 00 de 6a 91 c4 e9 52 34 90 49 3e 94 6d 73 c9 7c 49 a8 65 22 21 f3 a6 c2 e6 61 f7 80 68 f2 b0 9b 3f 94 8d 4c eb d5 fc 61 62 71 bb 36 14 52 5b 16 79 5d 45 6f b5 48 e2 Data Ascii: tE#J1ED[rq',O[;%s~%+&>bFrG)LRf(E"/ji\Db:c>60BY7HdFi%3`b)2BZXIrv*^Dw9 ,d}rih l%s>Ii]eD&kl,a3='jR4I>ms\|Ie"!ah?Labq6R[y]EoH
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 4d bb 72 c4 c7 67 e7 09 80 73 44 b1 35 b3 4c e6 0b 02 44 9a 08 8b 0e 50 db 22 66 02 12 78 a1 ae 57 45 c0 d0 62 ba 01 08 e8 e9 ea be 9d ad 01 11 a6 1e 61 13 61 dd a2 a7 67 fc 39 76 9f 9e 1d 8f 73 38 f1 91 9f f1 a7 35 07 c9 19 19 57 49 5a d2 71 99 51 d6 e1 22 c0 0c 5a 25 a9 47 00 56 b1 af ea 51 11 00 65 e1 91 51 55 53 d4 cc 9a 8c de d4 6b d1 ac e0 e5 cf 4f 7f ce 5e c9 a9 35 2c f9 60 02 16 16 9f 36 3c df 31 a7 ae 83 bd 9b 26 2b 32 27 0b bf 64 30 e2 21 94 49 45 00 46 1a 03 d3 94 8c 3d 5d bd 5f 36 ad a7 f6 66 f0 27 7f 7a 96 f1 9f 23 9e 9c 67 3e 02 40 da 9a 4c 9e b6 65 00 3a 70 8b 9f 2e c0 cc 28 5c df ae f8 b8 39 fb 5b 87 3a 2e 33 a8 c3 4c 4b cf ef 31 f7 95 c6 38 2a 8e 86 03 85 a8 38 b0 58 1b 3c 55 43 b7 6c f3 7d a4 4f 4e cc 4f cf 69 d7 93 cf 4e 37 c6 d3 96 5a Data Ascii: MrgsD5LDP"fxWEbaag9vs85WIZqQ"Z%GVQeQUSkO^5,`6<1&+2'd0!IEF=]_6f'z#g>@Le:p.(\9[:.3LK18*8X<UCl}ONOiN7Z
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 02 7a 76 7c 67 c9 8a ee a2 a7 a1 84 85 77 62 c9 9c 8b 86 ba 81 46 b7 96 d9 59 e6 b5 dc ae 2e 3f bc ed 6e 57 97 6f 78 d4 08 0a 3d cd 06 28 1b a6 fb 4a 41 77 c1 1a 40 68 11 e7 92 f9 78 a0 46 bd 50 03 8a 6a 3d 48 3e 37 d7 f1 bb 54 ec ea c0 d4 b3 60 2a 15 c9 5d ac 12 6a bd 17 13 7c 6d ec 97 88 5c 32 73 8e 46 bc 50 03 08 eb 39 4b 3e d4 32 ff 10 ee fc 03 26 a6 d2 9e 36 21 2c 61 b2 48 ef c1 4b 44 fb 56 29 75 95 09 3d 93 3c 33 33 b6 d4 68 a8 8b fd 7a 72 79 9e 55 bb bd 7f 39 b7 f7 eb c7 97 53 09 a1 6f f2 4d 3d ba b3 74 49 ed 4f 56 5d a5 4b 55 b7 b0 bc 48 66 ce a8 d1 40 1b fd 5a 44 2e f3 45 a5 8e bb 4b 1d 17 3b e1 3a e9 dc 65 c0 46 f4 4d f0 43 0d f4 e8 de 62 6a bf 48 ba 4a 5b 1a ce 47 c9 9c cd 1a 09 b4 d9 ab 65 96 c9 9c 2a af 5c e6 0e 98 19 60 06 98 61 81 6e 09 e0 Data Ascii: zv\|gwbFY.?nWox=(JAw@hxFPj=H>7T`]j\|m\2sFP9K>2&6!,aHKDV)u=<33hzryU9SoM=tIOV]KUHf@ZD.EK;:eFMCbjHJ[Ge\`an
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 1d 18 4d a2 f1 2b 39 fc 75 65 47 bc bc ef 1c 66 7a 8d d6 98 1a 6d 12 51 86 55 22 fe 05 a1 0e 44 35 74 55 49 d0 00 bc 11 9b 38 b2 9b 28 6d 1a 55 9a f2 ed cb e1 f4 ca cc e9 fc 56 e0 2f 4c cd 1b 9b d4 06 ab 44 34 b3 f9 16 3c 0d 20 ac 86 6e 89 6a 02 bf c6 51 8d 93 91 d2 00 78 ca 1c 54 99 4c f9 75 e1 f0 fe ed fa 96 32 9b 16 af 4d 61 95 88 46 d6 8d 01 f0 cc 6b 00 5c 25 08 d1 ef f9 82 0b a8 01 6c 42 b7 89 85 cd 68 58 a6 b4 71 c0 53 54 61 e6 ab c3 7c 03 ef 6f 65 7c 2d 59 d7 86 25 97 44 a5 76 d4 86 06 3d 6d 5f 07 7a 5a 85 08 fa 7e 13 62 54 c6 6a 50 36 34 41 8d 50 61 50 b2 bf f1 ee db 98 dc 57 af 39 fb da 66 65 b0 c0 a8 a4 fa 70 ca fc ba 70 98 af b7 eb bc 6c f1 5a e2 d1 aa 2e 4e 9b 98 de 57 f0 cd c0 62 52 9b 0a a6 7c fb 72 98 79 97 3a cc 10 85 af 9b c5 b2 2e d1 c8 Data Ascii: M+9ueGfzmQU"D5tUI8(mUV/LD4< njQxTLu2MaFk\%lBhXqSTa\|oe\|-Y%Dv=m_zZ~bTjP64APaPW9fepplZ.NWbR\|ry:.
2024-09-27 16:52:53 UTC	1187	IN	Data Raw: 4c f2 f1 e0 8a 1d cf 5d 76 d2 1d 33 dc 0e cf 45 95 be 46 95 b0 5a 50 c1 da 53 65 8a 4a bb 4a d7 db bf 87 ac b1 a6 c5 22 59 a4 b9 e4 5c b8 bb 8f eb db d5 75 6e ef 57 7c b9 2c 3e 6f 55 20 82 9e 9d a7 ab fb f5 f5 75 79 50 d2 55 ba 66 bf 6d 93 5c 9e 8e 77 b5 4a 52 26 1c 8e 92 cf e4 ee ae ae f8 74 9d 1b dc e2 d7 f5 bd 53 c5 d2 d4 ab a6 a8 36 4f 59 84 a6 9e d2 75 7b 35 75 43 a8 90 6b d9 66 12 fb 3b 11 20 6f f1 1b 82 00 e4 92 cf 33 72 77 ef b7 d7 17 d7 c1 f5 86 a4 43 6f 5f d8 37 14 54 0b ea eb 69 db 7e a1 a7 6b 57 54 b7 d7 0b 75 58 cb 91 e5 65 5c d3 b4 31 6f 81 64 41 c6 59 26 39 27 b8 bb 37 fe fa 10 86 b4 13 7f ec 5f b8 21 5d dd af 0f a1 0d ba 84 9e ae 3f a8 0d 80 60 ae e3 24 ef 66 95 60 41 a5 27 c9 7c 28 5c 5d fe dc b9 37 f0 c3 a3 fb f2 7e c5 47 43 61 35 af 64 Data Ascii: L]v3EFZPSeJJ"Y\unW\|,>oU uyPUfm\wJR&tS6OYu{5uCkf; o3rwCo_7Ti~kWTuXe\1odAY&9'7_!]?`$f`A'\|(\]7~GCa5d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49897	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i497!3i737!4i256!2m3!1e0!2sm!3i707457389!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=31776 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 4016 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 ETag: 0e19ad63dbf49c2e1 Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	354	IN	Data Raw: 52 49 46 46 a8 0f 00 00 57 45 42 50 56 50 38 4c 9b 0f 00 00 2f ff c0 3f 00 ef c0 36 b6 ad 44 9f 88 8c d4 ea a7 1c aa d0 d4 5d 76 db 60 13 00 40 1a dc 2e 5e e8 5f 83 0a d4 b0 cb 61 3e 35 01 00 32 f6 2e 40 6b c5 dc 1a 08 b0 b7 f9 8f ff ff e7 31 94 da e4 96 7d 61 42 f7 f2 3d 50 c0 48 2d 00 fc 10 d0 01 ea b4 b0 32 f6 f4 9f 43 39 80 ef 7b 9e 8e 84 75 b8 b1 e8 d2 08 7c fe fb da 4a c2 94 c0 0c d3 ce 90 d9 f3 21 51 3e 30 78 bb 6d 3b 4b 6d 6d db 00 21 90 77 d4 b8 93 6c 99 ff ff 87 f2 22 02 c2 f9 7e f6 1e d1 ff 09 f8 67 fd 94 77 29 fe 9d 45 5e dd 49 cf af a6 c0 af 22 f1 78 fb 69 ef 3e d6 af 7d 70 26 7f d1 9f 8e 6e 75 e3 9d fe 67 bc b5 38 12 f9 8b c2 4a f7 b3 d0 ac bb 1e 49 e3 9d de 1e c9 14 f9 4d 2d 3f a9 4a fe 0c 34 89 ab f6 b3 ce ce 2f 20 69 bc 53 69 73 5f 76 12 Data Ascii: RIFFWEBPVP8L/?6D]v`@.^_a>52.@k1}aB=PH-2C9{u\|J!Q>0xm;Kmm!wl"~gw)E^I"xi>}p&nug8JIM-?J4/ iSis_v
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 3f 6b 3f dc c0 bc ed 2d f2 d9 22 19 34 49 31 46 9e 85 58 ae 97 5b b7 dc f7 93 ce 4e 90 b6 8f d5 f9 3a c4 28 b4 eb ad e9 48 c2 56 bf 08 3f 6f 52 f8 9e a6 23 a1 aa 1f 14 4e 01 95 e9 b5 eb 48 d3 d7 17 4d 4b 97 a3 b3 1d 89 f6 9a 39 a9 33 a9 5d 47 a2 bd 64 bd 69 33 c9 e8 6c 47 b4 17 0c 0e 61 44 6a d7 d1 b2 22 79 ad 5a d3 e7 59 f4 1d ad 4b f9 e3 ab a3 a5 9b 2b 6f 7d 47 d3 a7 8b e5 a5 9e 29 81 9b 37 9d 41 f8 24 e2 d2 c0 59 31 55 8e 2b 6f 3a f6 e1 5b 69 fe 12 68 e9 f3 64 39 5d 79 d3 d1 a9 ef a4 d7 fc 61 b5 75 48 bf c3 4b 3b 51 ce 57 96 1d 9d fa 6d b5 68 15 28 ea f8 0b 82 b3 62 54 2e b6 ec 68 dd 4f 1b c7 50 b7 0a 14 75 3c 38 65 7c fe 0c 96 1d ad 4b eb bd 8e 23 e2 1b 93 29 d4 ad 02 59 c7 e3 f2 d2 4d 70 19 94 eb 68 fa 74 02 26 53 ac 5b 35 e6 74 0d a4 e3 88 de b4 53 Data Ascii: ?k?-"4I1FX[N:(HV?oR#NHMK93]Gdi3lGaDj"yZYK+o}G)7A$Y1U+o:[ihd9]yauHK;QWmh(bT.hOPu<8e\|K#)YMpht&S[5tS
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 9a 11 e0 16 ea 71 cc 3b 3f aa 7c b8 c9 1b e9 75 3e e4 df 55 6e 2b 78 69 7c c8 27 2a 6d 02 5b 0a 5e 1a 9b 8f fa a0 f2 36 b0 9d e8 a5 d3 f9 8a 60 33 ca b8 36 9f ac b4 15 6c a5 97 2e 9f 2d 6e 06 db 08 ce b6 87 16 8f 29 6d a0 9a e0 26 b4 f4 f9 c8 e3 41 71 2b cc 9b f4 d2 9e b1 94 81 2f dd df c3 e4 5d 7c 4d 58 27 ce 18 c9 6f 3d aa 62 5c 3e df f7 6f 39 e9 79 49 8a f9 f2 7d ff 4e ea 8d be 28 e5 b3 2c 70 7b a2 2a 87 f0 15 65 7c bc 26 b7 e1 8e aa 18 ee 7c 16 0f 7e c5 4b c7 d3 05 6e f2 59 15 f7 67 31 14 00 aa f7 37 a2 37 ed 45 29 aa fb 50 16 7f 03 6e 05 86 6f 68 d9 a7 ab 52 3e df 28 00 c5 ef 24 2f 6d be 28 cf aa 50 f7 ea 59 dc de a8 de eb 89 5e 5a 71 59 86 3b aa 72 b8 43 15 0f ae a6 bd b4 cc 57 a5 a8 9e 65 01 3c 59 94 43 58 09 de 48 df e6 eb 32 5f be a9 d7 51 5e 1a Data Ascii: q;?\|u>Un+xi\|'m[^6`36l.-n)m&Aq+/]\|MX'o=b\>o9yI}N(,p{e\|&\|~KnYg177E)PnohR>($/m(PY^ZqY;rCWe<YCXH2_Q^
2024-09-27 16:52:53 UTC	882	IN	Data Raw: 49 55 f0 51 54 ef 3c 29 9c 37 d2 7a 1d bf 14 76 52 e2 56 94 05 ca 27 cb 82 55 79 03 8a 8a 13 b8 11 cf a2 64 51 b2 00 9e 28 2b 3d 91 17 ef 24 44 ae 3e 14 93 ef ea fe 28 1e 2c 30 4c 91 51 7b 2b 8d 77 e2 1b a9 e1 3e 58 4e 16 55 4e 05 ca ba 2a 81 02 e5 b8 58 5c 16 25 d8 f5 2f a6 fc e1 3e d0 f0 5b f7 47 51 0e c0 32 92 c2 79 23 ad d7 71 b5 26 ed 85 64 09 c4 7f c9 12 35 ca f5 ab 1c 3d 56 c0 2e 22 be f0 ae 0a e0 71 2f c6 ef 1b aa f7 22 32 6a 6f a5 f1 4e ac 13 c0 5d c5 7f 47 95 e2 57 e8 91 f8 f1 3e 42 fa c2 fd 51 40 fd 91 8f e2 f1 be 17 78 f0 03 92 c2 79 23 ad d7 f1 b3 d4 70 4f 55 fc 77 e2 d6 e2 4b 56 7c c6 5d 34 5c 5f f4 43 55 f0 09 dc 0a 56 40 39 84 cf c8 a8 bd 95 c6 3b f1 49 93 be 27 be 01 4c b5 b7 51 ae 56 73 ab 24 80 5b 47 58 4d 38 c8 fb bb 2a e6 cb f7 3d af Data Ascii: IUQT<)7zvRV'UydQ(+=$D>(,0LQ{+w>XNUNX\%/>[GQ2y#q&d5=V."q/"2joN]GW>BQ@xy#pOUwKV\|]4\_CUV@9;I'LQVs$[GXM8=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49900	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i496!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=78357 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 6790 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 ETag: 0624d69d8cbec335a Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	354	IN	Data Raw: 52 49 46 46 7e 1a 00 00 57 45 42 50 56 50 38 4c 72 1a 00 00 2f ff c0 3f 00 17 c2 30 92 ed 24 3f b8 bb 96 41 ff 55 d0 87 13 0f 91 36 18 07 00 60 24 9b bf ee 97 6b e8 36 68 ad 43 b6 c9 34 00 c0 24 53 1c 3a 8d e8 bf f3 d9 dc 6d fe c3 fd ad fd 2a fb 55 fa c9 a2 07 f8 37 0a 1e e1 63 01 b5 16 ea cc 2c 17 e9 2f f0 4a 00 dd 51 22 10 15 5d a9 3b 42 e7 ca da 4d ce 42 9a c5 62 1e d3 0a a1 9d 06 5d 1b 80 1d 51 65 ba 62 fe 8d 50 73 47 be 9e 99 2b ad 44 f2 f5 c4 eb 18 10 7c 2f a5 77 8f 1c 45 b7 66 eb ce ed 94 63 5d 63 36 77 f1 7f 48 24 0a 7e 08 78 af 7a 2a a4 f7 7e d6 0a 2d 84 66 83 97 08 b4 37 58 6f 3c 84 3b a2 53 0b 7a 24 fd e1 5d c2 bd 87 17 89 ac 0a 5e 34 3c 2b 5b fe 31 78 d7 b6 ed 49 b3 6d db 50 54 20 8a 1c 34 4f 0c ec 69 0a b9 a2 62 4d 37 46 73 8d ff 58 51 45 42 Data Ascii: RIFF~WEBPVP8Lr/?0$?AU6`$k6hC4$S:mU7c,/JQ"];BMBb]QebPsG+D\|/wEfc]c6wH$~xz~-f7Xo<;Sz$]^4<+[1xImPT 4OibM7FsXQEB
