Edit tour

Windows Analysis Report
https://us.ps-tracks.top/us/

Overview

General Information

Sample URL:	https://us.ps-tracks.top/us/
Analysis ID:	1522052
Tags:	openphish
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1904,i,3069198429602057297,17173043204891689206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us.ps-tracks.top/us/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/MC41NTM0OTUwMDA1ODIxNjk= HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveContent-Length: 292sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/encryptAccept: */*Origin: https://us.ps-tracks.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.24.0Date: Sun, 29 Sep 2024 05:55:45 GMTTransfer-Encoding: chunkedConnection: closeAccess-Control-Allow-Origin: *

Source: chromecache_136.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_136.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49182
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49170
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49167
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49163
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49161
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49160
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49156
Source: unknown	Network traffic detected: HTTP traffic on port 49155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49155
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49162 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@21/40@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1904,i,3069198429602057297,17173043204891689206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us.ps-tracks.top/us/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1904,i,3069198429602057297,17173043204891689206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://us.ps-tracks.top/us/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
us.ps-tracks.top	47.90.141.9	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://us.ps-tracks.top/us/assets/09bf01f8KXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/62ff200fKXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/dc6d90ceKXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/c27b6911KXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/3213f1cfKXMp5.js	true	unknown
https://us.ps-tracks.top/favicon.ico	false	unknown
https://us.ps-tracks.top/us/	true	unknown
https://us.ps-tracks.top/us/assets/index-4b020bd6.js	true	unknown
https://us.ps-tracks.top/us/assets/667bf194TeKnX.css	true	unknown
https://us.ps-tracks.top/us/assets/f6170fbbTeKnX.css	true	unknown
https://us.ps-tracks.top/api/MC41NTM0OTUwMDA1ODIxNjk=	false	unknown
https://us.ps-tracks.top/us/assets/78d59236KXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/143268e9KXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/4cd1ec68TeKnX.css	true	unknown
https://us.ps-tracks.top/us/assets/f0ee2557KXMp5.js	true	unknown
https://us.ps-tracks.top/us/assets/7357514cKXMp5.js	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_136.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_136.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
47.90.141.9	us.ps-tracks.top	United States	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522052
Start date and time:	2024-09-29 07:54:39 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us.ps-tracks.top/us/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@21/40@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.185.174, 74.125.133.84, 34.104.35.123, 4.245.163.56, 199.232.210.172, 192.229.221.95, 20.3.187.198, 142.250.185.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://us.ps-tracks.top/us/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35025), with no line terminators
Category:	dropped
Size (bytes):	35025
Entropy (8bit):	5.344001132355762
Encrypted:	false
SSDEEP:	768:XU8c0sDwPnqjvPxSlgY0JxMNL2BuO9m/MGUlD2+kpDWZ7IcLCyw801SRbl61j4w/:XUR0j6F2+kgVIcLCytHIj
MD5:	6522E60F9822E53E09A7EED80D7A763A
SHA1:	82CE9D143B9E9ED6BED370E0906CDB3B3C4847CC
SHA-256:	1DBE4D7CC001B0DA4FCABDD95AA562FF892F7A68F311727AFF2092720B77E735
SHA-512:	A2CEE66DA7ABE085835CAE591E49F5566FF258333043E9C8CA0C935C240CE525A1B0B2420A7B0C7ABAC98378AF4ACE7ED30F2D445E676A111460522D159BD45F
Malicious:	false
Reputation:	low
Preview:	var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1ac))/0x4+-parseInt(_0x3748a9(0xcd))/0x5+-parseInt(_0x3748a9(0x1cd))/0x6+-parseInt(_0x3748a9(0x19c))/0x7+parseInt(_0x3748a9(0x1a0))/0x8(parseInt(_0x3748a9(0x180))/0x9);if(_0x44e40c===_0x5206d3)break;else _0x24c2a5['push'](_0x24c2a5['shift']());}catch(_0x289837){_0x24c2a5['push'](_0x24c2a5['shift']());}}}(a19_0x1715,0x45af4));import{l as a19_0x52502c,_ as a19_0x4446fe}from'./index-4b020bd6.js';import{r as a19_0x13833d}from'./09bf01f8KXMp5.js';import{m as a19_0x2904c5}from'./7357514cKXMp5.js';var E=function(_0x594a39,_0x270b89){var _0xcc77ae=a19_0x16a5;return E=Object[_0xcc77ae(0x1c9)+_0xcc77ae(0x1ce)]\|\|{'__proto__':[]}instanceof Array&&function(_0x50f2f8,_0x3a6407){var _0x52ab7b=_0xcc77ae;_0x50f2f8[_0x52ab7b(0xaf)]=_0x3a6407;}\|\|function(

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1898), with no line terminators
Category:	downloaded
Size (bytes):	1898
Entropy (8bit):	5.29780978561916
Encrypted:	false
SSDEEP:	48:2LQqkvG3pDepv6EAYjr5FXd3bGE2JHEbip6LfDNvkw3daeJ+gSRjdK:2UvG3UvvTr7XAE2qi6LLWwNH3SR5K
MD5:	7B8A6E4236805E691FEB4A0CE3D32B66
SHA1:	2C6A3CFDB67023AAFD19416EE94D384763C8B326
SHA-256:	CC1F2B610F9DE09A9D04B94B34BB5307CF831D2ABE943ECE7AAFF39516DD1A70
SHA-512:	DBB84ECEE88E839399A402AA4EF87FA4D15DF5797BE850E0857D5594AF82EB0FEC8632566B8900D9950CB59A38E86E9F7272BB186FFDAE42D969B85FF6107DD4
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/c27b6911KXMp5.js
Preview:	function a28_0x5bcf(_0x462472,_0x4cee4f){const _0x49b2f5=a28_0x2b87();return a28_0x5bcf=function(_0x1cf532,_0x5b8784){_0x1cf532=_0x1cf532-0x7b;let _0x2b8710=_0x49b2f5[_0x1cf532];return _0x2b8710;},a28_0x5bcf(_0x462472,_0x4cee4f);}(function(_0x2e1f59,_0x1d61dd){const _0x132baf=a28_0x5bcf,_0x1a9fa5=_0x2e1f59();while(!![]){try{const _0x52af88=-parseInt(_0x132baf(0x7d))/0x1+parseInt(_0x132baf(0x88))/0x2(-parseInt(_0x132baf(0x84))/0x3)+-parseInt(_0x132baf(0x7f))/0x4(-parseInt(_0x132baf(0x86))/0x5)+parseInt(_0x132baf(0x7c))/0x6+-parseInt(_0x132baf(0x83))/0x7+parseInt(_0x132baf(0x85))/0x8*(parseInt(_0x132baf(0x82))/0x9)+parseInt(_0x132baf(0x80))/0xa;if(_0x52af88===_0x1d61dd)break;else _0x1a9fa5['push'](_0x1a9fa5['shift']());}catch(_0x41e2a6){_0x1a9fa5['push'](_0x1a9fa5['shift']());}}}(a28_0x2b87,0x68cab));const a28_0x5b8784=(function(){let _0x575681=!![];return function(_0x412ab5,_0x8365e0){const _0x3c5d71=_0x575681?function(){const _0x15fc50=a28_0x5bcf;if(_0x8365e0){const _0x487758=_0x8365

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4486), with no line terminators
Category:	downloaded
Size (bytes):	4544
Entropy (8bit):	5.399291663198716
Encrypted:	false
SSDEEP:	96:MJfKVK182p1imfdZnShb6iSELhsCPpKrqC0lqOC6SVdDPK61mLE:MJKVK182pwcdNShbNfLGCPpKmC08OCJr
MD5:	890B402C0382BC335DBC07C1332EA469
SHA1:	0BA37489D94B249B18C1DDA38B8CA3D499C153CF
SHA-256:	4514AE0C3264D12E735D0C5D2A2D633606D32BE84D1BA8B6C8B5514A99FCAF5A
SHA-512:	8BDAC62D4AC735A6B79FEF83E98A42CD75060D3E46C9076BE8ACDCE53A25A7E3A17E543272129DEBB926F8763CEFE0F1F882D3B2BF8C322436D315CD187F6005
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/143268e9KXMp5.js
Preview:	const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5))/0x4)+parseInt(_0x60b4ce(0x9c))/0x5(-parseInt(_0x60b4ce(0xa6))/0x6)+-parseInt(_0x60b4ce(0xb7))/0x7(-parseInt(_0x60b4ce(0xcb))/0x8)+-parseInt(_0x60b4ce(0xbd))/0x9+parseInt(_0x60b4ce(0xbe))/0xa*(-parseInt(_0x60b4ce(0xbf))/0xb)+parseInt(_0x60b4ce(0xc4))/0xc;if(_0xb6d8d===_0x1f0e57)break;else _0x4e4c2f['push'](_0x4e4c2f['shift']());}catch(_0x1ac6a5){_0x4e4c2f['push'](_0x4e4c2f['shift']());}}}(a2_0x184c,0xa5fc2));const a2_0x5cecd0=(function(){let _0x5ed0ce=!![];return function(_0x27f6d1,_0x332e05){const _0x2087e1=_0x5ed0ce?function(){const _0x4101e6=a2_0x3096;if(_0x332e05){const _0x3991ee=_0x332e05[_0x4101e6(0xac)](_0x27f6d1,arguments);return _0x332e05=null,_0x3991ee;}}:function(){};return _0x5ed0ce=![],_0x2087e1;};}()),a2_0x465b56=a2_0

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (951)
Category:	downloaded
Size (bytes):	952
Entropy (8bit):	5.086003380220007
Encrypted:	false
SSDEEP:	24:dnkaFfQFfpiVVDoneFVZtYNwE+Lmo4ot2owKgo/7:dnkaFfQFfpOVcneFFswE+LmvRNpu
MD5:	32FAC03C421DCBA16FB4A965FC089E7A
SHA1:	F6AC75910F20381D4478C1D302B4DD30FD1EE9AD
SHA-256:	F6170FBBEE0AF98D737510B5689B31D78CF4E9A152590E594175B79212210911
SHA-512:	DC554F5BD2C040133218F74A8CAF624789B2AFFF8505547899D91BFDD03B70EF5DEB7AC9834E255CAE9177C61E5344728B13A0546E956B723E65F5D1C4D3EFD8
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/f6170fbbTeKnX.css
Preview:	@keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loading-bgAnim 3s linear infinite;opacity:0;-webkit-user-select:none;-moz-user-select:none;user-select:none;pointer-events:none;transition:all .3s;z-index:999999999}.g-loading-mask.show{opacity:1;pointer-events:initial}.g-loading-mask .loading{width:38px;height:38px}html,body{padding:0;border:0;margin:0;overflow-x:hidden;overflow-y:auto;overflow:hidden auto}[data-t]{font-size:1em!important}[data-t]:after{content:attr(data-t) " "}[class^=_][class$=_]{color:transparent!important}[class^=_][class$=_]{display:inline-block;pointer-events:none;position:absolute;left:1000vw}[class^=_][class$=_]::-moz-selection{color:transparent!important}[class^=_][class$=_]::selection{color:transparent!important}.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4486), with no line terminators
Category:	dropped
Size (bytes):	4544
Entropy (8bit):	5.399291663198716
Encrypted:	false
SSDEEP:	96:MJfKVK182p1imfdZnShb6iSELhsCPpKrqC0lqOC6SVdDPK61mLE:MJKVK182pwcdNShbNfLGCPpKmC08OCJr
MD5:	890B402C0382BC335DBC07C1332EA469
SHA1:	0BA37489D94B249B18C1DDA38B8CA3D499C153CF
SHA-256:	4514AE0C3264D12E735D0C5D2A2D633606D32BE84D1BA8B6C8B5514A99FCAF5A
SHA-512:	8BDAC62D4AC735A6B79FEF83E98A42CD75060D3E46C9076BE8ACDCE53A25A7E3A17E543272129DEBB926F8763CEFE0F1F882D3B2BF8C322436D315CD187F6005
Malicious:	false
Reputation:	low
Preview:	const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5))/0x4)+parseInt(_0x60b4ce(0x9c))/0x5(-parseInt(_0x60b4ce(0xa6))/0x6)+-parseInt(_0x60b4ce(0xb7))/0x7(-parseInt(_0x60b4ce(0xcb))/0x8)+-parseInt(_0x60b4ce(0xbd))/0x9+parseInt(_0x60b4ce(0xbe))/0xa*(-parseInt(_0x60b4ce(0xbf))/0xb)+parseInt(_0x60b4ce(0xc4))/0xc;if(_0xb6d8d===_0x1f0e57)break;else _0x4e4c2f['push'](_0x4e4c2f['shift']());}catch(_0x1ac6a5){_0x4e4c2f['push'](_0x4e4c2f['shift']());}}}(a2_0x184c,0xa5fc2));const a2_0x5cecd0=(function(){let _0x5ed0ce=!![];return function(_0x27f6d1,_0x332e05){const _0x2087e1=_0x5ed0ce?function(){const _0x4101e6=a2_0x3096;if(_0x332e05){const _0x3991ee=_0x332e05[_0x4101e6(0xac)](_0x27f6d1,arguments);return _0x332e05=null,_0x3991ee;}}:function(){};return _0x5ed0ce=![],_0x2087e1;};}()),a2_0x465b56=a2_0

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2039), with no line terminators
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	5.28130089070337
Encrypted:	false
SSDEEP:	48:MhaXmGKvhQjnFMwz9M5wtBpp5PzMuAE8X6zJOlDeeGsHNHZpUk:M7GKvhs2wzuStp1GHGSN5pUk
MD5:	EB9F0A5E1780C8DE62044BA70E9D5E14
SHA1:	26C710FDF35B9268260D806961D6E761E7175A4A
SHA-256:	DC5E272ED1A8676D699CF151F05007A9F3152CC79DEE644C731CD5D62761E49F
SHA-512:	83F36974B5AC0B0E55D97A806DB6D22C1E171409E8682B2B82A38F95344AE3F974C29E1E3D52E80CBE9D0AC7B751B0F1CC81D7E058577831033EEAD156620540
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/09bf01f8KXMp5.js
Preview:	(function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5f(0x147))/0x5+-parseInt(_0x5a2b5f(0x148))/0x6+-parseInt(_0x5a2b5f(0x14a))/0x7+parseInt(_0x5a2b5f(0x144))/0x8(-parseInt(_0x5a2b5f(0x140))/0x9);if(_0x107a68===_0x3a1224)break;else _0x22986e['push'](_0x22986e['shift']());}catch(_0x4bafe2){_0x22986e['push'](_0x22986e['shift']());}}}(a0_0x20e5,0xe1e51));const a0_0x5a3768=(function(){let _0x52fcb2=!![];return function(_0x1079f8,_0xcfbc57){const _0x2f43f8=_0x52fcb2?function(){if(_0xcfbc57){const _0x58dec4=_0xcfbc57['apply'](_0x1079f8,arguments);return _0xcfbc57=null,_0x58dec4;}}:function(){};return _0x52fcb2=![],_0x2f43f8;};}()),a0_0x3027e6=a0_0x5a3768(this,function(){const _0x1b6a6d=a0_0x15f5;return a0_0x3027e6['toString']()[_0x1b6a6d(0x143)](_0x1b6a6d(0x141)+'+$')[_0x1b6a6d(0x13c)]()[_0x1b

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52436)
Category:	downloaded
Size (bytes):	53442
Entropy (8bit):	5.23474068444466
Encrypted:	false
SSDEEP:	768:7j+NbCY0zui7GltT7cXH5LszD9xtjbwX//9sdYLumefglSxZ5o7TsnbFH2QiUjmS:tO9nbUX0+agLfxknQc1QlS
MD5:	A43174260C57C600A93E9785483CE823
SHA1:	674DC958475B7438BA5C2E623879E6D9FF2A82FC
SHA-256:	CA68702AA3EA8779F34864CC6285BCE454103A111C1255CBF22C9E8DD3292AA5
SHA-512:	BBBB1BBA7A9BA7B24103758912B7DF974324211585AF988C6848380AF68784D7E23F0D5E3B65DE89B98D4EA7769A332A0FDA17CD3BBB1FD491654EF109A4681A
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/f0ee2557KXMp5.js
Preview:	const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9abd(0x262))/0x4(-parseInt(_0x5c9abd(0x25d))/0x5)+-parseInt(_0x5c9abd(0x214))/0x6+parseInt(_0x5c9abd(0x1ee))/0x7(-parseInt(_0x5c9abd(0x24b))/0x8)+parseInt(_0x5c9abd(0x1a0))/0x9(-parseInt(_0x5c9abd(0x211))/0xa)+parseInt(_0x5c9abd(0x22a))/0xb(parseInt(_0x5c9abd(0x1e0))/0xc);if(_0xf27418===_0x3c6517)break;else _0x4f7db0['push'](_0x4f7db0['shift']());}catch(_0x184509){_0x4f7db0['push'](_0x4f7db0['shift']());}}}(a35_0x8cd1,0x41668));import{s as a35_0x322168,u as a35_0x278e1e,x as a35_0x318996,r as a35_0x2ade0b,n as a35_0x5bbd01,y as a35_0x13e8c2,d as a35_0x3c1601,z as a35_0x222820,A as a35_0x244537,a as a35_0x1944d1,w as a35_0x78c5a}from'./index-4b020bd6.js';/!. * vue-router v4.1.6. * (c) 2022 Eduardo San Martin Morote. * @license MIT