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 94 3e f9 81 4f 59 95 f1 81 48 5a 7e 00 51 72 9a 5c c4 97 88 29 23 20 04 c0 c9 e3 c7 a7 27 63 f3 29 47 ea e6 f3 e3 d1 d5 d7 d3 30 e2 32 ce 3b cd 0b c0 2a 59 1f 9e 6f b1 9c ae 33 7c 71 77 9f fa c4 c7 d4 70 52 7c 85 69 6a 94 4a f2 03 4b ed 63 b3 c4 a7 87 44 7c 99 8b 29 23 00 13 ae f5 a1 9b 6d 7d 00 9f de 03 34 c8 de e7 c7 9d 9b aa af a7 61 c4 8c a2 97 33 5d 46 96 a1 af 43 44 00 a6 99 fb b8 ba 9f 1f 4b 15 03 ed 63 49 8d 1f f8 cc 58 4c 53 a3 d4 30 95 93 9c 4f 11 48 86 93 ec b5 3e 74 a3 18 6e d1 c7 8f a5 c4 0f 00 1a 3f 3e dd dc fa 64 1a 46 5c 16 72 4b b6 70 36 44 40 08 2c e2 6a 63 9a 33 fa f8 f4 64 6c 3e e5 48 dd 7c 7e 7c 4e 57 0b 4e c8 8d 9e 1c ba d0 1d 97 ec 91 1c a5 ba a9 51 8c b5 e5 16 2d c3 fa 04 3e 92 9f f8 f0 f3 a5 ea eb 49 32 cc 8e 2e 03 83 45 b4 8c 8b Data Ascii: >OYHZ~Qr\)# 'c)G02;*Yo3\|qwpR\|ijJKcD\|)#m}4a3]FCDKcIXLS0OH>tn?>dF\rKp6D@,jc3dl>H\|~\|NWNQ->I2.E
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 15 0c ce d6 73 2d 3d 1f bd 52 7a 6e 58 63 31 17 e1 d4 1a ea 8e 5b 42 e1 73 d9 22 e7 d3 99 bc 3c bd 91 4b 47 47 01 f6 4a 9b ea 35 35 0d d7 0e f4 a1 9b fb 42 cc 3c fb 5c 7e 09 cc ea b9 49 dd 72 0b 8f 4a 99 d4 98 ee d2 d1 2d f7 f2 46 7e 9e fb 5c 46 f2 bf 02 23 ca 64 6f e4 26 2d 7d e8 96 d9 fb 4d 3e 49 4b 77 dc 1a 70 82 3c b9 83 72 5c b9 e7 92 74 86 fa 1a 74 4a 61 4f 26 3d f4 92 23 d2 25 d7 8b 9a fa fc 78 54 35 8c 0a 3b 60 7a a5 0c 91 f7 fe b1 d0 88 3d 32 17 e9 0c f5 35 38 74 dc ca ea d3 da 5a 2a 9e 5c 5c a1 5c c9 02 3d 33 d7 cd 3e 07 fc 44 e6 48 66 8f 2e c9 e1 1a 9b a1 e3 56 7a 58 57 1f 9f 72 a9 aa 77 01 ae 9f 0b 77 79 90 cb 1d b9 a9 8e 6e b9 d5 8f ea 4a 2b 07 97 60 04 f9 f2 fb 79 6c 37 5d 77 dc c6 a0 c9 25 b1 7a 8e 29 f2 3f 3e e4 01 8b 39 ba 7b 89 61 cc 49 Data Ascii: s-=RznXc1[Bs"<KGGJ55B<\~IrJ-F~\F#do&-}M>IKwp<r\ttJaO&=#%xT5;`z=258tZ*\\\=3>DHf.VzXWrwwynJ+`yl7]w%z)?>9{aI
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: d7 e3 33 79 f3 03 7e 76 fc 39 cd 24 cc 8f 33 ec 4f dd eb a0 0b 65 fe 75 5a b5 66 e8 8a bc 81 51 7f d4 a7 31 c3 ba e1 d8 3b 47 1b 7b 7a ed c4 ec a4 4a b3 e3 0c 40 f7 7a ac 0c 00 cc 8e 89 20 8f f9 1b 70 b2 88 31 a9 9b b2 13 c9 c3 56 52 13 98 7d 4b fd a3 d2 e1 b6 eb 8f b5 9f 41 17 ab 14 04 59 be f1 2b 30 8c 19 0d 6b c1 d3 2a 70 00 d0 9f 9f 0e df 4c e0 30 93 66 c7 c3 71 de f5 af 31 3f 1e 70 5a b5 e6 dc 77 fd 8c c0 48 75 6b 0f 61 4c d4 02 55 e5 6c bb a4 27 a9 bb 76 df c3 4e 82 47 a9 7d b5 55 3a 63 01 76 b1 25 00 0c 98 c3 4c b1 eb 8f eb 45 8c 49 2d 78 da 99 d8 4a 6f 43 26 92 04 3a a3 1e e9 0a 00 d7 63 92 d7 e0 98 d7 48 fa 34 8d a4 ed fe 02 0c 97 31 f4 3a 60 49 ed 16 c0 94 f4 b6 04 c5 93 d3 db 9d 1e c9 71 22 fd e6 51 a4 5f 77 d1 71 69 c3 e0 af e0 44 31 e1 d4 54 Data Ascii: 3y~v9$3OeuZfQ1;G{zJ@z p1VR}KAY+0k*pL0fq1?pZwHukaLUl'vNG}U:cv%LEI-xJoC&:cH41:`Iq"Q_wqiD1T
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 05 6e f6 65 f8 b6 5b c9 e1 6f c2 c9 32 5e 86 17 e0 29 2a db f3 7d 07 df fd 76 e7 67 0b 1c 76 ad d9 a1 03 7c 73 76 e8 62 86 ae b8 01 91 37 80 4f 93 b6 5b d1 df 05 51 cc 45 e8 54 4b 51 35 2a 5e 5b fa fe 21 b9 6f 33 57 37 c7 d3 83 48 0d e0 9b 34 6c c0 ad f2 ef c2 61 14 73 89 61 95 14 d5 93 49 4a ea a9 03 5c d1 6b a5 49 fd 93 d2 1d 9c bc 8c 7b 81 c0 a4 01 d8 ee 05 fe 32 1c 46 31 89 75 75 14 55 4e 95 66 fb 4e 8f 38 cc a5 c4 fe 38 97 66 c7 c3 69 de ca 10 00 7c 03 b6 7b 91 bf 0d d7 8b 98 44 e8 54 44 51 e5 8c be d7 31 ec ce 95 2a 6d 95 1e 3b bb ab 56 e7 6a ab 74 db da a0 0b ad ef 25 60 da 6e 23 62 b8 88 c9 65 38 ac 84 a2 ca 99 ed 16 6c 03 6e 2f 69 1b f4 38 62 6f cc 6b 8e 79 cd f1 c0 4f 31 dc 86 c4 49 18 93 c4 ba 02 8a 2a e7 36 72 6b 06 4c 91 f3 06 c9 c0 6e 4c dc Data Ascii: ne[o2^)}vgv\|svb7O[QETKQ5^[!o3W7H4lasaIJ\kI{2F1uuUNfN88fi\|{DTDQ1m;Vjt%`n#be8ln/i8bokyO1I6rkLnL
2024-09-27 16:52:53 UTC	876	IN	Data Raw: d4 32 38 aa 92 29 00 3c e2 fd 55 00 81 db a4 d2 e5 32 2b 17 a4 88 77 00 30 ff 62 be 48 bd 79 16 40 60 ff c5 44 f2 f1 46 24 4d f7 0f 16 a4 3c 21 19 d8 7f 31 91 bc b9 4f 31 dd 6a af fe 06 7e 4a 7a 60 54 8d 7f 82 20 e5 29 c5 b4 1b 95 61 9f 41 61 95 44 f2 11 89 c0 70 1b 94 6d 9c c7 32 aa 6b a6 e0 26 61 36 29 db 00 50 0f 7e e2 06 c9 c0 b0 9b 93 6d 24 ed 5a 08 12 8f 0f 09 d3 70 1b 93 6d a4 d7 81 29 92 4f 48 1a 76 03 70 86 3a 2c e7 7c 46 b6 5d 03 7e 4a 2a 0d f7 17 b2 8a ea 84 03 6b 48 c2 aa ae 03 85 e4 05 05 89 fb 14 c3 be 00 fd 22 87 16 1c a4 60 a8 17 72 dc 74 58 e7 75 d4 a4 42 4f 26 09 05 6d a2 57 54 1d 56 47 24 9f 12 be e1 56 5f 77 2f d1 81 85 a1 4e c2 22 e1 5e a8 27 a7 b6 a5 1d d9 07 b0 eb c3 2d ac b3 22 ff fc 5f 28 d3 81 e5 f0 62 e5 ac 9f 03 be 8f 7d 69 b6 Data Ascii: 28)<U2+w0bHy@`DF$M<!1O1j~Jz`T )aAaDpm2k&a6)P~m$Zpm)OHvp:,\|F]~J*kH"`rtXuBO&mWTVG$V_w/N"^'-"_(b}i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49898	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2945!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=88050 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 12298 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 ETag: 0d5ab5a9c46aa302f Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=6 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	353	IN	Data Raw: 52 49 46 46 02 30 00 00 57 45 42 50 56 50 38 4c f5 2f 00 00 2f ff c0 3f 00 cf e2 a0 b6 6d d3 7a b6 8d 1e bf 7f 0d 05 30 af 75 6e 0d d7 91 6c 9b d6 b5 f1 ed fc f3 79 01 d8 7e d7 77 d3 8d 64 db 4a f4 1e ee 92 6b 46 cc 92 d8 f7 58 36 21 ee 4f e6 3f ac 6a 6b 28 ab 0a 44 80 08 10 01 22 0c 33 20 60 88 00 01 60 05 ca 04 de 1c 30 69 22 c6 40 46 77 e4 87 c4 4c c4 fc 10 0b 91 1d 53 c0 14 10 a5 c4 41 24 81 28 60 12 88 02 22 81 8c da 2a bd 42 9a a1 24 43 69 6e 48 33 94 64 a8 37 6e ba 57 e2 22 7e 5d 8e 3d 01 7f 80 0b 0d 78 a7 58 27 58 a7 d8 5f 84 ed 57 5b b8 f6 4d 07 ed c1 1d 5a 6c 1b c8 ac cc 13 7f a8 8c 08 8f 12 a7 77 88 d5 e0 d6 46 b7 31 b8 b5 dc ce b4 66 86 3b 9e 7c af b4 91 32 ae ab f0 91 f1 c1 f7 ac e8 4f 4c f2 72 0c 76 72 7d f0 65 47 e7 dd ff bf 42 fd 82 8e 87 Data Ascii: RIFF0WEBPVP8L//?mz0unly~wdJkFX6!O?jk(D"3 ``0i"@FwLSA$(`"*B$CinH3d7nW"~]=xX'X_W[MZlwF1f;\|2OLrvr}eGB
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 19 3b e7 d6 36 ad 8d e6 86 26 23 a3 14 85 b6 0d 82 1f cb e4 d0 72 a5 e7 df cc 9e ef d5 ab 09 7d 1d 20 22 75 91 27 fd 81 2d 11 cd bd 99 48 a7 3a d1 9a 08 5b c3 50 ad 02 d6 81 53 46 29 13 db 96 c8 b4 7c 43 1e 5d ff 45 87 7e 1e f5 ae e3 e3 d5 bd 45 2f 55 57 ea fe 16 53 25 43 bf 2f 06 e9 44 eb 98 98 ec 48 eb 44 63 4b 18 af e5 6c b8 dc 8d 8c 51 26 0d 6d 6b e4 c3 c7 0a 3f 82 d1 ec c1 27 c4 ab d4 0b 9f 67 12 1f b5 9a bd 1a c4 c7 99 c1 17 9f ac 8d b8 32 c8 25 d1 14 f6 db 29 73 c3 cd 82 f1 72 e1 6c 6c 86 49 bf 3d 44 1f 9d f8 8f e0 6a 76 ef 17 d2 f1 d4 6c e4 df cd 6e ae f0 d1 0f 5f 66 ce bf 9f 5d 95 42 64 5b 2c 34 67 76 56 72 b6 96 86 a3 cc 5a 4b 6a ae 4d f5 7b 28 80 73 e7 3c ae 66 88 4f de 8b 56 ea 06 ef 41 45 b8 99 8f 57 05 6f 48 e2 e1 08 b2 00 9c 0d e7 54 6a 6d Data Ascii: ;6&#r} "u'-H:[PSF)\|C]E~E/UWS%C/DHDcKlQ&mk?'g2%)srllI=Djvln_f]Bd[,4gvVrZKjM{(s<fOVAEWoHTjm
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 1b 2c e7 6c cf f7 ad 6e 83 2b ce 82 18 25 87 48 6c 35 cd fa 72 f4 35 af 74 ff df b2 02 be fe 77 60 ce 7e 97 85 75 40 f6 cc c7 6f ff 31 0c 64 13 99 ab 8c 01 ca 7f 7b dc 0b 20 43 d1 b2 be fd ae be b0 20 e6 cf 9a 08 ff 42 a2 28 5d 71 9b cb b6 15 84 c5 59 98 5e 13 df 59 21 19 af 46 5f 7f cf a2 fc c1 af 46 57 e2 ef 9f bf 15 25 f9 e7 67 f2 91 4b da f3 cd ef df b0 d0 9b 77 01 8b c4 ee fe f0 51 7f ce 3d dc 8c 44 20 74 46 47 0b 6b 9b c4 21 6e 78 36 dd 71 5a 60 a9 c3 32 29 cc 8e 24 fd f7 67 c2 2f 7e 45 62 fc 52 f8 ad 44 fd 99 fe 43 96 25 56 96 0a 55 50 fb 1e e7 02 5f 3e 3b e7 0a ba 79 9d b8 ff 28 9d f7 58 5c bb ab 23 44 72 f6 f9 2c da 1a f1 16 99 85 0d 32 e4 4f 97 c4 8a 63 7e e2 37 21 89 76 56 96 06 34 3a 93 3e 06 88 1d 83 e0 02 d8 45 44 8f b9 00 b4 a6 24 f0 5b 8b Data Ascii: ,ln+%Hl5r5tw`~u@o1d{ C B(]qY^Y!F_FW%gKwQ=D tFGk!nx6qZ`2)$g/~EbRDC%VUP_>;y(X\#Dr,2Oc~7!vV4:>ED$[
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 5a 26 a4 60 8d 1f 85 bc 33 11 50 cf b1 9d 73 57 4a c9 dd b1 d3 69 8c cd af e1 8c 1d 47 81 ea bb 64 72 8f d1 82 7f 33 eb f8 4f cf 57 6a 54 70 a5 94 00 16 11 11 6d 0f d1 29 44 24 43 ce 75 25 79 32 17 44 a3 31 55 11 a2 d6 18 10 46 4a 05 14 56 21 0f b7 96 0d b1 83 b5 15 1d 71 9f a5 91 17 88 e0 eb 6b c7 14 18 34 fc 60 56 91 0d 90 d5 43 a2 41 59 36 bd 8a 88 c4 7f 74 50 0a 30 98 28 54 b1 ff f8 9c e3 a8 2b 43 3f f7 c8 9e 16 c0 32 d5 2b 89 e4 f4 d0 6a 49 32 1a 14 92 32 93 98 3a 90 b9 44 21 a8 71 5d d5 e4 5a b6 9c 10 6b d7 9c 73 bc 31 05 8d 06 de 59 39 a8 d3 eb 39 c6 dd cf 5e 9e 47 7e 17 dc 64 ce f5 ec f9 55 17 7a 10 fe 55 f0 f0 fa 2c a5 0b 58 05 10 46 07 cd e3 da 60 c8 87 28 27 a2 a7 97 bb 07 bc f1 0b be c9 94 72 7a df 6d f9 69 9e fa 70 b9 9e d5 44 12 bc 5f 53 59 Data Ascii: Z&`3PsWJiGdr3OWjTpm)D$Cu%y2D1UFJV!qk4`VCAY6tP0(T+C?2+jI22:D!q]Zks1Y99^G~dUzU,XF`('rzmipD_SY
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 2c 17 97 a8 5a a2 c5 b9 fa 88 b5 4e 75 58 5b 73 b4 96 f9 e2 b3 c7 f4 d8 56 32 1d 33 02 45 ca 00 7d 16 93 4e cb 28 44 a9 a5 f4 f1 f9 f1 ea 7e f6 d8 f1 bb 52 03 95 02 22 92 44 a4 e5 b7 8a ec 80 90 25 70 89 8a b3 29 83 a1 d2 b6 b6 e6 a4 e1 53 56 23 e3 75 e6 7d ab b6 cc bf 91 d6 da da 14 a4 f3 b5 2d 11 b1 b6 d0 c5 9b e7 d9 eb 63 e8 0b 35 8a aa c0 10 70 09 a1 c7 a7 a6 6f af a2 e6 49 76 56 e0 fb d6 14 cb 4a 15 a4 f3 4b 9d 60 5b e8 62 20 11 b1 27 42 58 91 31 08 d9 ce 8f 46 84 b4 6c 11 5b 58 37 56 57 40 70 c9 f3 b6 2a 75 e8 20 35 ad 2d 8a c3 9e 12 6b a0 ee 5b 45 b6 40 c8 a6 d0 25 ac 8d 55 e9 22 b6 b6 51 fe c5 cf 56 a9 b3 4a 55 c6 f0 da 82 cb ac 8d 04 9b 66 55 60 c8 9a d3 69 c5 23 19 e5 6c 8b d9 96 20 24 14 b8 ef aa 38 65 ca be 9f 6a 02 e6 85 23 b8 44 b5 77 29 43 Data Ascii: ,ZNuX[sV23E}N(D~R"D%p)SV#u}-c5poIvVJK`[b 'BX1Fl[X7VW@p*u 5-k[E@%U"QVJUfU`i#l $8ej#Dw)C
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: d7 44 53 a6 43 c5 b2 ef e3 fb 93 83 8e 41 ec 21 62 57 07 88 48 1a 11 d1 cb 41 44 5d 20 09 11 65 29 12 81 32 08 84 b4 95 88 00 89 8c 92 19 7a d0 ff 33 ca 5c 02 09 bd 1e 65 62 fd c4 20 df 85 8d a1 93 4a 06 ff bc 10 8e 0b 1e ed 7a 17 d6 0f f0 dd a5 41 74 f6 3d 1a 63 a7 07 97 05 d3 fd 29 c8 6e a2 f6 a7 d8 65 90 3d 84 ca 1c ec 5f 22 9a 77 ce 59 89 88 e8 ac b4 a7 c6 a0 db 3f b8 c0 2e f8 a6 91 29 69 28 4c 2d 78 1a 94 6f ac 4a 9d b5 cd ed 52 55 f1 1b 5f 01 86 25 4c 3e 1d e4 8d 2b e7 68 5f 4f 8e d1 ca bd 8e 77 7a 42 ef 72 26 b4 0b 54 72 27 6a 4f bf c7 1e 04 31 a7 63 a6 27 47 7b 7a b7 e3 21 bc 80 d9 3f 55 4a e7 a8 4f fb 4a 5f f8 e0 9b 46 e6 49 d3 3f fb 28 b5 36 0c ae 20 8d ca 1c 2c 48 11 89 15 55 10 45 dc 61 52 9d 29 b3 61 cc f2 09 f1 64 d7 e7 60 a5 8f 17 a7 a4 ed Data Ascii: DSCA!bWHAD] e)2z3\eb JzAt=c)ne=_"wY?.)i(L-xoJRU_%L>+h_OwzBr&Tr'jO1c'G{z!?UJOJ_FI?(6 ,HUEaR)ad`
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 96 cc c1 39 b9 b0 dc 0f 62 6e 35 8f 15 05 6b 9a 71 71 3b c4 a7 2b a5 ec b1 29 07 dc db 96 3e 62 3d e8 4a 73 72 5a 6b a7 91 eb 1f e7 60 15 54 7d 34 14 99 98 19 97 3e 8f 9e 0f a4 cb a6 0c 13 0e c1 c5 bb 46 e1 49 18 73 fd e0 43 27 aa 40 56 5b cb 47 d1 ff e0 69 4d 43 ce 79 be 9b ec 9e 9c 1e bf c7 2e 1b 93 25 4a 7a 97 47 f5 10 aa ca d8 01 c7 cf 4c 3a 8c 97 9a c7 5a c1 ed bc fe 21 67 d7 3f 3e 9a 4e de 9d e6 1b 62 20 7b 12 91 10 91 0a c1 ba 88 a9 3a 09 cf 0f 5f 39 ae e5 d4 36 ef 5a b7 15 62 2b c1 99 f1 5f e0 12 4c 4e 2f 7d c4 5d e5 75 2e f6 ed 14 35 ed 4f 0e 2c 05 97 f6 1d 7a 53 59 0f 03 5b 85 12 cd 72 a3 0b cc 39 ae 56 c3 58 db e4 f6 a1 16 9b 5b 6e 53 c9 ee 64 0f be d1 7f 77 b2 67 f4 7b ef f2 f4 d8 1c 9d ec a2 d1 ca eb f8 1a 10 46 54 69 dd 4d 2a b6 ee a6 6c c7 Data Ascii: 9bn5kqq;+)>b=JsrZk`T}4>FIsC'@V[GiMCy.%JzGL:Z!g?>Nb {:_96Zb+_LN/}]u.5O,zSY[r9VX[nSdwg{FTiM*l
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 2d b5 8d 45 b5 a9 d7 8a 3e b0 19 c9 b3 5a dd 2c 84 94 58 ff 51 b9 82 ea 20 1b 99 95 75 b1 be 53 bc e3 df 40 26 fa 78 67 8b f2 1b c3 bf 1d 4c 7f bb 74 e8 3c 7b f1 db 64 ff fd 94 10 de d1 5c 2e 0b 85 f5 30 54 b6 71 19 28 b9 b8 bc ba 26 79 ff ac 52 4b 55 98 75 1a b7 47 f3 6e 05 b5 c6 e2 af 46 4a b9 6c dc 3a 47 76 aa d5 90 41 ab dc 76 d1 a7 c2 be f3 37 c4 9f 72 01 f1 7e 83 48 f8 37 83 08 fb 70 e2 fe 39 48 cd 06 ec 4f f1 dd 25 22 ba f7 3f 39 77 31 d9 c3 a4 fc 75 7b 6b cc 5d 35 bf 50 18 60 ac c9 05 5f 74 2c 0d 16 81 22 d2 d9 0a 8b 28 8b ff 10 7e 53 86 32 e6 14 63 f1 7f 31 b9 f4 08 a7 d6 bd 43 7d e1 dc 4f 58 db 3f dd c6 e6 f6 6f 53 9b ab bc 37 b9 2c 12 e6 9e 62 e5 47 e9 88 bb 5d 92 9a 85 a5 65 4e 07 b8 05 87 5e 1a e7 6c fd e2 9c 73 3c f6 f0 f2 00 3d 42 44 ed 10 Data Ascii: -E>Z,XQ uS@&xgLt<{d\.0Tq(&yRKUuGnFJl:GvAv7r~H7p9HO%"?9w1u{k]5P`_t,"(~S2c1C}OX?oS7,bG]eN^ls<=BD
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: ba d8 47 99 13 b3 2f e1 13 b7 03 43 f0 f2 1d ef c6 22 62 8f 1f 7f c9 f3 f9 99 73 a0 52 88 18 12 1d 5b 60 78 b6 92 ae 7f 79 7c 7a b2 3b 29 df 82 89 43 29 c4 c9 7b 94 f8 69 1f 09 8f ad 77 ea 38 44 64 03 77 0a 08 e7 87 66 e4 8c 52 ca ae c0 39 17 7f ff 88 c7 c0 7a bf 42 2e 8a 8c 98 83 f1 fa 83 32 22 6e 6f 19 52 6b e9 f9 97 a7 07 17 d3 dd 63 0c 24 22 78 8e 08 81 5c 9e 22 4a 42 f0 2c 85 40 25 c0 d1 9e 8f d3 d3 23 1f d1 ba 1c 44 94 4c 73 94 00 49 28 65 3c 4c 27 52 ca c8 2d ce 13 51 4c 41 01 7b 5f 19 7a d0 ff 33 ca 5c 02 09 bd 1e 65 a5 50 c5 ae 80 78 12 2b 2a 11 55 27 5d 3c de 95 16 27 a7 ef 3d bc d8 b7 84 01 a2 b2 ef 26 9e dc 3d dd bf d0 40 07 c4 00 a8 d4 2d aa 69 ff 18 f1 e0 e8 74 e2 5f da 4e ce bb 7d 87 88 e8 ec c1 04 4d 51 55 a8 d5 fe 14 a3 ae 7e b7 af ba bd Data Ascii: G/C"bsR[`xy\|z;)C){iw8DdwfR9zB.2"noRkc$"x\"JB,@%#DLsI(e<L'R-QLA{_z3\ePx+*U']<'=&=@-it_N}MQU~
2024-09-27 16:52:53 UTC	825	IN	Data Raw: e2 88 47 69 3f ab 6d 7b c4 71 cb 36 4e 34 97 ea 21 b5 63 1a 20 e2 52 d6 cf b6 0a a5 4a 6a 41 9c e5 f2 e5 66 f9 af c3 5a b1 73 cd 92 3a 6e 57 53 13 cd 0d 40 cb 10 5c 6c de eb 16 92 33 15 a7 a7 1b 24 11 81 f8 fd 2c 87 b6 6e 31 89 fe d7 11 77 b5 29 33 33 f5 c1 9e 0b e3 23 a2 d0 77 97 0d ed 42 98 3e 03 fd 6c 5b b1 2e e2 c6 a9 16 b2 69 01 0f af cf 46 d2 a4 a7 c1 b4 54 2e 03 59 48 2f 97 02 8d 77 0f 58 68 01 2e a3 35 bb 06 8f 9a 40 a7 73 9c 3f 99 36 63 93 58 e4 86 12 b1 10 06 83 f8 78 ef f9 3c e9 20 23 32 47 e2 cb 6b d4 81 73 98 c6 20 a2 64 4c 85 da 89 52 53 e1 d3 f7 a4 65 58 ad d9 75 1c 4e b4 66 d7 8b 90 c5 91 29 44 3e 18 29 1f 8d e7 5e 5f d0 c7 87 57 73 8f d7 fa 49 3f de 3e cb 51 37 c9 52 39 7a c6 3b 3f 78 8a bb a3 07 cf 3d 3e 8d a4 65 16 2e 64 e5 52 85 10 fc Data Ascii: Gi?m{q6N4!c RJjAfZs:nWS@\l3$,n1w)33#wB>l[.iFT.YH/wXh.5@s?6cXx< #2Gks dLRSeXuNf)D>)^_WsI?>Q7R9z;?x=>e.dR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49901	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	839	OUT	GET /maps/vt?pb=!1m5!1m4!1i13!2i1978!3i2946!4i256!2m3!1e0!2sm!3i707457569!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m16!299174093m15!14m14!1m9!1m2!1y5959152913421766081!2y3873299496822345719!2s%2Fg%2F11c29058f6!4m2!1x450310692!2x3363908564!8b1!15sgcid%3Ageocoded_address!2b0!3b0!6b0!8b0&client=google-maps-embed&token=72217 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 13290 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:51 GMT Expires: Fri, 27 Sep 2024 17:07:51 GMT Cache-Control: public, max-age=900 ETag: 0413a38e4e165ef6b Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	353	IN	Data Raw: 52 49 46 46 e2 33 00 00 57 45 42 50 56 50 38 4c d6 33 00 00 2f ff c0 3f 00 77 e3 38 92 6d 55 f9 b8 3b 2c 59 41 18 44 01 e1 5b 06 ce 93 ab e7 a6 e1 38 b6 ed b4 91 1d 66 66 a6 1a d2 7c 6a 48 0f 59 65 27 96 fc fd 05 df 8d 6d bb aa 92 fc 8f bb 56 cc 84 9e 11 30 65 3a 5a b7 de 1d 9e df 64 fe 23 48 07 53 41 0a 59 20 8b 26 31 14 80 2c 02 89 11 78 4c 10 09 92 02 01 92 f2 28 10 89 c5 c4 19 d3 e2 8d 2a 4b 30 e8 a5 a1 5d 19 f5 5a 05 b3 76 ae d7 2d b3 16 33 d6 d6 ee b0 11 73 a4 4d ba d4 d6 eb 47 0f ab 12 c0 de 11 13 ca ad 0a 9f f1 04 81 a4 c3 fe d8 d4 a0 56 0a 91 42 a4 e5 c8 b3 ff 43 93 8d 62 3d a5 a4 09 4c 30 51 04 c1 44 31 11 4c 7c b3 52 ab 3f aa a2 52 7d 7d d5 cf 4f 7e fc ed d7 df fc 7c d5 cb 19 67 96 87 cc e6 90 3b 76 7a 8c e6 96 bb 0e 9e 2f 74 06 84 b5 45 da 60 Data Ascii: RIFF3WEBPVP8L3/?w8mU;,YAD[8ff\|jHYe'mV0e:Zd#HSAY &1,xL(*K0]Zv-3sMGVBCb=L0QD1L\|R?R}}O~\|g;vz/tE`
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 28 a2 3c db 52 5c 46 9f cc 0c 0a ea f3 e5 ca 62 e9 cc b8 f1 ff ff 9c 9c 73 72 92 f4 f9 fa f9 b1 44 f4 df 81 24 49 51 54 a3 20 88 30 ab ac 0e d7 07 ea 5c ab 14 5d 23 09 d8 b9 1c fa 57 07 7e 73 d0 a0 cb 51 13 ad f1 be d5 eb 8f 0e 1a 96 20 ca bb 81 9b 81 b4 bb 5b a6 b2 b1 4e 1a 95 6e f9 ae 81 dc 7f b0 4d b4 f3 d0 cd 5a ca 35 36 d0 a5 43 c6 e2 d7 6b 5e 63 28 68 74 d8 60 20 f0 c3 98 83 46 93 c1 19 8d ad c1 e5 b9 c8 97 d2 67 79 63 cb 5c d6 5d 22 5a 82 0e 44 d9 75 21 9e ea a3 ed 90 87 33 93 88 df 35 a7 5e e3 bc 78 b2 b4 ca a3 fd 46 ff 49 df ef 5f 9e 0f ad 71 bf 77 80 e3 e6 61 6f 20 f2 a1 53 48 15 af b3 85 09 d8 d0 ea 77 2b 3c 58 8a 63 7b 37 e2 71 69 12 d9 dc 32 a6 46 75 3f bf 3a aa b7 3b ab 8e 60 66 fa 7a 7e d5 a3 f1 be 43 97 e7 83 91 83 76 21 c8 0b a2 74 af 4a Data Ascii: (<R\FbsrD$IQT 0\]#W~sQ [NnMZ56Ck^c(ht` Fgyc\]"ZDu!35^xFI_qwao SHw+<Xc{7qi2Fu?:;`fz~Cv!tJ