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	70095
Entropy (8bit):	5.1290402915611715
Encrypted:	false
SSDEEP:	768:EbKO5+G6Kzi/khudXLzGRvTcSf0D0NrqVAuiYowIbgpURpGlAt7snt01Z:MvjJrqAYEgKR8zt2
MD5:	D575C7DCE4609F4F34B957B35B20426D
SHA1:	EDB9A6F89FF7EF2FF6A34071D10CA148517861F3
SHA-256:	B86B5E7669A1331149E5B9072CCE8337E2EBE08B1A16C7262CB3B0235F911E5F
SHA-512:	9E62C42F12C8EF7249288DAB6483DC4A1198966903612FE951895670627FE96098CF73BC2C60445CE92E93A05AE1705D5FAE38F2960472D18B71DE80E0B5A415
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/62ff200fKXMp5.js
Preview:	const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3(parseInt(_0x1096f9(0x4b5))/0x4)+parseInt(_0x1096f9(0x2d9))/0x5(parseInt(_0x1096f9(0x47c))/0x6)+parseInt(_0x1096f9(0x221))/0x7(parseInt(_0x1096f9(0x493))/0x8)+parseInt(_0x1096f9(0x300))/0x9(-parseInt(_0x1096f9(0x327))/0xa)+-parseInt(_0x1096f9(0x354))/0xb*(-parseInt(_0x1096f9(0x3e7))/0xc);if(_0x2e0fe7===_0x4dd335)break;else _0x1a3b64['push'](_0x1a3b64['shift']());}catch(_0x41b551){_0x1a3b64['push'](_0x1a3b64['shift']());}}}(a14_0x2123,0x18ce4));const a14_0xc4ab81=(function(){let _0x5a1407=!![];return function(_0x48ce97,_0x141df2){const _0x37f5b8=_0x5a1407?function(){const _0x5cae54=a14_0xf471;if(_0x141df2){const _0x277268=_0x141df2[_0x5cae54(0x4c1)](_0x48ce97,arguments);return _0x141df2=null,_0x277268;}}:function(){};return _0x5a1407=![],_0x37f5b8;};

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6351), with no line terminators
Category:	downloaded
Size (bytes):	6351
Entropy (8bit):	5.287871806328341
Encrypted:	false
SSDEEP:	96:MxXExMxEzVEcQdJs/JKJnMegf3SIQYjfJ/KK03Z0WbYO2LQyFXqR71Qsw1JDUGKq:M+2xEztAJtJMj3SIRzJ/KK03Z0s1yB5L
MD5:	191953A52B7E04611F91BF29E2BF1956
SHA1:	421A4564CD537B25340750E31682B99F9FBBDC1E
SHA-256:	45ECFD31E8DB2DFA3AB6ED8E0E3F4F26166153051ABFC791D6E326296D1CB7F7
SHA-512:	90E95CD387DAF9715C7884023AF6F766647F276C14EEDF73193B5F42E7C8F224B9547E4CABB4AD7FE3A30BEF324D5077318AC11018D015513EEED74D76FEF5F1
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/dc6d90ceKXMp5.js
Preview:	const a31_0x556b29=a31_0x22d1;function a31_0x22d1(_0x16cae8,_0x5e0fd0){const _0x13247e=a31_0x56c6();return a31_0x22d1=function(_0x3964f2,_0x39f80f){_0x3964f2=_0x3964f2-0x1e4;let _0x56c61a=_0x13247e[_0x3964f2];return _0x56c61a;},a31_0x22d1(_0x16cae8,_0x5e0fd0);}(function(_0x1d902d,_0xa07a65){const _0x4d961f=a31_0x22d1,_0x5d8647=_0x1d902d();while(!![]){try{const _0x1af662=-parseInt(_0x4d961f(0x215))/0x1(parseInt(_0x4d961f(0x22b))/0x2)+-parseInt(_0x4d961f(0x20c))/0x3(-parseInt(_0x4d961f(0x1e4))/0x4)+-parseInt(_0x4d961f(0x220))/0x5(-parseInt(_0x4d961f(0x212))/0x6)+-parseInt(_0x4d961f(0x21c))/0x7(parseInt(_0x4d961f(0x21e))/0x8)+-parseInt(_0x4d961f(0x229))/0x9*(parseInt(_0x4d961f(0x1f9))/0xa)+-parseInt(_0x4d961f(0x1ef))/0xb+parseInt(_0x4d961f(0x20a))/0xc;if(_0x1af662===_0xa07a65)break;else _0x5d8647['push'](_0x5d8647['shift']());}catch(_0x3daff4){_0x5d8647['push'](_0x5d8647['shift']());}}}(a31_0x56c6,0x30a69));const a31_0x39f80f=(function(){let _0x565ff6=!![];return function(_0x5da26b,_0

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	dropped
Size (bytes):	70095
Entropy (8bit):	5.1290402915611715
Encrypted:	false
SSDEEP:	768:EbKO5+G6Kzi/khudXLzGRvTcSf0D0NrqVAuiYowIbgpURpGlAt7snt01Z:MvjJrqAYEgKR8zt2
MD5:	D575C7DCE4609F4F34B957B35B20426D
SHA1:	EDB9A6F89FF7EF2FF6A34071D10CA148517861F3
SHA-256:	B86B5E7669A1331149E5B9072CCE8337E2EBE08B1A16C7262CB3B0235F911E5F
SHA-512:	9E62C42F12C8EF7249288DAB6483DC4A1198966903612FE951895670627FE96098CF73BC2C60445CE92E93A05AE1705D5FAE38F2960472D18B71DE80E0B5A415
Malicious:	false
Reputation:	low
Preview:	const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3(parseInt(_0x1096f9(0x4b5))/0x4)+parseInt(_0x1096f9(0x2d9))/0x5(parseInt(_0x1096f9(0x47c))/0x6)+parseInt(_0x1096f9(0x221))/0x7(parseInt(_0x1096f9(0x493))/0x8)+parseInt(_0x1096f9(0x300))/0x9(-parseInt(_0x1096f9(0x327))/0xa)+-parseInt(_0x1096f9(0x354))/0xb*(-parseInt(_0x1096f9(0x3e7))/0xc);if(_0x2e0fe7===_0x4dd335)break;else _0x1a3b64['push'](_0x1a3b64['shift']());}catch(_0x41b551){_0x1a3b64['push'](_0x1a3b64['shift']());}}}(a14_0x2123,0x18ce4));const a14_0xc4ab81=(function(){let _0x5a1407=!![];return function(_0x48ce97,_0x141df2){const _0x37f5b8=_0x5a1407?function(){const _0x5cae54=a14_0xf471;if(_0x141df2){const _0x277268=_0x141df2[_0x5cae54(0x4c1)](_0x48ce97,arguments);return _0x141df2=null,_0x277268;}}:function(){};return _0x5a1407=![],_0x37f5b8;};

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	504970
Entropy (8bit):	5.243144071635909
Encrypted:	false
SSDEEP:	12288:GfjDSdiWpAFp3xkhWSbWjCUWz3k+DseDazQg+hpeTNNnAhRDtWjxCdYOjS3H1:dcklbkM+xCdYFV
MD5:	12420B2E0F816D06F0DDF11B25188F88
SHA1:	138D893272294548F59DC4DDD92B358A22801C41
SHA-256:	095AA68B6E8BB9648B91B009821B31A81C9CA7F849B069547406B206DBB0F3FD
SHA-512:	E224072832354B5213AE3ACA7748166E4F1524FD5572A627D4481B1FF79341847A6082DE686A171569D3FDEDCCA5074FF72BED29F09267E50995857D1F8E82E8
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/index-4b020bd6.js
Preview:	var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x484))/0x4(-parseInt(_0x3804be(0x591))/0x5)+parseInt(_0x3804be(0x29a))/0x6+-parseInt(_0x3804be(0x604))/0x7+-parseInt(_0x3804be(0x4ce))/0x8+parseInt(_0x3804be(0x5ba))/0x9;if(_0x3fb4da===_0x58ef2b)break;else _0x35136a['push'](_0x35136a['shift']());}catch(_0x35258a){_0x35136a['push'](_0x35136a['shift']());}}}(a38_0x1de8,0xac7e4));function Ox(){var _0x21a43f=a38_0x5345;import.meta['url'],import('_')[_0x21a43f(0x600)](()=>0x1);async function*_0x513744(){}}(function(){var _0x590ae6=a38_0x5345;const _0x3a9c10=document[_0x590ae6(0x46f)+_0x590ae6(0x34f)](_0x590ae6(0x1b3))[_0x590ae6(0x6fa)];if(_0x3a9c10&&_0x3a9c10['supports']&&_0x3a9c10[_0x590ae6(0x232)](_0x590ae6(0x504)+_0x590ae6(0x27e)))return;for(const _0xe9ae5d of document[_0x590ae6(0x13b)+_0

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	68953
Entropy (8bit):	5.494966619310052
Encrypted:	false
SSDEEP:	768:3WyWxWb6x4yqW1ocn5+KOmVpAZSGiOwkf3U+hay0m7ObPHl7AGIz17mDDnu/Nqk9:lW/jVi0qay0m7ydIzcu/Nqk8SJ7OTHW
MD5:	7AF6C6F35007DE71A16AC3568FD27663
SHA1:	DAB8EA240261B857C5A2A256364B319AB0A5DFCD
SHA-256:	667BF1945B650A844809244AC70AE2FEFA171302DA25745DFFB728A9D5124E4F
SHA-512:	9580830F37C2E73269D8BE2CE347E7F06FFBD55AC9ED804E1A8DC7BBB8982BBFA349DFCC3ED6254CBBDD943A74D5F954DFCD6C55BCD28F96CA18E7C6497DBCCD
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/667bf194TeKnX.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},:after,:before{box-sizing:bo

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2613), with no line terminators
Category:	downloaded
Size (bytes):	2613
Entropy (8bit):	5.302895062541371
Encrypted:	false
SSDEEP:	48:vEq1c8UJhUI0yiZOrGkgWjQ0itaapkUj5VNBl3j3WgBuXdxCYjw+QR+M+M4Z+nLD:sj7JhUI0PZOrnQztaWkIrBxj3juXdxC1
MD5:	61865F7FE10FFEB75D7B02FC11873A75
SHA1:	B2BAD6213DACFC4C027B53CD4BA2424F0A7E02BB
SHA-256:	453050CEAE7EB649BBB791222012326C1B661C0B03111C18A45D00911BA479C9
SHA-512:	55AB35807DE4715D157CB78814A7955D7D853423B1F69868F97974977E946E06DC371F56B6F45D046B9C860A1FCBC180E309356AD8B4A994AE0F9EA94DB40899
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/7357514cKXMp5.js
Preview:	(function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0xd2))/0x5+parseInt(_0x3427a2(0xd1))/0x6+parseInt(_0x3427a2(0xcb))/0x7(-parseInt(_0x3427a2(0xc9))/0x8)+-parseInt(_0x3427a2(0xcd))/0x9;if(_0x518bab===_0x2f0cc0)break;else _0x555b06['push'](_0x555b06['shift']());}catch(_0x234182){_0x555b06['push'](_0x555b06['shift']());}}}(a18_0x11d3,0x95d08));const a18_0x3bb27d=(function(){let _0xecfd3f=!![];return function(_0x46844b,_0x277335){const _0x523b6a=_0xecfd3f?function(){const _0x56ce6d=a18_0x5c8c;if(_0x277335){const _0x323bec=_0x277335[_0x56ce6d(0xe1)](_0x46844b,arguments);return _0x277335=null,_0x323bec;}}:function(){};return _0xecfd3f=![],_0x523b6a;};}()),a18_0x4640f0=a18_0x3bb27d(this,function(){const _0x419e75=a18_0x5c8c;return a18_0x4640f0['toString']()[_0x419e75(0xda)](_0x419e75(0xca)+'

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2613), with no line terminators
Category:	dropped
Size (bytes):	2613
Entropy (8bit):	5.302895062541371
Encrypted:	false
SSDEEP:	48:vEq1c8UJhUI0yiZOrGkgWjQ0itaapkUj5VNBl3j3WgBuXdxCYjw+QR+M+M4Z+nLD:sj7JhUI0PZOrnQztaWkIrBxj3juXdxC1
MD5:	61865F7FE10FFEB75D7B02FC11873A75
SHA1:	B2BAD6213DACFC4C027B53CD4BA2424F0A7E02BB
SHA-256:	453050CEAE7EB649BBB791222012326C1B661C0B03111C18A45D00911BA479C9
SHA-512:	55AB35807DE4715D157CB78814A7955D7D853423B1F69868F97974977E946E06DC371F56B6F45D046B9C860A1FCBC180E309356AD8B4A994AE0F9EA94DB40899
Malicious:	false
Reputation:	low
Preview:	(function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0xd2))/0x5+parseInt(_0x3427a2(0xd1))/0x6+parseInt(_0x3427a2(0xcb))/0x7(-parseInt(_0x3427a2(0xc9))/0x8)+-parseInt(_0x3427a2(0xcd))/0x9;if(_0x518bab===_0x2f0cc0)break;else _0x555b06['push'](_0x555b06['shift']());}catch(_0x234182){_0x555b06['push'](_0x555b06['shift']());}}}(a18_0x11d3,0x95d08));const a18_0x3bb27d=(function(){let _0xecfd3f=!![];return function(_0x46844b,_0x277335){const _0x523b6a=_0xecfd3f?function(){const _0x56ce6d=a18_0x5c8c;if(_0x277335){const _0x323bec=_0x277335[_0x56ce6d(0xe1)](_0x46844b,arguments);return _0x277335=null,_0x323bec;}}:function(){};return _0xecfd3f=![],_0x523b6a;};}()),a18_0x4640f0=a18_0x3bb27d(this,function(){const _0x419e75=a18_0x5c8c;return a18_0x4640f0['toString']()[_0x419e75(0xda)](_0x419e75(0xca)+'

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1898), with no line terminators
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	5.29780978561916
Encrypted:	false
SSDEEP:	48:2LQqkvG3pDepv6EAYjr5FXd3bGE2JHEbip6LfDNvkw3daeJ+gSRjdK:2UvG3UvvTr7XAE2qi6LLWwNH3SR5K
MD5:	7B8A6E4236805E691FEB4A0CE3D32B66
SHA1:	2C6A3CFDB67023AAFD19416EE94D384763C8B326
SHA-256:	CC1F2B610F9DE09A9D04B94B34BB5307CF831D2ABE943ECE7AAFF39516DD1A70
SHA-512:	DBB84ECEE88E839399A402AA4EF87FA4D15DF5797BE850E0857D5594AF82EB0FEC8632566B8900D9950CB59A38E86E9F7272BB186FFDAE42D969B85FF6107DD4
Malicious:	false
Reputation:	low
Preview:	function a28_0x5bcf(_0x462472,_0x4cee4f){const _0x49b2f5=a28_0x2b87();return a28_0x5bcf=function(_0x1cf532,_0x5b8784){_0x1cf532=_0x1cf532-0x7b;let _0x2b8710=_0x49b2f5[_0x1cf532];return _0x2b8710;},a28_0x5bcf(_0x462472,_0x4cee4f);}(function(_0x2e1f59,_0x1d61dd){const _0x132baf=a28_0x5bcf,_0x1a9fa5=_0x2e1f59();while(!![]){try{const _0x52af88=-parseInt(_0x132baf(0x7d))/0x1+parseInt(_0x132baf(0x88))/0x2(-parseInt(_0x132baf(0x84))/0x3)+-parseInt(_0x132baf(0x7f))/0x4(-parseInt(_0x132baf(0x86))/0x5)+parseInt(_0x132baf(0x7c))/0x6+-parseInt(_0x132baf(0x83))/0x7+parseInt(_0x132baf(0x85))/0x8*(parseInt(_0x132baf(0x82))/0x9)+parseInt(_0x132baf(0x80))/0xa;if(_0x52af88===_0x1d61dd)break;else _0x1a9fa5['push'](_0x1a9fa5['shift']());}catch(_0x41e2a6){_0x1a9fa5['push'](_0x1a9fa5['shift']());}}}(a28_0x2b87,0x68cab));const a28_0x5b8784=(function(){let _0x575681=!![];return function(_0x412ab5,_0x8365e0){const _0x3c5d71=_0x575681?function(){const _0x15fc50=a28_0x5bcf;if(_0x8365e0){const _0x487758=_0x8365

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322)
Category:	downloaded
Size (bytes):	323
Entropy (8bit):	4.962097992563931
Encrypted:	false
SSDEEP:	6:ZrXn6dB0HzMCRsCdgPbuxsMRIbVZptOzMmNoYmyCX:F6H0T4CkbuNmtg/1C
MD5:	BFFC12E40F0D227772826CC4AB6B1D99
SHA1:	348BED4D1364D4933BBFE5FEB5F9C61E3C5A1A6E
SHA-256:	4CD1EC684CE1C4F864A8E95F9F7695C7F708160192531FF8E55FC5023ABF5B64
SHA-512:	DC372EC6D46D3E58619E5F9DB56F4F26D683F79507EBB3A6F871B4D962BC1CB32B73362FCDFDACEB1692CE501ACD48575370C7B32E3C157FA9743CD2E7352B0A
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/4cd1ec68TeKnX.css
Preview:	h1.title[data-v-fe5ae731]{color:#24549d;font-size:2rem;text-align:center}div.content[data-v-fe5ae731]{padding:10px;background-color:#f2f2f2;border-radius:3px}ul[data-v-fe5ae731]{list-style:disc outside none!important;list-style:initial!important}ul[data-v-fe5ae731]{padding-left:14px}ul li[data-v-fe5ae731]{margin-top:8px}.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2039), with no line terminators
Category:	dropped
Size (bytes):	2039
Entropy (8bit):	5.28130089070337
Encrypted:	false
SSDEEP:	48:MhaXmGKvhQjnFMwz9M5wtBpp5PzMuAE8X6zJOlDeeGsHNHZpUk:M7GKvhs2wzuStp1GHGSN5pUk
MD5:	EB9F0A5E1780C8DE62044BA70E9D5E14
SHA1:	26C710FDF35B9268260D806961D6E761E7175A4A
SHA-256:	DC5E272ED1A8676D699CF151F05007A9F3152CC79DEE644C731CD5D62761E49F
SHA-512:	83F36974B5AC0B0E55D97A806DB6D22C1E171409E8682B2B82A38F95344AE3F974C29E1E3D52E80CBE9D0AC7B751B0F1CC81D7E058577831033EEAD156620540
Malicious:	false
Reputation:	low
Preview:	(function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5f(0x147))/0x5+-parseInt(_0x5a2b5f(0x148))/0x6+-parseInt(_0x5a2b5f(0x14a))/0x7+parseInt(_0x5a2b5f(0x144))/0x8(-parseInt(_0x5a2b5f(0x140))/0x9);if(_0x107a68===_0x3a1224)break;else _0x22986e['push'](_0x22986e['shift']());}catch(_0x4bafe2){_0x22986e['push'](_0x22986e['shift']());}}}(a0_0x20e5,0xe1e51));const a0_0x5a3768=(function(){let _0x52fcb2=!![];return function(_0x1079f8,_0xcfbc57){const _0x2f43f8=_0x52fcb2?function(){if(_0xcfbc57){const _0x58dec4=_0xcfbc57['apply'](_0x1079f8,arguments);return _0xcfbc57=null,_0x58dec4;}}:function(){};return _0x52fcb2=![],_0x2f43f8;};}()),a0_0x3027e6=a0_0x5a3768(this,function(){const _0x1b6a6d=a0_0x15f5;return a0_0x3027e6['toString']()[_0x1b6a6d(0x143)](_0x1b6a6d(0x141)+'+$')[_0x1b6a6d(0x13c)]()[_0x1b