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: f1 45 10 11 2d c7 11 e6 7c f7 dd 9b e4 dc ae d5 4b d9 f8 88 09 6d 8e 1d b9 c3 21 28 4d 46 a0 a9 88 09 e5 1a 19 8e 8f df 95 92 f0 9b 17 77 92 ef f5 1a b9 19 f9 b8 6c 6e 72 ea 6d 0e af 5c f4 d3 91 64 0d cf 9c 85 e8 5f 36 d1 66 a3 70 d9 25 a3 5c df bd 79 0b 2f 5e 12 a6 d0 7a a8 d7 66 b7 6e 79 2e b1 3c 73 24 5d 96 8c fd 58 9b c3 d7 51 44 73 30 d1 26 a8 71 35 18 f6 9a c2 25 23 02 7d 57 a4 d6 7b f9 e2 ed 1b 22 86 a4 4c d5 ea 61 7d dd 8c b9 36 63 c3 cb 7f b4 93 a4 b7 39 49 f5 82 64 8c 9f 0c 1a 0e 92 6d 44 8d 8a 2e f9 ed 8e e9 1f e6 ce cb 17 ef d2 c9 bd 8d d9 48 27 49 6f eb 83 5d 77 a2 a0 c6 fe 41 ff ea 9c 8c a8 d7 da e6 75 e6 e5 0b bc 9b 62 ee 4b 51 78 73 12 f0 15 93 ab 3e 51 e4 05 51 a3 7f 38 32 84 6f 6d 19 ef 6f e4 40 f2 dc 63 c4 5b 6a a7 59 0a 25 f0 77 77 fc Data Ascii: E-\|Km!(MFwlnrm\d_6fp%\y/^zfny.<s$]XQDs0&q5%#}W{"La}6c9IdmD.H'Io]wAubKQxs>QQ82omo@c[jY%ww
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 3a 51 ba 88 94 15 f3 37 dc 04 ec c4 ae ae ae 4c d0 91 f2 11 76 90 88 a8 60 78 5f 36 62 47 9c 38 6c 74 e1 1d b3 f5 26 d1 5e a2 ac 08 8f 92 b0 bb 13 33 cf aa e4 d3 c4 49 9d 13 dc 97 65 93 70 d4 e8 e2 97 46 c9 88 cb 94 0d d1 55 09 30 48 e9 17 69 b2 28 08 a2 92 47 94 37 65 d3 b4 84 17 6c b4 48 c0 ab 50 46 dc 70 13 e0 95 88 f8 71 8c d5 e5 43 36 dc 58 64 be a1 88 a7 47 c0 15 39 c5 51 83 f2 7a 96 bb e6 a6 d7 bb b7 f0 e2 ae 59 32 2a 56 28 2b 92 69 19 80 62 75 3e d6 68 e2 65 c3 fc 19 1b b6 70 f3 62 b0 7f 5e 1c 0e a8 29 34 48 8b 6f 8c e3 5e bc 7d 29 f5 bb 18 24 2b 56 90 26 12 62 9a 89 d8 d9 d5 a9 39 21 e8 32 12 74 d5 a3 66 5f 9f 64 69 0b 8d e3 c2 42 c2 94 6f 50 ff bd 51 8f 26 94 00 2e 76 a5 94 59 73 66 4e 98 1f 1d 34 85 3f 88 b9 6c 43 a2 83 26 e1 70 c4 11 91 75 6c Data Ascii: :Q7Lv`x_6bG8lt&^3IepFU0Hi(G7elHPFpqC6XdG9QzY2*V(+ibu>hepb^)4Ho^})$+V&b9!2tf_diBoPQ&.vYsfN4?lC&pul
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: dd b0 0a 64 12 34 d5 90 7b 5f 8b 1a 8a dc ab 53 02 96 12 b2 68 40 40 25 b2 43 3c a6 e7 cf 9e e3 b3 df 6c de 24 fc 8d 96 85 82 4d 12 b7 53 5c 18 1d 3f 53 b3 5d a3 72 0a 24 9e 47 85 57 7d 00 f8 f7 57 02 00 1a a1 9b 01 9d 04 b8 44 aa 43 82 3e 3d b5 57 9f 6d 0a fa 8d a9 10 f1 ec 39 11 3d 3b 33 0f 26 1e f2 04 94 fa 1e d3 38 91 74 1e 91 3a dd f2 61 af e1 4a 92 1e 1d 00 e9 1b 14 62 d8 ea 72 e3 40 89 4f 4f 3f 21 86 9a e4 23 7e fb 84 88 7c 16 17 34 34 37 4c 23 d7 a3 75 a7 73 e8 a7 46 89 8c d9 bd 2f cf b6 4d 99 36 c5 cb 7c 62 6c 89 e7 91 b0 17 f8 f6 f3 7b ec b9 36 9e 25 0c b6 13 de 87 7a 8d bf 9c 55 d3 a2 68 fa 82 52 a7 db 41 2a 8f 0f f4 f7 23 33 88 a4 8b b5 97 25 0b 76 dc 84 52 af cd e2 ed f9 94 12 fb 25 4a 16 7e b0 93 8e f2 9a 7f c3 12 25 87 0c e1 67 51 49 9b 54 Data Ascii: d4{_Sh@@%C<l$MS\?S]r$GW}WDC>=Wm9=;3&8t:aJbr@OO?!#~\|447L#usF/M6\|bl{6%zUhRA*#3%vR%J~%gQIT
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: fc fc 5e 31 8c a1 a5 10 0f a5 e1 bc f6 a7 a7 5e c5 a1 7b 56 fb d9 3d fc ed 69 ce 7e fa a9 b6 7c ef b9 3f 03 21 f0 e9 b7 67 74 0f a6 76 1e 9f cb 19 b5 d5 68 96 33 9a 6a aa df 1b 56 0b d8 26 da c5 07 00 17 bc b3 ff d5 9a 8e 92 28 b3 15 2e af a6 92 c8 cc 85 a9 c8 66 2f 22 62 f6 5c ef 3e 08 9e df f3 f1 d9 73 82 0d a9 82 ad 32 b3 f8 f4 b4 b5 02 21 f2 80 5f 0e 9f 7e b2 e9 de 33 bf 14 62 b7 59 04 e1 7f b0 b6 b3 dd b0 9c ff 46 01 8d 44 61 61 35 14 a3 29 76 a5 37 55 71 0a 6a 33 cd 30 61 59 ca 68 ba 2c 4f 54 cb 40 34 8d ec 65 ca 98 cf db 7b fc e0 c2 0f 59 7a f6 f4 53 69 e3 a9 83 cf 09 56 db f7 ec 4f 4f 57 41 82 00 7e 7b 6a 0b fc 04 dc 0e 93 86 39 f0 bd 67 a5 e0 53 c4 45 a3 18 1a 5e b1 72 cb 0a c0 77 c9 f4 80 ca 35 36 b0 bb 32 60 59 37 b2 94 2d 33 3b 8f a3 41 23 89 Data Ascii: ^1^{V=i~\|?!gtvh3jV&(.f/"b\>s2!_~3bYFDaa5)v7Uqj30aYh,OT@4e{YzSiVOOWA~{j9gSE^rw562`Y7-3;A#
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 7d b4 d6 f8 fb af 7f 7e dc 0c 91 54 f9 eb 87 6f d1 47 e1 f2 2f 41 df 3e 5a c0 7f 11 43 0e e5 02 04 be e7 bf fe fe 21 41 f0 fe 3b 10 4e 14 cb e9 f8 99 f3 fe 2f b2 c5 87 6f 6b 3f 6d f1 eb 23 d1 af 7f 42 5c 41 f0 77 08 ba 61 7e f4 17 21 fd 12 1f bf 7d 0f 4f f9 85 1f 1f 04 f1 8f 82 a6 80 9f 91 b2 12 0c 3e 7e f8 f1 71 a2 a0 f5 54 fc ec b9 f9 d3 13 df 3f ae fd 74 6c bc f9 e1 fd 3f 11 c2 a6 8f 3f 22 d6 7e 12 d1 af 6f d6 c7 6f e2 6f f8 7e 13 be 49 4a 31 fd 5c d3 17 10 46 2b 4b af 3f f2 3f a4 ae 0b cb 98 04 1d 90 67 f1 fe 04 60 7f fb b0 f6 c3 8d ee df c7 1f ef 15 f2 b4 c6 32 10 09 16 d8 65 fa eb c3 2f 90 94 82 10 7d 01 2a 64 8b 9f 1f 15 28 f0 33 23 0f 50 90 ae 93 5b 1f b8 b4 ca c0 cc 9b 4a 58 f5 25 93 73 67 ef 2c 53 7c f0 42 f2 1f bf ff 45 62 2d 8c fe 01 0e 86 2f Data Ascii: }~ToG/A>ZC!A;N/ok?m#B\Awa~!}O>~qT?tl??"~ooo~IJ1\F+K??g`2e/}*d(3#P[JX%sg,S\|BEb-/
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: f7 3f 0a 61 33 52 d0 5f 98 33 23 1f f1 e1 bb 2b 3e c6 60 47 8e 2d fe 56 ba 1a c4 4d 06 a2 35 26 d7 44 fc 8a 6f c2 f1 29 e2 eb df 3d e1 52 e5 4c 92 39 89 d9 d3 1a 9b 8e be af fe e7 38 64 6f ea f3 69 a4 f1 51 cc 06 47 c7 69 51 21 59 4a 52 02 5b fc fa f9 ed 87 ae 19 99 43 33 ec 10 2f 54 ef 5b 0c 0e c2 8f 8f 79 f1 91 5d 89 50 83 1f df 91 20 67 fa 6a 29 9b 70 24 e8 f3 c9 1f 22 6f 3b d2 9f 86 00 6d 41 56 6e 56 35 82 5c 41 51 69 ed cd 6e 67 95 79 79 5d e2 7a af f6 f9 d4 0f 2a d7 27 d8 5a 01 00 58 5c 00 00 b0 42 56 00 60 21 31 15 4f 97 4d b1 1c b8 82 dc b5 9b b6 d2 8c 8c 33 ba 72 16 11 81 12 9f 23 5a bb 29 28 87 44 c4 4a 01 b2 2a 1f a4 30 11 29 aa 83 6b 28 5e c5 37 c1 a6 a3 93 1c d2 2c 87 f7 90 60 96 b1 74 64 05 2c 88 bc eb 23 20 ca 5d 7f a6 ff e0 2a 2f f1 e7 ff Data Ascii: ?a3R_3#+>`G-VM5&Do)=RL98doiQGiQ!YJR[C3/T[y]P gj)p$"o;mAVnV5\AQingyy]z'ZX\BV`!1OM3r#Z)(DJ0)k(^7,`td,# ]*/
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 92 56 92 65 6d 7b 1b bb 9a 86 37 f9 10 5b 9b 8b 49 b8 1d 57 d6 64 e1 4b 77 71 a2 21 85 75 a2 b6 b4 33 99 12 b8 e6 dc 56 ed 6d 65 94 71 a2 28 96 28 15 6e 64 05 ea 12 6e ae 7b ca 3f 10 28 7d a2 a7 d5 bd cd 9f a5 d6 e6 fd 87 67 13 45 a9 48 13 0d cb 09 37 a0 ed 69 fe 81 9b 14 4b d1 53 ef 75 3c 5f f8 36 00 cb fb 97 33 96 67 d8 3c fe 3c 51 54 7c 9a 04 94 ae 91 6a 1d 6c 66 89 82 a2 80 47 71 d2 dd ea ae 73 3c 81 6b ea c8 ff b6 2f b2 c9 19 ee db 4a 59 8b 0b 93 81 e7 17 83 12 7b ee 64 90 17 fe 74 83 9c 2a 9d 4f 53 3e 42 f8 48 b6 9b 77 9a b1 b4 a3 fc 13 50 8a e5 8b 54 dd a4 ec 80 a3 45 d5 4a 5f cb fc 22 53 a6 9b 4b 14 7d 69 7c 4f a9 2f 05 17 98 0b f2 0d 24 8f 80 54 7d 80 99 98 99 81 d9 59 d1 c8 82 01 79 f1 75 78 40 83 a2 9b bb 3a 94 28 88 11 5f 0a b7 e8 30 c5 4b 22 Data Ascii: Vem{7[IWdKwq!u3Vmeq((ndn{?(}gEH7iKSu<_63g<<QT\|jlfGqs<k/JY{dt*OS>BHwPTEJ_"SK}i\|O/$T}Yyux@:(_0K"
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: d9 2f 10 21 62 a5 c6 a8 c8 c1 b9 3d f4 ad d1 7e 7e d0 18 f5 f2 c0 97 50 85 e8 75 b0 ef 54 ea 49 a5 c6 9f 35 2b 6a 6f df d2 55 2a 35 f5 16 e8 62 6a 61 5a 32 10 67 dc 6b 52 c3 ea 93 38 3f 74 10 87 fe e5 c1 d5 b9 13 51 ad fb ce b0 86 fd cb dc f9 81 d3 6f 34 0f 88 7a 63 a7 16 bb 51 24 3e 22 7a 54 c6 eb 59 87 88 18 af d1 61 22 42 bf 82 25 22 22 45 25 59 3c 44 0c 6a 7a 19 5e 8e 87 a3 5c 91 90 ac f1 13 80 c1 c8 a9 e1 18 1d c4 42 2d 39 44 17 6a 73 f3 cb 96 2e 78 83 65 6e 4b ce 42 0b 6c 50 ef 55 85 89 ab c5 a0 cc cc 25 44 14 63 24 9b ac 41 33 e7 0f 05 d1 e1 b9 05 57 c3 51 48 eb 8c a1 f9 64 80 c3 9e dd 3a 68 90 35 3a 18 23 36 5b 52 65 ad 11 31 55 a4 11 f0 22 22 56 f2 73 a7 d7 76 39 b0 8f 8f ec 32 57 c2 02 88 83 d0 b1 8f 4e 6c 3f 72 b0 94 3f 3e 02 8c 24 64 f6 d4 09 Data Ascii: /!b=~~PuTI5+joU*5bjaZ2gkR8?tQo4zcQ$>"zTYa"B%""E%Y<Djz^\B-9Djs.xenKBlPU%Dc$A3WQHd:h5:#6[Re1U""Vsv92WNl?r?>$d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49899	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	832	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=110023 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 20262 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 ETag: 0de294e1493b62b3c Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	353	IN	Data Raw: 52 49 46 46 1e 4f 00 00 57 45 42 50 56 50 38 4c 11 4f 00 00 2f ff c0 3f 00 87 e3 b8 91 24 45 ea 5e 3a 66 fa 9f 51 67 31 39 71 3e d0 f2 6e 55 b5 1b 6e 23 49 52 a4 63 66 7a f2 5f 7d b7 48 fa bf e5 dd 01 b7 b1 6d 37 ca 97 c7 46 5b 02 21 fd d7 40 01 b6 08 22 46 5e da f7 34 ff 11 bc 06 2f c1 8b 88 44 24 22 02 99 23 a6 c2 d9 02 0e 04 8a 98 14 04 81 08 24 5a 3c 32 88 53 86 e0 f1 90 05 72 32 92 48 58 80 34 5a 52 04 0b 22 50 f3 b8 f3 dc 48 eb 20 2b bd 26 11 45 65 15 65 60 a9 16 e9 55 56 4f 9e 19 7f fa a9 7f a2 55 13 a8 0b 33 24 f1 26 52 82 56 6a 5b 74 66 1a 3d 18 ee 18 69 29 38 c6 0a 10 00 00 00 04 88 84 e8 05 00 00 80 00 97 56 2c 4a 63 52 18 79 13 4c a8 98 75 47 b3 cc 61 e7 2d 4f 87 de a0 33 e8 0d 3a 03 c6 11 28 d3 bb 31 bf 79 e9 4e 6f f1 15 66 2a 43 51 c9 a2 12 Data Ascii: RIFFOWEBPVP8LO/?$E^:fQg19q>nUn#IRcfz_}Hm7F[!@"F^4/D$"#$Z<2Sr2HX4ZR"PH +&Eee`UVOU3$&RVj[tf=i)8V,JcRyLuGa-O3:(1yNof*CQ