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52436)
Category:	dropped
Size (bytes):	53442
Entropy (8bit):	5.23474068444466
Encrypted:	false
SSDEEP:	768:7j+NbCY0zui7GltT7cXH5LszD9xtjbwX//9sdYLumefglSxZ5o7TsnbFH2QiUjmS:tO9nbUX0+agLfxknQc1QlS
MD5:	A43174260C57C600A93E9785483CE823
SHA1:	674DC958475B7438BA5C2E623879E6D9FF2A82FC
SHA-256:	CA68702AA3EA8779F34864CC6285BCE454103A111C1255CBF22C9E8DD3292AA5
SHA-512:	BBBB1BBA7A9BA7B24103758912B7DF974324211585AF988C6848380AF68784D7E23F0D5E3B65DE89B98D4EA7769A332A0FDA17CD3BBB1FD491654EF109A4681A
Malicious:	false
Reputation:	low
Preview:	const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9abd(0x262))/0x4(-parseInt(_0x5c9abd(0x25d))/0x5)+-parseInt(_0x5c9abd(0x214))/0x6+parseInt(_0x5c9abd(0x1ee))/0x7(-parseInt(_0x5c9abd(0x24b))/0x8)+parseInt(_0x5c9abd(0x1a0))/0x9(-parseInt(_0x5c9abd(0x211))/0xa)+parseInt(_0x5c9abd(0x22a))/0xb(parseInt(_0x5c9abd(0x1e0))/0xc);if(_0xf27418===_0x3c6517)break;else _0x4f7db0['push'](_0x4f7db0['shift']());}catch(_0x184509){_0x4f7db0['push'](_0x4f7db0['shift']());}}}(a35_0x8cd1,0x41668));import{s as a35_0x322168,u as a35_0x278e1e,x as a35_0x318996,r as a35_0x2ade0b,n as a35_0x5bbd01,y as a35_0x13e8c2,d as a35_0x3c1601,z as a35_0x222820,A as a35_0x244537,a as a35_0x1944d1,w as a35_0x78c5a}from'./index-4b020bd6.js';/!. * vue-router v4.1.6. * (c) 2022 Eduardo San Martin Morote. * @license MIT

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35025), with no line terminators
Category:	downloaded
Size (bytes):	35025
Entropy (8bit):	5.344001132355762
Encrypted:	false
SSDEEP:	768:XU8c0sDwPnqjvPxSlgY0JxMNL2BuO9m/MGUlD2+kpDWZ7IcLCyw801SRbl61j4w/:XUR0j6F2+kgVIcLCytHIj
MD5:	6522E60F9822E53E09A7EED80D7A763A
SHA1:	82CE9D143B9E9ED6BED370E0906CDB3B3C4847CC
SHA-256:	1DBE4D7CC001B0DA4FCABDD95AA562FF892F7A68F311727AFF2092720B77E735
SHA-512:	A2CEE66DA7ABE085835CAE591E49F5566FF258333043E9C8CA0C935C240CE525A1B0B2420A7B0C7ABAC98378AF4ACE7ED30F2D445E676A111460522D159BD45F
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/78d59236KXMp5.js
Preview:	var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1ac))/0x4+-parseInt(_0x3748a9(0xcd))/0x5+-parseInt(_0x3748a9(0x1cd))/0x6+-parseInt(_0x3748a9(0x19c))/0x7+parseInt(_0x3748a9(0x1a0))/0x8(parseInt(_0x3748a9(0x180))/0x9);if(_0x44e40c===_0x5206d3)break;else _0x24c2a5['push'](_0x24c2a5['shift']());}catch(_0x289837){_0x24c2a5['push'](_0x24c2a5['shift']());}}}(a19_0x1715,0x45af4));import{l as a19_0x52502c,_ as a19_0x4446fe}from'./index-4b020bd6.js';import{r as a19_0x13833d}from'./09bf01f8KXMp5.js';import{m as a19_0x2904c5}from'./7357514cKXMp5.js';var E=function(_0x594a39,_0x270b89){var _0xcc77ae=a19_0x16a5;return E=Object[_0xcc77ae(0x1c9)+_0xcc77ae(0x1ce)]\|\|{'__proto__':[]}instanceof Array&&function(_0x50f2f8,_0x3a6407){var _0x52ab7b=_0xcc77ae;_0x50f2f8[_0x52ab7b(0xaf)]=_0x3a6407;}\|\|function(

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6351), with no line terminators
Category:	dropped
Size (bytes):	6351
Entropy (8bit):	5.287871806328341
Encrypted:	false
SSDEEP:	96:MxXExMxEzVEcQdJs/JKJnMegf3SIQYjfJ/KK03Z0WbYO2LQyFXqR71Qsw1JDUGKq:M+2xEztAJtJMj3SIRzJ/KK03Z0s1yB5L
MD5:	191953A52B7E04611F91BF29E2BF1956
SHA1:	421A4564CD537B25340750E31682B99F9FBBDC1E
SHA-256:	45ECFD31E8DB2DFA3AB6ED8E0E3F4F26166153051ABFC791D6E326296D1CB7F7
SHA-512:	90E95CD387DAF9715C7884023AF6F766647F276C14EEDF73193B5F42E7C8F224B9547E4CABB4AD7FE3A30BEF324D5077318AC11018D015513EEED74D76FEF5F1
Malicious:	false
Reputation:	low
Preview:	const a31_0x556b29=a31_0x22d1;function a31_0x22d1(_0x16cae8,_0x5e0fd0){const _0x13247e=a31_0x56c6();return a31_0x22d1=function(_0x3964f2,_0x39f80f){_0x3964f2=_0x3964f2-0x1e4;let _0x56c61a=_0x13247e[_0x3964f2];return _0x56c61a;},a31_0x22d1(_0x16cae8,_0x5e0fd0);}(function(_0x1d902d,_0xa07a65){const _0x4d961f=a31_0x22d1,_0x5d8647=_0x1d902d();while(!![]){try{const _0x1af662=-parseInt(_0x4d961f(0x215))/0x1(parseInt(_0x4d961f(0x22b))/0x2)+-parseInt(_0x4d961f(0x20c))/0x3(-parseInt(_0x4d961f(0x1e4))/0x4)+-parseInt(_0x4d961f(0x220))/0x5(-parseInt(_0x4d961f(0x212))/0x6)+-parseInt(_0x4d961f(0x21c))/0x7(parseInt(_0x4d961f(0x21e))/0x8)+-parseInt(_0x4d961f(0x229))/0x9*(parseInt(_0x4d961f(0x1f9))/0xa)+-parseInt(_0x4d961f(0x1ef))/0xb+parseInt(_0x4d961f(0x20a))/0xc;if(_0x1af662===_0xa07a65)break;else _0x5d8647['push'](_0x5d8647['shift']());}catch(_0x3daff4){_0x5d8647['push'](_0x5d8647['shift']());}}}(a31_0x56c6,0x30a69));const a31_0x39f80f=(function(){let _0x565ff6=!![];return function(_0x5da26b,_0

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (435)
Category:	downloaded
Size (bytes):	1638
Entropy (8bit):	5.170676000444288
Encrypted:	false
SSDEEP:	48:lp6QkcrVAGpAL+RdZyFjHyoH/XlukT2F1bziHpo8iH26oH/w:lECr6DCZydHRH/XluB1niHRiH25H/w
MD5:	C2F6EED73BC2A0D1D0A712D820FA16B2
SHA1:	610F085DE8F6D6C8C53C8E9B3C4E79CB4F04F4DC
SHA-256:	3CC1BADAF474652682B537310B01A6934DCF7C3A52352746A9E492558007B950
SHA-512:	E49700CE1EE26B91067D444C0BD0AEA21411C46AC07169F4251218430AC8D77232B3F9D50C9C624C2656AB00CBEA048E726A4356CB6AD388784F48CA8FB46435
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <meta. name="viewport". content="width=device-width, initial-scale=1.0, user-scalable=no". />. <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>. <link rel="stylesheet" href="./assets/f6170fbbTeKnX.css">. <script type="module">import.meta.url;import("_").catch(()=>1);async function* g(){};if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>. <script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>. </head>. <body>. <div id="app"></div>. . <script nomodule>!function(){

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	504970
Entropy (8bit):	5.243144071635909
Encrypted:	false
SSDEEP:	12288:GfjDSdiWpAFp3xkhWSbWjCUWz3k+DseDazQg+hpeTNNnAhRDtWjxCdYOjS3H1:dcklbkM+xCdYFV
MD5:	12420B2E0F816D06F0DDF11B25188F88
SHA1:	138D893272294548F59DC4DDD92B358A22801C41
SHA-256:	095AA68B6E8BB9648B91B009821B31A81C9CA7F849B069547406B206DBB0F3FD
SHA-512:	E224072832354B5213AE3ACA7748166E4F1524FD5572A627D4481B1FF79341847A6082DE686A171569D3FDEDCCA5074FF72BED29F09267E50995857D1F8E82E8
Malicious:	false
Reputation:	low
Preview:	var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x484))/0x4(-parseInt(_0x3804be(0x591))/0x5)+parseInt(_0x3804be(0x29a))/0x6+-parseInt(_0x3804be(0x604))/0x7+-parseInt(_0x3804be(0x4ce))/0x8+parseInt(_0x3804be(0x5ba))/0x9;if(_0x3fb4da===_0x58ef2b)break;else _0x35136a['push'](_0x35136a['shift']());}catch(_0x35258a){_0x35136a['push'](_0x35136a['shift']());}}}(a38_0x1de8,0xac7e4));function Ox(){var _0x21a43f=a38_0x5345;import.meta['url'],import('_')[_0x21a43f(0x600)](()=>0x1);async function*_0x513744(){}}(function(){var _0x590ae6=a38_0x5345;const _0x3a9c10=document[_0x590ae6(0x46f)+_0x590ae6(0x34f)](_0x590ae6(0x1b3))[_0x590ae6(0x6fa)];if(_0x3a9c10&&_0x3a9c10['supports']&&_0x3a9c10[_0x590ae6(0x232)](_0x590ae6(0x504)+_0x590ae6(0x27e)))return;for(const _0xe9ae5d of document[_0x590ae6(0x13b)+_0

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	3.7586031096610943
Encrypted:	false
SSDEEP:	192:cfRys3/ZtSs9axogZeLpoCaAVbZ5iDJ6j5+qDxZ7cnPgW5LnM:cr68dcgWJn
MD5:	3F0F72ED57A54B97CDA500BCF0545EFB
SHA1:	2F252619C18E729D98E16B96D37CD7CD567B38EB
SHA-256:	67FBE8EF9020E5C776AADF6801A1FEF8DC563E2E4DC9DDC740AF8010C0C38943
SHA-512:	EA68C54A3CA39A47555A41AE5FC3723F1E7C06B3AD1776EE7082FFBFF48277D2B4EE7CA1753165C2DCCDF7012EB0CBE29CDBDE21DC05373A07CF18E23DE37E54
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .....@...................e21.f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21.f32Qf32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q...Q.....US.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Q.\[Q.............\|z.m<;.f32.f32.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.uGG..................RP.f32.f32.f32.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.xKJ..................vu.k98.f32.f32.f32.f32.f32Qf32Qf32.f32.f32.g43......^].....................{NL.f32.f32.f32Qf32Qf32.f32.f32..\[.............ts..ww...............k98.f32Qf32Qf32.f32.f32...........................................f32Qf32Qf32.f32.g43.....................................rq....f32Qh65Qh65.h65.j87..YY..[[..[[..[[..\[..]]..oo...........vu.f32Q...Q.........................................mk.g43.f32.f32.f32Q...Q........................`^.p?=.f32.f32.f32.f32.f32.f32.f32Q..Q.....ml.rB@.g43.f32.f32.f32.f32.f32.f32.f32.f32.f32.f3

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65124), with no line terminators
Category:	downloaded
Size (bytes):	65172
Entropy (8bit):	5.343853126814973
Encrypted:	false
SSDEEP:	768:88x16zJ2SPy8z8in6Xw/1mf+Bx8EHzpCcg6HSOp+gHLOcTFa4xESgCuwe2dFgoq+:k/SsUBHYVhDnRch4BaOFjvPhXv1PrZ1
MD5:	829ECA7161C10C25399CDF5F5ADA3499
SHA1:	73AD0692FF75F044ECC08AED4A71DC2AE57D771B
SHA-256:	B17A32BE6BFC84D306132F1722AD64DA8C205B6D1D5F44BA3F5B2181A5EA0408
SHA-512:	2E75A96B2D16A5A3D256BD08861920CE3569A6C3D03CD8EFCC16D6CE488F97C580DBAE414DA1D0CFA263FF362BCEBFCE539DA014BA0FF4E4F867322CE448754E
Malicious:	false
Reputation:	low
URL:	https://us.ps-tracks.top/us/assets/3213f1cfKXMp5.js
Preview:	const a5_0xc0c76=a5_0x2f21;(function(_0x376359,_0x29f3db){const _0x387e4b=a5_0x2f21,_0x464f1a=_0x376359();while(!![]){try{const _0x294f91=-parseInt(_0x387e4b(0xbd))/0x1(-parseInt(_0x387e4b(0x2de))/0x2)+-parseInt(_0x387e4b(0xa1))/0x3(parseInt(_0x387e4b(0x2b1))/0x4)+parseInt(_0x387e4b(0x188))/0x5+-parseInt(_0x387e4b(0x167))/0x6+parseInt(_0x387e4b(0x10e))/0x7+parseInt(_0x387e4b(0x1fd))/0x8*(-parseInt(_0x387e4b(0x2d7))/0x9)+parseInt(_0x387e4b(0x2c3))/0xa;if(_0x294f91===_0x29f3db)break;else _0x464f1a['push'](_0x464f1a['shift']());}catch(_0x4bc7b7){_0x464f1a['push'](_0x464f1a['shift']());}}}(a5_0x2e7e,0xb5cb6));const a5_0x4bd327=(function(){let _0x3ff679=!![];return function(_0x16ae3e,_0x128110){const _0x20e3f5=_0x3ff679?function(){if(_0x128110){const _0x1934f9=_0x128110['apply'](_0x16ae3e,arguments);return _0x128110=null,_0x1934f9;}}:function(){};return _0x3ff679=![],_0x20e3f5;};}()),a5_0x5992c8=a5_0x4bd327(this,function(){const _0x25742e=a5_0x2f21;return a5_0x5992c8[_0x25742e(0xe1)]()['s

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 07:55:24.166419029 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 07:55:33.777021885 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 07:55:36.169425011 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.169495106 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.169574976 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.170026064 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.170067072 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.170120955 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.170876980 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.170892000 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.171170950 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.171183109 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.658639908 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.659379005 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.659405947 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.660320044 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.660392046 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.662352085 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.662441015 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.662873030 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.662883997 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.672023058 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.672460079 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.672533035 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.673475981 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.673552036 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.674984932 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.675052881 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.711584091 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.730695963 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.730732918 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.774234056 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.775454998 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.775464058 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.775535107 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.775564909 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.775590897 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.775646925 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.806668043 CEST	49736	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.806687117 CEST	443	49736	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.943367958 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.943434000 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.943509102 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.943589926 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.944227934 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:36.944242954 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:36.987437963 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057768106 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057792902 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057800055 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057826996 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057837963 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057848930 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057862043 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.057934046 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.057970047 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.057976961 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.058007002 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.108795881 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.143182993 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.143192053 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.143223047 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.143230915 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.143265009 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.143322945 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.143345118 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.143445015 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.148935080 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.148943901 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.148969889 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.149009943 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.149033070 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.149060965 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.149087906 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.232362032 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.232388973 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.232459068 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.232481003 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.232511997 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.232547998 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.233844042 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.233860970 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.233931065 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.233947039 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.234003067 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.235641956 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.235657930 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.235712051 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.235724926 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.235753059 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.235770941 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.239851952 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.239869118 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.239934921 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.239952087 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.240005970 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.322791100 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.322808027 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.322880030 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.322911024 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.322940111 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.322962046 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.323712111 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.323740005 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.323786974 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.323801994 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.323852062 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.323872089 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.324651957 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.324666023 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.324749947 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.324764967 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.324819088 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.325541973 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.325558901 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.325622082 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.325635910 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.325669050 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.325689077 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.326491117 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.326504946 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.326577902 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.326591969 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.326623917 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.326641083 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.327629089 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.329974890 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.329993963 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.330038071 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.330054045 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.330080032 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.330102921 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.330437899 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.330455065 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.330518007 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.330532074 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.330595016 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.408920050 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413530111 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413544893 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413640022 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.413661003 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413707972 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.413755894 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413770914 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413861990 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.413876057 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.413927078 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414225101 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414239883 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414304972 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414318085 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414372921 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414736986 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414751053 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414804935 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414818048 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414849043 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414944887 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414974928 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.414982080 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.414994955 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.415025949 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.415076971 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.415694952 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.415710926 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.415795088 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.415808916 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.415867090 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.420734882 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.420751095 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.420823097 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.420836926 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.420897007 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.425272942 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.458563089 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.458604097 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.458978891 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.460001945 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.460062981 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.468373060 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.503429890 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503456116 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503551006 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.503581047 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503788948 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503789902 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.503809929 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503834009 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503864050 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.503876925 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.503915071 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.503936052 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504174948 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504198074 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504247904 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504261017 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504285097 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504306078 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504578114 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504611015 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504668951 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504682064 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.504729033 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.504729033 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508132935 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508153915 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508212090 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508225918 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508271933 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508292913 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508596897 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508618116 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508668900 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508682013 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508707047 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508753061 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.508972883 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.508991003 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.509077072 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.509092093 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.509147882 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.511210918 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.511235952 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.511286974 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.511300087 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.511333942 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.511353970 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.515398979 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.570221901 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.570283890 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.570348978 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.587093115 CEST	49739	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.587112904 CEST	443	49739	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594043970 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594058990 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594136953 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.594173908 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594227076 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.594270945 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594306946 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594341040 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.594353914 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594377041 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.594382048 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.594413996 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.594434977 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.607296944 CEST	49735	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.607335091 CEST	443	49735	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.828834057 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.828866959 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.828924894 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.924386024 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.924459934 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.924527884 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.926331997 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.926353931 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:37.932331085 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:37.932353973 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.432182074 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.432949066 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.432976961 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.433273077 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.434875011 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.434931993 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.435185909 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.436213970 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.438723087 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.438766956 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.439058065 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.439644098 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.439706087 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.439960957 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.475416899 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.483422041 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.614033937 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.614094019 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:38.614310980 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.614763021 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:38.614779949 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.502739906 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.502773046 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.502831936 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.502845049 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.502856970 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.502917051 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.503083944 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.503114939 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.503134012 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.503185987 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.503230095 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.503247023 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.503283978 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.510091066 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.510134935 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.510181904 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.510201931 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.510246992 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.512387037 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.512420893 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.512473106 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.512501001 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.512530088 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.513219118 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.513293982 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.513309956 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.513331890 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.513391972 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.517628908 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:39.517657042 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:39.518019915 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:39.518394947 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:39.518408060 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:39.566319942 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:39.566350937 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:39.566514015 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:39.570278883 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:39.570293903 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:39.581914902 CEST	49740	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.581935883 CEST	443	49740	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.584794998 CEST	49741	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.584867954 CEST	443	49741	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.656374931 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.656481028 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.656563044 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.657524109 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.657546997 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.657840014 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.660871029 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.660902977 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.661329031 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.661348104 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.662034035 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.662070036 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.662138939 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.662488937 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.662502050 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.663284063 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.663371086 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.663456917 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.663676023 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.663703918 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.664298058 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.664335966 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.664398909 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.665091991 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.665112019 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.951158047 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.956137896 CEST	53	49154	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:39.956209898 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.956252098 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.961055994 CEST	53	49154	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:39.973680019 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.974126101 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.974172115 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.974489927 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.974809885 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:39.974880934 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:39.975063086 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.015430927 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.091231108 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.091254950 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.091270924 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.091353893 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.091398001 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.091514111 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.122107983 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.123193979 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.123219013 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.124705076 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.124769926 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.125710964 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.125786066 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.126038074 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.126044989 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.131833076 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.132042885 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.132066965 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.133490086 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.133552074 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.134969950 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.137682915 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.137835026 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.137947083 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.137970924 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.138104916 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.138112068 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.139722109 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.139791965 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.142189980 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.142348051 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.142519951 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.142527103 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.149204969 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.149586916 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.149648905 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.151308060 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.152797937 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.152811050 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.153136015 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.153451920 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.153522968 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.153968096 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.154019117 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.157381058 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.157562017 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.157710075 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.157833099 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.157845974 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.173031092 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.173054934 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.173126936 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.173152924 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.179505110 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.179528952 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.179608107 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.179620028 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.184772968 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.184838057 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.195204020 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.199395895 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.229752064 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.229842901 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.230736017 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:40.230811119 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:40.248023033 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248084068 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248105049 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248137951 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.248146057 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248176098 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248178005 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.248193979 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.248203039 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.248224020 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.248239994 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.251270056 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251317024 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251346111 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251374960 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251394987 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.251421928 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251442909 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.251456022 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.251456022 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.251549959 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.261470079 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.261533976 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.261557102 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.261643887 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.261674881 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.261684895 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.261727095 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.261743069 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.261842966 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.261889935 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.262267113 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.264242887 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.264303923 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.264347076 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.264427900 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.265656948 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.265677929 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.265733957 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.265755892 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.267530918 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.278529882 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:40.329710007 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.329777956 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.329806089 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.329819918 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.329847097 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.329864025 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.329937935 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.331507921 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.333450079 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.333476067 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.333533049 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.333542109 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.333556890 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.333580017 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.333580017 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.333597898 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.333602905 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.333642006 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.335516930 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.400269985 CEST	53	49154	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:40.453530073 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:40.631403923 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:40.631424904 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.633024931 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.633045912 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.633097887 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:40.803900003 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.803939104 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.804018974 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.805404902 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.805444002 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.805603981 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.820312977 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.820327997 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.820760965 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:40.820775032 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:40.824682951 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:40.824861050 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.876905918 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:40.876938105 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:40.877383947 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:40.968719006 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:40.968738079 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:40.968766928 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:40.996083021 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:41.001508951 CEST	53	49154	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:41.001605988 CEST	49154	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:41.001821041 CEST	49742	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.001847029 CEST	443	49742	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.002366066 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.002423048 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.002480030 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.013591051 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.013641119 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.023257017 CEST	49746	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.023304939 CEST	443	49746	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.023736000 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.023773909 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.023843050 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.029011965 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.029025078 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.033869028 CEST	49745	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.033890009 CEST	443	49745	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.034492016 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.034543037 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.034699917 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.036423922 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.036456108 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.037930012 CEST	49748	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.037993908 CEST	443	49748	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.077721119 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:41.194319010 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:41.235408068 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:41.283406973 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.309752941 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.369715929 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.383117914 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:41.383210897 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:41.383277893 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:41.385345936 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.477587938 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.502614975 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.509835005 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.573091030 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.687412977 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.687496901 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.700202942 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.946130991 CEST	49747	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.946161032 CEST	443	49747	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.949615002 CEST	49749	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.949642897 CEST	443	49749	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.984042883 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.984078884 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.985294104 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.985312939 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.985373974 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.985449076 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.985479116 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.986093998 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.986128092 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.986396074 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.986409903 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.986659050 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.986673117 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.986716032 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.986866951 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.987252951 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.987266064 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.987319946 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.988815069 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:41.988846064 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:41.989389896 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.008569002 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.008749008 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.014098883 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.014291048 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.014962912 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.015117884 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.015971899 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.016109943 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.017458916 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.017571926 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.020992994 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.021008968 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.021183968 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.021253109 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.021266937 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.021802902 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.028647900 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:42.028676987 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:42.028695107 CEST	49744	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:42.028700113 CEST	443	49744	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:42.063411951 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.067401886 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.126203060 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.126236916 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.126297951 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.126326084 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.126378059 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.127567053 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.127636909 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.127640009 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.127681971 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.131328106 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131344080 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131373882 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131393909 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131401062 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131422043 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.131447077 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131459951 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.131465912 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.131489992 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.133965969 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.133991957 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134000063 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134013891 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134021997 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134025097 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134052992 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.134063959 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.134093046 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.134114027 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.196867943 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.196894884 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212837934 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212852001 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212874889 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212882042 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212889910 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212898016 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212903976 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.212925911 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.212956905 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.216913939 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.216938972 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.216989994 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.217003107 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217029095 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.217863083 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217870951 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217895985 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217909098 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.217910051 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217920065 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217931032 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217948914 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.217968941 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.217993975 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.222594976 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.222624063 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.222661018 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.222672939 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.222704887 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.264278889 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.298116922 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.298129082 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.298161030 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.298166990 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.298182964 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.298198938 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.298221111 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.298264980 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.298280954 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.300069094 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.300077915 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.300100088 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.300122023 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.300144911 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.300156116 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.300200939 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.301026106 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.301045895 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.301117897 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.301126003 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.301158905 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305116892 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305145025 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305227041 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305227041 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305227041 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305239916 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305250883 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305305958 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305321932 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305327892 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305337906 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305376053 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.305387974 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.305428028 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.328403950 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.329513073 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.329560995 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.329624891 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.330688000 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.330699921 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.364556074 CEST	49160	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.364624977 CEST	443	49160	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.367001057 CEST	49157	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.367086887 CEST	443	49157	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.367790937 CEST	49159	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.367819071 CEST	443	49159	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385041952 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385065079 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385171890 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.385201931 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385297060 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.385538101 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385552883 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385637999 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.385646105 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.385756969 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.386329889 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.386343002 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.386408091 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.386415958 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.386661053 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.387243032 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.387259960 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.387325048 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.387332916 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.387433052 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.388171911 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.388186932 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.388274908 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.388282061 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.388325930 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.391217947 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.391236067 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.391303062 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.391309977 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.391395092 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.414458990 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:42.414515972 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:42.414673090 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:42.417197943 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:42.417217016 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:42.471275091 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471303940 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471349955 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.471379042 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471410036 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.471422911 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.471508980 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471524954 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471570015 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.471579075 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471641064 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.471955061 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.471971035 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472026110 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.472035885 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472067118 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.472506046 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472524881 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472562075 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.472573996 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472589970 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.472606897 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.472976923 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.472990990 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.473056078 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.473067045 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.473247051 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.473396063 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.473409891 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.473447084 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.473453045 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.473478079 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.473493099 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.474117994 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.474133968 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.474165916 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.474175930 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.474205017 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.474215984 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.478105068 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.478120089 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.478172064 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.478189945 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.478441000 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.558634996 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.558667898 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.558717012 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.558770895 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.558783054 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.558864117 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559056044 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559072971 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559118986 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559125900 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559154034 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559164047 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559322119 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559340000 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559380054 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559395075 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559416056 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559473991 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559644938 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559663057 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559710026 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559715033 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.559746981 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.559763908 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.563405991 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563433886 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563491106 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.563515902 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563793898 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.563824892 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563843012 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563901901 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.563910007 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.563931942 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.563945055 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.564120054 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.564136982 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.564177990 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.564183950 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.564207077 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.564223051 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.564933062 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.564959049 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.565016985 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.565026999 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.566178083 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648195028 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648225069 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648292065 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648324013 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648386002 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648396969 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648405075 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648428917 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648437977 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648478031 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648485899 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648528099 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.648571014 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648888111 CEST	49156	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.648904085 CEST	443	49156	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.771272898 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.772749901 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.772846937 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.772932053 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.773447990 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.773475885 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.811409950 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.836865902 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.837157011 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.837179899 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.837687016 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.837985992 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.838068008 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.838160992 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.879409075 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879683971 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879709959 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879760981 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879765034 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.879797935 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879806042 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.879812002 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.879863024 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:42.956804037 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.957057953 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:42.957159996 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.071863890 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.071965933 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.257282019 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.389847040 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.499977112 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.500000954 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.500543118 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.501419067 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.501488924 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.502221107 CEST	49161	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.502274036 CEST	443	49161	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.502742052 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.543442965 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615252018 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615276098 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615284920 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615313053 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615328074 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.615329027 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615350962 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615375042 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615381956 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.615392923 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615407944 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.615417957 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.615681887 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.615715981 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.615837097 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.616015911 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.616029024 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.616888046 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.616940975 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.616993904 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.617533922 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.617542982 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.617589951 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.617889881 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.617906094 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.618030071 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.618040085 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.618868113 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.618897915 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.619023085 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.619200945 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.619214058 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.624670029 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.624773026 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.624838114 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.625114918 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.625144005 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.633229971 CEST	49155	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.633249998 CEST	443	49155	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.696018934 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.696062088 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.696419001 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.699780941 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.699812889 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.699825048 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.699841022 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.699857950 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.699887991 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.699907064 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.704612017 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.705584049 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.705590963 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.705601931 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.705609083 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.705621958 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.705629110 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.705674887 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.747400045 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.789052963 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.789124966 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.789150953 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.789170980 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.789191961 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.789226055 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.811721087 CEST	49163	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.811743021 CEST	443	49163	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.847343922 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.847404003 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.847466946 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.847693920 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.847712040 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.849651098 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.849663019 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.849720001 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.849906921 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:43.849920034 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:43.892905951 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.893013000 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.893075943 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.897303104 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.897303104 CEST	49162	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:55:43.897372007 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:43.897386074 CEST	443	49162	184.28.90.27	192.168.2.4
Sep 29, 2024 07:55:44.089936972 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.090814114 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.090846062 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.091379881 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.093023062 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.093101025 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.093206882 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.093318939 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.093621016 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.093637943 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.094113111 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.094465971 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.094476938 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.094672918 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.095192909 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.095278978 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.095284939 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.095366001 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.095431089 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.095925093 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.095982075 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.096041918 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.096049070 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.115791082 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.116415024 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.116429090 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.117470980 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.117563009 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.118247032 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.118304968 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.118369102 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.121860027 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.126538992 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.126600027 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.127084017 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.130925894 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.131030083 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.131074905 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.135399103 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.135411024 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.159415960 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.171420097 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.258399963 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.258666992 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.258666992 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.258685112 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:44.295044899 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:44.372112036 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.197515011 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197537899 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197602034 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197654963 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.197660923 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197732925 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197734118 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.197885036 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.197910070 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198062897 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198633909 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198709965 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198729992 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198749065 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198790073 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198796988 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198810101 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198839903 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198843002 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198869944 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198869944 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.198884010 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.198919058 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.199686050 CEST	49164	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.199707031 CEST	443	49164	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.199964046 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.200058937 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.200517893 CEST	49165	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.200556993 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.200567961 CEST	443	49165	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.200591087 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.200617075 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.200834036 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.201817036 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.202151060 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.202186108 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.202635050 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.202640057 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.202655077 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.202661991 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.204200983 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.204437017 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.204896927 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.204896927 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.204988956 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.205439091 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.205749989 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.205760956 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206522942 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206581116 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206604958 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206624031 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206662893 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206676006 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206682920 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206715107 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206715107 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206736088 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206769943 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206773043 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206804991 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206809998 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206815004 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206830978 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206830978 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206839085 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206834078 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206871986 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206887007 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206901073 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.206902027 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206949949 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.206964016 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207019091 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207035065 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.207154036 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.207644939 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.207726002 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207914114 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207926035 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207935095 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207948923 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207962990 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.207967043 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208010912 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208012104 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208031893 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208033085 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208043098 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208043098 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208045006 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208081961 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208105087 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208106041 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208112955 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208121061 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208122015 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208122015 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208158016 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208178997 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208187103 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208190918 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208215952 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208245993 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208333969 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208384037 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208729982 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.208736897 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.208831072 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.209374905 CEST	49166	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.209398031 CEST	443	49166	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.209942102 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.209964037 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.210011959 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.210025072 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.210031033 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.210053921 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.210064888 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.210083961 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.211972952 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.212014914 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.212054014 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.212071896 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.212090015 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.216476917 CEST	49167	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.216484070 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.216496944 CEST	443	49167	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.216531992 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.216566086 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.216577053 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.216607094 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.218174934 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.220979929 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.221376896 CEST	49168	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.221400023 CEST	443	49168	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.295013905 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.295013905 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.295042992 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.312926054 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.312944889 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.313014030 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.313091993 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.313450098 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.313848972 CEST	49169	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.313865900 CEST	443	49169	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319859028 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319879055 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319900990 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319912910 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319922924 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.319993019 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.320013046 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.320106983 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.320132017 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.320132017 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.401473045 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.401552916 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.401566982 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.401587963 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.401588917 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.401622057 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.401628971 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.401647091 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.406676054 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.406702042 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.406742096 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.406754017 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.406773090 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.406778097 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.406836987 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.483789921 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.487947941 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.487967014 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.487991095 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488002062 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488029957 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.488042116 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488054037 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488091946 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.488117933 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.488506079 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488514900 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488559008 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.488570929 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488610983 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.488656998 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.522425890 CEST	49170	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.522459984 CEST	443	49170	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.673341990 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.673811913 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.673827887 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.675084114 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.675573111 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.675721884 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.675839901 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.699805021 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.700273037 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.700365067 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.701534986 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.702272892 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.702428102 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.702495098 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.732098103 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.788731098 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.788755894 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.788775921 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.788827896 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.788841963 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.788856030 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.788889885 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.788932085 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.791064978 CEST	49173	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.791081905 CEST	443	49173	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.811007977 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:45.811084986 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.811620951 CEST	49172	443	192.168.2.4	47.90.141.9
Sep 29, 2024 07:55:45.811669111 CEST	443	49172	47.90.141.9	192.168.2.4
Sep 29, 2024 07:55:50.073075056 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:50.073165894 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:55:50.073291063 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:50.199486017 CEST	49743	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:55:50.199527025 CEST	443	49743	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:38.606616020 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:38.606673002 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:38.606971025 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:38.607290030 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:38.607305050 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:39.273956060 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:39.287352085 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:39.287403107 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:39.288656950 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:39.299344063 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:39.299566031 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:39.341378927 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:49.159508944 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:49.159579992 CEST	443	49182	142.250.186.132	192.168.2.4
Sep 29, 2024 07:56:49.159648895 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:50.336441040 CEST	49182	443	192.168.2.4	142.250.186.132
Sep 29, 2024 07:56:50.336483002 CEST	443	49182	142.250.186.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 07:55:33.619330883 CEST	53	53648	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:33.816732883 CEST	53	49665	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:34.863915920 CEST	53	55622	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:35.317023039 CEST	60151	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:35.317167997 CEST	60330	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:36.162448883 CEST	53	60151	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:36.168673992 CEST	53	60330	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:38.560117006 CEST	62591	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:38.564436913 CEST	53124	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:38.920149088 CEST	54067	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:38.920509100 CEST	52542	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.508786917 CEST	53	62591	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:39.508922100 CEST	53	53124	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:39.943691015 CEST	50428	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.943968058 CEST	64722	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:55:39.950788021 CEST	53	51635	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:39.951630116 CEST	53	52542	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:40.466377020 CEST	53	54067	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:40.485611916 CEST	53	64722	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:40.493094921 CEST	53	50428	1.1.1.1	192.168.2.4
Sep 29, 2024 07:55:52.014550924 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 07:56:33.526045084 CEST	53	58108	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 07:55:40.485799074 CEST	192.168.2.4	1.1.1.1	c22b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 07:55:35.317023039 CEST	192.168.2.4	1.1.1.1	0x6f67	Standard query (0)	us.ps-tracks.top	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:35.317167997 CEST	192.168.2.4	1.1.1.1	0x5dbf	Standard query (0)	us.ps-tracks.top	65	IN (0x0001)	false
Sep 29, 2024 07:55:38.560117006 CEST	192.168.2.4	1.1.1.1	0xe32f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:38.564436913 CEST	192.168.2.4	1.1.1.1	0x11be	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 07:55:38.920149088 CEST	192.168.2.4	1.1.1.1	0x8b6c	Standard query (0)	us.ps-tracks.top	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:38.920509100 CEST	192.168.2.4	1.1.1.1	0x5457	Standard query (0)	us.ps-tracks.top	65	IN (0x0001)	false
Sep 29, 2024 07:55:39.943691015 CEST	192.168.2.4	1.1.1.1	0x5277	Standard query (0)	us.ps-tracks.top	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:39.943968058 CEST	192.168.2.4	1.1.1.1	0xd731	Standard query (0)	us.ps-tracks.top	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 07:55:36.162448883 CEST	1.1.1.1	192.168.2.4	0x6f67	No error (0)	us.ps-tracks.top		47.90.141.9	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:39.508786917 CEST	1.1.1.1	192.168.2.4	0xe32f	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:39.508922100 CEST	1.1.1.1	192.168.2.4	0x11be	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 07:55:40.466377020 CEST	1.1.1.1	192.168.2.4	0x8b6c	No error (0)	us.ps-tracks.top		47.90.141.9	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:40.493094921 CEST	1.1.1.1	192.168.2.4	0x5277	No error (0)	us.ps-tracks.top		47.90.141.9	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:48.055291891 CEST	1.1.1.1	192.168.2.4	0xf565	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:48.055291891 CEST	1.1.1.1	192.168.2.4	0xf565	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:55:49.605402946 CEST	1.1.1.1	192.168.2.4	0xce10	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:55:49.605402946 CEST	1.1.1.1	192.168.2.4	0xce10	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:56:02.233517885 CEST	1.1.1.1	192.168.2.4	0x2387	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:56:02.233517885 CEST	1.1.1.1	192.168.2.4	0x2387	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:56:47.096540928 CEST	1.1.1.1	192.168.2.4	0xcedd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:56:47.096540928 CEST	1.1.1.1	192.168.2.4	0xcedd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