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 18 a8 03 2f 5b 5b c7 58 73 cc f5 fc 6f fe ff bf ff 3f 81 76 ed db bf 5f 44 ff 1d 48 92 14 45 35 20 cb b9 88 a8 c3 e1 07 54 89 b8 2a 22 46 ac 86 6e 86 88 45 68 12 a2 86 a2 90 63 1b 8d 26 19 9a 58 65 93 88 6c 12 44 38 01 6a 6f 04 9b 2b 19 15 51 cf ba 4e 83 32 96 c1 6b 63 ab 68 eb a0 62 ac da eb 01 ae 83 3a ba b6 16 a5 29 4c c2 89 84 68 d2 4a 6a 2e a9 12 a9 f9 a2 4c 44 74 d1 b2 11 4e 32 4b 3a 19 99 ac 93 d1 54 9d 60 95 85 ab 90 75 49 60 2b c0 9e d3 d0 55 cb cd f2 bc a8 13 c7 92 80 28 62 b8 96 8a 3f 1f 36 a9 3f 0d 98 d5 22 9c a4 9e b5 55 44 a3 91 75 2c ca b8 d4 20 72 08 88 db e4 e2 10 61 2f c0 81 91 21 cb 6d ea 61 cd e3 6a 21 90 ed 58 e6 4f 08 d9 6a 44 4c 89 b8 44 64 43 71 dc 28 62 0b 42 44 8e 05 4a b2 50 14 58 31 15 1b 4d 20 6e 53 00 9b 08 20 9d 0c 67 c0 0e Data Ascii: /[[Xso?v_DHE5 T*"FnEhc&XelD8jo+QN2kchb:)LhJj.LDtN2K:T`uI`+U(b?6?"UDu, ra/!maj!XOjDLDdCq(bBDJPX1M nS g
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 3a 89 f1 85 72 b7 74 33 8a e9 97 63 7a 18 22 29 88 b4 c4 b8 a1 11 8d 31 76 af df 0e 49 b9 67 e7 d5 1b fc 40 e9 6e ad af ad e8 61 9c 8f 2f 13 4a 1d 1f 68 51 19 3f 18 76 2b 40 d4 59 70 52 4b e8 dd d5 f4 3d 5a 69 64 a4 69 9c 4c 28 0f 94 58 7c a0 fa 6e 3f 80 b2 39 40 c4 fe 26 90 76 30 15 a1 6e 7f 8b f5 c1 68 9c 8f cf 6f 71 3c 8a 5d a3 ae c8 21 06 5d c4 6e 2e 6e 95 bb f3 9b e0 c7 cb c6 66 7f b0 d5 59 07 b2 ca 3a 4c ba c9 72 25 71 89 ee 79 41 cd 34 ae f5 5b ca f8 61 18 57 11 3b 6b c6 03 e3 0c 40 7a 7c e9 81 e2 9c da c7 c1 46 10 5d 36 81 74 07 a1 d2 eb 48 6a d6 e9 c1 3e 00 04 34 c0 b2 f6 a0 26 ef 6e 2f e2 8c f1 b9 d2 78 18 ca 3c 97 37 0a 2e 35 62 17 77 23 e5 ea ee 22 f8 b9 a4 b3 89 b8 6a 5c 3e d0 2d 3d 10 a6 f1 9a ee ae 8d 35 9d 12 0c 73 7d b5 83 cb e9 bf 1e ee Data Ascii: :rt3cz")1vIg@na/JhQ?v+@YpRK=ZidiL(X\|n?9@&v0nhoq<]!]n.nfY:Lr%qyA4[aW;k@z\|F]6tHj>4&n/x<7.5bw#"j\>-=5s}
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: f5 02 dc dc 06 ad 51 90 b4 e9 cc 3e 34 ab cb d9 5c be 99 2f 33 2a 65 f0 2e 0e 91 f7 bd 00 b1 f3 0e d4 c1 83 46 77 c4 86 4e 71 b1 38 35 c9 95 13 11 b6 b9 a4 a2 bd 30 b2 a4 65 b4 c8 24 88 48 fc 03 8a 93 11 46 22 4e 49 be 5f 50 27 a0 62 ab d8 6d d9 88 92 b9 42 db b4 dc 5c b9 96 4a b7 36 db 3d 96 fe 95 0f 64 a7 1b 6c c0 be 43 79 cf 97 fc 80 4f 61 fc 65 39 57 e4 c9 d9 af 52 d5 a3 30 e8 8f 7e c0 af 9a 60 5c db 34 10 34 d4 ac 2f 48 91 c4 1a 54 a8 36 9f 72 c3 aa 5d 8b 06 f8 19 95 a4 82 88 09 f8 07 31 34 b5 84 11 56 2b 53 43 83 0f 2a b8 1d 58 ea 7a 90 ce 99 71 e9 ee c5 2c a1 93 ac 9e 2e f4 d9 ab 76 df 17 05 03 7c 07 f1 f2 be 4c 3e 49 8a 81 75 2e 54 2d cc 60 e8 8f 9d c1 86 a4 d6 e4 95 8a 39 74 1d 4b af f9 61 54 30 25 b4 a2 37 0d 74 0b 69 02 9e 1f 35 54 31 a1 7c 79 Data Ascii: Q>4\/3e.FwNq850e$HF"NI_P'bmB\J6=dlCyOae9WR0~`\44/HT6r]14V+SCXzq,.v\|L>Iu.T-`9tKaT0%7ti5T1\|y
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 48 44 2a 01 49 aa 14 27 67 f5 0d a1 8d 6e 56 e3 35 69 ad da b8 ac da c6 3c 51 0a 9d 6a 0d e7 77 1e 17 4e b1 b4 c3 99 a7 39 6f b6 86 95 5c c9 c7 7c 95 3e 72 f5 db ab e6 49 36 f8 cc 47 e4 95 f0 57 95 6a 41 d4 ba bc 6a b9 20 51 c3 78 c1 fd 1f 85 57 01 32 54 30 36 7c 50 f0 7a 29 ae e0 03 af c4 38 0e f2 25 15 be 56 0c 37 50 82 bc 52 a1 38 21 18 65 80 6f 05 54 44 58 8b c1 6e a5 56 47 74 dc 5c 79 b6 86 73 d5 ef 0b 9f 4f 4a f3 8b db df eb a2 4e 59 cc 79 55 bb 59 f0 de 6f b6 3b 19 d6 80 82 77 02 e8 40 70 a4 23 33 cf af da 0c a7 59 10 c7 ee 53 22 f2 83 e9 7a 44 31 bc 1d 5f e8 4a 3a c1 48 e0 f0 6e 44 c3 d8 f0 f6 ec e2 5e 8f 83 fb 2d a9 82 7c 02 44 94 50 f2 0a 76 90 db 6e 1b 2a ea 1d 64 76 c7 f7 52 d5 97 a4 99 f3 66 eb 38 bf 18 27 5a 48 55 e7 e2 75 94 e0 b9 a5 4a d5 Data Ascii: HDI'gnV5i<QjwN9o\\|>rI6GWjAj QxW2T06\|Pz)8%V7PR8!eoTDXnVGt\ysOJNYyUYo;w@p#3YS"zD1_J:HnD^-\|DPvndvRf8'ZHUuJ
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: f7 63 c2 21 43 19 3d 30 80 27 61 60 5c 35 30 68 19 69 44 23 bd bb 93 46 44 0b 77 6b 31 a0 80 59 3b b9 b4 6b 2a 75 9c 4b 22 2e d6 ab 1f e7 ea 18 c7 f9 05 00 26 e7 fc f9 fa a2 b2 a8 a0 a0 b6 83 a1 aa b2 08 b4 2e a2 7e 2b c7 cd f5 52 0c 97 86 d8 88 69 43 e2 99 ae a3 ab 5e 87 bc 29 cb f9 6a 84 e7 6a c6 ca 72 c3 b5 97 90 d0 ac 3e d9 42 a1 ee d8 9a 24 09 d7 bd ae 2f 93 ca e5 35 07 6f 85 bd 99 8d b8 4e 6b ab cb ad 00 37 5a d8 e9 af 59 06 39 86 a9 c7 89 c0 30 cc 74 6d 6c b5 93 35 9c cd 67 4c f2 6a f3 44 88 1f cb b3 cc 1e fa b3 35 cc f9 5e 0d 71 3e 91 14 87 6d c4 6b 9c 9a ad a1 c7 e9 e5 d0 83 87 db 11 0d 97 fe 1a fd d5 88 7c d8 13 35 2f 8f 28 5b 0e bf bb 88 2a f9 26 e6 99 fe d9 dd 16 29 17 5d 7b f2 85 52 72 49 2c 68 88 a8 a1 ae 29 3a d7 b7 14 6c 80 be 70 a6 60 42 Data Ascii: c!C=0'a`\50hiD#FDwk1Y;kuK".&.~+RiC^)jjr>B$/5oNk7ZY90tml5gLjD5^q>mk\|5/([&)]{RrI,h):lp`B
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: ce e1 3c 2e 82 6a 26 59 75 29 a6 60 02 31 bf ab 29 71 61 da 5e a0 c7 b1 75 d9 e6 d0 dd 6e 80 fd 9a 09 b6 8e 95 f2 55 0c eb 59 07 c2 20 8b 93 27 0a 89 96 45 52 b1 ca 83 3a db 3f 15 e2 80 91 88 3a 18 ac b5 d4 4c 0d 71 0e 2b b3 f3 a9 b4 51 f1 2b b5 d3 14 9e d0 e7 ea ac 4f 95 b9 79 a2 59 bf 52 07 d5 b4 85 ea 0a f5 46 b8 5c 49 84 80 2d 8e 49 28 93 ad 00 59 5d 0c 37 ef 59 19 ac 96 0f e8 95 10 03 73 ca a4 10 e1 bd 2c 93 6a 89 07 bd fb 89 90 0b b3 1b 03 53 2f c8 66 b5 8a fe 6c f5 f3 d1 ea e1 d1 a7 57 be 54 6a c2 79 44 15 29 86 25 65 65 33 c0 2d 15 2d b7 50 f1 f3 f4 ea e0 f8 e8 93 74 d4 39 11 32 2f e1 e1 27 b0 14 fb d3 b0 15 6e fb 06 3a 15 71 70 8b a5 99 d3 05 c4 d3 fd 22 6f 9e fd 1f 00 c8 28 15 e6 25 47 c5 aa fb 2b 8b 00 7b 0f 0f 67 7c da 9f 9c fd b0 4f 37 6c 16 Data Ascii: <.j&Yu)`1)qa^unUY 'ER:?:Lq+Q+OyYRF\I-I(Y]7Ys,jS/flWTjyD)%ee3--Pt92/'n:qp"o(%G+{g\|O7l
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 85 4e 87 da 3c d1 5c 85 63 c0 d7 06 26 e3 94 30 97 5d 1b e9 97 0d 8c 93 ae cd cf 79 94 73 8b c2 ad 1e 7a d9 7f cd fb 91 4a 30 b2 da d4 b0 18 a1 93 6f 1d c9 ee 0c cf 2d 35 a5 ce 3e 91 3c cf 64 5e f0 4d e2 74 58 7c 7d 46 75 e4 93 a6 c9 a5 21 36 94 84 aa e8 4b f1 96 45 67 e7 94 c6 c4 92 b1 68 9c d5 6b 2e b0 24 8b 39 80 b3 7c 50 21 2e bb 46 14 3b 2d 74 3b 8c b5 0d 3e db 29 31 45 b7 94 97 f7 73 09 87 13 40 af 24 11 53 82 ef 30 ca d7 2b 0c 56 83 fb 0b 25 8e 57 0f 8e 65 9f dd 8f 6f 49 8b 8f cf 8c db cb 45 d3 2d 8b 17 7b 5f ba da 75 62 9d 80 75 a2 9c 15 7a f3 64 35 fc 61 ac 07 08 2b 84 b3 90 5c be 2c ed e8 87 92 3c 93 b0 2f 59 c6 99 16 67 f5 d1 4d 7d 96 33 54 ce ef 95 98 72 37 be 4c 1b e7 63 25 fd 70 96 18 9f dd 5c 27 d3 39 4f 72 ed f7 e4 97 fd 84 ab 23 a5 70 ab Data Ascii: N<\c&0]yszJ0o-5><d^MtX\|}Fu!6KEghk.$9\|P!.F;-t;>)1Es@$S0+V%WeoIE-{_ubuzd5a+\,</YgM}3Tr7Lc%p\'9Or#p
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 7a 47 9e 20 55 2c f3 b7 d8 44 70 db b3 3b 81 f0 ba d5 9d 9a 0f ff 52 be ba c0 07 82 f0 8c ca 79 f0 44 2e c3 61 8c 1a 8e e1 a8 d3 47 62 c2 a9 85 92 f2 41 01 f9 02 ee 85 78 3f 1d fe 26 13 50 a5 19 bf 50 de 17 5b 8d 0f bd 26 61 bd 1d 60 e7 4d 80 b8 09 5e b7 99 86 e6 11 50 26 f7 8f 25 03 0c 98 a5 0f a6 57 f9 04 48 19 5a 2a 99 11 b0 0c 35 05 a4 86 ce d4 90 18 d0 b6 54 c3 ca 20 e8 15 6b 18 6e 11 6b 42 9a 42 e9 f8 f3 91 e8 9d 39 3c 9a 91 82 47 fc de a0 72 01 21 55 6b 7d 23 e8 4b 88 96 68 a3 ab 06 ed de 2a 78 16 18 6a ad 9c e3 f6 d3 b1 4c bb 13 b2 f0 c9 f5 02 7c fc fb b3 44 54 33 a3 e0 7a 92 aa e6 a6 0d 5a b6 6c d6 b5 dd 52 a3 c9 2c 9c fa 2d e4 ed 5f 8e 84 5e c5 9b f7 37 39 c2 e3 36 ff 0a 52 a1 9d 2e 8b 88 8c d3 0f c0 14 4f ef 8d 8a 9a d1 68 ea aa 56 72 b1 2c f9 Data Ascii: zG U,Dp;RyD.aGbAx?&PP[&a`M^P&%WHZ5T knkBB9<Gr!Uk}#KhxjL\|DT3zZlR,-_^796R.OhVr,