us.ps-tracks.top

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:36 UTC	662	OUT	GET /us/ HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:36 UTC	347	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1638 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"666-190b57e26f0"
2024-09-29 05:55:36 UTC	1638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2e 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 34 62 30 32 30 62 64 36 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no" /> <script type="module" crossorigin src="./assets/index-4b020bd6.js"></script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:36 UTC	578	OUT	GET /us/assets/index-4b020bd6.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:37 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:36 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-09-29 05:55:37 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-09-29 05:55:37 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:37 UTC	561	OUT	GET /us/assets/f6170fbbTeKnX.css HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:37 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:37 GMT Content-Type: text/css; charset=utf-8 Content-Length: 952 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"3b8-190b57e26f0"
2024-09-29 05:55:37 UTC	952	IN	Data Raw: 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 6c 6f 61 64 69 6e 67 2d 62 67 41 6e 69 6d 7b 30 25 2c 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 36 33 35 29 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 29 7d 7d 2e 67 2d 6c 6f 61 64 69 6e 67 2d 6d 61 73 6b 7b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 6c 6f 61 Data Ascii: @keyframes g-loading-bgAnim{0%,to{background-color:rgba(255,255,255,.635)}50%{background-color:rgba(255,255,255,0)}}.g-loading-mask{width:100vw;height:100vh;display:flex;justify-content:center;align-items:center;position:fixed;left:0;top:0;animation:g-loa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:38 UTC	538	OUT	GET /us/assets/143268e9KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:39 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-09-29 05:55:39 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:38 UTC	538	OUT	GET /us/assets/f0ee2557KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:39 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:38 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-09-29 05:55:39 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-09-29 05:55:39 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-09-29 05:55:39 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-09-29 05:55:39 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:39 UTC	561	OUT	GET /us/assets/667bf194TeKnX.css HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	349	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: text/css; charset=utf-8 Content-Length: 68953 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"10d59-190b57e26f0"
2024-09-29 05:55:40 UTC	16035	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d Data Ascii: /! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--
2024-09-29 05:55:40 UTC	16384	IN	Data Raw: 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 74 72 61 63 6b 7b 62 6f 72 64 65 72 3a 30 3b 77 69 64 74 68 3a 38 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 68 65 69 67 68 74 3a 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 69 6e 70 75 74 2e 69 6e 70 75 74 2d 2d 73 65 61 72 63 68 2e 73 65 61 72 63 68 2d 2d 73 75 62 6d 69 74 7b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 65 33 39 34 65 64 39 37 54 65 4b 6e 58 2e 73 76 67 29 6e 6f 2d 72 65 Data Ascii: vigation input.global-header--search-track{border:0;width:80%;display:inline-block;vertical-align:bottom;height:25px;padding-left:18px;background:#fff}.global--navigation input.input--search.search--submit{border:0;background:url(./e394ed97TeKnX.svg)no-re
2024-09-29 05:55:40 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 66 6f 72 6d 65 64 20 61 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2f 38 37 66 32 36 62 35 39 54 65 4b 6e 58 2e 73 76 67 29 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 62 65 66 6f 72 65 2c 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 2e 74 6f 6f 6c 2d 69 6e 74 65 72 63 65 70 74 20 61 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 Data Ascii: :before,.global--navigation nav .tool-informed a:focus:before,.global--navigation nav .tool-informed a:hover:before{background:url(./87f26b59TeKnX.svg)}.global--navigation nav .tool-intercept a:before,.global--navigation nav .tool-intercept a:focus:before
2024-09-29 05:55:40 UTC	16384	IN	Data Raw: 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 31 29 7b 77 69 64 74 68 3a 31 35 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 6e 61 76 20 6c 69 2e 6d 65 6e 75 68 65 61 64 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 34 29 7b 77 69 64 74 68 3a 31 32 25 7d 2e 67 6c 6f 62 61 6c 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 20 Data Ascii: on nav li.menuheader:nth-of-type(1){width:15%}.global--navigation nav li.menuheader:nth-of-type(2){width:12%}.global--navigation nav li.menuheader:nth-of-type(3){width:12%}.global--navigation nav li.menuheader:nth-of-type(4){width:12%}.global--navigation
2024-09-29 05:55:40 UTC	3766	IN	Data Raw: 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 36 35 4d 65 64 69 3b 73 72 63 3a 75 72 6c 28 2e 2f 63 63 34 36 39 34 30 36 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 35 35 52 6f 6d 61 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 32 65 32 65 66 36 33 54 65 4b 6e 58 2e 77 6f 66 66 29 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 4e 65 75 65 57 30 32 2d 37 35 42 6f 6c 64 3b 73 72 63 3a 75 72 6c 28 2e 2f 66 66 64 37 61 66 36 31 54 65 4b 6e 58 2e 77 6f 66 66 29 Data Ascii: nt-face{font-family:HelveticaNeueW02-65Medi;src:url(./cc469406TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-55Roma;src:url(./f2e2ef63TeKnX.woff)format("woff")}@font-face{font-family:HelveticaNeueW02-75Bold;src:url(./ffd7af61TeKnX.woff)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:40 UTC	561	OUT	GET /us/assets/4cd1ec68TeKnX.css HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: text/css; charset=utf-8 Content-Length: 323 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"143-190b57e26f0"
2024-09-29 05:55:40 UTC	323	IN	Data Raw: 68 31 2e 74 69 74 6c 65 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 63 6f 6c 6f 72 3a 23 32 34 35 34 39 64 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 64 69 76 2e 63 6f 6e 74 65 6e 74 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 75 6c 5b 64 61 74 61 2d 76 2d 66 65 35 61 65 37 33 31 5d 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 64 69 73 63 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 7d 75 6c 5b 64 61 74 61 2d 76 Data Ascii: h1.title[data-v-fe5ae731]{color:#24549d;font-size:2rem;text-align:center}div.content[data-v-fe5ae731]{padding:10px;background-color:#f2f2f2;border-radius:3px}ul[data-v-fe5ae731]{list-style:disc outside none!important;list-style:initial!important}ul[data-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:40 UTC	591	OUT	GET /favicon.ico HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-09-29 05:55:40 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-09-29 05:55:40 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:40 UTC	538	OUT	GET /us/assets/78d59236KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35025 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"88d1-190b57e2ec0"
2024-09-29 05:55:40 UTC	16022	IN	Data Raw: 76 61 72 20 61 31 39 5f 30 78 65 64 64 35 37 36 3d 61 31 39 5f 30 78 31 36 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 66 30 63 61 2c 5f 30 78 35 32 30 36 64 33 29 7b 76 61 72 20 5f 30 78 33 37 34 38 61 39 3d 61 31 39 5f 30 78 31 36 61 35 2c 5f 30 78 32 34 63 32 61 35 3d 5f 30 78 32 35 66 30 63 61 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 34 65 34 30 63 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 65 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 34 34 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 62 35 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 61 Data Ascii: var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2*(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1a
2024-09-29 05:55:40 UTC	16384	IN	Data Raw: 37 31 28 30 78 31 64 62 29 2c 5f 30 78 35 39 39 39 37 31 28 30 78 31 62 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 37 26 26 21 70 28 5b 27 69 6e 74 65 72 6e 65 74 5f 65 27 2b 27 78 70 6c 6f 72 65 72 27 5d 2c 5f 30 78 35 31 36 35 64 35 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 31 26 26 21 70 28 5b 5f 30 78 35 39 39 39 37 31 28 30 78 31 36 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 5f 30 78 34 32 62 37 34 38 29 7b 76 61 72 20 5f 30 78 33 63 35 61 62 64 3d 61 31 39 5f 30 78 65 64 64 35 37 36 2c 5f 30 78 34 62 32 36 64 38 3d 5f 30 78 34 32 62 37 34 38 5b 5f 30 78 33 63 35 61 62 64 28 30 78 31 35 38 29 2b 27 6e 64 27 5d 3b 69 66 28 5f 30 78 34 62 32 36 64 38 Data Ascii: 71(0x1db),_0x599971(0x1b4)],_0x1a263a)\|\|_0xce2023===0x27&&!p(['internet_e'+'xplorer'],_0x5165d5)\|\|_0xce2023===0x21&&!p([_0x599971(0x164)],_0x1a263a);}}function F(_0x42b748){var _0x3c5abd=a19_0xedd576,_0x4b26d8=_0x42b748[_0x3c5abd(0x158)+'nd'];if(_0x4b26d8
2024-09-29 05:55:40 UTC	2619	IN	Data Raw: 74 61 74 65 27 3a 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 61 32 29 5d 2c 27 65 72 72 6f 72 27 3a 27 27 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 29 5d 2c 27 3a 5c 78 32 30 27 29 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 30 62 29 5d 29 7d 3a 5f 30 78 35 36 65 32 33 35 5b 5f 30 78 31 63 34 66 30 37 5d 3d 7b 27 73 74 61 74 65 27 3a 2d 30 78 33 2c 27 65 72 72 6f 72 27 3a 5f 30 78 33 64 38 61 61 38 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 27 27 5b 27 63 6f 6e 63 61 74 27 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 Data Ascii: tate':_0x3d8aa8[_0x24dfef(0xa2)],'error':''[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x172)],':\x20')[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x10b)])}:_0x56e235[_0x1c4f07]={'state':-0x3,'error':_0x3d8aa8 instanceof Error?''['concat'](_0x3d8aa8[_0x24dfef(0x172

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:40 UTC	538	OUT	GET /us/assets/09bf01f8KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2039 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"7f7-190b57e26f0"
2024-09-29 05:55:40 UTC	2039	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 39 30 61 32 30 34 2c 5f 30 78 33 61 31 32 32 34 29 7b 63 6f 6e 73 74 20 5f 30 78 35 61 32 62 35 66 3d 61 30 5f 30 78 31 35 66 35 2c 5f 30 78 32 32 39 38 36 65 3d 5f 30 78 39 30 61 32 30 34 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 31 30 37 61 36 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 64 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 32 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 63 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 Data Ascii: (function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3*(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:40 UTC	538	OUT	GET /us/assets/7357514cKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:40 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:40 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2613 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"a35-190b57e2ec0"
2024-09-29 05:55:40 UTC	2613	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 34 32 66 62 2c 5f 30 78 32 66 30 63 63 30 29 7b 63 6f 6e 73 74 20 5f 30 78 33 34 32 37 61 32 3d 61 31 38 5f 30 78 35 63 38 63 2c 5f 30 78 35 35 35 62 30 36 3d 5f 30 78 31 38 34 32 66 62 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 31 38 62 61 62 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 38 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 62 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 65 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 33 29 29 2f 30 78 34 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 Data Ascii: (function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1*(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:41 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 05:55:41 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=125361 Date: Sun, 29 Sep 2024 05:55:41 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49156	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	367	OUT	GET /us/assets/index-4b020bd6.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 504970 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:28 GMT ETag: W/"7b48a-190b57e3e60"
2024-09-29 05:55:42 UTC	16020	IN	Data Raw: 76 61 72 20 61 33 38 5f 30 78 34 65 36 61 66 35 3d 61 33 38 5f 30 78 35 33 34 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 36 30 34 38 64 2c 5f 30 78 35 38 65 66 32 62 29 7b 76 61 72 20 5f 30 78 33 38 30 34 62 65 3d 61 33 38 5f 30 78 35 33 34 35 2c 5f 30 78 33 35 31 33 36 61 3d 5f 30 78 32 36 30 34 38 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 66 62 34 64 61 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 35 36 66 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 37 30 61 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 32 34 38 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 30 34 62 65 28 30 78 34 Data Ascii: var a38_0x4e6af5=a38_0x5345;(function(_0x26048d,_0x58ef2b){var _0x3804be=a38_0x5345,_0x35136a=_0x26048d();while(!![]){try{var _0x3fb4da=parseInt(_0x3804be(0x56f))/0x1+parseInt(_0x3804be(0x70a))/0x2*(-parseInt(_0x3804be(0x248))/0x3)+-parseInt(_0x3804be(0x4
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 36 64 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 33 64 29 2c 4e 30 3d 5f 30 78 32 33 34 66 34 63 3d 3e 42 65 28 5f 30 78 32 33 34 66 34 63 29 26 26 5f 30 78 32 33 34 66 34 63 21 3d 3d 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 34 30 31 29 26 26 5f 30 78 32 33 34 66 34 63 5b 30 78 30 5d 21 3d 3d 27 2d 27 26 26 27 27 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 32 33 34 66 34 63 2c 30 78 61 29 3d 3d 3d 5f 30 78 32 33 34 66 34 63 2c 54 72 3d 54 30 28 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 36 31 34 29 2b 27 65 66 5f 66 6f 72 2c 72 65 66 27 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 32 31 34 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 31 38 65 29 2b 61 33 38 5f 30 78 34 65 36 61 66 35 28 30 78 Data Ascii: 8_0x4e6af5(0x66d)+a38_0x4e6af5(0x13d),N0=_0x234f4c=>Be(_0x234f4c)&&_0x234f4c!==a38_0x4e6af5(0x401)&&_0x234f4c[0x0]!=='-'&&''+parseInt(_0x234f4c,0xa)===_0x234f4c,Tr=T0(a38_0x4e6af5(0x614)+'ef_for,ref'+a38_0x4e6af5(0x214)+a38_0x4e6af5(0x18e)+a38_0x4e6af5(0x
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 20 46 72 28 74 68 69 73 2c 5f 30 78 35 38 32 65 62 31 2c 21 30 78 30 29 3b 7d 2c 67 65 74 20 27 73 69 7a 65 27 28 29 7b 72 65 74 75 72 6e 20 6b 72 28 74 68 69 73 2c 21 30 78 30 29 3b 7d 2c 27 68 61 73 27 28 5f 30 78 32 62 61 64 33 65 29 7b 72 65 74 75 72 6e 20 62 72 5b 27 63 61 6c 6c 27 5d 28 74 68 69 73 2c 5f 30 78 32 62 61 64 33 65 2c 21 30 78 30 29 3b 7d 2c 27 61 64 64 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 36 62 34 29 29 2c 27 73 65 74 27 3a 67 74 28 27 73 65 74 27 29 2c 27 64 65 6c 65 74 65 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 31 35 62 29 29 2c 27 63 6c 65 61 72 27 3a 67 74 28 5f 30 78 32 30 66 39 35 32 28 30 78 33 31 64 29 29 2c 27 66 6f 72 45 61 63 68 27 3a 44 72 28 21 30 78 30 2c 21 30 78 31 29 7d 2c 5f 30 78 31 36 33 62 Data Ascii: Fr(this,_0x582eb1,!0x0);},get 'size'(){return kr(this,!0x0);},'has'(_0x2bad3e){return br['call'](this,_0x2bad3e,!0x0);},'add':gt(_0x20f952(0x6b4)),'set':gt('set'),'delete':gt(_0x20f952(0x15b)),'clear':gt(_0x20f952(0x31d)),'forEach':Dr(!0x0,!0x1)},_0x163b
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 20 7b 70 72 6f 70 73 3a 5f 30 78 61 65 66 62 32 33 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 32 39 30 65 34 31 2c 63 6f 6d 70 6f 6e 65 6e 74 3a 5f 30 78 32 35 38 34 33 30 7d 3d 5f 30 78 35 32 64 30 61 63 2c 7b 70 72 6f 70 73 3a 5f 30 78 33 62 61 32 31 38 2c 63 68 69 6c 64 72 65 6e 3a 5f 30 78 35 36 35 31 34 63 2c 70 61 74 63 68 46 6c 61 67 3a 5f 30 78 34 61 34 64 63 31 7d 3d 5f 30 78 35 36 39 30 62 34 2c 5f 30 78 34 32 35 63 65 64 3d 5f 30 78 32 35 38 34 33 30 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 65 34 29 2b 27 6e 73 27 5d 3b 69 66 28 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 36 32 66 29 5d 7c 7c 5f 30 78 35 36 39 30 62 34 5b 5f 30 78 31 37 39 33 34 38 28 30 78 35 31 37 29 5d 29 72 65 74 75 72 6e 21 30 78 30 3b 69 66 28 5f 30 78 Data Ascii: {props:_0xaefb23,children:_0x290e41,component:_0x258430}=_0x52d0ac,{props:_0x3ba218,children:_0x56514c,patchFlag:_0x4a4dc1}=_0x5690b4,_0x425ced=_0x258430[_0x179348(0x6e4)+'ns'];if(_0x5690b4[_0x179348(0x62f)]\|\|_0x5690b4[_0x179348(0x517)])return!0x0;if(_0x
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 5f 30 78 31 31 31 33 32 37 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 74 30 28 5f 30 78 35 64 37 65 36 61 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 28 5f 30 78 31 64 31 33 36 66 3d 5f 30 78 35 61 32 31 39 35 5b 30 78 30 5d 29 26 26 64 65 28 5f 30 78 31 64 31 33 36 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 61 64 63 35 66 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 75 72 2c 5f 30 78 32 64 39 64 39 34 29 7c 7c 64 65 28 5f 30 78 32 64 63 36 32 64 5b 27 63 6f 6e 66 69 67 27 5d 5b 5f 30 78 31 34 36 65 62 64 28 30 78 35 65 31 29 2b 27 65 72 74 69 65 73 27 5d 2c 5f 30 78 32 64 39 64 39 34 29 3b 7d 2c 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 28 5f 30 78 31 66 62 32 33 36 2c 5f 30 78 31 62 61 62 33 64 2c 5f 30 78 35 35 32 34 63 64 29 7b 76 Data Ascii: _0x111327,_0x2d9d94)\|\|t0(_0x5d7e6a,_0x2d9d94)\|\|(_0x1d136f=_0x5a2195[0x0])&&de(_0x1d136f,_0x2d9d94)\|\|de(_0x2adc5f,_0x2d9d94)\|\|de(ur,_0x2d9d94)\|\|de(_0x2dc62d['config'][_0x146ebd(0x5e1)+'erties'],_0x2d9d94);},'defineProperty'(_0x1fb236,_0x1bab3d,_0x5524cd){v
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 63 38 29 29 2c 5f 30 78 32 62 37 32 39 64 21 3d 6e 75 6c 6c 26 26 21 79 65 28 5f 30 78 32 62 37 32 39 64 29 26 26 28 5f 30 78 32 62 37 32 39 64 3d 6e 75 6c 6c 29 3b 63 6f 6e 73 74 20 5f 30 78 36 37 63 39 38 61 3d 7a 61 28 29 2c 5f 30 78 34 37 34 65 38 66 3d 6e 65 77 20 53 65 74 28 29 3b 6c 65 74 20 5f 30 78 33 66 62 64 34 61 3d 21 30 78 31 3b 63 6f 6e 73 74 20 5f 30 78 31 39 35 62 63 34 3d 5f 30 78 36 37 63 39 38 61 5b 5f 30 78 35 33 38 66 36 30 28 30 78 35 66 64 29 5d 3d 7b 27 5f 75 69 64 27 3a 6b 6c 2b 2b 2c 27 5f 63 6f 6d 70 6f 6e 65 6e 74 27 3a 5f 30 78 31 33 31 63 63 38 2c 27 5f 70 72 6f 70 73 27 3a 5f 30 78 32 62 37 32 39 64 2c 27 5f 63 6f 6e 74 61 69 6e 65 72 27 3a 6e 75 6c 6c 2c 27 5f 63 6f 6e 74 65 78 74 27 3a 5f 30 78 36 37 63 39 38 61 2c 27 5f Data Ascii: c8)),_0x2b729d!=null&&!ye(_0x2b729d)&&(_0x2b729d=null);const _0x67c98a=za(),_0x474e8f=new Set();let _0x3fbd4a=!0x1;const _0x195bc4=_0x67c98a[_0x538f60(0x5fd)]={'_uid':kl++,'_component':_0x131cc8,'_props':_0x2b729d,'_container':null,'_context':_0x67c98a,'_
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 5f 30 78 32 37 31 61 34 36 3d 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3b 5f 30 78 34 39 37 63 35 37 5b 5f 30 78 35 63 35 64 37 38 28 30 78 32 62 36 29 5d 3d 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 31 36 31 64 38 32 28 5f 30 78 32 37 31 61 34 36 2c 5f 30 78 33 30 63 37 65 33 2c 5f 30 78 66 31 39 37 38 61 28 5f 30 78 32 37 31 61 34 36 5b 27 65 6c 27 5d 29 2c 5f 30 78 31 63 64 65 30 35 28 5f 30 78 32 37 31 61 34 36 29 2c 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 32 36 34 65 66 34 2c 5f 30 78 34 33 34 32 65 36 29 2c 5f 30 78 34 63 34 36 31 30 5b 27 65 6c 27 5d 3d 5f 30 78 33 30 63 37 65 33 5b 27 65 6c 27 5d 2c 5f 30 78 35 37 38 63 62 32 3d 3d 3d 6e 75 6c 6c 26 26 5a 75 28 5f 30 78 34 39 37 63 35 37 2c 5f 30 78 33 30 63 37 Data Ascii: _0x271a46=_0x497c57[_0x5c5d78(0x2b6)];_0x497c57[_0x5c5d78(0x2b6)]=_0x30c7e3,_0x161d82(_0x271a46,_0x30c7e3,_0xf1978a(_0x271a46['el']),_0x1cde05(_0x271a46),_0x497c57,_0x264ef4,_0x4342e6),_0x4c4610['el']=_0x30c7e3['el'],_0x578cb2===null&&Zu(_0x497c57,_0x30c7
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 61 37 66 34 32 65 3f 5f 30 78 34 34 61 36 32 62 3a 5f 30 78 34 33 32 35 37 33 2c 5f 30 78 34 32 37 66 61 37 3d 5f 30 78 61 37 66 34 32 65 3f 5f 30 78 63 62 30 31 61 61 3a 5f 30 78 33 64 31 37 61 33 3b 69 66 28 5f 30 78 35 33 66 39 38 31 3d 5f 30 78 35 33 66 39 38 31 7c 7c 6a 73 28 5f 30 78 34 33 32 35 37 33 29 2c 5f 30 78 31 33 33 33 32 32 3f 28 5f 30 78 32 61 61 61 32 39 28 5f 30 78 35 31 34 37 34 64 5b 5f 30 78 31 33 66 65 64 39 28 30 78 33 35 33 29 2b 27 6c 64 72 65 6e 27 5d 2c 5f 30 78 31 33 33 33 32 32 2c 5f 30 78 35 33 65 30 38 36 2c 5f 30 78 34 35 37 61 39 30 2c 5f 30 78 35 65 66 36 63 39 2c 5f 30 78 35 33 66 39 38 31 2c 5f 30 78 34 63 30 36 65 62 29 2c 51 30 28 5f 30 78 35 31 34 37 34 64 2c 5f 30 78 39 32 66 35 62 65 2c 21 30 78 30 29 29 3a 5f 30 Data Ascii: a7f42e?_0x44a62b:_0x432573,_0x427fa7=_0xa7f42e?_0xcb01aa:_0x3d17a3;if(_0x53f981=_0x53f981\|\|js(_0x432573),_0x133322?(_0x2aaa29(_0x51474d[_0x13fed9(0x353)+'ldren'],_0x133322,_0x53e086,_0x457a90,_0x5ef6c9,_0x53f981,_0x4c06eb),Q0(_0x51474d,_0x92f5be,!0x0)):_0
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 29 3a 49 65 28 5f 30 78 32 62 38 32 39 32 2c 6e 75 6c 6c 2c 5f 30 78 35 65 37 62 39 65 29 3a 28 5f 30 78 35 30 37 63 65 30 3e 30 78 33 3f 5f 30 78 63 62 63 36 61 64 3d 41 72 72 61 79 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 31 39 66 29 5d 5b 5f 30 78 31 61 33 63 61 33 28 30 78 34 35 64 29 5d 28 61 72 67 75 6d 65 6e 74 73 2c 30 78 32 29 3a 5f 30 78 35 30 37 63 65 30 3d 3d 3d 30 78 33 26 26 4b 72 28 5f 30 78 63 62 63 36 61 64 29 26 26 28 5f 30 78 63 62 63 36 61 64 3d 5b 5f 30 78 63 62 63 36 61 64 5d 29 2c 49 65 28 5f 30 78 32 62 38 32 39 32 2c 5f 30 78 35 65 37 62 39 65 2c 5f 30 78 63 62 63 36 61 64 29 29 3b 7d 63 6f 6e 73 74 20 47 6c 3d 53 79 6d 62 Data Ascii: ):Ie(_0x2b8292,_0x5e7b9e):Ie(_0x2b8292,null,_0x5e7b9e):(_0x507ce0>0x3?_0xcbc6ad=Array['prototype'][_0x1a3ca3(0x19f)][_0x1a3ca3(0x45d)](arguments,0x2):_0x507ce0===0x3&&Kr(_0xcbc6ad)&&(_0xcbc6ad=[_0xcbc6ad]),Ie(_0x2b8292,_0x5e7b9e,_0xcbc6ad));}const Gl=Symb
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 63 33 65 31 64 29 7b 69 66 28 21 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 5f 30 78 32 38 31 63 32 34 28 30 78 35 38 31 29 5d 28 5f 30 78 39 38 31 36 30 30 29 29 63 6f 6e 74 69 6e 75 65 3b 63 6f 6e 73 74 20 5f 30 78 32 32 39 37 30 64 3d 5f 30 78 32 63 33 65 31 64 5b 5f 30 78 39 38 31 36 30 30 5d 2c 5f 30 78 32 32 39 34 61 34 3d 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 39 38 31 36 30 30 5d 3b 79 30 28 5f 30 78 32 32 39 34 61 34 29 26 26 79 30 28 5f 30 78 32 32 39 37 30 64 29 26 26 5f 30 78 34 64 36 35 34 66 5b 5f 30 78 32 38 31 63 32 34 28 30 78 33 64 39 29 2b 27 65 72 74 79 27 5d 28 5f 30 78 39 38 31 36 30 30 29 26 26 21 41 65 28 5f 30 78 32 32 39 37 30 64 29 26 26 21 43 74 28 5f 30 78 32 32 39 37 30 64 29 3f 5f 30 78 Data Ascii: c3e1d){if(!_0x2c3e1d[_0x281c24(0x3d9)+_0x281c24(0x581)](_0x981600))continue;const _0x22970d=_0x2c3e1d[_0x981600],_0x2294a4=_0x4d654f[_0x981600];y0(_0x2294a4)&&y0(_0x22970d)&&_0x4d654f[_0x281c24(0x3d9)+'erty'](_0x981600)&&!Ae(_0x22970d)&&!Ct(_0x22970d)?_0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49159	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	538	OUT	GET /us/assets/62ff200fKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 70095 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"111cf-190b57e2ec0"
2024-09-29 05:55:42 UTC	16021	IN	Data Raw: 63 6f 6e 73 74 20 61 31 34 5f 30 78 35 61 39 34 39 36 3d 61 31 34 5f 30 78 66 34 37 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 62 64 30 33 2c 5f 30 78 34 64 64 33 33 35 29 7b 63 6f 6e 73 74 20 5f 30 78 31 30 39 36 66 39 3d 61 31 34 5f 30 78 66 34 37 31 2c 5f 30 78 31 61 33 62 36 34 3d 5f 30 78 31 33 62 64 30 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 65 30 66 65 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 37 37 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 33 30 61 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 34 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 Data Ascii: const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3*(parseInt(_0x1096
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 73 3a 2f 2f 77 77 27 2b 27 77 2e 75 73 70 73 2e 63 6f 6d 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 30 34 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 37 64 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 63 29 29 5d 29 5d 29 2c 65 28 27 75 6c 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 27 2c 27 61 72 69 61 2d 68 69 64 64 65 6e 27 3a 27 74 72 75 65 27 7d 2c 5b 65 28 27 68 33 27 2c 7b 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 63 64 29 2b 27 6c 79 27 7d 2c 27 5c 75 30 30 61 30 27 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d Data Ascii: s://ww'+'w.usps.com'+a14_0x5a9496(0x231)+a14_0x5a9496(0x404)},a14_0x5a9496(0x37d)+a14_0x5a9496(0x26c))])]),e('ul',{'role':'menu','aria-hidden':'true'},[e('h3',{'class':a14_0x5a9496(0x3cd)+'ly'},'\u00a0'),e('li',null,[e('a',{'role':'menuitem','tabindex':'-
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 5f 30 78 35 61 39 34 39 36 28 30 78 34 61 33 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 32 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 64 65 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 33 37 29 2b 27 69 6c 27 29 5d 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d 31 27 2c 27 68 72 65 66 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 35 38 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 64 39 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 Data Ascii: _0x5a9496(0x4a3)+a14_0x5a9496(0x262)},a14_0x5a9496(0x3de)+a14_0x5a9496(0x337)+'il')]),e('li',null,[e('a',{'role':'menuitem','tabindex':'-1','href':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x231)+a14_0x5a9496(0x258)+a14_0x5a9496(0x4d9)},a14_0x5a9496(0
2024-09-29 05:55:42 UTC	16384	IN	Data Raw: 30 78 35 61 39 34 39 36 28 30 78 32 32 38 29 7d 29 2c 65 28 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 65 64 29 2c 7b 27 72 6f 6c 65 27 3a 27 73 65 61 72 63 68 27 2c 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 36 61 29 2b 27 62 61 6c 2d 68 65 61 64 65 72 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 39 31 29 2c 27 61 63 74 69 6f 6e 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 36 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 32 30 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 31 61 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 63 35 29 7d 2c 5b 65 28 27 73 70 61 6e 27 2c 7b 27 61 72 Data Ascii: 0x5a9496(0x228)}),e(a14_0x5a9496(0x3ed),{'role':'search','class':a14_0x5a9496(0x46a)+'bal-header'+a14_0x5a9496(0x491),'action':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x36c)+a14_0x5a9496(0x420)+a14_0x5a9496(0x1ac)+a14_0x5a9496(0x2c5)},[e('span',{'ar
2024-09-29 05:55:42 UTC	4922	IN	Data Raw: 27 2c 27 6f 6d 2d 6d 61 69 6c 2e 68 74 27 2c 27 69 6e 70 75 74 27 2c 27 73 74 63 61 6c 63 2e 75 73 70 27 2c 27 73 69 6e 65 73 73 27 2c 27 65 6c 69 76 65 72 79 27 2c 27 6e 61 76 2d 66 75 6c 6c 27 2c 27 61 62 65 6c 49 6e 66 6f 72 6d 27 2c 27 53 6b 69 70 5c 78 32 30 48 65 6c 70 5c 78 32 30 27 2c 27 4d 69 6c 69 74 61 72 79 5c 78 32 30 26 27 2c 27 76 69 63 65 73 2e 68 74 6d 27 2c 27 2f 69 6e 74 65 72 6e 61 74 69 27 2c 27 72 6e 61 74 69 6f 6e 61 6c 2d 27 2c 27 74 6f 6f 6c 2d 69 6e 74 65 72 27 2c 27 68 2d 74 72 61 63 6b 2d 69 6e 27 2c 27 5c 78 32 32 68 74 74 70 73 3a 2f 2f 66 27 2c 27 69 6d 61 67 65 73 2f 34 38 2e 27 2c 27 61 74 69 6f 6e 2e 68 74 6d 6c 27 2c 27 65 72 2e 68 74 6d 27 2c 27 72 63 65 70 74 2e 68 74 6d 27 2c 27 2d 66 6f 6f 74 65 72 2d 2d 6e 27 2c 27 Data Ascii: ','om-mail.ht','input','stcalc.usp','siness','elivery','nav-full','abelInform','Skip\x20Help\x20','Military\x20&','vices.htm','/internati','rnational-','tool-inter','h-track-in','\x22https://f','images/48.','ation.html','er.htm','rcept.htm','-footer--n','