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 6d c8 99 f3 a2 e1 00 b5 75 3b 32 91 66 a1 72 25 22 42 f6 a7 52 39 60 81 c7 b0 d0 f2 27 ac f8 f9 32 5c 3a a0 30 7a 21 63 bb b3 3a 2e e0 6b 5c 20 59 12 66 67 f2 42 2e e0 0a 27 bf b3 19 b4 59 74 78 80 9e 9d 9b 14 5d 2c 97 8b 4f 95 48 18 39 81 cd 95 69 80 73 3c 2d 11 91 c7 02 43 7e f0 08 d0 56 bb fc 9f f2 3c 61 0f 31 04 a7 1b f4 2c 19 f3 a7 27 9f 17 10 e7 69 ce 13 d8 3f a6 19 38 bb 2e c8 1c 23 ab 23 d6 ba b0 90 d0 00 db 9c 9d 12 f0 ba 46 45 73 3d f0 92 98 16 58 13 e6 40 88 0a cb 21 81 47 8c 3d 4e fe 08 5f f9 a5 82 4f 1f 3a f8 77 08 eb 61 ba cd e1 31 b3 70 d0 01 f9 04 f6 11 17 5d f2 e5 ed 64 eb c2 ae 88 77 90 8a 44 aa d9 d9 49 71 a6 02 3a f6 ac c7 ee 91 a8 44 73 ca c2 40 bf 9c ff 14 12 28 50 3e e1 2a 78 1e 9c cb 40 4e a8 1f 8f 4f 16 ce ef a5 4a c7 0c b4 39 92 Data Ascii: mu;2fr%"BR9`'2\:0z!c:.k\ YfgB.'Ytx],OH9is<-C~V<a1,'i?8.##FEs=X@!G=N_O:wa1p]dwDIq:Ds@(P>*x@NOJ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49902	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:53 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i495!3i737!4i256!2m3!1e0!2sm!3i707457737!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=94190 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:53 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 6656 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 ETag: 058ce338749463db0 Content-Type: image/webp Age: 1 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:53 UTC	354	IN	Data Raw: 52 49 46 46 f8 19 00 00 57 45 42 50 56 50 38 4c ec 19 00 00 2f ff c0 3f 00 cf c1 a8 b6 6d 25 b8 db 88 00 1a 89 ca 74 20 00 43 fd 2e ef bd 1a 6c 23 db 56 82 3b 1d fc 94 8c da 29 c8 5d d3 0b df 3f 30 aa 6d 5b c9 f7 21 de 82 2a f4 26 00 19 18 db 77 bb 6f fe 83 7e 4a 3f a1 9f 80 e9 c0 74 24 19 f7 35 a0 01 34 90 0d 8e 01 48 06 ad 0e 0d a0 57 f8 2f 1b 5e ad b6 20 0d 0c e6 08 65 24 78 7b 94 65 c5 a3 82 64 18 00 88 07 d1 7b 17 96 b7 31 14 ce 28 fa 56 09 2c 21 d6 5a f0 73 88 c7 6f 34 cd 2b cd 8a cd 7d 3c 85 c2 60 31 58 1c 0e 83 c5 e0 30 58 0c 0e 83 c5 60 31 58 fb bd eb c9 a6 27 ab 3b 3f 5c b5 37 55 97 e3 39 19 fc 6f db e6 a5 cd b6 7d 0c cc 0c e3 c8 9c 54 2b 7e c1 48 a2 55 9b 98 14 bf 9c 6d ec f9 ff ff 69 20 20 a2 b9 ee fb a7 7d 8f e8 ff 04 2c c6 12 5b c8 62 20 e2 Data Ascii: RIFFWEBPVP8L/?m%t C.l#V;)]?0m[!*&wo~J?t$54HW/^ e$x{ed{1(V,!Zso4+}<`1X0X`1X';?\7U9o}T+~HUmi },[b
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 1d f0 1b 9f 8a 04 38 18 36 fb 34 ac b9 18 55 f0 c5 fe 4d 20 3e 4e 3c a1 b3 89 f0 0a d9 c4 f3 b3 c9 2e f7 20 9e b3 30 f0 4e 80 98 64 5a 04 75 66 f3 32 d3 bb 20 01 88 9f bf 95 78 ae 22 7e fe 56 a2 cc c7 d3 bf c6 fb fd 53 e0 e9 d9 fb 03 01 fe f6 be ff fb 24 f0 f3 7b 49 20 7e fe 7e 16 f8 fe ef 93 c0 cf ef 8d 44 df eb 0c f8 8d 4f 45 72 c0 61 e9 b7 27 70 d0 b2 f8 24 e0 23 7f f3 5e 0f 39 5e 0b 6f 7b 4d 20 3f d0 8b 0f dc ff 0a c4 09 78 3b e4 c7 d8 57 ba 7a d8 9f 6a 92 a1 85 a1 f6 ff fc a4 21 19 e8 df c5 9f de 9f 9f 81 0e fe 7d 0a f8 07 34 4e 3f fd 1b 18 1d fc f9 29 be fd 06 40 c1 df f8 f3 fb d9 0f 9e 01 60 2c fe fc 0c 5c 14 3c fd 1b 2a 06 cf bf 01 84 d2 35 f9 54 ff 1b 07 c3 da fc f6 54 97 24 c1 9a 8e 24 c0 a2 ce f2 c0 d8 60 07 b1 fb 87 d9 41 ec f2 d7 7d 28 de f2 Data Ascii: 864UM >N<. 0NdZuf2 x"~VS${I ~~DOEra'p$#^9^o{M ?x;Wzj!}4N?)@`,\<*5TT$$`A}(
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 42 6e 37 ac fc 03 58 ff 20 9f 5c d5 78 8b 35 b9 dc ae b0 e4 36 76 3d c3 8c 5c 9f 3f 43 c5 f4 13 5b 9b 9e f9 f9 ec 48 1a 87 be 6c b1 63 88 2b 1a 2b af 4a 87 db b6 9f e4 b9 f8 49 09 c4 4e cb 8a b3 f9 c5 04 95 9f b7 65 db 17 6d 2c 4b dd 99 64 b8 81 a3 0a 3f cf 2b 59 34 ae a7 5a 65 65 ed 59 15 7d 2d 5b 4f b1 dd fd f3 65 09 68 67 ab a4 97 38 ad 84 78 bb 5e 6e 09 27 61 88 f2 cd 79 e5 ad 48 d2 e1 fc 69 51 86 56 d3 d4 9a cd 5b c4 3a aa e7 d0 2e 72 53 f2 a9 25 a0 1c ab 4c 2b 70 56 09 db 25 b6 1b 2d 81 de 25 fb 49 9e 8b 9f 3c 3b 69 21 81 d0 e9 9b 9a cd ab f5 db a4 7a 0e 4a b6 be bf 39 7f 3e c9 d2 6a 49 15 ce 54 95 97 25 b6 99 04 60 f5 05 f0 7c d9 01 88 42 40 df 56 32 05 2a 68 ba d0 54 b5 b5 fb 04 22 57 b1 a7 e4 6d 47 95 54 25 a6 a8 b0 5e 62 6b ea 80 9b 92 4f 2d 01 Data Ascii: Bn7X \x56v=\?C[Hlc++JINem,Kd?+Y4ZeeY}-[Oehg8x^n'ayHiQV[:.rS%L+pV%-%I<;i!zJ9>jIT%`\|B@V2*hT"WmGT%^bkO-
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: 60 12 8b a0 35 95 a9 01 c0 cf 8e f9 61 17 f8 1f 6f 02 fc 28 60 4f 0f bb 03 11 5f 9a 1c 77 9e f8 38 e4 c7 e7 ee e2 25 5f 9c 26 e2 f0 f6 21 5e f3 40 e6 7b 1e 62 31 39 70 4f 2d 5e 8f 39 0b 39 8f af de 2e 17 d8 c1 3b 1d f3 f7 bd c0 c7 fb 6d d8 b0 44 67 74 0a c8 b4 00 63 8f 71 c0 08 01 c5 24 d3 02 c8 e0 4d 20 10 4f 3c 81 98 5a f8 dd 17 88 fc 75 72 d0 47 f1 be f3 df 72 81 b7 1c bf 76 02 dc 79 c7 cc d7 85 30 c8 8e 15 9e a1 8f 13 c1 58 c8 5b 30 2c 04 be 17 50 25 08 7c 41 7a 80 98 26 01 49 af 28 bc 72 e1 7b 10 1e c8 40 76 96 b6 15 76 ef 6f 10 79 bc cf fc 7c 27 a0 4f 60 06 3c e7 f1 49 00 85 80 3c c5 97 32 e0 e3 2d 3e 08 ff 26 b4 2d 20 10 b1 51 8e 30 b1 08 30 81 48 d4 53 46 52 7b 19 49 80 a4 16 3e 90 69 f8 b2 6a 77 41 64 fb 5f 99 d8 e1 a4 64 99 57 0b a8 e6 8b e7 fd Data Ascii: `5ao(`O_w8%_&!^@{b19pO-^99.;mDgtcq$M O<ZurGrvy0X[0,P%\|Az&I(r{@vvoy\|'O`<I<2->&- Q00HSFR{I>ijwAd_dW
2024-09-27 16:52:53 UTC	1390	IN	Data Raw: db a1 70 ea 86 d5 5a 5e 22 31 18 72 01 48 68 1a 0b 47 f4 8c 66 85 a6 e9 22 b4 3a 9d 93 9c 56 18 48 60 bc 80 dc e5 42 e7 1e 44 96 07 d2 7b 3d 08 7c bc 7b d9 71 5f 96 09 78 c8 8f 99 78 3d 74 d0 56 17 d2 32 2e 4a e5 45 a5 0d 6d e4 00 73 95 c8 85 ad 9a cd 49 a6 a8 30 92 e3 c1 02 50 ff 1c 3f 9e 05 02 3f cb 31 f6 76 10 78 cd bd 2c e7 ae e4 63 07 0f fc 80 e0 ae 83 1c 0a f3 cb 35 ca 6d 48 44 ba 39 e3 ac 6c 73 32 2f 26 55 c6 1c 00 a0 92 fa 35 ff 55 16 a0 c2 e4 f0 51 e5 f9 30 39 b0 42 e0 7b 27 e1 07 bc bd d2 6b 69 89 30 32 57 d0 50 2c 0f 4d e5 50 97 d6 48 e6 c5 19 aa 48 00 6a 3c 92 bb 57 81 d3 a5 d7 83 c0 c7 bb 97 e5 62 77 2a 64 02 1e f2 ec 63 bf 43 05 e1 e1 24 00 04 1d 93 36 06 65 41 09 96 9a a2 2d 75 e5 b8 58 0d a5 7d 47 e2 52 32 2f 55 55 86 05 40 c9 f8 90 ef 7f Data Ascii: pZ^"1rHhGf":VH`BD{=\|{q_xx=tV2.JEmsI0P??1vx,c5mHD9ls2/&U5UQ09B{'ki02WP,MPHHj<Wbw*dcC$6eA-uX}GR2/UU@
2024-09-27 16:52:53 UTC	742	IN	Data Raw: bf 74 80 62 9f a6 f7 95 03 a0 ad fb e2 21 ec 47 f6 6b d7 a3 b4 91 fe ca f5 35 10 46 e6 eb a6 1d 00 28 db d7 5f b5 d0 16 00 46 e6 8b d6 0f cb a0 2c f4 57 2c ec a3 a2 71 e6 0b d6 0f ab 40 5b f0 ab 15 46 a8 69 a2 f0 8b d5 37 75 a0 fb 56 7d a5 c2 08 0d 9a 28 fc 42 f5 4d 13 d0 7d fb 65 0a 23 34 dc a3 fe 22 f5 7b 4d 41 47 f6 4b 14 3a d5 18 60 23 fd 05 ea f7 e4 35 75 64 be 3e ce 5c 05 ca f6 f5 d7 0e 08 23 f3 d5 d1 d7 82 b2 60 87 d9 71 a3 a3 36 0f 2f 77 19 60 9c e9 ae ef c3 ce ec 36 d0 86 5f 3c 18 7e 5d 94 93 ad b4 e1 d7 45 b7 45 ff 7f 3f aa 2f 1f be 56 a1 63 f4 a5 0b 23 0d f7 78 85 9a a4 ba 89 7e bd 1e b5 ac 91 5c cd 86 0f 81 2d ba 22 8a a6 a8 8b 17 58 35 34 95 7b 7d 53 d7 42 a2 86 9a 5d 4f 3f 04 b2 a2 2e 16 7a 16 40 e4 2e a2 ea 95 28 6b 4d d3 47 ab ed da ca 46 Data Ascii: tb!Gk5F(_F,W,q@[Fi7uV}(BM}e#4"{MAGK:`#5ud>\#`q6/w`6_<~]EE?/Vc#x~\-"X54{}SB]O?.z@.(kMGF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49903	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:54 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i735!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=86528 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:54 UTC	1036	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 9888 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 ETag: 0bbf058049ed7354e Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:54 UTC	354	IN	Data Raw: 52 49 46 46 98 26 00 00 57 45 42 50 56 50 38 4c 8c 26 00 00 2f ff c0 3f 00 e7 c1 a8 b6 6d 25 0b 77 a9 c1 90 21 fd 33 90 c3 9e 7f ad c1 36 00 80 24 80 dd 47 79 6e de d4 4e 4d 37 eb 48 92 95 bc f2 2f 1c c2 20 00 0b 9c b4 9e 3b 3b ff 91 3d 66 0f d1 76 c1 34 59 11 1d 22 3c 13 9c 29 b2 84 80 21 60 f0 17 24 09 85 72 aa b8 6b ab a2 4e 82 22 62 ca 5c 69 62 09 10 05 90 72 f6 57 27 4d 70 d9 18 cc aa 90 6a 32 aa f0 54 15 52 55 48 0d a2 71 2c ba 37 af 48 b5 f0 ff 80 28 59 30 75 48 a9 a8 9c ec 22 a8 94 56 26 9a 34 1f 9e 33 7b ce ac 6d 3f 40 3d c0 16 60 07 b0 05 d8 02 6c 9d dd e9 2a 2f 7e fa ed cd 68 6d 06 c7 f6 4a 12 0c de b6 6d d3 d2 da b6 36 f0 22 11 05 5f d0 86 4d 50 cb f7 52 30 2d 89 79 19 dd 96 aa ff ff c7 28 8a 17 d3 32 be 5e 67 44 ff 27 80 62 fa 27 c6 1e b5 50 Data Ascii: RIFF&WEBPVP8L&/?m%w!36$GynNM7H/ ;;=fv4Y"<)!`$rkN"b\ibrW'Mpj2TRUHq,7H(Y0uH"V&43{m?@=`l*/~hmJm6"_MPR0-y(2^gD'b'P
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: f9 bc 27 20 15 86 8c 99 0f 3f 9d 05 b7 01 be 45 d8 cc 2c 97 7c 06 01 88 bd 9f 53 22 5a 81 5e 19 fc 9a 36 85 e4 22 f9 98 11 00 91 d0 cf 29 a6 56 7a 41 2b 16 17 c9 c7 5c 14 56 e9 cf 49 24 ad f0 95 2e 0f a8 a6 09 41 e4 92 f9 02 2a 2e 96 3f 27 e6 56 68 20 e8 f6 0c a2 3e 91 1f 25 5f 12 32 26 e2 e7 94 8a 36 74 75 e0 11 d0 55 1a 01 15 7e 6d 00 94 6c 4a b3 a3 e4 7c 46 e6 98 7e 4e b1 d7 06 5f 87 54 e4 50 b1 29 b2 25 73 7e 96 9c 6d c9 2c 92 9f 93 48 a8 1d 30 00 3e d9 0d 6d f6 67 c9 38 51 e9 92 7f 4e ab b4 15 7d 0d df 64 2e 1b 0c cb b6 b9 e4 53 1e 79 25 e9 ea e7 94 ae da d2 ab c0 00 44 84 a1 1a 99 66 b9 e4 e3 25 c2 a4 24 f6 4a 2e 92 cf b3 9f 4d 22 da e0 6b 04 54 f4 7c ab 4d 84 51 49 92 4b e6 cb 38 02 36 06 91 90 4d f6 b3 f1 62 6a 21 2b 1d 72 81 43 ad fa a2 2c 02 30 Data Ascii: ' ?E,\|S"Z^6")VzA+\VI$.A*.?'Vh >%_2&6tuU~mlJ\|F~N_TP)%s~m,H0>mg8QN}d.Sy%Df%$J.M"kT\|MQIK86Mbj!+rC,0