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49160	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	538	OUT	GET /us/assets/c27b6911KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1898 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"76a-190b57e2ec0"
2024-09-29 05:55:42 UTC	1898	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 34 39 62 32 66 35 3d 61 32 38 5f 30 78 32 62 38 37 28 29 3b 72 65 74 75 72 6e 20 61 32 38 5f 30 78 35 62 63 66 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 63 66 35 33 32 2c 5f 30 78 35 62 38 37 38 34 29 7b 5f 30 78 31 63 66 35 33 32 3d 5f 30 78 31 63 66 35 33 32 2d 30 78 37 62 3b 6c 65 74 20 5f 30 78 32 62 38 37 31 30 3d 5f 30 78 34 39 62 32 66 35 5b 5f 30 78 31 63 66 35 33 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 31 30 3b 7d 2c 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 31 66 35 39 2c 5f 30 78 31 64 Data Ascii: function a28_0x5bcf(_0x462472,_0x4cee4f){const _0x49b2f5=a28_0x2b87();return a28_0x5bcf=function(_0x1cf532,_0x5b8784){_0x1cf532=_0x1cf532-0x7b;let _0x2b8710=_0x49b2f5[_0x1cf532];return _0x2b8710;},a28_0x5bcf(_0x462472,_0x4cee4f);}(function(_0x2e1f59,_0x1d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49157	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	538	OUT	GET /us/assets/dc6d90ceKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6351 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"18cf-190b57e3690"
2024-09-29 05:55:42 UTC	6351	IN	Data Raw: 63 6f 6e 73 74 20 61 33 31 5f 30 78 35 35 36 62 32 39 3d 61 33 31 5f 30 78 32 32 64 31 3b 66 75 6e 63 74 69 6f 6e 20 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 66 64 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 33 32 34 37 65 3d 61 33 31 5f 30 78 35 36 63 36 28 29 3b 72 65 74 75 72 6e 20 61 33 31 5f 30 78 32 32 64 31 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 39 36 34 66 32 2c 5f 30 78 33 39 66 38 30 66 29 7b 5f 30 78 33 39 36 34 66 32 3d 5f 30 78 33 39 36 34 66 32 2d 30 78 31 65 34 3b 6c 65 74 20 5f 30 78 35 36 63 36 31 61 3d 5f 30 78 31 33 32 34 37 65 5b 5f 30 78 33 39 36 34 66 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 63 36 31 61 3b 7d 2c 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 Data Ascii: const a31_0x556b29=a31_0x22d1;function a31_0x22d1(_0x16cae8,_0x5e0fd0){const _0x13247e=a31_0x56c6();return a31_0x22d1=function(_0x3964f2,_0x39f80f){_0x3964f2=_0x3964f2-0x1e4;let _0x56c61a=_0x13247e[_0x3964f2];return _0x56c61a;},a31_0x22d1(_0x16cae8,_0x5e0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49155	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	366	OUT	GET /us/assets/143268e9KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 4544 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"11c0-190b57e26f0"
2024-09-29 05:55:42 UTC	4544	IN	Data Raw: 63 6f 6e 73 74 20 61 32 5f 30 78 35 35 39 31 63 66 3d 61 32 5f 30 78 33 30 39 36 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 63 30 31 61 64 2c 5f 30 78 31 66 30 65 35 37 29 7b 63 6f 6e 73 74 20 5f 30 78 36 30 62 34 63 65 3d 61 32 5f 30 78 33 30 39 36 2c 5f 30 78 34 65 34 63 32 66 3d 5f 30 78 61 63 30 31 61 64 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 62 36 64 38 64 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 62 35 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 39 65 29 29 2f 30 78 32 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 36 30 62 34 63 65 28 30 78 63 35 Data Ascii: const a2_0x5591cf=a2_0x3096;(function(_0xac01ad,_0x1f0e57){const _0x60b4ce=a2_0x3096,_0x4e4c2f=_0xac01ad();while(!![]){try{const _0xb6d8d=parseInt(_0x60b4ce(0xb5))/0x1(-parseInt(_0x60b4ce(0x9e))/0x2)+parseInt(_0x60b4ce(0xc1))/0x3(parseInt(_0x60b4ce(0xc5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49161	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:42 UTC	628	OUT	POST /api/MC41NTM0OTUwMDA1ODIxNjk= HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive Content-Length: 292 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/encrypt Accept: / Origin: https://us.ps-tracks.top Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://us.ps-tracks.top/us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:42 UTC	292	OUT	Data Raw: 55 32 46 73 64 47 56 6b 58 31 38 79 6e 6f 4a 76 4f 70 51 71 53 51 32 4d 6e 52 77 75 34 61 6f 63 66 56 52 39 43 33 6d 59 35 65 79 43 45 34 74 46 78 56 2b 35 61 47 63 74 34 73 53 6e 37 5a 79 33 66 44 4b 78 5a 69 76 44 7a 54 68 6c 54 2b 6f 78 4d 4f 37 4c 2b 6d 32 41 41 6d 74 69 50 63 44 43 4d 5a 69 76 76 42 76 38 50 7a 69 54 73 77 59 4a 63 56 6f 7a 36 64 55 70 68 43 43 45 77 75 78 32 41 43 42 6e 50 63 4e 76 57 33 68 63 31 52 55 39 4a 30 4e 4e 4b 5a 70 38 4d 6d 67 63 4b 70 2b 49 37 45 30 59 73 75 42 44 58 5a 34 54 39 5a 42 76 75 61 73 6e 45 58 35 34 6d 71 5a 34 4d 43 6d 35 6d 66 45 72 56 76 4c 34 39 62 2f 2f 75 2f 6d 41 72 31 64 38 37 4a 49 32 69 54 46 45 2b 37 4b 78 37 6f 6b 79 48 4d 59 44 77 42 65 48 5a 51 32 68 44 4a 44 6a 36 47 77 53 36 76 73 34 37 32 4c Data Ascii: U2FsdGVkX18ynoJvOpQqSQ2MnRwu4aocfVR9C3mY5eyCE4tFxV+5aGct4sSn7Zy3fDKxZivDzThlT+oxMO7L+m2AAmtiPcDCMZivvBv8PziTswYJcVoz6dUphCCEwux2ACBnPcNvW3hc1RU9J0NNKZp8MmgcKp+I7E0YsuBDXZ4T9ZBvuasnEX54mqZ4MCm5mfErVvL49b//u/mAr1d87JI2iTFE+7Kx7okyHMYDwBeHZQ2hDJDj6GwS6vs472L
2024-09-29 05:55:42 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:42 GMT Content-Type: application/json; charset=utf-8 Content-Length: 960 Connection: close Access-Control-Allow-Origin: * ETag: W/"3c0-tx/R42blIip4IomEDHeUoHkFOPw"
2024-09-29 05:55:42 UTC	960	IN	Data Raw: 55 32 46 73 64 47 56 6b 58 31 38 7a 32 67 63 32 74 6c 61 57 57 79 2b 49 46 50 48 69 34 4f 5a 6a 69 79 63 69 55 4e 4b 6c 5a 43 33 68 72 5a 75 49 54 70 31 4f 54 63 50 59 73 39 2b 56 37 2f 46 32 74 66 47 49 67 37 78 6a 74 75 62 36 32 2f 53 2f 6d 77 7a 67 78 6a 5a 46 66 55 57 30 58 59 78 62 6f 4b 4c 74 61 76 57 4c 35 66 2f 2f 51 77 74 67 79 4a 59 76 6a 77 65 53 35 42 46 39 45 6f 50 6a 39 43 38 73 75 70 34 58 42 5a 71 78 46 73 66 54 34 38 2b 2f 6b 5a 39 76 2f 2f 49 50 74 4f 52 32 67 57 64 4b 73 56 44 2b 39 77 4f 6f 6e 70 6e 61 37 4d 56 54 56 33 6e 58 44 41 70 77 51 61 74 5a 4f 56 45 56 75 59 7a 4d 43 51 6a 5a 65 54 63 47 38 32 58 75 72 44 73 30 6b 78 56 32 32 4d 4e 64 61 45 58 31 7a 33 6c 67 63 39 51 52 77 66 78 78 71 53 44 6b 6f 45 76 66 6e 70 68 59 2b 64 53 Data Ascii: U2FsdGVkX18z2gc2tlaWWy+IFPHi4OZjiyciUNKlZC3hrZuITp1OTcPYs9+V7/F2tfGIg7xjtub62/S/mwzgxjZFfUW0XYxboKLtavWL5f//QwtgyJYvjweS5BF9EoPj9C8sup4XBZqxFsfT48+/kZ9v//IPtOR2gWdKsVD+9wOonpna7MVTV3nXDApwQatZOVEVuYzMCQjZeTcG82XurDs0kxV22MNdaEX1z3lgc9QRwfxxqSDkoEvfnphY+dS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49163	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:43 UTC	366	OUT	GET /us/assets/f0ee2557KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:43 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:43 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 53442 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"d0c2-190b57e3690"
2024-09-29 05:55:43 UTC	16022	IN	Data Raw: 63 6f 6e 73 74 20 61 33 35 5f 30 78 31 30 36 33 61 36 3d 61 33 35 5f 30 78 35 65 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 38 38 32 32 2c 5f 30 78 33 63 36 35 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 63 39 61 62 64 3d 61 33 35 5f 30 78 35 65 61 35 2c 5f 30 78 34 66 37 64 62 30 3d 5f 30 78 31 38 38 38 32 32 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 66 32 37 34 31 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 63 62 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 32 34 39 29 29 2f 30 78 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 62 64 28 30 78 31 64 34 29 29 2f 30 78 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 63 39 61 Data Ascii: const a35_0x1063a6=a35_0x5ea5;(function(_0x188822,_0x3c6517){const _0x5c9abd=a35_0x5ea5,_0x4f7db0=_0x188822();while(!![]){try{const _0xf27418=parseInt(_0x5c9abd(0x1cb))/0x1+parseInt(_0x5c9abd(0x249))/0x2*(-parseInt(_0x5c9abd(0x1d4))/0x3)+-parseInt(_0x5c9a
2024-09-29 05:55:43 UTC	16384	IN	Data Raw: 29 26 26 5f 30 78 34 32 36 30 37 66 28 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 66 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 63 36 29 2b 5f 30 78 34 34 39 34 37 32 2b 28 5f 30 78 35 36 36 64 39 37 28 30 78 32 33 34 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 65 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 35 38 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 32 34 63 29 2b 5f 30 78 35 36 36 64 39 37 28 30 78 31 62 64 29 29 29 2c 5f 30 78 34 38 61 38 65 32 5b 27 70 75 73 68 27 5d 28 7b 27 74 79 70 65 27 3a 30 78 31 2c 27 76 61 6c 75 65 27 3a 5f 30 78 34 34 39 34 37 32 2c 27 72 65 67 65 78 70 27 3a 5f 30 78 34 35 63 31 63 30 2c 27 72 65 70 65 61 74 61 62 6c 65 27 3a 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 2a 27 7c 7c 5f 30 78 34 63 64 35 62 66 3d 3d 3d 27 Data Ascii: )&&_0x42607f(_0x566d97(0x1bf)+_0x566d97(0x1c6)+_0x449472+(_0x566d97(0x234)+_0x566d97(0x1ec)+_0x566d97(0x258)+_0x566d97(0x24c)+_0x566d97(0x1bd))),_0x48a8e2['push']({'type':0x1,'value':_0x449472,'regexp':_0x45c1c0,'repeatable':_0x4cd5bf==='*'\|\|_0x4cd5bf==='
2024-09-29 05:55:43 UTC	16384	IN	Data Raw: 6e 73 74 20 5f 30 78 35 35 36 31 61 39 3d 61 33 35 5f 30 78 31 30 36 33 61 36 2c 5f 30 78 34 64 35 33 34 38 3d 61 33 35 5f 30 78 32 61 64 65 30 62 28 4e 65 28 5f 30 78 34 35 34 32 39 37 29 29 2c 7b 6f 70 74 69 6f 6e 73 3a 5f 30 78 34 34 38 37 33 36 7d 3d 61 33 35 5f 30 78 31 33 65 38 63 32 28 65 65 29 2c 5f 30 78 31 61 37 38 35 39 3d 61 33 35 5f 30 78 33 31 38 39 39 36 28 28 29 3d 3e 28 7b 5b 49 65 28 5f 30 78 34 35 34 32 39 37 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 30 29 2b 27 73 27 5d 2c 5f 30 78 34 34 38 37 33 36 5b 5f 30 78 35 35 36 31 61 39 28 30 78 32 31 35 29 2b 5f 30 78 35 35 36 31 61 39 28 30 78 32 37 31 29 5d 2c 5f 30 78 35 35 36 31 61 39 28 30 78 32 35 31 29 2b 27 6b 2d 61 63 74 69 76 65 27 29 5d 3a 5f 30 78 34 64 35 33 34 38 5b 5f 30 78 Data Ascii: nst _0x5561a9=a35_0x1063a6,_0x4d5348=a35_0x2ade0b(Ne(_0x454297)),{options:_0x448736}=a35_0x13e8c2(ee),_0x1a7859=a35_0x318996(()=>({[Ie(_0x454297[_0x5561a9(0x270)+'s'],_0x448736[_0x5561a9(0x215)+_0x5561a9(0x271)],_0x5561a9(0x251)+'k-active')]:_0x4d5348[_0x
2024-09-29 05:55:43 UTC	4652	IN	Data Raw: 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 30 78 31 2c 21 30 78 31 29 3b 7d 29 5b 27 63 61 74 63 68 27 5d 28 57 29 2c 50 72 6f 6d 69 73 65 5b 27 72 65 6a 65 63 74 27 5d 28 29 29 3a 28 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 26 26 5f 30 78 33 66 30 66 30 64 5b 27 67 6f 27 5d 28 2d 5f 30 78 33 38 63 62 64 31 5b 27 64 65 6c 74 61 27 5d 2c 21 30 78 31 29 2c 5f 30 78 35 36 31 65 34 30 28 5f 30 78 33 35 32 30 61 63 2c 5f 30 78 32 64 31 35 62 36 2c 5f 30 78 31 38 31 63 36 35 29 29 29 5b 5f 30 78 35 62 31 34 38 36 28 30 78 32 37 33 29 5d 28 5f 30 78 31 37 37 32 34 64 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 34 37 64 66 64 64 3d 5f 30 78 35 62 31 34 38 36 3b 5f 30 78 31 37 37 32 34 64 3d 5f 30 78 31 37 37 32 34 64 7c 7c 5f 30 78 35 35 66 61 34 37 28 Data Ascii: 0x3f0f0d['go'](-0x1,!0x1);})['catch'](W),Promise['reject']()):(_0x38cbd1['delta']&&_0x3f0f0d['go'](-_0x38cbd1['delta'],!0x1),_0x561e40(_0x3520ac,_0x2d15b6,_0x181c65)))[_0x5b1486(0x273)](_0x17724d=>{const _0x47dfdd=_0x5b1486;_0x17724d=_0x17724d\|\|_0x55fa47(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49162	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 05:55:43 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125389 Date: Sun, 29 Sep 2024 05:55:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 05:55:43 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49165	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:44 UTC	366	OUT	GET /us/assets/09bf01f8KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2039 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"7f7-190b57e26f0"
2024-09-29 05:55:45 UTC	2039	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 39 30 61 32 30 34 2c 5f 30 78 33 61 31 32 32 34 29 7b 63 6f 6e 73 74 20 5f 30 78 35 61 32 62 35 66 3d 61 30 5f 30 78 31 35 66 35 2c 5f 30 78 32 32 39 38 36 65 3d 5f 30 78 39 30 61 32 30 34 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 31 30 37 61 36 38 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 64 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 36 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 32 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 66 28 30 78 31 34 63 29 29 2f 30 78 34 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 35 61 32 62 35 Data Ascii: (function(_0x90a204,_0x3a1224){const _0x5a2b5f=a0_0x15f5,_0x22986e=_0x90a204();while(!![]){try{const _0x107a68=parseInt(_0x5a2b5f(0x14d))/0x1+parseInt(_0x5a2b5f(0x146))/0x2+-parseInt(_0x5a2b5f(0x142))/0x3*(parseInt(_0x5a2b5f(0x14c))/0x4)+parseInt(_0x5a2b5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49164	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:44 UTC	366	OUT	GET /us/assets/7357514cKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 2613 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"a35-190b57e2ec0"
2024-09-29 05:55:45 UTC	2613	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 34 32 66 62 2c 5f 30 78 32 66 30 63 63 30 29 7b 63 6f 6e 73 74 20 5f 30 78 33 34 32 37 61 32 3d 61 31 38 5f 30 78 35 63 38 63 2c 5f 30 78 35 35 35 62 30 36 3d 5f 30 78 31 38 34 32 66 62 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 35 31 38 62 61 62 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 38 29 29 2f 30 78 31 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 62 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 65 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 78 64 33 29 29 2f 30 78 34 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 32 37 61 32 28 30 Data Ascii: (function(_0x1842fb,_0x2f0cc0){const _0x3427a2=a18_0x5c8c,_0x555b06=_0x1842fb();while(!![]){try{const _0x518bab=parseInt(_0x3427a2(0xd8))/0x1*(parseInt(_0x3427a2(0xdb))/0x2)+-parseInt(_0x3427a2(0xde))/0x3+parseInt(_0x3427a2(0xd3))/0x4+parseInt(_0x3427a2(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49166	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:44 UTC	351	OUT	GET /favicon.ico HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	326	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:44 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 32038 Connection: close Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:14 GMT ETag: W/"7d26-190b57e07b0"
2024-09-29 05:55:45 UTC	16058	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 00 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 00 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 00 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 32 31 1b 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 66 33 32 51 65 32 31 1b 66 33 32 51 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 51 e4 da d8 51 be a7 a5 ff 81 55 53 ff 66 33 32 ff 66 Data Ascii: hF 00 %V@@ (B:( @e21f32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qf32Qe21f32Qf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32QQUSf32f
2024-09-29 05:55:45 UTC	15980	IN	Data Raw: 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 43 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 66 33 32 43 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 ff 66 33 32 Data Ascii: f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32Cf32Cf32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32f32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49167	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:44 UTC	366	OUT	GET /us/assets/78d59236KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	362	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 35025 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"88d1-190b57e2ec0"
2024-09-29 05:55:45 UTC	16022	IN	Data Raw: 76 61 72 20 61 31 39 5f 30 78 65 64 64 35 37 36 3d 61 31 39 5f 30 78 31 36 61 35 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 66 30 63 61 2c 5f 30 78 35 32 30 36 64 33 29 7b 76 61 72 20 5f 30 78 33 37 34 38 61 39 3d 61 31 39 5f 30 78 31 36 61 35 2c 5f 30 78 32 34 63 32 61 35 3d 5f 30 78 32 35 66 30 63 61 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 34 34 65 34 30 63 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 65 64 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 34 34 29 29 2f 30 78 32 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 62 35 29 29 2f 30 78 33 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 37 34 38 61 39 28 30 78 31 61 Data Ascii: var a19_0xedd576=a19_0x16a5;(function(_0x25f0ca,_0x5206d3){var _0x3748a9=a19_0x16a5,_0x24c2a5=_0x25f0ca();while(!![]){try{var _0x44e40c=-parseInt(_0x3748a9(0xed))/0x1+-parseInt(_0x3748a9(0x144))/0x2*(parseInt(_0x3748a9(0x1b5))/0x3)+parseInt(_0x3748a9(0x1a
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 37 31 28 30 78 31 64 62 29 2c 5f 30 78 35 39 39 39 37 31 28 30 78 31 62 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 37 26 26 21 70 28 5b 27 69 6e 74 65 72 6e 65 74 5f 65 27 2b 27 78 70 6c 6f 72 65 72 27 5d 2c 5f 30 78 35 31 36 35 64 35 29 7c 7c 5f 30 78 63 65 32 30 32 33 3d 3d 3d 30 78 32 31 26 26 21 70 28 5b 5f 30 78 35 39 39 39 37 31 28 30 78 31 36 34 29 5d 2c 5f 30 78 31 61 32 36 33 61 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 5f 30 78 34 32 62 37 34 38 29 7b 76 61 72 20 5f 30 78 33 63 35 61 62 64 3d 61 31 39 5f 30 78 65 64 64 35 37 36 2c 5f 30 78 34 62 32 36 64 38 3d 5f 30 78 34 32 62 37 34 38 5b 5f 30 78 33 63 35 61 62 64 28 30 78 31 35 38 29 2b 27 6e 64 27 5d 3b 69 66 28 5f 30 78 34 62 32 36 64 38 Data Ascii: 71(0x1db),_0x599971(0x1b4)],_0x1a263a)\|\|_0xce2023===0x27&&!p(['internet_e'+'xplorer'],_0x5165d5)\|\|_0xce2023===0x21&&!p([_0x599971(0x164)],_0x1a263a);}}function F(_0x42b748){var _0x3c5abd=a19_0xedd576,_0x4b26d8=_0x42b748[_0x3c5abd(0x158)+'nd'];if(_0x4b26d8
2024-09-29 05:55:45 UTC	2619	IN	Data Raw: 74 61 74 65 27 3a 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 61 32 29 5d 2c 27 65 72 72 6f 72 27 3a 27 27 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 29 5d 2c 27 3a 5c 78 32 30 27 29 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 39 30 29 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 30 62 29 5d 29 7d 3a 5f 30 78 35 36 65 32 33 35 5b 5f 30 78 31 63 34 66 30 37 5d 3d 7b 27 73 74 61 74 65 27 3a 2d 30 78 33 2c 27 65 72 72 6f 72 27 3a 5f 30 78 33 64 38 61 61 38 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 27 27 5b 27 63 6f 6e 63 61 74 27 5d 28 5f 30 78 33 64 38 61 61 38 5b 5f 30 78 32 34 64 66 65 66 28 30 78 31 37 32 Data Ascii: tate':_0x3d8aa8[_0x24dfef(0xa2)],'error':''[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x172)],':\x20')[_0x24dfef(0x190)](_0x3d8aa8[_0x24dfef(0x10b)])}:_0x56e235[_0x1c4f07]={'state':-0x3,'error':_0x3d8aa8 instanceof Error?''['concat'](_0x3d8aa8[_0x24dfef(0x172