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 57 f8 3a f0 a8 e9 65 4a 96 b3 2c 97 cc 9c f3 3e 02 a0 b4 79 d8 82 81 1e d9 21 f8 39 78 01 35 ce 89 28 9b 65 90 cc c7 1c a3 a8 c8 ba 94 5b 31 a8 80 7f 9a 67 d7 c6 05 c8 28 b6 f9 59 32 9f f2 d3 38 32 0f da 85 b1 61 58 e2 fd cb 44 d2 2e 11 7b 85 c5 21 3f 49 e6 2c 3f 46 96 aa 2c 6a 81 06 06 c3 22 4a fc 7f 5a da ae 74 49 c0 ec 94 4b 66 ce f2 7d 64 3b d2 a5 ca 66 30 6c a0 6a db 92 7f 98 48 08 b3 0c cc cc 39 ef 23 fb 61 d9 c0 82 35 d4 a8 9e c1 bd c5 f4 ef 4a 97 db 0c 92 99 73 8c a2 aa aa 86 b1 d2 80 aa 87 ab f5 9b 11 f9 cf 61 75 c8 4f 92 f9 98 9f 16 51 e5 91 2e 1f 96 0d 74 71 54 0b 5a 36 cb 7e 0c db fc 24 99 8f f9 61 41 a8 36 b4 50 25 23 6d 1c d4 33 a8 e4 37 97 2f fe 7d e2 c0 27 c9 9c 9f f6 82 50 87 b2 c0 c8 a4 4c 18 d7 c2 95 ba cd 5d e8 8e c4 f7 20 b6 f9 51 32 Data Ascii: W:eJ,>y!9x5(e[1g(Y282aXD.{!?I,?F,j"JZtIKf}d;f0ljH9#a5JsauOQ.tqTZ6~$aA6P%#m37/}'PL] Q2
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 52 93 37 1a 0e 00 a5 07 a3 a8 74 08 8c 18 45 1e 02 23 1e f2 00 4a 8f a1 31 18 45 e5 83 e6 44 5b 72 71 27 2c 4f 5b 3b ce 25 73 7e a0 8a 0d 25 2b d3 26 aa 3e 62 46 f9 d0 72 84 01 47 b6 aa 29 b5 4c 52 66 e6 95 28 ad 45 f0 f2 22 2f c0 6a 69 1b 8b 96 88 5c e6 0b 02 44 62 3a b0 e4 63 3e a3 36 89 84 cc d3 1a 30 42 0b 59 37 1d 90 48 b1 64 46 69 12 d7 99 a4 b8 c8 0b 80 25 33 60 62 c4 29 8b 16 cc ce 32 a7 42 5a 58 f0 49 72 76 16 d4 2a 5e 94 44 77 39 d9 f4 82 86 94 20 2c 19 f5 c6 64 7d 91 17 18 97 8c 72 c1 69 9c b2 68 e8 20 f9 6c b1 cd 25 73 3e a3 1a 9b 49 84 69 5d 65 0d 44 c0 fa 81 a7 95 26 6b 6c 2c 1e f8 11 61 33 3d ba 27 00 de 6a 91 c4 e9 52 34 90 49 3e 94 6d 73 c9 7c 49 a8 65 22 21 f3 a6 c2 e6 61 f7 80 68 f2 b0 9b 3f 94 8d 4c eb d5 fc 61 62 71 bb 36 14 52 5b 16 Data Ascii: R7tE#J1ED[rq',O[;%s~%+&>bFrG)LRf(E"/ji\Db:c>60BY7HdFi%3`b)2BZXIrv*^Dw9 ,d}rih l%s>Ii]eD&kl,a3='jR4I>ms\|Ie"!ah?Labq6R[
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 0a 04 60 53 98 30 80 4d bb 72 c4 c7 67 e7 09 80 73 44 b1 35 b3 4c e6 0b 02 44 9a 08 8b 0e 50 db 22 66 02 12 78 a1 ae 57 45 c0 d0 62 ba 01 08 e8 e9 ea be 9d ad 01 11 a6 1e 61 13 61 dd a2 a7 67 fc 39 76 9f 9e 1d 8f 73 38 f1 91 9f f1 a7 35 07 c9 19 19 57 49 5a d2 71 99 51 d6 e1 22 c0 0c 5a 25 a9 47 00 56 b1 af ea 51 11 00 65 e1 91 51 55 53 d4 cc 9a 8c de d4 6b d1 ac e0 e5 cf 4f 7f ce 5e c9 a9 35 2c f9 60 02 16 16 9f 36 3c df 31 a7 ae 83 bd 9b 26 2b 32 27 0b bf 64 30 e2 21 94 49 45 00 46 1a 03 d3 94 8c 3d 5d bd 5f 36 ad a7 f6 66 f0 27 7f 7a 96 f1 9f 23 9e 9c 67 3e 02 40 da 9a 4c 9e b6 65 00 3a 70 8b 9f 2e c0 cc 28 5c df ae f8 b8 39 fb 5b 87 3a 2e 33 a8 c3 4c 4b cf ef 31 f7 95 c6 38 2a 8e 86 03 85 a8 38 b0 58 1b 3c 55 43 b7 6c f3 7d a4 4f 4e cc 4f cf 69 d7 93 Data Ascii: `S0MrgsD5LDP"fxWEbaag9vs85WIZqQ"Z%GVQeQUSkO^5,`6<1&+2'd0!IEF=]_6f'z#g>@Le:p.(\9[:.3LK18*8X<UCl}ONOi
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: dc 1e b5 f2 0a 42 8b 02 7a 76 7c 67 c9 8a ee a2 a7 a1 84 85 77 62 c9 9c 8b 86 ba 81 46 b7 96 d9 59 e6 b5 dc ae 2e 3f bc ed 6e 57 97 6f 78 d4 08 0a 3d cd 06 28 1b a6 fb 4a 41 77 c1 1a 40 68 11 e7 92 f9 78 a0 46 bd 50 03 8a 6a 3d 48 3e 37 d7 f1 bb 54 ec ea c0 d4 b3 60 2a 15 c9 5d ac 12 6a bd 17 13 7c 6d ec 97 88 5c 32 73 8e 46 bc 50 03 08 eb 39 4b 3e d4 32 ff 10 ee fc 03 26 a6 d2 9e 36 21 2c 61 b2 48 ef c1 4b 44 fb 56 29 75 95 09 3d 93 3c 33 33 b6 d4 68 a8 8b fd 7a 72 79 9e 55 bb bd 7f 39 b7 f7 eb c7 97 53 09 a1 6f f2 4d 3d ba b3 74 49 ed 4f 56 5d a5 4b 55 b7 b0 bc 48 66 ce a8 d1 40 1b fd 5a 44 2e f3 45 a5 8e bb 4b 1d 17 3b e1 3a e9 dc 65 c0 46 f4 4d f0 43 0d f4 e8 de 62 6a bf 48 ba 4a 5b 1a ce 47 c9 9c cd 1a 09 b4 d9 ab 65 96 c9 9c 2a af 5c e6 0e 98 19 60 Data Ascii: Bzv\|gwbFY.?nWox=(JAw@hxFPj=H>7T`]j\|m\2sFP9K>2&6!,aHKDV)u=<33hzryU9SoM=tIOV]KUHf@ZD.EK;:eFMCbjHJ[Ge\`
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 34 28 19 55 19 ea 49 1d 18 4d a2 f1 2b 39 fc 75 65 47 bc bc ef 1c 66 7a 8d d6 98 1a 6d 12 51 86 55 22 fe 05 a1 0e 44 35 74 55 49 d0 00 bc 11 9b 38 b2 9b 28 6d 1a 55 9a f2 ed cb e1 f4 ca cc e9 fc 56 e0 2f 4c cd 1b 9b d4 06 ab 44 34 b3 f9 16 3c 0d 20 ac 86 6e 89 6a 02 bf c6 51 8d 93 91 d2 00 78 ca 1c 54 99 4c f9 75 e1 f0 fe ed fa 96 32 9b 16 af 4d 61 95 88 46 d6 8d 01 f0 cc 6b 00 5c 25 08 d1 ef f9 82 0b a8 01 6c 42 b7 89 85 cd 68 58 a6 b4 71 c0 53 54 61 e6 ab c3 7c 03 ef 6f 65 7c 2d 59 d7 86 25 97 44 a5 76 d4 86 06 3d 6d 5f 07 7a 5a 85 08 fa 7e 13 62 54 c6 6a 50 36 34 41 8d 50 61 50 b2 bf f1 ee db 98 dc 57 af 39 fb da 66 65 b0 c0 a8 a4 fa 70 ca fc ba 70 98 af b7 eb bc 6c f1 5a e2 d1 aa 2e 4e 9b 98 de 57 f0 cd c0 62 52 9b 0a a6 7c fb 72 98 79 97 3a cc 10 85 Data Ascii: 4(UIM+9ueGfzmQU"D5tUI8(mUV/LD4< njQxTLu2MaFk\%lBhXqSTa\|oe\|-Y%Dv=m_zZ~bTjP64APaPW9fepplZ.NWbR\|ry:
2024-09-27 16:52:54 UTC	1194	IN	Data Raw: 5e 4f 94 d5 ec 2d 92 4c f2 f1 e0 8a 1d cf 5d 76 d2 1d 33 dc 0e cf 45 95 be 46 95 b0 5a 50 c1 da 53 65 8a 4a bb 4a d7 db bf 87 ac b1 a6 c5 22 59 a4 b9 e4 5c b8 bb 8f eb db d5 75 6e ef 57 7c b9 2c 3e 6f 55 20 82 9e 9d a7 ab fb f5 f5 75 79 50 d2 55 ba 66 bf 6d 93 5c 9e 8e 77 b5 4a 52 26 1c 8e 92 cf e4 ee ae ae f8 74 9d 1b dc e2 d7 f5 bd 53 c5 d2 d4 ab a6 a8 36 4f 59 84 a6 9e d2 75 7b 35 75 43 a8 90 6b d9 66 12 fb 3b 11 20 6f f1 1b 82 00 e4 92 cf 33 72 77 ef b7 d7 17 d7 c1 f5 86 a4 43 6f 5f d8 37 14 54 0b ea eb 69 db 7e a1 a7 6b 57 54 b7 d7 0b 75 58 cb 91 e5 65 5c d3 b4 31 6f 81 64 41 c6 59 26 39 27 b8 bb 37 fe fa 10 86 b4 13 7f ec 5f b8 21 5d dd af 0f a1 0d ba 84 9e ae 3f a8 0d 80 60 ae e3 24 ef 66 95 60 41 a5 27 c9 7c 28 5c 5d fe dc b9 37 f0 c3 a3 fb f2 7e Data Ascii: ^O-L]v3EFZPSeJJ"Y\unW\|,>oU uyPUfm\wJR&tS6OYu{5uCkf; o3rwCo_7Ti~kWTuXe\1odAY&9'7_!]?`$f`A'\|(\]7~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49904	216.58.212.164	443	732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 16:52:54 UTC	831	OUT	GET /maps/vt?pb=!1m5!1m4!1i11!2i494!3i736!4i256!2m3!1e0!2sm!3i707457701!2m3!1e2!2sspotlit!5i1!3m12!2sen-US!3sUS!5e289!12m4!1e68!2m2!1sset!2sRoadmap!12m3!1e37!2m1!1ssmartmaps!4e0!5m1!1e3!23i47083502!27m15!299174093m14!14m13!1m8!1m2!1y5959049372336990895!2y16764649418909640010!2s%2Fg%2F1tf5_ych!4m2!1x450364892!2x3366701657!15sgcid%3Ashopping_center!2b0!3b0!6b0!8b0&client=google-maps-embed&token=81552 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 16:52:54 UTC	1037	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CgoIBBCd29S3BhgB Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/msptfdsghphc:130:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/msptfdsghphc:130:0"}],} Server: scaffolding on HTTPServer2 Content-Length: 16316 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Date: Fri, 27 Sep 2024 16:52:52 GMT Expires: Fri, 27 Sep 2024 17:07:52 GMT Cache-Control: public, max-age=900 ETag: 026141beff863e5e7 Content-Type: image/webp Age: 2 Server-Timing: gfet4t7; dur=1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 16:52:54 UTC	353	IN	Data Raw: 52 49 46 46 b4 3f 00 00 57 45 42 50 56 50 38 4c a7 3f 00 00 2f ff c0 3f 00 47 e2 38 92 6d 55 f9 ee fe 81 1d 41 b0 24 54 62 74 d7 23 69 30 8a 6d bb 49 e8 dd 01 1a 30 81 5c 56 98 c0 07 ab ec 7f 4d 8f 83 da b6 95 e8 f1 71 f7 18 04 20 39 85 48 a0 33 5f de bd f3 1f ae ec 4a ae c4 ac 98 95 83 50 0b 4c c0 04 4c e0 06 14 85 bb 40 35 60 14 41 4c a8 90 32 fc 32 24 53 80 62 fd b0 f4 16 eb a3 de 1f 45 50 23 c8 0a 49 21 29 44 f5 71 1e 92 42 54 fa 57 67 6b 9d ad 95 de 87 3b 5f 1e f8 13 64 b8 cb eb 0e b7 3b 3d ee 78 db 3c 9b ed be e3 4b ed d1 6a 8f 56 b3 57 0c 13 1a 63 3a bd 75 3b a9 0d a4 63 e6 de 1a e5 6c a0 e9 45 53 a4 68 ad bd 0b 0a 28 01 89 48 0a 42 9e 80 a4 40 f2 b4 ba 4e e1 10 db 7d 07 83 ff 6d db be 24 da fe 8f 2f 07 9c 20 29 50 56 4c 7e 9d c9 18 cd e7 36 bd 23 Data Ascii: RIFF?WEBPVP8L?/?G8mUA$Tbt#i0mI0\VMq 9H3_JPLL@5`AL22$SbEP#I!)DqBTWgk;_d;=x<KjVWc:u;clESh(HB@N}m$/ )PVL~6#
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 3d 15 6f 33 f5 9d 35 fd 46 70 02 bb 9c fa 2e 93 9e ce 25 97 54 6c 65 bc 25 e9 91 77 94 df 7d 94 b1 dd 3f ef 7f 6e 86 11 bf 33 73 c0 ef cb bf d2 4d 29 5e 49 b9 b2 db 6e d4 f7 14 c4 bf 04 4e 70 11 7f cb 58 0a db 8c f9 d3 ca 7d 9c 64 16 95 15 e9 9f 1b 7e 2f 08 df ab ab bd 1b a1 4b aa a7 32 f7 df 0a 5e 7a 01 9f e7 92 1b 52 fc cc 98 f9 f8 41 00 b6 b2 f2 b6 1f bc b3 12 2b 38 f6 05 79 fd a8 7b ab 62 1d d4 4e 5b 7c 2f 78 69 1d d6 ee 94 f1 e1 5c 72 43 aa bb c3 29 63 e6 2d 01 b0 2a b1 1a ad 20 ad c6 71 03 f6 2f 47 bc 3e 44 7d 52 dd bc 1f 94 98 b9 ba f0 52 bd 1a 80 d5 e1 78 2e f9 4e ea d6 3e c7 7b 50 a5 d6 ea e6 cf fb 9f 74 b3 42 11 07 ef 2b f0 19 6f e1 fe 78 08 9d 8b 41 3f 7a 78 55 5a bd f3 f2 74 19 a0 cb b4 c3 3a 36 e7 d2 ef a4 2e 0e 99 1c 55 6c 56 7f 82 77 e6 3f Data Ascii: =o35Fp.%Tle%w}?n3sM)^InNpX}d~/K2^zRA+8y{bN[\|/xi\rC)c-* q/G>D}RRx.N>{PtB+oxA?zxUZt:6.UlVw?