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49168	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:44 UTC	538	OUT	GET /us/assets/3213f1cfKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us.ps-tracks.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	364	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:44 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 112045 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:22 GMT ETag: W/"1b5ad-190b57e26f0"
2024-09-29 05:55:45 UTC	16020	IN	Data Raw: 63 6f 6e 73 74 20 61 35 5f 30 78 63 30 63 37 36 3d 61 35 5f 30 78 32 66 32 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 37 36 33 35 39 2c 5f 30 78 32 39 66 33 64 62 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 37 65 34 62 3d 61 35 5f 30 78 32 66 32 31 2c 5f 30 78 34 36 34 66 31 61 3d 5f 30 78 33 37 36 33 35 39 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 39 34 66 39 31 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 37 65 34 62 28 30 78 62 64 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 37 65 34 62 28 30 78 32 64 65 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 37 65 34 62 28 30 78 61 31 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 33 38 37 65 34 62 28 30 Data Ascii: const a5_0xc0c76=a5_0x2f21;(function(_0x376359,_0x29f3db){const _0x387e4b=a5_0x2f21,_0x464f1a=_0x376359();while(!![]){try{const _0x294f91=-parseInt(_0x387e4b(0xbd))/0x1(-parseInt(_0x387e4b(0x2de))/0x2)+-parseInt(_0x387e4b(0xa1))/0x3(parseInt(_0x387e4b(0
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 68 69 73 5b 5f 30 78 34 64 34 33 64 39 28 30 78 32 31 39 29 5d 5b 5f 30 78 34 64 34 33 64 39 28 30 78 31 62 30 29 5d 26 26 28 74 68 69 73 5b 5f 30 78 34 64 34 33 64 39 28 30 78 32 31 39 29 5d 5b 5f 30 78 34 64 34 33 64 39 28 30 78 31 66 66 29 5d 26 26 4e 75 6d 62 65 72 28 74 68 69 73 5b 27 6f 70 74 73 27 5d 5b 5f 30 78 34 64 34 33 64 39 28 30 78 31 62 30 29 5d 21 3d 3d 30 78 31 62 62 29 7c 7c 21 74 68 69 73 5b 5f 30 78 34 64 34 33 64 39 28 30 78 32 31 39 29 5d 5b 5f 30 78 34 64 34 33 64 39 28 30 78 31 66 66 29 5d 26 26 4e 75 6d 62 65 72 28 74 68 69 73 5b 27 6f 70 74 73 27 5d 5b 5f 30 78 34 64 34 33 64 39 28 30 78 31 62 30 29 5d 29 21 3d 3d 30 78 35 30 29 3f 27 3a 27 2b 74 68 69 73 5b 5f 30 78 34 64 34 33 64 39 28 30 78 32 31 39 Data Ascii: ;return this[_0x4d43d9(0x219)][_0x4d43d9(0x1b0)]&&(this[_0x4d43d9(0x219)][_0x4d43d9(0x1ff)]&&Number(this['opts'][_0x4d43d9(0x1b0)]!==0x1bb)\|\|!this[_0x4d43d9(0x219)][_0x4d43d9(0x1ff)]&&Number(this['opts'][_0x4d43d9(0x1b0)])!==0x50)?':'+this[_0x4d43d9(0x219
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 37 29 5d 28 5f 30 78 61 65 37 66 37 39 2c 27 2f 27 29 5b 5f 30 78 66 66 61 65 37 66 28 30 78 32 62 37 29 5d 28 27 2f 27 29 3b 72 65 74 75 72 6e 28 5f 30 78 35 63 65 35 62 35 5b 5f 30 78 66 66 61 65 37 66 28 30 78 32 66 37 29 5d 28 30 78 30 2c 30 78 31 29 3d 3d 27 2f 27 7c 7c 5f 30 78 35 63 65 35 62 35 5b 5f 30 78 66 66 61 65 37 66 28 30 78 31 63 38 29 5d 3d 3d 3d 30 78 30 29 26 26 5f 30 78 35 35 32 33 34 32 5b 27 73 70 6c 69 63 65 27 5d 28 30 78 30 2c 30 78 31 29 2c 5f 30 78 35 63 65 35 62 35 5b 5f 30 78 66 66 61 65 37 66 28 30 78 32 66 37 29 5d 28 2d 30 78 31 29 3d 3d 27 2f 27 26 26 5f 30 78 35 35 32 33 34 32 5b 27 73 70 6c 69 63 65 27 5d 28 5f 30 78 35 35 32 33 34 32 5b 5f 30 78 66 66 61 65 37 66 28 30 78 31 63 38 29 5d 2d 30 78 31 2c 30 78 31 29 2c 5f Data Ascii: 7)](_0xae7f79,'/')[_0xffae7f(0x2b7)]('/');return(_0x5ce5b5[_0xffae7f(0x2f7)](0x0,0x1)=='/'\|\|_0x5ce5b5[_0xffae7f(0x1c8)]===0x0)&&_0x552342['splice'](0x0,0x1),_0x5ce5b5[_0xffae7f(0x2f7)](-0x1)=='/'&&_0x552342['splice'](_0x552342[_0xffae7f(0x1c8)]-0x1,0x1),_
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 27 2c 27 65 6e 67 69 6e 65 27 2c 27 70 65 4f 66 27 2c 27 69 6f 6e 41 74 74 65 6d 70 74 27 2c 27 74 69 6f 6e 46 61 63 74 6f 72 27 2c 27 73 70 6f 72 74 27 2c 27 61 75 74 68 6f 72 69 74 79 27 2c 27 45 56 45 4e 54 27 2c 27 69 6e 67 73 5f 5f 27 2c 27 68 6f 73 74 27 2c 27 63 6f 6e 6e 65 63 74 65 64 27 2c 27 66 6c 6f 6f 72 27 2c 27 66 6c 75 73 68 27 2c 27 6c 65 61 76 65 27 2c 27 6c 6f 63 61 6c 41 64 64 72 65 27 2c 27 6f 6e 70 69 6e 67 27 2c 27 6f 66 66 41 6e 79 4f 75 74 67 27 2c 27 6f 62 6a 65 63 74 27 2c 27 66 69 6c 74 65 72 55 70 67 72 27 2c 27 61 74 74 65 6d 70 74 27 2c 27 63 6f 6e 6e 65 63 74 5f 65 72 27 2c 27 5f 63 6c 6f 73 65 27 2c 27 6f 70 74 73 27 2c 27 72 65 6a 65 63 74 55 6e 61 75 27 2c 27 7b 5c 78 32 32 73 69 64 5c 78 32 32 3a 5c 78 32 32 27 2c 27 65 Data Ascii: ','engine','peOf','ionAttempt','tionFactor','sport','authority','EVENT','ings__','host','connected','floor','flush','leave','localAddre','onping','offAnyOutg','object','filterUpgr','attempt','connect_er','_close','opts','rejectUnau','{\x22sid\x22:\x22','e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49170	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:45 UTC	366	OUT	GET /us/assets/62ff200fKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 70095 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"111cf-190b57e2ec0"
2024-09-29 05:55:45 UTC	16021	IN	Data Raw: 63 6f 6e 73 74 20 61 31 34 5f 30 78 35 61 39 34 39 36 3d 61 31 34 5f 30 78 66 34 37 31 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 62 64 30 33 2c 5f 30 78 34 64 64 33 33 35 29 7b 63 6f 6e 73 74 20 5f 30 78 31 30 39 36 66 39 3d 61 31 34 5f 30 78 66 34 37 31 2c 5f 30 78 31 61 33 62 36 34 3d 5f 30 78 31 33 62 64 30 33 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 32 65 30 66 65 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 37 37 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 33 30 61 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 66 39 28 30 78 32 34 37 29 29 2f 30 78 33 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 30 39 36 Data Ascii: const a14_0x5a9496=a14_0xf471;(function(_0x13bd03,_0x4dd335){const _0x1096f9=a14_0xf471,_0x1a3b64=_0x13bd03();while(!![]){try{const _0x2e0fe7=-parseInt(_0x1096f9(0x277))/0x1+-parseInt(_0x1096f9(0x30a))/0x2+-parseInt(_0x1096f9(0x247))/0x3*(parseInt(_0x1096
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 73 3a 2f 2f 77 77 27 2b 27 77 2e 75 73 70 73 2e 63 6f 6d 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 30 34 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 37 64 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 63 29 29 5d 29 5d 29 2c 65 28 27 75 6c 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 27 2c 27 61 72 69 61 2d 68 69 64 64 65 6e 27 3a 27 74 72 75 65 27 7d 2c 5b 65 28 27 68 33 27 2c 7b 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 63 64 29 2b 27 6c 79 27 7d 2c 27 5c 75 30 30 61 30 27 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d Data Ascii: s://ww'+'w.usps.com'+a14_0x5a9496(0x231)+a14_0x5a9496(0x404)},a14_0x5a9496(0x37d)+a14_0x5a9496(0x26c))])]),e('ul',{'role':'menu','aria-hidden':'true'},[e('h3',{'class':a14_0x5a9496(0x3cd)+'ly'},'\u00a0'),e('li',null,[e('a',{'role':'menuitem','tabindex':'-
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 5f 30 78 35 61 39 34 39 36 28 30 78 34 61 33 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 36 32 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 64 65 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 33 37 29 2b 27 69 6c 27 29 5d 29 2c 65 28 27 6c 69 27 2c 6e 75 6c 6c 2c 5b 65 28 27 61 27 2c 7b 27 72 6f 6c 65 27 3a 27 6d 65 6e 75 69 74 65 6d 27 2c 27 74 61 62 69 6e 64 65 78 27 3a 27 2d 31 27 2c 27 68 72 65 66 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 33 31 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 35 38 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 64 39 29 7d 2c 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 Data Ascii: _0x5a9496(0x4a3)+a14_0x5a9496(0x262)},a14_0x5a9496(0x3de)+a14_0x5a9496(0x337)+'il')]),e('li',null,[e('a',{'role':'menuitem','tabindex':'-1','href':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x231)+a14_0x5a9496(0x258)+a14_0x5a9496(0x4d9)},a14_0x5a9496(0
2024-09-29 05:55:45 UTC	16384	IN	Data Raw: 30 78 35 61 39 34 39 36 28 30 78 32 32 38 29 7d 29 2c 65 28 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 65 64 29 2c 7b 27 72 6f 6c 65 27 3a 27 73 65 61 72 63 68 27 2c 27 63 6c 61 73 73 27 3a 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 36 61 29 2b 27 62 61 6c 2d 68 65 61 64 65 72 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 39 31 29 2c 27 61 63 74 69 6f 6e 27 3a 27 68 74 74 70 73 3a 2f 2f 77 77 27 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 37 61 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 33 36 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 34 32 30 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 31 61 63 29 2b 61 31 34 5f 30 78 35 61 39 34 39 36 28 30 78 32 63 35 29 7d 2c 5b 65 28 27 73 70 61 6e 27 2c 7b 27 61 72 Data Ascii: 0x5a9496(0x228)}),e(a14_0x5a9496(0x3ed),{'role':'search','class':a14_0x5a9496(0x46a)+'bal-header'+a14_0x5a9496(0x491),'action':'https://ww'+a14_0x5a9496(0x47a)+a14_0x5a9496(0x36c)+a14_0x5a9496(0x420)+a14_0x5a9496(0x1ac)+a14_0x5a9496(0x2c5)},[e('span',{'ar
2024-09-29 05:55:45 UTC	4922	IN	Data Raw: 27 2c 27 6f 6d 2d 6d 61 69 6c 2e 68 74 27 2c 27 69 6e 70 75 74 27 2c 27 73 74 63 61 6c 63 2e 75 73 70 27 2c 27 73 69 6e 65 73 73 27 2c 27 65 6c 69 76 65 72 79 27 2c 27 6e 61 76 2d 66 75 6c 6c 27 2c 27 61 62 65 6c 49 6e 66 6f 72 6d 27 2c 27 53 6b 69 70 5c 78 32 30 48 65 6c 70 5c 78 32 30 27 2c 27 4d 69 6c 69 74 61 72 79 5c 78 32 30 26 27 2c 27 76 69 63 65 73 2e 68 74 6d 27 2c 27 2f 69 6e 74 65 72 6e 61 74 69 27 2c 27 72 6e 61 74 69 6f 6e 61 6c 2d 27 2c 27 74 6f 6f 6c 2d 69 6e 74 65 72 27 2c 27 68 2d 74 72 61 63 6b 2d 69 6e 27 2c 27 5c 78 32 32 68 74 74 70 73 3a 2f 2f 66 27 2c 27 69 6d 61 67 65 73 2f 34 38 2e 27 2c 27 61 74 69 6f 6e 2e 68 74 6d 6c 27 2c 27 65 72 2e 68 74 6d 27 2c 27 72 63 65 70 74 2e 68 74 6d 27 2c 27 2d 66 6f 6f 74 65 72 2d 2d 6e 27 2c 27 Data Ascii: ','om-mail.ht','input','stcalc.usp','siness','elivery','nav-full','abelInform','Skip\x20Help\x20','Military\x20&','vices.htm','/internati','rnational-','tool-inter','h-track-in','\x22https://f','images/48.','ation.html','er.htm','rcept.htm','-footer--n','

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49169	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:45 UTC	366	OUT	GET /us/assets/c27b6911KXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	360	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 1898 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:24 GMT ETag: W/"76a-190b57e2ec0"
2024-09-29 05:55:45 UTC	1898	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 34 39 62 32 66 35 3d 61 32 38 5f 30 78 32 62 38 37 28 29 3b 72 65 74 75 72 6e 20 61 32 38 5f 30 78 35 62 63 66 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 63 66 35 33 32 2c 5f 30 78 35 62 38 37 38 34 29 7b 5f 30 78 31 63 66 35 33 32 3d 5f 30 78 31 63 66 35 33 32 2d 30 78 37 62 3b 6c 65 74 20 5f 30 78 32 62 38 37 31 30 3d 5f 30 78 34 39 62 32 66 35 5b 5f 30 78 31 63 66 35 33 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 32 62 38 37 31 30 3b 7d 2c 61 32 38 5f 30 78 35 62 63 66 28 5f 30 78 34 36 32 34 37 32 2c 5f 30 78 34 63 65 65 34 66 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 31 66 35 39 2c 5f 30 78 31 64 Data Ascii: function a28_0x5bcf(_0x462472,_0x4cee4f){const _0x49b2f5=a28_0x2b87();return a28_0x5bcf=function(_0x1cf532,_0x5b8784){_0x1cf532=_0x1cf532-0x7b;let _0x2b8710=_0x49b2f5[_0x1cf532];return _0x2b8710;},a28_0x5bcf(_0x462472,_0x4cee4f);}(function(_0x2e1f59,_0x1d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49173	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:45 UTC	366	OUT	GET /us/assets/dc6d90ceKXMp5.js HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	361	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:45 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 6351 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Accept-Ranges: bytes Cache-Control: public, max-age=86400 Last-Modified: Mon, 15 Jul 2024 08:24:26 GMT ETag: W/"18cf-190b57e3690"
2024-09-29 05:55:45 UTC	6351	IN	Data Raw: 63 6f 6e 73 74 20 61 33 31 5f 30 78 35 35 36 62 32 39 3d 61 33 31 5f 30 78 32 32 64 31 3b 66 75 6e 63 74 69 6f 6e 20 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 66 64 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 33 32 34 37 65 3d 61 33 31 5f 30 78 35 36 63 36 28 29 3b 72 65 74 75 72 6e 20 61 33 31 5f 30 78 32 32 64 31 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 39 36 34 66 32 2c 5f 30 78 33 39 66 38 30 66 29 7b 5f 30 78 33 39 36 34 66 32 3d 5f 30 78 33 39 36 34 66 32 2d 30 78 31 65 34 3b 6c 65 74 20 5f 30 78 35 36 63 36 31 61 3d 5f 30 78 31 33 32 34 37 65 5b 5f 30 78 33 39 36 34 66 32 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 36 63 36 31 61 3b 7d 2c 61 33 31 5f 30 78 32 32 64 31 28 5f 30 78 31 36 63 61 65 38 2c 5f 30 78 35 65 30 Data Ascii: const a31_0x556b29=a31_0x22d1;function a31_0x22d1(_0x16cae8,_0x5e0fd0){const _0x13247e=a31_0x56c6();return a31_0x22d1=function(_0x3964f2,_0x39f80f){_0x3964f2=_0x3964f2-0x1e4;let _0x56c61a=_0x13247e[_0x3964f2];return _0x56c61a;},a31_0x22d1(_0x16cae8,_0x5e0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49172	47.90.141.9	443	3980	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:55:45 UTC	368	OUT	GET /api/MC41NTM0OTUwMDA1ODIxNjk= HTTP/1.1 Host: us.ps-tracks.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:55:45 UTC	164	IN	HTTP/1.1 404 Not Found Server: nginx/1.24.0 Date: Sun, 29 Sep 2024 05:55:45 GMT Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: *
2024-09-29 05:55:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	01:55:27
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:55:31
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1992 --field-trial-handle=1904,i,3069198429602057297,17173043204891689206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:55:33
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us.ps-tracks.top/us/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://us.ps-tracks.top/us/	HTTP Parser: No favicon
Source: https://us.ps-tracks.top/us/	HTTP Parser: No favicon
Source: https://us.ps-tracks.top/us/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /us/ HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/index-4b020bd6.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/f6170fbbTeKnX.css HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/143268e9KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/f0ee2557KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/667bf194TeKnX.css HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/4cd1ec68TeKnX.css HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://us.ps-tracks.top/us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/78d59236KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/09bf01f8KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/7357514cKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/index-4b020bd6.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/62ff200fKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/c27b6911KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/dc6d90ceKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/143268e9KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/f0ee2557KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /us/assets/09bf01f8KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/7357514cKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/78d59236KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/3213f1cfKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us.ps-tracks.topsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/62ff200fKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/c27b6911KXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /us/assets/dc6d90ceKXMp5.js HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/MC41NTM0OTUwMDA1ODIxNjk= HTTP/1.1Host: us.ps-tracks.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: us.ps-tracks.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://us.ps-tracks.top/us/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://us.ps-tracks.top/us/