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 96 cc 67 ae 26 15 b4 a6 d2 8e 5f d9 5d 27 ea 87 97 43 c5 21 00 58 07 90 9c 51 e9 36 2b fc 5c 5b 6a 22 a8 cc 3a e6 f8 60 55 21 5a 54 d6 3a 4b df 2b ab d2 77 aa ea 47 e8 6c bf 0b ac c3 ae 96 63 11 33 1f f6 96 02 02 51 d5 2e 93 1f ac 72 4e 13 a5 97 b2 55 99 9e c4 af c6 f1 65 d6 86 df 95 ee 3a 51 df db 7d 1b 58 87 6d 1d 6b 25 e6 83 8a c7 15 7d 64 c5 7b 35 1b 70 ae 50 7a 73 96 8b 32 83 08 7d 42 88 6a 7d 87 ac cd ea 3d 6f 29 88 41 84 0e 7d 7c 1f 60 f7 51 03 76 6a bc 57 10 41 45 87 a2 1d a9 39 e2 aa 41 55 6e 96 39 2a 33 8c d0 21 bb d4 c7 c1 22 c0 5a 05 ef c5 0a ee eb 43 34 f0 08 db 8c 0f f8 26 d8 59 35 e0 90 fb dc c9 78 5b 84 40 54 b2 cd e4 87 0f 2a 61 b7 1a 54 f1 e6 fd bc 2c 73 dd 8b 1e ee 29 75 4b 7c 9c b2 c3 66 f5 ce 1c fc 29 da 14 79 fd e8 e1 bf 04 e0 00 8b Data Ascii: g&_]'C!XQ6+\[j":`U!ZT:K+wGlc3Q.rNUe:Q}Xmk%}d{5pPzs2}Bj}=o)A}\|`QvjWAE9AUn93!"ZC4&Y5x[@TaT,s)uK\|f)y
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: a3 f2 7e 47 02 f4 58 5c 82 48 6b 83 13 a6 0a 57 8e 6b 7f 2b 7f 10 e1 55 22 38 17 70 03 94 17 c1 db b9 78 45 c0 15 e0 f7 22 0c c4 b7 c0 6b 2f 02 7a 88 f0 30 b8 fd 27 c0 09 8b 5a 0e d9 df 8b 87 51 f7 56 62 3b dc ba 41 83 20 6c 00 5e f0 76 2e 5e 12 80 06 a1 13 01 4c df 03 d7 c3 08 e8 f1 43 84 5e df fb 17 c0 0b ec 1c b7 98 2a bd 24 fb be 17 f5 7c d9 4d eb a6 69 93 54 04 1e b0 2a b2 64 a2 1f a1 7b fb 5d e0 0d 1e 22 80 01 60 78 27 ea 0a 2e 81 7d 97 00 bb c5 f4 dd 44 e7 21 1a 92 dc 69 09 92 da 5e 20 00 c0 5a 49 37 04 40 38 b8 eb 44 18 d0 b7 81 e8 22 2a 1c f2 7f bd 5a c0 17 20 02 17 04 d1 a2 42 3e 80 bf 4b 2f 42 5f 66 b7 98 f2 c2 0b 3d 94 b6 b9 21 a8 1f 01 af df 08 b8 ef 17 00 9d 3e bf fa 75 5c a2 0b 90 d3 84 dc da 65 cc 0c eb 7b f4 23 f4 24 76 8b f2 4e 1a b8 36 Data Ascii: ~GX\HkWk+U"8pxE"k/z0'ZQVb;A l^v.^LC^$\|MiTd{]"`x'.}D!i^ ZI7@8D"*Z B>K/B_f=!>u\e{#$vN6
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 5c 02 f0 ab 9b 3e fe 08 1f 99 6f ef 7e 86 fc 61 f5 1f 3d 85 26 72 07 95 d3 96 55 98 f7 16 01 a6 fe 34 8f e7 ba 36 1f 37 cd b8 d4 88 85 39 4d b4 29 93 58 7c 3d b3 4e 80 e7 56 d4 8f 30 10 74 05 b9 a9 cf be 5e be f4 b8 3d 4e b4 59 ac 83 8b da 53 66 46 bb 3a dd 24 79 f7 c7 eb d5 4d cb 31 da c2 20 16 6d ad b9 40 12 6b 49 9c 3b 66 cc eb d5 19 a1 c8 79 bf 52 68 3f 1f fb 56 f8 eb 91 f9 47 f8 f8 d3 97 08 a0 29 fb 54 e1 b5 b5 3b a9 9c 3e 08 80 be 18 3f eb 06 66 5f ba 33 9e 69 cf 89 2e 24 46 12 6b f1 c2 6c e6 8c c5 48 e8 33 ce b9 15 dd 76 23 f4 08 8d 02 e8 c9 f8 29 d1 67 2f 53 bd 4c 92 e3 56 75 6c 1a cc 6c 1a 1c a4 30 1b 82 cd 38 61 db 40 ac 2d 66 45 06 7f ec 8e d9 56 01 77 8f 3f 7f 31 e3 27 e7 7f fd 44 34 f4 73 0e b7 1a 2c d9 29 ed 09 d6 ee 54 b4 a5 bc a1 3f 8f 74 Data Ascii: \>o~a=&rU4679M)X\|=NV0t^=NYSfF:$yM1 m@kI;fyRh?VG)T;>?f_3i.$FklH3v#)g/SLVull08a@-fEVw?1'D4s,)T?t
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 6c cd 58 7b 7a d1 91 08 c4 da 4b ac e3 4b e1 f7 c2 58 8c 74 cc d8 4c 5d c0 4b e5 41 28 05 80 bb fb 68 48 12 1d 58 c4 da 74 34 63 4e e6 e3 a6 1e 4b 48 66 b2 36 1f 37 f5 78 a6 4d 47 cf 0b 2d c9 71 b3 94 1d c8 1e 4a f8 17 75 c8 f2 20 78 83 87 08 9d 61 2a fc f0 98 31 3e 43 f6 1c 02 07 f6 ae 2a a3 35 89 31 ce f1 98 e3 e7 22 73 34 99 8b 78 8c 49 db a4 aa 7b 11 ba e4 34 84 64 f6 a4 3d bd e8 48 ec d9 97 2e c6 4a 3a a0 cd be 74 31 9e 69 d3 04 cf 4d ed b9 ad 63 81 52 f0 45 6e d8 bb 56 0b 71 41 bb ac 08 ad 5e 37 c2 c3 d0 27 37 08 99 f7 87 0f ca bb 29 97 ba cf 85 0c dd 4c da ac 8b b6 06 3d 69 ce 46 5a bb a9 a3 2d 4c b1 b8 31 f4 76 e2 98 95 79 fd a8 73 47 80 30 a6 31 f0 dc d6 9a 93 18 63 bb fd 1c 8f 27 2a 63 00 f3 f6 73 cc 93 9c ce b1 b6 98 c4 e3 91 6e 96 72 bd dc e0 Data Ascii: lX{zKKXtL]KA(hHXt4cNKHf67xMG-qJu xa1>C51"s4xI{4d=H.J:t1iMcREnVqA^7'7)L=iFZ-L1vysG01c'*csnr
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 04 6b db 68 35 49 59 c9 bd eb 0d 07 18 46 00 33 f7 79 c8 bd 41 b7 07 60 58 38 40 7e 98 7f 65 7e e8 74 5f 99 f9 f6 ba d8 57 71 3d 02 ce a5 16 ff 57 e1 7f 08 c0 e2 ab a1 15 d3 d7 2c 63 de 57 e2 3b b9 33 64 22 ab 29 04 80 75 91 63 43 f4 bb 11 1e 86 82 1a ad 06 39 76 05 fe ed 6b 6f 28 7f 88 c0 3d 00 9d e8 42 bb 3d c5 61 95 7d c6 dd b5 90 6d b4 0a f5 1c 66 4f f3 86 84 92 d1 2c cb ef ab 08 51 b0 c9 ed 6a 13 90 32 5f 39 0d 5c 71 0b 41 ff 21 42 77 70 d3 20 c0 86 f2 dd ed 6b b7 37 44 37 fa 77 77 7a 03 46 e7 f5 fe ee b1 d2 dc 5d 0f a3 a7 38 ff f4 d5 cb e4 5b 72 bd 7a 4e f5 08 f6 1b 04 d8 a2 d1 ba 41 ab 81 2b 08 0e dd e1 43 84 ee 3d a9 fa b7 af dd de 10 dd a8 da 4e af 3f 64 74 5e b9 db cb 0f ab 86 62 b7 86 c2 6e 2f f7 eb 27 33 e3 57 ee 27 64 fe e0 c7 50 a4 1e 1d 33 Data Ascii: kh5IYF3yA`X8@~e~t_Wq=W,cW;3d")ucC9vko(=B=a}mfO,Qj2_9\qA!Bwp k7D7wwzF]8[rzNA+C=N?dt^bn/'3W'dP3
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 46 93 19 46 93 59 ae 39 8e 27 23 dd 20 fd 25 d6 53 ff e6 4b 6f 4f e2 f1 48 4f 26 bf e3 e7 85 d6 9e c4 e3 91 06 9e fc 1e 4f 35 31 8e c1 c2 a8 a1 17 e1 36 fc 87 12 f0 91 95 f1 48 99 59 cd 0e 04 ac 43 26 87 45 b0 03 6e 50 65 5a f2 5b 43 12 eb b9 d1 4c c7 a4 ad 93 3e 63 dc df 09 47 9b 27 3a a6 cd 64 2a f4 79 ac cd 13 dd 9c 36 db cf 8e b9 98 6a c9 5c 47 3c d7 4b 88 f5 ee b0 95 5d f7 22 dc b9 8a 8e 60 0e 45 85 36 01 10 01 2a 0c 51 32 b7 2d 23 52 35 0e d4 52 97 ac 43 26 3f 5a 04 11 b0 cd b5 e8 28 78 1e cd 78 f2 22 7b bd 15 ae c6 2f 31 a6 09 a6 3a 92 58 e3 97 f8 f7 34 79 89 75 24 53 4d 9f 3f c5 cf 33 35 6b 9f 31 33 64 9d 08 bd 6b 2a 19 22 bf a6 f2 22 bd 10 6b 5f 0b 7c 47 c5 4d c9 3a 64 f2 d3 07 c1 69 ba a0 d2 39 c3 64 4d a6 15 4c 47 33 e6 44 27 fd 25 d6 ef dc 9b Data Ascii: FFY9'# %SKoOHO&O516HYC&EnPeZ[CL>cG':dy6j\G<K]"`E6Q2-#R5RC&?Z(xx"{/1:X4yu$SM?35k13dk*""k_\|GM:di9dMLG3D'%
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: d5 dc f5 23 60 70 4b 25 36 e7 53 c6 a7 dd 45 80 6a 2d 61 37 6a 3a 28 ec e8 e3 74 f0 4b dd 76 a3 de 75 81 58 6f 41 c0 e6 0c bc 57 e5 84 41 0a 89 97 2a 06 61 de 91 99 cc 92 6e 2f 02 86 3e 95 79 ff cc f8 70 5e fd 63 70 55 d3 b6 e0 f0 41 00 9f 42 a7 cc 6b 84 21 c9 b7 19 33 1f d7 b4 3a 03 ab 8a bc c0 06 1c 0f 79 83 d9 04 1b 6c 42 1a ae 36 16 99 cc 3a 60 90 b8 eb 77 a2 fb 6b 38 86 59 66 79 3a fe 3d c3 fa d7 34 6b 12 b2 4f 48 d7 a1 5b a6 1f 81 0b d6 19 1f f7 5b 41 cb 33 b0 a9 26 05 01 70 91 33 f5 44 e8 a4 37 19 05 67 60 63 b2 a1 c7 6d fb be df 89 70 e7 8a 66 22 74 53 4d fc fd 3c 03 4b aa c4 49 bf 91 23 ea c1 41 b2 96 a5 bb f3 4a cd eb 47 e8 14 60 2b 28 7f 06 40 55 d8 81 87 bc ef c8 a6 5f ba 81 19 c3 34 98 d9 14 1b b6 8c 39 4c 6d ba f0 fc 20 42 d7 73 e2 e7 78 f2 Data Ascii: #`pK%6SEj-a7j:(tKvuXoAWA*an/>yp^cpUABk!3:ylB6:`wk8Yfy:=4kOH[[A3&p3D7g`cmpf"tSM<KI#AJG`+(@U_49Lm Bsx
2024-09-27 16:52:54 UTC	1390	IN	Data Raw: 62 46 53 8b 67 68 6b 58 cc 42 e5 fb 5e 34 0c eb cf ad 33 e6 41 84 fe df 1c 96 bc da c8 10 22 ef b8 48 01 84 d5 fb 69 a5 8c 20 f4 dc 4a 63 ed 6b 32 6b 6b 78 1e cd 78 f2 d2 7c d6 47 73 6d c6 90 3d 8f 66 3c 79 31 04 b3 e3 0b b9 5b f4 e7 2d 95 40 a8 36 9f 1a 1a 27 b6 06 24 4d 0d f4 c4 04 e0 0a f2 eb 5e 34 24 b8 20 f5 54 90 ba 64 97 71 af 1b 75 3b e7 e2 55 89 62 17 54 e8 f8 04 b8 a0 5a 43 37 70 a8 da 58 43 fb 65 f2 a5 4d 47 33 e6 44 7b 5a 3c 0b 95 e9 68 c6 9c e8 04 88 94 d4 5d 58 67 60 b9 a1 d2 8b af 86 56 4c 5f 2f 04 40 38 97 77 c8 78 18 a1 7f 56 5c d6 65 87 f6 25 a4 36 55 3c 6b c6 42 4f 62 ed e9 c5 e0 44 68 f3 c9 93 ae f2 f4 a2 23 11 06 01 76 58 6a 75 ce 2f 4b 61 f1 34 6f 48 28 19 bd 50 be 69 d7 b5 3b 1e f6 1f 6a 9b 63 36 7c 88 06 77 17 e4 bb 54 5f ca 54 b9 Data Ascii: bFSghkXB^43A"Hi Jck2kkxx\|Gsm=f<y1[-@6'$M^4$ Tdqu;UbTZC7pXCeMG3D{Z<h]Xg`VL_/@8wxV\e%6U<kBObDh#vXju/Ka4oH(Pi;jc6\|wT_T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1436, Parent PID: 5308

General

Target ID:	0
Start time:	12:51:41
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 732, Parent PID: 1436

General

Target ID:	2
Start time:	12:51:45
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1984,i,4199869834834189887,14396128919340165783,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6352, Parent PID: 5308

General

Target ID:	3
Start time:	12:51:48
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eternalspringacupuncture.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://eternalspringacupuncture.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Windows Analysis Report
https://eternalspringacupuncture.com/